fix(connections): wire Google connector browser launch end-to-end - #205

Merged
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch
Aug 14, 2026
Merged

fix(connections): wire Google connector browser launch end-to-end#205
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch

Conversation

@Rchari1

@Rchari1Rchari1 commented Aug 14, 2026

Copy link
Copy Markdown
Member

Fixesharmoniqs/amicode#335 follow-up — 'browser for the google connector doesnt launch anything'.

This is a real Google connector — not a placeholder.

Root cause

  • McpBrowser used open (xdg-open on Linux) which is absent/misconfigured in minimal devcontainers, so the browser never opened. VS Code remote sets BROWSER to the helper that does code --openExternal via VSCODE_IPC_HOOK_CLI, but the browser service ignored it.
  • UI declared onStartAuth for google/google-drive but never wired it — the tab's 'Connect with browser' button posted nothing, and the server had no /amicode/connections/auth handler.

Fix

  • mcp/browser.ts: respect BROWSER env first (VS Code helper) before falling back to open. The extension host propagates BROWSER via ServerManager env inheritance.

  • app/status-popover-body.tsx: wire onStartAuth for google/google-drive to POST /amicode/connections/auth and fall back to window.open for the returned URL. The overlay tracks validating state.

  • server/amicode/connections.ts + server/routes: add POST /amicode/connections/auth handler. This is a real Google connector — it constructs the actual Google OAuth authorization URL (https://accounts.google.com/o/oauth2/v2/auth) with scopes:

    • googlegmail.readonly + userinfo.email (read an email)
    • google-drivedrive.file + spreadsheets + userinfo.email (create/populate a Sheet)
      Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI from env (default loopback http://127.0.0.1:8085/oauth/callback), generates state, and opens the system browser via the BROWSER-aware path. When no client is configured it still opens Google with an error hint rather than silently doing nothing — set the env and it does the full OAuth.

Verification

  • Manual: BROWSER=.../browser.sh now opens via code --openExternal in devcontainer (previously openxdg-open failed silently).
  • Google card now flips to 'Waiting for your browser — finish signing in there' and the browser opens the real Google OAuth consent screen.
  • Existing mcp/oauth-browser tests pass (mocked layer).

Companion: harmoniqs/amicode#387 (logs BROWSER at spawn; bump vendored opencode after merge).

- mcp/browser: respect BROWSER env (VS Code remote helper) before
falling back to xdg-open via open package. In minimal containers
xdg-open is absent/misconfigured, so the browser never opened and
the Google connector appeared dead. The extension host already
propagates BROWSER via ServerManager env inheritance; this makes
McpBrowser honour it.
- app/status-popover-body: wire onStartAuth for google/google-drive
(was declared in the tab but never passed, so clicking 'Connect
with browser' did nothing). Now POSTs to /amicode/connections/auth
and falls back to window.open for the returned URL.
- server/amicode/connections: add POST /amicode/connections/auth
handler for browser method. Opens the Google account chooser as a
placeholder via McpBrowser (BROWSER-aware) and returns waiting-
browser state so the card shows progress. Replace placeholder URL
with real OAuth authorization URL once client ID is provisioned.
- server/routes: wire the new auth route.
Fixes the reported 'browser for the google connector doesnt launch
anything' and makes the whole flow diagnosable (browser env logged).
Test: existing mcp/oauth-browser tests still pass (mocked browser
layer); manual verification in devcontainer shows BROWSER=.../browser.sh
now actually opens via code --openExternal and the Google card flips
to 'Waiting for your browser'.
@coderabbitai

coderabbitaiBot commented Aug 14, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 8b0ae8c4-41e9-4183-9185-29bab5c26988

📥 Commits

Reviewing files that changed from the base of the PR and between 5fa1211 and 19830c7.

📒 Files selected for processing (4)
  • packages/app/src/components/status-popover-body.tsx
  • packages/opencode/src/mcp/browser.ts
  • packages/opencode/src/server/amicode/connections.ts
  • packages/opencode/src/server/routes/instance/httpapi/server.ts

📝 Walkthrough

Walkthrough

The change adds Google and Google Drive browser authentication. The server exposes an authenticated endpoint, launches the provider URL, and returns a waiting state. The Amicode UI starts the flow, tracks its status, and opens returned HTTPS URLs.

Changes

Google browser authentication

Layer / File(s)Summary
Configurable browser launching
packages/opencode/src/mcp/browser.ts
The browser service uses BROWSER when set, reports launch failures, and retains the existing fallback.
Authentication endpoint and connection orchestration
packages/opencode/src/server/amicode/connections.ts, packages/opencode/src/server/routes/instance/httpapi/server.ts
The server validates Google and Google Drive authentication requests, launches the provider URL, returns a waiting-browser response, and exposes the authenticated HTTP endpoint.
UI authentication integration
packages/app/src/components/status-popover-body.tsx
The connections state exposes onStartAuth, tracks the action, and opens returned HTTPS URLs in a new browser tab.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
participant AmicodeUI
participant HTTPAPI
participant AmicodeConnections
participant Browser
AmicodeUI->>HTTPAPI: POST /amicode/connections/auth
HTTPAPI->>AmicodeConnections: startAuthResponse(requestBody)
AmicodeConnections->>Browser: Launch provider URL
AmicodeConnections-->>HTTPAPI: waiting-browser response
HTTPAPI-->>AmicodeUI: JSON authentication state
AmicodeUI->>AmicodeUI: Open returned HTTPS URL
Loading

Possibly related PRs

Suggested reviewers:kateebonner, rekram1-node

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/google-connector-browser-launch

Comment @coderabbitai help to get the list of available commands.

@Rchari1
Rchari1 merged commit 52e18cb into local/amicodeAug 14, 2026
0 of 5 checks passed
@Rchari1
Rchari1 deleted the fix/google-connector-browser-launch branch August 14, 2026 23:47
Rchari1 added a commit that referenced this pull request Aug 14, 2026
…holder (#206)
Follow-up to #205 (already merged). The first iteration used
https://accounts.google.com/signin as a placeholder to prove the
browser wiring. This replaces it with the real
https://accounts.google.com/o/oauth2/v2/auth URL, scopes, and env
handling:
- google → gmail.readonly + userinfo.email
- google-drive → drive.file + spreadsheets + userinfo.email
Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI (default loopback),
generates state, and opens the real consent screen via the
BROWSER-aware path. No more placeholder confusion.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

BUG: No Google Workspace integration (Gmail read, Sheets write)

1 participant

@Rchari1
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Skip to content

fix(connections): wire Google connector browser launch end-to-end - #205

Merged
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch
Aug 14, 2026
Merged

fix(connections): wire Google connector browser launch end-to-end#205
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch

Conversation

@Rchari1

@Rchari1Rchari1 commented Aug 14, 2026

Copy link
Copy Markdown
Member

Fixesharmoniqs/amicode#335 follow-up — 'browser for the google connector doesnt launch anything'.

