@rubytech/create-maxy-code 0.1.470 → 0.1.471

package/payload/platform/plugins/google/mcp/dist/tools/account-register.d.ts

@@ -0,0 +1,42 @@
+export declare const CALENDAR_SCOPE = "https://www.googleapis.com/auth/calendar";
+/** Google refuses an authorization code older than roughly ten minutes; a
+ *  pending entry past that is stranded, not live. */
+export declare const PENDING_LIFETIME_SEC = 600;
+export declare function newPkce(): {
+    verifier: string;
+    challenge: string;
+};
+export declare function buildConsentUrl(args: {
+    clientId: string;
+    redirectUri: string;
+    state: string;
+    challenge: string;
+    accountId: string;
+}): string;
+export interface ConnectedAccount {
+    email: string;
+    status: "ok" | "unreadable";
+}
+/** Enumerate connected Google accounts from local stores only — no network.
+ *  A count alone is not "connected": each entry carries its own status so an
+ *  unreadable blob is distinguishable from a healthy one. */
+export declare function listConnected(accountId: string, accountsDir: string): ConnectedAccount[];
+export declare function runAccountRegisterStart(args: {
+    accountId: string;
+    accountsDir: string;
+    clientId: string;
+    publicBase: string;
+}): Promise<{
+    status: "pending" | "in-progress";
+    consentUrl?: string;
+    ageSec?: number;
+}>;
+export declare function runAccountRegisterPoll(args: {
+    accountId: string;
+    accountsDir: string;
+}): Promise<{
+    status: "registered" | "pending" | "expired" | "none";
+    accounts: ConnectedAccount[];
+    ageSec?: number;
+}>;
+//# sourceMappingURL=account-register.d.ts.map

package/payload/platform/plugins/google/mcp/dist/tools/account-register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-register.d.ts","sourceRoot":"","sources":["../../src/tools/account-register.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,cAAc,6CAA6C,CAAC;AAGzE;qDACqD;AACrD,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC,wBAAgB,OAAO,IAAI;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAGjE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CAgBT;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,IAAI,GAAG,YAAY,CAAC;CAC7B;AAED;;6DAE6D;AAC7D,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAaxF;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,GAAG,aAAa,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA4BvF;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC;IACV,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;IACtD,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,CAUD"}

