shepherd-onboard 0.1.17 → 0.1.18

package/bin/shepherd-onboard.js

@@ -824,6 +824,8 @@ Domain-wide delegation OAuth Client ID: ${payload.googleWorkspaceDelegation.clie
 Scopes:
 ${payload.googleWorkspaceDelegation.scopes.join("\n")}
 
+The setup command copies those scopes to the clipboard as one comma-separated string on macOS. Tell the user they can paste directly into the OAuth scopes field. If clipboard copy is unavailable, use the scopes printed above.
+
 The customer does not create a service account and does not upload service account JSON in the default Shepherd-managed flow. Their super admin only authorizes the Client ID and scopes in Google Admin Console. Shepherd's backend stores and uses its private service account JSON server-side.
 Shepherd must still enforce selected users and groups internally before polling or impersonating any employee email.
 
@@ -918,15 +920,34 @@ function googleWorkspaceDelegationSetup(setup) {
 
 function printGoogleWorkspaceDelegationSetup(setup) {
   const resolved = googleWorkspaceDelegationSetup(setup);
+  const copiedScopes = copyTextToClipboard(resolved.scopes.join(","));
   console.log(`App name: ${resolved.appName}`);
   console.log(`Service account email: ${resolved.serviceAccountEmail}`);
   console.log(`Domain-wide delegation OAuth Client ID: ${resolved.clientId}`);
   console.log("Customer action: in Google Admin Console, add the Client ID above and paste these scopes.");
   console.log("Customers do not create a service account or upload service account JSON; Shepherd stores its private service account JSON server-side.");
+  if (copiedScopes) {
+    console.log("Copied comma-separated scopes to the clipboard.");
+  } else if (platform() === "darwin") {
+    console.log("Could not copy scopes to the clipboard; copy the scopes below instead.");
+  }
   console.log("\nScopes:");
   for (const scope of resolved.scopes) console.log(scope);
 }
 
+function copyTextToClipboard(text) {
+  if (platform() !== "darwin") return false;
+  try {
+    execFileSync("pbcopy", [], {
+      input: text,
+      stdio: ["pipe", "ignore", "ignore"],
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
 function authenticatedEmail(authenticated) {
   return authenticated?.workosUser?.email ?? authenticated?.account?.email ?? null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shepherd-onboard",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "Customer-facing Shepherd raw sync onboarding CLI",
   "type": "module",
   "bin": {