From 47315114f2ed96b0d25b99441e0a5a90541211dd Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Fri, 30 Oct 2026 09:18:18 +0000 Subject: [PATCH] Version Packages --- .changeset/canary-v2-harness.md | 5 ----- .changeset/fix-callback-store-isolation.md | 5 ----- .changeset/fix-v2-refresh-dedup.md | 5 ----- .changeset/opencode-v2-compatibility.md | 7 ------- .changeset/supabase-skills-v0.1.9.md | 5 ----- CHANGELOG.md | 15 +++++++++++++++ package.json | 2 +- 7 files changed, 16 insertions(+), 28 deletions(-) delete mode 100644 .changeset/canary-v2-harness.md delete mode 100644 .changeset/fix-callback-store-isolation.md delete mode 100644 .changeset/fix-v2-refresh-dedup.md delete mode 100644 .changeset/opencode-v2-compatibility.md delete mode 100644 .changeset/supabase-skills-v0.1.9.md diff --git a/.changeset/canary-v2-harness.md b/.changeset/canary-v2-harness.md deleted file mode 100644 index 827d0fb..0000000 --- a/.changeset/canary-v2-harness.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"opencode-supabase": patch ---- - -Make the packed-TUI e2e harness compatible with OpenCode V2 (`@opencode/cli`): register the plugin by writing project `.opencode/opencode.json` (V2 `plugin add` is an interactive wizard), use lowercase `--log-level debug`, and isolate the V2 managed `serve --service` daemon on its own port. V1 behavior unchanged. diff --git a/.changeset/fix-callback-store-isolation.md b/.changeset/fix-callback-store-isolation.md deleted file mode 100644 index 34a985e..0000000 --- a/.changeset/fix-callback-store-isolation.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"opencode-supabase": patch ---- - -Fix the OAuth callback writing tokens to the wrong local auth store (#32). Persist tokens against the per-flow pending auth entry (keyed by state) instead of the singleton callback server's first-call input, so concurrent flows for different directories no longer cross-write each other's store. diff --git a/.changeset/fix-v2-refresh-dedup.md b/.changeset/fix-v2-refresh-dedup.md deleted file mode 100644 index 6073624..0000000 --- a/.changeset/fix-v2-refresh-dedup.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"opencode-supabase": patch ---- - -Fix V2 OAuth refresh dedup dropping its entry too early and keying on the raw broker URL (#90, #91). Keep a successful refresh cached under the consumed old refresh token until the process ends: the OpenCode host persists the rotated credential only after `refresh()` resolves, so a second resolve in that window must converge on the cached result instead of re-sending the single-use token (broker 401). Failed refreshes still delete the entry so waiters are released and a retry reaches the broker. Dedup keys now strip the trailing slash with the same normalization `makeBrokerRequest()` applies, so `https://host/broker` and `https://host/broker/` aliases no longer send the credential twice. diff --git a/.changeset/opencode-v2-compatibility.md b/.changeset/opencode-v2-compatibility.md deleted file mode 100644 index 3e085a5..0000000 --- a/.changeset/opencode-v2-compatibility.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -"opencode-supabase": minor ---- - -Add OpenCode 2.0.27 support while preserving OpenCode 1.17.4+ compatibility. Both server and TUI entrypoints expose the appropriate host hook. V2 uses native integration credentials for the host's active account, account-specific refresh and disconnect, and scoped OAuth cleanup; existing V1 local credentials require a new login on V2. Keep real Zod tool schemas for both hosts, register bundled skills, and port `/supabase` with browser authorization and onboarding. The connected V2 dialog uses OpenCode's native selection component for plugin-defined Continue/Disconnect actions; advanced account management stays in V2's native `/connect` integration UI. Add V2 packed-TUI CI coverage and prune V2's npm cache before uploading diagnostics. - -Builds on Rafael Santos's (@rafaelsnv) initial V2 migration in PR #79. diff --git a/.changeset/supabase-skills-v0.1.9.md b/.changeset/supabase-skills-v0.1.9.md deleted file mode 100644 index bf92b60..0000000 --- a/.changeset/supabase-skills-v0.1.9.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"opencode-supabase": patch ---- - -Refresh vendored Supabase skills from `supabase/agent-skills` v0.1.9 (commit `544bfc5`). Adds scoped personal access token guidance, declarative schema workflow, and a debugging section to the `supabase` skill; broadens the `supabase-postgres-best-practices` trigger description; records both skill changelogs. Provenance updated in `skills/.upstream.json`. Context: #46. diff --git a/CHANGELOG.md b/CHANGELOG.md index 1b4d35e..4c55c0f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,20 @@ # Changelog +## 0.6.0 + +### Minor Changes + +- 88c3305: Add OpenCode 2.0.27 support while preserving OpenCode 1.17.4+ compatibility. Both server and TUI entrypoints expose the appropriate host hook. V2 uses native integration credentials for the host's active account, account-specific refresh and disconnect, and scoped OAuth cleanup; existing V1 local credentials require a new login on V2. