tide-commander 1.86.0 → 1.87.0

package/dist/assets/{web-DlbC6v-L.js → web-D3zCwsS9.js}

@@ -1 +1 @@
-import{ck as s}from"./main-D2EQVTAu.js";import"./vendor-react--Eh9ivFN.js";import"./vendor-three-Chj50gSY.js";class l extends s{constructor(){super(...arguments),this.pending=[],this.deliveredNotifications=[],this.hasNotificationSupport=()=>{if(!("Notification"in window)||!Notification.requestPermission)return!1;if(Notification.permission!=="granted")try{new Notification("")}catch(i){if(i instanceof Error&&i.name==="TypeError")return!1}return!0}}async getDeliveredNotifications(){const i=[];for(const t of this.deliveredNotifications){const e={title:t.title,id:parseInt(t.tag),body:t.body};i.push(e)}return{notifications:i}}async removeDeliveredNotifications(i){for(const t of i.notifications){const e=this.deliveredNotifications.find(n=>n.tag===String(t.id));e==null||e.close(),this.deliveredNotifications=this.deliveredNotifications.filter(()=>!e)}}async removeAllDeliveredNotifications(){for(const i of this.deliveredNotifications)i.close();this.deliveredNotifications=[]}async createChannel(){throw this.unimplemented("Not implemented on web.")}async deleteChannel(){throw this.unimplemented("Not implemented on web.")}async listChannels(){throw this.unimplemented("Not implemented on web.")}async schedule(i){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");for(const t of i.notifications)this.sendNotification(t);return{notifications:i.notifications.map(t=>({id:t.id}))}}async getPending(){return{notifications:this.pending}}async registerActionTypes(){throw this.unimplemented("Not implemented on web.")}async cancel(i){this.pending=this.pending.filter(t=>!i.notifications.find(e=>e.id===t.id))}async areEnabled(){const{display:i}=await this.checkPermissions();return{value:i==="granted"}}async changeExactNotificationSetting(){throw this.unimplemented("Not implemented on web.")}async checkExactNotificationSetting(){throw this.unimplemented("Not implemented on web.")}async requestPermissions(){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");return{display:this.transformNotificationPermission(await Notification.requestPermission())}}async checkPermissions(){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");return{display:this.transformNotificationPermission(Notification.permission)}}transformNotificationPermission(i){switch(i){case"granted":return"granted";case"denied":return"denied";default:return"prompt"}}sendPending(){var i;const t=[],e=new Date().getTime();for(const n of this.pending)!((i=n.schedule)===null||i===void 0)&&i.at&&n.schedule.at.getTime()<=e&&(this.buildNotification(n),t.push(n));this.pending=this.pending.filter(n=>!t.find(o=>o===n))}sendNotification(i){var t;if(!((t=i.schedule)===null||t===void 0)&&t.at){const e=i.schedule.at.getTime()-new Date().getTime();this.pending.push(i),setTimeout(()=>{this.sendPending()},e);return}this.buildNotification(i)}buildNotification(i){const t=new Notification(i.title,{body:i.body,tag:String(i.id)});return t.addEventListener("click",this.onClick.bind(this,i),!1),t.addEventListener("show",this.onShow.bind(this,i),!1),t.addEventListener("close",()=>{this.deliveredNotifications=this.deliveredNotifications.filter(()=>!this)},!1),this.deliveredNotifications.push(t),t}onClick(i){const t={actionId:"tap",notification:i};this.notifyListeners("localNotificationActionPerformed",t)}onShow(i){this.notifyListeners("localNotificationReceived",i)}}export{l as LocalNotificationsWeb};
+import{ck as s}from"./main-BrZe9Zbd.js";import"./vendor-react--Eh9ivFN.js";import"./vendor-three-Chj50gSY.js";class l extends s{constructor(){super(...arguments),this.pending=[],this.deliveredNotifications=[],this.hasNotificationSupport=()=>{if(!("Notification"in window)||!Notification.requestPermission)return!1;if(Notification.permission!=="granted")try{new Notification("")}catch(i){if(i instanceof Error&&i.name==="TypeError")return!1}return!0}}async getDeliveredNotifications(){const i=[];for(const t of this.deliveredNotifications){const e={title:t.title,id:parseInt(t.tag),body:t.body};i.push(e)}return{notifications:i}}async removeDeliveredNotifications(i){for(const t of i.notifications){const e=this.deliveredNotifications.find(n=>n.tag===String(t.id));e==null||e.close(),this.deliveredNotifications=this.deliveredNotifications.filter(()=>!e)}}async removeAllDeliveredNotifications(){for(const i of this.deliveredNotifications)i.close();this.deliveredNotifications=[]}async createChannel(){throw this.unimplemented("Not implemented on web.")}async deleteChannel(){throw this.unimplemented("Not implemented on web.")}async listChannels(){throw this.unimplemented("Not implemented on web.")}async schedule(i){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");for(const t of i.notifications)this.sendNotification(t);return{notifications:i.notifications.map(t=>({id:t.id}))}}async getPending(){return{notifications:this.pending}}async registerActionTypes(){throw this.unimplemented("Not implemented on web.")}async cancel(i){this.pending=this.pending.filter(t=>!i.notifications.find(e=>e.id===t.id))}async areEnabled(){const{display:i}=await this.checkPermissions();return{value:i==="granted"}}async changeExactNotificationSetting(){throw this.unimplemented("Not implemented on web.")}async checkExactNotificationSetting(){throw this.unimplemented("Not implemented on web.")}async requestPermissions(){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");return{display:this.transformNotificationPermission(await Notification.requestPermission())}}async checkPermissions(){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");return{display:this.transformNotificationPermission(Notification.permission)}}transformNotificationPermission(i){switch(i){case"granted":return"granted";case"denied":return"denied";default:return"prompt"}}sendPending(){var i;const t=[],e=new Date().getTime();for(const n of this.pending)!((i=n.schedule)===null||i===void 0)&&i.at&&n.schedule.at.getTime()<=e&&(this.buildNotification(n),t.push(n));this.pending=this.pending.filter(n=>!t.find(o=>o===n))}sendNotification(i){var t;if(!((t=i.schedule)===null||t===void 0)&&t.at){const e=i.schedule.at.getTime()-new Date().getTime();this.pending.push(i),setTimeout(()=>{this.sendPending()},e);return}this.buildNotification(i)}buildNotification(i){const t=new Notification(i.title,{body:i.body,tag:String(i.id)});return t.addEventListener("click",this.onClick.bind(this,i),!1),t.addEventListener("show",this.onShow.bind(this,i),!1),t.addEventListener("close",()=>{this.deliveredNotifications=this.deliveredNotifications.filter(()=>!this)},!1),this.deliveredNotifications.push(t),t}onClick(i){const t={actionId:"tap",notification:i};this.notifyListeners("localNotificationActionPerformed",t)}onShow(i){this.notifyListeners("localNotificationReceived",i)}}export{l as LocalNotificationsWeb};

