opencode-1password-auth 1.0.8 → 1.0.9

package/setup.sh

@@ -1,646 +0,0 @@
-#!/bin/bash
-
-# OpenCode 1Password Auth Plugin - Setup Script
-# This script helps configure the environment variables needed for the plugin
-
-set -e
-
-# Colors for output
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-CYAN='\033[0;36m'
-GRAY='\033[0;90m'
-NC='\033[0m' # No Color
-
-# Functions
-log_banner() {
-    echo ""
-    echo -e "${CYAN}========================================${NC}"
-    echo -e "${CYAN}  OpenCode 1Password Auth Setup${NC}"
-    echo -e "${CYAN}========================================${NC}"
-    echo ""
-}
-
-log_success() {
-    echo -e "${GREEN}[OK]${NC} $1"
-}
-
-log_error() {
-    echo -e "${RED}[ERROR]${NC} $1"
-}
-
-log_info() {
-    echo -e "${YELLOW}[INFO]${NC} $1"
-}
-
-get_existing_values() {
-    if [[ "$OSTYPE" == "darwin"* ]] || [[ "$OSTYPE" == "linux-gnu"* ]]; then
-        OP_SERVICE_ACCOUNT_TOKEN="${OP_SERVICE_ACCOUNT_TOKEN:-}"
-        OP_CONFIG_ENV_ID="${OP_CONFIG_ENV_ID:-}"
-        
-        # Check shell RC files
-        if [[ -f "$HOME/.zshrc" ]] && grep -q "OP_SERVICE_ACCOUNT_TOKEN" "$HOME/.zshrc" 2>/dev/null; then
-            source "$HOME/.zshrc" 2>/dev/null
-        fi
-        if [[ -f "$HOME/.bashrc" ]] && grep -q "OP_SERVICE_ACCOUNT_TOKEN" "$HOME/.bashrc" 2>/dev/null; then
-            source "$HOME/.bashrc" 2>/dev/null
-        fi
-        if [[ -f "$HOME/.bash_profile" ]] && grep -q "OP_SERVICE_ACCOUNT_TOKEN" "$HOME/.bash_profile" 2>/dev/null; then
-            source "$HOME/.bash_profile" 2>/dev/null
-        fi
-    fi
-}
-
-save_to_rc() {
-    local var_name="$1"
-    local var_value="$2"
-    local rc_file="$3"
-    
-    # Remove existing entry if present
-    if [[ -f "$rc_file" ]]; then
-        sed -i.bak "/export ${var_name}=/d" "$rc_file"
-    fi
-    
-    # Add new entry
-    echo "export ${var_name}='${var_value}'" >> "$rc_file"
-    log_success "Added ${var_name} to ${rc_file}"
-}
-
-remove_from_rc() {
-    local var_name="$1"
-    local rc_file="$2"
-    
-    if [[ -f "$rc_file" ]]; then
-        sed -i.bak "/export ${var_name}=/d" "$rc_file"
-        log_success "Removed ${var_name} from ${rc_file}"
-    fi
-}
-
-test_connection() {
-    local token="$1"
-    
-    # Create temporary test script
-    cat > /tmp/test_1p_$$.js << 'EOF'
-const sdk = require('@1password/sdk');
-
-async function test() {
-    const token = process.argv[1];
-    const client = await sdk.createClient({
-        auth: token,
-        integrationName: 'opencode-1password-setup-test',
-        integrationVersion: '1.0.0'
-    });
-    console.log('SUCCESS');
-}
-
-test().catch(err => {
-    console.error('FAILED:', err.message);
-    process.exit(1);
-});
-EOF
-    
-    result=$(node /tmp/test_1p_$$.js "$token" 2>&1)
-    rm -f /tmp/test_1p_$$.js
-    
-    if [[ "$result" == "SUCCESS" ]]; then
-        return 0
-    else
-        return 1
-    fi
-}
-
-get_audit_data() {
-    local token="$1"
-    local config_id="$2"
-    
-    cat > /tmp/audit_1p_$$.js << 'EOF'
-const sdk = require('@1password/sdk');
-
-async function audit() {
-    const token = process.argv[1];
-    const configId = process.argv[2];
-    
