@openclaw/google-meet 2026.7.2-beta.5 → 2026.7.33

package/dist/{cli-GeuAaEIy.js → .setup/cli-DfOl5mwt.mjs}

@@ -1,17 +1,15 @@
-import { n as hasCreateSpaceConfigInput, r as resolveCreateSpaceConfig } from "./create-af1MDlus.js";
-import { a as buildGoogleMeetCalendarDayWindow, i as resolveGoogleMeetGatewayOperationTimeoutMs, o as findGoogleMeetCalendarEvent, s as listGoogleMeetCalendarEvents } from "./config-BcaS1BDr.js";
-import { _ as endGoogleMeetActiveConference, g as createGoogleMeetSpace, h as fetchGoogleMeetAttendance, m as fetchGoogleMeetArtifacts, p as buildGoogleMeetPreflightReport, v as fetchGoogleMeetSpace, y as fetchLatestGoogleMeetConferenceRecord } from "./chrome-create-DMKruRFW.js";
-import { buildGoogleMeetAuthUrl, createGoogleMeetOAuthState, createGoogleMeetPkce, exchangeGoogleMeetAuthCode, resolveGoogleMeetAccessToken, waitForGoogleMeetAuthCode } from "./oauth-DOfMKlGp.js";
-import { callGatewayFromCli } from "openclaw/plugin-sdk/gateway-runtime";
-import { clampTimerTimeoutMs, parseStrictNonNegativeInteger, parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
+import { a as buildGoogleMeetCalendarDayWindow, i as resolveGoogleMeetGatewayOperationTimeoutMs, o as findGoogleMeetCalendarEvent, s as listGoogleMeetCalendarEvents } from "./config-DeJhjNWQ.mjs";
+import { _ as fetchLatestGoogleMeetConferenceRecord, d as buildGoogleMeetPreflightReport, f as createGoogleMeetSpace, g as fetchGoogleMeetSpace, h as fetchGoogleMeetAttendance, m as fetchGoogleMeetArtifacts, p as endGoogleMeetActiveConference } from "./chrome-create-CFNlY-qH.mjs";
+import { buildGoogleMeetAuthUrl, createGoogleMeetOAuthState, createGoogleMeetPkce, exchangeGoogleMeetAuthCode, resolveGoogleMeetAccessToken, waitForGoogleMeetAuthCode } from "./oauth-CtVbvmvR.mjs";
+import { hasCreateSpaceConfigInput, resolveCreateSpaceConfig } from "./create-BVsTTJt1.mjs";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import { callGatewayFromCli } from "openclaw/plugin-sdk/gateway-runtime";
+import { clampTimerTimeoutMs, parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
 import path from "node:path";
 import { mkdir, writeFile } from "node:fs/promises";
-import JSZip from "jszip";
 import { createInterface } from "node:readline/promises";
 import { format } from "node:util";
-import prettyMilliseconds from "pretty-ms";
-//#region extensions/google-meet/src/cli-shared.ts
+//#region extensions/google-meet/src/cli.ts
 const testing = {
 	parsePositiveNumber,
 	resolveGoogleMeetGatewayOperationTimeoutMs,
@@ -105,7 +103,11 @@ async function callGoogleMeetGateway(params) {
 }
 function formatDuration(value) {
 	if (value === void 0) return "n/a";
-	return prettyMilliseconds(Math.max(0, Math.round(value / 1e3) * 1e3), { unitCount: 2 });
+	const totalSeconds = Math.round(value / 1e3);
+	const hours = Math.floor(totalSeconds / 3600);
+	const minutes = Math.floor(totalSeconds % 3600 / 60);
+	const seconds = totalSeconds % 60;
+	return hours > 0 ? `${hours}h ${minutes.toString().padStart(2, "0")}m` : `${minutes}m ${seconds.toString().padStart(2, "0")}s`;
 }
 function writeDoctorStatus(status) {
 	if (!status.found) {
@@ -143,10 +145,10 @@ function writeDoctorStatus(status) {
 		writeStdoutLine("captioning: %s", formatBoolean(health?.captioning));
 		writeStdoutLine("transcript lines: %s", health?.transcriptLines ?? 0);
 		writeStdoutLine("last caption: %s", formatOptional(health?.lastCaptionAt));
-		writeStdoutLine("manual action: %s", formatBoolean(Boolean(health?.manualAction)));
-		if (health?.manualAction) {
-			writeStdoutLine("manual reason: %s", formatOptional(health.manualAction.reason));
-			writeStdoutLine("manual message: %s", formatOptional(health.manualAction.message));
+		writeStdoutLine("manual action: %s", formatBoolean(health?.manualActionRequired));
+		if (health?.manualActionRequired) {
+			writeStdoutLine("manual reason: %s", formatOptional(health.manualActionReason));
+			writeStdoutLine("manual message: %s", formatOptional(health.manualActionMessage));
 		}
 		writeStdoutLine("speech ready: %s", formatBoolean(health?.speechReady));
 		if (health?.speechReady === false) {
@@ -175,6 +177,112 @@ function writeDoctorStatus(status) {
 		}
 	}
 }
+function sanitizeOAuthErrorMessage(error) {
+	return (error instanceof Error ? error.message : String(error)).replace(/(access_token["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]").replace(/(refresh_token["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]").replace(/(client_secret["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]");
+}
+async function buildOAuthDoctorReport(config, options) {
+	const clientId = options.clientId?.trim() || config.oauth.clientId;
+	const clientSecret = options.clientSecret?.trim() || config.oauth.clientSecret;
+	const refreshToken = options.refreshToken?.trim() || config.oauth.refreshToken;
+	const accessToken = options.accessToken?.trim() || config.oauth.accessToken;
+	const expiresAt = parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt;
+	const checks = [];
+	const hasRefreshConfig = Boolean(clientId && refreshToken);
+	if (!hasRefreshConfig && !Boolean(accessToken)) {
+		checks.push({
+			id: "oauth-config",
+			ok: false,
+			message: "Missing Google Meet OAuth credentials. Configure oauth.clientId and oauth.refreshToken, or pass --client-id and --refresh-token."
+		});
+		return {
+			ok: false,
+			configured: false,
+			checks
+		};
+	}
+	checks.push({
+		id: "oauth-config",
+		ok: true,
+		message: hasRefreshConfig ? "Google Meet OAuth refresh credentials are configured" : "Google Meet cached access token is configured"
+	});
+	let token;
+	try {
+		token = await resolveGoogleMeetAccessToken({
+			clientId,
+			clientSecret,
+			refreshToken,
+			accessToken,
+			expiresAt
+		});
+		checks.push({
+			id: "oauth-token",
+			ok: true,
+			message: token.refreshed ? "Refresh token minted an access token" : "Cached access token is still valid"
+		});
+	} catch (error) {
+		checks.push({
+			id: "oauth-token",
+			ok: false,
+			message: sanitizeOAuthErrorMessage(error)
+		});
+		return {
+			ok: false,
+			configured: true,
+			checks
+		};
+	}
+	const report = {
+		ok: true,
+		configured: true,
+		tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
+		expiresAt: token.expiresAt,
+		checks
+	};
+	const meeting = options.meeting?.trim();
+	if (meeting) try {
+		const space = await fetchGoogleMeetSpace({
+			accessToken: token.accessToken,
+			meeting
+		});
+		checks.push({
+			id: "meet-spaces-get",
+			ok: true,
+			message: `Resolved ${space.name}`
+		});
+		report.meetingUri = space.meetingUri;
+	} catch (error) {
+		checks.push({
+			id: "meet-spaces-get",
+			ok: false,
+			message: sanitizeOAuthErrorMessage(error)
+		});
+	}
+	if (options.createSpace) try {
+		const created = await createGoogleMeetSpace({ accessToken: token.accessToken });
+		checks.push({
+			id: "meet-spaces-create",
+			ok: true,
+			message: `Created ${created.space.name}`
+		});
+		report.createdSpace = created.space.name;
+		report.meetingUri = created.meetingUri;
+	} catch (error) {
+		checks.push({
+			id: "meet-spaces-create",
+			ok: false,
+			message: sanitizeOAuthErrorMessage(error)
+		});
+	}
+	report.ok = checks.every((check) => check.ok);
+	return report;
+}
+function writeOAuthDoctorReport(report) {
+	writeStdoutLine("Google Meet OAuth: %s", report.ok ? "OK" : "needs attention");
+	writeStdoutLine("configured: %s", report.configured ? "yes" : "no");
+	if (report.tokenSource) writeStdoutLine("token source: %s", report.tokenSource);
+	if (report.meetingUri) writeStdoutLine("meeting uri: %s", report.meetingUri);
+	for (const check of report.checks) writeStdoutLine("[%s] %s: %s", check.ok ? "ok" : "fail", check.id, check.message);
+}
 function writeRecoverCurrentTabResult(result) {
 	writeStdoutLine("Google Meet current tab: %s", result.found ? "found" : "not found");
 	writeStdoutLine("transport: %s", result.transport);
@@ -208,15 +316,88 @@ function writeRecoverCurrentTabResult(result) {
 		}
 	});
 }
-function writeLeaveResult(sessionId, result) {
-	if (result.browserLeft === false) {
-		writeStdoutLine("left %s, but the browser participant may still be in the call; check session notes", sessionId);
-		return;
-	}
-	writeStdoutLine("left %s", sessionId);
+function resolveMeetingInput(config, value) {
+	const meeting = value?.trim() || config.defaults.meeting;
+	if (!meeting) throw new Error("Meeting input is required. Pass a URL/meeting code or configure defaults.meeting.");
+	return meeting;
+}
+function resolveOAuthTokenOptions(config, options) {
+	return {
+		clientId: options.clientId?.trim() || config.oauth.clientId,
+		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
+		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
+		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
+		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt
+	};
+}
+function resolveTokenOptions(config, options) {
+	return {
+		meeting: resolveMeetingInput(config, options.meeting),
+		...resolveOAuthTokenOptions(config, options)
+	};
+}
+function hasCalendarLookupOptions(options) {
+	return Boolean(options.today || options.event?.trim());
+}
+async function resolveCalendarMeetingInput(params) {