package/dist/assets/{web-CZQVhlQA.js → web-DEq3Te_H.js}

@@ -1 +1 @@
-import{ck as t}from"./main-D2EQVTAu.js";import"./vendor-react--Eh9ivFN.js";import"./vendor-three-Chj50gSY.js";class o extends t{constructor(){super(),this.handleVisibilityChange=()=>{const e={isActive:document.hidden!==!0};this.notifyListeners("appStateChange",e),document.hidden?this.notifyListeners("pause",null):this.notifyListeners("resume",null)},document.addEventListener("visibilitychange",this.handleVisibilityChange,!1)}exitApp(){throw this.unimplemented("Not implemented on web.")}async getInfo(){throw this.unimplemented("Not implemented on web.")}async getLaunchUrl(){return{url:""}}async getState(){return{isActive:document.hidden!==!0}}async minimizeApp(){throw this.unimplemented("Not implemented on web.")}async toggleBackButtonHandler(){throw this.unimplemented("Not implemented on web.")}async getAppLanguage(){return{value:navigator.language.split("-")[0].toLowerCase()}}}export{o as AppWeb};
+import{ck as t}from"./main-BrZe9Zbd.js";import"./vendor-react--Eh9ivFN.js";import"./vendor-three-Chj50gSY.js";class o extends t{constructor(){super(),this.handleVisibilityChange=()=>{const e={isActive:document.hidden!==!0};this.notifyListeners("appStateChange",e),document.hidden?this.notifyListeners("pause",null):this.notifyListeners("resume",null)},document.addEventListener("visibilitychange",this.handleVisibilityChange,!1)}exitApp(){throw this.unimplemented("Not implemented on web.")}async getInfo(){throw this.unimplemented("Not implemented on web.")}async getLaunchUrl(){return{url:""}}async getState(){return{isActive:document.hidden!==!0}}async minimizeApp(){throw this.unimplemented("Not implemented on web.")}async toggleBackButtonHandler(){throw this.unimplemented("Not implemented on web.")}async getAppLanguage(){return{value:navigator.language.split("-")[0].toLowerCase()}}}export{o as AppWeb};

