@openclaw/google-meet 2026.6.34 → 2026.6.35

package/dist/{chrome-create-C48OmpbM.js → chrome-create-Bj2SRzJo.js}

@@ -8,6 +8,7 @@ import { sleep } from "openclaw/plugin-sdk/runtime-env";
 const GOOGLE_DRIVE_API_BASE_URL = "https://www.googleapis.com/drive/v3";
 const GOOGLE_DRIVE_API_HOST = "www.googleapis.com";
 const GOOGLE_DRIVE_MEET_SCOPE = "https://www.googleapis.com/auth/drive.meet.readonly";
+const GOOGLE_DRIVE_REQUEST_TIMEOUT_MS = 3e4;
 const TEXT_PLAIN_MIME = "text/plain";
 function appendQuery$1(url, query) {
 	const parsed = new URL(url);
@@ -33,7 +34,8 @@ async function exportGoogleDriveDocumentText(params) {
 			Accept: TEXT_PLAIN_MIME
 		} },
 		policy: { allowedHostnames: [GOOGLE_DRIVE_API_HOST] },
-		auditContext: "google-meet.drive.files.export"
+		auditContext: "google-meet.drive.files.export",
+		timeoutMs: GOOGLE_DRIVE_REQUEST_TIMEOUT_MS
 	});
 	try {
 		if (!response.ok) throw await googleApiError({
@@ -51,6 +53,7 @@ async function exportGoogleDriveDocumentText(params) {
 const GOOGLE_MEET_API_BASE_URL = `https://meet.googleapis.com/v2`;
 const GOOGLE_MEET_URL_HOST = "meet.google.com";
 const GOOGLE_MEET_API_HOST = "meet.googleapis.com";
+const GOOGLE_MEET_REQUEST_TIMEOUT_MS = 3e4;
 const GOOGLE_MEET_MEDIA_SCOPE = "https://www.googleapis.com/auth/meetings.conference.media.readonly";
 const GOOGLE_MEET_SPACE_SCOPE = "https://www.googleapis.com/auth/meetings.space.readonly";
 const GOOGLE_MEET_SPACE_CREATED_SCOPE = "https://www.googleapis.com/auth/meetings.space.created";
@@ -101,14 +104,28 @@ function assertResourceArray(value, key, context) {
 function getErrorMessage(error) {
 	return error instanceof Error ? error.message : String(error);
 }
-async function fetchGoogleMeetJson(params) {
-	const { response, release } = await fetchWithSsrFGuard({
+async function requestGoogleMeetApi(params) {
+	return await fetchWithSsrFGuard({
 		url: appendQuery(`${GOOGLE_MEET_API_BASE_URL}/${params.path}`, params.query),
-		init: { headers: {
-			Authorization: `Bearer ${params.accessToken}`,
-			Accept: "application/json"
-		} },
+		init: {
+			method: params.method,
+			headers: {
+				Authorization: `Bearer ${params.accessToken}`,
+				Accept: "application/json",
+				...params.body === void 0 ? {} : { "Content-Type": "application/json" }
+			},
+			body: params.body
+		},
 		policy: { allowedHostnames: [GOOGLE_MEET_API_HOST] },
+		auditContext: params.auditContext,
+		timeoutMs: GOOGLE_MEET_REQUEST_TIMEOUT_MS
+	});
+}
+async function fetchGoogleMeetJson(params) {
+	const { response, release } = await requestGoogleMeetApi({
+		accessToken: params.accessToken,
+		path: params.path,
+		query: params.query,
 		auditContext: params.auditContext
 	});
 	try {
@@ -145,13 +162,10 @@ async function listGoogleMeetCollection(params) {
 	return items;
 }
 async function fetchGoogleMeetSpace(params) {
-	const { response, release } = await fetchWithSsrFGuard({
-		url: `${GOOGLE_MEET_API_BASE_URL}/${encodeSpaceNameForPath(normalizeGoogleMeetSpaceName(params.meeting))}`,
-		init: { headers: {
-			Authorization: `Bearer ${params.accessToken}`,
-			Accept: "application/json"
-		} },
-		policy: { allowedHostnames: [GOOGLE_MEET_API_HOST] },
+	const name = normalizeGoogleMeetSpaceName(params.meeting);
+	const { response, release } = await requestGoogleMeetApi({
+		accessToken: params.accessToken,
+		path: encodeSpaceNameForPath(name),
 		auditContext: "google-meet.spaces.get"
 	});
 	try {
@@ -169,18 +183,11 @@ async function fetchGoogleMeetSpace(params) {
 }
 async function createGoogleMeetSpace(params) {
 	const body = params.config && Object.keys(params.config).length > 0 ? JSON.stringify({ config: params.config }) : "{}";
-	const { response, release } = await fetchWithSsrFGuard({
-		url: `${GOOGLE_MEET_API_BASE_URL}/spaces`,
-		init: {
-			method: "POST",
-			headers: {
-				Authorization: `Bearer ${params.accessToken}`,
-				Accept: "application/json",
-				"Content-Type": "application/json"
-			},
-			body
-		},
-		policy: { allowedHostnames: [GOOGLE_MEET_API_HOST] },
+	const { response, release } = await requestGoogleMeetApi({
+		accessToken: params.accessToken,
+		path: "spaces",
+		method: "POST",
+		body,
 		auditContext: "google-meet.spaces.create"
 	});
 	try {
@@ -206,18 +213,11 @@ async function endGoogleMeetActiveConference(params) {
 		accessToken: params.accessToken,
 		meeting: params.meeting
 	})).name;
-	const { response, release } = await fetchWithSsrFGuard({
-		url: `${GOOGLE_MEET_API_BASE_URL}/${encodeSpaceNameForPath(space)}:endActiveConference`,
-		init: {
-			method: "POST",
-			headers: {
-				Authorization: `Bearer ${params.accessToken}`,
-				Accept: "application/json",
-				"Content-Type": "application/json"
-			},
-			body: "{}"
-		},
-		policy: { allowedHostnames: [GOOGLE_MEET_API_HOST] },
+	const { response, release } = await requestGoogleMeetApi({
+		accessToken: params.accessToken,
+		path: `${encodeSpaceNameForPath(space)}:endActiveConference`,
+		method: "POST",
+		body: "{}",
 		auditContext: "google-meet.spaces.endActiveConference"
 	});
 	try {