package/payload/platform/plugins/google/mcp/dist/tools/account-register.js

@@ -0,0 +1,102 @@
+/**
+ * Register flow: authorization-code + PKCE.
+ *
+ * `runAccountRegisterStart` mints the PKCE pair and `state`, persists them, and
+ * returns a consent URL the operator opens on any device. Google redirects to
+ * platform/ui's /api/google/oauth/callback, which holds the client secret,
+ * exchanges the code, and writes tokens. `runAccountRegisterPoll` then reports
+ * the outcome from local state only — no network.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import { existsSync, readdirSync } from "node:fs";
+import { join } from "node:path";
+import { PendingStore } from "../auth/pending-store.js";
+import { TokenStore } from "../auth/token-store.js";
+import { log } from "../lib/log.js";
+export const CALENDAR_SCOPE = "https://www.googleapis.com/auth/calendar";
+const AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+/** Google refuses an authorization code older than roughly ten minutes; a
+ *  pending entry past that is stranded, not live. */
+export const PENDING_LIFETIME_SEC = 600;
+export function newPkce() {
+    const verifier = randomBytes(48).toString("base64url");
+    return { verifier, challenge: createHash("sha256").update(verifier).digest("base64url") };
+}
+export function buildConsentUrl(args) {
+    // `account` rides on the redirect_uri query so the callback knows which
+    // account to write to without trusting `state` to carry it.
+    const redirect = `${args.redirectUri}?account=${encodeURIComponent(args.accountId)}`;
+    const q = new URLSearchParams({
+        client_id: args.clientId,
+        redirect_uri: redirect,
+        response_type: "code",
+        scope: CALENDAR_SCOPE,
+        access_type: "offline",
+        prompt: "consent",
+        state: args.state,
+        code_challenge: args.challenge,
+        code_challenge_method: "S256",
+    });
+    return `${AUTH_URL}?${q.toString()}`;
+}
+/** Enumerate connected Google accounts from local stores only — no network.
+ *  A count alone is not "connected": each entry carries its own status so an
+ *  unreadable blob is distinguishable from a healthy one. */
+export function listConnected(accountId, accountsDir) {
+    const dir = join(accountsDir, accountId, "secrets", "google", "accounts");
+    if (!existsSync(dir))
+        return [];
+    const out = [];
+    for (const key of readdirSync(dir)) {
+        try {
+            const blob = new TokenStore(accountId, accountsDir, key).read();
+            out.push(blob ? { email: blob.email ?? key, status: "ok" } : { email: key, status: "unreadable" });
+        }
+        catch {
+            out.push({ email: key, status: "unreadable" });
+        }
+    }
+    return out;
+}
+export async function runAccountRegisterStart(args) {
+    const pending = new PendingStore(args.accountId, args.accountsDir);
+    const age = pending.ageSec();
+    if (age !== null && age < PENDING_LIFETIME_SEC) {
+        log({
+            tag: "[google-oauth]",
+            op: "register-refused",
+            account: args.accountId,
+            reason: "in-progress",
+            ageSec: age,
+        });
+        return { status: "in-progress", ageSec: age };
+    }
+    const state = randomBytes(16).toString("hex");
+    const { verifier, challenge } = newPkce();
+    log({ tag: "[google-oauth]", op: "register", account: args.accountId, reg: state });
+    pending.write({ state, verifier, createdAt: Date.now() });
+    log({ tag: "[google-oauth]", op: "pending-write", reg: state, account: args.accountId });
+    const redirectUri = `${args.publicBase}/api/google/oauth/callback`;
+    const consentUrl = buildConsentUrl({
+        clientId: args.clientId,
+        redirectUri,
+        state,
+        challenge,
+        accountId: args.accountId,
+    });
+    log({ tag: "[google-oauth]", op: "consent-url", reg: state, scopes: CALENDAR_SCOPE, redirect: redirectUri });
+    return { status: "pending", consentUrl };
+}
+export async function runAccountRegisterPoll(args) {
+    const pending = new PendingStore(args.accountId, args.accountsDir);
+    const age = pending.ageSec();
+    const accounts = listConnected(args.accountId, args.accountsDir);
+    if (age === null)
+        return { status: accounts.length ? "registered" : "none", accounts };
+    if (age >= PENDING_LIFETIME_SEC) {
+        log({ tag: "[google-oauth]", op: "pending-stranded", account: args.accountId, ageSec: age });
+        return { status: "expired", accounts, ageSec: age };
+    }
+    return { status: "pending", accounts, ageSec: age };
+}
+//# sourceMappingURL=account-register.js.map

package/payload/platform/plugins/google/mcp/dist/tools/account-register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-register.js","sourceRoot":"","sources":["../../src/tools/account-register.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAEpC,MAAM,CAAC,MAAM,cAAc,GAAG,0CAA0C,CAAC;AACzE,MAAM,QAAQ,GAAG,8CAA8C,CAAC;AAEhE;qDACqD;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAExC,MAAM,UAAU,OAAO;IACrB,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAM/B;IACC,wEAAwE;IACxE,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,WAAW,YAAY,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;IACrF,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC;QAC5B,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,YAAY,EAAE,QAAQ;QACtB,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,cAAc,EAAE,IAAI,CAAC,SAAS;QAC9B,qBAAqB,EAAE,MAAM;KAC9B,CAAC,CAAC;IACH,OAAO,GAAG,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;AACvC,CAAC;AAOD;;6DAE6D;AAC7D,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,WAAmB;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QACrG,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAK7C;IACC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC7B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,GAAG,oBAAoB,EAAE,CAAC;QAC/C,GAAG,CAAC;YACF,GAAG,EAAE,gBAAgB;YACrB,EAAE,EAAE,kBAAkB;YACtB,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC;IAC1C,GAAG,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,GAAG,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,UAAU,4BAA4B,CAAC;IACnE,MAAM,UAAU,GAAG,eAAe,CAAC;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW;QACX,KAAK;QACL,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7G,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAG5C;IAKC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACjE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACvF,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAChC,GAAG,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACtD,CAAC"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-cancel.d.ts

