@kodelyth/google-meet 2026.5.39 → 2026.6.1

package/dist/oauth-7_sWAae1.js

@@ -0,0 +1,141 @@
+import { fetchWithSsrFGuard } from "klaw/plugin-sdk/ssrf-runtime";
+import { generateHexPkceVerifierChallenge } from "klaw/plugin-sdk/provider-auth";
+import { generateOAuthState, parseOAuthCallbackInput, waitForLocalOAuthCallback } from "klaw/plugin-sdk/provider-auth-runtime";
+//#region extensions/google-meet/src/oauth.ts
+const GOOGLE_MEET_REDIRECT_URI = "http://localhost:8085/oauth2callback";
+const GOOGLE_MEET_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+const GOOGLE_MEET_TOKEN_URL = "https://oauth2.googleapis.com/token";
+const GOOGLE_MEET_TOKEN_HOST = "oauth2.googleapis.com";
+const GOOGLE_MEET_SCOPES = [
+	"https://www.googleapis.com/auth/meetings.space.created",
+	"https://www.googleapis.com/auth/meetings.space.readonly",
+	"https://www.googleapis.com/auth/meetings.space.settings",
+	"https://www.googleapis.com/auth/meetings.conference.media.readonly",
+	"https://www.googleapis.com/auth/calendar.events.readonly",
+	"https://www.googleapis.com/auth/drive.meet.readonly"
+];
+function buildGoogleMeetAuthUrl(params) {
+	return `${GOOGLE_MEET_AUTH_URL}?${new URLSearchParams({
+		client_id: params.clientId,
+		response_type: "code",
+		redirect_uri: params.redirectUri ?? GOOGLE_MEET_REDIRECT_URI,
+		scope: (params.scopes ?? GOOGLE_MEET_SCOPES).join(" "),
+		code_challenge: params.challenge,
+		code_challenge_method: "S256",
+		access_type: "offline",
+		prompt: "consent",
+		state: params.state
+	}).toString()}`;
+}
+async function executeGoogleTokenRequest(body) {
+	const { response, release } = await fetchWithSsrFGuard({
+		url: GOOGLE_MEET_TOKEN_URL,
+		init: {
+			method: "POST",
+			headers: {
+				"Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
+				Accept: "application/json"
+			},
+			body
+		},
+		policy: { allowedHostnames: [GOOGLE_MEET_TOKEN_HOST] },
+		auditContext: "google-meet.oauth.token"
+	});
+	try {
+		if (!response.ok) {
+			const detail = await response.text();
+			throw new Error(`Google OAuth token request failed (${response.status}): ${detail}`);
+		}
+		const payload = await response.json();
+		const accessToken = payload.access_token?.trim();
+		if (!accessToken) throw new Error("Google OAuth token response was missing access_token");
+		const expiresInSeconds = typeof payload.expires_in === "number" && Number.isFinite(payload.expires_in) ? payload.expires_in : 3600;
+		return {
+			accessToken,
+			expiresAt: Date.now() + expiresInSeconds * 1e3,
+			refreshToken: payload.refresh_token?.trim() || void 0,
+			scope: payload.scope?.trim() || void 0,
+			tokenType: payload.token_type?.trim() || void 0
+		};
+	} finally {
+		await release();
+	}
+}
+function tokenRequestBody(values) {
+	const body = new URLSearchParams();
+	for (const [key, value] of Object.entries(values)) if (value?.trim()) body.set(key, value);
+	return body;