+	if (!hasCalendarLookupOptions(params.options)) return {};
+	const window = params.options.today ? buildGoogleMeetCalendarDayWindow() : {};
+	const calendarEvent = await findGoogleMeetCalendarEvent({
+		accessToken: params.accessToken,
+		calendarId: params.options.calendar,
+		eventQuery: params.options.event,
+		...window
+	});
+	return {
+		meeting: calendarEvent.meetingUri,
+		calendarEvent
+	};
+}
+async function resolveMeetingForToken(params) {
+	const calendarMeeting = await resolveCalendarMeetingInput({
+		accessToken: params.accessToken,
+		options: params.options
+	});
+	const meeting = calendarMeeting.meeting ?? params.configuredMeeting ?? params.config.defaults.meeting;
+	if (!meeting) throw new Error("Meeting input is required. Pass --meeting, --today, --event, or configure defaults.meeting.");
+	return calendarMeeting.calendarEvent ? {
+		meeting,
+		calendarEvent: calendarMeeting.calendarEvent
+	} : { meeting };
+}
+function resolveCreateTokenOptions(config, options) {
+	return {
+		clientId: options.clientId?.trim() || config.oauth.clientId,
+		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
+		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
+		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
+		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt
+	};
+}
+function resolveArtifactTokenOptions(config, options) {
+	const meeting = options.meeting?.trim() || config.defaults.meeting;
+	const conferenceRecord = options.conferenceRecord?.trim();
+	if (!meeting && !conferenceRecord && !hasCalendarLookupOptions(options)) throw new Error("Meeting input or conference record is required. Pass --meeting, --today, --event, --conference-record, or configure defaults.meeting.");
+	return {
+		meeting,
+		conferenceRecord,
+		clientId: options.clientId?.trim() || config.oauth.clientId,
+		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
+		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
+		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
+		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt,
+		pageSize: parsePositiveIntegerOption(options.pageSize, "page-size"),
+		includeTranscriptEntries: options.transcriptEntries !== false,
+		allConferenceRecords: Boolean(options.allConferenceRecords),
+		includeDocumentBodies: Boolean(options.includeDocBodies),
+		mergeDuplicateParticipants: options.mergeDuplicates !== false,
+		lateAfterMinutes: parseOptionalNumber(options.lateAfterMinutes),
+		earlyBeforeMinutes: parseOptionalNumber(options.earlyBeforeMinutes)
+	};
+}
+function hasCreateOAuth(config, options) {
+	return Boolean(options.accessToken?.trim() || options.refreshToken?.trim() || config.oauth.accessToken || config.oauth.refreshToken);
 }
-//#endregion
-//#region extensions/google-meet/src/cli-export.ts
 function writeArtifactsSummary(result) {
 	if (result.input) writeStdoutLine("input: %s", result.input);
 	if (result.space) writeStdoutLine("space: %s", result.space.name);
@@ -392,12 +573,9 @@ function renderAttendanceMarkdown(result) {
 	}
 	return `${lines.join("\n")}\n`;
 }
-function neutralizeSpreadsheetFormulaCell(text) {
-	return /^[ \t\r\n]*[=+\-@\uFF0B\uFF0D\uFF1D\uFF20]/u.test(text) || /^[\t\r\n]/.test(text) ? `'${text}` : text;
-}
 function csvCell(value) {
-	const safeText = neutralizeSpreadsheetFormulaCell(value === void 0 || value === null ? "" : typeof value === "string" || typeof value === "number" || typeof value === "boolean" ? String(value) : JSON.stringify(value));
-	return /[",\r\n]/.test(safeText) ? `"${safeText.replaceAll("\"", "\"\"")}"` : safeText;
+	const text = value === void 0 || value === null ? "" : typeof value === "string" || typeof value === "number" || typeof value === "boolean" ? String(value) : JSON.stringify(value);
+	return /[",\n]/.test(text) ? `"${text.replaceAll("\"", "\"\"")}"` : text;
 }
 function renderAttendanceCsv(result) {
 	const rows = [[
@@ -543,6 +721,81 @@ function googleMeetExportFileNames() {
 function defaultExportDirectory() {
 	return `google-meet-export-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`;
 }
+const CRC32_TABLE = new Uint32Array(Array.from({ length: 256 }, (_, index) => {
+	let value = index;
+	for (let bit = 0; bit < 8; bit += 1) value = value & 1 ? 3988292384 ^ value >>> 1 : value >>> 1;
+	return value >>> 0;
+}));
+function crc32(buffer) {
+	let value = 4294967295;
+	for (const byte of buffer) value = CRC32_TABLE[(value ^ byte) & 255] ^ value >>> 8;
+	return (value ^ 4294967295) >>> 0;
+}
+function dosDateTime(date = /* @__PURE__ */ new Date()) {
+	return {
+		time: date.getHours() << 11 | date.getMinutes() << 5 | Math.floor(date.getSeconds() / 2),
+		date: date.getFullYear() - 1980 << 9 | date.getMonth() + 1 << 5 | date.getDate()
+	};
+}
+function buildZipArchive(files) {
+	const localParts = [];
+	const centralParts = [];
+	let offset = 0;
+	const stamp = dosDateTime();
+	for (const file of files) {
+		const name = Buffer.from(file.name, "utf8");
+		const content = Buffer.from(file.content, "utf8");
+		const checksum = crc32(content);
+		const local = Buffer.alloc(30);
+		local.writeUInt32LE(67324752, 0);
+		local.writeUInt16LE(20, 4);
+		local.writeUInt16LE(0, 6);
+		local.writeUInt16LE(0, 8);
+		local.writeUInt16LE(stamp.time, 10);
+		local.writeUInt16LE(stamp.date, 12);
+		local.writeUInt32LE(checksum, 14);
+		local.writeUInt32LE(content.length, 18);
+		local.writeUInt32LE(content.length, 22);
+		local.writeUInt16LE(name.length, 26);
+		local.writeUInt16LE(0, 28);
+		localParts.push(local, name, content);
+		const central = Buffer.alloc(46);
+		central.writeUInt32LE(33639248, 0);
+		central.writeUInt16LE(20, 4);
+		central.writeUInt16LE(20, 6);
+		central.writeUInt16LE(0, 8);
+		central.writeUInt16LE(0, 10);
+		central.writeUInt16LE(stamp.time, 12);
+		central.writeUInt16LE(stamp.date, 14);
+		central.writeUInt32LE(checksum, 16);
+		central.writeUInt32LE(content.length, 20);
+		central.writeUInt32LE(content.length, 24);
+		central.writeUInt16LE(name.length, 28);
+		central.writeUInt16LE(0, 30);
+		central.writeUInt16LE(0, 32);
+		central.writeUInt16LE(0, 34);
+		central.writeUInt16LE(0, 36);
+		central.writeUInt32LE(0, 38);
+		central.writeUInt32LE(offset, 42);
+		centralParts.push(central, name);
+		offset += local.length + name.length + content.length;
+	}
+	const centralDirectory = Buffer.concat(centralParts);
+	const end = Buffer.alloc(22);
+	end.writeUInt32LE(101010256, 0);
+	end.writeUInt16LE(0, 4);
+	end.writeUInt16LE(0, 6);
+	end.writeUInt16LE(files.length, 8);
+	end.writeUInt16LE(files.length, 10);
+	end.writeUInt32LE(centralDirectory.length, 12);
+	end.writeUInt32LE(offset, 16);
+	end.writeUInt16LE(0, 20);
+	return Buffer.concat([
+		...localParts,
+		centralDirectory,
+		end
+	]);
+}
 async function writeMeetExportBundle(params) {
 	const outputDir = params.outputDir?.trim() || defaultExportDirectory();
 	await mkdir(outputDir, { recursive: true });
@@ -588,319 +841,163 @@ async function writeMeetExportBundle(params) {
 		files: files.map((file) => path.join(outputDir, file.name))
 	};
 	if (zipFile) {
-		const zip = new JSZip();
-		for (const file of files) zip.file(file.name, file.content);
-		await writeFile(zipFile, await zip.generateAsync({ type: "nodebuffer" }));
+		await writeFile(zipFile, buildZipArchive(files));
 		result.zipFile = zipFile;
 	}
 	return result;
 }
-//#endregion
-//#region extensions/google-meet/src/cli-artifact-commands.ts
-function registerGoogleMeetArtifactCommands(context) {
-	const params = context;
-	const { root, resolveArtifactTokenOptions, resolveMeetingForToken } = context;
-	root.command("artifacts").description("List Meet conference records and available participant/artifact metadata").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-transcript-entries", "Skip structured transcript entry lookup").option("--include-doc-bodies", "Export linked transcript and smart-note Google Docs text").option("--format <format>", "Output format: summary or markdown", "summary").option("--output <path>", "Write output to a file instead of stdout").option("--json", "Print JSON output", false).action(async (options) => {
-		const resolved = resolveArtifactTokenOptions(params.config, options);
-		const token = await resolveGoogleMeetAccessToken(resolved);
-		const meeting = resolved.conferenceRecord ? resolved.meeting : (await resolveMeetingForToken({
-			config: params.config,
-			options,
-			accessToken: token.accessToken,
-			configuredMeeting: resolved.meeting
-		})).meeting;
-		const result = await fetchGoogleMeetArtifacts({
-			accessToken: token.accessToken,
-			meeting,
-			conferenceRecord: resolved.conferenceRecord,
-			pageSize: resolved.pageSize,
-			includeTranscriptEntries: resolved.includeTranscriptEntries,
-			allConferenceRecords: resolved.allConferenceRecords,
-			includeDocumentBodies: resolved.includeDocumentBodies
+function registerGoogleMeetCli(params) {
+	const callGateway = params.callGatewayFromCli ?? callGatewayFromCli;
+	const operationTimeoutMs = resolveGoogleMeetGatewayOperationTimeoutMs(params.config);
+	const root = params.program.command("googlemeet").description("Google Meet participant utilities").addHelpText("after", () => `\nDocs: https://docs.openclaw.ai/plugins/google-meet\n`);
