opencode-supabase 0.0.1 → 0.0.3

package/README.md

@@ -1,211 +1,32 @@
 # opencode-supabase
 
-External Supabase plugin package for OpenCode with separate server and TUI entrypoints.
+Supabase plugin for OpenCode.
 
-## Install
+![opencode-supabase screenshot](assets/screenshot.png)
 
-Compatibility: external TUI plugin loading through `.opencode/tui.jsonc` and the `opencode plugin` workflow require OpenCode `>= 1.3.4`. OpenCode `1.2.27` rejects the `plugin` key in `tui.jsonc`, so `/supabase` cannot be registered there.
+## Get started
 
-Preferred install on a compatible OpenCode version:
+Requires OpenCode `>= 1.3.4`.
 
 ```bash
-opencode plugin /absolute/path/to/opencode-supabase
+opencode plugin opencode-supabase
 ```
 
-Sibling-checkout alternative:
+Launch `opencode` in your project, then run:
 
-```bash
-opencode plugin ../../opencode-supabase
-```
-
-Optional manual setup if you want to wire the config yourself:
-
-Absolute-path example:
-
-`.opencode/opencode.jsonc`
-
-```json
-{
-  "plugin": ["/absolute/path/to/opencode-supabase"]
-}
-```
-
-`.opencode/tui.jsonc`
-
-```json
-{
-  "plugin": ["/absolute/path/to/opencode-supabase"]
-}
-```
-
-Sibling-checkout relative example:
-
-`.opencode/opencode.jsonc`
-
-```json
-{
-  "plugin": ["../../opencode-supabase"]
-}
 ```
-
-`.opencode/tui.jsonc`
-
-```json
-{
-  "plugin": ["../../opencode-supabase"]
-}
+/supabase
 ```
 
-Absolute paths are the clearest option for manual config. If you prefer a relative path, it is resolved from inside `.opencode/`, not from the consumer repo root. For a sibling checkout, `../../opencode-supabase` is usually correct. Both files must be configured because server and TUI plugins load from separate config surfaces.
-
-## Development
-
-Install dependencies:
+Connect your account and ask your agent about Supabase capabilities.
 
-```bash
-bun install
-```
-
-Run typecheck:
-
-```bash
-bun run typecheck
-```
-
-## Reference Docs
-
-For the Supabase Management API reference, see:
-
-- https://supabase.com/docs/reference/api/introduction
-
-## Supabase OAuth Broker
-
-The broker is a single Supabase Edge Function that handles confidential token operations against `https://api.supabase.com/v1/oauth/token`. It exposes two endpoints:
-
-- `POST /exchange` - exchange an authorization code for tokens
-- `POST /refresh` - refresh an access token
-
-The plugin owns browser authorization, PKCE, the local callback server, and local token storage. The broker holds `client_secret` and makes token requests using Basic auth.
-
-## Local Setup
-
-There are two separate environments to configure:
-
-1. the local Supabase Edge Function runtime
-2. the consumer project shell that launches `opencode`
-
-### 1. Broker runtime environment
-
-These variables are used by the local Supabase Edge Function.
-
-Required:
-
-```bash
-OPENCODE_SUPABASE_OAUTH_CLIENT_ID=<your_supabase_oauth_app_client_id>
-OPENCODE_SUPABASE_OAUTH_CLIENT_SECRET=<your_supabase_oauth_app_client_secret>
-```
-
-Optional:
-
-```bash
-# Defaults shown
-OPENCODE_SUPABASE_OAUTH_TOKEN_URL=https://api.supabase.com/v1/oauth/token
-OPENCODE_SUPABASE_ALLOWED_REDIRECT_HOSTS=localhost
-OPENCODE_SUPABASE_ALLOWED_REDIRECT_PATHS=/auth/callback
-```
+## Available today
 