+}
+async function exchangeGoogleMeetAuthCode(params) {
+	return await executeGoogleTokenRequest(tokenRequestBody({
+		client_id: params.clientId,
+		client_secret: params.clientSecret,
+		code: params.code,
+		grant_type: "authorization_code",
+		redirect_uri: params.redirectUri ?? GOOGLE_MEET_REDIRECT_URI,
+		code_verifier: params.verifier
+	}));
+}
+async function refreshGoogleMeetAccessToken(params) {
+	return await executeGoogleTokenRequest(tokenRequestBody({
+		client_id: params.clientId,
+		client_secret: params.clientSecret,
+		grant_type: "refresh_token",
+		refresh_token: params.refreshToken
+	}));
+}
+function shouldUseCachedGoogleMeetAccessToken(params) {
+	const now = params.now ?? Date.now();
+	const safetyWindowMs = params.safetyWindowMs ?? 6e4;
+	return Boolean(params.accessToken?.trim() && typeof params.expiresAt === "number" && Number.isFinite(params.expiresAt) && params.expiresAt > now + safetyWindowMs);
+}
+async function resolveGoogleMeetAccessToken(params) {
+	if (shouldUseCachedGoogleMeetAccessToken(params)) return {
+		accessToken: params.accessToken.trim(),
+		expiresAt: params.expiresAt,
+		refreshed: false
+	};
+	if (!params.clientId?.trim() || !params.refreshToken?.trim()) throw new Error("Missing Google Meet OAuth credentials. Configure oauth.clientId and oauth.refreshToken, or pass --client-id and --refresh-token.");
+	const refreshed = await refreshGoogleMeetAccessToken({
+		clientId: params.clientId,
+		clientSecret: params.clientSecret,
+		refreshToken: params.refreshToken
+	});
+	return {
+		accessToken: refreshed.accessToken,
+		expiresAt: refreshed.expiresAt,
+		refreshed: true
+	};
+}
+function createGoogleMeetPkce() {
+	const { verifier, challenge } = generateHexPkceVerifierChallenge();
+	return {
+		verifier,
+		challenge
+	};
+}
+function createGoogleMeetOAuthState() {
+	return generateOAuthState();
+}
+async function waitForGoogleMeetAuthCode(params) {
+	params.writeLine(`Open this URL in your browser:\n\n${params.authUrl}\n`);
+	if (params.manual) {
+		const parsed = parseOAuthCallbackInput(await params.promptInput("Paste the full redirect URL here: "), {
+			missingState: "Missing 'state' parameter. Paste the full redirect URL.",
+			invalidInput: "Paste the full redirect URL, not just the code."
+		});
+		if ("error" in parsed) throw new Error(parsed.error);
+		if (parsed.state !== params.state) throw new Error("OAuth state mismatch - please try again");
+		return parsed.code;
+	}
+	return (await waitForLocalOAuthCallback({
+		expectedState: params.state,
+		timeoutMs: params.timeoutMs,
+		port: 8085,
+		callbackPath: "/oauth2callback",
+		redirectUri: GOOGLE_MEET_REDIRECT_URI,
+		successTitle: "Google Meet OAuth complete"
+	})).code;
+}
+//#endregion
+export { buildGoogleMeetAuthUrl, createGoogleMeetOAuthState, createGoogleMeetPkce, exchangeGoogleMeetAuthCode, resolveGoogleMeetAccessToken, waitForGoogleMeetAuthCode };