+	root.command("auth").description("Google Meet OAuth helpers").command("login").description("Run a PKCE OAuth flow and print refresh-token JSON to store in plugin config").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--manual", "Use copy/paste callback flow instead of localhost callback").option("--json", "Print the token payload as JSON", false).option("--timeout-sec <n>", "Local callback timeout in seconds", "300").action(async (options) => {
+		const clientId = options.clientId?.trim() || params.config.oauth.clientId;
+		const clientSecret = options.clientSecret?.trim() || params.config.oauth.clientSecret;
+		if (!clientId) throw new Error("Missing Google Meet OAuth client id. Configure oauth.clientId or pass --client-id.");
+		const { verifier, challenge } = createGoogleMeetPkce();
+		const state = createGoogleMeetOAuthState();
+		const authUrl = buildGoogleMeetAuthUrl({
+			clientId,
+			challenge,
+			state
 		});
-		if (options.json) {
-			await writeCliOutput(options, JSON.stringify({
-				...result,
-				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-			}, null, 2));
-			return;
-		}
-		if (options.format === "markdown") {
-			await writeCliOutput(options, renderArtifactsMarkdown(result));
-			return;
-		}
-		if (options.format && options.format !== "summary") throw new Error("Unsupported format. Expected summary or markdown.");
-		writeArtifactsSummary(result);
-		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
-	});
-	root.command("attendance").description("List Meet participants and participant sessions").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-merge-duplicates", "Keep duplicate participant resources as separate rows").option("--late-after-minutes <n>", "Mark participants late after this many minutes", "5").option("--early-before-minutes <n>", "Mark early leavers before this many minutes", "5").option("--format <format>", "Output format: summary, markdown, or csv", "summary").option("--output <path>", "Write output to a file instead of stdout").option("--json", "Print JSON output", false).action(async (options) => {
-		const resolved = resolveArtifactTokenOptions(params.config, options);
-		const token = await resolveGoogleMeetAccessToken(resolved);
-		const meeting = resolved.conferenceRecord ? resolved.meeting : (await resolveMeetingForToken({
-			config: params.config,
-			options,
-			accessToken: token.accessToken,
-			configuredMeeting: resolved.meeting
-		})).meeting;
-		const result = await fetchGoogleMeetAttendance({
-			accessToken: token.accessToken,
-			meeting,
-			conferenceRecord: resolved.conferenceRecord,
-			pageSize: resolved.pageSize,
-			allConferenceRecords: resolved.allConferenceRecords,
-			mergeDuplicateParticipants: resolved.mergeDuplicateParticipants,
-			lateAfterMinutes: resolved.lateAfterMinutes,
-			earlyBeforeMinutes: resolved.earlyBeforeMinutes
-		});
-		if (options.json) {
-			await writeCliOutput(options, JSON.stringify({
-				...result,
-				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-			}, null, 2));
-			return;
-		}
-		if (options.format === "markdown") {
-			await writeCliOutput(options, renderAttendanceMarkdown(result));
-			return;
-		}
-		if (options.format === "csv") {
-			await writeCliOutput(options, renderAttendanceCsv(result));
-			return;
-		}
-		if (options.format && options.format !== "summary") throw new Error("Unsupported format. Expected summary, markdown, or csv.");
-		writeAttendanceSummary(result);
-		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
-	});
-	root.command("export").description("Write Meet artifacts, attendance, transcript, and raw JSON into a folder").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-transcript-entries", "Skip structured transcript entry lookup").option("--include-doc-bodies", "Export linked transcript and smart-note Google Docs text").option("--no-merge-duplicates", "Keep duplicate participant resources as separate rows").option("--late-after-minutes <n>", "Mark participants late after this many minutes", "5").option("--early-before-minutes <n>", "Mark early leavers before this many minutes", "5").option("--output <dir>", "Output directory").option("--zip", "Also write a portable .zip archive").option("--dry-run", "Fetch export data and print the manifest without writing files", false).option("--json", "Print JSON output", false).action(async (options) => {
-		const resolved = resolveArtifactTokenOptions(params.config, options);
-		const token = await resolveGoogleMeetAccessToken(resolved);
-		const meetingResult = resolved.conferenceRecord ? { meeting: resolved.meeting } : await resolveMeetingForToken({
-			config: params.config,
-			options,
-			accessToken: token.accessToken,
-			configuredMeeting: resolved.meeting
-		});
-		const artifacts = await fetchGoogleMeetArtifacts({
-			accessToken: token.accessToken,
-			meeting: meetingResult.meeting,
-			conferenceRecord: resolved.conferenceRecord,
-			pageSize: resolved.pageSize,
-			includeTranscriptEntries: resolved.includeTranscriptEntries,
-			allConferenceRecords: resolved.allConferenceRecords,
-			includeDocumentBodies: resolved.includeDocumentBodies
-		});
-		const attendance = await fetchGoogleMeetAttendance({
-			accessToken: token.accessToken,
-			meeting: meetingResult.meeting,
-			conferenceRecord: resolved.conferenceRecord,
-			pageSize: resolved.pageSize,
-			allConferenceRecords: resolved.allConferenceRecords,
-			mergeDuplicateParticipants: resolved.mergeDuplicateParticipants,
-			lateAfterMinutes: resolved.lateAfterMinutes,
-			earlyBeforeMinutes: resolved.earlyBeforeMinutes
-		});
-		const resolvedMeeting = meetingResult.meeting ?? resolved.meeting;
-		const request = {
-			...resolvedMeeting ? { meeting: resolvedMeeting } : {},
-			...resolved.conferenceRecord ? { conferenceRecord: resolved.conferenceRecord } : {},
-			...meetingResult.calendarEvent?.event.id ? { calendarEventId: meetingResult.calendarEvent.event.id } : {},
-			...meetingResult.calendarEvent?.event.summary ? { calendarEventSummary: meetingResult.calendarEvent.event.summary } : {},
-			...options.calendar ? { calendarId: options.calendar } : {},
-			...resolved.pageSize !== void 0 ? { pageSize: resolved.pageSize } : {},
-			includeTranscriptEntries: resolved.includeTranscriptEntries,
-			includeDocumentBodies: resolved.includeDocumentBodies,
-			allConferenceRecords: resolved.allConferenceRecords,
-			mergeDuplicateParticipants: resolved.mergeDuplicateParticipants,
-			...resolved.lateAfterMinutes !== void 0 ? { lateAfterMinutes: resolved.lateAfterMinutes } : {},
-			...resolved.earlyBeforeMinutes !== void 0 ? { earlyBeforeMinutes: resolved.earlyBeforeMinutes } : {}
-		};
-		if (options.dryRun) {
-			writeStdoutJson({
-				dryRun: true,
-				manifest: buildGoogleMeetExportManifest({
-					artifacts,
-					attendance,
-					files: googleMeetExportFileNames(),
-					request,
-					tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
-					...meetingResult.calendarEvent ? { calendarEvent: meetingResult.calendarEvent } : {}
-				}),
-				...meetingResult.calendarEvent ? { calendarEvent: meetingResult.calendarEvent } : {},
-				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-			});
-			return;
-		}
-		const bundle = await writeMeetExportBundle({
-			outputDir: options.output,
-			artifacts,
-			attendance,
-			zip: Boolean(options.zip),
-			request,
-			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
-			...meetingResult.calendarEvent ? { calendarEvent: meetingResult.calendarEvent } : {}
-		});
-		const payload = {
-			...bundle,
-			...meetingResult.calendarEvent ? { calendarEvent: meetingResult.calendarEvent } : {},
-			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-		};
-		if (options.json) {
-			writeStdoutJson(payload);
-			return;
-		}
-		writeStdoutLine("export: %s", bundle.outputDir);
-		for (const file of bundle.files) writeStdoutLine("- %s", file);
-		if (bundle.zipFile) writeStdoutLine("zip: %s", bundle.zipFile);
-	});
-}
-//#endregion
-//#region extensions/google-meet/src/cli-doctor.ts
-function sanitizeOAuthErrorMessage(error) {
-	return (error instanceof Error ? error.message : String(error)).replace(/(access_token["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]").replace(/(refresh_token["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]").replace(/(client_secret["'=:\s]+)[^"',\s&]+/gi, "$1[redacted]");
-}
-async function buildOAuthDoctorReport(config, options) {
-	const clientId = options.clientId?.trim() || config.oauth.clientId;
-	const clientSecret = options.clientSecret?.trim() || config.oauth.clientSecret;
-	const refreshToken = options.refreshToken?.trim() || config.oauth.refreshToken;
-	const accessToken = options.accessToken?.trim() || config.oauth.accessToken;
-	const expiresAt = parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt;
-	const checks = [];
-	const hasRefreshConfig = Boolean(clientId && refreshToken);
-	if (!hasRefreshConfig && !Boolean(accessToken)) {
-		checks.push({
-			id: "oauth-config",
-			ok: false,
-			message: "Missing Google Meet OAuth credentials. Configure oauth.clientId and oauth.refreshToken, or pass --client-id and --refresh-token."