@@ -0,0 +1,10 @@
+import { type GoogleConfig } from "../lib/google-client.js";
+/** Google has no separate cancel verb: DELETE removes the event and, with
+ *  sendUpdates=all, notifies attendees. That is the same user-visible outcome
+ *  as Outlook's cancel. */
+export declare function runCalendarCancel(config: GoogleConfig, args: {
+    eventId: string;
+}): Promise<{
+    cancelled: string;
+}>;
+//# sourceMappingURL=calendar-cancel.d.ts.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-cancel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-cancel.d.ts","sourceRoot":"","sources":["../../src/tools/calendar-cancel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE1E;;2BAE2B;AAC3B,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACxB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAOhC"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-cancel.js

@@ -0,0 +1,9 @@
+import { callCalendar } from "../lib/google-client.js";
+/** Google has no separate cancel verb: DELETE removes the event and, with
+ *  sendUpdates=all, notifies attendees. That is the same user-visible outcome
+ *  as Outlook's cancel. */
+export async function runCalendarCancel(config, args) {
+    await callCalendar(config, `/calendars/primary/events/${encodeURIComponent(args.eventId)}`, { method: "DELETE", query: { sendUpdates: "all" } });
+    return { cancelled: args.eventId };
+}
+//# sourceMappingURL=calendar-cancel.js.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-cancel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-cancel.js","sourceRoot":"","sources":["../../src/tools/calendar-cancel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,yBAAyB,CAAC;AAE1E;;2BAE2B;AAC3B,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAoB,EACpB,IAAyB;IAEzB,MAAM,YAAY,CAChB,MAAM,EACN,6BAA6B,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAC/D,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CACpD,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACrC,CAAC"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-create.d.ts

@@ -0,0 +1,20 @@
+import { type GoogleConfig } from "../lib/google-client.js";
+import { type CalendarEventItem } from "./calendar-list.js";
+export interface CreateArgs {
+    summary: string;
+    start: string;
+    end: string;
+    location?: string;
+    description?: string;
+    attendees?: string[];
+    allDay?: boolean;
+}
+/** Google's event start/end is `date` for all-day and `dateTime` otherwise.
+ *  Shared with calendar-update so both build the same shape. */
+export declare function toTimePoint(value: string, allDay: boolean): {
+    date: string;
+} | {
+    dateTime: string;
+};
+export declare function runCalendarCreate(config: GoogleConfig, args: CreateArgs): Promise<CalendarEventItem>;
+//# sourceMappingURL=calendar-create.d.ts.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-create.d.ts","sourceRoot":"","sources":["../../src/tools/calendar-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAkB,KAAK,iBAAiB,EAAuB,MAAM,oBAAoB,CAAC;AAEjG,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;gEACgE;AAChE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAEnG;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,iBAAiB,CAAC,CAgB5B"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-create.js

@@ -0,0 +1,25 @@
+import { callCalendar } from "../lib/google-client.js";
+import { normaliseEvent } from "./calendar-list.js";
+/** Google's event start/end is `date` for all-day and `dateTime` otherwise.
+ *  Shared with calendar-update so both build the same shape. */
+export function toTimePoint(value, allDay) {
+    return allDay ? { date: value } : { dateTime: value };
+}
+export async function runCalendarCreate(config, args) {
+    const allDay = args.allDay ?? false;
+    const body = {
+        summary: args.summary,
+        location: args.location,
+        description: args.description,
+        start: toTimePoint(args.start, allDay),
+        end: toTimePoint(args.end, allDay),
+        attendees: args.attendees?.map((email) => ({ email })),
+    };
+    const raw = await callCalendar(config, "/calendars/primary/events", {
+        method: "POST",
+        body,
+        query: { sendUpdates: "all" },
+    });
+    return normaliseEvent(raw);
+}
+//# sourceMappingURL=calendar-create.js.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-create.js","sourceRoot":"","sources":["../../src/tools/calendar-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAA+C,MAAM,oBAAoB,CAAC;AAYjG;gEACgE;AAChE,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAe;IACxD,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAoB,EACpB,IAAgB;IAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IACpC,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;QACtC,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;QAClC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;KACvD,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,YAAY,CAAiB,MAAM,EAAE,2BAA2B,EAAE;QAClF,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;KAC9B,CAAC,CAAC;IACH,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-event.d.ts