-    const client = await sdk.createClient({
-        auth: token,
-        integrationName: 'opencode-1password-setup-test',
-        integrationVersion: '1.0.0'
-    });
-    
-    const { variables } = await client.environments.getVariables(configId);
-    
-    const envIds = {};
-    for (const v of variables) {
-        if (v.name.endsWith('_ENV_ID') && v.value) {
-            envIds[v.name] = v.value;
-        }
-    }
-    
-    console.log(JSON.stringify(envIds));
-}
-
-audit().catch(err => {
-    console.error('FAILED:', err.message);
-    process.exit(1);
-});
-EOF
-    
-    result=$(node /tmp/audit_1p_$$.js "$token" "$config_id" 2>&1)
-    rm -f /tmp/audit_1p_$$.js
-    echo "$result"
-}
-
-show_audit_report() {
-    local token="$1"
-    local env_ids_json="$2"
-    
-    echo ""
-    echo -e "${CYAN}========================================${NC}"
-    echo -e "${CYAN}  Configuration Audit Report${NC}"
-    echo -e "${CYAN}========================================${NC}"
-    echo ""
-    
-    echo -e "${WHITE}Bootstrap Environment References:${NC}"
-    echo "--------------------------------"
-    
-    # Parse JSON manually (macOS doesn't have jq by default)
-    echo "$env_ids_json" | sed 's/[{}"]//g' | tr ',' '\n' | while IFS=':' read -r key value; do
-        if [[ -n "$key" && -n "$value" ]]; then
-            masked="${value:0:10}..."
-            echo -e "  ${key} = ${masked}"
-        fi
-    done
-    
-    echo ""
-    
-    # For each referenced environment, show its contents
-    echo "$env_ids_json" | sed 's/[{}"]//g' | tr ',' '\n' | while IFS=':' read -r key value; do
-        if [[ -n "$key" && -n "$value" && "$key" != *"{"* ]]; then
-            env_id="$value"
-            env_name=$(echo "$key" | sed 's/OPENCODE_//' | sed 's/_ENV_ID//')
-            
-            echo -e "${WHITE}${env_name} Environment:${NC}"
-            echo "--------------------------------"
-            
-            # Read and display this environment
-            cat > /tmp/read_env_$$.js << 'EOFINNER'
-const sdk = require('@1password/sdk');
-
-async function readEnv() {
-    const token = process.argv[1];
-    const envId = process.argv[2];
-    
-    const client = await sdk.createClient({
-        auth: token,
-        integrationName: 'opencode-1password-setup-test',
-        integrationVersion: '1.0.0'
-    });
-    
-    const { variables } = await client.environments.getVariables(envId);
-    
-    for (const v of variables) {
-        const masked = v.value ? v.value.substring(0, 8) + '••••••••' : '(empty)';
-        console.log(v.name + '=' + masked);
-    }
-}
-
-readEnv().catch(err => {
-    console.error('Error:', err.message);
-});
-EOFINNER
-            
-            node /tmp/read_env_$$.js "$token" "$env_id" 2>&1 | while IFS='=' read -r name masked; do
-                if [[ -n "$name" ]]; then
-                    echo -e "  ${name}=${masked}"
-                fi
-            done
-            
-            rm -f /tmp/read_env_$$.js
-            echo ""
-        fi
-    done
-}
-
-update_config_files() {
-    local token="$1"
-    local providers_env_id="$2"
-    local mcps_env_id="$3"
-    
-    log_info "Reading secrets from 1Password..."
