opencode-supabase 0.0.4 → 0.0.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-supabase",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "type": "module",
   "description": "OpenCode plugin for Supabase integration with server and TUI components",
   "license": "Apache-2.0",
@@ -23,6 +23,8 @@
     "tui"
   ],
   "scripts": {
+    "lint": "biome check .",
+    "verify:pack": "npm pack --dry-run",
     "typecheck": "bunx tsc --noEmit",
     "test": "bun test"
   },
@@ -33,6 +35,7 @@
     "zod": "latest"
   },
   "devDependencies": {
+    "@biomejs/biome": "^1.9.4",
     "@opentui/core": "0.1.95",
     "@opentui/solid": "0.1.95",
     "@types/bun": "latest",

package/src/server/auth.ts

@@ -1,10 +1,10 @@
-import type { PluginInput, PluginOptions } from "@opencode-ai/plugin";
 import { createConnection } from "node:net";
+import type { PluginInput, PluginOptions } from "@opencode-ai/plugin";
 
 import {
   BrokerClientError,
-  exchangeCodeThroughBroker,
   type BrokerConfig,
+  exchangeCodeThroughBroker,
 } from "../shared/broker.ts";
 import { readSupabaseConfig } from "../shared/cfg.ts";
 import type { SupabaseLogger } from "../shared/log.ts";

package/src/server/store.ts

@@ -1,6 +1,6 @@
-import type { PluginInput } from "@opencode-ai/plugin";
 import { mkdir } from "node:fs/promises";
-import { dirname, join } from "node:path";
+import { dirname, join, relative, resolve, sep } from "node:path";
+import type { PluginInput } from "@opencode-ai/plugin";
 
 type StoreInput = Pick<PluginInput, "directory" | "worktree">;
 
@@ -17,8 +17,32 @@ export type SavedState = {
 
 const STORE_FILE = "supabase-auth.json";
 
+// Use worktree only when it is non-root and directory is equal to or inside it;
+// otherwise fall back to the session directory.
+function resolveStoreRoot(input: StoreInput): string {
+  const directory = resolve(input.directory);
+  if (!input.worktree) {
+    return directory;
+  }
+
+  const worktree = resolve(input.worktree);
+  if (worktree === dirname(worktree)) {
+    return directory;
+  }
+
+  const pathFromWorktree = relative(worktree, directory);
+  if (
+    pathFromWorktree === "" ||
+    (!pathFromWorktree.startsWith("..") && !pathFromWorktree.startsWith(`..${sep}`))
+  ) {
+    return worktree;
+  }
+
+  return directory;
+}
+
 export function file(input: StoreInput): string {
-  const root = input.worktree || input.directory;
+  const root = resolveStoreRoot(input);
   return join(root, ".opencode", STORE_FILE);
 }
 

package/src/server/tools.ts

@@ -1,16 +1,16 @@
 import type { PluginOptions } from "@opencode-ai/plugin";
-import type { ToolContext } from "@opencode-ai/plugin/tool";
 import { tool } from "@opencode-ai/plugin";
+import type { ToolContext } from "@opencode-ai/plugin/tool";
 
+import { supabaseManagementApiFetch } from "../shared/api.ts";
 import {
   BrokerClientError,
   refreshTokenThroughBroker,
 } from "../shared/broker.ts";
-import { supabaseManagementApiFetch } from "../shared/api.ts";
 import { readSupabaseConfig } from "../shared/cfg.ts";
 import type { SupabaseLogger } from "../shared/log.ts";
 import type { FetchLike } from "../shared/types.ts";
-import { clearSavedAuth, readSavedAuth, writeSavedAuth, type SavedAuth } from "./store.ts";
+import { type SavedAuth, clearSavedAuth, readSavedAuth, writeSavedAuth } from "./store.ts";
 
 type ToolDeps = {
   fetch?: FetchLike;

package/src/shared/broker.ts

@@ -1,5 +1,5 @@
-import type { FetchLike, SupabaseTokenResponse } from "./types.ts";
 import type { SupabaseLogger } from "./log.ts";
+import type { FetchLike, SupabaseTokenResponse } from "./types.ts";
 
 export type BrokerConfig = {
   baseUrl: string;