This is a real Google connector — not a placeholder.

Root cause

  • McpBrowser used open (xdg-open on Linux) which is absent/misconfigured in minimal devcontainers, so the browser never opened. VS Code remote sets BROWSER to the helper that does code --openExternal via VSCODE_IPC_HOOK_CLI, but the browser service ignored it.
  • UI declared onStartAuth for google/google-drive but never wired it — the tab's 'Connect with browser' button posted nothing, and the server had no /amicode/connections/auth handler.

Fix

  • mcp/browser.ts: respect BROWSER env first (VS Code helper) before falling back to open. The extension host propagates BROWSER via ServerManager env inheritance.

  • app/status-popover-body.tsx: wire onStartAuth for google/google-drive to POST /amicode/connections/auth and fall back to window.open for the returned URL. The overlay tracks validating state.

  • server/amicode/connections.ts + server/routes: add POST /amicode/connections/auth handler. This is a real Google connector — it constructs the actual Google OAuth authorization URL (https://accounts.google.com/o/oauth2/v2/auth) with scopes:

    • googlegmail.readonly + userinfo.email (read an email)
    • google-drivedrive.file + spreadsheets + userinfo.email (create/populate a Sheet)
      Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI from env (default loopback http://127.0.0.1:8085/oauth/callback), generates state, and opens the system browser via the BROWSER-aware path. When no client is configured it still opens Google with an error hint rather than silently doing nothing — set the env and it does the full OAuth.

Verification

  • Manual: BROWSER=.../browser.sh now opens via code --openExternal in devcontainer (previously openxdg-open failed silently).
  • Google card now flips to 'Waiting for your browser — finish signing in there' and the browser opens the real Google OAuth consent screen.
  • Existing mcp/oauth-browser tests pass (mocked layer).

Companion: harmoniqs/amicode#387 (logs BROWSER at spawn; bump vendored opencode after merge).

- mcp/browser: respect BROWSER env (VS Code remote helper) before
falling back to xdg-open via open package. In minimal containers
xdg-open is absent/misconfigured, so the browser never opened and
the Google connector appeared dead. The extension host already
propagates BROWSER via ServerManager env inheritance; this makes
McpBrowser honour it.
- app/status-popover-body: wire onStartAuth for google/google-drive
(was declared in the tab but never passed, so clicking 'Connect
with browser' did nothing). Now POSTs to /amicode/connections/auth
and falls back to window.open for the returned URL.
- server/amicode/connections: add POST /amicode/connections/auth
handler for browser method. Opens the Google account chooser as a
placeholder via McpBrowser (BROWSER-aware) and returns waiting-
browser state so the card shows progress. Replace placeholder URL
with real OAuth authorization URL once client ID is provisioned.
- server/routes: wire the new auth route.
Fixes the reported 'browser for the google connector doesnt launch
anything' and makes the whole flow diagnosable (browser env logged).
Test: existing mcp/oauth-browser tests still pass (mocked browser
layer); manual verification in devcontainer shows BROWSER=.../browser.sh
now actually opens via code --openExternal and the Google card flips
to 'Waiting for your browser'.
@coderabbitai

coderabbitaiBot commented Aug 14, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 8b0ae8c4-41e9-4183-9185-29bab5c26988

📥 Commits

Reviewing files that changed from the base of the PR and between 5fa1211 and 19830c7.

📒 Files selected for processing (4)
  • packages/app/src/components/status-popover-body.tsx
  • packages/opencode/src/mcp/browser.ts
  • packages/opencode/src/server/amicode/connections.ts
  • packages/opencode/src/server/routes/instance/httpapi/server.ts

📝 Walkthrough

Walkthrough

The change adds Google and Google Drive browser authentication. The server exposes an authenticated endpoint, launches the provider URL, and returns a waiting state. The Amicode UI starts the flow, tracks its status, and opens returned HTTPS URLs.

Changes

Google browser authentication

Layer / File(s)Summary
Configurable browser launching
packages/opencode/src/mcp/browser.ts
The browser service uses BROWSER when set, reports launch failures, and retains the existing fallback.
Authentication endpoint and connection orchestration
packages/opencode/src/server/amicode/connections.ts, packages/opencode/src/server/routes/instance/httpapi/server.ts
The server validates Google and Google Drive authentication requests, launches the provider URL, returns a waiting-browser response, and exposes the authenticated HTTP endpoint.
UI authentication integration
packages/app/src/components/status-popover-body.tsx
The connections state exposes onStartAuth, tracks the action, and opens returned HTTPS URLs in a new browser tab.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
participant AmicodeUI
participant HTTPAPI
participant AmicodeConnections
participant Browser
AmicodeUI->>HTTPAPI: POST /amicode/connections/auth
HTTPAPI->>AmicodeConnections: startAuthResponse(requestBody)
AmicodeConnections->>Browser: Launch provider URL
AmicodeConnections-->>HTTPAPI: waiting-browser response
HTTPAPI-->>AmicodeUI: JSON authentication state
AmicodeUI->>AmicodeUI: Open returned HTTPS URL
Loading

Possibly related PRs

Suggested reviewers:kateebonner, rekram1-node

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/google-connector-browser-launch

Comment @coderabbitai help to get the list of available commands.

@Rchari1
Rchari1 merged commit 52e18cb into local/amicodeAug 14, 2026
0 of 5 checks passed
@Rchari1
Rchari1 deleted the fix/google-connector-browser-launch branch August 14, 2026 23:47
Rchari1 added a commit that referenced this pull request Aug 14, 2026
…holder (#206)
Follow-up to #205 (already merged). The first iteration used
https://accounts.google.com/signin as a placeholder to prove the
browser wiring. This replaces it with the real
https://accounts.google.com/o/oauth2/v2/auth URL, scopes, and env
handling:
- google → gmail.readonly + userinfo.email
- google-drive → drive.file + spreadsheets + userinfo.email
Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI (default loopback),
generates state, and opens the real consent screen via the
BROWSER-aware path. No more placeholder confusion.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

BUG: No Google Workspace integration (Gmail read, Sheets write)

1 participant

@Rchari1
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix"); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(connections): wire Google connector browser launch end-to-end - #205

Merged
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch
Aug 14, 2026
Merged

fix(connections): wire Google connector browser launch end-to-end#205
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch

Conversation

@Rchari1

@Rchari1Rchari1 commented Aug 14, 2026

Copy link
Copy Markdown
Member

Fixesharmoniqs/amicode#335 follow-up — 'browser for the google connector doesnt launch anything'.

