mcp-google-multi 5.2.0-alpha.6 → 5.2.0-beta.1

package/dist/auth.js

@@ -111,10 +111,15 @@ export function resolveScopesForAccount(alias) {
 export async function runAuthFlow(args) {
     const accountIdx = args.indexOf('--account');
     if (accountIdx === -1 || !args[accountIdx + 1]) {
-        console.error('Usage: node dist/index.js auth --account <alias>');
+        console.error('Usage: mcp-google-multi auth --account <alias>');
         console.error(`Valid aliases: ${ACCOUNTS.join(', ')}`);
         process.exit(1);
     }
+    if (!process.env.GOOGLE_CLIENT_ID || !process.env.GOOGLE_CLIENT_SECRET) {
+        console.error('GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET are not set. Create an OAuth Desktop client ' +
+            '(see docs/google-cloud-setup.md) and add both to your environment before authenticating.');
+        process.exit(1);
+    }
     const alias = args[accountIdx + 1];
     if (!ACCOUNTS.includes(alias)) {
         console.error(`Unknown account "${alias}". Valid aliases: ${ACCOUNTS.join(', ')}`);
@@ -178,6 +183,7 @@ export async function runAuthFlow(args) {
                     res.end('<h2>Authentication successful!</h2><p>You can close this tab.</p>');
                     server.destroy();
                     console.log(`Token saved (encrypted) for ${alias}.`);
+                    console.log('Next: authenticate your other aliases, then verify with: mcp-google-multi config check');
                     resolve();
                 }
             }
@@ -190,6 +196,8 @@ export async function runAuthFlow(args) {
         })
             // Bind to loopback only — never expose the OAuth callback to the local network.
             .listen(4242, '127.0.0.1', () => {
+            // Always print the URL: `open` silently no-ops on headless/SSH sessions.
+            console.log(`Opening your browser to authorize "${alias}". If nothing opens, visit:\n${authorizeUrl}`);
             open(authorizeUrl, { wait: false }).then((cp) => cp.unref());
         });
         destroyer(server);

package/dist/executor.js

@@ -27,6 +27,7 @@ export async function executeApiMethod(method, args, deps = {}) {
             message: 'Binary media download (alt=media) returns no usable JSON through this tool.',
             hint: 'Use drive_download / drive_export for file content.',
             retriable: false,
+            account: args.account,
         }, true);
     }
     let url;
@@ -39,6 +40,7 @@ export async function executeApiMethod(method, args, deps = {}) {
             message: err.message,
             hint: `Required params for ${method.id}: ${method.requiredParams.join(', ') || '(none)'}`,
             retriable: false,
+            account: args.account,
         }, true);
     }
     if (!isGoogleApiUrl(url)) {
@@ -47,6 +49,7 @@ export async function executeApiMethod(method, args, deps = {}) {
             message: `Refusing to send credentials to a non-googleapis.com host for "${method.id}".`,
             hint: 'The discovery cache may be corrupt; delete DISCOVERY_CACHE_PATH and retry.',
             retriable: false,
+            account: args.account,
         }, true);
     }
     try {

package/dist/index.js

@@ -81,7 +81,20 @@ async function main() {
         const counts = registry.visibleCount();
         console.log(`Write-control: ${describePolicy(policy)}`);
         console.log(`CUD tools enabled: ${cud.length - disabled.length}/${cud.length}`);
-        console.log(`Disabled: ${disabled.map((t) => t.name).join(', ') || '(none)'}`);
+        // At full-coverage scale, a flat name dump is unreadable — summarize per
+        // service unless the list is short.
+        let disabledLine = '(none)';
+        if (disabled.length > 0 && disabled.length <= 20) {
+            disabledLine = disabled.map((t) => t.name).join(', ');
+        }
+        else if (disabled.length > 20) {
+            const perService = new Map();
+            for (const t of disabled)
+                perService.set(t.service, (perService.get(t.service) ?? 0) + 1);
+            const summary = [...perService.entries()].sort(([a], [b]) => a.localeCompare(b)).map(([s, n]) => `${s} ${n}`).join(', ');
+            disabledLine = `${disabled.length} write tools (${summary}) — enable via GOOGLE_PROFILE / GOOGLE_WRITE_ALLOW`;
+        }
+        console.log(`Disabled: ${disabledLine}`);
         console.log(`Services: ${registry.services().join(', ')}`);
         console.log(`Tool surface: ${counts.eager} eager (discover + escape hatch), ${counts.hidden} deferred until discovery`);
         console.log(`Escape hatch: google_api_call CUD verdicts follow profile=${policy.profile} and your allow/deny globs`);