@@ -0,0 +1,6 @@
+import { type GoogleConfig } from "../lib/google-client.js";
+import { type CalendarEventItem } from "./calendar-list.js";
+export declare function runCalendarEvent(config: GoogleConfig, args: {
+    eventId: string;
+}): Promise<CalendarEventItem>;
+//# sourceMappingURL=calendar-event.d.ts.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-event.d.ts","sourceRoot":"","sources":["../../src/tools/calendar-event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAkB,KAAK,iBAAiB,EAAuB,MAAM,oBAAoB,CAAC;AAEjG,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAM5B"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-event.js

@@ -0,0 +1,7 @@
+import { callCalendar } from "../lib/google-client.js";
+import { normaliseEvent } from "./calendar-list.js";
+export async function runCalendarEvent(config, args) {
+    const raw = await callCalendar(config, `/calendars/primary/events/${encodeURIComponent(args.eventId)}`);
+    return normaliseEvent(raw);
+}
+//# sourceMappingURL=calendar-event.js.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-event.js","sourceRoot":"","sources":["../../src/tools/calendar-event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAA+C,MAAM,oBAAoB,CAAC;AAEjG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAoB,EACpB,IAAyB;IAEzB,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,MAAM,EACN,6BAA6B,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAChE,CAAC;IACF,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-freebusy.d.ts

@@ -0,0 +1,14 @@
+import { type GoogleConfig } from "../lib/google-client.js";
+export interface BusySlot {
+    start: string;
+    end: string;
+}
+/** Free/busy for one or more calendars. Defaults to the account's own primary
+ *  calendar when none is named. Returns busy blocks only — free time is the
+ *  complement, which the caller computes. */
+export declare function runCalendarFreebusy(config: GoogleConfig, args: {
+    start: string;
+    end: string;
+    calendars?: string[];
+}): Promise<Record<string, BusySlot[]>>;
+//# sourceMappingURL=calendar-freebusy.d.ts.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-freebusy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-freebusy.d.ts","sourceRoot":"","sources":["../../src/tools/calendar-freebusy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE1E,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;6CAE6C;AAC7C,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACzD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAarC"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-freebusy.js

@@ -0,0 +1,16 @@
+import { callCalendar } from "../lib/google-client.js";
+/** Free/busy for one or more calendars. Defaults to the account's own primary
+ *  calendar when none is named. Returns busy blocks only — free time is the
+ *  complement, which the caller computes. */
+export async function runCalendarFreebusy(config, args) {
+    const ids = args.calendars?.length ? args.calendars : ["primary"];
+    const res = await callCalendar(config, "/freeBusy", {
+        method: "POST",
+        body: { timeMin: args.start, timeMax: args.end, items: ids.map((id) => ({ id })) },
+    });
+    const out = {};
+    for (const [id, v] of Object.entries(res.calendars ?? {}))
+        out[id] = v.busy ?? [];
+    return out;
+}
+//# sourceMappingURL=calendar-freebusy.js.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-freebusy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-freebusy.js","sourceRoot":"","sources":["../../src/tools/calendar-freebusy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,yBAAyB,CAAC;AAO1E;;6CAE6C;AAC7C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAoB,EACpB,IAA0D;IAE1D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,MAAM,EACN,WAAW,EACX;QACE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;KACnF,CACF,CAAC;IACF,MAAM,GAAG,GAA+B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;QAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAClF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-list.d.ts

@@ -0,0 +1,44 @@
+import { type GoogleConfig } from "../lib/google-client.js";
+export interface RawGoogleEvent {
+    id: string;
+    summary?: string | null;
+    htmlLink?: string | null;
+    location?: string | null;
+    start: {
+        dateTime?: string;
+        date?: string;
+    };
+    end: {
+        dateTime?: string;
+        date?: string;
+    };
+    organizer?: {
+        email?: string;
+    };
+    attendees?: Array<{
+        email: string;
+        responseStatus?: string;
+    }>;
+}
+export interface CalendarEventItem {
+    id: string;
+    summary: string | null;
+    start: string;
+    end: string;
+    location: string | null;
+    attendees: Array<{
+        email: string;
+        responseStatus: string;
+    }>;
+    allDay: boolean;
+    organizer: string | null;
+    htmlLink: string | null;
+}
+/** Google distinguishes all-day events by carrying `date` instead of
+ *  `dateTime`; that absence is the only signal, so it is the test used. */
+export declare function normaliseEvent(raw: RawGoogleEvent): CalendarEventItem;
+export declare function runCalendarList(config: GoogleConfig, args: {
+    rangeDays?: number;
+    maxResults?: number;
+}): Promise<CalendarEventItem[]>;
+//# sourceMappingURL=calendar-list.d.ts.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-list.d.ts","sourceRoot":"","sources":["../../src/tools/calendar-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE1E,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,GAAG,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,SAAS,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;2EAC2E;AAC3E,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,iBAAiB,CAerE;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAe9B"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-list.js