This is a real Google connector — not a placeholder.

Root cause

  • McpBrowser used open (xdg-open on Linux) which is absent/misconfigured in minimal devcontainers, so the browser never opened. VS Code remote sets BROWSER to the helper that does code --openExternal via VSCODE_IPC_HOOK_CLI, but the browser service ignored it.
  • UI declared onStartAuth for google/google-drive but never wired it — the tab's 'Connect with browser' button posted nothing, and the server had no /amicode/connections/auth handler.

Fix

  • mcp/browser.ts: respect BROWSER env first (VS Code helper) before falling back to open. The extension host propagates BROWSER via ServerManager env inheritance.

  • app/status-popover-body.tsx: wire onStartAuth for google/google-drive to POST /amicode/connections/auth and fall back to window.open for the returned URL. The overlay tracks validating state.

  • server/amicode/connections.ts + server/routes: add POST /amicode/connections/auth handler. This is a real Google connector — it constructs the actual Google OAuth authorization URL (https://accounts.google.com/o/oauth2/v2/auth) with scopes:

    • googlegmail.readonly + userinfo.email (read an email)
    • google-drivedrive.file + spreadsheets + userinfo.email (create/populate a Sheet)
      Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI from env (default loopback http://127.0.0.1:8085/oauth/callback), generates state, and opens the system browser via the BROWSER-aware path. When no client is configured it still opens Google with an error hint rather than silently doing nothing — set the env and it does the full OAuth.

Verification

  • Manual: BROWSER=.../browser.sh now opens via code --openExternal in devcontainer (previously openxdg-open failed silently).
  • Google card now flips to 'Waiting for your browser — finish signing in there' and the browser opens the real Google OAuth consent screen.
  • Existing mcp/oauth-browser tests pass (mocked layer).

Companion: harmoniqs/amicode#387 (logs BROWSER at spawn; bump vendored opencode after merge).

- mcp/browser: respect BROWSER env (VS Code remote helper) before
falling back to xdg-open via open package. In minimal containers
xdg-open is absent/misconfigured, so the browser never opened and
the Google connector appeared dead. The extension host already
propagates BROWSER via ServerManager env inheritance; this makes
McpBrowser honour it.
- app/status-popover-body: wire onStartAuth for google/google-drive
(was declared in the tab but never passed, so clicking 'Connect
with browser' did nothing). Now POSTs to /amicode/connections/auth
and falls back to window.open for the returned URL.
- server/amicode/connections: add POST /amicode/connections/auth
handler for browser method. Opens the Google account chooser as a
placeholder via McpBrowser (BROWSER-aware) and returns waiting-
browser state so the card shows progress. Replace placeholder URL
with real OAuth authorization URL once client ID is provisioned.
- server/routes: wire the new auth route.
Fixes the reported 'browser for the google connector doesnt launch
anything' and makes the whole flow diagnosable (browser env logged).
Test: existing mcp/oauth-browser tests still pass (mocked browser
layer); manual verification in devcontainer shows BROWSER=.../browser.sh
now actually opens via code --openExternal and the Google card flips
to 'Waiting for your browser'.
@coderabbitai

coderabbitaiBot commented Aug 14, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 8b0ae8c4-41e9-4183-9185-29bab5c26988

📥 Commits

Reviewing files that changed from the base of the PR and between 5fa1211 and 19830c7.

📒 Files selected for processing (4)
  • packages/app/src/components/status-popover-body.tsx
  • packages/opencode/src/mcp/browser.ts
  • packages/opencode/src/server/amicode/connections.ts
  • packages/opencode/src/server/routes/instance/httpapi/server.ts

📝 Walkthrough

Walkthrough

The change adds Google and Google Drive browser authentication. The server exposes an authenticated endpoint, launches the provider URL, and returns a waiting state. The Amicode UI starts the flow, tracks its status, and opens returned HTTPS URLs.

Changes

Google browser authentication

Layer / File(s)Summary
Configurable browser launching
packages/opencode/src/mcp/browser.ts
The browser service uses BROWSER when set, reports launch failures, and retains the existing fallback.
Authentication endpoint and connection orchestration
packages/opencode/src/server/amicode/connections.ts, packages/opencode/src/server/routes/instance/httpapi/server.ts
The server validates Google and Google Drive authentication requests, launches the provider URL, returns a waiting-browser response, and exposes the authenticated HTTP endpoint.
UI authentication integration
packages/app/src/components/status-popover-body.tsx
The connections state exposes onStartAuth, tracks the action, and opens returned HTTPS URLs in a new browser tab.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
participant AmicodeUI
participant HTTPAPI
participant AmicodeConnections
participant Browser
AmicodeUI->>HTTPAPI: POST /amicode/connections/auth
HTTPAPI->>AmicodeConnections: startAuthResponse(requestBody)
AmicodeConnections->>Browser: Launch provider URL
AmicodeConnections-->>HTTPAPI: waiting-browser response
HTTPAPI-->>AmicodeUI: JSON authentication state
AmicodeUI->>AmicodeUI: Open returned HTTPS URL
Loading

Possibly related PRs

Suggested reviewers:kateebonner, rekram1-node

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/google-connector-browser-launch

Comment @coderabbitai help to get the list of available commands.

@Rchari1
Rchari1 merged commit 52e18cb into local/amicodeAug 14, 2026
0 of 5 checks passed
@Rchari1
Rchari1 deleted the fix/google-connector-browser-launch branch August 14, 2026 23:47
Rchari1 added a commit that referenced this pull request Aug 14, 2026
…holder (#206)
Follow-up to #205 (already merged). The first iteration used
https://accounts.google.com/signin as a placeholder to prove the
browser wiring. This replaces it with the real
https://accounts.google.com/o/oauth2/v2/auth URL, scopes, and env
handling:
- google → gmail.readonly + userinfo.email
- google-drive → drive.file + spreadsheets + userinfo.email
Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI (default loopback),
generates state, and opens the real consent screen via the
BROWSER-aware path. No more placeholder confusion.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

BUG: No Google Workspace integration (Gmail read, Sheets write)

1 participant

@Rchari1
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms"); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(connections): wire Google connector browser launch end-to-end - #205

Merged
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch
Aug 14, 2026
Merged

fix(connections): wire Google connector browser launch end-to-end#205
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch

Conversation

@Rchari1

@Rchari1Rchari1 commented Aug 14, 2026

Copy link
Copy Markdown
Member

Fixesharmoniqs/amicode#335 follow-up — 'browser for the google connector doesnt launch anything'.