package/dist/{cli-Cn8kxkfr.js → cli-2526f6ZI.js}

@@ -1,7 +1,7 @@
-import { a as buildGoogleMeetCalendarDayWindow, i as resolveGoogleMeetGatewayOperationTimeoutMs, o as findGoogleMeetCalendarEvent, s as listGoogleMeetCalendarEvents } from "./config-D_YKxh0m.js";
-import { d as createGoogleMeetSpace, f as endGoogleMeetActiveConference, g as fetchLatestGoogleMeetConferenceRecord, h as fetchGoogleMeetSpace, m as fetchGoogleMeetAttendance, p as fetchGoogleMeetArtifacts, u as buildGoogleMeetPreflightReport } from "./chrome-create-C48OmpbM.js";
-import { buildGoogleMeetAuthUrl, createGoogleMeetOAuthState, createGoogleMeetPkce, exchangeGoogleMeetAuthCode, resolveGoogleMeetAccessToken, waitForGoogleMeetAuthCode } from "./oauth-DK1mwF2i.js";
-import { hasCreateSpaceConfigInput, resolveCreateSpaceConfig } from "./create-C0XRpM4Z.js";
+import { a as buildGoogleMeetCalendarDayWindow, i as resolveGoogleMeetGatewayOperationTimeoutMs, o as findGoogleMeetCalendarEvent, s as listGoogleMeetCalendarEvents } from "./config-DHJVagqv.js";
+import { d as createGoogleMeetSpace, f as endGoogleMeetActiveConference, g as fetchLatestGoogleMeetConferenceRecord, h as fetchGoogleMeetSpace, m as fetchGoogleMeetAttendance, p as fetchGoogleMeetArtifacts, u as buildGoogleMeetPreflightReport } from "./chrome-create-Bj2SRzJo.js";
+import { buildGoogleMeetAuthUrl, createGoogleMeetOAuthState, createGoogleMeetPkce, exchangeGoogleMeetAuthCode, resolveGoogleMeetAccessToken, waitForGoogleMeetAuthCode } from "./oauth-PrwH5ptn.js";
+import { hasCreateSpaceConfigInput, resolveCreateSpaceConfig } from "./create-DY7DeuqN.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { callGatewayFromCli } from "openclaw/plugin-sdk/gateway-runtime";
 import { clampTimerTimeoutMs, parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";

