@alfe.ai/openclaw-google

OpenClaw tools for multi-account Google Workspace access through the gws CLI.

The plugin exposes three tools:

• google_list_accounts discovers the connected accounts.
• google_run_command runs a gws command for one required account email.
• google_disconnect_account permanently disconnects one confirmed account.

Safety and command syntax

The account selector is mandatory for every credential-touching call. The selected per-account config directory is the only Google credential source passed to the child process; ambient Google token and credentials-file environment variables are removed.

command uses familiar shell-style quoting only to form an argument vector—it is never passed to a shell. This preserves JSON arguments such as:

drive files list --params '{"pageSize": 10}'

gws auth commands are blocked because the integration owns authentication. --upload and --output paths are confined to the configured agent workspace. Destructive method names require confirmCommand to exactly repeat the command, unless --dry-run is present. Account disconnection similarly requires an exact confirmEmail.

Non-zero gws exits are returned as explicit tool errors. Their diagnostics are bounded and redact credentials plus local config/workspace paths.

Development

pnpm --filter @alfe.ai/openclaw-google lint
pnpm --filter @alfe.ai/openclaw-google typecheck
pnpm --filter @alfe.ai/openclaw-google test
pnpm --filter @alfe.ai/openclaw-google build

The package publishes ESM and CJS entrypoints and declares its complete static tool catalog in openclaw.plugin.json.

Part of Alfe. See the documentation for platform setup.