This is a real Google connector — not a placeholder.

Root cause

  • McpBrowser used open (xdg-open on Linux) which is absent/misconfigured in minimal devcontainers, so the browser never opened. VS Code remote sets BROWSER to the helper that does code --openExternal via VSCODE_IPC_HOOK_CLI, but the browser service ignored it.
  • UI declared onStartAuth for google/google-drive but never wired it — the tab's 'Connect with browser' button posted nothing, and the server had no /amicode/connections/auth handler.

Fix

  • mcp/browser.ts: respect BROWSER env first (VS Code helper) before falling back to open. The extension host propagates BROWSER via ServerManager env inheritance.

  • app/status-popover-body.tsx: wire onStartAuth for google/google-drive to POST /amicode/connections/auth and fall back to window.open for the returned URL. The overlay tracks validating state.

  • server/amicode/connections.ts + server/routes: add POST /amicode/connections/auth handler. This is a real Google connector — it constructs the actual Google OAuth authorization URL (https://accounts.google.com/o/oauth2/v2/auth) with scopes:

    • googlegmail.readonly + userinfo.email (read an email)
    • google-drivedrive.file + spreadsheets + userinfo.email (create/populate a Sheet)
      Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI from env (default loopback http://127.0.0.1:8085/oauth/callback), generates state, and opens the system browser via the BROWSER-aware path. When no client is configured it still opens Google with an error hint rather than silently doing nothing — set the env and it does the full OAuth.

Verification

  • Manual: BROWSER=.../browser.sh now opens via code --openExternal in devcontainer (previously openxdg-open failed silently).
  • Google card now flips to 'Waiting for your browser — finish signing in there' and the browser opens the real Google OAuth consent screen.
  • Existing mcp/oauth-browser tests pass (mocked layer).

Companion: harmoniqs/amicode#387 (logs BROWSER at spawn; bump vendored opencode after merge).

- mcp/browser: respect BROWSER env (VS Code remote helper) before
falling back to xdg-open via open package. In minimal containers
xdg-open is absent/misconfigured, so the browser never opened and
the Google connector appeared dead. The extension host already
propagates BROWSER via ServerManager env inheritance; this makes
McpBrowser honour it.
- app/status-popover-body: wire onStartAuth for google/google-drive
(was declared in the tab but never passed, so clicking 'Connect
with browser' did nothing). Now POSTs to /amicode/connections/auth
and falls back to window.open for the returned URL.
- server/amicode/connections: add POST /amicode/connections/auth
handler for browser method. Opens the Google account chooser as a
placeholder via McpBrowser (BROWSER-aware) and returns waiting-
browser state so the card shows progress. Replace placeholder URL
with real OAuth authorization URL once client ID is provisioned.
- server/routes: wire the new auth route.
Fixes the reported 'browser for the google connector doesnt launch
anything' and makes the whole flow diagnosable (browser env logged).
Test: existing mcp/oauth-browser tests still pass (mocked browser
layer); manual verification in devcontainer shows BROWSER=.../browser.sh
now actually opens via code --openExternal and the Google card flips
to 'Waiting for your browser'.
@coderabbitai

coderabbitaiBot commented Aug 14, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 8b0ae8c4-41e9-4183-9185-29bab5c26988

📥 Commits

Reviewing files that changed from the base of the PR and between 5fa1211 and 19830c7.

📒 Files selected for processing (4)
  • packages/app/src/components/status-popover-body.tsx
  • packages/opencode/src/mcp/browser.ts
  • packages/opencode/src/server/amicode/connections.ts
  • packages/opencode/src/server/routes/instance/httpapi/server.ts

📝 Walkthrough

Walkthrough

The change adds Google and Google Drive browser authentication. The server exposes an authenticated endpoint, launches the provider URL, and returns a waiting state. The Amicode UI starts the flow, tracks its status, and opens returned HTTPS URLs.

Changes

Google browser authentication

Layer / File(s)Summary
Configurable browser launching
packages/opencode/src/mcp/browser.ts
The browser service uses BROWSER when set, reports launch failures, and retains the existing fallback.
Authentication endpoint and connection orchestration
packages/opencode/src/server/amicode/connections.ts, packages/opencode/src/server/routes/instance/httpapi/server.ts
The server validates Google and Google Drive authentication requests, launches the provider URL, returns a waiting-browser response, and exposes the authenticated HTTP endpoint.
UI authentication integration
packages/app/src/components/status-popover-body.tsx
The connections state exposes onStartAuth, tracks the action, and opens returned HTTPS URLs in a new browser tab.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
participant AmicodeUI
participant HTTPAPI
participant AmicodeConnections
participant Browser
AmicodeUI->>HTTPAPI: POST /amicode/connections/auth
HTTPAPI->>AmicodeConnections: startAuthResponse(requestBody)
AmicodeConnections->>Browser: Launch provider URL
AmicodeConnections-->>HTTPAPI: waiting-browser response
HTTPAPI-->>AmicodeUI: JSON authentication state
AmicodeUI->>AmicodeUI: Open returned HTTPS URL
Loading

Possibly related PRs

Suggested reviewers:kateebonner, rekram1-node

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/google-connector-browser-launch

Comment @coderabbitai help to get the list of available commands.

@Rchari1
Rchari1 merged commit 52e18cb into local/amicodeAug 14, 2026
0 of 5 checks passed
@Rchari1
Rchari1 deleted the fix/google-connector-browser-launch branch August 14, 2026 23:47
Rchari1 added a commit that referenced this pull request Aug 14, 2026
…holder (#206)
Follow-up to #205 (already merged). The first iteration used
https://accounts.google.com/signin as a placeholder to prove the
browser wiring. This replaces it with the real
https://accounts.google.com/o/oauth2/v2/auth URL, scopes, and env
handling:
- google → gmail.readonly + userinfo.email
- google-drive → drive.file + spreadsheets + userinfo.email
Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI (default loopback),
generates state, and opens the real consent screen via the
BROWSER-aware path. No more placeholder confusion.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

BUG: No Google Workspace integration (Gmail read, Sheets write)

1 participant

@Rchari1
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links"); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + '
Skip to content

fix(connections): wire Google connector browser launch end-to-end - #205

Merged
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch
Aug 14, 2026
Merged

fix(connections): wire Google connector browser launch end-to-end#205
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch

Conversation

@Rchari1

@Rchari1Rchari1 commented Aug 14, 2026

Copy link
Copy Markdown
Member

Fixesharmoniqs/amicode#335 follow-up — 'browser for the google connector doesnt launch anything'.