-    
-    # Get provider and MCP secrets
-    cat > /tmp/update_config_$$.js << 'EOF'
-const sdk = require('@1password/sdk');
-
-async function getSecrets() {
-    const token = process.argv[1];
-    const providersEnvId = process.argv[2];
-    const mcpsEnvId = process.argv[3];
-    
-    const client = await sdk.createClient({
-        auth: token,
-        integrationName: 'opencode-1password-setup',
-        integrationVersion: '1.0.0'
-    });
-    
-    const providers = {};
-    const { variables: providerVars } = await client.environments.getVariables(providersEnvId);
-    for (const v of providerVars) {
-        if (v.value) providers[v.name] = v.value;
-    }
-    
-    const mcps = {};
-    if (mcpsEnvId) {
-        const { variables: mcpVars } = await client.environments.getVariables(mcpsEnvId);
-        for (const v of mcpVars) {
-            if (v.value) mcps[v.name] = v.value;
-        }
-    }
-    
-    console.log(JSON.stringify({ providers, mcps }));
-}
-
-getSecrets().catch(err => {
-    console.error('FAILED:', err.message);
-    process.exit(1);
-});
-EOF
-    
-    result=$(node /tmp/update_config_$$.js "$token" "$providers_env_id" "$mcps_env_id" 2>&1)
-    rm -f /tmp/update_config_$$.js
-    
-    if [[ "$result" == "FAILED:"* ]]; then
-        log_error "Failed to read secrets from 1Password: $result"
-        return 1
-    fi
-    
-    # Get home directory
-    home="${HOME:-}"
-    if [[ -z "$home" ]]; then
-        home=$(eval echo ~)
-    fi
-    
-    # Update auth.json
-    auth_json_path="$home/.local/share/opencode/auth.json"
-    log_info "Updating auth.json..."
-    
-    if [[ -f "$auth_json_path" ]]; then
-        # Read auth.json and update
-        auth_content=$(cat "$auth_json_path")
-        # Use node to parse and update JSON
-        cat > /tmp/update_auth_$$.js << 'EOFJ'
-const fs = require('fs');
-const authPath = process.argv[1];
-const auth = JSON.parse(fs.readFileSync(authPath, 'utf8'));
-
-let modified = false;
-for (const [providerId, authConfig] of Object.entries(auth)) {
-    if (authConfig.key && !authConfig.key.startsWith('{env:')) {
-        authConfig.key = '{env:' + providerId + '}';
-        modified = true;
-        console.log('Updated ' + providerId + ' -> {env:' + providerId + '}');
-    }
-}
-
-if (modified) {
-    fs.writeFileSync(authPath, JSON.stringify(auth, null, 2));
-    console.log('auth.json updated');
-} else {
-    console.log('auth.json already uses environment variable references');
-}
-EOFJ
-        
-        update_result=$(node /tmp/update_auth_$$.js "$auth_json_path" 2>&1)
-        rm -f /tmp/update_auth_$$.js
-        echo "$update_result" | while read line; do
-            if [[ "$line" == Updated* ]] || [[ "$line" == *updated* ]]; then
-                log_success "$(echo "$line" | sed 's/Updated/Updated/')"
-            else
-                log_info "$line"
-            fi
-        done
-    else
-        log_info "auth.json not found at $auth_json_path"
-    fi
-    
-    # Update opencode.json MCP config
-    config_json_path="$home/.config/opencode/opencode.json"
-    log_info "Updating opencode.json MCP config..."
-    
-    if [[ -f "$config_json_path" ]]; then
-        cat > /tmp/update_mcp_$$.js << 'EOFMCP'
-const fs = require('fs');
-const configPath = process.argv[1];
-const config = JSON.parse(fs.readFileSync(configPath, 'utf8'));
-
-let modified = false;
-if (config.mcp) {
-    for (const [serverName, serverConfig] of Object.entries(config.mcp)) {
-        if (serverConfig && serverConfig.environment) {
-            for (const [key, value] of Object.entries(serverConfig.environment)) {
-                if (value && !value.startsWith('{env:') && !value.startsWith('$')) {
-                    serverConfig.environment[key] = '{env:' + key + '}';
-                    modified = true;
-                    console.log('Updated ' + serverName + '.' + key + ' -> {env:' + key + '}');
-                }
-            }
-        }
-    }
-}
-
-if (modified) {
-    fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
-    console.log('opencode.json updated');
-} else {
-    console.log('opencode.json already uses environment variable references');
-}
-EOFMCP
-        
-        update_result=$(node /tmp/update_mcp_$$.js "$config_json_path" 2>&1)
-        rm -f /tmp/update_mcp_$$.js
-        echo "$update_result" | while read line; do
-            if [[ "$line" == Updated* ]] || [[ "$line" == *updated* ]]; then
-                log_success "$(echo "$line" | sed 's/Updated/Updated/')"
-            else
-                log_info "$line"
-            fi
-        done
-    else
-        log_info "opencode.json not found at $config_json_path"
-    fi
-    
-    log_success "Config update complete!"