+		const code = await waitForGoogleMeetAuthCode({
+			state,
+			manual: Boolean(options.manual),
+			timeoutMs: resolveGoogleMeetOAuthCallbackTimeoutMs(options.timeoutSec),
+			authUrl,
+			promptInput,
+			writeLine: (message) => writeStdoutLine("%s", message)
 		});
-		return {
-			ok: false,
-			configured: false,
-			checks
-		};
-	}
-	checks.push({
-		id: "oauth-config",
-		ok: true,
-		message: hasRefreshConfig ? "Google Meet OAuth refresh credentials are configured" : "Google Meet cached access token is configured"
-	});
-	let token;
-	try {
-		token = await resolveGoogleMeetAccessToken({
+		const tokens = await exchangeGoogleMeetAuthCode({
 			clientId,
 			clientSecret,
-			refreshToken,
-			accessToken,
-			expiresAt
-		});
-		checks.push({
-			id: "oauth-token",
-			ok: true,
-			message: token.refreshed ? "Refresh token minted an access token" : "Cached access token is still valid"
-		});
-	} catch (error) {
-		checks.push({
-			id: "oauth-token",
-			ok: false,
-			message: sanitizeOAuthErrorMessage(error)
+			code,
+			verifier
 		});
-		return {
-			ok: false,
-			configured: true,
-			checks
+		if (!tokens.refreshToken) throw new Error("Google OAuth did not return a refresh token. Re-run the flow with consent and offline access.");
+		const payload = {
+			oauth: {
+				clientId,
+				...clientSecret ? { clientSecret } : {},
+				refreshToken: tokens.refreshToken,
+				accessToken: tokens.accessToken,
+				expiresAt: tokens.expiresAt
+			},
+			scope: tokens.scope,
+			tokenType: tokens.tokenType
 		};
-	}
-	const report = {
-		ok: true,
-		configured: true,
-		tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
-		expiresAt: token.expiresAt,
-		checks
-	};
-	const meeting = options.meeting?.trim();
-	if (meeting) try {
-		const space = await fetchGoogleMeetSpace({
-			accessToken: token.accessToken,
-			meeting
-		});
-		checks.push({
-			id: "meet-spaces-get",
-			ok: true,
-			message: `Resolved ${space.name}`
-		});
-		report.meetingUri = space.meetingUri;
-	} catch (error) {
-		checks.push({
-			id: "meet-spaces-get",
-			ok: false,
-			message: sanitizeOAuthErrorMessage(error)
-		});
-	}
-	if (options.createSpace) try {
-		const created = await createGoogleMeetSpace({ accessToken: token.accessToken });
-		checks.push({
-			id: "meet-spaces-create",
-			ok: true,
-			message: `Created ${created.space.name}`
-		});
-		report.createdSpace = created.space.name;
-		report.meetingUri = created.meetingUri;
-	} catch (error) {
-		checks.push({
-			id: "meet-spaces-create",
-			ok: false,
-			message: sanitizeOAuthErrorMessage(error)
-		});
-	}
-	report.ok = checks.every((check) => check.ok);
-	return report;
-}
-function writeOAuthDoctorReport(report) {
-	writeStdoutLine("Google Meet OAuth: %s", report.ok ? "OK" : "needs attention");
-	writeStdoutLine("configured: %s", report.configured ? "yes" : "no");
-	if (report.tokenSource) writeStdoutLine("token source: %s", report.tokenSource);
-	if (report.meetingUri) writeStdoutLine("meeting uri: %s", report.meetingUri);
-	for (const check of report.checks) writeStdoutLine("[%s] %s: %s", check.ok ? "ok" : "fail", check.id, check.message);
-}
-function registerGoogleMeetDoctorCommand(context) {
-	const params = context;
-	const { root, callGateway } = context;
-	root.command("doctor").description("Show human-readable Meet session/browser/realtime health").argument("[session-id]", "Meet session ID").option("--oauth", "Verify Google Meet OAuth token refresh without printing secrets", false).option("--meeting <value>", "Also verify spaces.get for a Meet URL, code, or spaces/{id}").option("--create-space", "Also verify spaces.create by creating a throwaway Meet space", false).option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (sessionId, options) => {
-		if (options.oauth) {
-			const report = await buildOAuthDoctorReport(params.config, options);
-			if (options.json) {
-				writeStdoutJson(report);
+		if (!options.json) writeStdoutLine("Paste this into plugins.entries.google-meet.config:");
+		writeStdoutJson(payload);
+	});
+	root.command("create").description("Create a new Google Meet space and print its meeting URL").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--access-type <type>", "Google Meet SpaceConfig accessType for API create: OPEN, TRUSTED, or RESTRICTED").option("--entry-point-access <type>", "Google Meet SpaceConfig entryPointAccess for API create: ALL or CREATOR_APP_ONLY").option("--no-join", "Only create the meeting URL; do not join it").option("--transport <transport>", "Join transport: chrome, chrome-node, or twilio").option("--mode <mode>", "Join mode: agent, bidi, or transcribe").option("--message <text>", "Realtime speech to trigger after join").option("--dial-in-number <phone>", "Meet dial-in number for Twilio transport").option("--pin <pin>", "Meet phone PIN; # is appended if omitted").option("--dtmf-sequence <sequence>", "Explicit Twilio DTMF sequence").option("--json", "Print JSON output", false).action(async (options) => {
+		if (options.join !== false) {
+			const delegated = await callGoogleMeetGateway({
+				callGateway,
+				method: "googlemeet.create",
+				payload: { ...options },
+				timeoutMs: operationTimeoutMs
+			});
+			if (delegated.ok) {
+				const payload = delegated.payload;
+				if (options.json) {
+					writeStdoutJson(payload);
+					return;
+				}
+				writeStdoutLine("meeting uri: %s", payload.meetingUri);
+				if (payload.space?.name) writeStdoutLine("space: %s", payload.space.name);
+				if (payload.space?.meetingCode) writeStdoutLine("meeting code: %s", payload.space.meetingCode);
+				if (payload.source) writeStdoutLine("source: %s", payload.source);
+				if (payload.browser?.nodeId) writeStdoutLine("node: %s", payload.browser.nodeId);
+				if (payload.tokenSource) writeStdoutLine("token source: %s", payload.tokenSource);
+				if (payload.joined && payload.join?.session?.id) writeStdoutLine("joined: %s", payload.join.session.id);
+				else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", payload.meetingUri);
 				return;
 			}
-			writeOAuthDoctorReport(report);
-			return;
 		}
-		const delegated = await callGoogleMeetGateway({
-			callGateway,
-			method: "googlemeet.status",
-			payload: { sessionId }
-		});
-		if (delegated.ok) {
-			const status = delegated.payload;
+		if (!hasCreateOAuth(params.config, options)) {
+			if (hasCreateSpaceConfigInput(options)) throw new Error("Google Meet access policy options require OAuth/API room creation. Configure Google Meet OAuth or remove --access-type/--entry-point-access.");
+			const rt = await params.ensureRuntime();
+			const result = await rt.createViaBrowser();
+			const join = options.join !== false ? await rt.join({
+				url: result.meetingUri,
+				transport: options.transport,
+				mode: options.mode,
+				message: options.message,
+				dialInNumber: options.dialInNumber,
+				pin: options.pin,
+				dtmfSequence: options.dtmfSequence
+			}) : void 0;
+			const payload = {
+				source: result.source,
+				meetingUri: result.meetingUri,
+				joined: Boolean(join),
+				...join ? { join } : {},
+				browser: {
+					nodeId: result.nodeId,
+					targetId: result.targetId,
+					browserUrl: result.browserUrl,
+					browserTitle: result.browserTitle
+				}
+			};
 			if (options.json) {
-				writeStdoutJson(status);
+				writeStdoutJson(payload);
 				return;
 			}
-			writeDoctorStatus(status);
+			writeStdoutLine("meeting uri: %s", result.meetingUri);
+			writeStdoutLine("source: browser");
+			writeStdoutLine("node: %s", result.nodeId);
+			if (join) writeStdoutLine("joined: %s", join.session.id);
+			else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", result.meetingUri);
 			return;
 		}
-		const status = await (await params.ensureRuntime()).status(sessionId);
+		const token = await resolveGoogleMeetAccessToken(resolveCreateTokenOptions(params.config, options));
+		const result = await createGoogleMeetSpace({
+			accessToken: token.accessToken,
+			config: resolveCreateSpaceConfig(options)
+		});
+		const join = options.join !== false ? await (await params.ensureRuntime()).join({
+			url: result.meetingUri,
+			transport: options.transport,
+			mode: options.mode,
+			message: options.message,
+			dialInNumber: options.dialInNumber,
+			pin: options.pin,
+			dtmfSequence: options.dtmfSequence
+		}) : void 0;
 		if (options.json) {
-			writeStdoutJson(status);
+			writeStdoutJson({
+				...result,
+				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
+				joined: Boolean(join),
+				...join ? { join } : {}
+			});
 			return;
 		}
-		writeDoctorStatus(status);
+		writeStdoutLine("meeting uri: %s", result.meetingUri);
+		writeStdoutLine("space: %s", result.space.name);
+		if (result.space.meetingCode) writeStdoutLine("meeting code: %s", result.space.meetingCode);
+		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
+		if (join) writeStdoutLine("joined: %s", join.session.id);
+		else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", result.meetingUri);
+	});
+	root.command("end-active-conference").description("End the active conference for a Google Meet space").argument("[meeting]", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (meeting, options) => {
+		const token = await resolveGoogleMeetAccessToken(resolveOAuthTokenOptions(params.config, options));
+		const result = await endGoogleMeetActiveConference({
+			accessToken: token.accessToken,
+			meeting: resolveMeetingInput(params.config, meeting ?? options.meeting)
+		});
+		if (options.json) {
+			writeStdoutJson({
+				...result,
+				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+			});
+			return;
+		}
+		writeStdoutLine("space: %s", result.space);
+		writeStdoutLine("ended: yes");
+		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
 	});
-}
-//#endregion
-//#region extensions/google-meet/src/cli-runtime-commands.ts
-function registerGoogleMeetProbeCommands(context) {
-	const params = context;
