@openclaw/google-meet 2026.7.1-beta.2 → 2026.7.1-beta.5

package/dist/index.js

@@ -1,11 +1,13 @@
-import { a as buildGoogleMeetCalendarDayWindow, i as resolveGoogleMeetGatewayOperationTimeoutMs, n as DEFAULT_GOOGLE_MEET_AUDIO_OUTPUT_COMMAND, o as findGoogleMeetCalendarEvent, r as resolveGoogleMeetConfig, s as listGoogleMeetCalendarEvents, t as DEFAULT_GOOGLE_MEET_AUDIO_INPUT_COMMAND } from "./config-D_YKxh0m.js";
-import { _ as fetchLatestGoogleMeetConferenceRecord, a as forceMeetEnglishUi, c as readBrowserTab, d as buildGoogleMeetPreflightReport, g as fetchGoogleMeetSpace, h as fetchGoogleMeetAttendance, i as callBrowserProxyOnNode, l as resolveChromeNode, m as fetchGoogleMeetArtifacts, n as isGoogleMeetBrowserManualActionError, o as isSameMeetUrlForReuse, p as endGoogleMeetActiveConference, r as asBrowserTabs, s as normalizeMeetUrlForReuse, t as createMeetWithBrowserProxyOnNode, u as resolveChromeNodeInfo } from "./chrome-create-C1akZT_q.js";
+import { a as buildGoogleMeetCalendarDayWindow, i as resolveGoogleMeetGatewayOperationTimeoutMs, n as DEFAULT_GOOGLE_MEET_AUDIO_OUTPUT_COMMAND, o as findGoogleMeetCalendarEvent, r as resolveGoogleMeetConfig, s as listGoogleMeetCalendarEvents, t as DEFAULT_GOOGLE_MEET_AUDIO_INPUT_COMMAND } from "./config-DDYRr7-P.js";
+import { _ as fetchLatestGoogleMeetConferenceRecord, a as forceMeetEnglishUi, c as readBrowserTab, d as buildGoogleMeetPreflightReport, g as fetchGoogleMeetSpace, h as fetchGoogleMeetAttendance, i as callBrowserProxyOnNode, l as resolveChromeNode, m as fetchGoogleMeetArtifacts, n as isGoogleMeetBrowserManualActionError, o as isSameMeetUrlForReuse, p as endGoogleMeetActiveConference, r as asBrowserTabs, s as normalizeMeetUrlForReuse, t as createMeetWithBrowserProxyOnNode, u as resolveChromeNodeInfo } from "./chrome-create-BhgM0jQO.js";
 import { optionalPositiveIntegerSchema, readPositiveIntegerParam } from "openclaw/plugin-sdk/channel-actions";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { ErrorCodes, GatewayClient, callGatewayFromCli, errorShape, startGatewayClientWhenEventLoopReady } from "openclaw/plugin-sdk/gateway-runtime";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
+import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
 import { asRecord, normalizeOptionalString, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { jsonResult } from "openclaw/plugin-sdk/tool-results";
 import { Type } from "typebox";
 import { isBlockedHostnameOrIp } from "openclaw/plugin-sdk/ssrf-runtime";
 import { addTimerTimeoutGraceMs } from "openclaw/plugin-sdk/number-runtime";
@@ -17,7 +19,6 @@ import { sleep } from "openclaw/plugin-sdk/runtime-env";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
 import { getRealtimeTranscriptionProvider, listRealtimeTranscriptionProviders } from "openclaw/plugin-sdk/realtime-transcription";
 //#region extensions/google-meet/src/transports/chrome-audio-device.ts
 const GOOGLE_MEET_SYSTEM_PROFILER_COMMAND = "/usr/sbin/system_profiler";
@@ -963,6 +964,8 @@ async function startCommandAgentAudioBridge(params) {
 	inputProcess.stderr?.on("data", (chunk) => {
 		params.logger.debug?.(`[google-meet] audio input: ${String(chunk).trim()}`);
 	});
+	inputProcess.stdout?.on("error", fail("audio input command stdout"));
+	inputProcess.stderr?.on("error", fail("audio input command stderr"));
 	outputProcess.on("error", fail("audio output command"));
 	outputProcess.stdin?.on?.("error", fail("audio output command"));
 	outputProcess.on("exit", (code, signal) => {
@@ -974,6 +977,7 @@ async function startCommandAgentAudioBridge(params) {
 	outputProcess.stderr?.on("data", (chunk) => {
 		params.logger.debug?.(`[google-meet] audio output: ${String(chunk).trim()}`);
 	});
+	outputProcess.stderr?.on("error", fail("audio output command stderr"));
 	const writeOutputAudio = (audio) => {
 		const suppression = recordGoogleMeetOutputActivity({
 			tracker: outputActivity,
@@ -1242,6 +1246,10 @@ async function startCommandRealtimeAudioBridge(params) {
 		proc.stderr?.on("data", (chunk) => {
 			params.logger.debug?.(`[google-meet] audio output: ${String(chunk).trim()}`);
 		});
+		proc.stderr?.on("error", (error) => {