package/dist/assets/{web-Bdm2kdQ5.js → web-DS0FHmg8.js}

@@ -1 +1 @@
-import{ck as a}from"./main-D2EQVTAu.js";import{ImpactStyle as i,NotificationType as r}from"./index-Bsu-4DMd.js";import"./vendor-react--Eh9ivFN.js";import"./vendor-three-Chj50gSY.js";class h extends a{constructor(){super(...arguments),this.selectionStarted=!1}async impact(t){const e=this.patternForImpact(t==null?void 0:t.style);this.vibrateWithPattern(e)}async notification(t){const e=this.patternForNotification(t==null?void 0:t.type);this.vibrateWithPattern(e)}async vibrate(t){const e=(t==null?void 0:t.duration)||300;this.vibrateWithPattern([e])}async selectionStart(){this.selectionStarted=!0}async selectionChanged(){this.selectionStarted&&this.vibrateWithPattern([70])}async selectionEnd(){this.selectionStarted=!1}patternForImpact(t=i.Heavy){return t===i.Medium?[43]:t===i.Light?[20]:[61]}patternForNotification(t=r.Success){return t===r.Warning?[30,40,30,50,60]:t===r.Error?[27,45,50]:[35,65,21]}vibrateWithPattern(t){if(navigator.vibrate)navigator.vibrate(t);else throw this.unavailable("Browser does not support the vibrate API")}}export{h as HapticsWeb};
+import{ck as a}from"./main-BrZe9Zbd.js";import{ImpactStyle as i,NotificationType as r}from"./index-DSvJOrb7.js";import"./vendor-react--Eh9ivFN.js";import"./vendor-three-Chj50gSY.js";class h extends a{constructor(){super(...arguments),this.selectionStarted=!1}async impact(t){const e=this.patternForImpact(t==null?void 0:t.style);this.vibrateWithPattern(e)}async notification(t){const e=this.patternForNotification(t==null?void 0:t.type);this.vibrateWithPattern(e)}async vibrate(t){const e=(t==null?void 0:t.duration)||300;this.vibrateWithPattern([e])}async selectionStart(){this.selectionStarted=!0}async selectionChanged(){this.selectionStarted&&this.vibrateWithPattern([70])}async selectionEnd(){this.selectionStarted=!1}patternForImpact(t=i.Heavy){return t===i.Medium?[43]:t===i.Light?[20]:[61]}patternForNotification(t=r.Success){return t===r.Warning?[30,40,30,50,60]:t===r.Error?[27,45,50]:[35,65,21]}vibrateWithPattern(t){if(navigator.vibrate)navigator.vibrate(t);else throw this.unavailable("Browser does not support the vibrate API")}}export{h as HapticsWeb};

package/dist/index.html

@@ -22,7 +22,7 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/assets/icons/favicon-16x16.png" />
     <link rel="apple-touch-icon" sizes="180x180" href="/assets/icons/apple-touch-icon.png" />
     <title>Tide Commander</title>
-    <script type="module" crossorigin src="/assets/main-D2EQVTAu.js"></script>
+    <script type="module" crossorigin src="/assets/main-BrZe9Zbd.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/vendor-react--Eh9ivFN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-three-Chj50gSY.js">
     <link rel="stylesheet" crossorigin href="/assets/main-kpU9m5LW.css">