-	const { root, callGateway, operationTimeoutMs, resolveMeetingInput } = context;
 	root.command("join").argument("[url]", "Explicit https://meet.google.com/... URL").option("--transport <transport>", "Transport: chrome, chrome-node, or twilio").option("--mode <mode>", "Mode: agent, bidi, or transcribe").option("--message <text>", "Realtime speech to trigger after join").option("--dial-in-number <phone>", "Meet dial-in number for Twilio transport").option("--pin <pin>", "Meet phone PIN; # is appended if omitted").option("--dtmf-sequence <sequence>", "Explicit Twilio DTMF sequence").action(async (url, options) => {
 		const payload = {
 			url: resolveMeetingInput(params.config, url),
@@ -961,470 +1058,354 @@ function registerGoogleMeetProbeCommands(context) {
 		}
 		writeStdoutJson(await (await params.ensureRuntime()).testListen(payload));
 	});
-}
-function registerGoogleMeetSessionCommands(context) {
-	const params = context;
-	const { root, callGateway } = context;
-	root.command("status").argument("[session-id]", "Meet session ID").option("--json", "Print JSON output", false).action(async (sessionId) => {
-		const delegated = await callGoogleMeetGateway({
-			callGateway,
-			method: "googlemeet.status",
-			payload: { sessionId }
-		});
-		if (delegated.ok) {
-			writeStdoutJson(delegated.payload);
-			return;
-		}
-		writeStdoutJson(await (await params.ensureRuntime()).status(sessionId));
-	});
-	root.command("transcript").description("Print the bounded caption transcript for a Meet session").argument("<session-id>", "Meet session ID").option("--since <index>", "Resume from the previous response's nextIndex").option("--json", "Print JSON output", false).action(async (sessionId, options) => {
-		const sinceIndex = parseStrictNonNegativeInteger(options.since);
-		if (options.since !== void 0 && sinceIndex === void 0) throw new Error("--since must be a non-negative safe integer");
-		const delegated = await callGoogleMeetGateway({
-			callGateway,
-			method: "googlemeet.transcript",
-			payload: {
-				sessionId,
-				...sinceIndex === void 0 ? {} : { sinceIndex }
-			}
-		});
-		const result = delegated.ok ? delegated.payload : await (await params.ensureRuntime()).transcript(sessionId, sinceIndex === void 0 ? {} : { sinceIndex });
-		if (!result.found) throw new Error("session not found");
-		if (options.json) {
-			writeStdoutJson(result);
-			return;
-		}
-		if (result.evicted) writeStdoutLine("# transcript evicted from runtime memory");
-		else if (result.droppedLines) writeStdoutLine("# %d earlier lines dropped by the transcript cap", result.droppedLines);
-		for (const line of result.lines ?? []) writeStdoutLine("%s%s%s", line.at ? `[${line.at}] ` : "", line.speaker ? `${line.speaker}: ` : "", line.text);
-		writeStdoutLine("# nextIndex: %d", result.nextIndex ?? 0);
-	});
-}
-function registerGoogleMeetLifecycleCommands(context) {
-	const params = context;
-	const { root, callGateway } = context;
-	root.command("recover-tab").description("Focus and inspect an existing Google Meet tab").argument("[url]", "Optional Meet URL to match").option("--transport <transport>", "Transport to inspect: chrome or chrome-node").option("--json", "Print JSON output", false).action(async (url, options) => {
-		const result = await (await params.ensureRuntime()).recoverCurrentTab({
-			url,
-			transport: options.transport
-		});
-		if (options.json) {
-			writeStdoutJson(result);
-			return;
-		}
-		writeRecoverCurrentTabResult(result);
-	});
-	root.command("setup").description("Show Google Meet transport setup status").option("--transport <transport>", "Transport to check: chrome, chrome-node, or twilio").option("--mode <mode>", "Mode to check: agent, bidi, or transcribe").option("--json", "Print JSON output", false).action(async (options) => {
-		const status = await (await params.ensureRuntime()).setupStatus({
-			transport: options.transport,
-			mode: options.mode
-		});
-		if (options.json) {
-			writeStdoutJson(status);
-			return;
-		}
-		writeSetupStatus(status);
-	});
-	root.command("leave").argument("<session-id>", "Meet session ID").action(async (sessionId) => {
-		const delegated = await callGoogleMeetGateway({
-			callGateway,
-			method: "googlemeet.leave",
-			payload: { sessionId }
-		});
-		if (delegated.ok) {
-			const result = delegated.payload;
-			if (!result.found) throw new Error("session not found");
-			writeLeaveResult(sessionId, result);
-			return;
-		}
-		const result = await (await params.ensureRuntime()).leave(sessionId);
-		if (!result.found) throw new Error("session not found");
-		writeLeaveResult(sessionId, result);
-	});
-	root.command("speak").argument("<session-id>", "Meet session ID").argument("[message]", "Realtime instructions to speak now").action(async (sessionId, message) => {
-		const delegated = await callGoogleMeetGateway({
-			callGateway,
-			method: "googlemeet.speak",
-			payload: {
-				sessionId,
-				message
-			}
-		});
-		if (delegated.ok) {
-			const result = delegated.payload;
-			if (!result.found) throw new Error("session not found");
-			if (!result.spoken) throw new Error(result.session?.chrome?.health?.speechBlockedMessage ?? "session has no active realtime audio bridge");
-			writeStdoutLine("speaking on %s", sessionId);
-			return;
-		}
-		const result = await (await params.ensureRuntime()).speak(sessionId, message);
-		if (!result.found) throw new Error("session not found");
-		if (!result.spoken) throw new Error(result.session?.chrome?.health?.speechBlockedMessage ?? "session has no active realtime audio bridge");
-		writeStdoutLine("speaking on %s", sessionId);
-	});
-}
-//#endregion
-//#region extensions/google-meet/src/cli-space-commands.ts
-function registerGoogleMeetCreateCommands(context) {
-	const params = context;
-	const { root, callGateway, operationTimeoutMs, hasCreateOAuth, resolveCreateTokenOptions, resolveMeetingInput, resolveOAuthTokenOptions } = context;
-	root.command("create").description("Create a new Google Meet space and print its meeting URL").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--access-type <type>", "Google Meet SpaceConfig accessType for API create: OPEN, TRUSTED, or RESTRICTED").option("--entry-point-access <type>", "Google Meet SpaceConfig entryPointAccess for API create: ALL or CREATOR_APP_ONLY").option("--no-join", "Only create the meeting URL; do not join it").option("--transport <transport>", "Join transport: chrome, chrome-node, or twilio").option("--mode <mode>", "Join mode: agent, bidi, or transcribe").option("--message <text>", "Realtime speech to trigger after join").option("--dial-in-number <phone>", "Meet dial-in number for Twilio transport").option("--pin <pin>", "Meet phone PIN; # is appended if omitted").option("--dtmf-sequence <sequence>", "Explicit Twilio DTMF sequence").option("--json", "Print JSON output", false).action(async (options) => {
-		if (options.join !== false) {
-			const delegated = await callGoogleMeetGateway({
-				callGateway,
-				method: "googlemeet.create",
-				payload: { ...options },
-				timeoutMs: operationTimeoutMs
-			});
-			if (delegated.ok) {
-				const payload = delegated.payload;
-				if (options.json) {
-					writeStdoutJson(payload);
-					return;
-				}
-				writeStdoutLine("meeting uri: %s", payload.meetingUri);
-				if (payload.space?.name) writeStdoutLine("space: %s", payload.space.name);
-				if (payload.space?.meetingCode) writeStdoutLine("meeting code: %s", payload.space.meetingCode);
-				if (payload.source) writeStdoutLine("source: %s", payload.source);
-				if (payload.browser?.nodeId) writeStdoutLine("node: %s", payload.browser.nodeId);
-				if (payload.tokenSource) writeStdoutLine("token source: %s", payload.tokenSource);
-				if (payload.joined && payload.join?.session?.id) writeStdoutLine("joined: %s", payload.join.session.id);
-				else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", payload.meetingUri);
-				return;
-			}
-		}
-		if (!hasCreateOAuth(params.config, options)) {
-			if (hasCreateSpaceConfigInput(options)) throw new Error("Google Meet access policy options require OAuth/API room creation. Configure Google Meet OAuth or remove --access-type/--entry-point-access.");
-			const rt = await params.ensureRuntime();
-			const result = await rt.createViaBrowser();
-			const join = options.join !== false ? await rt.join({
-				url: result.meetingUri,
-				transport: options.transport,
-				mode: options.mode,
-				message: options.message,
-				dialInNumber: options.dialInNumber,
-				pin: options.pin,
-				dtmfSequence: options.dtmfSequence
-			}) : void 0;
-			const payload = {
-				source: result.source,
-				meetingUri: result.meetingUri,
-				joined: Boolean(join),
-				...join ? { join } : {},
-				browser: {
-					nodeId: result.nodeId,
-					targetId: result.targetId,
-					browserUrl: result.browserUrl,
-					browserTitle: result.browserTitle
-				}
-			};
-			if (options.json) {
-				writeStdoutJson(payload);
-				return;
-			}
-			writeStdoutLine("meeting uri: %s", result.meetingUri);
-			writeStdoutLine("source: browser");
-			writeStdoutLine("node: %s", result.nodeId);
-			if (join) writeStdoutLine("joined: %s", join.session.id);
-			else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", result.meetingUri);
+	root.command("resolve-space").description("Resolve a Meet URL, meeting code, or spaces/{id} to its canonical space").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
+		const resolved = resolveTokenOptions(params.config, options);
+		const token = await resolveGoogleMeetAccessToken(resolved);
+		const space = await fetchGoogleMeetSpace({
+			accessToken: token.accessToken,
+			meeting: resolved.meeting
+		});
+		if (options.json) {
+			writeStdoutJson(space);
 			return;
 		}
-		const token = await resolveGoogleMeetAccessToken(resolveCreateTokenOptions(params.config, options));
-		const result = await createGoogleMeetSpace({
+		writeStdoutLine("input: %s", resolved.meeting);
