opencode-1password-auth 1.0.8 → 1.0.9

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+import type { Plugin } from "@opencode-ai/plugin";
+export declare const OnePasswordAuthPlugin: Plugin;
+export default OnePasswordAuthPlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AA0ClD,eAAO,MAAM,qBAAqB,EAAE,MA2ZnC,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/dist/index.js

@@ -0,0 +1,388 @@
+import * as sdk from "@1password/sdk";
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+// Debug logging to file
+const debugLog = (message) => {
+    const timestamp = new Date().toISOString();
+    const logMessage = `[${timestamp}] 1Password: ${message}\n`;
+    console.log(logMessage.trim());
+    try {
+        // Try to write to a debug log file
+        const home = process.env.HOME || process.env.USERPROFILE || '';
+        const logDir = path.join(home, '.opencode-1password-debug');
+        if (!fs.existsSync(logDir)) {
+            fs.mkdirSync(logDir, { recursive: true });
+        }
+        const logFile = path.join(logDir, 'debug.log');
+        fs.appendFileSync(logFile, logMessage);
+    }
+    catch (err) {
+        // Ignore file logging errors
+    }
+};
+export const OnePasswordAuthPlugin = async ({ client, $ }) => {
+    // TEST: This log should appear in OpenCode's terminal output if plugin loads
+    console.log("1Password Plugin: Export function called - starting initialization");
+    let opClient = null;
+    let mcpsEnvId;
+    let initialized = false;
+    let executionOrder = 0;
+    debugLog(`Plugin loaded (order: ${++executionOrder})`);
+    // Log environment variable status (redacted)
+    const token = process.env.OP_SERVICE_ACCOUNT_TOKEN;
+    const configId = process.env.OP_CONFIG_ENV_ID;
+    debugLog(`Environment check - OP_SERVICE_ACCOUNT_TOKEN: ${token ? 'SET' : 'MISSING'} (${token ? token.substring(0, 8) + '...' : 'N/A'})`);
+    debugLog(`Environment check - OP_CONFIG_ENV_ID: ${configId ? 'SET' : 'MISSING'} (${configId ? configId.substring(0, 8) + '...' : 'N/A'})`);
+    const normalizeProviderId = (variableName) => {
+        // Convert common patterns to match auth.json provider IDs
+        // e.g., "MINIMAX_CODING_PLAN" -> "minimax-coding-plan"
+        // e.g., "OPENCODE" -> "opencode"
+        // e.g., "DEEPSEEK" -> "deepseek"
+        let normalized = variableName.toLowerCase();
+        // Convert underscores to hyphens
+        normalized = normalized.replace(/_/g, '-');
+        debugLog(`Normalized ${variableName} -> ${normalized}`);
+        return normalized;
+    };
+    const getAlternativeEnvVarNames = (providerId) => {
+        // Generate all possible env var names that might be used
+        const names = new Set();
+        // Original providerId (e.g., "minimax-coding-plan")
+        names.add(providerId);
+        // Uppercase version (e.g., "MINIMAX-CODING-PLAN")
+        names.add(providerId.toUpperCase());
+        // With underscores instead of hyphens (e.g., "minimax_coding_plan")
+        names.add(providerId.replace(/-/g, '_'));
+        // Uppercase with underscores (e.g., "MINIMAX_CODING_PLAN")
+        names.add(providerId.replace(/-/g, '_').toUpperCase());
+        // Just the first part (e.g., "minimax")
+        const firstPart = providerId.split('-')[0];
+        if (firstPart && firstPart !== providerId) {
+            names.add(firstPart);
+            names.add(firstPart.toUpperCase());
+        }
+        return Array.from(names);
+    };
+    const getHomeDir = () => {
+        return process.env.HOME || process.env.USERPROFILE || "";
+    };
+    const getAuthJsonPath = () => {
+        const home = getHomeDir();
+        return `${home}/.local/share/opencode/auth.json`;
+    };
+    const getOpenCodeJsonPath = () => {
+        const home = getHomeDir();
+        return `${home}/.config/opencode/opencode.json`;
+    };
+    const initClient = async () => {
+        const token = process.env.OP_SERVICE_ACCOUNT_TOKEN;
+        if (!token) {
+            debugLog("Missing OP_SERVICE_ACCOUNT_TOKEN");
+            return null;
+        }
+        try {
+            return await sdk.createClient({
+                auth: token,
+                integrationName: "opencode-1password-env",
+                integrationVersion: "1.0.0",
+            });
+        }
+        catch (err) {
+            debugLog(`Failed to create client: ${err}`);
+            return null;
+        }
+    };
+    const readEnvironmentVariables = async (envId) => {
+        if (!opClient)
+            return [];
+        try {
+            const { variables } = await opClient.environments.getVariables(envId);
+            debugLog(`Read ${variables?.length || 0} variables from environment ${envId}`);