-}
-
-# Parse arguments
-UNINSTALL=false
-AUDIT=false
-UPDATE_CONFIG=false
-
-while [[ $# -gt 0 ]]; do
-    case $1 in
-        -u|--uninstall)
-            UNINSTALL=true
-            shift
-            ;;
-        -a|--audit)
-            AUDIT=true
-            shift
-            ;;
-        -c|--update-config)
-            UPDATE_CONFIG=true
-            shift
-            ;;
-        *)
-            echo "Usage: $0 [--uninstall|--audit|--update-config]"
-            exit 1
-            ;;
-    esac
-done
-
-# Main script execution
-log_banner
-
-if [[ "$UNINSTALL" == true ]]; then
-    echo -e "${YELLOW}Uninstall Mode${NC}"
-    echo -e "${YELLOW}------------${NC}"
-    echo ""
-    
-    get_existing_values
-    
-    if [[ -z "$OP_SERVICE_ACCOUNT_TOKEN" && -z "$OP_CONFIG_ENV_ID" ]]; then
-        log_info "No environment variables found. Nothing to uninstall."
-        exit 0
-    fi
-    
-    echo "Found the following environment variables:"
-    if [[ -n "$OP_SERVICE_ACCOUNT_TOKEN" ]]; then
-        echo "  OP_SERVICE_ACCOUNT_TOKEN = ${OP_SERVICE_ACCOUNT_TOKEN:0:8}..."
-    fi
-    if [[ -n "$OP_CONFIG_ENV_ID" ]]; then
-        echo "  OP_CONFIG_ENV_ID = ${OP_CONFIG_ENV_ID:0:8}..."
-    fi
-    echo ""
-    
-    read -p "Remove these environment variables? (y/N) " -n 1 -r
-    echo ""
-    
-    if [[ $REPLY =~ ^[Yy]$ ]]; then
-        # Remove from all RC files
-        for rc in "$HOME/.zshrc" "$HOME/.bashrc" "$HOME/.bash_profile"; do
-            if [[ -f "$rc" ]]; then
-                remove_from_rc "OP_SERVICE_ACCOUNT_TOKEN" "$rc"
-                remove_from_rc "OP_CONFIG_ENV_ID" "$rc"
-            fi
-        done
-        
-        # Unset in current session
-        unset OP_SERVICE_ACCOUNT_TOKEN OP_CONFIG_ENV_ID
-        
-        log_success "Removed environment variables."
-        log_info "Please restart any OpenCode sessions for changes to take effect."
-    else
-        log_info "Uninstall cancelled."
-    fi
-    
-    exit 0
-fi
-
-if [[ "$AUDIT" == true ]]; then
-    echo -e "${YELLOW}Audit Mode${NC}"
-    echo -e "${YELLOW}----------${NC}"
-    echo ""
-    
-    get_existing_values
-    
-    if [[ -z "$OP_SERVICE_ACCOUNT_TOKEN" || -z "$OP_CONFIG_ENV_ID" ]]; then
-        log_error "Environment variables not set. Run setup first."
-        exit 1
-    fi
-    
-    log_info "Testing 1Password connection..."
-    
-    if test_connection "$OP_SERVICE_ACCOUNT_TOKEN"; then
-        log_success "1Password connection successful!"
