#!/usr/bin/env node
/**
 * @maxy/google MCP server.
 *
 * Live Google Calendar for one account: read plus create, update, cancel,
 * respond and free/busy. Admin agent only; no public surface.
 *
 * Auth: per-account OAuth authorization-code + PKCE against a Desktop client.
 *   The consent URL is minted here and the exchange happens here too, using the
 *   brand-config client secret. Google redirects to a loopback address nothing
 *   listens on, so the user copies the code from the failed page and passes it
 *   to google-account-register-submit. Tokens persist encrypted to
 *   {ACCOUNTS_DIR}/{accountId}/secrets/google/accounts/{email}/tokens.enc
 *
 * There is deliberately no Gmail surface — mail runs on the `email` plugin's
 * IMAP/SMTP path, and Gmail's restricted scopes would force Google's annual
 * security assessment. Calendar is a sensitive scope only.
 *
 * Required environment:
 *   ACCOUNT_ID          — provided by getMcpServers when spawned per account.
 *   PLATFORM_ROOT       — repo root; used to derive ACCOUNTS_DIR.
 *   GOOGLE_CLIENT_ID    — brand.json#googleClientId. Operator-set per brand.
 *   GOOGLE_CLIENT_SECRET — brand.json#googleClientSecret. Ships in brand
 *                          config: the vendor app is a Desktop client, whose
 *                          secret Google sanctions embedding in distributed
 *                          software. PKCE guards the code.
 */
export {};
//# sourceMappingURL=index.d.ts.map