+            return variables || [];
+        }
+        catch (err) {
+            debugLog(`Failed to read environment ${envId}: ${err}`);
+            return [];
+        }
+    };
+    const getSecretsFromEnvironment = async (envId) => {
+        const vars = await readEnvironmentVariables(envId);
+        const secrets = {};
+        for (const v of vars) {
+            if (v.value) {
+                secrets[v.name] = v.value;
+                debugLog(`Found secret: ${v.name} (${v.value.length} chars)`);
+            }
+        }
+        return secrets;
+    };
+    const updateAuthJson = async (providerEnvId) => {
+        const authJsonPath = getAuthJsonPath();
+        try {
+            // Read current auth.json using cat
+            const catResult = await $ `cat "${authJsonPath}"`;
+            const content = catResult.stdout;
+            let auth;
+            try {
+                auth = JSON.parse(content.toString());
+            }
+            catch {
+                debugLog("auth.json is not valid JSON, skipping");
+                return;
+            }
+            let modified = false;
+            for (const [providerId, authConfig] of Object.entries(auth)) {
+                if (authConfig.key && !authConfig.key.startsWith("{env:")) {
+                    // Replace hardcoded key with env var reference
+                    authConfig.key = `{env:${providerId}}`;
+                    modified = true;
+                    debugLog(`Updated auth.json - ${providerId} -> {env:${providerId}}`);
+                }
+            }
+            if (modified) {
+                // Write updated content using a temp file and mv
+                const newContent = JSON.stringify(auth, null, 2);
+                // Use node to write the file since $ heredocs can be tricky
+                await $ `node -e "const fs=require('fs'); fs.writeFileSync('${authJsonPath}', JSON.stringify(${JSON.stringify(auth)}, null, 2));"`;
+                debugLog("auth.json updated to use environment variables");
+            }
+        }
+        catch (err) {
+            debugLog(`Failed to update auth.json: ${err}`);
+        }
+    };
+    const updateOpenCodeJsonMCP = async (mcpEnvId) => {
+        const openCodeJsonPath = getOpenCodeJsonPath();
+        try {
+            // Read current opencode.json using cat
+            const catResult = await $ `cat "${openCodeJsonPath}"`;
+            const content = catResult.stdout;
+            let config;
+            try {
+                config = JSON.parse(content.toString());
+            }
+            catch {
+                debugLog("opencode.json is not valid JSON, skipping");
+                return;
+            }
+            if (!config.mcp) {
+                debugLog("No MCP configuration found, skipping");
+                return;
+            }
+            let modified = false;
+            for (const [serverName, serverConfig] of Object.entries(config.mcp)) {
+                if (serverConfig?.environment) {
+                    for (const [key, value] of Object.entries(serverConfig.environment)) {
+                        if (typeof value === "string" && !value.startsWith("{env:") && !value.startsWith("$")) {
+                            // Replace hardcoded value with env var reference
+                            serverConfig.environment[key] = `{env:${key}}`;
+                            modified = true;
+                            debugLog(`Updated opencode.json - ${serverName}.${key} -> {env:${key}}`);
+                        }
+                    }
+                }
+            }
+            if (modified) {
+                // Write updated content
+                await $ `node -e "const fs=require('fs'); fs.writeFileSync('${openCodeJsonPath}', JSON.stringify(${JSON.stringify(config)}, null, 2));"`;
+                debugLog("opencode.json MCP config updated to use environment variables");
+            }
+        }
+        catch (err) {
+            debugLog(`Failed to update opencode.json: ${err}`);
+        }
+    };
+    const authenticateProviders = async (providerEnvId) => {
+        if (!opClient)
+            return;
+        debugLog(`Reading provider secrets from environment ${providerEnvId}`);
+        const secrets = await getSecretsFromEnvironment(providerEnvId);
+        debugLog(`Found ${Object.keys(secrets).length} provider secrets`);
+        for (const [variableName, apiKey] of Object.entries(secrets)) {
+            if (!apiKey)
+                continue;
+            const providerId = normalizeProviderId(variableName);
+            debugLog(`Processing ${variableName} -> ${providerId} (key length: ${apiKey.length})`);
+            // Set environment variables in multiple formats