-    else
-        log_error "Failed to connect to 1Password. Check your service account token."
-        exit 1
-    fi
-    
-    log_info "Reading configuration..."
-    
-    env_ids_json=$(get_audit_data "$OP_SERVICE_ACCOUNT_TOKEN" "$OP_CONFIG_ENV_ID")
-    
-    if [[ -n "$env_ids_json" && "$env_ids_json" != "FAILED:"* ]]; then
-        show_audit_report "$OP_SERVICE_ACCOUNT_TOKEN" "$env_ids_json"
-    else
-        log_error "Failed to read bootstrap environment."
-        exit 1
-    fi
-    
-    exit 0
-fi
-
-if [[ "$UPDATE_CONFIG" == true ]]; then
-    echo -e "${YELLOW}Update Config Mode${NC}"
-    echo -e "${YELLOW}------------------${NC}"
-    echo ""
-    
-    get_existing_values
-    
-    if [[ -z "$OP_SERVICE_ACCOUNT_TOKEN" || -z "$OP_CONFIG_ENV_ID" ]]; then
-        log_error "Environment variables not set. Run setup first."
-        exit 1
-    fi
-    
-    log_info "Testing 1Password connection..."
-    
-    if test_connection "$OP_SERVICE_ACCOUNT_TOKEN"; then
-        log_success "1Password connection successful!"
-    else
-        log_error "Failed to connect to 1Password. Check your service account token."
-        exit 1
-    fi
-    
-    log_info "Reading configuration from 1Password..."
-    
-    env_ids_json=$(get_audit_data "$OP_SERVICE_ACCOUNT_TOKEN" "$OP_CONFIG_ENV_ID")
-    
-    if [[ -n "$env_ids_json" && "$env_ids_json" != "FAILED:"* ]]; then
-        # Parse JSON to extract env IDs
-        providers_env_id=$(echo "$env_ids_json" | sed -n 's/.*"OPENCODE_PROVIDERS_ENV_ID":"\([^"]*\)".*/\1/p')
-        mcps_env_id=$(echo "$env_ids_json" | sed -n 's/.*"OPENCODE_MCPS_ENV_ID":"\([^"]*\)".*/\1/p')
-        
-        if [[ -n "$providers_env_id" ]]; then
-            log_info "Updating config files to use environment variables..."
-            update_config_files "$OP_SERVICE_ACCOUNT_TOKEN" "$providers_env_id" "$mcps_env_id"
-        else
-            log_error "Could not find OPENCODE_PROVIDERS_ENV_ID in bootstrap environment"
-            exit 1
-        fi
-    else
-        log_error "Failed to read bootstrap environment."
-        exit 1
-    fi
-    
-    exit 0
-fi
-
-# Setup mode (default)
-echo -e "${YELLOW}Setup Mode${NC}"
-echo -e "${YELLOW}----------${NC}"
-echo ""
-
-get_existing_values
-
-IS_UPDATE=false
-if [[ -n "$OP_SERVICE_ACCOUNT_TOKEN" && -n "$OP_CONFIG_ENV_ID" ]]; then
-    IS_UPDATE=true
-    echo "Found existing configuration:"
-    echo "  OP_SERVICE_ACCOUNT_TOKEN = ${OP_SERVICE_ACCOUNT_TOKEN:0:8}..."
-    echo "  OP_CONFIG_ENV_ID = ${OP_CONFIG_ENV_ID:0:8}..."
-    echo ""
-    
-    read -p "Update existing values? (y/N) " -n 1 -r
-    echo ""
-    
-    if [[ ! $REPLY =~ ^[Yy]$ ]]; then
-        log_info "Setup cancelled."
