@openclaw/google-meet 2026.7.2-beta.2 → 2026.7.2-beta.4

package/dist/{cli-SodPSOFX.js → cli-CksOXL4n.js}

@@ -1,17 +1,17 @@
-import { a as buildGoogleMeetCalendarDayWindow, i as resolveGoogleMeetGatewayOperationTimeoutMs, o as findGoogleMeetCalendarEvent, s as listGoogleMeetCalendarEvents } from "./config-BeoHH_z5.js";
-import { _ as fetchGoogleMeetSpace, f as buildGoogleMeetPreflightReport, g as fetchGoogleMeetAttendance, h as fetchGoogleMeetArtifacts, m as endGoogleMeetActiveConference, p as createGoogleMeetSpace, v as fetchLatestGoogleMeetConferenceRecord } from "./chrome-create-DM1XJCOH.js";
+import { n as hasCreateSpaceConfigInput, r as resolveCreateSpaceConfig } from "./create-CNAkrEju.js";
+import { a as buildGoogleMeetCalendarDayWindow, i as resolveGoogleMeetGatewayOperationTimeoutMs, o as findGoogleMeetCalendarEvent, s as listGoogleMeetCalendarEvents } from "./config-BcaS1BDr.js";
+import { _ as endGoogleMeetActiveConference, g as createGoogleMeetSpace, h as fetchGoogleMeetAttendance, m as fetchGoogleMeetArtifacts, p as buildGoogleMeetPreflightReport, v as fetchGoogleMeetSpace, y as fetchLatestGoogleMeetConferenceRecord } from "./chrome-create-DkWXFsK2.js";
 import { buildGoogleMeetAuthUrl, createGoogleMeetOAuthState, createGoogleMeetPkce, exchangeGoogleMeetAuthCode, resolveGoogleMeetAccessToken, waitForGoogleMeetAuthCode } from "./oauth-DOfMKlGp.js";
-import { hasCreateSpaceConfigInput, resolveCreateSpaceConfig } from "./create-CWcFI0ub.js";
-import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { callGatewayFromCli } from "openclaw/plugin-sdk/gateway-runtime";
 import { clampTimerTimeoutMs, parseStrictNonNegativeInteger, parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
+import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import path from "node:path";
 import { mkdir, writeFile } from "node:fs/promises";
+import JSZip from "jszip";
 import { createInterface } from "node:readline/promises";
 import { format } from "node:util";
-import JSZip from "jszip";
 import prettyMilliseconds from "pretty-ms";
-//#region extensions/google-meet/src/cli.ts
+//#region extensions/google-meet/src/cli-shared.ts
 const testing = {
 	parsePositiveNumber,
 	resolveGoogleMeetGatewayOperationTimeoutMs,
@@ -175,112 +175,6 @@ function writeDoctorStatus(status) {
 		}
 	}
 }
-function sanitizeOAuthErrorMessage(error) {
-	return (error instanceof Error ? error.message : String(error)).replace(/(access_token["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]").replace(/(refresh_token["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]").replace(/(client_secret["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]");
-}
-async function buildOAuthDoctorReport(config, options) {
-	const clientId = options.clientId?.trim() || config.oauth.clientId;
-	const clientSecret = options.clientSecret?.trim() || config.oauth.clientSecret;
-	const refreshToken = options.refreshToken?.trim() || config.oauth.refreshToken;
-	const accessToken = options.accessToken?.trim() || config.oauth.accessToken;
-	const expiresAt = parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt;
-	const checks = [];
-	const hasRefreshConfig = Boolean(clientId && refreshToken);
-	if (!hasRefreshConfig && !Boolean(accessToken)) {
-		checks.push({
-			id: "oauth-config",
-			ok: false,
-			message: "Missing Google Meet OAuth credentials. Configure oauth.clientId and oauth.refreshToken, or pass --client-id and --refresh-token."
-		});
-		return {
-			ok: false,
-			configured: false,
-			checks
-		};
-	}
-	checks.push({
-		id: "oauth-config",
-		ok: true,
-		message: hasRefreshConfig ? "Google Meet OAuth refresh credentials are configured" : "Google Meet cached access token is configured"
-	});
-	let token;
-	try {
-		token = await resolveGoogleMeetAccessToken({
-			clientId,
-			clientSecret,
-			refreshToken,
-			accessToken,
-			expiresAt
-		});
-		checks.push({
-			id: "oauth-token",
-			ok: true,
-			message: token.refreshed ? "Refresh token minted an access token" : "Cached access token is still valid"
-		});
-	} catch (error) {
-		checks.push({
-			id: "oauth-token",
-			ok: false,
-			message: sanitizeOAuthErrorMessage(error)
-		});
-		return {
-			ok: false,
-			configured: true,
-			checks
-		};
-	}
-	const report = {
-		ok: true,
-		configured: true,
-		tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
-		expiresAt: token.expiresAt,
-		checks
-	};
-	const meeting = options.meeting?.trim();
-	if (meeting) try {
-		const space = await fetchGoogleMeetSpace({
-			accessToken: token.accessToken,
-			meeting
-		});
-		checks.push({
-			id: "meet-spaces-get",
-			ok: true,
-			message: `Resolved ${space.name}`
-		});
-		report.meetingUri = space.meetingUri;
-	} catch (error) {
-		checks.push({
-			id: "meet-spaces-get",
-			ok: false,
-			message: sanitizeOAuthErrorMessage(error)
-		});
-	}
-	if (options.createSpace) try {
-		const created = await createGoogleMeetSpace({ accessToken: token.accessToken });
-		checks.push({
-			id: "meet-spaces-create",
-			ok: true,
-			message: `Created ${created.space.name}`
-		});
-		report.createdSpace = created.space.name;
-		report.meetingUri = created.meetingUri;
-	} catch (error) {
-		checks.push({
-			id: "meet-spaces-create",
-			ok: false,
-			message: sanitizeOAuthErrorMessage(error)
-		});
-	}
-	report.ok = checks.every((check) => check.ok);
-	return report;
-}
-function writeOAuthDoctorReport(report) {
-	writeStdoutLine("Google Meet OAuth: %s", report.ok ? "OK" : "needs attention");
-	writeStdoutLine("configured: %s", report.configured ? "yes" : "no");
-	if (report.tokenSource) writeStdoutLine("token source: %s", report.tokenSource);
-	if (report.meetingUri) writeStdoutLine("meeting uri: %s", report.meetingUri);
-	for (const check of report.checks) writeStdoutLine("[%s] %s: %s", check.ok ? "ok" : "fail", check.id, check.message);
-}
 function writeRecoverCurrentTabResult(result) {
 	writeStdoutLine("Google Meet current tab: %s", result.found ? "found" : "not found");
 	writeStdoutLine("transport: %s", result.transport);
@@ -321,88 +215,8 @@ function writeLeaveResult(sessionId, result) {
 	}
 	writeStdoutLine("left %s", sessionId);
 }
-function resolveMeetingInput(config, value) {
-	const meeting = value?.trim() || config.defaults.meeting;
-	if (!meeting) throw new Error("Meeting input is required. Pass a URL/meeting code or configure defaults.meeting.");
-	return meeting;
-}
-function resolveOAuthTokenOptions(config, options) {
-	return {
-		clientId: options.clientId?.trim() || config.oauth.clientId,
-		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
-		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
-		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
-		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt
-	};
-}
-function resolveTokenOptions(config, options) {
-	return {
-		meeting: resolveMeetingInput(config, options.meeting),
-		...resolveOAuthTokenOptions(config, options)
-	};
-}
-function hasCalendarLookupOptions(options) {
-	return Boolean(options.today || options.event?.trim());
-}
-async function resolveCalendarMeetingInput(params) {
-	if (!hasCalendarLookupOptions(params.options)) return {};
-	const window = params.options.today ? buildGoogleMeetCalendarDayWindow() : {};
-	const calendarEvent = await findGoogleMeetCalendarEvent({
-		accessToken: params.accessToken,
-		calendarId: params.options.calendar,
-		eventQuery: params.options.event,
-		...window
-	});
-	return {
-		meeting: calendarEvent.meetingUri,
-		calendarEvent
-	};
-}
-async function resolveMeetingForToken(params) {
-	const calendarMeeting = await resolveCalendarMeetingInput({
-		accessToken: params.accessToken,
-		options: params.options
-	});
-	const meeting = calendarMeeting.meeting ?? params.configuredMeeting ?? params.config.defaults.meeting;
-	if (!meeting) throw new Error("Meeting input is required. Pass --meeting, --today, --event, or configure defaults.meeting.");
-	return calendarMeeting.calendarEvent ? {
-		meeting,
-		calendarEvent: calendarMeeting.calendarEvent
-	} : { meeting };
-}
-function resolveCreateTokenOptions(config, options) {
-	return {
-		clientId: options.clientId?.trim() || config.oauth.clientId,
-		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