package/klaw.plugin.json

@@ -3,24 +3,14 @@
   "name": "Google Meet",
   "description": "Join Google Meet calls through Chrome or Twilio transports.",
   "enabledByDefault": false,
-  "commandAliases": [
-    {
-      "name": "googlemeet"
-    }
-  ],
+  "commandAliases": [{ "name": "googlemeet" }],
   "activation": {
     "onStartup": true,
-    "onCommands": [
-      "googlemeet"
-    ],
-    "onCapabilities": [
-      "tool"
-    ]
+    "onCommands": ["googlemeet"],
+    "onCapabilities": ["tool"]
   },
   "contracts": {
-    "tools": [
-      "google_meet"
-    ]
+    "tools": ["google_meet"]
   },
   "uiHints": {
     "defaults.meeting": {
@@ -251,20 +241,12 @@
       },
       "defaultTransport": {
         "type": "string",
-        "enum": [
-          "chrome",
-          "chrome-node",
-          "twilio"
-        ],
+        "enum": ["chrome", "chrome-node", "twilio"],
         "default": "chrome"
       },
       "defaultMode": {
         "type": "string",
-        "enum": [
-          "agent",
-          "bidi",
-          "transcribe"
-        ],
+        "enum": ["agent", "bidi", "transcribe"],
         "default": "agent"
       },
       "chrome": {
@@ -273,9 +255,7 @@
         "properties": {
           "audioBackend": {
             "type": "string",
-            "enum": [
-              "blackhole-2ch"
-            ],
+            "enum": ["blackhole-2ch"],
             "default": "blackhole-2ch"
           },
           "launch": {
@@ -307,10 +287,7 @@
           },
           "audioFormat": {
             "type": "string",
-            "enum": [
-              "pcm16-24khz",
-              "g711-ulaw-8khz"
-            ],
+            "enum": ["pcm16-24khz", "g711-ulaw-8khz"],
             "default": "pcm16-24khz"
           },
           "audioBufferBytes": {
@@ -464,10 +441,7 @@
         "properties": {
           "strategy": {
             "type": "string",
-            "enum": [
-              "agent",
-              "bidi"
-            ],
+            "enum": ["agent", "bidi"],
             "default": "agent"
           },
           "provider": {
@@ -498,11 +472,7 @@
           },
           "toolPolicy": {
             "type": "string",
-            "enum": [
-              "safe-read-only",
-              "owner",
-              "none"
-            ],
+            "enum": ["safe-read-only", "owner", "none"],
             "default": "safe-read-only"
           },
           "providers": {
@@ -541,9 +511,7 @@
         "properties": {
           "provider": {
             "type": "string",
-            "enum": [
-              "google-oauth"
-            ]
+            "enum": ["google-oauth"]
           },
           "clientId": {
             "type": "string"
@@ -559,8 +527,6 @@
     }
   },
   "configContracts": {
-    "compatibilityMigrationPaths": [
-      "plugins.entries.google-meet.config.realtime.provider"
-    ]
+    "compatibilityMigrationPaths": ["plugins.entries.google-meet.config.realtime.provider"]
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kodelyth/google-meet",
-  "version": "2026.5.39",
+  "version": "2026.6.1",
   "description": "Klaw Google Meet participant plugin",
   "repository": {
     "type": "git",
@@ -13,19 +13,23 @@
   },
   "devDependencies": {
     "@kodelyth/plugin-sdk": "1.0.1",
-    "@kodelyth/klaw": "2026.5.41"
+    "@kodelyth/klaw": "2026.5.42"
   },
   "peerDependencies": {
-    "@kodelyth/klaw": ">=2026.5.19"
+    "@kodelyth/klaw": ">=2026.5.19",
+    "klaw": ">=2026.5.39"
   },
   "peerDependenciesMeta": {
     "@kodelyth/klaw": {
       "optional": true
+    },
+    "klaw": {
+      "optional": true
     }
   },
   "klaw": {
     "extensions": [
-      "./index.js"
+      "./index.ts"
     ],
     "install": {
       "npmSpec": "@kodelyth/google-meet",
@@ -41,6 +45,13 @@
     "release": {
       "publishToClawHub": true,
       "publishToNpm": true
-    }
-  }
+    },
+    "runtimeExtensions": [
+      "./dist/index.js"
+    ]
+  },
+  "files": [
+    "dist/**",
+    "klaw.plugin.json"
+  ]
 }

package/doctor-contract-api.js

@@ -1,7 +0,0 @@
-export * from "../../../dist/extensions/google-meet/doctor-contract-api.js";
-import * as module from "../../../dist/extensions/google-meet/doctor-contract-api.js";
-let defaultExport = "default" in module ? module.default : module;
-for (let index = 0; index < 4 && defaultExport && typeof defaultExport === "object" && "default" in defaultExport; index += 1) {
-  defaultExport = defaultExport.default;
-}
-export { defaultExport as default };

package/index.js

@@ -1,7 +0,0 @@
-export * from "../../../dist/extensions/google-meet/index.js";
-import defaultModule from "../../../dist/extensions/google-meet/index.js";
-let defaultExport = defaultModule;
-for (let index = 0; index < 4 && defaultExport && typeof defaultExport === "object" && "default" in defaultExport; index += 1) {
-  defaultExport = defaultExport.default;
-}
-export { defaultExport as default };