+			if (proc !== outputProcess) return;
+			fail("audio output command stderr")(error);
+		});
 	};
 	const clearOutputPlayback = () => {
 		if (stopped) return;
@@ -1288,9 +1296,15 @@ async function startCommandRealtimeAudioBridge(params) {
 			if (beforeClearCount === clearCount) clearOutputPlayback();
 			params.logger.debug?.(`[google-meet] human barge-in detected by local input (rms=${Math.round(stats.rms)}, peak=${stats.peak})`);
 		});
+		bargeInInputProcess.stdout?.on("error", (error) => {
+			params.logger.warn(`[google-meet] human barge-in input stdout failed: ${formatErrorMessage(error)}`);
+		});
 		bargeInInputProcess.stderr?.on("data", (chunk) => {
 			params.logger.debug?.(`[google-meet] barge-in input: ${String(chunk).trim()}`);
 		});
+		bargeInInputProcess.stderr?.on("error", (error) => {
+			params.logger.warn(`[google-meet] human barge-in input stderr failed: ${formatErrorMessage(error)}`);
+		});
 		bargeInInputProcess.on("error", (error) => {
 			params.logger.warn(`[google-meet] human barge-in input failed: ${formatErrorMessage(error)}`);
 		});
@@ -1309,6 +1323,8 @@ async function startCommandRealtimeAudioBridge(params) {
 	inputProcess.stderr?.on("data", (chunk) => {
 		params.logger.debug?.(`[google-meet] audio input: ${String(chunk).trim()}`);
 	});
+	inputProcess.stdout?.on("error", fail("audio input command stdout"));
+	inputProcess.stderr?.on("error", fail("audio input command stderr"));
 	const resolved = resolveGoogleMeetRealtimeProvider({
 		config: params.config,
 		fullConfig: params.fullConfig,
@@ -2968,93 +2984,88 @@ async function createConnectedGatewayClient(config) {
 	});
 	return client;
 }
+function createVoiceCallGateway(params) {
+	if (!params.config.voiceCall.gatewayUrl) return {
+		trustedPluginIdentity: true,
+		request: (method, requestParams) => params.runtime.gateway.request(method, requestParams, { timeoutMs: params.config.voiceCall.requestTimeoutMs })
+	};
+	return {
+		trustedPluginIdentity: false,
+		async request(method, requestParams) {
+			const client = await createConnectedGatewayClient(params.config);
+			try {
+				return await client.request(method, requestParams, { timeoutMs: params.config.voiceCall.requestTimeoutMs });
+			} finally {
+				await client.stopAndWait({ timeoutMs: 1e3 });
+			}
+		}
+	};
+}
 function isVoiceCallMissingError(error) {
 	const message = formatErrorMessage(error).toLowerCase();
 	return message.includes("call not found") || message.includes("call is not active");
 }
 async function joinMeetViaVoiceCallGateway(params) {
-	let client;
-	try {
-		client = await createConnectedGatewayClient(params.config);
-		params.logger?.info(`[google-meet] Delegating Twilio join to Voice Call (dtmf=${params.dtmfSequence ? "pre-connect" : "none"}, intro=${params.message ? "delayed" : "none"})`);
-		const start = await client.request("voicecall.start", {
-			to: params.dialInNumber,
-			mode: "conversation",
-			...params.dtmfSequence ? { dtmfSequence: params.dtmfSequence } : {},
-			...params.requesterSessionKey ? { requesterSessionKey: params.requesterSessionKey } : {},
-			...params.sessionKey ? { sessionKey: params.sessionKey } : {}
-		}, { timeoutMs: params.config.voiceCall.requestTimeoutMs });
-		if (!start.callId) throw new Error(start.error || "voicecall.start did not return callId");
-		params.logger?.info(`[google-meet] Voice Call Twilio phone leg started: callId=${start.callId}`);
-		const dtmfSent = Boolean(params.dtmfSequence);
-		if (dtmfSent) params.logger?.info(`[google-meet] Meet DTMF queued before realtime connect: callId=${start.callId} digits=${params.dtmfSequence?.length ?? 0}`);
-		let introSent = false;
-		if (params.message) {
-			const delayMs = params.dtmfSequence ? params.config.voiceCall.postDtmfSpeechDelayMs : 0;
-			if (delayMs > 0) {
-				params.logger?.info(`[google-meet] Waiting ${delayMs}ms after Meet DTMF before speaking intro for callId=${start.callId}`);
-				await sleep(delayMs);
-			}
-			let spoken;
-			try {
-				spoken = await client.request("voicecall.speak", {
-					callId: start.callId,
-					allowTwimlFallback: false,
-					message: params.message
-				}, { timeoutMs: params.config.voiceCall.requestTimeoutMs });