package/dist/{config-D_YKxh0m.js → config-DHJVagqv.js}

@@ -3,34 +3,69 @@ import { asRecord, normalizeOptionalLowercaseString, normalizeOptionalString, no
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import { addTimerTimeoutGraceMs, resolvePositiveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { REALTIME_VOICE_AGENT_CONSULT_TOOL_NAME, resolveRealtimeVoiceAgentConsultToolPolicy } from "openclaw/plugin-sdk/realtime-voice";
+//#region extensions/google-meet/src/meet-url.ts
+function normalizeOptionalString$1(value) {
+	if (typeof value !== "string") return;
+	return value.trim() || void 0;
+}
+function normalizeMeetUrl(input) {
+	const raw = normalizeOptionalString$1(input);
+	if (!raw) throw new Error("url required");
+	let url;
+	try {
+		url = new URL(raw);
+	} catch {
+		throw new Error("url must be a valid Google Meet URL");
+	}
+	if (url.protocol !== "https:" || url.hostname.toLowerCase() !== "meet.google.com" || url.port || url.username || url.password) throw new Error("url must be an explicit https://meet.google.com/... URL");
+	if (!/^\/[a-z]{3}-[a-z]{4}-[a-z]{3}(?:$|[/?#])/i.test(url.pathname)) throw new Error("url must include a Google Meet meeting code");
+	return url.toString();
+}
+//#endregion
 //#region extensions/google-meet/src/calendar.ts
 const GOOGLE_CALENDAR_API_BASE_URL = "https://www.googleapis.com/calendar/v3";
 const GOOGLE_CALENDAR_API_HOST = "www.googleapis.com";
-const GOOGLE_MEET_URL_HOST = "meet.google.com";
 const GOOGLE_CALENDAR_EVENTS_SCOPE = "https://www.googleapis.com/auth/calendar.events.readonly";
+const GOOGLE_CALENDAR_REQUEST_TIMEOUT_MS = 3e4;
 function appendQuery(url, query) {
 	const parsed = new URL(url);
 	for (const [key, value] of Object.entries(query)) if (value !== void 0) parsed.searchParams.set(key, String(value));
 	return parsed.toString();
 }
-function isGoogleMeetUri(value) {
-	if (!value?.trim()) return false;
+function normalizeGoogleMeetCalendarUri(value) {
+	if (!value?.trim()) return;
 	try {
-		return new URL(value).hostname === GOOGLE_MEET_URL_HOST;
+		const url = new URL(value);
+		if (url.protocol !== "http:" && url.protocol !== "https:") return;
+		if (url.hostname.toLowerCase() !== "meet.google.com" || url.port || url.username || url.password) return;
+		url.protocol = "https:";
+		return normalizeMeetUrl(url.toString());
 	} catch {
-		return false;
+		return;
 	}
 }
 function extractGoogleMeetUriFromText(value) {
-	return (value?.match(/https:\/\/meet\.google\.com\/[a-z0-9-]+/i))?.[0];
+	const matches = value?.matchAll(/https:\/\/meet\.google\.com\/[a-z0-9-]+/gi);