package/dist/src/packages/server/integrations/gmail/gmail-client.js

@@ -71,7 +71,7 @@ export async function init(context) {
             ctx.log.info('Gmail not configured (missing OAuth credentials)');
             return;
         }
-        oauth2Client = new google.auth.OAuth2(config.clientId, config.clientSecret, `${ctx.serverConfig.baseUrl}${REDIRECT_PATH}`);
+        oauth2Client = new google.auth.OAuth2(config.clientId, config.clientSecret, getRedirectUri());
         // Load refresh token from secrets
         const refreshToken = ctx.secrets.get('GOOGLE_REFRESH_TOKEN') || config.refreshToken;
         if (refreshToken) {
@@ -100,15 +100,23 @@ function loadConfig() {
     const refreshToken = ctx.secrets.get('GOOGLE_REFRESH_TOKEN');
     const serviceAccountJson = ctx.secrets.get('GOOGLE_SERVICE_ACCOUNT_JSON') || undefined;
     const impersonateEmail = ctx.secrets.get('GOOGLE_IMPERSONATE_EMAIL') || undefined;
+    const redirectBaseUrl = ctx.secrets.get('GOOGLE_REDIRECT_BASE_URL') || undefined;
     config = {
         ...config,
         clientId,
         clientSecret,
+        redirectBaseUrl,
         refreshToken: refreshToken || undefined,
         serviceAccountJson,
         impersonateEmail,
     };
 }
+function getRedirectUri() {
+    if (!ctx)
+        throw new Error('Gmail not initialized');
+    const base = (config.redirectBaseUrl?.trim() || ctx.serverConfig.baseUrl).replace(/\/$/, '');
+    return `${base}${REDIRECT_PATH}`;
+}
 export function updateConfig(updates) {
     if (updates.authMethod !== undefined) {
         config.authMethod = updates.authMethod;
@@ -121,6 +129,11 @@ export function updateConfig(updates) {
         config.clientSecret = updates.clientSecret;
         ctx?.secrets.set('GOOGLE_CLIENT_SECRET', updates.clientSecret);
     }
+    if (updates.redirectBaseUrl !== undefined) {
+        const trimmed = updates.redirectBaseUrl.trim();
+        config.redirectBaseUrl = trimmed || undefined;
+        ctx?.secrets.set('GOOGLE_REDIRECT_BASE_URL', trimmed);
+    }
     if (updates.serviceAccountJson !== undefined) {
         config.serviceAccountJson = updates.serviceAccountJson;
         ctx?.secrets.set('GOOGLE_SERVICE_ACCOUNT_JSON', updates.serviceAccountJson);
@@ -168,7 +181,7 @@ export function getAuthUrl() {
         if (!config.clientId || !config.clientSecret || !ctx) {
             throw new Error('Gmail OAuth not configured');
         }
-        oauth2Client = new google.auth.OAuth2(config.clientId, config.clientSecret, `${ctx.serverConfig.baseUrl}${REDIRECT_PATH}`);
+        oauth2Client = new google.auth.OAuth2(config.clientId, config.clientSecret, getRedirectUri());
     }
     return oauth2Client.generateAuthUrl({
         access_type: 'offline',

package/dist/src/packages/server/integrations/gmail/gmail-config.js

@@ -34,6 +34,14 @@ export const gmailConfigSchema = [
         secret: true,
         group: 'Authentication',
     },
+    {
+        key: 'redirectBaseUrl',
+        label: 'OAuth Redirect Base URL',
+        type: 'text',
+        description: 'Override the base URL used for the OAuth redirect (e.g. http://commander.local:10003). Leave empty to use http://localhost:<port>. Google does not accept raw IPs — use a domain (you can map one in /etc/hosts).',
+        required: false,
+        group: 'Authentication',
+    },
     {
         key: 'serviceAccountJson',
         label: 'Service Account JSON',