+            const envVarNames = getAlternativeEnvVarNames(providerId);
+            for (const envVarName of envVarNames) {
+                process.env[envVarName] = apiKey;
+                debugLog(`Set process.env.${envVarName} = ${apiKey.substring(0, 8)}...`);
+            }
+            try {
+                // Authenticate with OpenCode runtime
+                debugLog(`Calling client.auth.set for ${providerId} with key length ${apiKey.length}`);
+                const result = await client.auth.set({
+                    path: { id: providerId },
+                    body: { type: "api", key: apiKey },
+                });
+                debugLog(`✓ ${providerId} authenticated (from ${variableName}) - Result: ${JSON.stringify(result)}`);
+            }
+            catch (err) {
+                debugLog(`Failed to authenticate ${providerId}: ${err}`);
+                if (err instanceof Error) {
+                    debugLog(`Error message: ${err.message}`);
+                    debugLog(`Error stack: ${err.stack}`);
+                }
+                // Also log to console for immediate visibility
+                console.error(`[1Password Plugin] Failed to authenticate ${providerId}: ${err}`);
+            }
+        }
+    };
+    const getConfiguredMCPVars = () => {
+        const vars = new Set();
+        try {
+            const config = client.config;
+            if (config?.mcp) {
+                for (const [, serverConfig] of Object.entries(config.mcp)) {
+                    if (serverConfig?.environment) {
+                        for (const [key] of Object.entries(serverConfig.environment)) {
+                            if (key.startsWith("{env:")) {
+                                const envVar = key.slice(5, -1);
+                                vars.add(envVar);
+                            }
+                            else {
+                                vars.add(key);
+                            }
+                        }
+                    }
+                }
+            }
+        }
+        catch (err) {
+            debugLog(`Failed to read MCP config: ${err}`);
+        }
+        return vars;
+    };
+    const injectMCPSecrets = async (mcpEnvId) => {
+        const neededVars = getConfiguredMCPVars();
+        if (neededVars.size === 0) {
+            return {};
+        }
+        const secrets = await getSecretsFromEnvironment(mcpEnvId);
+        const toInject = {};
+        for (const varName of neededVars) {
+            if (secrets[varName]) {
+                toInject[varName] = secrets[varName];
+            }
+        }
+        return toInject;
+    };
+    // Initialize as soon as plugin loads (config hook runs early)
+    const initializePlugin = async () => {
+        debugLog(`initializePlugin called (order: ${++executionOrder})`);
+        if (initialized) {
+            debugLog("initializePlugin: already initialized, skipping");
+            return;
+        }
+        debugLog("Initializing plugin...");
+        opClient = await initClient();
+        if (!opClient) {
+            debugLog("No client available");
+            return;
+        }
+        const configEnvId = process.env.OP_CONFIG_ENV_ID;
+        if (!configEnvId) {
+            debugLog("Missing OP_CONFIG_ENV_ID");
+            return;
+        }
+        debugLog(`Reading config from environment ${configEnvId}`);
+        const vars = await readEnvironmentVariables(configEnvId);
+        const configEnvIds = {};
+        for (const v of vars) {
+            if (v.name.endsWith("_ENV_ID") && v.value) {
+                configEnvIds[v.name] = v.value;
+                debugLog(`Found ${v.name} = ${v.value.substring(0, 10)}...`);
+            }
+        }
+        const providersEnvId = configEnvIds.OPENCODE_PROVIDERS_ENV_ID;
+        if (providersEnvId) {
+            // Authenticate providers - client.auth.set() will write to auth.json
+            // SKIP updateAuthJson - it writes {env:...} placeholders which cause issues
+            // await updateAuthJson(providersEnvId);
+            await authenticateProviders(providersEnvId);
+        }
+        const mcpEnvIdFromConfig = configEnvIds.OPENCODE_MCPS_ENV_ID;
+        if (mcpEnvIdFromConfig) {
+            mcpsEnvId = mcpEnvIdFromConfig;
+            await updateOpenCodeJsonMCP(mcpEnvIdFromConfig);
+            const toInject = await injectMCPSecrets(mcpEnvIdFromConfig);
+            if (Object.keys(toInject).length > 0) {
+                debugLog(`Injected ${Object.keys(toInject).join(", ")} for MCP`);
+            }
+        }
+        initialized = true;
+        debugLog("Plugin initialization complete");
+    };
+    // Start initialization immediately (but config hook might run first)
