Merge pull request #20 from supermemoryai/01-26-enable_oauth_flow_using_new_plugins_auth

Dhravya · web-flow · commit 807e34323a3e · 2026-01-27T17:37:01.000-07:00
enable oauth flow using new plugins auth
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "opencode-supermemory",
-  "version": "0.1.8",
+  "version": "2.0.0",
   "description": "OpenCode plugin that gives coding agents persistent memory using Supermemory",
   "type": "module",
   "main": "dist/index.js",
diff --git a/src/cli.ts b/src/cli.ts
@@ -4,6 +4,7 @@ import { join } from "node:path";
 import { homedir } from "node:os";
 import * as readline from "node:readline";
 import { stripJsoncComments } from "./services/jsonc.js";
+import { startAuthFlow, clearCredentials, loadCredentials } from "./services/auth.js";
 
 const OPENCODE_CONFIG_DIR = join(homedir(), ".config", "opencode");
 const OPENCODE_COMMAND_DIR = join(OPENCODE_CONFIG_DIR, "command");
@@ -162,6 +163,31 @@ Then ask: "I've initialized memory with X insights. Want me to continue refining
 6. Summarize what was learned and ask if user wants refinement
 `;
 
+const SUPERMEMORY_LOGIN_COMMAND = `---
+description: Authenticate with Supermemory via browser
+---
+
+# Supermemory Login
+
+Run this command to authenticate the user with Supermemory:
+
+\`\`\`bash
+bunx opencode-supermemory@latest login
+\`\`\`
+
+This will:
+1. Start a local server on port 19877
+2. Open the browser to Supermemory's authentication page
+3. After the user logs in, save credentials to ~/.supermemory-opencode/credentials.json
+
+Wait for the command to complete, then inform the user whether authentication succeeded or failed.
+
+If the user wants to log out instead, run:
+\`\`\`bash
+bunx opencode-supermemory@latest logout
+\`\`\`
+`;
+
 function createReadline(): readline.Interface {
   return readline.createInterface({
     input: process.stdin,
@@ -261,12 +287,17 @@ function createNewConfig(): boolean {
   return true;
 }
 
-function createCommand(): boolean {
+function createCommands(): boolean {
   mkdirSync(OPENCODE_COMMAND_DIR, { recursive: true });
-  const commandPath = join(OPENCODE_COMMAND_DIR, "supermemory-init.md");
 
-  writeFileSync(commandPath, SUPERMEMORY_INIT_COMMAND);
+  const initPath = join(OPENCODE_COMMAND_DIR, "supermemory-init.md");
+  writeFileSync(initPath, SUPERMEMORY_INIT_COMMAND);
   console.log(`✓ Created /supermemory-init command`);
+
+  const loginPath = join(OPENCODE_COMMAND_DIR, "supermemory-login.md");
+  writeFileSync(loginPath, SUPERMEMORY_LOGIN_COMMAND);
+  console.log(`✓ Created /supermemory-login command`);
+
   return true;
 }
 
@@ -357,17 +388,17 @@ async function install(options: InstallOptions): Promise<number> {
     }
   }
 
-  // Step 2: Create /supermemory-init command
-  console.log("\nStep 2: Create /supermemory-init command");
+  // Step 2: Create commands
+  console.log("\nStep 2: Create /supermemory-init and /supermemory-login commands");
   if (options.tui) {
-    const shouldCreate = await confirm(rl!, "Add /supermemory-init command?");
+    const shouldCreate = await confirm(rl!, "Add supermemory commands?");
     if (!shouldCreate) {
       console.log("Skipped.");
     } else {
-      createCommand();
+      createCommands();
     }
   } else {
-    createCommand();
+    createCommands();
   }
 
   // Step 3: Configure Oh My OpenCode (if installed)
@@ -394,34 +425,70 @@ async function install(options: InstallOptions): Promise<number> {
     }
   }
 
-  // Step 4: API key instructions
+  if (rl) rl.close();
+
+  // Step 4: Authenticate
   console.log("\n" + "─".repeat(50));
-  console.log("\n🔑 Final step: Set your API key\n");
-  console.log("Get your API key from: https://console.supermemory.ai");
-  console.log("\nThen add to your shell profile:\n");
+  console.log("\n🔑 Final step: Authenticate with Supermemory\n");
+
+  if (options.tui) {
+    return login();
+  }
+
+  // Non-interactive mode - print instructions
+  console.log("Run this command to authenticate:");
+  console.log("  bunx opencode-supermemory@latest login");
+  console.log("\nOr set your API key manually:");
   console.log('  export SUPERMEMORY_API_KEY="sm_..."');
-  console.log("\nOr create ~/.config/opencode/supermemory.jsonc:\n");
-  console.log('  { "apiKey": "sm_..." }');
   console.log("\n" + "─".repeat(50));
   console.log("\n✓ Setup complete! Restart OpenCode to activate.\n");
-
-  if (rl) rl.close();
   return 0;
 }
 