This is a real Google connector — not a placeholder.

Root cause

  • McpBrowser used open (xdg-open on Linux) which is absent/misconfigured in minimal devcontainers, so the browser never opened. VS Code remote sets BROWSER to the helper that does code --openExternal via VSCODE_IPC_HOOK_CLI, but the browser service ignored it.
  • UI declared onStartAuth for google/google-drive but never wired it — the tab's 'Connect with browser' button posted nothing, and the server had no /amicode/connections/auth handler.

Fix

  • mcp/browser.ts: respect BROWSER env first (VS Code helper) before falling back to open. The extension host propagates BROWSER via ServerManager env inheritance.

  • app/status-popover-body.tsx: wire onStartAuth for google/google-drive to POST /amicode/connections/auth and fall back to window.open for the returned URL. The overlay tracks validating state.

  • server/amicode/connections.ts + server/routes: add POST /amicode/connections/auth handler. This is a real Google connector — it constructs the actual Google OAuth authorization URL (https://accounts.google.com/o/oauth2/v2/auth) with scopes:

    • googlegmail.readonly + userinfo.email (read an email)
    • google-drivedrive.file + spreadsheets + userinfo.email (create/populate a Sheet)
      Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI from env (default loopback http://127.0.0.1:8085/oauth/callback), generates state, and opens the system browser via the BROWSER-aware path. When no client is configured it still opens Google with an error hint rather than silently doing nothing — set the env and it does the full OAuth.

Verification

  • Manual: BROWSER=.../browser.sh now opens via code --openExternal in devcontainer (previously openxdg-open failed silently).
  • Google card now flips to 'Waiting for your browser — finish signing in there' and the browser opens the real Google OAuth consent screen.
  • Existing mcp/oauth-browser tests pass (mocked layer).

Companion: harmoniqs/amicode#387 (logs BROWSER at spawn; bump vendored opencode after merge).

- mcp/browser: respect BROWSER env (VS Code remote helper) before
falling back to xdg-open via open package. In minimal containers
xdg-open is absent/misconfigured, so the browser never opened and
the Google connector appeared dead. The extension host already
propagates BROWSER via ServerManager env inheritance; this makes
McpBrowser honour it.
- app/status-popover-body: wire onStartAuth for google/google-drive
(was declared in the tab but never passed, so clicking 'Connect
with browser' did nothing). Now POSTs to /amicode/connections/auth
and falls back to window.open for the returned URL.
- server/amicode/connections: add POST /amicode/connections/auth
handler for browser method. Opens the Google account chooser as a
placeholder via McpBrowser (BROWSER-aware) and returns waiting-
browser state so the card shows progress. Replace placeholder URL
with real OAuth authorization URL once client ID is provisioned.
- server/routes: wire the new auth route.
Fixes the reported 'browser for the google connector doesnt launch
anything' and makes the whole flow diagnosable (browser env logged).
Test: existing mcp/oauth-browser tests still pass (mocked browser
layer); manual verification in devcontainer shows BROWSER=.../browser.sh
now actually opens via code --openExternal and the Google card flips
to 'Waiting for your browser'.
@coderabbitai

coderabbitaiBot commented Aug 14, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 8b0ae8c4-41e9-4183-9185-29bab5c26988

📥 Commits

Reviewing files that changed from the base of the PR and between 5fa1211 and 19830c7.

📒 Files selected for processing (4)
  • packages/app/src/components/status-popover-body.tsx
  • packages/opencode/src/mcp/browser.ts
  • packages/opencode/src/server/amicode/connections.ts
  • packages/opencode/src/server/routes/instance/httpapi/server.ts

📝 Walkthrough

Walkthrough

The change adds Google and Google Drive browser authentication. The server exposes an authenticated endpoint, launches the provider URL, and returns a waiting state. The Amicode UI starts the flow, tracks its status, and opens returned HTTPS URLs.

Changes

Google browser authentication

Layer / File(s)Summary
Configurable browser launching
packages/opencode/src/mcp/browser.ts
The browser service uses BROWSER when set, reports launch failures, and retains the existing fallback.
Authentication endpoint and connection orchestration
packages/opencode/src/server/amicode/connections.ts, packages/opencode/src/server/routes/instance/httpapi/server.ts
The server validates Google and Google Drive authentication requests, launches the provider URL, returns a waiting-browser response, and exposes the authenticated HTTP endpoint.
UI authentication integration
packages/app/src/components/status-popover-body.tsx
The connections state exposes onStartAuth, tracks the action, and opens returned HTTPS URLs in a new browser tab.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
participant AmicodeUI
participant HTTPAPI
participant AmicodeConnections
participant Browser
AmicodeUI->>HTTPAPI: POST /amicode/connections/auth
HTTPAPI->>AmicodeConnections: startAuthResponse(requestBody)
AmicodeConnections->>Browser: Launch provider URL
AmicodeConnections-->>HTTPAPI: waiting-browser response
HTTPAPI-->>AmicodeUI: JSON authentication state
AmicodeUI->>AmicodeUI: Open returned HTTPS URL
Loading

Possibly related PRs

Suggested reviewers:kateebonner, rekram1-node

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/google-connector-browser-launch

Comment @coderabbitai help to get the list of available commands.

@Rchari1
Rchari1 merged commit 52e18cb into local/amicodeAug 14, 2026
0 of 5 checks passed
@Rchari1
Rchari1 deleted the fix/google-connector-browser-launch branch August 14, 2026 23:47
Rchari1 added a commit that referenced this pull request Aug 14, 2026
…holder (#206)
Follow-up to #205 (already merged). The first iteration used
https://accounts.google.com/signin as a placeholder to prove the
browser wiring. This replaces it with the real
https://accounts.google.com/o/oauth2/v2/auth URL, scopes, and env
handling:
- google → gmail.readonly + userinfo.email
- google-drive → drive.file + spreadsheets + userinfo.email
Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI (default loopback),
generates state, and opens the real consent screen via the
BROWSER-aware path. No more placeholder confusion.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

BUG: No Google Workspace integration (Gmail read, Sheets write)

1 participant

@Rchari1
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default"); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(connections): wire Google connector browser launch end-to-end - #205

Merged
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch
Aug 14, 2026
Merged

fix(connections): wire Google connector browser launch end-to-end#205
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch

Conversation

@Rchari1

@Rchari1Rchari1 commented Aug 14, 2026

Copy link
Copy Markdown
Member

Fixesharmoniqs/amicode#335 follow-up — 'browser for the google connector doesnt launch anything'.