+		writeStdoutLine("space: %s", space.name);
+		if (space.meetingCode) writeStdoutLine("meeting code: %s", space.meetingCode);
+		if (space.meetingUri) writeStdoutLine("meeting uri: %s", space.meetingUri);
+		writeStdoutLine("active conference: %s", space.activeConference ? "yes" : "no");
+		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
+	});
+	root.command("preflight").description("Validate OAuth + meeting resolution prerequisites for Meet media work").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
+		const resolved = resolveTokenOptions(params.config, options);
+		const token = await resolveGoogleMeetAccessToken(resolved);
+		const space = await fetchGoogleMeetSpace({
 			accessToken: token.accessToken,
-			config: resolveCreateSpaceConfig(options)
+			meeting: resolved.meeting
+		});
+		const report = buildGoogleMeetPreflightReport({
+			input: resolved.meeting,
+			space,
+			previewAcknowledged: params.config.preview.enrollmentAcknowledged,
+			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+		});
+		if (options.json) {
+			writeStdoutJson(report);
+			return;
+		}
+		writeStdoutLine("input: %s", report.input);
+		writeStdoutLine("resolved space: %s", report.resolvedSpaceName);
+		if (report.meetingCode) writeStdoutLine("meeting code: %s", report.meetingCode);
+		if (report.meetingUri) writeStdoutLine("meeting uri: %s", report.meetingUri);
+		writeStdoutLine("active conference: %s", report.hasActiveConference ? "yes" : "no");
+		writeStdoutLine("preview acknowledged: %s", report.previewAcknowledged ? "yes" : "no");
+		writeStdoutLine("token source: %s", report.tokenSource);
+		if (report.blockers.length === 0) {
+			writeStdoutLine("blockers: none");
+			return;
+		}
+		writeStdoutLine("blockers:");
+		for (const blocker of report.blockers) writeStdoutLine("- %s", blocker);
+	});
+	root.command("latest").description("Find the latest Meet conference record for a meeting").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
+		const token = await resolveGoogleMeetAccessToken(resolveOAuthTokenOptions(params.config, options));
+		const resolved = await resolveMeetingForToken({
+			config: params.config,
+			options,
+			accessToken: token.accessToken,
+			configuredMeeting: options.meeting?.trim()
+		});
+		const result = await fetchLatestGoogleMeetConferenceRecord({
+			accessToken: token.accessToken,
+			meeting: resolved.meeting
 		});
-		const join = options.join !== false ? await (await params.ensureRuntime()).join({
-			url: result.meetingUri,
-			transport: options.transport,
-			mode: options.mode,
-			message: options.message,
-			dialInNumber: options.dialInNumber,
-			pin: options.pin,
-			dtmfSequence: options.dtmfSequence
-		}) : void 0;
 		if (options.json) {
 			writeStdoutJson({
 				...result,
-				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
-				joined: Boolean(join),
-				...join ? { join } : {}
+				...resolved.calendarEvent ? { calendarEvent: resolved.calendarEvent } : {},
+				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
 			});
 			return;
 		}
-		writeStdoutLine("meeting uri: %s", result.meetingUri);
-		writeStdoutLine("space: %s", result.space.name);
-		if (result.space.meetingCode) writeStdoutLine("meeting code: %s", result.space.meetingCode);
+		if (resolved.calendarEvent) {
+			writeStdoutLine("calendar event: %s", resolved.calendarEvent.event.summary ?? "untitled");
+			writeStdoutLine("calendar meet: %s", resolved.calendarEvent.meetingUri);
+		}
+		writeLatestConferenceRecordSummary(result);
 		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
-		if (join) writeStdoutLine("joined: %s", join.session.id);
-		else writeStdoutLine("joined: no (run `openclaw googlemeet join %s`)", result.meetingUri);
 	});
-	root.command("end-active-conference").description("End the active conference for a Google Meet space").argument("[meeting]", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (meeting, options) => {
+	root.command("calendar-events").description("Preview Calendar events with Google Meet links").option("--today", "Find Meet links on today's calendar").option("--event <query>", "Find matching calendar events with Meet links").option("--calendar <id>", "Calendar id for lookup", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
 		const token = await resolveGoogleMeetAccessToken(resolveOAuthTokenOptions(params.config, options));
-		const result = await endGoogleMeetActiveConference({
+		const window = options.today ? buildGoogleMeetCalendarDayWindow() : {};
+		const result = await listGoogleMeetCalendarEvents({
 			accessToken: token.accessToken,
-			meeting: resolveMeetingInput(params.config, meeting ?? options.meeting)
+			calendarId: options.calendar,
+			eventQuery: options.event,
+			...window
 		});
+		const payload = {
+			...result,
+			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+		};
 		if (options.json) {
-			writeStdoutJson({
+			writeStdoutJson(payload);
+			return;
+		}
+		writeCalendarEventsSummary(result);
+		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
+	});
+	root.command("artifacts").description("List Meet conference records and available participant/artifact metadata").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-transcript-entries", "Skip structured transcript entry lookup").option("--include-doc-bodies", "Export linked transcript and smart-note Google Docs text").option("--format <format>", "Output format: summary or markdown", "summary").option("--output <path>", "Write output to a file instead of stdout").option("--json", "Print JSON output", false).action(async (options) => {
+		const resolved = resolveArtifactTokenOptions(params.config, options);
+		const token = await resolveGoogleMeetAccessToken(resolved);
+		const meeting = resolved.conferenceRecord ? resolved.meeting : (await resolveMeetingForToken({
+			config: params.config,
+			options,
+			accessToken: token.accessToken,
+			configuredMeeting: resolved.meeting
+		})).meeting;
+		const result = await fetchGoogleMeetArtifacts({
+			accessToken: token.accessToken,
+			meeting,
+			conferenceRecord: resolved.conferenceRecord,
+			pageSize: resolved.pageSize,
+			includeTranscriptEntries: resolved.includeTranscriptEntries,
+			allConferenceRecords: resolved.allConferenceRecords,
+			includeDocumentBodies: resolved.includeDocumentBodies
+		});
+		if (options.json) {
+			await writeCliOutput(options, JSON.stringify({
 				...result,
 				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-			});
+			}, null, 2));
 			return;
 		}
-		writeStdoutLine("space: %s", result.space);
-		writeStdoutLine("ended: yes");
+		if (options.format === "markdown") {
+			await writeCliOutput(options, renderArtifactsMarkdown(result));
+			return;
+		}
+		if (options.format && options.format !== "summary") throw new Error("Unsupported format. Expected summary or markdown.");
+		writeArtifactsSummary(result);
 		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
 	});
-}
-function registerGoogleMeetApiCommands(context) {
-	const params = context;
-	const { root, resolveMeetingForToken, resolveOAuthTokenOptions, resolveTokenOptions } = context;
-	root.command("resolve-space").description("Resolve a Meet URL, meeting code, or spaces/{id} to its canonical space").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
-		const resolved = resolveTokenOptions(params.config, options);
+	root.command("attendance").description("List Meet participants and participant sessions").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-merge-duplicates", "Keep duplicate participant resources as separate rows").option("--late-after-minutes <n>", "Mark participants late after this many minutes", "5").option("--early-before-minutes <n>", "Mark early leavers before this many minutes", "5").option("--format <format>", "Output format: summary, markdown, or csv", "summary").option("--output <path>", "Write output to a file instead of stdout").option("--json", "Print JSON output", false).action(async (options) => {
+		const resolved = resolveArtifactTokenOptions(params.config, options);
 		const token = await resolveGoogleMeetAccessToken(resolved);
-		const space = await fetchGoogleMeetSpace({
+		const meeting = resolved.conferenceRecord ? resolved.meeting : (await resolveMeetingForToken({
+			config: params.config,
+			options,
 			accessToken: token.accessToken,
-			meeting: resolved.meeting
+			configuredMeeting: resolved.meeting
+		})).meeting;
+		const result = await fetchGoogleMeetAttendance({
+			accessToken: token.accessToken,
+			meeting,
+			conferenceRecord: resolved.conferenceRecord,
+			pageSize: resolved.pageSize,
+			allConferenceRecords: resolved.allConferenceRecords,
+			mergeDuplicateParticipants: resolved.mergeDuplicateParticipants,
+			lateAfterMinutes: resolved.lateAfterMinutes,
+			earlyBeforeMinutes: resolved.earlyBeforeMinutes
+		});
+		if (options.json) {
+			await writeCliOutput(options, JSON.stringify({
+				...result,
+				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+			}, null, 2));
+			return;
+		}
+		if (options.format === "markdown") {
+			await writeCliOutput(options, renderAttendanceMarkdown(result));
+			return;
+		}
+		if (options.format === "csv") {
+			await writeCliOutput(options, renderAttendanceCsv(result));
+			return;
+		}
+		if (options.format && options.format !== "summary") throw new Error("Unsupported format. Expected summary, markdown, or csv.");
+		writeAttendanceSummary(result);
+		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
+	});