+	for (const match of matches ?? []) {
+		const uri = normalizeGoogleMeetCalendarUri(match[0]);
+		if (uri) return uri;
+	}
+}
+function findFirstGoogleMeetCalendarUri(entryPoints, predicate = () => true) {
+	for (const entry of entryPoints) {
+		if (!predicate(entry)) continue;
+		const uri = normalizeGoogleMeetCalendarUri(entry.uri);
+		if (uri) return uri;
+	}
 }
 function extractGoogleMeetUriFromCalendarEvent(event) {
-	if (isGoogleMeetUri(event.hangoutLink)) return event.hangoutLink;
+	const hangoutLink = normalizeGoogleMeetCalendarUri(event.hangoutLink);
+	if (hangoutLink) return hangoutLink;
 	const entryPoints = event.conferenceData?.entryPoints ?? [];
-	const videoEntry = entryPoints.find((entry) => entry.entryPointType === "video" && isGoogleMeetUri(entry.uri));
-	if (videoEntry?.uri) return videoEntry.uri;
-	const meetEntry = entryPoints.find((entry) => isGoogleMeetUri(entry.uri));
-	if (meetEntry?.uri) return meetEntry.uri;
+	const videoEntryUri = findFirstGoogleMeetCalendarUri(entryPoints, (entry) => entry.entryPointType === "video");
+	if (videoEntryUri) return videoEntryUri;
+	const meetEntryUri = findFirstGoogleMeetCalendarUri(entryPoints);
+	if (meetEntryUri) return meetEntryUri;
 	return extractGoogleMeetUriFromText(event.location) ?? extractGoogleMeetUriFromText(event.description);
 }
 function buildGoogleMeetCalendarDayWindow(now = /* @__PURE__ */ new Date()) {
@@ -90,7 +125,8 @@ async function fetchGoogleCalendarEvents(params) {
 			Accept: "application/json"
 		} },
 		policy: { allowedHostnames: [GOOGLE_CALENDAR_API_HOST] },
-		auditContext: "google-meet.calendar.events.list"
+		auditContext: "google-meet.calendar.events.list",
+		timeoutMs: GOOGLE_CALENDAR_REQUEST_TIMEOUT_MS
 	});
 	try {
 		if (!response.ok) throw await googleApiError({
@@ -463,4 +499,4 @@ function resolveGoogleMeetConfigWithEnv(input, env = process.env) {
 	};
 }
 //#endregion
-export { buildGoogleMeetCalendarDayWindow as a, resolveGoogleMeetGatewayOperationTimeoutMs as i, DEFAULT_GOOGLE_MEET_AUDIO_OUTPUT_COMMAND as n, findGoogleMeetCalendarEvent as o, resolveGoogleMeetConfig as r, listGoogleMeetCalendarEvents as s, DEFAULT_GOOGLE_MEET_AUDIO_INPUT_COMMAND as t };
+export { buildGoogleMeetCalendarDayWindow as a, normalizeMeetUrl as c, resolveGoogleMeetGatewayOperationTimeoutMs as i, DEFAULT_GOOGLE_MEET_AUDIO_OUTPUT_COMMAND as n, findGoogleMeetCalendarEvent as o, resolveGoogleMeetConfig as r, listGoogleMeetCalendarEvents as s, DEFAULT_GOOGLE_MEET_AUDIO_INPUT_COMMAND as t };