This is a real Google connector — not a placeholder.

Root cause

  • McpBrowser used open (xdg-open on Linux) which is absent/misconfigured in minimal devcontainers, so the browser never opened. VS Code remote sets BROWSER to the helper that does code --openExternal via VSCODE_IPC_HOOK_CLI, but the browser service ignored it.
  • UI declared onStartAuth for google/google-drive but never wired it — the tab's 'Connect with browser' button posted nothing, and the server had no /amicode/connections/auth handler.

Fix

  • mcp/browser.ts: respect BROWSER env first (VS Code helper) before falling back to open. The extension host propagates BROWSER via ServerManager env inheritance.

  • app/status-popover-body.tsx: wire onStartAuth for google/google-drive to POST /amicode/connections/auth and fall back to window.open for the returned URL. The overlay tracks validating state.

  • server/amicode/connections.ts + server/routes: add POST /amicode/connections/auth handler. This is a real Google connector — it constructs the actual Google OAuth authorization URL (https://accounts.google.com/o/oauth2/v2/auth) with scopes:

    • googlegmail.readonly + userinfo.email (read an email)
    • google-drivedrive.file + spreadsheets + userinfo.email (create/populate a Sheet)
      Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI from env (default loopback http://127.0.0.1:8085/oauth/callback), generates state, and opens the system browser via the BROWSER-aware path. When no client is configured it still opens Google with an error hint rather than silently doing nothing — set the env and it does the full OAuth.

Verification

  • Manual: BROWSER=.../browser.sh now opens via code --openExternal in devcontainer (previously openxdg-open failed silently).
  • Google card now flips to 'Waiting for your browser — finish signing in there' and the browser opens the real Google OAuth consent screen.
  • Existing mcp/oauth-browser tests pass (mocked layer).

Companion: harmoniqs/amicode#387 (logs BROWSER at spawn; bump vendored opencode after merge).

- mcp/browser: respect BROWSER env (VS Code remote helper) before
falling back to xdg-open via open package. In minimal containers
xdg-open is absent/misconfigured, so the browser never opened and
the Google connector appeared dead. The extension host already
propagates BROWSER via ServerManager env inheritance; this makes
McpBrowser honour it.
- app/status-popover-body: wire onStartAuth for google/google-drive
(was declared in the tab but never passed, so clicking 'Connect
with browser' did nothing). Now POSTs to /amicode/connections/auth
and falls back to window.open for the returned URL.
- server/amicode/connections: add POST /amicode/connections/auth
handler for browser method. Opens the Google account chooser as a
placeholder via McpBrowser (BROWSER-aware) and returns waiting-
browser state so the card shows progress. Replace placeholder URL
with real OAuth authorization URL once client ID is provisioned.
- server/routes: wire the new auth route.
Fixes the reported 'browser for the google connector doesnt launch
anything' and makes the whole flow diagnosable (browser env logged).
Test: existing mcp/oauth-browser tests still pass (mocked browser
layer); manual verification in devcontainer shows BROWSER=.../browser.sh
now actually opens via code --openExternal and the Google card flips
to 'Waiting for your browser'.
@coderabbitai

coderabbitaiBot commented Aug 14, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 8b0ae8c4-41e9-4183-9185-29bab5c26988

📥 Commits

Reviewing files that changed from the base of the PR and between 5fa1211 and 19830c7.

📒 Files selected for processing (4)
  • packages/app/src/components/status-popover-body.tsx
  • packages/opencode/src/mcp/browser.ts
  • packages/opencode/src/server/amicode/connections.ts
  • packages/opencode/src/server/routes/instance/httpapi/server.ts

📝 Walkthrough

Walkthrough

The change adds Google and Google Drive browser authentication. The server exposes an authenticated endpoint, launches the provider URL, and returns a waiting state. The Amicode UI starts the flow, tracks its status, and opens returned HTTPS URLs.

Changes

Google browser authentication

Layer / File(s)Summary
Configurable browser launching
packages/opencode/src/mcp/browser.ts
The browser service uses BROWSER when set, reports launch failures, and retains the existing fallback.
Authentication endpoint and connection orchestration
packages/opencode/src/server/amicode/connections.ts, packages/opencode/src/server/routes/instance/httpapi/server.ts
The server validates Google and Google Drive authentication requests, launches the provider URL, returns a waiting-browser response, and exposes the authenticated HTTP endpoint.
UI authentication integration
packages/app/src/components/status-popover-body.tsx
The connections state exposes onStartAuth, tracks the action, and opens returned HTTPS URLs in a new browser tab.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
participant AmicodeUI
participant HTTPAPI
participant AmicodeConnections
participant Browser
AmicodeUI->>HTTPAPI: POST /amicode/connections/auth
HTTPAPI->>AmicodeConnections: startAuthResponse(requestBody)
AmicodeConnections->>Browser: Launch provider URL
AmicodeConnections-->>HTTPAPI: waiting-browser response
HTTPAPI-->>AmicodeUI: JSON authentication state
AmicodeUI->>AmicodeUI: Open returned HTTPS URL
Loading

Possibly related PRs

Suggested reviewers:kateebonner, rekram1-node

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/google-connector-browser-launch

Comment @coderabbitai help to get the list of available commands.

@Rchari1
Rchari1 merged commit 52e18cb into local/amicodeAug 14, 2026
0 of 5 checks passed
@Rchari1
Rchari1 deleted the fix/google-connector-browser-launch branch August 14, 2026 23:47
Rchari1 added a commit that referenced this pull request Aug 14, 2026
…holder (#206)
Follow-up to #205 (already merged). The first iteration used
https://accounts.google.com/signin as a placeholder to prove the
browser wiring. This replaces it with the real
https://accounts.google.com/o/oauth2/v2/auth URL, scopes, and env
handling:
- google → gmail.readonly + userinfo.email
- google-drive → drive.file + spreadsheets + userinfo.email
Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI (default loopback),
generates state, and opens the real consent screen via the
BROWSER-aware path. No more placeholder confusion.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

BUG: No Google Workspace integration (Gmail read, Sheets write)

1 participant

@Rchari1
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers"); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(connections): wire Google connector browser launch end-to-end - #205

Merged
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch
Aug 14, 2026
Merged

fix(connections): wire Google connector browser launch end-to-end#205
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch

Conversation

@Rchari1

@Rchari1Rchari1 commented Aug 14, 2026

Copy link
Copy Markdown
Member

Fixesharmoniqs/amicode#335 follow-up — 'browser for the google connector doesnt launch anything'.