+async function login(): Promise<number> {
+  const existing = loadCredentials();
+  if (existing) {
+    console.log("Already authenticated. Use 'logout' first to re-authenticate.");
+    return 0;
+  }
+
+  const result = await startAuthFlow();
+
+  if (result.success) {
+    console.log("\n✓ Successfully authenticated with Supermemory!");
+    console.log("Restart OpenCode to activate.\n");
+    return 0;
+  } else {
+    console.error(`\n✗ Authentication failed: ${result.error}`);
+    return 1;
+  }
+}
+
+function logout(): number {
+  if (clearCredentials()) {
+    console.log("✓ Logged out. Credentials cleared.");
+    return 0;
+  } else {
+    console.log("No credentials found.");
+    return 0;
+  }
+}
+
 function printHelp(): void {
   console.log(`
 opencode-supermemory - Persistent memory for OpenCode agents
 
 Commands:
-  install                    Install and configure the plugin
-    --no-tui                 Run in non-interactive mode (for LLM agents)
-    --disable-context-recovery   Disable Oh My OpenCode's context-window-limit-recovery hook (use with --no-tui)
+  install    Install and configure the plugin
+    --no-tui                     Non-interactive mode (for LLM agents)
+    --disable-context-recovery   Disable Oh My OpenCode's context hook
+  login      Authenticate with Supermemory (opens browser)
+  logout     Clear stored credentials
 
 Examples:
   bunx opencode-supermemory@latest install
-  bunx opencode-supermemory@latest install --no-tui
-  bunx opencode-supermemory@latest install --no-tui --disable-context-recovery
+  bunx opencode-supermemory@latest login
+  bunx opencode-supermemory@latest logout
 `);
 }
 
@@ -437,11 +504,14 @@ if (args[0] === "install") {
   const disableAutoCompact = args.includes("--disable-context-recovery");
   install({ tui: !noTui, disableAutoCompact }).then((code) => process.exit(code));
 } else if (args[0] === "setup") {
-  // Backwards compatibility
   console.log("Note: 'setup' is deprecated. Use 'install' instead.\n");
   const noTui = args.includes("--no-tui");
   const disableAutoCompact = args.includes("--disable-context-recovery");
   install({ tui: !noTui, disableAutoCompact }).then((code) => process.exit(code));
+} else if (args[0] === "login") {
+  login().then((code) => process.exit(code));
+} else if (args[0] === "logout") {
+  process.exit(logout());
 } else {
   console.error(`Unknown command: ${args[0]}`);
   printHelp();
diff --git a/src/config.ts b/src/config.ts
@@ -2,6 +2,7 @@ import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";
 import { stripJsoncComments } from "./services/jsonc.js";
+import { loadCredentials } from "./services/auth.js";
 
 const CONFIG_DIR = join(homedir(), ".config", "opencode");
 const CONFIG_FILES = [
@@ -87,7 +88,14 @@ function loadConfig(): SupermemoryConfig {
 
 const fileConfig = loadConfig();
 
-export const SUPERMEMORY_API_KEY = fileConfig.apiKey ?? process.env.SUPERMEMORY_API_KEY;
+function getApiKey(): string | undefined {
+  // Priority: env var > config file > OAuth credentials
+  if (process.env.SUPERMEMORY_API_KEY) return process.env.SUPERMEMORY_API_KEY;
+  if (fileConfig.apiKey) return fileConfig.apiKey;
+  return loadCredentials()?.apiKey;
+}
+
+export const SUPERMEMORY_API_KEY = getApiKey();
 
