# Enriched Shadow Mode — Google OAuth Setup Log

## Status: Waiting for client_secret.json

**Date:** 2026-05-02  
**Issue:** File transfer from Mac to Beelink via Tailscale not complete

---

## What Happened

1. ✅ Matt created OAuth client in Google Cloud Console (Hoffmann-Icarus project)
2. ✅ Downloaded client_secret.json
3. ⏳ Sent to Beelink via Tailscale (file not yet found)

## Current State

**On Beelink (titanium-butler):**
- No client_secret.json found in home directory
- No new .json files in last 60 minutes (excluding .openclaw/)
- Existing secret: `~/.openclaw/secrets/gcal-service-account.json` (old service account)

**Possible Issues:**
- File transfer via Tailscale still in progress
- File landed in different directory (Downloads, tmp, etc.)
- Different filename than expected
- Transfer method needs adjustment

---

## Transfer Options

### Option 1: SCP (Most Reliable)
From your Mac:
```bash
scp ~/Downloads/client_secret.json hoffmann_admin@100.x.x.x:~/
```
(Replace 100.x.x.x with Beelink's Tailscale IP)

### Option 2: Copy-Paste Contents
1. On Mac: `cat ~/Downloads/client_secret.json` (copy output)
2. On Beelink (SSH):
   ```bash
   cat > ~/client_secret.json << 'EOF'
   [paste contents here]
   EOF
   ```

### Option 3: Tailscale Drop
If you have Tailscale's file sharing:
```bash
# On Mac, move to shared folder
mv ~/Downloads/client_secret.json ~/Tailscale/Shared/

# On Beelink
cp ~/Tailscale/Shared/client_secret.json ~/
```

### Option 4: Check Common Locations
The file might already be there under a different name:
```bash
# SSH to Beelink and run:
find /home/hoffmann_admin/ -name "*client*" -o -name "*secret*" -o -name "*google*" 2>/dev/null
find /tmp/ -name "*.json" -mmin -120 2>/dev/null
find /home/hoffmann_admin/Downloads/ -type f 2>/dev/null
```

---

## Verification Steps (After Transfer)

Once file is on Beelink:

```bash
# 1. Verify file exists
ls -la ~/client_secret.json

# 2. Check it's valid JSON
head -20 ~/client_secret.json

# 3. Move to gog config directory
mkdir -p ~/.config/gog
mv ~/client_secret.json ~/.config/gog/
chmod 600 ~/.config/gog/client_secret.json

# 4. Authenticate with gog
gog auth credentials ~/.config/gog/client_secret.json

# 5. Add account (will trigger browser OAuth flow)
gog auth add hoffmann.family.manager@gmail.com --services calendar
```

---

## Next Action

**Matt:** Please confirm which transfer method you used, or try Option 2 (copy-paste) which is the most reliable.

Once the file is confirmed on the Beelink, I'll proceed with gog auth and read-only scope verification.