-			} catch (err) {
-				params.logger?.warn?.(`[google-meet] Skipped intro speech because realtime bridge was not ready: ${formatErrorMessage(err)}`);
-				spoken = { success: false };
-			}
-			if (spoken.success === false) params.logger?.warn?.(`[google-meet] Skipped intro speech because realtime bridge was not ready: ${spoken.error || "voicecall.speak failed"}`);
-			else {
-				introSent = true;
-				params.logger?.info(`[google-meet] Intro speech requested after Meet dial sequence: callId=${start.callId}`);
-			}
+	if (params.agentId && params.agentId !== "main" && !params.gateway.trustedPluginIdentity) throw new Error("Per-agent Voice Call routing requires the local Gateway runtime. Remove google-meet voiceCall.gatewayUrl or omit agent routing.");
+	params.logger?.info(`[google-meet] Delegating Twilio join to Voice Call (dtmf=${params.dtmfSequence ? "pre-connect" : "none"}, intro=${params.message ? "delayed" : "none"})`);
+	const start = await params.gateway.request("voicecall.start", {
+		to: params.dialInNumber,
+		mode: "conversation",
+		...params.dtmfSequence ? { dtmfSequence: params.dtmfSequence } : {},
+		...params.requesterSessionKey ? { requesterSessionKey: params.requesterSessionKey } : {},
+		...params.agentId && params.gateway.trustedPluginIdentity ? { agentId: params.agentId } : {},
+		...params.sessionKey ? { sessionKey: params.sessionKey } : {}
+	});
+	if (!start.callId) throw new Error(start.error || "voicecall.start did not return callId");
+	params.logger?.info(`[google-meet] Voice Call Twilio phone leg started: callId=${start.callId}`);
+	const dtmfSent = Boolean(params.dtmfSequence);
+	if (dtmfSent) params.logger?.info(`[google-meet] Meet DTMF queued before realtime connect: callId=${start.callId} digits=${params.dtmfSequence?.length ?? 0}`);
+	let introSent = false;
+	if (params.message) {
+		const delayMs = params.dtmfSequence ? params.config.voiceCall.postDtmfSpeechDelayMs : 0;
+		if (delayMs > 0) {
+			params.logger?.info(`[google-meet] Waiting ${delayMs}ms after Meet DTMF before speaking intro for callId=${start.callId}`);
+			await sleep(delayMs);
 		}
-		return {
-			callId: start.callId,
-			dtmfSent,
-			introSent
-		};
-	} finally {
-		await client?.stopAndWait({ timeoutMs: 1e3 });
-	}
-}
-async function endMeetVoiceCallGatewayCall(params) {
-	let client;
-	try {
-		client = await createConnectedGatewayClient(params.config);
+		let spoken;
 		try {
-			await client.request("voicecall.end", { callId: params.callId }, { timeoutMs: params.config.voiceCall.requestTimeoutMs });
+			spoken = await params.gateway.request("voicecall.speak", {
+				callId: start.callId,
+				allowTwimlFallback: false,
+				message: params.message
+			});
 		} catch (err) {
-			if (!isVoiceCallMissingError(err)) throw err;
+			params.logger?.warn?.(`[google-meet] Skipped intro speech because realtime bridge was not ready: ${formatErrorMessage(err)}`);
+			spoken = { success: false };
+		}
+		if (spoken.success === false) params.logger?.warn?.(`[google-meet] Skipped intro speech because realtime bridge was not ready: ${spoken.error || "voicecall.speak failed"}`);
+		else {
+			introSent = true;
+			params.logger?.info(`[google-meet] Intro speech requested after Meet dial sequence: callId=${start.callId}`);
 		}
-	} finally {
-		await client?.stopAndWait({ timeoutMs: 1e3 });
 	}
+	return {
+		callId: start.callId,
+		dtmfSent,
+		introSent
+	};
 }
-async function getMeetVoiceCallGatewayCall(params) {
-	let client;
+async function endMeetVoiceCallGatewayCall(params) {
 	try {
-		client = await createConnectedGatewayClient(params.config);
-		return await client.request("voicecall.status", { callId: params.callId }, { timeoutMs: params.config.voiceCall.requestTimeoutMs });
-	} finally {
-		await client?.stopAndWait({ timeoutMs: 1e3 });
+		await params.gateway.request("voicecall.end", { callId: params.callId });
+	} catch (err) {
+		if (!isVoiceCallMissingError(err)) throw err;
 	}
 }
+async function getMeetVoiceCallGatewayCall(params) {
+	return await params.gateway.request("voicecall.status", { callId: params.callId });
+}
 async function speakMeetViaVoiceCallGateway(params) {