package/dist/tools/drive.js

@@ -246,7 +246,7 @@ export function registerDriveTools(server) {
             const dest = path.join(savePath, path.basename(filename));
             const res = await drive.files.get({ fileId, alt: 'media', supportsAllDrives: true }, { responseType: 'stream' });
             // pipeline destroys both streams on source/sink error; raw .pipe leaks the partial file.
-            await pipeline(res.data, fs.createWriteStream(dest));
+            await pipeline(res.data, fs.createWriteStream(dest, { mode: 0o600 }));
             const { size } = fs.statSync(dest);
             return {
                 content: [{ type: 'text', text: JSON.stringify({ savedPath: dest, bytes: size }, null, 2) }],
@@ -272,7 +272,7 @@ export function registerDriveTools(server) {
             const dest = path.join(savePath, path.basename(filename));
             const res = await drive.files.export({ fileId, mimeType: exportMime }, { responseType: 'stream' });
             // pipeline destroys both streams on source/sink error; raw .pipe leaks the partial file.
-            await pipeline(res.data, fs.createWriteStream(dest));
+            await pipeline(res.data, fs.createWriteStream(dest, { mode: 0o600 }));
             const { size } = fs.statSync(dest);
             return {
                 content: [{ type: 'text', text: JSON.stringify({ savedPath: dest, bytes: size }, null, 2) }],

package/dist/tools/gmail.js

@@ -324,7 +324,7 @@ export function registerGmailTools(server) {
             const buffer = Buffer.from(data, 'base64url');
             // Strip path components so callers can't escape savePath via "../".
             const fullPath = path.join(savePath, path.basename(filename));
-            await fs.promises.writeFile(fullPath, buffer);
+            await fs.promises.writeFile(fullPath, buffer, { mode: 0o600 });
             return {
                 content: [{ type: 'text', text: `Saved to ${fullPath} (${buffer.length} bytes)` }],
             };

package/dist/tools/google-api.js

@@ -112,7 +112,7 @@ export function registerEscapeTools(registry, policy, deps = {}) {
         annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
     }, async ({ account, api, methodId, pathParams, queryParams, body }) => {
         if (!WORKSPACE_APIS[api]) {
-            return jsonResult({ error: 'unknown_api', message: `Unknown api "${api}".`, hint: `Known APIs: ${apiList}`, retriable: false }, true);
+            return jsonResult({ error: 'unknown_api', message: `Unknown api "${api}".`, hint: `Known APIs: ${apiList}`, retriable: false, account }, true);
         }
         if (!apiEnabled(api))
             return toolsetDisabled(api);
@@ -121,7 +121,7 @@ export function registerEscapeTools(registry, policy, deps = {}) {
             index = await loadMethodIndex(api, deps);
         }
         catch (err) {
-            return jsonResult({ error: 'discovery_unavailable', message: err.message, retriable: true }, true);
+            return jsonResult({ error: 'discovery_unavailable', message: err.message, retriable: true, account }, true);
         }
         const method = index.find((m) => m.id === methodId);
         if (!method) {
@@ -130,6 +130,7 @@ export function registerEscapeTools(registry, policy, deps = {}) {
                 message: `No method "${methodId}" in ${api}.`,
                 hint: `Use google_api_search({query: "...", api: "${api}"}) to find the right method id.`,
                 retriable: false,
+                account,
             }, true);
         }
         const cud = cudFromMethod(method);

package/dist/write-control.js

@@ -4,6 +4,11 @@ function parseGlobs(value) {
 }
 export function resolvePolicy(env = process.env) {
     const raw = (env.GOOGLE_PROFILE ?? 'read-only').trim();
+    if (raw && !PROFILES.includes(raw)) {
+        // Fail-closed to read-only, but say so — a typo'd profile otherwise looks
+        // like every write tool silently breaking.
+        process.stderr.write(`GOOGLE_PROFILE="${raw}" is not valid (${PROFILES.join(' | ')}); using read-only\n`);
+    }
     return {
         profile: PROFILES.includes(raw) ? raw : 'read-only',
         readOnly: /^(1|true|yes)$/i.test(env.GOOGLE_READ_ONLY ?? ''),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-google-multi",
-  "version": "5.2.0-alpha.6",
+  "version": "5.2.0-beta.1",
   "description": "Local MCP server for Google Workspace (Gmail, Drive, Calendar, Sheets, Docs, Contacts, Tasks, Meet, Search Console, +Forms/Chat/Admin) across multiple accounts — OAuth-only, encrypted token storage, deny-by-default writes.",
   "type": "module",
   "license": "MIT",