fix(connections): make Google connector use real OAuth URL, not placeholder

[Rchari1]

Follow-up to #205 (already merged).

Confusion: #205's first iteration used https://accounts.google.com/signin as a placeholder to prove the browser wiring end-to-end. You flagged it correctly — the Google connector should be a real Google connector.

Fix: replaces the placeholder with the real authorization URL:

• https://accounts.google.com/o/oauth2/v2/auth + scopes
  • google → gmail.readonly + userinfo.email (read an email)
  • google-drive → drive.file + spreadsheets + userinfo.email (create/populate a Sheet)
• Reads GOOGLE_CLIENT_ID / GOOGLE_REDIRECT_URI (default http://127.0.0.1:8085/oauth/callback), generates state, access_type=offline&prompt=consent, and opens via the BROWSER-aware path (VS Code browser.sh → code --openExternal).

When no client is configured it still opens Google with ?error=missing_client_id rather than silently doing nothing — set the env and it does the full OAuth. No more placeholder confusion.

No new UI changes — the browser wiring from #205 is unchanged.

Summary by CodeRabbit

• New Features

  • Google browser authentication now generates a complete OAuth authorization link when configured.
  • Requests appropriate access scopes and supports offline access with consent prompting.
  • Provides a clear configuration indication when a Google client ID is unavailable.

• Bug Fixes

  • Replaced placeholder Google and Drive account links with functional authentication URLs.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 105699e9-3d33-4530-94a9-a33c339bdc1e

📥 Commits

Reviewing files that changed from the base of the PR and between 52e18cb and a6073b4.

📒 Files selected for processing (1)

• packages/opencode/src/server/amicode/connections.ts

---

📝 Walkthrough

Walkthrough

Google browser authentication now builds a Google OAuth authorization URL from environment configuration. It includes connector-specific scopes, redirect URI, offline access, consent prompting, and generated state. Missing client configuration produces an explanatory fallback URL.

Changes

Google OAuth flow

Layer / File(s)	Summary
Build Google authorization URL packages/opencode/src/server/amicode/connections.ts	The browser authentication flow constructs connector-specific Google OAuth URLs with configured client and redirect values, scopes, state, offline access, and consent prompting. It uses a fallback URL when the client ID is unavailable. Browser opening remains best-effort.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• harmoniqs/opencode#197: Introduces the Google browser-authentication setup extended by this change.
• harmoniqs/opencode#201: Introduces the browser OAuth flow extended by this change.
• harmoniqs/opencode#205: Adds the placeholder Google OAuth URL replaced by this change.

Suggested reviewers: kateebonner

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/google-real-oauth

---

_{Comment @coderabbitai help to get the list of available commands.}