-	let client;
-	try {
-		client = await createConnectedGatewayClient(params.config);
-		const spoken = await client.request("voicecall.speak", {
-			callId: params.callId,
-			message: params.message
-		}, { timeoutMs: params.config.voiceCall.requestTimeoutMs });
-		if (spoken.success === false) throw new Error(spoken.error || "voicecall.speak failed");
-	} finally {
-		await client?.stopAndWait({ timeoutMs: 1e3 });
-	}
+	const spoken = await params.gateway.request("voicecall.speak", {
+		callId: params.callId,
+		message: params.message
+	});
+	if (spoken.success === false) throw new Error(spoken.error || "voicecall.speak failed");
 }
 //#endregion
 //#region extensions/google-meet/src/runtime.ts
@@ -3173,8 +3184,10 @@ var GoogleMeetRuntime = class {
 	#sessionStops = /* @__PURE__ */ new Map();
 	#sessionSpeakers = /* @__PURE__ */ new Map();
 	#sessionHealth = /* @__PURE__ */ new Map();
+	#voiceCallGateway;
 	constructor(params) {
 		this.params = params;
+		this.#voiceCallGateway = createVoiceCallGateway(params);
 	}
 	list() {
 		this.#refreshHealth();
@@ -3322,9 +3335,16 @@ var GoogleMeetRuntime = class {
 		};
 		try {
 			if (transport === "chrome" || transport === "chrome-node") {
+				const chromeConfig = request.agentId ? {
+					...this.params.config,
+					realtime: {
+						...this.params.config.realtime,
+						agentId: request.agentId
+					}
+				} : this.params.config;
 				const result = transport === "chrome-node" ? await launchChromeMeetOnNode({
 					runtime: this.params.runtime,
-					config: this.params.config,
+					config: chromeConfig,
 					fullConfig: this.params.fullConfig,
 					meetingSessionId: session.id,
 					requesterSessionKey: request.requesterSessionKey,
@@ -3333,7 +3353,7 @@ var GoogleMeetRuntime = class {
 					logger: this.params.logger
 				}) : await launchChromeMeet({
 					runtime: this.params.runtime,
-					config: this.params.config,
+					config: chromeConfig,
 					fullConfig: this.params.fullConfig,
 					meetingSessionId: session.id,
 					requesterSessionKey: request.requesterSessionKey,
@@ -3361,11 +3381,13 @@ var GoogleMeetRuntime = class {
 				const dtmfSequence = request.dtmfSequence || this.params.config.twilio.defaultDtmfSequence ? rawDtmfSequence : prefixDtmfWait(rawDtmfSequence, this.params.config.voiceCall.dtmfDelayMs);
 				const voiceCallResult = this.params.config.voiceCall.enabled ? await joinMeetViaVoiceCallGateway({
 					config: this.params.config,
+					gateway: this.#voiceCallGateway,
 					dialInNumber,
 					dtmfSequence,
 					logger: this.params.logger,
 					...request.requesterSessionKey ? { requesterSessionKey: request.requesterSessionKey } : {},
-					sessionKey: buildTwilioVoiceCallSessionKey(session.id),
+					agentId: request.agentId,
+					sessionKey: request.agentId ? `agent:${request.agentId}:google-meet:${session.id}` : buildTwilioVoiceCallSessionKey(session.id),
 					message: isGoogleMeetTalkBackMode$1(mode) ? request.message ?? this.params.config.voiceCall.introMessage ?? this.params.config.realtime.introMessage : void 0
 				}) : void 0;
 				delegatedTwilioSpoken = Boolean(voiceCallResult?.introSent);
@@ -3379,7 +3401,7 @@ var GoogleMeetRuntime = class {
 				};
 				if (voiceCallResult?.callId) this.#sessionStops.set(session.id, async () => {
 					await endMeetVoiceCallGatewayCall({
-						config: this.params.config,
+						gateway: this.#voiceCallGateway,
 						callId: voiceCallResult.callId
 					});
 				});
@@ -3426,7 +3448,7 @@ var GoogleMeetRuntime = class {
 		if (session.transport === "twilio" && session.twilio?.voiceCallId) {
 			try {
 				await speakMeetViaVoiceCallGateway({
-					config: this.params.config,
+					gateway: this.#voiceCallGateway,
 					callId: session.twilio.voiceCallId,
 					message: instructions || this.params.config.voiceCall.introMessage || this.params.config.realtime.introMessage || ""
 				});
@@ -3620,7 +3642,7 @@ var GoogleMeetRuntime = class {
 		}
 		try {
 			if ((await getMeetVoiceCallGatewayCall({
-				config: this.params.config,
+				gateway: this.#voiceCallGateway,
 				callId
 			})).found === false) this.#markTwilioSessionEnded(session, "Voice Call is no longer active.");