package/dist/{create-C0XRpM4Z.js → create-DY7DeuqN.js}

@@ -1,5 +1,5 @@
-import { d as createGoogleMeetSpace, t as createMeetWithBrowserProxyOnNode } from "./chrome-create-C48OmpbM.js";
-import { resolveGoogleMeetAccessToken } from "./oauth-DK1mwF2i.js";
+import { d as createGoogleMeetSpace, t as createMeetWithBrowserProxyOnNode } from "./chrome-create-Bj2SRzJo.js";
+import { resolveGoogleMeetAccessToken } from "./oauth-PrwH5ptn.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/google-meet/src/create.ts
 function normalizeTransport(value) {

package/dist/index.js

@@ -1,5 +1,5 @@
-import { a as buildGoogleMeetCalendarDayWindow, i as resolveGoogleMeetGatewayOperationTimeoutMs, n as DEFAULT_GOOGLE_MEET_AUDIO_OUTPUT_COMMAND, o as findGoogleMeetCalendarEvent, r as resolveGoogleMeetConfig, s as listGoogleMeetCalendarEvents, t as DEFAULT_GOOGLE_MEET_AUDIO_INPUT_COMMAND } from "./config-D_YKxh0m.js";
-import { a as isSameMeetUrlForReuse, c as resolveChromeNode, f as endGoogleMeetActiveConference, g as fetchLatestGoogleMeetConferenceRecord, h as fetchGoogleMeetSpace, i as callBrowserProxyOnNode, l as resolveChromeNodeInfo, m as fetchGoogleMeetAttendance, n as isGoogleMeetBrowserManualActionError, o as normalizeMeetUrlForReuse, p as fetchGoogleMeetArtifacts, r as asBrowserTabs, s as readBrowserTab, t as createMeetWithBrowserProxyOnNode, u as buildGoogleMeetPreflightReport } from "./chrome-create-C48OmpbM.js";
+import { a as buildGoogleMeetCalendarDayWindow, c as normalizeMeetUrl, i as resolveGoogleMeetGatewayOperationTimeoutMs, n as DEFAULT_GOOGLE_MEET_AUDIO_OUTPUT_COMMAND, o as findGoogleMeetCalendarEvent, r as resolveGoogleMeetConfig, s as listGoogleMeetCalendarEvents, t as DEFAULT_GOOGLE_MEET_AUDIO_INPUT_COMMAND } from "./config-DHJVagqv.js";
+import { a as isSameMeetUrlForReuse, c as resolveChromeNode, f as endGoogleMeetActiveConference, g as fetchLatestGoogleMeetConferenceRecord, h as fetchGoogleMeetSpace, i as callBrowserProxyOnNode, l as resolveChromeNodeInfo, m as fetchGoogleMeetAttendance, n as isGoogleMeetBrowserManualActionError, o as normalizeMeetUrlForReuse, p as fetchGoogleMeetArtifacts, r as asBrowserTabs, s as readBrowserTab, t as createMeetWithBrowserProxyOnNode, u as buildGoogleMeetPreflightReport } from "./chrome-create-Bj2SRzJo.js";
 import { optionalPositiveIntegerSchema, readPositiveIntegerParam } from "openclaw/plugin-sdk/channel-actions";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { ErrorCodes, GatewayClient, callGatewayFromCli, errorShape, startGatewayClientWhenEventLoopReady } from "openclaw/plugin-sdk/gateway-runtime";
@@ -210,8 +210,7 @@ function clearAudio(params) {
 	};
 }
 function startChrome(params) {
-	const url = readString$1(params.url);
-	if (!url) throw new Error("url required");
+	const url = normalizeMeetUrl(params.url);
 	const timeoutMs = readNumber(params.joinTimeoutMs, 3e4);
 	const mode = readString$1(params.mode);
 	let bridgeId;
@@ -963,6 +962,8 @@ async function startCommandAgentAudioBridge(params) {
 	inputProcess.stderr?.on("data", (chunk) => {
 		params.logger.debug?.(`[google-meet] audio input: ${String(chunk).trim()}`);
 	});
+	inputProcess.stdout?.on("error", fail("audio input command stdout"));
+	inputProcess.stderr?.on("error", fail("audio input command stderr"));
 	outputProcess.on("error", fail("audio output command"));
 	outputProcess.stdin?.on?.("error", fail("audio output command"));
 	outputProcess.on("exit", (code, signal) => {
@@ -974,6 +975,7 @@ async function startCommandAgentAudioBridge(params) {
 	outputProcess.stderr?.on("data", (chunk) => {
 		params.logger.debug?.(`[google-meet] audio output: ${String(chunk).trim()}`);
 	});
+	outputProcess.stderr?.on("error", fail("audio output command stderr"));
 	const writeOutputAudio = (audio) => {
 		const suppression = recordGoogleMeetOutputActivity({
 			tracker: outputActivity,