-		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
-		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
-		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt
-	};
-}
-function resolveArtifactTokenOptions(config, options) {
-	const meeting = options.meeting?.trim() || config.defaults.meeting;
-	const conferenceRecord = options.conferenceRecord?.trim();
-	if (!meeting && !conferenceRecord && !hasCalendarLookupOptions(options)) throw new Error("Meeting input or conference record is required. Pass --meeting, --today, --event, --conference-record, or configure defaults.meeting.");
-	return {
-		meeting,
-		conferenceRecord,
-		clientId: options.clientId?.trim() || config.oauth.clientId,
-		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
-		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
-		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
-		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt,
-		pageSize: parsePositiveIntegerOption(options.pageSize, "page-size"),
-		includeTranscriptEntries: options.transcriptEntries !== false,
-		allConferenceRecords: Boolean(options.allConferenceRecords),
-		includeDocumentBodies: Boolean(options.includeDocBodies),
-		mergeDuplicateParticipants: options.mergeDuplicates !== false,
-		lateAfterMinutes: parseOptionalNumber(options.lateAfterMinutes),
-		earlyBeforeMinutes: parseOptionalNumber(options.earlyBeforeMinutes)
-	};
-}
-function hasCreateOAuth(config, options) {
-	return Boolean(options.accessToken?.trim() || options.refreshToken?.trim() || config.oauth.accessToken || config.oauth.refreshToken);
-}
+//#endregion
+//#region extensions/google-meet/src/cli-export.ts
 function writeArtifactsSummary(result) {
 	if (result.input) writeStdoutLine("input: %s", result.input);
 	if (result.space) writeStdoutLine("space: %s", result.space.name);
@@ -578,9 +392,12 @@ function renderAttendanceMarkdown(result) {
 	}
 	return `${lines.join("\n")}\n`;
 }
+function neutralizeSpreadsheetFormulaCell(text) {
+	return /^[ \t\r\n]*[=+\-@\uFF0B\uFF0D\uFF1D\uFF20]/u.test(text) || /^[\t\r\n]/.test(text) ? `'${text}` : text;
+}
 function csvCell(value) {
-	const text = value === void 0 || value === null ? "" : typeof value === "string" || typeof value === "number" || typeof value === "boolean" ? String(value) : JSON.stringify(value);
-	return /[",\n]/.test(text) ? `"${text.replaceAll("\"", "\"\"")}"` : text;
+	const safeText = neutralizeSpreadsheetFormulaCell(value === void 0 || value === null ? "" : typeof value === "string" || typeof value === "number" || typeof value === "boolean" ? String(value) : JSON.stringify(value));
+	return /[",\r\n]/.test(safeText) ? `"${safeText.replaceAll("\"", "\"\"")}"` : safeText;
 }
 function renderAttendanceCsv(result) {
 	const rows = [[
@@ -778,401 +595,99 @@ async function writeMeetExportBundle(params) {
 	}
 	return result;
 }
-function registerGoogleMeetCli(params) {
-	const callGateway = params.callGatewayFromCli ?? callGatewayFromCli;
-	const operationTimeoutMs = resolveGoogleMeetGatewayOperationTimeoutMs(params.config);
-	const root = params.program.command("googlemeet").description("Google Meet participant utilities").addHelpText("after", () => `\nDocs: https://docs.openclaw.ai/plugins/google-meet\n`);
-	root.command("auth").description("Google Meet OAuth helpers").command("login").description("Run a PKCE OAuth flow and print refresh-token JSON to store in plugin config").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--manual", "Use copy/paste callback flow instead of localhost callback").option("--json", "Print the token payload as JSON", false).option("--timeout-sec <n>", "Local callback timeout in seconds", "300").action(async (options) => {
-		const clientId = options.clientId?.trim() || params.config.oauth.clientId;
-		const clientSecret = options.clientSecret?.trim() || params.config.oauth.clientSecret;
-		if (!clientId) throw new Error("Missing Google Meet OAuth client id. Configure oauth.clientId or pass --client-id.");
-		const { verifier, challenge } = createGoogleMeetPkce();
-		const state = createGoogleMeetOAuthState();
-		const authUrl = buildGoogleMeetAuthUrl({
-			clientId,
-			challenge,
-			state
-		});
-		const tokens = await exchangeGoogleMeetAuthCode({
-			clientId,
-			clientSecret,
-			code: await waitForGoogleMeetAuthCode({
-				state,
-				manual: Boolean(options.manual),
-				timeoutMs: resolveGoogleMeetOAuthCallbackTimeoutMs(options.timeoutSec),
-				authUrl,
-				promptInput,
-				writeLine: (message) => writeStdoutLine("%s", message)
-			}),
-			verifier
+//#endregion
+//#region extensions/google-meet/src/cli-artifact-commands.ts
+function registerGoogleMeetArtifactCommands(context) {
+	const params = context;
+	const { root, resolveArtifactTokenOptions, resolveMeetingForToken } = context;
+	root.command("artifacts").description("List Meet conference records and available participant/artifact metadata").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-transcript-entries", "Skip structured transcript entry lookup").option("--include-doc-bodies", "Export linked transcript and smart-note Google Docs text").option("--format <format>", "Output format: summary or markdown", "summary").option("--output <path>", "Write output to a file instead of stdout").option("--json", "Print JSON output", false).action(async (options) => {
+		const resolved = resolveArtifactTokenOptions(params.config, options);
+		const token = await resolveGoogleMeetAccessToken(resolved);
+		const meeting = resolved.conferenceRecord ? resolved.meeting : (await resolveMeetingForToken({
+			config: params.config,
+			options,
+			accessToken: token.accessToken,
+			configuredMeeting: resolved.meeting
+		})).meeting;
+		const result = await fetchGoogleMeetArtifacts({
+			accessToken: token.accessToken,
+			meeting,
+			conferenceRecord: resolved.conferenceRecord,
+			pageSize: resolved.pageSize,
+			includeTranscriptEntries: resolved.includeTranscriptEntries,
+			allConferenceRecords: resolved.allConferenceRecords,
+			includeDocumentBodies: resolved.includeDocumentBodies
 		});
-		if (!tokens.refreshToken) throw new Error("Google OAuth did not return a refresh token. Re-run the flow with consent and offline access.");
-		const payload = {
-			oauth: {
-				clientId,
-				...clientSecret ? { clientSecret } : {},
-				refreshToken: tokens.refreshToken,
-				accessToken: tokens.accessToken,
-				expiresAt: tokens.expiresAt
-			},
-			scope: tokens.scope,
-			tokenType: tokens.tokenType
-		};
-		if (!options.json) writeStdoutLine("Paste this into plugins.entries.google-meet.config:");
-		writeStdoutJson(payload);
-	});
-	root.command("create").description("Create a new Google Meet space and print its meeting URL").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--access-type <type>", "Google Meet SpaceConfig accessType for API create: OPEN, TRUSTED, or RESTRICTED").option("--entry-point-access <type>", "Google Meet SpaceConfig entryPointAccess for API create: ALL or CREATOR_APP_ONLY").option("--no-join", "Only create the meeting URL; do not join it").option("--transport <transport>", "Join transport: chrome, chrome-node, or twilio").option("--mode <mode>", "Join mode: agent, bidi, or transcribe").option("--message <text>", "Realtime speech to trigger after join").option("--dial-in-number <phone>", "Meet dial-in number for Twilio transport").option("--pin <pin>", "Meet phone PIN; # is appended if omitted").option("--dtmf-sequence <sequence>", "Explicit Twilio DTMF sequence").option("--json", "Print JSON output", false).action(async (options) => {
-		if (options.join !== false) {
-			const delegated = await callGoogleMeetGateway({
-				callGateway,
-				method: "googlemeet.create",
-				payload: { ...options },
-				timeoutMs: operationTimeoutMs
-			});
-			if (delegated.ok) {
-				const payload = delegated.payload;
-				if (options.json) {
-					writeStdoutJson(payload);
-					return;
-				}
-				writeStdoutLine("meeting uri: %s", payload.meetingUri);
-				if (payload.space?.name) writeStdoutLine("space: %s", payload.space.name);
-				if (payload.space?.meetingCode) writeStdoutLine("meeting code: %s", payload.space.meetingCode);
-				if (payload.source) writeStdoutLine("source: %s", payload.source);
-				if (payload.browser?.nodeId) writeStdoutLine("node: %s", payload.browser.nodeId);