 export const CONFIG = {
   similarityThreshold: fileConfig.similarityThreshold ?? DEFAULTS.similarityThreshold,
diff --git a/src/services/auth.ts b/src/services/auth.ts
@@ -0,0 +1,143 @@
+import { createServer, type IncomingMessage, type ServerResponse } from "node:http";
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { exec } from "node:child_process";
+import { join } from "node:path";
+import { homedir } from "node:os";
+
+const CREDENTIALS_DIR = join(homedir(), ".supermemory-opencode");
+const CREDENTIALS_FILE = join(CREDENTIALS_DIR, "credentials.json");
+const AUTH_PORT = 19877;
+const AUTH_BASE_URL = "https://console.supermemory.ai/auth/connect";
+const CLIENT_NAME = "opencode";
+
+interface Credentials {
+  apiKey: string;
+  createdAt: string;
+}
+
+export function loadCredentials(): Credentials | null {
+  if (!existsSync(CREDENTIALS_FILE)) return null;
+  try {
+    const content = readFileSync(CREDENTIALS_FILE, "utf-8");
+    return JSON.parse(content) as Credentials;
+  } catch {
+    return null;
+  }
+}
+
+export function saveCredentials(apiKey: string): void {
+  mkdirSync(CREDENTIALS_DIR, { recursive: true, mode: 0o700 });
+  const credentials: Credentials = {
+    apiKey,
+    createdAt: new Date().toISOString(),
+  };
+  writeFileSync(CREDENTIALS_FILE, JSON.stringify(credentials, null, 2), { mode: 0o600 });
+}
+
+export function clearCredentials(): boolean {
+  if (!existsSync(CREDENTIALS_FILE)) return false;
+  rmSync(CREDENTIALS_FILE);
+  return true;
+}
+
+function openBrowser(url: string): void {
+  const platform = process.platform;
+
+  const commands: Record<string, string> = {
+    darwin: `open "${url}"`,
+    win32: `start "" "${url}"`,
+    linux: `xdg-open "${url}"`,
+  };
+
+  const cmd = commands[platform] ?? `xdg-open "${url}"`;
+  exec(cmd, (err) => {
+    if (err) console.error("Failed to open browser:", err.message);
+  });
+}
+
+export interface AuthResult {
+  success: boolean;
+  apiKey?: string;
+  error?: string;
+}
+
+export function startAuthFlow(timeoutMs = 120000): Promise<AuthResult> {
+  return new Promise((resolve) => {
+    let resolved = false;
+
+    const server = createServer((req: IncomingMessage, res: ServerResponse) => {
+      if (resolved) return;
+
+      const url = new URL(req.url || "/", `http://localhost:${AUTH_PORT}`);
+
+      if (url.pathname === "/callback") {
+        const apiKey = url.searchParams.get("apikey");
+
+        if (apiKey) {
+          saveCredentials(apiKey);
+          res.writeHead(200, { "Content-Type": "text/html" });
+          res.end(`
+            <!DOCTYPE html>
+            <html>
+            <head><title>Success</title></head>
+            <body style="font-family: system-ui; display: flex; align-items: center; justify-content: center; height: 100vh; margin: 0; background: #0a0a0a; color: #fafafa;">
+              <div style="text-align: center;">
+                <h1 style="color: #22c55e;">✓ Connected!</h1>
+                <p>You can close this window and return to your terminal.</p>
+              </div>
+            </body>
+            </html>
+          `);
+          resolved = true;
+          server.close();
+          resolve({ success: true, apiKey });
+        } else {
+          res.writeHead(400, { "Content-Type": "text/html" });
+          res.end(`
+            <!DOCTYPE html>
+            <html>
+            <head><title>Error</title></head>
+            <body style="font-family: system-ui; display: flex; align-items: center; justify-content: center; height: 100vh; margin: 0; background: #0a0a0a; color: #fafafa;">
+              <div style="text-align: center;">
+                <h1 style="color: #ef4444;">✗ Connection Failed</h1>
+                <p>No API key received. Please try again.</p>
+              </div>
+            </body>
+            </html>
+          `);
+          resolved = true;
+          server.close();
+          resolve({ success: false, error: "No API key received" });
+        }
+      } else {
+        res.writeHead(404);
+        res.end("Not Found");
+      }
+    });
+
+    server.on("error", (err: NodeJS.ErrnoException) => {
+      if (err.code === "EADDRINUSE") {
+        resolve({ success: false, error: `Port ${AUTH_PORT} is already in use` });
+      } else {
+        resolve({ success: false, error: err.message });
+      }
+    });
+
+    server.listen(AUTH_PORT, () => {
+      const callbackUrl = `http://localhost:${AUTH_PORT}/callback`;
+      const authUrl = `${AUTH_BASE_URL}?callback=${encodeURIComponent(callbackUrl)}&client=${CLIENT_NAME}`;
+
+      console.log("Opening browser for authentication...");
+      console.log(`If it doesn't open, visit: ${authUrl}`);
+      openBrowser(authUrl);
+    });
+
+    setTimeout(() => {
+      if (!resolved) {
+        resolved = true;
+        server.close();
+        resolve({ success: false, error: "Authentication timed out" });
+      }
+    }, timeoutMs);
+  });
+}

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "opencode-supermemory",`
`3`		`- "version": "0.1.8",`
	`3`	`+ "version": "2.0.0",`
`4`	`4`	`"description": "OpenCode plugin that gives coding agents persistent memory using Supermemory",`
`5`	`5`	`"type": "module",`
`6`	`6`	`"main": "dist/index.js",`