+	root.command("export").description("Write Meet artifacts, attendance, transcript, and raw JSON into a folder").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--conference-record <name>", "Conference record name or id").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--page-size <n>", "Max resources per Meet API page").option("--all-conference-records", "Fetch every conference record for --meeting").option("--no-transcript-entries", "Skip structured transcript entry lookup").option("--include-doc-bodies", "Export linked transcript and smart-note Google Docs text").option("--no-merge-duplicates", "Keep duplicate participant resources as separate rows").option("--late-after-minutes <n>", "Mark participants late after this many minutes", "5").option("--early-before-minutes <n>", "Mark early leavers before this many minutes", "5").option("--output <dir>", "Output directory").option("--zip", "Also write a portable .zip archive").option("--dry-run", "Fetch export data and print the manifest without writing files", false).option("--json", "Print JSON output", false).action(async (options) => {
+		const resolved = resolveArtifactTokenOptions(params.config, options);
+		const token = await resolveGoogleMeetAccessToken(resolved);
+		const meetingResult = resolved.conferenceRecord ? { meeting: resolved.meeting } : await resolveMeetingForToken({
+			config: params.config,
+			options,
+			accessToken: token.accessToken,
+			configuredMeeting: resolved.meeting
+		});
+		const artifacts = await fetchGoogleMeetArtifacts({
+			accessToken: token.accessToken,
+			meeting: meetingResult.meeting,
+			conferenceRecord: resolved.conferenceRecord,
+			pageSize: resolved.pageSize,
+			includeTranscriptEntries: resolved.includeTranscriptEntries,
+			allConferenceRecords: resolved.allConferenceRecords,
+			includeDocumentBodies: resolved.includeDocumentBodies
+		});
+		const attendance = await fetchGoogleMeetAttendance({
+			accessToken: token.accessToken,
+			meeting: meetingResult.meeting,
+			conferenceRecord: resolved.conferenceRecord,
+			pageSize: resolved.pageSize,
+			allConferenceRecords: resolved.allConferenceRecords,
+			mergeDuplicateParticipants: resolved.mergeDuplicateParticipants,
+			lateAfterMinutes: resolved.lateAfterMinutes,
+			earlyBeforeMinutes: resolved.earlyBeforeMinutes
+		});
+		const resolvedMeeting = meetingResult.meeting ?? resolved.meeting;
+		const request = {
+			...resolvedMeeting ? { meeting: resolvedMeeting } : {},
+			...resolved.conferenceRecord ? { conferenceRecord: resolved.conferenceRecord } : {},
+			...meetingResult.calendarEvent?.event.id ? { calendarEventId: meetingResult.calendarEvent.event.id } : {},
+			...meetingResult.calendarEvent?.event.summary ? { calendarEventSummary: meetingResult.calendarEvent.event.summary } : {},
+			...options.calendar ? { calendarId: options.calendar } : {},
+			...resolved.pageSize !== void 0 ? { pageSize: resolved.pageSize } : {},
+			includeTranscriptEntries: resolved.includeTranscriptEntries,
+			includeDocumentBodies: resolved.includeDocumentBodies,
+			allConferenceRecords: resolved.allConferenceRecords,
+			mergeDuplicateParticipants: resolved.mergeDuplicateParticipants,
+			...resolved.lateAfterMinutes !== void 0 ? { lateAfterMinutes: resolved.lateAfterMinutes } : {},
+			...resolved.earlyBeforeMinutes !== void 0 ? { earlyBeforeMinutes: resolved.earlyBeforeMinutes } : {}
+		};
+		if (options.dryRun) {
+			writeStdoutJson({
+				dryRun: true,
+				manifest: buildGoogleMeetExportManifest({
+					artifacts,
+					attendance,
+					files: googleMeetExportFileNames(),
+					request,
+					tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
+					...meetingResult.calendarEvent ? { calendarEvent: meetingResult.calendarEvent } : {}
+				}),
+				...meetingResult.calendarEvent ? { calendarEvent: meetingResult.calendarEvent } : {},
+				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+			});
+			return;
+		}
+		const bundle = await writeMeetExportBundle({
+			outputDir: options.output,
+			artifacts,
+			attendance,
+			zip: Boolean(options.zip),
+			request,
+			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token",
+			...meetingResult.calendarEvent ? { calendarEvent: meetingResult.calendarEvent } : {}
+		});
+		const payload = {
+			...bundle,
+			...meetingResult.calendarEvent ? { calendarEvent: meetingResult.calendarEvent } : {},
+			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+		};
+		if (options.json) {
+			writeStdoutJson(payload);
+			return;
+		}
+		writeStdoutLine("export: %s", bundle.outputDir);
+		for (const file of bundle.files) writeStdoutLine("- %s", file);
+		if (bundle.zipFile) writeStdoutLine("zip: %s", bundle.zipFile);
+	});
+	root.command("status").argument("[session-id]", "Meet session ID").option("--json", "Print JSON output", false).action(async (sessionId) => {
+		const delegated = await callGoogleMeetGateway({
+			callGateway,
+			method: "googlemeet.status",
+			payload: { sessionId }
 		});
-		if (options.json) {
-			writeStdoutJson(space);
+		if (delegated.ok) {
+			writeStdoutJson(delegated.payload);
 			return;
 		}
-		writeStdoutLine("input: %s", resolved.meeting);
-		writeStdoutLine("space: %s", space.name);
-		if (space.meetingCode) writeStdoutLine("meeting code: %s", space.meetingCode);
-		if (space.meetingUri) writeStdoutLine("meeting uri: %s", space.meetingUri);
-		writeStdoutLine("active conference: %s", space.activeConference ? "yes" : "no");
-		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
+		writeStdoutJson(await (await params.ensureRuntime()).status(sessionId));
 	});
-	root.command("preflight").description("Validate OAuth + meeting resolution prerequisites for Meet media work").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
-		const resolved = resolveTokenOptions(params.config, options);
-		const token = await resolveGoogleMeetAccessToken(resolved);
-		const space = await fetchGoogleMeetSpace({
-			accessToken: token.accessToken,
-			meeting: resolved.meeting
-		});
-		const report = buildGoogleMeetPreflightReport({
-			input: resolved.meeting,
-			space,
-			previewAcknowledged: params.config.preview.enrollmentAcknowledged,
-			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
+	root.command("doctor").description("Show human-readable Meet session/browser/realtime health").argument("[session-id]", "Meet session ID").option("--oauth", "Verify Google Meet OAuth token refresh without printing secrets", false).option("--meeting <value>", "Also verify spaces.get for a Meet URL, code, or spaces/{id}").option("--create-space", "Also verify spaces.create by creating a throwaway Meet space", false).option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (sessionId, options) => {
+		if (options.oauth) {
+			const report = await buildOAuthDoctorReport(params.config, options);
+			if (options.json) {
+				writeStdoutJson(report);
+				return;
+			}
+			writeOAuthDoctorReport(report);
+			return;
+		}
+		const delegated = await callGoogleMeetGateway({
+			callGateway,
+			method: "googlemeet.status",
+			payload: { sessionId }
 		});
-		if (options.json) {
-			writeStdoutJson(report);
+		if (delegated.ok) {
+			const status = delegated.payload;
+			if (options.json) {
+				writeStdoutJson(status);
+				return;
+			}
+			writeDoctorStatus(status);
 			return;
 		}
-		writeStdoutLine("input: %s", report.input);
-		writeStdoutLine("resolved space: %s", report.resolvedSpaceName);
-		if (report.meetingCode) writeStdoutLine("meeting code: %s", report.meetingCode);
-		if (report.meetingUri) writeStdoutLine("meeting uri: %s", report.meetingUri);
-		writeStdoutLine("active conference: %s", report.hasActiveConference ? "yes" : "no");
-		writeStdoutLine("preview acknowledged: %s", report.previewAcknowledged ? "yes" : "no");
-		writeStdoutLine("token source: %s", report.tokenSource);
-		if (report.blockers.length === 0) {
-			writeStdoutLine("blockers: none");
+		const status = await (await params.ensureRuntime()).status(sessionId);
+		if (options.json) {
+			writeStdoutJson(status);
 			return;
 		}
-		writeStdoutLine("blockers:");
-		for (const blocker of report.blockers) writeStdoutLine("- %s", blocker);
+		writeDoctorStatus(status);
 	});
-	root.command("latest").description("Find the latest Meet conference record for a meeting").option("--meeting <value>", "Meet URL, meeting code, or spaces/{id}").option("--today", "Find a Meet link on today's calendar").option("--event <query>", "Find a matching calendar event with a Meet link").option("--calendar <id>", "Calendar id for --today or --event", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
-		const token = await resolveGoogleMeetAccessToken(resolveOAuthTokenOptions(params.config, options));
-		const resolved = await resolveMeetingForToken({
-			config: params.config,
-			options,
-			accessToken: token.accessToken,
-			configuredMeeting: options.meeting?.trim()
-		});
-		const result = await fetchLatestGoogleMeetConferenceRecord({
-			accessToken: token.accessToken,
-			meeting: resolved.meeting
+	root.command("recover-tab").description("Focus and inspect an existing Google Meet tab").argument("[url]", "Optional Meet URL to match").option("--transport <transport>", "Transport to inspect: chrome or chrome-node").option("--json", "Print JSON output", false).action(async (url, options) => {
+		const result = await (await params.ensureRuntime()).recoverCurrentTab({
+			url,
+			transport: options.transport
 		});
 		if (options.json) {
-			writeStdoutJson({
-				...result,
-				...resolved.calendarEvent ? { calendarEvent: resolved.calendarEvent } : {},
-				tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-			});
+			writeStdoutJson(result);
 			return;
 		}
-		if (resolved.calendarEvent) {
-			writeStdoutLine("calendar event: %s", resolved.calendarEvent.event.summary ?? "untitled");
-			writeStdoutLine("calendar meet: %s", resolved.calendarEvent.meetingUri);
-		}
-		writeLatestConferenceRecordSummary(result);
-		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
+		writeRecoverCurrentTabResult(result);
 	});