-				if (payload.tokenSource) writeStdoutLine("token source: %s", payload.tokenSource);
-				if (payload.joined && payload.join?.session?.id) writeStdoutLine("joined: %s", payload.join.session.id);
-				else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", payload.meetingUri);
-				return;
-			}
-		}
-		if (!hasCreateOAuth(params.config, options)) {
-			if (hasCreateSpaceConfigInput(options)) throw new Error("Google Meet access policy options require OAuth/API room creation. Configure Google Meet OAuth or remove --access-type/--entry-point-access.");
-			const rt = await params.ensureRuntime();
-			const result = await rt.createViaBrowser();
-			const join = options.join !== false ? await rt.join({
-				url: result.meetingUri,
-				transport: options.transport,
-				mode: options.mode,
-				message: options.message,
-				dialInNumber: options.dialInNumber,
-				pin: options.pin,
-				dtmfSequence: options.dtmfSequence
-			}) : void 0;
-			const payload = {
-				source: result.source,
-				meetingUri: result.meetingUri,
-				joined: Boolean(join),
-				...join ? { join } : {},
-				browser: {
-					nodeId: result.nodeId,
-					targetId: result.targetId,
-					browserUrl: result.browserUrl,
-					browserTitle: result.browserTitle
-				}
-			};
-			if (options.json) {
-				writeStdoutJson(payload);
-				return;
-			}
-			writeStdoutLine("meeting uri: %s", result.meetingUri);
-			writeStdoutLine("source: browser");
-			writeStdoutLine("node: %s", result.nodeId);
-			if (join) writeStdoutLine("joined: %s", join.session.id);
-			else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", result.meetingUri);
-			return;
-		}
-		const token = await resolveGoogleMeetAccessToken(resolveCreateTokenOptions(params.config, options));
-		const result = await createGoogleMeetSpace({
-			accessToken: token.accessToken,
-			config: resolveCreateSpaceConfig(options)
-		});
-		const join = options.join !== false ? await (await params.ensureRuntime()).join({
-			url: result.meetingUri,
-			transport: options.transport,
-			mode: options.mode,
-			message: options.message,
-			dialInNumber: options.dialInNumber,
-			pin: options.pin,
-			dtmfSequence: options.dtmfSequence
-		}) : void 0;
 		if (options.json) {
-			writeStdoutJson({
+			await writeCliOutput(options, JSON.stringify({
 				...result,
-				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
-				joined: Boolean(join),
-				...join ? { join } : {}
-			});
+				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+			}, null, 2));
 			return;
 		}
-		writeStdoutLine("meeting uri: %s", result.meetingUri);
-		writeStdoutLine("space: %s", result.space.name);
-		if (result.space.meetingCode) writeStdoutLine("meeting code: %s", result.space.meetingCode);
+		if (options.format === "markdown") {
+			await writeCliOutput(options, renderArtifactsMarkdown(result));
+			return;
+		}
+		if (options.format && options.format !== "summary") throw new Error("Unsupported format. Expected summary or markdown.");
+		writeArtifactsSummary(result);
 		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
-		if (join) writeStdoutLine("joined: %s", join.session.id);
-		else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", result.meetingUri);
 	});
-	root.command("end-active-conference").description("End the active conference for a Google Meet space").argument("[meeting]", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (meeting, options) => {
-		const token = await resolveGoogleMeetAccessToken(resolveOAuthTokenOptions(params.config, options));
-		const result = await endGoogleMeetActiveConference({
+	root.command("attendance").description("List Meet participants and participant sessions").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-merge-duplicates", "Keep duplicate participant resources as separate rows").option("--late-after-minutes <n>", "Mark participants late after this many minutes", "5").option("--early-before-minutes <n>", "Mark early leavers before this many minutes", "5").option("--format <format>", "Output format: summary, markdown, or csv", "summary").option("--output <path>", "Write output to a file instead of stdout").option("--json", "Print JSON output", false).action(async (options) => {
+		const resolved = resolveArtifactTokenOptions(params.config, options);
+		const token = await resolveGoogleMeetAccessToken(resolved);
+		const meeting = resolved.conferenceRecord ? resolved.meeting : (await resolveMeetingForToken({
+			config: params.config,
+			options,
 			accessToken: token.accessToken,
-			meeting: resolveMeetingInput(params.config, meeting ?? options.meeting)
+			configuredMeeting: resolved.meeting
+		})).meeting;
+		const result = await fetchGoogleMeetAttendance({
+			accessToken: token.accessToken,
+			meeting,
+			conferenceRecord: resolved.conferenceRecord,
+			pageSize: resolved.pageSize,
+			allConferenceRecords: resolved.allConferenceRecords,
+			mergeDuplicateParticipants: resolved.mergeDuplicateParticipants,
+			lateAfterMinutes: resolved.lateAfterMinutes,
+			earlyBeforeMinutes: resolved.earlyBeforeMinutes
 		});
 		if (options.json) {
-			writeStdoutJson({
+			await writeCliOutput(options, JSON.stringify({
 				...result,
 				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-			});
-			return;
-		}
-		writeStdoutLine("space: %s", result.space);
-		writeStdoutLine("ended: yes");
-		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
-	});
-	root.command("join").argument("[url]", "Explicit https://meet.google.com/... URL").option("--transport <transport>", "Transport: chrome, chrome-node, or twilio").option("--mode <mode>", "Mode: agent, bidi, or transcribe").option("--message <text>", "Realtime speech to trigger after join").option("--dial-in-number <phone>", "Meet dial-in number for Twilio transport").option("--pin <pin>", "Meet phone PIN; # is appended if omitted").option("--dtmf-sequence <sequence>", "Explicit Twilio DTMF sequence").action(async (url, options) => {
-		const payload = {
-			url: resolveMeetingInput(params.config, url),
-			transport: options.transport,
-			mode: options.mode,
-			message: options.message,
-			dialInNumber: options.dialInNumber,
-			pin: options.pin,
-			dtmfSequence: options.dtmfSequence
-		};
-		const delegated = await callGoogleMeetGateway({
-			callGateway,
-			method: "googlemeet.join",
-			payload,
-			timeoutMs: operationTimeoutMs
-		});
-		if (delegated.ok) {
-			const result = delegated.payload;
-			writeStdoutJson(result.session ?? delegated.payload);
-			return;
-		}
-		writeStdoutJson((await (await params.ensureRuntime()).join(payload)).session);
-	});
-	root.command("test-speech").argument("[url]", "Explicit https://meet.google.com/... URL").option("--transport <transport>", "Transport: chrome, chrome-node, or twilio").option("--mode <mode>", "Mode: agent, bidi, or transcribe").option("--message <text>", "Realtime speech to trigger", "Say exactly: Google Meet speech test complete.").action(async (url, options) => {
-		const payload = {
-			url: resolveMeetingInput(params.config, url),
-			transport: options.transport,
-			mode: options.mode,
-			message: options.message
-		};
-		const delegated = await callGoogleMeetGateway({
-			callGateway,
-			method: "googlemeet.testSpeech",
-			payload,
-			timeoutMs: operationTimeoutMs
-		});
-		if (delegated.ok) {
-			writeStdoutJson(delegated.payload);
+			}, null, 2));
 			return;
 		}
-		writeStdoutJson(await (await params.ensureRuntime()).testSpeech(payload));
-	});
-	root.command("test-listen").argument("[url]", "Explicit https://meet.google.com/... URL").option("--transport <transport>", "Transport: chrome or chrome-node").option("--timeout-ms <ms>", "How long to wait for fresh captions/transcript movement").action(async (url, options) => {
-		const payload = {
-			url: resolveMeetingInput(params.config, url),
-			transport: options.transport,
-			timeoutMs: parsePositiveNumber(options.timeoutMs, "timeout-ms")
-		};
-		const delegated = await callGoogleMeetGateway({
-			callGateway,
-			method: "googlemeet.testListen",
-			payload,
-			timeoutMs: operationTimeoutMs
-		});
-		if (delegated.ok) {
-			writeStdoutJson(delegated.payload);
+		if (options.format === "markdown") {
+			await writeCliOutput(options, renderAttendanceMarkdown(result));