package/dist/src/packages/server/integrations/gmail/index.js

@@ -42,6 +42,7 @@ export const gmailPlugin = {
                 authMethod: 'oauth2',
                 clientId: '',
                 clientSecret: '',
+                redirectBaseUrl: '',
                 serviceAccountJson: '',
                 impersonateEmail: '',
                 pollingIntervalMs: 30000,
@@ -54,6 +55,7 @@ export const gmailPlugin = {
             // Calendar and Drive integrations, which share these same secrets).
             clientId: integrationCtx.secrets.get('GOOGLE_CLIENT_ID') ? '********' : '',
             clientSecret: integrationCtx.secrets.get('GOOGLE_CLIENT_SECRET') ? '********' : '',
+            redirectBaseUrl: integrationCtx.secrets.get('GOOGLE_REDIRECT_BASE_URL') || '',
             serviceAccountJson: integrationCtx.secrets.get('GOOGLE_SERVICE_ACCOUNT_JSON') ? '********' : '',
             impersonateEmail: integrationCtx.secrets.get('GOOGLE_IMPERSONATE_EMAIL') || '',
             pollingIntervalMs: gmailClient.getConfig().pollingIntervalMs,
@@ -75,6 +77,11 @@ export const gmailPlugin = {
             updates.clientSecret = config.clientSecret;
             integrationCtx.secrets.set('GOOGLE_CLIENT_SECRET', config.clientSecret);
         }
+        if (config.redirectBaseUrl !== undefined) {
+            const value = String(config.redirectBaseUrl).trim();
+            updates.redirectBaseUrl = value;
+            integrationCtx.secrets.set('GOOGLE_REDIRECT_BASE_URL', value);
+        }
         if (config.serviceAccountJson && config.serviceAccountJson !== '********') {
             updates.serviceAccountJson = config.serviceAccountJson;
             integrationCtx.secrets.set('GOOGLE_SERVICE_ACCOUNT_JSON', config.serviceAccountJson);
@@ -94,8 +101,11 @@ export const gmailPlugin = {
             updates.defaultApprovalKeywords = keywords;
         }
         gmailClient.updateConfig(updates);
-        // Re-initialize authentication when auth method or credentials change
-        if (config.authMethod !== undefined || config.serviceAccountJson || config.clientId) {
+        // Re-initialize authentication when auth method, credentials, or redirect URL change
+        if (config.authMethod !== undefined
+            || config.serviceAccountJson
+            || config.clientId
+            || config.redirectBaseUrl !== undefined) {
             gmailClient.shutdown();
             await gmailClient.init(integrationCtx);
         }

package/dist/src/packages/server/integrations/google-calendar/calendar-client.js

@@ -24,13 +24,14 @@ export async function init(integrationCtx) {
         ctx.log.info('Google Calendar missing OAuth credentials, skipping init');
         return;
     }
-    oauth2Client = new google.auth.OAuth2(clientId, clientSecret, `${ctx.serverConfig.baseUrl}${REDIRECT_PATH}`);
+    oauth2Client = new google.auth.OAuth2(clientId, clientSecret, getRedirectUri());
     oauth2Client.setCredentials({ refresh_token: refreshToken });
     calendarApi = google.calendar({ version: 'v3', auth: oauth2Client });
     ctx.log.info('Google Calendar initialized');
 }
 export async function shutdown() {
     calendarApi = null;
+    oauth2Client = null;
 }
 // ─── Status ───
 export function getStatus() {
@@ -208,6 +209,13 @@ const SCOPES = [
 ];
 const REDIRECT_PATH = '/api/calendar/auth/callback'; // Calendar's own callback
 let oauth2Client = null;
+function getRedirectUri() {
+    if (!ctx)
+        throw new Error('Google Calendar not initialized');
+    const override = ctx.secrets.get('GOOGLE_REDIRECT_BASE_URL')?.trim();
+    const base = (override || ctx.serverConfig.baseUrl).replace(/\/$/, '');
+    return `${base}${REDIRECT_PATH}`;
+}
 export function getAuthUrl() {
     if (!oauth2Client) {
         const clientId = ctx?.secrets.get('GOOGLE_CLIENT_ID');
@@ -215,7 +223,7 @@ export function getAuthUrl() {
         if (!clientId || !clientSecret || !ctx) {
             throw new Error('Google Calendar OAuth not configured');
         }
-        oauth2Client = new google.auth.OAuth2(clientId, clientSecret, `${ctx.serverConfig.baseUrl}${REDIRECT_PATH}`);
+        oauth2Client = new google.auth.OAuth2(clientId, clientSecret, getRedirectUri());
     }
     return oauth2Client.generateAuthUrl({
         access_type: 'offline',