 		} catch (error) {
@@ -3724,7 +3746,7 @@ var GoogleMeetRuntime = class {
 //#endregion
 //#region extensions/google-meet/src/node-invoke-policy.ts
 const GOOGLE_MEET_CHROME_NODE_COMMAND = "googlemeet.chrome";
-const START_MODES = new Set([
+const START_MODES = /* @__PURE__ */ new Set([
 	"agent",
 	"bidi",
 	"realtime",
@@ -3868,8 +3890,8 @@ function createGoogleMeetChromeNodeInvokePolicy(config) {
 }
 //#endregion
 //#region extensions/google-meet/index.ts
-const loadGoogleMeetCreateModule = createLazyRuntimeModule(() => import("./create-CHlW2v6-.js"));
-const loadGoogleMeetCliModule = createLazyRuntimeModule(() => import("./cli-BXICNPAs.js"));
+const loadGoogleMeetCreateModule = createLazyRuntimeModule(() => import("./create-CkkaRlbI.js"));
+const loadGoogleMeetCliModule = createLazyRuntimeModule(() => import("./cli-D364Yrym.js"));
 const googleMeetConfigSchema = {
 	parse(value) {
 		return resolveGoogleMeetConfig(value);
@@ -4154,15 +4176,6 @@ const GoogleMeetToolSchema = Type.Object({
 function asParamRecord(params) {
 	return params && typeof params === "object" && !Array.isArray(params) ? params : {};
 }
-function json(payload) {
-	return {
-		content: [{
-			type: "text",
-			text: JSON.stringify(payload, null, 2)
-		}],
-		details: payload
-	};
-}
 function normalizeTransport(value) {
 	return value === "chrome" || value === "chrome-node" || value === "twilio" ? value : void 0;
 }
@@ -4223,6 +4236,7 @@ function readGatewayErrorDetails(err) {
 }
 async function callGoogleMeetGatewayFromTool(params) {
 	try {
+		if (params.runtime) return await params.runtime.gateway.request(googleMeetGatewayMethodForToolAction(params.action), params.raw, { timeoutMs: resolveGoogleMeetGatewayOperationTimeoutMs(params.config) });
 		return await googleMeetToolDeps.callGatewayFromCli(googleMeetGatewayMethodForToolAction(params.action), {
 			json: true,
 			timeout: String(resolveGoogleMeetGatewayOperationTimeoutMs(params.config))
@@ -4233,6 +4247,15 @@ async function callGoogleMeetGatewayFromTool(params) {
 		throw err;
 	}
 }
+function keepTrustedToolAgentId(raw, client) {
+	const { agentId: rawAgentId, ...rest } = raw;
+	if (client?.internal?.pluginRuntimeOwnerId !== "google-meet") return rest;
+	const agentId = normalizeOptionalString(rawAgentId);
+	return agentId ? {
+		...rest,
+		agentId
+	} : rest;
+}
 async function createMeetFromParams(params) {
 	return (await loadGoogleMeetCreateModule()).createMeetFromParams(params);
 }
@@ -4240,7 +4263,7 @@ async function createAndJoinMeetFromParams(params) {
 	return (await loadGoogleMeetCreateModule()).createAndJoinMeetFromParams(params);
 }
 async function resolveGoogleMeetTokenFromParams(config, raw) {
-	const { resolveGoogleMeetAccessToken } = await import("./oauth-DK1mwF2i.js");
+	const { resolveGoogleMeetAccessToken } = await import("./oauth-75iPDzIn.js");
 	return resolveGoogleMeetAccessToken({
 		clientId: normalizeOptionalString(raw.clientId) ?? config.oauth.clientId,
 		clientSecret: normalizeOptionalString(raw.clientSecret) ?? config.oauth.clientSecret,
@@ -4397,25 +4420,27 @@ var google_meet_default = definePluginEntry({
 			const payload = formatGatewayError(err);
 			respond(false, payload, errorShape(code, typeof payload.error === "string" ? payload.error : "Google Meet request failed", { details: payload }));
 		};
-		api.registerGatewayMethod("googlemeet.join", async ({ params, respond }) => {
+		api.registerGatewayMethod("googlemeet.join", async ({ params, client, respond }) => {
 			try {
+				const trustedParams = keepTrustedToolAgentId(asParamRecord(params), client);
 				respond(true, await (await ensureRuntime()).join({
-					url: resolveMeetingInput(config, params?.url),
-					transport: normalizeTransport(params?.transport),
-					mode: normalizeMode(params?.mode),
-					dialInNumber: normalizeOptionalString(params?.dialInNumber),
-					pin: normalizeOptionalString(params?.pin),
-					dtmfSequence: normalizeOptionalString(params?.dtmfSequence),
-					message: normalizeOptionalString(params?.message),
-					requesterSessionKey: normalizeOptionalString(params?.requesterSessionKey)
+					url: resolveMeetingInput(config, trustedParams.url),