 			return;
 		}
-		writeStdoutJson(await (await params.ensureRuntime()).testListen(payload));
-	});
-	root.command("resolve-space").description("Resolve a Meet URL, meeting code, or spaces/{id} to its canonical space").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
-		const resolved = resolveTokenOptions(params.config, options);
-		const token = await resolveGoogleMeetAccessToken(resolved);
-		const space = await fetchGoogleMeetSpace({
-			accessToken: token.accessToken,
-			meeting: resolved.meeting
-		});
-		if (options.json) {
-			writeStdoutJson(space);
+		if (options.format === "csv") {
+			await writeCliOutput(options, renderAttendanceCsv(result));
 			return;
 		}
-		writeStdoutLine("input: %s", resolved.meeting);
-		writeStdoutLine("space: %s", space.name);
-		if (space.meetingCode) writeStdoutLine("meeting code: %s", space.meetingCode);
-		if (space.meetingUri) writeStdoutLine("meeting uri: %s", space.meetingUri);
-		writeStdoutLine("active conference: %s", space.activeConference ? "yes" : "no");
+		if (options.format && options.format !== "summary") throw new Error("Unsupported format. Expected summary, markdown, or csv.");
+		writeAttendanceSummary(result);
 		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
 	});
-	root.command("preflight").description("Validate OAuth + meeting resolution prerequisites for Meet media work").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
-		const resolved = resolveTokenOptions(params.config, options);
+	root.command("export").description("Write Meet artifacts, attendance, transcript, and raw JSON into a folder").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-transcript-entries", "Skip structured transcript entry lookup").option("--include-doc-bodies", "Export linked transcript and smart-note Google Docs text").option("--no-merge-duplicates", "Keep duplicate participant resources as separate rows").option("--late-after-minutes <n>", "Mark participants late after this many minutes", "5").option("--early-before-minutes <n>", "Mark early leavers before this many minutes", "5").option("--output <dir>", "Output directory").option("--zip", "Also write a portable .zip archive").option("--dry-run", "Fetch export data and print the manifest without writing files", false).option("--json", "Print JSON output", false).action(async (options) => {
+		const resolved = resolveArtifactTokenOptions(params.config, options);
 		const token = await resolveGoogleMeetAccessToken(resolved);
-		const space = await fetchGoogleMeetSpace({
-			accessToken: token.accessToken,
-			meeting: resolved.meeting
-		});
-		const report = buildGoogleMeetPreflightReport({
-			input: resolved.meeting,
-			space,
-			previewAcknowledged: params.config.preview.enrollmentAcknowledged,
-			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-		});
-		if (options.json) {
-			writeStdoutJson(report);
-			return;
-		}
-		writeStdoutLine("input: %s", report.input);
-		writeStdoutLine("resolved space: %s", report.resolvedSpaceName);
-		if (report.meetingCode) writeStdoutLine("meeting code: %s", report.meetingCode);
-		if (report.meetingUri) writeStdoutLine("meeting uri: %s", report.meetingUri);
-		writeStdoutLine("active conference: %s", report.hasActiveConference ? "yes" : "no");
-		writeStdoutLine("preview acknowledged: %s", report.previewAcknowledged ? "yes" : "no");
-		writeStdoutLine("token source: %s", report.tokenSource);
-		if (report.blockers.length === 0) {
-			writeStdoutLine("blockers: none");
-			return;
-		}
-		writeStdoutLine("blockers:");
-		for (const blocker of report.blockers) writeStdoutLine("- %s", blocker);
-	});
-	root.command("latest").description("Find the latest Meet conference record for a meeting").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
-		const token = await resolveGoogleMeetAccessToken(resolveOAuthTokenOptions(params.config, options));
-		const resolved = await resolveMeetingForToken({
+		const meetingResult = resolved.conferenceRecord ? { meeting: resolved.meeting } : await resolveMeetingForToken({
 			config: params.config,
 			options,
 			accessToken: token.accessToken,
-			configuredMeeting: options.meeting?.trim()
+			configuredMeeting: resolved.meeting
 		});
-		const result = await fetchLatestGoogleMeetConferenceRecord({
+		const artifacts = await fetchGoogleMeetArtifacts({
 			accessToken: token.accessToken,
-			meeting: resolved.meeting
-		});
-		if (options.json) {
-			writeStdoutJson({
-				...result,
-				...resolved.calendarEvent ? { calendarEvent: resolved.calendarEvent } : {},
-				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-			});
-			return;
-		}
-		if (resolved.calendarEvent) {
-			writeStdoutLine("calendar event: %s", resolved.calendarEvent.event.summary ?? "untitled");
-			writeStdoutLine("calendar meet: %s", resolved.calendarEvent.meetingUri);
-		}
-		writeLatestConferenceRecordSummary(result);
-		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
-	});
-	root.command("calendar-events").description("Preview Calendar events with Google Meet links").option("--today", "Find Meet links on today's calendar").option("--event <query>", "Find matching calendar events with Meet links").option("--calendar <id>", "Calendar id for lookup", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
-		const token = await resolveGoogleMeetAccessToken(resolveOAuthTokenOptions(params.config, options));
-		const window = options.today ? buildGoogleMeetCalendarDayWindow() : {};
-		const result = await listGoogleMeetCalendarEvents({
-			accessToken: token.accessToken,
-			calendarId: options.calendar,
-			eventQuery: options.event,
-			...window
-		});
-		const payload = {
-			...result,
-			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-		};
-		if (options.json) {
-			writeStdoutJson(payload);
-			return;
-		}
-		writeCalendarEventsSummary(result);
-		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
-	});
-	root.command("artifacts").description("List Meet conference records and available participant/artifact metadata").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-transcript-entries", "Skip structured transcript entry lookup").option("--include-doc-bodies", "Export linked transcript and smart-note Google Docs text").option("--format <format>", "Output format: summary or markdown", "summary").option("--output <path>", "Write output to a file instead of stdout").option("--json", "Print JSON output", false).action(async (options) => {
-		const resolved = resolveArtifactTokenOptions(params.config, options);
-		const token = await resolveGoogleMeetAccessToken(resolved);
-		const meeting = resolved.conferenceRecord ? resolved.meeting : (await resolveMeetingForToken({
-			config: params.config,
-			options,
-			accessToken: token.accessToken,
-			configuredMeeting: resolved.meeting
-		})).meeting;
-		const result = await fetchGoogleMeetArtifacts({
-			accessToken: token.accessToken,
-			meeting,
-			conferenceRecord: resolved.conferenceRecord,
-			pageSize: resolved.pageSize,
-			includeTranscriptEntries: resolved.includeTranscriptEntries,
-			allConferenceRecords: resolved.allConferenceRecords,
-			includeDocumentBodies: resolved.includeDocumentBodies
-		});
-		if (options.json) {
-			await writeCliOutput(options, JSON.stringify({
-				...result,
-				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-			}, null, 2));
-			return;
-		}
-		if (options.format === "markdown") {
-			await writeCliOutput(options, renderArtifactsMarkdown(result));
-			return;
-		}
-		if (options.format && options.format !== "summary") throw new Error("Unsupported format. Expected summary or markdown.");
-		writeArtifactsSummary(result);
-		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
-	});
-	root.command("attendance").description("List Meet participants and participant sessions").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-merge-duplicates", "Keep duplicate participant resources as separate rows").option("--late-after-minutes <n>", "Mark participants late after this many minutes", "5").option("--early-before-minutes <n>", "Mark early leavers before this many minutes", "5").option("--format <format>", "Output format: summary, markdown, or csv", "summary").option("--output <path>", "Write output to a file instead of stdout").option("--json", "Print JSON output", false).action(async (options) => {