@@ -0,0 +1,36 @@
+import { callCalendar } from "../lib/google-client.js";
+/** Google distinguishes all-day events by carrying `date` instead of
+ *  `dateTime`; that absence is the only signal, so it is the test used. */
+export function normaliseEvent(raw) {
+    return {
+        id: raw.id,
+        summary: raw.summary ?? null,
+        start: raw.start.dateTime ?? raw.start.date ?? "",
+        end: raw.end.dateTime ?? raw.end.date ?? "",
+        location: raw.location ?? null,
+        attendees: (raw.attendees ?? []).map((a) => ({
+            email: a.email,
+            responseStatus: a.responseStatus ?? "needsAction",
+        })),
+        allDay: raw.start.dateTime === undefined,
+        organizer: raw.organizer?.email ?? null,
+        htmlLink: raw.htmlLink ?? null,
+    };
+}
+export async function runCalendarList(config, args) {
+    const rangeDays = Math.min(Math.max(args.rangeDays ?? 7, 1), 365);
+    const maxResults = Math.min(Math.max(args.maxResults ?? 100, 1), 250);
+    const res = await callCalendar(config, "/calendars/primary/events", {
+        query: {
+            timeMin: new Date().toISOString(),
+            timeMax: new Date(Date.now() + rangeDays * 86400000).toISOString(),
+            // Expand recurring series into instances so a range read returns what the
+            // user actually sees; whole-series editing stays out of scope.
+            singleEvents: "true",
+            orderBy: "startTime",
+            maxResults,
+        },
+    });
+    return (res.items ?? []).map(normaliseEvent);
+}
+//# sourceMappingURL=calendar-list.js.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-list.js","sourceRoot":"","sources":["../../src/tools/calendar-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,yBAAyB,CAAC;AAyB1E;2EAC2E;AAC3E,MAAM,UAAU,cAAc,CAAC,GAAmB;IAChD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;QAC5B,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE;QACjD,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;QAC3C,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;QAC9B,SAAS,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,aAAa;SAClD,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;QACxC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,IAAI;QACvC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,IAAiD;IAEjD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,MAAM,YAAY,CAA+B,MAAM,EAAE,2BAA2B,EAAE;QAChG,KAAK,EAAE;YACL,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACjC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE;YAClE,0EAA0E;YAC1E,+DAA+D;YAC/D,YAAY,EAAE,MAAM;YACpB,OAAO,EAAE,WAAW;YACpB,UAAU;SACX;KACF,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAC/C,CAAC"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-respond.d.ts

@@ -0,0 +1,16 @@
+import { type GoogleConfig } from "../lib/google-client.js";
+import { type CalendarEventItem } from "./calendar-list.js";
+export type AttendeeResponse = "accepted" | "declined" | "tentative";
+/**
+ * Set this account's own attendee responseStatus.
+ *
+ * Google has no dedicated respond endpoint. The attendee array is read, the
+ * entry whose email matches the connected account is replaced, and the array
+ * is patched back. Every other attendee's status is preserved verbatim, so
+ * responding never silently rewrites someone else's answer.
+ */
+export declare function runCalendarRespond(config: GoogleConfig, args: {
+    eventId: string;
+    response: AttendeeResponse;
+}): Promise<CalendarEventItem>;
+//# sourceMappingURL=calendar-respond.d.ts.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-respond.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-respond.d.ts","sourceRoot":"","sources":["../../src/tools/calendar-respond.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAkB,KAAK,iBAAiB,EAAuB,MAAM,oBAAoB,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;AAErE;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GACpD,OAAO,CAAC,iBAAiB,CAAC,CAmB5B"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-respond.js