+					transport: normalizeTransport(trustedParams.transport),
+					mode: normalizeMode(trustedParams.mode),
+					dialInNumber: normalizeOptionalString(trustedParams.dialInNumber),
+					pin: normalizeOptionalString(trustedParams.pin),
+					dtmfSequence: normalizeOptionalString(trustedParams.dtmfSequence),
+					message: normalizeOptionalString(trustedParams.message),
+					requesterSessionKey: normalizeOptionalString(trustedParams.requesterSessionKey),
+					agentId: normalizeOptionalString(trustedParams.agentId)
 				}));
 			} catch (err) {
 				sendError(respond, err);
 			}
 		});
-		api.registerGatewayMethod("googlemeet.create", async ({ params, respond }) => {
+		api.registerGatewayMethod("googlemeet.create", async ({ params, client, respond }) => {
 			try {
-				const raw = asParamRecord(params);
+				const raw = keepTrustedToolAgentId(asParamRecord(params), client);
 				respond(true, shouldJoinCreatedMeet(raw) ? await createAndJoinMeetFromParams({
 					config,
 					runtime: api.runtime,
@@ -4495,7 +4520,8 @@ var google_meet_default = definePluginEntry({
 		});
 		api.registerGatewayMethod("googlemeet.artifacts", async ({ params, respond }) => {
 			try {
-				const resolved = await resolveArtifactQueryFromParams(config, asParamRecord(params));
+				const raw = asParamRecord(params);
+				const resolved = await resolveArtifactQueryFromParams(config, raw);
 				respond(true, await fetchGoogleMeetArtifacts({
 					accessToken: resolved.token.accessToken,
 					meeting: resolved.meeting,
@@ -4511,7 +4537,8 @@ var google_meet_default = definePluginEntry({
 		});
 		api.registerGatewayMethod("googlemeet.attendance", async ({ params, respond }) => {
 			try {
-				const resolved = await resolveArtifactQueryFromParams(config, asParamRecord(params));
+				const raw = asParamRecord(params);
+				const resolved = await resolveArtifactQueryFromParams(config, raw);
 				respond(true, await fetchGoogleMeetAttendance({
 					accessToken: resolved.token.accessToken,
 					meeting: resolved.meeting,
@@ -4568,17 +4595,19 @@ var google_meet_default = definePluginEntry({
 				sendError(respond, err);
 			}
 		});
-		api.registerGatewayMethod("googlemeet.testSpeech", async ({ params, respond }) => {
+		api.registerGatewayMethod("googlemeet.testSpeech", async ({ params, client, respond }) => {
 			try {
+				const trustedParams = keepTrustedToolAgentId(asParamRecord(params), client);
 				respond(true, await (await ensureRuntime()).testSpeech({
-					url: resolveMeetingInput(config, params?.url),
-					transport: normalizeTransport(params?.transport),
-					mode: normalizeMode(params?.mode),
-					dialInNumber: normalizeOptionalString(params?.dialInNumber),
-					pin: normalizeOptionalString(params?.pin),
-					dtmfSequence: normalizeOptionalString(params?.dtmfSequence),
-					message: normalizeOptionalString(params?.message),
-					requesterSessionKey: normalizeOptionalString(params?.requesterSessionKey)
+					url: resolveMeetingInput(config, trustedParams.url),
+					transport: normalizeTransport(trustedParams.transport),
+					mode: normalizeMode(trustedParams.mode),
+					dialInNumber: normalizeOptionalString(trustedParams.dialInNumber),
+					pin: normalizeOptionalString(trustedParams.pin),
+					dtmfSequence: normalizeOptionalString(trustedParams.dtmfSequence),
+					message: normalizeOptionalString(trustedParams.message),
+					requesterSessionKey: normalizeOptionalString(trustedParams.requesterSessionKey),
+					agentId: normalizeOptionalString(trustedParams.agentId)
 				}));
 			} catch (err) {
 				sendError(respond, err);
@@ -4604,58 +4633,65 @@ var google_meet_default = definePluginEntry({
 			async execute(_toolCallId, params) {
 				const raw = asParamRecord(params);
 				const requesterSessionKey = normalizeOptionalString(toolContext.sessionKey);
-				const rawWithRequester = requesterSessionKey ? {
-					...raw,
-					requesterSessionKey
-				} : raw;
+				const agentId = toolContext.agentId ? normalizeAgentId(toolContext.agentId) : void 0;
 				try {
+					const useTrustedRuntime = agentId ? await api.runtime.gateway.isAvailable() : false;