-		const resolved = resolveArtifactTokenOptions(params.config, options);
-		const token = await resolveGoogleMeetAccessToken(resolved);
-		const meeting = resolved.conferenceRecord ? resolved.meeting : (await resolveMeetingForToken({
-			config: params.config,
-			options,
-			accessToken: token.accessToken,
-			configuredMeeting: resolved.meeting
-		})).meeting;
-		const result = await fetchGoogleMeetAttendance({
-			accessToken: token.accessToken,
-			meeting,
-			conferenceRecord: resolved.conferenceRecord,
-			pageSize: resolved.pageSize,
-			allConferenceRecords: resolved.allConferenceRecords,
-			mergeDuplicateParticipants: resolved.mergeDuplicateParticipants,
-			lateAfterMinutes: resolved.lateAfterMinutes,
-			earlyBeforeMinutes: resolved.earlyBeforeMinutes
-		});
-		if (options.json) {
-			await writeCliOutput(options, JSON.stringify({
-				...result,
-				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-			}, null, 2));
-			return;
-		}
-		if (options.format === "markdown") {
-			await writeCliOutput(options, renderAttendanceMarkdown(result));
-			return;
-		}
-		if (options.format === "csv") {
-			await writeCliOutput(options, renderAttendanceCsv(result));
-			return;
-		}
-		if (options.format && options.format !== "summary") throw new Error("Unsupported format. Expected summary, markdown, or csv.");
-		writeAttendanceSummary(result);
-		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
-	});
-	root.command("export").description("Write Meet artifacts, attendance, transcript, and raw JSON into a folder").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-transcript-entries", "Skip structured transcript entry lookup").option("--include-doc-bodies", "Export linked transcript and smart-note Google Docs text").option("--no-merge-duplicates", "Keep duplicate participant resources as separate rows").option("--late-after-minutes <n>", "Mark participants late after this many minutes", "5").option("--early-before-minutes <n>", "Mark early leavers before this many minutes", "5").option("--output <dir>", "Output directory").option("--zip", "Also write a portable .zip archive").option("--dry-run", "Fetch export data and print the manifest without writing files", false).option("--json", "Print JSON output", false).action(async (options) => {
-		const resolved = resolveArtifactTokenOptions(params.config, options);
-		const token = await resolveGoogleMeetAccessToken(resolved);
-		const meetingResult = resolved.conferenceRecord ? { meeting: resolved.meeting } : await resolveMeetingForToken({
-			config: params.config,
-			options,
-			accessToken: token.accessToken,
-			configuredMeeting: resolved.meeting
-		});
-		const artifacts = await fetchGoogleMeetArtifacts({
-			accessToken: token.accessToken,
-			meeting: meetingResult.meeting,
-			conferenceRecord: resolved.conferenceRecord,
-			pageSize: resolved.pageSize,
-			includeTranscriptEntries: resolved.includeTranscriptEntries,
-			allConferenceRecords: resolved.allConferenceRecords,
-			includeDocumentBodies: resolved.includeDocumentBodies
+			meeting: meetingResult.meeting,
+			conferenceRecord: resolved.conferenceRecord,
+			pageSize: resolved.pageSize,
+			includeTranscriptEntries: resolved.includeTranscriptEntries,
+			allConferenceRecords: resolved.allConferenceRecords,
+			includeDocumentBodies: resolved.includeDocumentBodies
 		});
 		const attendance = await fetchGoogleMeetAttendance({
 			accessToken: token.accessToken,
@@ -1237,40 +752,118 @@ function registerGoogleMeetCli(params) {
 		for (const file of bundle.files) writeStdoutLine("- %s", file);
 		if (bundle.zipFile) writeStdoutLine("zip: %s", bundle.zipFile);
 	});
-	root.command("status").argument("[session-id]", "Meet session ID").option("--json", "Print JSON output", false).action(async (sessionId) => {
-		const delegated = await callGoogleMeetGateway({
-			callGateway,
-			method: "googlemeet.status",
-			payload: { sessionId }
+}
+//#endregion
+//#region extensions/google-meet/src/cli-doctor.ts
+function sanitizeOAuthErrorMessage(error) {
+	return (error instanceof Error ? error.message : String(error)).replace(/(access_token["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]").replace(/(refresh_token["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]").replace(/(client_secret["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]");
+}
+async function buildOAuthDoctorReport(config, options) {
+	const clientId = options.clientId?.trim() || config.oauth.clientId;
+	const clientSecret = options.clientSecret?.trim() || config.oauth.clientSecret;
+	const refreshToken = options.refreshToken?.trim() || config.oauth.refreshToken;
+	const accessToken = options.accessToken?.trim() || config.oauth.accessToken;
+	const expiresAt = parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt;
+	const checks = [];
+	const hasRefreshConfig = Boolean(clientId && refreshToken);
+	if (!hasRefreshConfig && !Boolean(accessToken)) {
+		checks.push({
+			id: "oauth-config",
+			ok: false,
+			message: "Missing Google Meet OAuth credentials. Configure oauth.clientId and oauth.refreshToken, or pass --client-id and --refresh-token."
 		});
-		if (delegated.ok) {
-			writeStdoutJson(delegated.payload);
-			return;
-		}
-		writeStdoutJson(await (await params.ensureRuntime()).status(sessionId));
+		return {
+			ok: false,
+			configured: false,
+			checks
+		};
+	}
+	checks.push({
+		id: "oauth-config",
+		ok: true,
+		message: hasRefreshConfig ? "Google Meet OAuth refresh credentials are configured" : "Google Meet cached access token is configured"
 	});
-	root.command("transcript").description("Print the bounded caption transcript for a Meet session").argument("<session-id>", "Meet session ID").option("--since <index>", "Resume from the previous response's nextIndex").option("--json", "Print JSON output", false).action(async (sessionId, options) => {
-		const sinceIndex = parseStrictNonNegativeInteger(options.since);
-		if (options.since !== void 0 && sinceIndex === void 0) throw new Error("--since must be a non-negative safe integer");
-		const delegated = await callGoogleMeetGateway({
-			callGateway,
-			method: "googlemeet.transcript",
-			payload: {
-				sessionId,
-				...sinceIndex === void 0 ? {} : { sinceIndex }
-			}
+	let token;
+	try {
+		token = await resolveGoogleMeetAccessToken({
+			clientId,
+			clientSecret,
+			refreshToken,
+			accessToken,
+			expiresAt
 		});
-		const result = delegated.ok ? delegated.payload : await (await params.ensureRuntime()).transcript(sessionId, sinceIndex === void 0 ? {} : { sinceIndex });
-		if (!result.found) throw new Error("session not found");
-		if (options.json) {
-			writeStdoutJson(result);
-			return;
-		}
-		if (result.evicted) writeStdoutLine("# transcript evicted from runtime memory");
-		else if (result.droppedLines) writeStdoutLine("# %d earlier lines dropped by the transcript cap", result.droppedLines);
-		for (const line of result.lines ?? []) writeStdoutLine("%s%s%s", line.at ? `[${line.at}] ` : "", line.speaker ? `${line.speaker}: ` : "", line.text);
-		writeStdoutLine("# nextIndex: %d", result.nextIndex ?? 0);
-	});
+		checks.push({
+			id: "oauth-token",
+			ok: true,
+			message: token.refreshed ? "Refresh token minted an access token" : "Cached access token is still valid"
+		});
+	} catch (error) {
+		checks.push({
+			id: "oauth-token",
+			ok: false,
+			message: sanitizeOAuthErrorMessage(error)
+		});
+		return {
+			ok: false,
+			configured: true,
+			checks
+		};
+	}
+	const report = {
+		ok: true,
+		configured: true,
+		tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
+		expiresAt: token.expiresAt,
+		checks
+	};
+	const meeting = options.meeting?.trim();
+	if (meeting) try {
+		const space = await fetchGoogleMeetSpace({
+			accessToken: token.accessToken,
+			meeting
+		});
+		checks.push({
+			id: "meet-spaces-get",
+			ok: true,
+			message: `Resolved ${space.name}`
+		});
+		report.meetingUri = space.meetingUri;
+	} catch (error) {
+		checks.push({
+			id: "meet-spaces-get",
+			ok: false,
+			message: sanitizeOAuthErrorMessage(error)
+		});
+	}
+	if (options.createSpace) try {
+		const created = await createGoogleMeetSpace({ accessToken: token.accessToken });