+    debugLog(`Starting immediate initialization (order: ${++executionOrder})`);
+    if (!initialized) {
+        initializePlugin().catch(err => {
+            debugLog(`Failed to initialize plugin: ${err}`);
+        });
+    }
+    else {
+        debugLog("Already initialized, skipping immediate init");
+    }
+    return {
+        async config(config) {
+            debugLog(`Config hook called (order: ${++executionOrder})`);
+            // Config hook runs early - try to authenticate here
+            if (!initialized) {
+                debugLog("Config hook: attempting authentication");
+                try {
+                    await initializePlugin();
+                    initialized = true;
+                }
+                catch (err) {
+                    debugLog(`Config hook authentication failed: ${err}`);
+                }
+            }
+            else {
+                debugLog("Config hook: already initialized");
+            }
+        },
+        async event({ event }) {
+            debugLog(`Received event: ${event.type}`);
+            if (event.type === "server.connected") {
+                debugLog("Server connected - rechecking authentication");
+                // Re-authenticate providers in case they weren't set earlier
+                if (opClient) {
+                    const configEnvId = process.env.OP_CONFIG_ENV_ID;
+                    if (configEnvId) {
+                        const vars = await readEnvironmentVariables(configEnvId);
+                        const configEnvIds = {};
+                        for (const v of vars) {
+                            if (v.name.endsWith("_ENV_ID") && v.value) {
+                                configEnvIds[v.name] = v.value;
+                            }
+                        }
+                        const providersEnvId = configEnvIds.OPENCODE_PROVIDERS_ENV_ID;
+                        if (providersEnvId) {
+                            await authenticateProviders(providersEnvId);
+                        }
+                    }
+                }
+            }
+        },
+        async "shell.env"(input, output) {
+            if (!opClient || !mcpsEnvId)
+                return;
+            const toInject = await injectMCPSecrets(mcpsEnvId);
+            for (const [varName, value] of Object.entries(toInject)) {
+                output.env[varName] = value;
+                debugLog(`Injected ${varName} into shell environment`);
+            }
+        },
+        async "tool.execute.before"(input) {
+            if (input.tool !== "read")
+                return;
+            const fileArgs = input.args;
+            if (fileArgs?.filePath && fileArgs.filePath.includes(".env")) {
+                debugLog("Warning - .env file access detected. Consider using 1Password for secrets management.");
+            }
+        },
+    };
+};
+export default OnePasswordAuthPlugin;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,wBAAwB;AACxB,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAE,EAAE;IACnC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,SAAS,gBAAgB,OAAO,IAAI,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IAE/B,IAAI,CAAC;QACL,mCAAmC;QACnC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;QAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC/C,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,6BAA6B;IAC/B,CAAC;AACH,CAAC,CAAC;AAmBF,MAAM,CAAC,MAAM,qBAAqB,GAAW,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;IACnE,6EAA6E;IAC7E,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;IAElF,IAAI,QAAQ,GAAwD,IAAI,CAAC;IACzE,IAAI,SAA6B,CAAC;IAClC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,QAAQ,CAAC,yBAAyB,EAAE,cAAc,GAAG,CAAC,CAAC;IAEvD,6CAA6C;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9C,QAAQ,CAAC,iDAAiD,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAC1I,QAAQ,CAAC,yCAAyC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAE3I,MAAM,mBAAmB,GAAG,CAAC,YAAoB,EAAU,EAAE;QAC3D,0DAA0D;QAC1D,uDAAuD;QACvD,iCAAiC;QACjC,iCAAiC;QAEjC,IAAI,UAAU,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;QAE5C,iCAAiC;QACjC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAE3C,QAAQ,CAAC,cAAc,YAAY,OAAO,UAAU,EAAE,CAAC,CAAC;QACxD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,yBAAyB,GAAG,CAAC,UAAkB,EAAY,EAAE;QACjE,yDAAyD;QACzD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAEhC,oDAAoD;QACpD,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEtB,kDAAkD;QAClD,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAEpC,oEAAoE;QACpE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAEzC,2DAA2D;QAC3D,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAEvD,wCAAwC;QACxC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