+					if (agentId && agentId !== "main" && !useTrustedRuntime) throw new Error("Per-agent Google Meet routing requires a Gateway-hosted agent run.");
+					const rawWithRequester = {
+						...raw,
+						...requesterSessionKey ? { requesterSessionKey } : {},
+						...useTrustedRuntime ? { agentId } : {}
+					};
 					assertGoogleMeetAgentToolActionSupported({
 						config,
 						raw
 					});
 					switch (raw.action) {
-						case "join": return json(await callGoogleMeetGatewayFromTool({
+						case "join": return jsonResult(await callGoogleMeetGatewayFromTool({
 							config,
 							action: "join",
-							raw: rawWithRequester
+							raw: rawWithRequester,
+							runtime: useTrustedRuntime ? api.runtime : void 0
 						}));
-						case "create": return json(await callGoogleMeetGatewayFromTool({
+						case "create": return jsonResult(await callGoogleMeetGatewayFromTool({
 							config,
 							action: "create",
-							raw: rawWithRequester
+							raw: rawWithRequester,
+							runtime: useTrustedRuntime ? api.runtime : void 0
 						}));
-						case "test_speech": return json(await callGoogleMeetGatewayFromTool({
+						case "test_speech": return jsonResult(await callGoogleMeetGatewayFromTool({
 							config,
 							action: "test_speech",
-							raw: rawWithRequester
+							raw: rawWithRequester,
+							runtime: useTrustedRuntime ? api.runtime : void 0
 						}));
-						case "test_listen": return json(await callGoogleMeetGatewayFromTool({
+						case "test_listen": return jsonResult(await callGoogleMeetGatewayFromTool({
 							config,
 							action: "test_listen",
 							raw
 						}));
-						case "status": return json(await callGoogleMeetGatewayFromTool({
+						case "status": return jsonResult(await callGoogleMeetGatewayFromTool({
 							config,
 							action: "status",
 							raw
 						}));
-						case "recover_current_tab": return json(await callGoogleMeetGatewayFromTool({
+						case "recover_current_tab": return jsonResult(await callGoogleMeetGatewayFromTool({
 							config,
 							action: "recover_current_tab",
 							raw
 						}));
-						case "setup_status": return json(await callGoogleMeetGatewayFromTool({
+						case "setup_status": return jsonResult(await callGoogleMeetGatewayFromTool({
 							config,
 							action: "setup_status",
 							raw
 						}));
 						case "resolve_space": {
 							const { token: _token, ...result } = await resolveSpaceFromParams(config, raw);
-							return json(result);
+							return jsonResult(result);
 						}
 						case "preflight": {
 							const { meeting, token, space } = await resolveSpaceFromParams(config, raw);
-							return json(buildGoogleMeetPreflightReport({
+							return jsonResult(buildGoogleMeetPreflightReport({
 								input: meeting,
 								space,
 								previewAcknowledged: config.preview.enrollmentAcknowledged,
@@ -4669,7 +4705,7 @@ var google_meet_default = definePluginEntry({
 								raw,
 								accessToken: token.accessToken
 							});
-							return json({
+							return jsonResult({
 								...await fetchLatestGoogleMeetConferenceRecord({
 									accessToken: token.accessToken,
 									meeting: resolved.meeting
@@ -4680,7 +4716,7 @@ var google_meet_default = definePluginEntry({
 						case "calendar_events": {
 							const token = await resolveGoogleMeetTokenFromParams(config, raw);
 							const window = raw.today === true ? buildGoogleMeetCalendarDayWindow() : {};
-							return json(await listGoogleMeetCalendarEvents({
+							return jsonResult(await listGoogleMeetCalendarEvents({
 								accessToken: token.accessToken,
 								calendarId: normalizeOptionalString(raw.calendarId),
 								eventQuery: normalizeOptionalString(raw.event),
@@ -4689,7 +4725,7 @@ var google_meet_default = definePluginEntry({
 						}
 						case "artifacts": {
 							const resolved = await resolveArtifactQueryFromParams(config, raw);
-							return json(await fetchGoogleMeetArtifacts({
+							return jsonResult(await fetchGoogleMeetArtifacts({
 								accessToken: resolved.token.accessToken,
 								meeting: resolved.meeting,
 								conferenceRecord: resolved.conferenceRecord,
@@ -4701,7 +4737,7 @@ var google_meet_default = definePluginEntry({
 						}