+		checks.push({
+			id: "meet-spaces-create",
+			ok: true,
+			message: `Created ${created.space.name}`
+		});
+		report.createdSpace = created.space.name;
+		report.meetingUri = created.meetingUri;
+	} catch (error) {
+		checks.push({
+			id: "meet-spaces-create",
+			ok: false,
+			message: sanitizeOAuthErrorMessage(error)
+		});
+	}
+	report.ok = checks.every((check) => check.ok);
+	return report;
+}
+function writeOAuthDoctorReport(report) {
+	writeStdoutLine("Google Meet OAuth: %s", report.ok ? "OK" : "needs attention");
+	writeStdoutLine("configured: %s", report.configured ? "yes" : "no");
+	if (report.tokenSource) writeStdoutLine("token source: %s", report.tokenSource);
+	if (report.meetingUri) writeStdoutLine("meeting uri: %s", report.meetingUri);
+	for (const check of report.checks) writeStdoutLine("[%s] %s: %s", check.ok ? "ok" : "fail", check.id, check.message);
+}
+function registerGoogleMeetDoctorCommand(context) {
+	const params = context;
+	const { root, callGateway } = context;
 	root.command("doctor").description("Show human-readable Meet session/browser/realtime health").argument("[session-id]", "Meet session ID").option("--oauth", "Verify Google Meet OAuth token refresh without printing secrets", false).option("--meeting <value>", "Also verify spaces.get for a Meet URL, code, or spaces/{id}").option("--create-space", "Also verify spaces.create by creating a throwaway Meet space", false).option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (sessionId, options) => {
 		if (options.oauth) {
 			const report = await buildOAuthDoctorReport(params.config, options);
@@ -1302,11 +895,119 @@ function registerGoogleMeetCli(params) {
 		}
 		writeDoctorStatus(status);
 	});
-	root.command("recover-tab").description("Focus and inspect an existing Google Meet tab").argument("[url]", "Optional Meet URL to match").option("--transport <transport>", "Transport to inspect: chrome or chrome-node").option("--json", "Print JSON output", false).action(async (url, options) => {
-		const result = await (await params.ensureRuntime()).recoverCurrentTab({
-			url,
-			transport: options.transport
-		});
+}
+//#endregion
+//#region extensions/google-meet/src/cli-runtime-commands.ts
+function registerGoogleMeetProbeCommands(context) {
+	const params = context;
+	const { root, callGateway, operationTimeoutMs, resolveMeetingInput } = context;
+	root.command("join").argument("[url]", "Explicit https://meet.google.com/... URL").option("--transport <transport>", "Transport: chrome, chrome-node, or twilio").option("--mode <mode>", "Mode: agent, bidi, or transcribe").option("--message <text>", "Realtime speech to trigger after join").option("--dial-in-number <phone>", "Meet dial-in number for Twilio transport").option("--pin <pin>", "Meet phone PIN; # is appended if omitted").option("--dtmf-sequence <sequence>", "Explicit Twilio DTMF sequence").action(async (url, options) => {
+		const payload = {
+			url: resolveMeetingInput(params.config, url),
+			transport: options.transport,
+			mode: options.mode,
+			message: options.message,
+			dialInNumber: options.dialInNumber,
+			pin: options.pin,
+			dtmfSequence: options.dtmfSequence
+		};
+		const delegated = await callGoogleMeetGateway({
+			callGateway,
+			method: "googlemeet.join",
+			payload,
+			timeoutMs: operationTimeoutMs
+		});
+		if (delegated.ok) {
+			const result = delegated.payload;
+			writeStdoutJson(result.session ?? delegated.payload);
+			return;
+		}
+		writeStdoutJson((await (await params.ensureRuntime()).join(payload)).session);
+	});
+	root.command("test-speech").argument("[url]", "Explicit https://meet.google.com/... URL").option("--transport <transport>", "Transport: chrome, chrome-node, or twilio").option("--mode <mode>", "Mode: agent, bidi, or transcribe").option("--message <text>", "Realtime speech to trigger", "Say exactly: Google Meet speech test complete.").action(async (url, options) => {
+		const payload = {
+			url: resolveMeetingInput(params.config, url),
+			transport: options.transport,
+			mode: options.mode,
+			message: options.message
+		};
+		const delegated = await callGoogleMeetGateway({
+			callGateway,
+			method: "googlemeet.testSpeech",
+			payload,
+			timeoutMs: operationTimeoutMs
+		});
+		if (delegated.ok) {
+			writeStdoutJson(delegated.payload);
+			return;
+		}
+		writeStdoutJson(await (await params.ensureRuntime()).testSpeech(payload));
+	});
+	root.command("test-listen").argument("[url]", "Explicit https://meet.google.com/... URL").option("--transport <transport>", "Transport: chrome or chrome-node").option("--timeout-ms <ms>", "How long to wait for fresh captions/transcript movement").action(async (url, options) => {
+		const payload = {
+			url: resolveMeetingInput(params.config, url),
+			transport: options.transport,
+			timeoutMs: parsePositiveNumber(options.timeoutMs, "timeout-ms")
+		};
+		const delegated = await callGoogleMeetGateway({
+			callGateway,
+			method: "googlemeet.testListen",
+			payload,
+			timeoutMs: operationTimeoutMs
+		});
+		if (delegated.ok) {
+			writeStdoutJson(delegated.payload);
+			return;
+		}
+		writeStdoutJson(await (await params.ensureRuntime()).testListen(payload));
+	});
+}
+function registerGoogleMeetSessionCommands(context) {
+	const params = context;
+	const { root, callGateway } = context;
+	root.command("status").argument("[session-id]", "Meet session ID").option("--json", "Print JSON output", false).action(async (sessionId) => {
+		const delegated = await callGoogleMeetGateway({
+			callGateway,
+			method: "googlemeet.status",
+			payload: { sessionId }
+		});
+		if (delegated.ok) {
+			writeStdoutJson(delegated.payload);
+			return;
+		}
+		writeStdoutJson(await (await params.ensureRuntime()).status(sessionId));
+	});
+	root.command("transcript").description("Print the bounded caption transcript for a Meet session").argument("<session-id>", "Meet session ID").option("--since <index>", "Resume from the previous response's nextIndex").option("--json", "Print JSON output", false).action(async (sessionId, options) => {
+		const sinceIndex = parseStrictNonNegativeInteger(options.since);
+		if (options.since !== void 0 && sinceIndex === void 0) throw new Error("--since must be a non-negative safe integer");
+		const delegated = await callGoogleMeetGateway({
+			callGateway,
+			method: "googlemeet.transcript",
+			payload: {
+				sessionId,
+				...sinceIndex === void 0 ? {} : { sinceIndex }
+			}
+		});
+		const result = delegated.ok ? delegated.payload : await (await params.ensureRuntime()).transcript(sessionId, sinceIndex === void 0 ? {} : { sinceIndex });
+		if (!result.found) throw new Error("session not found");
+		if (options.json) {
+			writeStdoutJson(result);
+			return;
+		}
+		if (result.evicted) writeStdoutLine("# transcript evicted from runtime memory");
+		else if (result.droppedLines) writeStdoutLine("# %d earlier lines dropped by the transcript cap", result.droppedLines);
+		for (const line of result.lines ?? []) writeStdoutLine("%s%s%s", line.at ? `[${line.at}] ` : "", line.speaker ? `${line.speaker}: ` : "", line.text);
+		writeStdoutLine("# nextIndex: %d", result.nextIndex ?? 0);
+	});
+}
+function registerGoogleMeetLifecycleCommands(context) {
+	const params = context;
+	const { root, callGateway } = context;
+	root.command("recover-tab").description("Focus and inspect an existing Google Meet tab").argument("[url]", "Optional Meet URL to match").option("--transport <transport>", "Transport to inspect: chrome or chrome-node").option("--json", "Print JSON output", false).action(async (url, options) => {
+		const result = await (await params.ensureRuntime()).recoverCurrentTab({
+			url,
+			transport: options.transport
+		});
 		if (options.json) {
 			writeStdoutJson(result);
 			return;
@@ -1363,4 +1064,367 @@ function registerGoogleMeetCli(params) {
 	});
 }
 //#endregion
+//#region extensions/google-meet/src/cli-space-commands.ts
+function registerGoogleMeetCreateCommands(context) {
+	const params = context;
+	const { root, callGateway, operationTimeoutMs, hasCreateOAuth, resolveCreateTokenOptions, resolveMeetingInput, resolveOAuthTokenOptions } = context;