@@ -1242,6 +1244,10 @@ async function startCommandRealtimeAudioBridge(params) {
 		proc.stderr?.on("data", (chunk) => {
 			params.logger.debug?.(`[google-meet] audio output: ${String(chunk).trim()}`);
 		});
+		proc.stderr?.on("error", (error) => {
+			if (proc !== outputProcess) return;
+			fail("audio output command stderr")(error);
+		});
 	};
 	const clearOutputPlayback = () => {
 		if (stopped) return;
@@ -1288,9 +1294,15 @@ async function startCommandRealtimeAudioBridge(params) {
 			if (beforeClearCount === clearCount) clearOutputPlayback();
 			params.logger.debug?.(`[google-meet] human barge-in detected by local input (rms=${Math.round(stats.rms)}, peak=${stats.peak})`);
 		});
+		bargeInInputProcess.stdout?.on("error", (error) => {
+			params.logger.warn(`[google-meet] human barge-in input stdout failed: ${formatErrorMessage(error)}`);
+		});
 		bargeInInputProcess.stderr?.on("data", (chunk) => {
 			params.logger.debug?.(`[google-meet] barge-in input: ${String(chunk).trim()}`);
 		});
+		bargeInInputProcess.stderr?.on("error", (error) => {
+			params.logger.warn(`[google-meet] human barge-in input stderr failed: ${formatErrorMessage(error)}`);
+		});
 		bargeInInputProcess.on("error", (error) => {
 			params.logger.warn(`[google-meet] human barge-in input failed: ${formatErrorMessage(error)}`);
 		});
@@ -1309,6 +1321,8 @@ async function startCommandRealtimeAudioBridge(params) {
 	inputProcess.stderr?.on("data", (chunk) => {
 		params.logger.debug?.(`[google-meet] audio input: ${String(chunk).trim()}`);
 	});
+	inputProcess.stdout?.on("error", fail("audio input command stdout"));
+	inputProcess.stderr?.on("error", fail("audio input command stderr"));
 	const resolved = resolveGoogleMeetRealtimeProvider({
 		config: params.config,
 		fullConfig: params.fullConfig,
@@ -3064,19 +3078,6 @@ function nowIso() {
 function buildTwilioVoiceCallSessionKey(meetingSessionId) {
 	return `voice:google-meet:${meetingSessionId}`;
 }
-function normalizeMeetUrl(input) {
-	const raw = normalizeOptionalString(input);
-	if (!raw) throw new Error("url required");
-	let url;
-	try {
-		url = new URL(raw);
-	} catch {
-		throw new Error("url must be a valid Google Meet URL");
-	}
-	if (url.protocol !== "https:" || url.hostname.toLowerCase() !== "meet.google.com") throw new Error("url must be an explicit https://meet.google.com/... URL");
-	if (!/^\/[a-z]{3}-[a-z]{4}-[a-z]{3}(?:$|[/?#])/i.test(url.pathname)) throw new Error("url must include a Google Meet meeting code");
-	return url.toString();
-}
 function resolveTransport(input, config) {
 	return input ?? config.defaultTransport;
 }
@@ -3726,11 +3727,11 @@ var GoogleMeetRuntime = class {
 let googleMeetCreateModulePromise = null;
 let googleMeetCliModulePromise = null;
 const loadGoogleMeetCreateModule = async () => {
-	googleMeetCreateModulePromise ??= import("./create-C0XRpM4Z.js");
+	googleMeetCreateModulePromise ??= import("./create-DY7DeuqN.js");
 	return await googleMeetCreateModulePromise;
 };
 const loadGoogleMeetCliModule = async () => {
-	googleMeetCliModulePromise ??= import("./cli-Cn8kxkfr.js");
+	googleMeetCliModulePromise ??= import("./cli-2526f6ZI.js");
 	return await googleMeetCliModulePromise;
 };
 const googleMeetConfigSchema = {
@@ -4103,7 +4104,7 @@ async function createAndJoinMeetFromParams(params) {
 	return (await loadGoogleMeetCreateModule()).createAndJoinMeetFromParams(params);
 }
 async function resolveGoogleMeetTokenFromParams(config, raw) {
-	const { resolveGoogleMeetAccessToken } = await import("./oauth-DK1mwF2i.js");
+	const { resolveGoogleMeetAccessToken } = await import("./oauth-PrwH5ptn.js");
 	return resolveGoogleMeetAccessToken({
 		clientId: normalizeOptionalString(raw.clientId) ?? config.oauth.clientId,
 		clientSecret: normalizeOptionalString(raw.clientSecret) ?? config.oauth.clientSecret,