-Recommended local file:
-
-- `supabase/functions/.env`
-
-Committed template:
-
-- `supabase/functions/.env.example`
-
-Start the broker locally:
-
-```bash
-supabase functions serve opencode-supabase-broker --env-file supabase/functions/.env
-```
-
-The broker fails fast on the first request if required secrets are missing - callers receive a generic `500 server_error` JSON response. Detailed cause is logged for operators; no internal details are exposed to callers.
-
-### 2. Consumer project / OpenCode environment
-
-These variables must be present in the shell before launching `opencode` in the consumer repo.
-
-Required:
-
-```bash
-export OPENCODE_SUPABASE_BROKER_URL=http://localhost:54321/functions/v1/opencode-supabase-broker
-export OPENCODE_SUPABASE_OAUTH_CLIENT_ID=<your_supabase_oauth_app_client_id>
-export OPENCODE_SUPABASE_OAUTH_PORT=14589
-```
-
-Notes:
-
-- `OPENCODE_SUPABASE_BROKER_URL` is optional. If not provided, defaults to the official OpenCode broker.
-- `OPENCODE_SUPABASE_OAUTH_CLIENT_ID` must match the OAuth app configured for the broker.
-- `OPENCODE_SUPABASE_OAUTH_PORT` controls the local callback URL the plugin listens on.
-- The callback path is `/auth/callback`, so the full local callback URL is `http://localhost:<port>/auth/callback`.
-
-Your Supabase OAuth app must allow that redirect URI.
-
-### Local development
-
-The plugin inherits environment variables from the OpenCode CLI process. For local broker development, point the plugin at your local function URL before launching OpenCode:
-
-```bash
-export OPENCODE_SUPABASE_BROKER_URL=http://localhost:54321/functions/v1/opencode-supabase-broker
-opencode
-```
-
-Quick local test flow:
-
-1. create `supabase/functions/.env` from `supabase/functions/.env.example`
-2. start the broker locally
-3. export the consumer-project variables above
-4. launch `opencode` in the consumer repo
-5. run `/supabase`
-
-### Deployment
-
-Deploy the broker as a single Supabase Edge Function:
-
-```bash
-supabase functions deploy opencode-supabase-broker
-```
-
-Set secrets in the Supabase dashboard or via CLI:
-
-```bash
-supabase secrets set \
-  OPENCODE_SUPABASE_OAUTH_CLIENT_ID=<client_id> \
-  OPENCODE_SUPABASE_OAUTH_CLIENT_SECRET=<client_secret>
-```
-
-The plugin should call the deployed function URL at:
-
-```
-https://<project-ref>.supabase.co/functions/v1/opencode-supabase-broker/exchange
-https://<project-ref>.supabase.co/functions/v1/opencode-supabase-broker/refresh
-```
-
-The plugin uses the official OpenCode broker by default. Override via `OPENCODE_SUPABASE_BROKER_URL` if self-hosting.
-
-### Request and response shapes
-
-Both endpoints accept JSON and return JSON. Error responses use a normalized shape:
-
-```json
-{
-  "error": {
-    "code": "invalid_request",
-    "message": "description of what was rejected"
-  }
-}
-```
+- **Connect** your Supabase account from OpenCode
+- **List** organizations and projects
+- **Get** project API keys
+- **Create** new Supabase projects
 
-Status codes: `400` for malformed input, `401` for upstream auth rejection, `500` for broker misconfiguration or unexpected internal errors, `502` for upstream errors.
+## Reference
 
-**Note:** Rate limiting (`429`) is deferred from the initial implementation.
+- Supabase Management API: https://supabase.com/docs/reference/api/introduction

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-supabase",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "type": "module",
   "description": "OpenCode plugin for Supabase integration with server and TUI components",
   "license": "Apache-2.0",

package/src/shared/api.ts

@@ -1,6 +1,8 @@
 export const DEFAULT_SUPABASE_OAUTH_AUTHORIZE_URL = "https://api.supabase.com/v1/oauth/authorize";
 export const DEFAULT_SUPABASE_API_BASE_URL = "https://api.supabase.com/v1";
 export const DEFAULT_SUPABASE_BROKER_URL = "https://iaoxncwzemnfxcdwakzb.supabase.co/functions/v1/opencode-supabase-broker";
+export const DEFAULT_SUPABASE_OAUTH_CLIENT_ID = "80c76733-1b96-424b-976b-5c2977c72008";
+export const DEFAULT_SUPABASE_OAUTH_PORT = 14589;
 