+	root.command("create").description("Create a new Google Meet space and print its meeting URL").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--access-type <type>", "Google Meet SpaceConfig accessType for API create: OPEN, TRUSTED, or RESTRICTED").option("--entry-point-access <type>", "Google Meet SpaceConfig entryPointAccess for API create: ALL or CREATOR_APP_ONLY").option("--no-join", "Only create the meeting URL; do not join it").option("--transport <transport>", "Join transport: chrome, chrome-node, or twilio").option("--mode <mode>", "Join mode: agent, bidi, or transcribe").option("--message <text>", "Realtime speech to trigger after join").option("--dial-in-number <phone>", "Meet dial-in number for Twilio transport").option("--pin <pin>", "Meet phone PIN; # is appended if omitted").option("--dtmf-sequence <sequence>", "Explicit Twilio DTMF sequence").option("--json", "Print JSON output", false).action(async (options) => {
+		if (options.join !== false) {
+			const delegated = await callGoogleMeetGateway({
+				callGateway,
+				method: "googlemeet.create",
+				payload: { ...options },
+				timeoutMs: operationTimeoutMs
+			});
+			if (delegated.ok) {
+				const payload = delegated.payload;
+				if (options.json) {
+					writeStdoutJson(payload);
+					return;
+				}
+				writeStdoutLine("meeting uri: %s", payload.meetingUri);
+				if (payload.space?.name) writeStdoutLine("space: %s", payload.space.name);
+				if (payload.space?.meetingCode) writeStdoutLine("meeting code: %s", payload.space.meetingCode);
+				if (payload.source) writeStdoutLine("source: %s", payload.source);
+				if (payload.browser?.nodeId) writeStdoutLine("node: %s", payload.browser.nodeId);
+				if (payload.tokenSource) writeStdoutLine("token source: %s", payload.tokenSource);
+				if (payload.joined && payload.join?.session?.id) writeStdoutLine("joined: %s", payload.join.session.id);
+				else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", payload.meetingUri);
+				return;
+			}
+		}
+		if (!hasCreateOAuth(params.config, options)) {
+			if (hasCreateSpaceConfigInput(options)) throw new Error("Google Meet access policy options require OAuth/API room creation. Configure Google Meet OAuth or remove --access-type/--entry-point-access.");
+			const rt = await params.ensureRuntime();
+			const result = await rt.createViaBrowser();
+			const join = options.join !== false ? await rt.join({
+				url: result.meetingUri,
+				transport: options.transport,
+				mode: options.mode,
+				message: options.message,
+				dialInNumber: options.dialInNumber,
+				pin: options.pin,
+				dtmfSequence: options.dtmfSequence
+			}) : void 0;
+			const payload = {
+				source: result.source,
+				meetingUri: result.meetingUri,
+				joined: Boolean(join),
+				...join ? { join } : {},
+				browser: {
+					nodeId: result.nodeId,
+					targetId: result.targetId,
+					browserUrl: result.browserUrl,
+					browserTitle: result.browserTitle
+				}
+			};
+			if (options.json) {
+				writeStdoutJson(payload);
+				return;
+			}
+			writeStdoutLine("meeting uri: %s", result.meetingUri);
+			writeStdoutLine("source: browser");
+			writeStdoutLine("node: %s", result.nodeId);
+			if (join) writeStdoutLine("joined: %s", join.session.id);
+			else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", result.meetingUri);
+			return;
+		}
+		const token = await resolveGoogleMeetAccessToken(resolveCreateTokenOptions(params.config, options));
+		const result = await createGoogleMeetSpace({
+			accessToken: token.accessToken,
+			config: resolveCreateSpaceConfig(options)
+		});
+		const join = options.join !== false ? await (await params.ensureRuntime()).join({
+			url: result.meetingUri,
+			transport: options.transport,
+			mode: options.mode,
+			message: options.message,
+			dialInNumber: options.dialInNumber,
+			pin: options.pin,
+			dtmfSequence: options.dtmfSequence
+		}) : void 0;
+		if (options.json) {
+			writeStdoutJson({
+				...result,
+				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
+				joined: Boolean(join),
+				...join ? { join } : {}
+			});
+			return;
+		}
+		writeStdoutLine("meeting uri: %s", result.meetingUri);
+		writeStdoutLine("space: %s", result.space.name);
+		if (result.space.meetingCode) writeStdoutLine("meeting code: %s", result.space.meetingCode);
+		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
+		if (join) writeStdoutLine("joined: %s", join.session.id);
+		else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", result.meetingUri);
+	});
+	root.command("end-active-conference").description("End the active conference for a Google Meet space").argument("[meeting]", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (meeting, options) => {
+		const token = await resolveGoogleMeetAccessToken(resolveOAuthTokenOptions(params.config, options));
+		const result = await endGoogleMeetActiveConference({
+			accessToken: token.accessToken,
+			meeting: resolveMeetingInput(params.config, meeting ?? options.meeting)
+		});
+		if (options.json) {
+			writeStdoutJson({
+				...result,
+				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+			});
+			return;
+		}
+		writeStdoutLine("space: %s", result.space);
+		writeStdoutLine("ended: yes");
+		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
+	});
+}
+function registerGoogleMeetApiCommands(context) {
+	const params = context;
+	const { root, resolveMeetingForToken, resolveOAuthTokenOptions, resolveTokenOptions } = context;
+	root.command("resolve-space").description("Resolve a Meet URL, meeting code, or spaces/{id} to its canonical space").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
+		const resolved = resolveTokenOptions(params.config, options);
+		const token = await resolveGoogleMeetAccessToken(resolved);
+		const space = await fetchGoogleMeetSpace({
+			accessToken: token.accessToken,
+			meeting: resolved.meeting
+		});
+		if (options.json) {
+			writeStdoutJson(space);
+			return;
+		}
+		writeStdoutLine("input: %s", resolved.meeting);
+		writeStdoutLine("space: %s", space.name);
+		if (space.meetingCode) writeStdoutLine("meeting code: %s", space.meetingCode);
+		if (space.meetingUri) writeStdoutLine("meeting uri: %s", space.meetingUri);
+		writeStdoutLine("active conference: %s", space.activeConference ? "yes" : "no");
+		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
+	});
+	root.command("preflight").description("Validate OAuth + meeting resolution prerequisites for Meet media work").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
+		const resolved = resolveTokenOptions(params.config, options);
+		const token = await resolveGoogleMeetAccessToken(resolved);
+		const space = await fetchGoogleMeetSpace({
+			accessToken: token.accessToken,
+			meeting: resolved.meeting
+		});
+		const report = buildGoogleMeetPreflightReport({
+			input: resolved.meeting,
+			space,
+			previewAcknowledged: params.config.preview.enrollmentAcknowledged,
+			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+		});
+		if (options.json) {
+			writeStdoutJson(report);
+			return;
+		}
+		writeStdoutLine("input: %s", report.input);
+		writeStdoutLine("resolved space: %s", report.resolvedSpaceName);
+		if (report.meetingCode) writeStdoutLine("meeting code: %s", report.meetingCode);
+		if (report.meetingUri) writeStdoutLine("meeting uri: %s", report.meetingUri);
+		writeStdoutLine("active conference: %s", report.hasActiveConference ? "yes" : "no");
+		writeStdoutLine("preview acknowledged: %s", report.previewAcknowledged ? "yes" : "no");
+		writeStdoutLine("token source: %s", report.tokenSource);
+		if (report.blockers.length === 0) {
+			writeStdoutLine("blockers: none");
+			return;
+		}
+		writeStdoutLine("blockers:");
+		for (const blocker of report.blockers) writeStdoutLine("- %s", blocker);
+	});
+	root.command("latest").description("Find the latest Meet conference record for a meeting").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
+		const token = await resolveGoogleMeetAccessToken(resolveOAuthTokenOptions(params.config, options));
+		const resolved = await resolveMeetingForToken({
+			config: params.config,
+			options,
+			accessToken: token.accessToken,
+			configuredMeeting: options.meeting?.trim()
+		});
+		const result = await fetchLatestGoogleMeetConferenceRecord({
+			accessToken: token.accessToken,
+			meeting: resolved.meeting