package/dist/src/packages/server/integrations/google-calendar/calendar-config.js

@@ -91,6 +91,14 @@ export const calendarConfigSchema = [
         secret: true,
         group: 'Authentication',
     },
+    {
+        key: 'GOOGLE_REDIRECT_BASE_URL',
+        label: 'OAuth Redirect Base URL',
+        type: 'text',
+        description: 'Override the base URL used for the OAuth redirect (e.g. http://commander.local:10003). Leave empty to use http://localhost:<port>. Shared with Gmail/Drive. Google does not accept raw IPs — use a domain (you can map one in /etc/hosts).',
+        required: false,
+        group: 'Authentication',
+    },
     {
         key: 'calendarId',
         label: 'Calendar ID',
@@ -128,6 +136,7 @@ export function getConfigValues(secrets) {
         GOOGLE_CLIENT_ID: secrets.get('GOOGLE_CLIENT_ID') ? '********' : '',
         GOOGLE_CLIENT_SECRET: secrets.get('GOOGLE_CLIENT_SECRET') ? '********' : '',
         GOOGLE_REFRESH_TOKEN: secrets.get('GOOGLE_REFRESH_TOKEN') ? '********' : '',
+        GOOGLE_REDIRECT_BASE_URL: secrets.get('GOOGLE_REDIRECT_BASE_URL') || '',
     };
 }
 export async function setConfigValues(values, secrets) {
@@ -138,6 +147,10 @@ export async function setConfigValues(values, secrets) {
             secrets.set(key, val);
         }
     }
+    // Redirect base URL is shared but not masked — write it whenever it's provided (empty string clears it).
+    if (typeof values.GOOGLE_REDIRECT_BASE_URL === 'string') {
+        secrets.set('GOOGLE_REDIRECT_BASE_URL', values.GOOGLE_REDIRECT_BASE_URL.trim());
+    }
     // Handle non-secret config
     const updates = {};
     if (typeof values.enabled === 'boolean')

package/dist/src/packages/server/integrations/google-calendar/index.js

@@ -55,6 +55,13 @@ export const googleCalendarPlugin = {
         if (!integrationCtx)
             throw new Error('Google Calendar not initialized');
         await setConfigValues(config, integrationCtx.secrets);
+        // Re-initialize so any cached oauth2Client picks up new credentials or redirect URL.
+        if (config.GOOGLE_CLIENT_ID !== undefined
+            || config.GOOGLE_CLIENT_SECRET !== undefined
+            || config.GOOGLE_REDIRECT_BASE_URL !== undefined) {
+            await calendarClient.shutdown();
+            await calendarClient.init(integrationCtx);
+        }
     },
     getCustomSettingsComponent() {
         return 'google-oauth';