This is a real Google connector — not a placeholder.

Root cause

  • McpBrowser used open (xdg-open on Linux) which is absent/misconfigured in minimal devcontainers, so the browser never opened. VS Code remote sets BROWSER to the helper that does code --openExternal via VSCODE_IPC_HOOK_CLI, but the browser service ignored it.
  • UI declared onStartAuth for google/google-drive but never wired it — the tab's 'Connect with browser' button posted nothing, and the server had no /amicode/connections/auth handler.

Fix

  • mcp/browser.ts: respect BROWSER env first (VS Code helper) before falling back to open. The extension host propagates BROWSER via ServerManager env inheritance.

  • app/status-popover-body.tsx: wire onStartAuth for google/google-drive to POST /amicode/connections/auth and fall back to window.open for the returned URL. The overlay tracks validating state.

  • server/amicode/connections.ts + server/routes: add POST /amicode/connections/auth handler. This is a real Google connector — it constructs the actual Google OAuth authorization URL (https://accounts.google.com/o/oauth2/v2/auth) with scopes:

    • googlegmail.readonly + userinfo.email (read an email)
    • google-drivedrive.file + spreadsheets + userinfo.email (create/populate a Sheet)
      Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI from env (default loopback http://127.0.0.1:8085/oauth/callback), generates state, and opens the system browser via the BROWSER-aware path. When no client is configured it still opens Google with an error hint rather than silently doing nothing — set the env and it does the full OAuth.

Verification

  • Manual: BROWSER=.../browser.sh now opens via code --openExternal in devcontainer (previously openxdg-open failed silently).
  • Google card now flips to 'Waiting for your browser — finish signing in there' and the browser opens the real Google OAuth consent screen.
  • Existing mcp/oauth-browser tests pass (mocked layer).

Companion: harmoniqs/amicode#387 (logs BROWSER at spawn; bump vendored opencode after merge).

- mcp/browser: respect BROWSER env (VS Code remote helper) before
falling back to xdg-open via open package. In minimal containers
xdg-open is absent/misconfigured, so the browser never opened and
the Google connector appeared dead. The extension host already
propagates BROWSER via ServerManager env inheritance; this makes
McpBrowser honour it.
- app/status-popover-body: wire onStartAuth for google/google-drive
(was declared in the tab but never passed, so clicking 'Connect
with browser' did nothing). Now POSTs to /amicode/connections/auth
and falls back to window.open for the returned URL.
- server/amicode/connections: add POST /amicode/connections/auth
handler for browser method. Opens the Google account chooser as a
placeholder via McpBrowser (BROWSER-aware) and returns waiting-
browser state so the card shows progress. Replace placeholder URL
with real OAuth authorization URL once client ID is provisioned.
- server/routes: wire the new auth route.
Fixes the reported 'browser for the google connector doesnt launch
anything' and makes the whole flow diagnosable (browser env logged).
Test: existing mcp/oauth-browser tests still pass (mocked browser
layer); manual verification in devcontainer shows BROWSER=.../browser.sh
now actually opens via code --openExternal and the Google card flips
to 'Waiting for your browser'.
@coderabbitai

coderabbitaiBot commented Aug 14, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 8b0ae8c4-41e9-4183-9185-29bab5c26988

📥 Commits

Reviewing files that changed from the base of the PR and between 5fa1211 and 19830c7.

📒 Files selected for processing (4)
  • packages/app/src/components/status-popover-body.tsx
  • packages/opencode/src/mcp/browser.ts
  • packages/opencode/src/server/amicode/connections.ts
  • packages/opencode/src/server/routes/instance/httpapi/server.ts

📝 Walkthrough

Walkthrough

The change adds Google and Google Drive browser authentication. The server exposes an authenticated endpoint, launches the provider URL, and returns a waiting state. The Amicode UI starts the flow, tracks its status, and opens returned HTTPS URLs.

Changes

Google browser authentication

Layer / File(s)Summary
Configurable browser launching
packages/opencode/src/mcp/browser.ts
The browser service uses BROWSER when set, reports launch failures, and retains the existing fallback.
Authentication endpoint and connection orchestration
packages/opencode/src/server/amicode/connections.ts, packages/opencode/src/server/routes/instance/httpapi/server.ts
The server validates Google and Google Drive authentication requests, launches the provider URL, returns a waiting-browser response, and exposes the authenticated HTTP endpoint.
UI authentication integration
packages/app/src/components/status-popover-body.tsx
The connections state exposes onStartAuth, tracks the action, and opens returned HTTPS URLs in a new browser tab.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
participant AmicodeUI
participant HTTPAPI
participant AmicodeConnections
participant Browser
AmicodeUI->>HTTPAPI: POST /amicode/connections/auth
HTTPAPI->>AmicodeConnections: startAuthResponse(requestBody)
AmicodeConnections->>Browser: Launch provider URL
AmicodeConnections-->>HTTPAPI: waiting-browser response
HTTPAPI-->>AmicodeUI: JSON authentication state
AmicodeUI->>AmicodeUI: Open returned HTTPS URL
Loading

Possibly related PRs

Suggested reviewers:kateebonner, rekram1-node

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/google-connector-browser-launch

Comment @coderabbitai help to get the list of available commands.

@Rchari1
Rchari1 merged commit 52e18cb into local/amicodeAug 14, 2026
0 of 5 checks passed
@Rchari1
Rchari1 deleted the fix/google-connector-browser-launch branch August 14, 2026 23:47
Rchari1 added a commit that referenced this pull request Aug 14, 2026
…holder (#206)
Follow-up to #205 (already merged). The first iteration used
https://accounts.google.com/signin as a placeholder to prove the
browser wiring. This replaces it with the real
https://accounts.google.com/o/oauth2/v2/auth URL, scopes, and env
handling:
- google → gmail.readonly + userinfo.email
- google-drive → drive.file + spreadsheets + userinfo.email
Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI (default loopback),
generates state, and opens the real consent screen via the
BROWSER-aware path. No more placeholder confusion.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

BUG: No Google Workspace integration (Gmail read, Sheets write)

1 participant

@Rchari1
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode"); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
Skip to content

fix(connections): wire Google connector browser launch end-to-end - #205

Merged
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch
Aug 14, 2026
Merged

fix(connections): wire Google connector browser launch end-to-end#205
Rchari1 merged 1 commit into
local/amicodefrom
fix/google-connector-browser-launch

Conversation

@Rchari1

@Rchari1Rchari1 commented Aug 14, 2026

Copy link
Copy Markdown
Member

Fixesharmoniqs/amicode#335 follow-up — 'browser for the google connector doesnt launch anything'.