+		});
+		if (options.json) {
+			writeStdoutJson({
+				...result,
+				...resolved.calendarEvent ? { calendarEvent: resolved.calendarEvent } : {},
+				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+			});
+			return;
+		}
+		if (resolved.calendarEvent) {
+			writeStdoutLine("calendar event: %s", resolved.calendarEvent.event.summary ?? "untitled");
+			writeStdoutLine("calendar meet: %s", resolved.calendarEvent.meetingUri);
+		}
+		writeLatestConferenceRecordSummary(result);
+		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
+	});
+	root.command("calendar-events").description("Preview Calendar events with Google Meet links").option("--today", "Find Meet links on today's calendar").option("--event <query>", "Find matching calendar events with Meet links").option("--calendar <id>", "Calendar id for lookup", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
+		const token = await resolveGoogleMeetAccessToken(resolveOAuthTokenOptions(params.config, options));
+		const window = options.today ? buildGoogleMeetCalendarDayWindow() : {};
+		const result = await listGoogleMeetCalendarEvents({
+			accessToken: token.accessToken,
+			calendarId: options.calendar,
+			eventQuery: options.event,
+			...window
+		});
+		const payload = {
+			...result,
+			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+		};
+		if (options.json) {
+			writeStdoutJson(payload);
+			return;
+		}
+		writeCalendarEventsSummary(result);
+		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
+	});
+}
+//#endregion
+//#region extensions/google-meet/src/cli.ts
+function resolveMeetingInput(config, value) {
+	const meeting = value?.trim() || config.defaults.meeting;
+	if (!meeting) throw new Error("Meeting input is required. Pass a URL/meeting code or configure defaults.meeting.");
+	return meeting;
+}
+function resolveOAuthTokenOptions(config, options) {
+	return {
+		clientId: options.clientId?.trim() || config.oauth.clientId,
+		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
+		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
+		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
+		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt
+	};
+}
+function resolveTokenOptions(config, options) {
+	return {
+		meeting: resolveMeetingInput(config, options.meeting),
+		...resolveOAuthTokenOptions(config, options)
+	};
+}
+function hasCalendarLookupOptions(options) {
+	return Boolean(options.today || options.event?.trim());
+}
+async function resolveCalendarMeetingInput(params) {
+	if (!hasCalendarLookupOptions(params.options)) return {};
+	const window = params.options.today ? buildGoogleMeetCalendarDayWindow() : {};
+	const calendarEvent = await findGoogleMeetCalendarEvent({
+		accessToken: params.accessToken,
+		calendarId: params.options.calendar,
+		eventQuery: params.options.event,
+		...window
+	});
+	return {
+		meeting: calendarEvent.meetingUri,
+		calendarEvent
+	};
+}
+async function resolveMeetingForToken(params) {
+	const calendarMeeting = await resolveCalendarMeetingInput({
+		accessToken: params.accessToken,
+		options: params.options
+	});
+	const meeting = calendarMeeting.meeting ?? params.configuredMeeting ?? params.config.defaults.meeting;
+	if (!meeting) throw new Error("Meeting input is required. Pass --meeting, --today, --event, or configure defaults.meeting.");
+	return calendarMeeting.calendarEvent ? {
+		meeting,
+		calendarEvent: calendarMeeting.calendarEvent
+	} : { meeting };
+}
+function resolveCreateTokenOptions(config, options) {
+	return {
+		clientId: options.clientId?.trim() || config.oauth.clientId,
+		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
+		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
+		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
+		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt
+	};
+}
+function resolveArtifactTokenOptions(config, options) {
+	const meeting = options.meeting?.trim() || config.defaults.meeting;
+	const conferenceRecord = options.conferenceRecord?.trim();
+	if (!meeting && !conferenceRecord && !hasCalendarLookupOptions(options)) throw new Error("Meeting input or conference record is required. Pass --meeting, --today, --event, --conference-record, or configure defaults.meeting.");
+	return {
+		meeting,
+		conferenceRecord,
+		clientId: options.clientId?.trim() || config.oauth.clientId,
+		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
+		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
+		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
+		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt,
+		pageSize: parsePositiveIntegerOption(options.pageSize, "page-size"),
+		includeTranscriptEntries: options.transcriptEntries !== false,
+		allConferenceRecords: Boolean(options.allConferenceRecords),
+		includeDocumentBodies: Boolean(options.includeDocBodies),
+		mergeDuplicateParticipants: options.mergeDuplicates !== false,
+		lateAfterMinutes: parseOptionalNumber(options.lateAfterMinutes),
+		earlyBeforeMinutes: parseOptionalNumber(options.earlyBeforeMinutes)
+	};
+}
+function hasCreateOAuth(config, options) {
+	return Boolean(options.accessToken?.trim() || options.refreshToken?.trim() || config.oauth.accessToken || config.oauth.refreshToken);
+}
+function registerGoogleMeetCli(params) {
+	const callGateway = params.callGatewayFromCli ?? callGatewayFromCli;
+	const operationTimeoutMs = resolveGoogleMeetGatewayOperationTimeoutMs(params.config);
+	const root = params.program.command("googlemeet").description("Google Meet participant utilities").addHelpText("after", () => `\nDocs: https://docs.openclaw.ai/plugins/google-meet\n`);
+	root.command("auth").description("Google Meet OAuth helpers").command("login").description("Run a PKCE OAuth flow and print refresh-token JSON to store in plugin config").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--manual", "Use copy/paste callback flow instead of localhost callback").option("--json", "Print the token payload as JSON", false).option("--timeout-sec <n>", "Local callback timeout in seconds", "300").action(async (options) => {
+		const clientId = options.clientId?.trim() || params.config.oauth.clientId;
+		const clientSecret = options.clientSecret?.trim() || params.config.oauth.clientSecret;
+		if (!clientId) throw new Error("Missing Google Meet OAuth client id. Configure oauth.clientId or pass --client-id.");
+		const { verifier, challenge } = createGoogleMeetPkce();
+		const state = createGoogleMeetOAuthState();
+		const authUrl = buildGoogleMeetAuthUrl({
+			clientId,
+			challenge,
+			state
+		});
+		const tokens = await exchangeGoogleMeetAuthCode({
+			clientId,
+			clientSecret,
+			code: await waitForGoogleMeetAuthCode({
+				state,
+				manual: Boolean(options.manual),
+				timeoutMs: resolveGoogleMeetOAuthCallbackTimeoutMs(options.timeoutSec),
+				authUrl,
+				promptInput,
+				writeLine: (message) => writeStdoutLine("%s", message)
+			}),
+			verifier
+		});
+		if (!tokens.refreshToken) throw new Error("Google OAuth did not return a refresh token. Re-run the flow with consent and offline access.");
+		const payload = {
+			oauth: {
+				clientId,
+				...clientSecret ? { clientSecret } : {},
+				refreshToken: tokens.refreshToken,
+				accessToken: tokens.accessToken,
+				expiresAt: tokens.expiresAt
+			},
+			scope: tokens.scope,
+			tokenType: tokens.tokenType
+		};
+		if (!options.json) writeStdoutLine("Paste this into plugins.entries.google-meet.config:");
+		writeStdoutJson(payload);
+	});
+	const context = {
+		root,
+		config: params.config,
+		ensureRuntime: params.ensureRuntime,
+		callGateway,
+		operationTimeoutMs,
+		resolveMeetingInput,
+		resolveOAuthTokenOptions,
+		resolveTokenOptions,
+		resolveMeetingForToken,
+		resolveCreateTokenOptions,
+		resolveArtifactTokenOptions,
+		hasCreateOAuth
+	};
+	registerGoogleMeetCreateCommands(context);
+	registerGoogleMeetProbeCommands(context);
+	registerGoogleMeetApiCommands(context);
+	registerGoogleMeetArtifactCommands(context);
+	registerGoogleMeetSessionCommands(context);
+	registerGoogleMeetDoctorCommand(context);
+	registerGoogleMeetLifecycleCommands(context);
+}
+//#endregion
 export { buildGoogleMeetExportManifest, googleMeetExportFileNames, registerGoogleMeetCli, testing, writeMeetExportBundle };