package/dist/src/packages/server/integrations/google-drive/drive-client.js

@@ -22,6 +22,13 @@ const SCOPES = [
 ];
 const REDIRECT_PATH = '/api/drive/auth/callback';
 let oauth2Client = null;
+function getRedirectUri() {
+    if (!ctx)
+        throw new Error('Google Drive not initialized');
+    const override = ctx.secrets.get('GOOGLE_REDIRECT_BASE_URL')?.trim();
+    const base = (override || ctx.serverConfig.baseUrl).replace(/\/$/, '');
+    return `${base}${REDIRECT_PATH}`;
+}
 // ─── Init / Shutdown ───
 export async function init(integrationCtx) {
     ctx = integrationCtx;
@@ -37,7 +44,7 @@ export async function init(integrationCtx) {
         ctx.log.info('Google Drive missing OAuth credentials, skipping init');
         return;
     }
-    oauth2Client = new google.auth.OAuth2(clientId, clientSecret, `${ctx.serverConfig.baseUrl}${REDIRECT_PATH}`);
+    oauth2Client = new google.auth.OAuth2(clientId, clientSecret, getRedirectUri());
     oauth2Client.setCredentials({ refresh_token: refreshToken });
     driveApi = google.drive({ version: 'v3', auth: oauth2Client });
     docsApi = google.docs({ version: 'v1', auth: oauth2Client });
@@ -46,6 +53,7 @@ export async function init(integrationCtx) {
 export async function shutdown() {
     driveApi = null;
     docsApi = null;
+    oauth2Client = null;
 }
 // ─── Status ───
 export function getStatus() {
@@ -71,7 +79,7 @@ export function getAuthUrl() {
         if (!clientId || !clientSecret || !ctx) {
             throw new Error('Google Drive OAuth not configured');
         }
-        oauth2Client = new google.auth.OAuth2(clientId, clientSecret, `${ctx.serverConfig.baseUrl}${REDIRECT_PATH}`);
+        oauth2Client = new google.auth.OAuth2(clientId, clientSecret, getRedirectUri());
     }
     return oauth2Client.generateAuthUrl({
         access_type: 'offline',

package/dist/src/packages/server/integrations/google-drive/drive-config.js

@@ -89,6 +89,14 @@ export const driveConfigSchema = [
         secret: true,
         group: 'Authentication',
     },
+    {
+        key: 'GOOGLE_REDIRECT_BASE_URL',
+        label: 'OAuth Redirect Base URL',
+        type: 'text',
+        description: 'Override the base URL used for the OAuth redirect (e.g. http://commander.local:10003). Leave empty to use http://localhost:<port>. Shared with Gmail/Calendar. Google does not accept raw IPs — use a domain (you can map one in /etc/hosts).',
+        required: false,
+        group: 'Authentication',
+    },
     {
         key: 'defaultFolderId',
         label: 'Default Folder ID',
@@ -107,6 +115,7 @@ export function getConfigValues(secrets) {
         GOOGLE_CLIENT_ID: secrets.get('GOOGLE_CLIENT_ID') ? '********' : '',
         GOOGLE_CLIENT_SECRET: secrets.get('GOOGLE_CLIENT_SECRET') ? '********' : '',
         GOOGLE_REFRESH_TOKEN: secrets.get('GOOGLE_REFRESH_TOKEN') ? '********' : '',
+        GOOGLE_REDIRECT_BASE_URL: secrets.get('GOOGLE_REDIRECT_BASE_URL') || '',
     };
 }
 export async function setConfigValues(values, secrets) {
@@ -117,6 +126,10 @@ export async function setConfigValues(values, secrets) {
             secrets.set(key, val);
         }
     }
+    // Redirect base URL is shared but not masked — write it whenever it's provided (empty string clears it).
+    if (typeof values.GOOGLE_REDIRECT_BASE_URL === 'string') {
+        secrets.set('GOOGLE_REDIRECT_BASE_URL', values.GOOGLE_REDIRECT_BASE_URL.trim());
+    }
     // Handle non-secret config
     const updates = {};
     if (typeof values.enabled === 'boolean')

package/dist/src/packages/server/integrations/google-drive/index.js

@@ -53,6 +53,13 @@ export const googleDrivePlugin = {
         if (!integrationCtx)
             throw new Error('Google Drive not initialized');
         await setConfigValues(config, integrationCtx.secrets);
+        // Re-initialize so any cached oauth2Client picks up new credentials or redirect URL.
+        if (config.GOOGLE_CLIENT_ID !== undefined
+            || config.GOOGLE_CLIENT_SECRET !== undefined
+            || config.GOOGLE_REDIRECT_BASE_URL !== undefined) {
+            await driveClient.shutdown();
+            await driveClient.init(integrationCtx);
+        }
     },
     getCustomSettingsComponent() {
         return 'google-oauth';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tide-commander",
-  "version": "1.86.0",
+  "version": "1.87.0",
   "description": "Visual multi-agent orchestrator and manager for Claude Code with 3D/2D interface",
   "repository": {
     "type": "git",