@@ -0,0 +1,29 @@
+import { callCalendar } from "../lib/google-client.js";
+import { normaliseEvent } from "./calendar-list.js";
+/**
+ * Set this account's own attendee responseStatus.
+ *
+ * Google has no dedicated respond endpoint. The attendee array is read, the
+ * entry whose email matches the connected account is replaced, and the array
+ * is patched back. Every other attendee's status is preserved verbatim, so
+ * responding never silently rewrites someone else's answer.
+ */
+export async function runCalendarRespond(config, args) {
+    const self = config.store.read()?.email;
+    if (!self) {
+        throw new Error("connected account email unknown; run google-account-register");
+    }
+    const path = `/calendars/primary/events/${encodeURIComponent(args.eventId)}`;
+    const current = await callCalendar(config, path);
+    const attendees = (current.attendees ?? []).map((a) => a.email.toLowerCase() === self.toLowerCase() ? { ...a, responseStatus: args.response } : a);
+    if (!attendees.some((a) => a.email.toLowerCase() === self.toLowerCase())) {
+        throw new Error(`${self} is not an attendee of event ${args.eventId}, so there is nothing to respond to`);
+    }
+    const raw = await callCalendar(config, path, {
+        method: "PATCH",
+        body: { attendees },
+        query: { sendUpdates: "all" },
+    });
+    return normaliseEvent(raw);
+}
+//# sourceMappingURL=calendar-respond.js.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-respond.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-respond.js","sourceRoot":"","sources":["../../src/tools/calendar-respond.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAA+C,MAAM,oBAAoB,CAAC;AAIjG;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,IAAqD;IAErD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,IAAI,GAAG,6BAA6B,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,YAAY,CAAiB,MAAM,EAAE,IAAI,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACpD,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAC3F,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gCAAgC,IAAI,CAAC,OAAO,qCAAqC,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAiB,MAAM,EAAE,IAAI,EAAE;QAC3D,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,EAAE,SAAS,EAAE;QACnB,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;KAC9B,CAAC,CAAC;IACH,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-update.d.ts

@@ -0,0 +1,16 @@
+import { type GoogleConfig } from "../lib/google-client.js";
+import { type CalendarEventItem } from "./calendar-list.js";
+export interface UpdateArgs {
+    eventId: string;
+    summary?: string;
+    start?: string;
+    end?: string;
+    location?: string;
+    description?: string;
+    attendees?: string[];
+    allDay?: boolean;
+}
+/** PATCH, not PUT: only the fields the caller named are sent, so an update
+ *  never blanks a field it was not asked to change. */
+export declare function runCalendarUpdate(config: GoogleConfig, args: UpdateArgs): Promise<CalendarEventItem>;
+//# sourceMappingURL=calendar-update.d.ts.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-update.d.ts","sourceRoot":"","sources":["../../src/tools/calendar-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAkB,KAAK,iBAAiB,EAAuB,MAAM,oBAAoB,CAAC;AAGjG,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;uDACuD;AACvD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,iBAAiB,CAAC,CA0B5B"}

package/payload/platform/plugins/google/mcp/dist/tools/calendar-update.js

@@ -0,0 +1,32 @@
+import { callCalendar } from "../lib/google-client.js";
+import { normaliseEvent } from "./calendar-list.js";
+import { toTimePoint } from "./calendar-create.js";
+/** PATCH, not PUT: only the fields the caller named are sent, so an update
+ *  never blanks a field it was not asked to change. */
+export async function runCalendarUpdate(config, args) {
+    // allDay is INFERRED from the stored event when the caller omits it. Assuming
+    // false would send {dateTime: "2026-07-20"} for an all-day event whose start
+    // was being moved, which Google rejects with a 400.
+    let allDay = args.allDay;
+    if (allDay === undefined && (args.start !== undefined || args.end !== undefined)) {
+        const current = await callCalendar(config, `/calendars/primary/events/${encodeURIComponent(args.eventId)}`);
+        allDay = current.start.dateTime === undefined;
+    }
+    allDay = allDay ?? false;
+    const body = {};
+    if (args.summary !== undefined)
+        body.summary = args.summary;
+    if (args.location !== undefined)
+        body.location = args.location;
+    if (args.description !== undefined)
+        body.description = args.description;
+    if (args.start !== undefined)
+        body.start = toTimePoint(args.start, allDay);
+    if (args.end !== undefined)
+        body.end = toTimePoint(args.end, allDay);
+    if (args.attendees !== undefined)
+        body.attendees = args.attendees.map((email) => ({ email }));
+    const raw = await callCalendar(config, `/calendars/primary/events/${encodeURIComponent(args.eventId)}`, { method: "PATCH", body, query: { sendUpdates: "all" } });
+    return normaliseEvent(raw);
+}
+//# sourceMappingURL=calendar-update.js.map