-	root.command("calendar-events").description("Preview Calendar events with Google Meet links").option("--today", "Find Meet links on today's calendar").option("--event <query>", "Find matching calendar events with Meet links").option("--calendar <id>", "Calendar id for lookup", "primary").option("--access-token <token>", "Access token override").option("--refresh-token <token>", "Refresh token override").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--expires-at <ms>", "Cached access token expiry as unix epoch milliseconds").option("--json", "Print JSON output", false).action(async (options) => {
-		const token = await resolveGoogleMeetAccessToken(resolveOAuthTokenOptions(params.config, options));
-		const window = options.today ? buildGoogleMeetCalendarDayWindow() : {};
-		const result = await listGoogleMeetCalendarEvents({
-			accessToken: token.accessToken,
-			calendarId: options.calendar,
-			eventQuery: options.event,
-			...window
+	root.command("setup").description("Show Google Meet transport setup status").option("--transport <transport>", "Transport to check: chrome, chrome-node, or twilio").option("--mode <mode>", "Mode to check: agent, bidi, or transcribe").option("--json", "Print JSON output", false).action(async (options) => {
+		const status = await (await params.ensureRuntime()).setupStatus({
+			transport: options.transport,
+			mode: options.mode
 		});
-		const payload = {
-			...result,
-			tokenSource: token.refreshed ? "refresh-token" : "cached-access-token"
-		};
 		if (options.json) {
-			writeStdoutJson(payload);
+			writeStdoutJson(status);
 			return;
 		}
-		writeCalendarEventsSummary(result);
-		writeStdoutLine("token source: %s", token.refreshed ? "refresh-token" : "cached-access-token");
-	});
-}
-//#endregion
-//#region extensions/google-meet/src/cli.ts
-function resolveMeetingInput(config, value) {
-	const meeting = value?.trim() || config.defaults.meeting;
-	if (!meeting) throw new Error("Meeting input is required. Pass a URL/meeting code or configure defaults.meeting.");
-	return meeting;
-}
-function resolveOAuthTokenOptions(config, options) {
-	return {
-		clientId: options.clientId?.trim() || config.oauth.clientId,
-		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
-		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
-		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
-		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt
-	};
-}
-function resolveTokenOptions(config, options) {
-	return {
-		meeting: resolveMeetingInput(config, options.meeting),
-		...resolveOAuthTokenOptions(config, options)
-	};
-}
-function hasCalendarLookupOptions(options) {
-	return Boolean(options.today || options.event?.trim());
-}
-async function resolveCalendarMeetingInput(params) {
-	if (!hasCalendarLookupOptions(params.options)) return {};
-	const window = params.options.today ? buildGoogleMeetCalendarDayWindow() : {};
-	const calendarEvent = await findGoogleMeetCalendarEvent({
-		accessToken: params.accessToken,
-		calendarId: params.options.calendar,
-		eventQuery: params.options.event,
-		...window
-	});
-	return {
-		meeting: calendarEvent.meetingUri,
-		calendarEvent
-	};
-}
-async function resolveMeetingForToken(params) {
-	const calendarMeeting = await resolveCalendarMeetingInput({
-		accessToken: params.accessToken,
-		options: params.options
+		writeSetupStatus(status);
 	});
-	const meeting = calendarMeeting.meeting ?? params.configuredMeeting ?? params.config.defaults.meeting;
-	if (!meeting) throw new Error("Meeting input is required. Pass --meeting, --today, --event, or configure defaults.meeting.");
-	return calendarMeeting.calendarEvent ? {
-		meeting,
-		calendarEvent: calendarMeeting.calendarEvent
-	} : { meeting };
-}
-function resolveCreateTokenOptions(config, options) {
-	return {
-		clientId: options.clientId?.trim() || config.oauth.clientId,
-		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
-		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
-		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
-		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt
-	};
-}
-function resolveArtifactTokenOptions(config, options) {
-	const meeting = options.meeting?.trim() || config.defaults.meeting;
-	const conferenceRecord = options.conferenceRecord?.trim();
-	if (!meeting && !conferenceRecord && !hasCalendarLookupOptions(options)) throw new Error("Meeting input or conference record is required. Pass --meeting, --today, --event, --conference-record, or configure defaults.meeting.");
-	return {
-		meeting,
-		conferenceRecord,
-		clientId: options.clientId?.trim() || config.oauth.clientId,
-		clientSecret: options.clientSecret?.trim() || config.oauth.clientSecret,
-		refreshToken: options.refreshToken?.trim() || config.oauth.refreshToken,
-		accessToken: options.accessToken?.trim() || config.oauth.accessToken,
-		expiresAt: parseOptionalNumber(options.expiresAt) ?? config.oauth.expiresAt,
-		pageSize: parsePositiveIntegerOption(options.pageSize, "page-size"),
-		includeTranscriptEntries: options.transcriptEntries !== false,
-		allConferenceRecords: Boolean(options.allConferenceRecords),
-		includeDocumentBodies: Boolean(options.includeDocBodies),
-		mergeDuplicateParticipants: options.mergeDuplicates !== false,
-		lateAfterMinutes: parseOptionalNumber(options.lateAfterMinutes),
-		earlyBeforeMinutes: parseOptionalNumber(options.earlyBeforeMinutes)
-	};
-}
-function hasCreateOAuth(config, options) {
-	return Boolean(options.accessToken?.trim() || options.refreshToken?.trim() || config.oauth.accessToken || config.oauth.refreshToken);
-}
-function registerGoogleMeetCli(params) {
-	const callGateway = params.callGatewayFromCli ?? callGatewayFromCli;
-	const operationTimeoutMs = resolveGoogleMeetGatewayOperationTimeoutMs(params.config);
-	const root = params.program.command("googlemeet").description("Google Meet participant utilities").addHelpText("after", () => `\nDocs: https://docs.openclaw.ai/plugins/google-meet\n`);
-	root.command("auth").description("Google Meet OAuth helpers").command("login").description("Run a PKCE OAuth flow and print refresh-token JSON to store in plugin config").option("--client-id <id>", "OAuth client id override").option("--client-secret <secret>", "OAuth client secret override").option("--manual", "Use copy/paste callback flow instead of localhost callback").option("--json", "Print the token payload as JSON", false).option("--timeout-sec <n>", "Local callback timeout in seconds", "300").action(async (options) => {
-		const clientId = options.clientId?.trim() || params.config.oauth.clientId;
-		const clientSecret = options.clientSecret?.trim() || params.config.oauth.clientSecret;
-		if (!clientId) throw new Error("Missing Google Meet OAuth client id. Configure oauth.clientId or pass --client-id.");
-		const { verifier, challenge } = createGoogleMeetPkce();
-		const state = createGoogleMeetOAuthState();
-		const authUrl = buildGoogleMeetAuthUrl({
-			clientId,
-			challenge,
-			state
+	root.command("leave").argument("<session-id>", "Meet session ID").action(async (sessionId) => {
+		const delegated = await callGoogleMeetGateway({
+			callGateway,
+			method: "googlemeet.leave",
+			payload: { sessionId }
 		});
-		const tokens = await exchangeGoogleMeetAuthCode({
-			clientId,
-			clientSecret,
-			code: await waitForGoogleMeetAuthCode({
-				state,
-				manual: Boolean(options.manual),
-				timeoutMs: resolveGoogleMeetOAuthCallbackTimeoutMs(options.timeoutSec),
-				authUrl,
-				promptInput,
-				writeLine: (message) => writeStdoutLine("%s", message)
-			}),
-			verifier
+		if (delegated.ok) {
+			if (!delegated.payload.found) throw new Error("session not found");
+			writeStdoutLine("left %s", sessionId);
+			return;
+		}
+		if (!(await (await params.ensureRuntime()).leave(sessionId)).found) throw new Error("session not found");
+		writeStdoutLine("left %s", sessionId);
+	});
+	root.command("speak").argument("<session-id>", "Meet session ID").argument("[message]", "Realtime instructions to speak now").action(async (sessionId, message) => {
+		const delegated = await callGoogleMeetGateway({
+			callGateway,
+			method: "googlemeet.speak",
+			payload: {
+				sessionId,
+				message
+			}
 		});
-		if (!tokens.refreshToken) throw new Error("Google OAuth did not return a refresh token. Re-run the flow with consent and offline access.");
-		const payload = {
-			oauth: {
-				clientId,
-				...clientSecret ? { clientSecret } : {},
-				refreshToken: tokens.refreshToken,
-				accessToken: tokens.accessToken,
-				expiresAt: tokens.expiresAt
-			},
-			scope: tokens.scope,
-			tokenType: tokens.tokenType
-		};
-		if (!options.json) writeStdoutLine("Paste this into plugins.entries.google-meet.config:");
-		writeStdoutJson(payload);
+		if (delegated.ok) {
+			const result = delegated.payload;
+			if (!result.found) throw new Error("session not found");
+			if (!result.spoken) throw new Error(result.session?.chrome?.health?.speechBlockedMessage ?? "session has no active realtime audio bridge");
+			writeStdoutLine("speaking on %s", sessionId);
+			return;
+		}
+		const result = await (await params.ensureRuntime()).speak(sessionId, message);
+		if (!result.found) throw new Error("session not found");
+		if (!result.spoken) throw new Error(result.session?.chrome?.health?.speechBlockedMessage ?? "session has no active realtime audio bridge");
+		writeStdoutLine("speaking on %s", sessionId);
 	});
-	const context = {
-		root,
-		config: params.config,
-		ensureRuntime: params.ensureRuntime,
-		callGateway,
-		operationTimeoutMs,
-		resolveMeetingInput,
-		resolveOAuthTokenOptions,
-		resolveTokenOptions,
-		resolveMeetingForToken,
-		resolveCreateTokenOptions,
-		resolveArtifactTokenOptions,
-		hasCreateOAuth
-	};
-	registerGoogleMeetCreateCommands(context);
-	registerGoogleMeetProbeCommands(context);
-	registerGoogleMeetApiCommands(context);
-	registerGoogleMeetArtifactCommands(context);
-	registerGoogleMeetSessionCommands(context);
-	registerGoogleMeetDoctorCommand(context);
-	registerGoogleMeetLifecycleCommands(context);
 }
 //#endregion
 export { buildGoogleMeetExportManifest, googleMeetExportFileNames, registerGoogleMeetCli, testing, writeMeetExportBundle };