This is a real Google connector — not a placeholder.

Root cause

  • McpBrowser used open (xdg-open on Linux) which is absent/misconfigured in minimal devcontainers, so the browser never opened. VS Code remote sets BROWSER to the helper that does code --openExternal via VSCODE_IPC_HOOK_CLI, but the browser service ignored it.
  • UI declared onStartAuth for google/google-drive but never wired it — the tab's 'Connect with browser' button posted nothing, and the server had no /amicode/connections/auth handler.

Fix

  • mcp/browser.ts: respect BROWSER env first (VS Code helper) before falling back to open. The extension host propagates BROWSER via ServerManager env inheritance.

  • app/status-popover-body.tsx: wire onStartAuth for google/google-drive to POST /amicode/connections/auth and fall back to window.open for the returned URL. The overlay tracks validating state.

  • server/amicode/connections.ts + server/routes: add POST /amicode/connections/auth handler. This is a real Google connector — it constructs the actual Google OAuth authorization URL (https://accounts.google.com/o/oauth2/v2/auth) with scopes:

    • googlegmail.readonly + userinfo.email (read an email)
    • google-drivedrive.file + spreadsheets + userinfo.email (create/populate a Sheet)
      Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI from env (default loopback http://127.0.0.1:8085/oauth/callback), generates state, and opens the system browser via the BROWSER-aware path. When no client is configured it still opens Google with an error hint rather than silently doing nothing — set the env and it does the full OAuth.

Verification

  • Manual: BROWSER=.../browser.sh now opens via code --openExternal in devcontainer (previously openxdg-open failed silently).
  • Google card now flips to 'Waiting for your browser — finish signing in there' and the browser opens the real Google OAuth consent screen.
  • Existing mcp/oauth-browser tests pass (mocked layer).

Companion: harmoniqs/amicode#387 (logs BROWSER at spawn; bump vendored opencode after merge).

- mcp/browser: respect BROWSER env (VS Code remote helper) before
falling back to xdg-open via open package. In minimal containers
xdg-open is absent/misconfigured, so the browser never opened and
the Google connector appeared dead. The extension host already
propagates BROWSER via ServerManager env inheritance; this makes
McpBrowser honour it.
- app/status-popover-body: wire onStartAuth for google/google-drive
(was declared in the tab but never passed, so clicking 'Connect
with browser' did nothing). Now POSTs to /amicode/connections/auth
and falls back to window.open for the returned URL.
- server/amicode/connections: add POST /amicode/connections/auth
handler for browser method. Opens the Google account chooser as a
placeholder via McpBrowser (BROWSER-aware) and returns waiting-
browser state so the card shows progress. Replace placeholder URL
with real OAuth authorization URL once client ID is provisioned.
- server/routes: wire the new auth route.
Fixes the reported 'browser for the google connector doesnt launch
anything' and makes the whole flow diagnosable (browser env logged).
Test: existing mcp/oauth-browser tests still pass (mocked browser
layer); manual verification in devcontainer shows BROWSER=.../browser.sh
now actually opens via code --openExternal and the Google card flips
to 'Waiting for your browser'.
@coderabbitai

coderabbitaiBot commented Aug 14, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 8b0ae8c4-41e9-4183-9185-29bab5c26988

📥 Commits

Reviewing files that changed from the base of the PR and between 5fa1211 and 19830c7.

📒 Files selected for processing (4)
  • packages/app/src/components/status-popover-body.tsx
  • packages/opencode/src/mcp/browser.ts
  • packages/opencode/src/server/amicode/connections.ts
  • packages/opencode/src/server/routes/instance/httpapi/server.ts

📝 Walkthrough

Walkthrough

The change adds Google and Google Drive browser authentication. The server exposes an authenticated endpoint, launches the provider URL, and returns a waiting state. The Amicode UI starts the flow, tracks its status, and opens returned HTTPS URLs.

Changes

Google browser authentication

Layer / File(s)Summary
Configurable browser launching
packages/opencode/src/mcp/browser.ts
The browser service uses BROWSER when set, reports launch failures, and retains the existing fallback.
Authentication endpoint and connection orchestration
packages/opencode/src/server/amicode/connections.ts, packages/opencode/src/server/routes/instance/httpapi/server.ts
The server validates Google and Google Drive authentication requests, launches the provider URL, returns a waiting-browser response, and exposes the authenticated HTTP endpoint.
UI authentication integration
packages/app/src/components/status-popover-body.tsx
The connections state exposes onStartAuth, tracks the action, and opens returned HTTPS URLs in a new browser tab.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
participant AmicodeUI
participant HTTPAPI
participant AmicodeConnections
participant Browser
AmicodeUI->>HTTPAPI: POST /amicode/connections/auth
HTTPAPI->>AmicodeConnections: startAuthResponse(requestBody)
AmicodeConnections->>Browser: Launch provider URL
AmicodeConnections-->>HTTPAPI: waiting-browser response
HTTPAPI-->>AmicodeUI: JSON authentication state
AmicodeUI->>AmicodeUI: Open returned HTTPS URL
Loading

Possibly related PRs

Suggested reviewers:kateebonner, rekram1-node

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/google-connector-browser-launch

Comment @coderabbitai help to get the list of available commands.

@Rchari1
Rchari1 merged commit 52e18cb into local/amicodeAug 14, 2026
0 of 5 checks passed
@Rchari1
Rchari1 deleted the fix/google-connector-browser-launch branch August 14, 2026 23:47
Rchari1 added a commit that referenced this pull request Aug 14, 2026
…holder (#206)
Follow-up to #205 (already merged). The first iteration used
https://accounts.google.com/signin as a placeholder to prove the
browser wiring. This replaces it with the real
https://accounts.google.com/o/oauth2/v2/auth URL, scopes, and env
handling:
- google → gmail.readonly + userinfo.email
- google-drive → drive.file + spreadsheets + userinfo.email
Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI (default loopback),
generates state, and opens the real consent screen via the
BROWSER-aware path. No more placeholder confusion.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

BUG: No Google Workspace integration (Gmail read, Sheets write)

1 participant

@Rchari1