 						case "attendance": {
 							const resolved = await resolveArtifactQueryFromParams(config, raw);
-							return json(await fetchGoogleMeetAttendance({
+							return jsonResult(await fetchGoogleMeetAttendance({
 								accessToken: resolved.token.accessToken,
 								meeting: resolved.meeting,
 								conferenceRecord: resolved.conferenceRecord,
@@ -4712,22 +4748,22 @@ var google_meet_default = definePluginEntry({
 								earlyBeforeMinutes: resolved.earlyBeforeMinutes
 							}));
 						}
-						case "export": return json(await exportGoogleMeetBundleFromParams(config, raw));
+						case "export": return jsonResult(await exportGoogleMeetBundleFromParams(config, raw));
 						case "leave":
 							if (!normalizeOptionalString(raw.sessionId)) throw new Error("sessionId required");
-							return json(await callGoogleMeetGatewayFromTool({
+							return jsonResult(await callGoogleMeetGatewayFromTool({
 								config,
 								action: "leave",
 								raw
 							}));
-						case "end_active_conference": return json(await callGoogleMeetGatewayFromTool({
+						case "end_active_conference": return jsonResult(await callGoogleMeetGatewayFromTool({
 							config,
 							action: "end_active_conference",
 							raw
 						}));
 						case "speak":
 							if (!normalizeOptionalString(raw.sessionId)) throw new Error("sessionId required");
-							return json(await callGoogleMeetGatewayFromTool({
+							return jsonResult(await callGoogleMeetGatewayFromTool({
 								config,
 								action: "speak",
 								raw
@@ -4735,7 +4771,7 @@ var google_meet_default = definePluginEntry({
 						default: throw new Error("unknown google_meet action");
 					}
 				} catch (err) {
-					return json(formatGatewayError(err));
+					return jsonResult(formatGatewayError(err));
 				}
 			}
 		}), { name: "google_meet" });

package/dist/{oauth-DK1mwF2i.js → oauth-75iPDzIn.js}

@@ -1,4 +1,5 @@
 import { n as readGoogleApiErrorDetail } from "./google-api-errors-CDUYkIcK.js";
+import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import { MAX_DATE_TIMESTAMP_MS, resolveDateTimestampMs, resolveExpiresAtMsFromDurationSeconds } from "openclaw/plugin-sdk/number-runtime";
 import { generateHexPkceVerifierChallenge } from "openclaw/plugin-sdk/provider-auth";
@@ -9,6 +10,7 @@ const GOOGLE_MEET_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
 const GOOGLE_MEET_TOKEN_URL = "https://oauth2.googleapis.com/token";
 const GOOGLE_MEET_TOKEN_HOST = "oauth2.googleapis.com";
 const GOOGLE_MEET_DEFAULT_TOKEN_LIFETIME_SECONDS = 3600;
+const GOOGLE_OAUTH_TOKEN_JSON_MAX_BYTES = 256 * 1024;
 const GOOGLE_MEET_SCOPES = [
 	"https://www.googleapis.com/auth/meetings.space.created",
 	"https://www.googleapis.com/auth/meetings.space.readonly",
@@ -23,7 +25,7 @@ function resolveGoogleMeetTokenExpiresAt(value, nowMs = Date.now()) {
 	return resolveExpiresAtMsFromDurationSeconds(value, { nowMs: now }) ?? resolveExpiresAtMsFromDurationSeconds(GOOGLE_MEET_DEFAULT_TOKEN_LIFETIME_SECONDS, { nowMs: now }) ?? now;
 }
 function buildGoogleMeetAuthUrl(params) {
-	return `${GOOGLE_MEET_AUTH_URL}?${new URLSearchParams({
+	const search = new URLSearchParams({
 		client_id: params.clientId,
 		response_type: "code",
 		redirect_uri: params.redirectUri ?? GOOGLE_MEET_REDIRECT_URI,
@@ -33,7 +35,8 @@ function buildGoogleMeetAuthUrl(params) {
 		access_type: "offline",
 		prompt: "consent",
 		state: params.state
-	}).toString()}`;
+	});
+	return `${GOOGLE_MEET_AUTH_URL}?${search.toString()}`;
 }
 async function executeGoogleTokenRequest(body) {
 	const { response, release } = await fetchWithSsrFGuard({
@@ -54,7 +57,7 @@ async function executeGoogleTokenRequest(body) {
 			const detail = await readGoogleApiErrorDetail(response);
 			throw new Error(`Google OAuth token request failed (${response.status}): ${detail}`);
 		}
-		const payload = await response.json();
+		const payload = await readProviderJsonResponse(response, "Google OAuth token", { maxBytes: GOOGLE_OAUTH_TOKEN_JSON_MAX_BYTES });
 		const accessToken = payload.access_token?.trim();
 		if (!accessToken) throw new Error("Google OAuth token response was missing access_token");
 		return {