shepherd-onboard 0.1.19 → 0.1.20

package/bin/shepherd-onboard.js

@@ -19,6 +19,7 @@ const DEFAULT_MESSAGE_CHAT_SEARCH_LIMIT = 200;
 const INITIAL_MESSAGE_CHAT_ROWS = 20;
 const SHEPHERD_LOGO_PATH = join(PACKAGE_DIR, "assets", "shepherd_G_vector_136033.png");
 const GRANOLA_API_KEYS_PATH = "/settings/integrations/api-keys";
+const GOOGLE_WORKSPACE_DELEGATION_ADMIN_URL = "https://admin.google.com/ac/owl/domainwidedelegation";
 const GOOGLE_WORKSPACE_DELEGATION_APP_NAME = "Shepherd";
 const GOOGLE_WORKSPACE_DELEGATION_SERVICE_ACCOUNT_EMAIL =
   "gigabrain-delegation@shepherd-gigabrain.iam.gserviceaccount.com";
@@ -148,6 +149,7 @@ async function runOnboarding() {
   if (sources.google) {
     console.log("\nGoogle Workspace domain-wide delegation");
     printGoogleWorkspaceDelegationSetup(session.googleWorkspaceDelegation);
+    await openGoogleWorkspaceDelegationAdmin({ noOpen });
     await waitForEnter("After the Google Workspace super admin authorizes Shepherd in Admin Console, press Enter.");
   }
 
@@ -297,6 +299,16 @@ async function runAgentOnboarding() {
   });
 
   const opened = [];
+  let googleAdminConsole = null;
+  if (sources.google) {
+    googleAdminConsole = { url: GOOGLE_WORKSPACE_DELEGATION_ADMIN_URL };
+    if (!noOpen) {
+      await openGoogleWorkspaceDelegationAdmin({ noOpen: false });
+      googleAdminConsole.opened = true;
+    } else {
+      googleAdminConsole.opened = false;
+    }
+  }
   for (const [provider, url] of Object.entries(session.authUrls ?? {})) {
     if (typeof url !== "string") continue;
     if (provider === "google") continue;
@@ -315,6 +327,7 @@ async function runAgentOnboarding() {
       account: publicAgentAccount(session.account),
       opened,
       googleWorkspaceDelegation: sources.google ? googleWorkspaceDelegationSetup(session.googleWorkspaceDelegation) : undefined,
+      googleAdminConsole,
       granolaApiKeyPage,
       statePath,
       messagesChatsCommand: sources.messages ? `${agentCommand()} messages-chats` : undefined,
@@ -334,10 +347,14 @@ async function runAgentOnboarding() {
     console.log(`Opened browser authorization: ${opened.join(", ")}`);
   }
   if (sources.google) {
+    if (googleAdminConsole?.opened) {
+      console.log(`Opened Google Admin Console: ${googleAdminConsole.url}`);
+    }
     console.log("\nGoogle Workspace domain-wide delegation setup:");
     printGoogleWorkspaceDelegationSetup(session.googleWorkspaceDelegation);
   }
   if (noOpen) {
+    if (sources.google) console.log(`Google Admin Console domain-wide delegation URL: ${GOOGLE_WORKSPACE_DELEGATION_ADMIN_URL}`);
     for (const [provider, url] of Object.entries(session.authUrls ?? {})) {
       if (provider === "google") continue;
       console.log(`${provider} auth URL: ${url}`);
@@ -813,9 +830,9 @@ Add skip flags for sources the user did not select:
 - --no-granola
 - --no-messages
 
-That command creates/reuses the customer user and org, prints Google Workspace domain-wide delegation setup values, opens Slack browser auth if selected, and saves local state.
+That command creates/reuses the customer user and org, opens the Google Admin Console domain-wide delegation page if Google Workspace is selected, prints Google Workspace setup values, opens Slack browser auth if selected, and saves local state.
 
-If Google Workspace is selected, show this Admin Console setup to the user and have their Google Workspace super admin authorize it:
+If Google Workspace is selected, the setup command opens the Admin Console domain-wide delegation page. Show this setup to the user and have their Google Workspace super admin authorize it:
 
 App name: ${payload.googleWorkspaceDelegation.appName}
 Service account email: ${payload.googleWorkspaceDelegation.serviceAccountEmail}
@@ -1072,6 +1089,15 @@ async function openOrPrint(url, opts) {
   });
 }
 
+async function openGoogleWorkspaceDelegationAdmin(opts = {}) {
+  if (opts.noOpen) {
+    console.log(`Google Admin Console domain-wide delegation URL: ${GOOGLE_WORKSPACE_DELEGATION_ADMIN_URL}`);
+    return { opened: false, url: GOOGLE_WORKSPACE_DELEGATION_ADMIN_URL };
+  }
+  await openOrPrint(GOOGLE_WORKSPACE_DELEGATION_ADMIN_URL, { noOpen: false });
+  return { opened: true, url: GOOGLE_WORKSPACE_DELEGATION_ADMIN_URL };
+}
+
 async function openGranolaApiKeys(opts = {}) {
   const deepLink = granolaApiKeysDeepLink();
   if (opts.noOpen) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shepherd-onboard",
-  "version": "0.1.19",
+  "version": "0.1.20",
   "description": "Customer-facing Shepherd raw sync onboarding CLI",
   "type": "module",
   "bin": {