groove-dev 0.17.5 → 0.17.6

package/node_modules/@groove-dev/daemon/integrations-registry.json

@@ -102,9 +102,9 @@
     "authType": "none",
     "envKeys": [],
     "setupSteps": [
-      "Just install — the server handles Google sign-in automatically",
-      "On first use, a browser window will open for you to authorize",
-      "That's it — no API keys or tokens needed"
+      "Click Install, then click 'Sign in with Google'",
+      "A browser window will open — authorize Groove",
+      "Done — no API keys or tokens needed"
     ],
     "featured": false,
     "downloads": 0,
@@ -127,9 +127,9 @@
     "authType": "none",
     "envKeys": [],
     "setupSteps": [
-      "Just install — the server handles Google sign-in automatically",
-      "On first use, a browser window will open for you to authorize",
-      "That's it — no API keys or tokens needed"
+      "Click Install, then click 'Sign in with Google'",
+      "A browser window will open — authorize Groove",
+      "Done — no API keys or tokens needed"
     ],
     "featured": false,
     "downloads": 0,

package/node_modules/@groove-dev/daemon/src/api.js

@@ -506,6 +506,16 @@ export function createApi(app, daemon) {
 
   // Parameterized :id routes (after specific routes above)
 
+  app.post('/api/integrations/:id/authenticate', (req, res) => {
+    try {
+      const handle = daemon.integrations.authenticate(req.params.id);
+      res.json({ ok: true, pid: handle.pid });
+      // Auto-cleanup tracked by the handle timeout
+    } catch (err) {
+      res.status(400).json({ error: err.message });
+    }
+  });
+
   app.post('/api/integrations/:id/install', async (req, res) => {
     try {
       const result = await daemon.integrations.install(req.params.id);

package/node_modules/@groove-dev/daemon/src/integrations.js

@@ -4,7 +4,7 @@
 import { existsSync, mkdirSync, writeFileSync, readFileSync, readdirSync, rmSync } from 'fs';
 import { resolve, dirname } from 'path';
 import { fileURLToPath } from 'url';
-import { execFileSync } from 'child_process';
+import { execFileSync, spawn as cpSpawn } from 'child_process';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
@@ -457,6 +457,48 @@ export class IntegrationStore {
     return !!(clientId && clientSecret);
   }
 
+  /**
+   * Pre-authenticate an auto-auth integration by running its MCP server briefly.
+   * The server will open a browser for OAuth. Once auth completes, the server
+   * stores tokens locally so future agent spawns work without prompting.
+   * Returns a handle to track the auth process.
+   */
+  authenticate(integrationId) {
+    const entry = this.registry.find((s) => s.id === integrationId);
+    if (!entry) throw new Error(`Integration not found: ${integrationId}`);
+
+    const command = entry.command || 'npx';
+    const args = entry.args || ['-y', entry.npmPackage];
+
+    // Build env with any configured credentials
+    const env = {};
+    for (const ek of (entry.envKeys || [])) {
+      const val = this.getCredential(integrationId, ek.key);
+      if (val) env[ek.key] = val;
+    }
+
+    // Spawn the MCP server — it will trigger OAuth on startup
+    const proc = cpSpawn(command, args, {
+      env: { ...process.env, ...env },
+      stdio: ['pipe', 'pipe', 'pipe'],
+      detached: false,
+    });
+
+    // Auto-kill after 2 minutes (auth should complete well before that)
+    const timeout = setTimeout(() => {
+      try { proc.kill('SIGTERM'); } catch { /* ignore */ }
+    }, 120_000);
+
+    proc.on('exit', () => clearTimeout(timeout));
+
+    this.daemon.audit.log('integration.authenticate', { id: integrationId });
+
+    return {
+      pid: proc.pid,
+      kill: () => { clearTimeout(timeout); try { proc.kill('SIGTERM'); } catch { /* ignore */ } },
+    };
+  }
+
   // --- Internal ---
 
   _isInstalled(integrationId) {