package/payload/platform/plugins/google/mcp/dist/tools/calendar-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-update.js","sourceRoot":"","sources":["../../src/tools/calendar-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAA+C,MAAM,oBAAoB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAanD;uDACuD;AACvD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAoB,EACpB,IAAgB;IAEhB,8EAA8E;IAC9E,6EAA6E;IAC7E,oDAAoD;IACpD,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzB,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;QACjF,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,MAAM,EACN,6BAA6B,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAChE,CAAC;QACF,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC;IAChD,CAAC;IACD,MAAM,GAAG,MAAM,IAAI,KAAK,CAAC;IACzB,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC5D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/D,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACxE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,MAAM,EACN,6BAA6B,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAC/D,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CACzD,CAAC;IACF,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/payload/platform/plugins/google/references/auth.md

@@ -208,6 +208,41 @@ Divergence from Outlook: the recommended Web-application flow (Option B) also ne
 actionable signal (`clientIdConfigured=false`), register refuses, and no operator action
 makes it work until the vendor client exists — mirroring Outlook's inert behaviour.
 
+### Installing the secret on a device (operator step, once per install)
+
+Nothing automates this and nothing can: the secret cannot ship in the npm
+package, so it is placed by hand after the install exists. Until it is, the
+plugin's tools load and `google-account-register` refuses with a message naming
+this file — the refusal is deliberate and happens *before* the user consents,
+so nobody burns a consent on a flow that cannot complete.
+
+On the device, with the values from the brand's Google Cloud OAuth client:
+
+```bash
+INSTALL=~/<brand>-code                 # e.g. ~/sitedesk-code
+( umask 077; mkdir -p "$INSTALL/platform/config" )
+( umask 077; cat > "$INSTALL/platform/config/google-house.env" <<'EOF'
+GOOGLE_CLIENT_ID=<the client id>
+GOOGLE_CLIENT_SECRET=<the client secret>
+EOF
+)
+chmod 600 "$INSTALL/platform/config/google-house.env"
+```
+
+Then restart the install's UI service so the route picks it up.
+
+Confirm it took without printing the secret — the boot line reports presence
+only:
+
+```bash
+grep -m1 'google-mcp. boot' ~/.<brand>-code/logs/server.log
+# ... houseSecretPresent=true
+```
+
+`houseSecretPresent=false` on an install whose brand ships a `googleClientId`
+is the mis-provision signature. The secret is never echoed, never logged, and
+never read by the MCP process — only its presence is checked.
+
 ### Client-secret storage: house-only (decided 2026-07-18)
 
 An earlier draft of this file said the secret is "held in the brand's secret store, the same

package/payload/platform/plugins/ledger/.claude-plugin/plugin.json

@@ -0,0 +1,21 @@
+{
+  "name": "ledger",
+  "description": "Cash book and AR/AP ledger. Records invoices raised, bills received, payments, credits and loose cash movements in the graph, and computes what is outstanding rather than storing it. Provides ledger-invoice-record, ledger-payment-record, ledger-credit-record, ledger-cash-record, ledger-balance, ledger-statement and ledger-reconcile.",
+  "version": "0.1.0",
+  "author": {
+    "name": "Rubytech LLC"
+  },
+  "mcpServers": {
+    "ledger": {
+      "type": "stdio",
+      "command": "node",
+      "args": [
+        "${CLAUDE_PLUGIN_ROOT}/lib/mcp-spawn-tee/index.js",
+        "${CLAUDE_PLUGIN_ROOT}/mcp/dist/index.js"
+      ],
+      "env": {
+        "MCP_SPAWN_TEE_NAME": "ledger"
+      }
+    }
+  }
+}