 import type { FetchLike, SupabaseSharedConfig } from "./types.ts";
 

package/src/shared/cfg.ts

@@ -4,6 +4,8 @@ import {
   DEFAULT_SUPABASE_API_BASE_URL,
   DEFAULT_SUPABASE_BROKER_URL,
   DEFAULT_SUPABASE_OAUTH_AUTHORIZE_URL,
+  DEFAULT_SUPABASE_OAUTH_CLIENT_ID,
+  DEFAULT_SUPABASE_OAUTH_PORT,
 } from "./api.ts";
 import type { SupabaseEnv, SupabaseSharedConfig } from "./types.ts";
 
@@ -23,13 +25,6 @@ function readPortOption(options: PluginOptions | undefined, key: string) {
   return undefined;
 }
 
-function requireString(value: string | undefined, key: string) {
-  if (!value) {
-    throw new Error(`Missing required Supabase config: ${key}`);
-  }
-  return value;
-}
-
 function requirePort(value: number | string | undefined) {
   if (value === undefined) {
     throw new Error("Missing required Supabase config: oauthPort");
@@ -47,15 +42,19 @@ export function readSupabaseConfig(
   options: PluginOptions | undefined,
   env: SupabaseEnv = process.env,
 ): SupabaseSharedConfig {
-  const clientId = requireString(
-    readStringOption(options, "clientId") ?? env.OPENCODE_SUPABASE_OAUTH_CLIENT_ID,
-    "clientId",
-  );
+  const clientId =
+    readStringOption(options, "clientId") ??
+    readEnvString(env.OPENCODE_SUPABASE_OAUTH_CLIENT_ID) ??
+    DEFAULT_SUPABASE_OAUTH_CLIENT_ID;
   const oauthPort = requirePort(
-    readPortOption(options, "oauthPort") ?? env.OPENCODE_SUPABASE_OAUTH_PORT,
+    readPortOption(options, "oauthPort") ??
+    env.OPENCODE_SUPABASE_OAUTH_PORT ??
+    DEFAULT_SUPABASE_OAUTH_PORT,
   );
   const brokerBaseUrl =
-    readStringOption(options, "brokerBaseUrl") ?? readEnvString(env.OPENCODE_SUPABASE_BROKER_URL) ?? DEFAULT_SUPABASE_BROKER_URL;
+    readStringOption(options, "brokerBaseUrl") ??
+    readEnvString(env.OPENCODE_SUPABASE_BROKER_URL) ??
+    DEFAULT_SUPABASE_BROKER_URL;
 
   return {
     clientId,

package/src/tui/dialog.tsx

@@ -38,7 +38,9 @@ export function SupabaseDialog(props: SupabaseDialogProps) {
 
       // Handle the response shape from the plugin API
       if (authResponse.error) {
-        throw new Error(authResponse.error.message || "Failed to start OAuth authorization");
+        throw new Error(
+          authResponse.error.message || "Failed to start OAuth authorization",
+        );
       }
 
       const authData = authResponse.data;
@@ -69,7 +71,9 @@ export function SupabaseDialog(props: SupabaseDialogProps) {
       })) as unknown as ApiResponse<boolean>;
 
       if (callbackResponse.error) {
-        throw new Error(callbackResponse.error.message || "OAuth callback failed");
+        throw new Error(
+          callbackResponse.error.message || "OAuth callback failed",
+        );
       }
 
       const callbackSucceeded = callbackResponse.data === true;
@@ -78,14 +82,16 @@ export function SupabaseDialog(props: SupabaseDialogProps) {
         setState({ type: "success" });
         props.api.ui.toast({
           variant: "success",
-          message: "Connected to Supabase. Management tools coming in next update.",
+          message:
+            "Connected to Supabase! Tools are ready to use. Ask your agent about supabase.",
         });
         props.onClose();
       } else {
         throw new Error("OAuth authorization was denied");
       }
     } catch (error) {
-      const message = error instanceof Error ? error.message : "Authorization failed";
+      const message =
+        error instanceof Error ? error.message : "Authorization failed";
       setState({ type: "error", message });
       props.api.ui.toast({
         variant: "error",