-        exit 0
-    fi
-fi
-
-# Prompt for new values
-echo "Enter your 1Password credentials:"
-echo ""
-
-if [[ "$IS_UPDATE" == false ]]; then
-    read -s -p "  OP_SERVICE_ACCOUNT_TOKEN: " OP_SERVICE_ACCOUNT_TOKEN
-else
-    read -s -p "  OP_SERVICE_ACCOUNT_TOKEN (leave blank to keep): " NEW_TOKEN
-    if [[ -n "$NEW_TOKEN" ]]; then
-        OP_SERVICE_ACCOUNT_TOKEN="$NEW_TOKEN"
-    fi
-fi
-echo ""
-
-if [[ "$IS_UPDATE" == false ]]; then
-    read -p "  OP_CONFIG_ENV_ID: " OP_CONFIG_ENV_ID
-else
-    read -p "  OP_CONFIG_ENV_ID (leave blank to keep): " NEW_CONFIG_ID
-    if [[ -n "$NEW_CONFIG_ID" ]]; then
-        OP_CONFIG_ENV_ID="$NEW_CONFIG_ID"
-    fi
-fi
-
-if [[ -z "$OP_SERVICE_ACCOUNT_TOKEN" || -z "$OP_CONFIG_ENV_ID" ]]; then
-    log_error "Both token and config ID are required."
-    exit 1
-fi
-
-echo ""
-echo "Summary:"
-echo "  OP_SERVICE_ACCOUNT_TOKEN = ${OP_SERVICE_ACCOUNT_TOKEN:0:8}..."
-echo "  OP_CONFIG_ENV_ID = ${OP_CONFIG_ENV_ID:0:8}..."
-echo ""
-
-# Detect shell and RC file
-if [[ -n "$ZSH_VERSION" ]]; then
-    SHELL_RC="$HOME/.zshrc"
-elif [[ -n "$BASH_VERSION" ]]; then
-    SHELL_RC="$HOME/.bashrc"
-else
-    SHELL_RC="$HOME/.profile"
-fi
-
-echo "Where should these be saved?"
-echo "  [1] Current shell only (no file modification)"
-echo "  [2] Shell RC file (~/.zshrc or ~/.bashrc)"
-read -p "Choice [1]: " scope_choice
-
-if [[ "$scope_choice" == "2" ]]; then
-    log_info "Saving to ${SHELL_RC}..."
-    
-    save_to_rc "OP_SERVICE_ACCOUNT_TOKEN" "$OP_SERVICE_ACCOUNT_TOKEN" "$SHELL_RC"
-    save_to_rc "OP_CONFIG_ENV_ID" "$OP_CONFIG_ENV_ID" "$SHELL_RC"
-    
-    # Also export to current session
-    export OP_SERVICE_ACCOUNT_TOKEN
-    export OP_CONFIG_ENV_ID
-    
-    log_info "Added to ${SHELL_RC}. Restart your shell or run:"
-    echo "  source ${SHELL_RC}"
-else
-    export OP_SERVICE_ACCOUNT_TOKEN
-    export OP_CONFIG_ENV_ID
-    log_info "Exported to current shell only."
-fi
-
-echo ""
-log_info "Testing 1Password connection..."
-
-if test_connection "$OP_SERVICE_ACCOUNT_TOKEN"; then
-    log_success "1Password connection successful!"
-else
-    log_error "Failed to connect to 1Password. Check your service account token."
-    log_info "Environment variables were saved. You may need to restart your terminal."
-    exit 1
-fi
-
-log_info "Reading configuration..."
-
-env_ids_json=$(get_audit_data "$OP_SERVICE_ACCOUNT_TOKEN" "$OP_CONFIG_ENV_ID")
-
-if [[ -n "$env_ids_json" && "$env_ids_json" != "FAILED:"* ]]; then
-    show_audit_report "$OP_SERVICE_ACCOUNT_TOKEN" "$env_ids_json"
-fi
-
-echo ""
-log_success "Setup complete!"
-log_info "Restart OpenCode to activate the plugin."
-echo ""
-echo "Usage:"
-echo "  ./setup.sh --audit          Show current configuration"
-echo "  ./setup.sh --update-config  Update config files to use {env:VAR} references"
-echo "  ./setup.sh --uninstall     Remove environment variables"
-echo ""