,SAAS,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC1C,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrB,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,GAAW,EAAE;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAC3D,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,GAAW,EAAE;QACnC,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,OAAO,GAAG,IAAI,kCAAkC,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,GAAW,EAAE;QACvC,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,OAAO,GAAG,IAAI,iCAAiC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,kCAAkC,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,YAAY,CAAC;gBAC5B,IAAI,EAAE,KAAK;gBACX,eAAe,EAAE,wBAAwB;gBACzC,kBAAkB,EAAE,OAAO;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,wBAAwB,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;QACvD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACtE,QAAQ,CAAC,QAAQ,SAAS,EAAE,MAAM,IAAI,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;YAC/E,OAAO,SAAS,IAAI,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,8BAA8B,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;YACxD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,yBAAyB,GAAG,KAAK,EAAE,KAAa,EAAmC,EAAE;QACzF,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;gBAC1B,QAAQ,CAAC,iBAAiB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,aAAqB,EAAiB,EAAE;QACpE,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QAEvC,IAAI,CAAC;YACH,mCAAmC;YACnC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAA,QAAQ,YAAY,GAAG,CAAC;YACjD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC;YACjC,IAAI,IAAc,CAAC;YAEnB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,uCAAuC,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,KAAK,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,IAAI,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1D,+CAA+C;oBAC/C,UAAU,CAAC,GAAG,GAAG,QAAQ,UAAU,GAAG,CAAC;oBACvC,QAAQ,GAAG,IAAI,CAAC;oBAChB,QAAQ,CAAC,uBAAuB,UAAU,YAAY,UAAU,GAAG,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,iDAAiD;gBACjD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACjD,4DAA4D;gBAC5D,MAAM,CAAC,CAAA,sDAAsD,YAAY,qBAAqB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC;gBAClI,QAAQ,CAAC,gDAAgD,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,KAAK,EAAE,QAAgB,EAAiB,EAAE;QACtE,MAAM,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;QAE/C,IAAI,CAAC;YACH,uCAAuC;YACvC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAA,QAAQ,gBAAgB,GAAG,CAAC;YACrD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC;YACjC,IAAI,MAAsB,CAAC;YAE3B,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,2CAA2C,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBAChB,QAAQ,CAAC,sCAAsC,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpE,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;oBAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;wBACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;4BACtF,iDAAiD;4BACjD,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC;4BAC/C,QAAQ,GAAG,IAAI,CAAC;4BAChB,QAAQ,CAAC,2BAA2B,UAAU,IAAI,GAAG,YAAY,GAAG,GAAG,CAAC,CAAC;wBAC3E,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,wBAAwB;gBACxB,MAAM,CAAC,CAAA,sDAAsD,gBAAgB,qBAAqB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC;gBACxI,QAAQ,CAAC,+DAA+D,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,KAAK,EAAE,aAAqB,EAAiB,EAAE;QAC3E,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,QAAQ,CAAC,6CAA6C,aAAa,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,aAAa,CAAC,CAAC;QAC/D,QAAQ,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,mBAAmB,CAAC,CAAC;QAElE,KAAK,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,MAAM;gBAAE,SAAS;YAEtB,MAAM,UAAU,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;YACrD,QAAQ,CAAC,cAAc,YAAY,OAAO,UAAU,iBAAiB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YAEvF,gDAAgD;YAChD,MAAM,WAAW,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;YAC1D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC;gBACjC,QAAQ,CAAC,mBAAmB,UAAU,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC3E,CAAC;YAED,IAAI,CAAC;gBACH,qCAAqC;gBACrC,QAAQ,CAAC,+BAA+B,UAAU,oBAAoB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACvF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;oBACnC,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;oBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;iBACnC,CAAC,CAAC;gBACH,QAAQ,CAAC,KAAK,UAAU,wBAAwB,YAAY,eAAe,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,0BAA0B,UAAU,KAAK,GAAG,EAAE,CAAC,CAAC;gBACzD,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;oBACzB,QAAQ,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC1C,QAAQ,CAAC,gBAAgB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxC,CAAC;gBACD,+CAA+C;gBAC/C,OAAO,CAAC,KAAK,CAAC,6CAA6C,UAAU,KAAK,GAAG,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,GAAgB,EAAE;QAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAwB,CAAC;YAC/C,IAAI,MAAM,EAAE,GAAG,EAAE,CAAC;gBAChB,KAAK,MAAM,CAAC,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1D,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;wBAC9B,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;4BAC7D,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gCAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gCAChC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;4BACnB,CAAC;iCAAM,CAAC;gCACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;4BAChB,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,QAAgB,EAAmC,EAAE;QACnF,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAE5C,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrB,QAAQ,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,8DAA8D;IAC9D,MAAM,gBAAgB,GAAG,KAAK,IAAI,EAAE;QAClC,QAAQ,CAAC,mCAAmC,EAAE,cAAc,GAAG,CAAC,CAAC;QACjE,IAAI,WAAW,EAAE,CAAC;YAChB,QAAQ,CAAC,iDAAiD,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QAEnC,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,qBAAqB,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,QAAQ,CAAC,0BAA0B,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,YAAY,GAA2B,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBAC1C,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;gBAC/B,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,YAAY,CAAC,yBAAyB,CAAC;QAC9D,IAAI,cAAc,EAAE,CAAC;YACnB,qEAAqE;YACrE,4EAA4E;YAC5E,wCAAwC;YACxC,MAAM,qBAAqB,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,kBAAkB,GAAG,YAAY,CAAC,oBAAoB,CAAC;QAC7D,IAAI,kBAAkB,EAAE,CAAC;YACvB,SAAS,GAAG,kBAAkB,CAAC;YAC/B,MAAM,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,QAAQ,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,WAAW,GAAG,IAAI,CAAC;QACnB,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,qEAAqE;IACrE,QAAQ,CAAC,6CAA6C,EAAE,cAAc,GAAG,CAAC,CAAC;IAC3E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,gBAAgB,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YAC7B,QAAQ,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,8CAA8C,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,MAAW;YACtB,QAAQ,CAAC,8BAA8B,EAAE,cAAc,GAAG,CAAC,CAAC;YAC5D,oDAAoD;YACpD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,QAAQ,CAAC,wCAAwC,CAAC,CAAC;gBACnD,IAAI,CAAC;oBACH,MAAM,gBAAgB,EAAE,CAAC;oBACzB,WAAW,GAAG,IAAI,CAAC;gBACrB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,QAAQ,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,kCAAkC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAA+B;YAChD,QAAQ,CAAC,mBAAmB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACtC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;gBACzD,6DAA6D;gBAC7D,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBACjD,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,WAAW,CAAC,CAAC;wBACzD,MAAM,YAAY,GAA2B,EAAE,CAAC;wBAChD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;4BACrB,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gCAC1C,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;4BACjC,CAAC;wBACH,CAAC;wBACD,MAAM,cAAc,GAAG,YAAY,CAAC,yBAAyB,CAAC;wBAC9D,IAAI,cAAc,EAAE,CAAC;4BACnB,MAAM,qBAAqB,CAAC,cAAc,CAAC,CAAC;wBAC9C,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM;YAC7B,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS;gBAAE,OAAO;YAEpC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAEnD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;gBAC5B,QAAQ,CAAC,YAAY,OAAO,yBAAyB,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,KAAK;YAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO;YAElC,MAAM,QAAQ,GAAI,KAAa,CAAC,IAAyC,CAAC;YAC1E,IAAI,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7D,QAAQ,CACN,uFAAuF,CACxF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/package.json

@@ -1,13 +1,35 @@
 {
   "name": "opencode-1password-auth",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "1Password integration for OpenCode - authenticate providers and inject MCP secrets from 1Password environments",
   "type": "module",
-  "main": "index.ts",
-  "keywords": ["opencode", "opencode-plugin", "1password", "mcp", "secrets"],
+  "main": "dist/index.js",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": ["dist"],
+  "keywords": [
+    "opencode",
+    "opencode-plugin",
+    "1password",
+    "mcp",
+    "secrets"
+  ],
   "author": "",
   "license": "MIT",
+  "scripts": {
+    "build": "tsc",
+    "prepublishOnly": "npm run build"
+  },
   "dependencies": {
     "@1password/sdk": "0.4.1-beta.1"
+  },
+  "devDependencies": {
+    "@opencode-ai/plugin": "^1.3.13",
+    "@types/node": "^25.5.2",
+    "typescript": "^5.0.0"
   }
-}
+}