package/dist/{oauth-DK1mwF2i.js → oauth-PrwH5ptn.js}

@@ -1,5 +1,6 @@
 import { n as readGoogleApiErrorDetail } from "./google-api-errors-CDUYkIcK.js";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
+import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
 import { MAX_DATE_TIMESTAMP_MS, resolveDateTimestampMs, resolveExpiresAtMsFromDurationSeconds } from "openclaw/plugin-sdk/number-runtime";
 import { generateHexPkceVerifierChallenge } from "openclaw/plugin-sdk/provider-auth";
 import { generateOAuthState, parseOAuthCallbackInput, waitForLocalOAuthCallback } from "openclaw/plugin-sdk/provider-auth-runtime";
@@ -9,6 +10,8 @@ const GOOGLE_MEET_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
 const GOOGLE_MEET_TOKEN_URL = "https://oauth2.googleapis.com/token";
 const GOOGLE_MEET_TOKEN_HOST = "oauth2.googleapis.com";
 const GOOGLE_MEET_DEFAULT_TOKEN_LIFETIME_SECONDS = 3600;
+const GOOGLE_OAUTH_TOKEN_JSON_MAX_BYTES = 256 * 1024;
+const GOOGLE_OAUTH_REQUEST_TIMEOUT_MS = 3e4;
 const GOOGLE_MEET_SCOPES = [
 	"https://www.googleapis.com/auth/meetings.space.created",
 	"https://www.googleapis.com/auth/meetings.space.readonly",
@@ -47,14 +50,15 @@ async function executeGoogleTokenRequest(body) {
 			body
 		},
 		policy: { allowedHostnames: [GOOGLE_MEET_TOKEN_HOST] },
-		auditContext: "google-meet.oauth.token"
+		auditContext: "google-meet.oauth.token",
+		timeoutMs: GOOGLE_OAUTH_REQUEST_TIMEOUT_MS
 	});
 	try {
 		if (!response.ok) {
 			const detail = await readGoogleApiErrorDetail(response);
 			throw new Error(`Google OAuth token request failed (${response.status}): ${detail}`);
 		}
-		const payload = await response.json();
+		const payload = await readProviderJsonResponse(response, "Google OAuth token", { maxBytes: GOOGLE_OAUTH_TOKEN_JSON_MAX_BYTES });
 		const accessToken = payload.access_token?.trim();
 		if (!accessToken) throw new Error("Google OAuth token response was missing access_token");
 		return {

package/npm-shrinkwrap.json

@@ -1,18 +1,18 @@
 {
   "name": "@openclaw/google-meet",
-  "version": "2026.6.34",
+  "version": "2026.6.35",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/google-meet",
-      "version": "2026.6.34",
+      "version": "2026.6.35",
       "dependencies": {
         "commander": "14.0.3",
         "typebox": "1.1.39"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.6.34"
+        "openclaw": ">=2026.6.35"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/google-meet",
-  "version": "2026.6.34",
+  "version": "2026.6.35",
   "description": "OpenClaw Google Meet participant plugin for joining calls through Chrome or Twilio transports.",
   "repository": {
     "type": "git",
@@ -12,7 +12,7 @@
     "typebox": "1.1.39"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.6.34"
+    "openclaw": ">=2026.6.35"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -29,10 +29,10 @@
       "minHostVersion": ">=2026.4.20"
     },
     "compat": {
-      "pluginApi": ">=2026.6.34"
+      "pluginApi": ">=2026.6.35"
     },
     "build": {
-      "openclawVersion": "2026.6.34"
+      "openclawVersion": "2026.6.35"
     },
     "release": {
       "publishToClawHub": true,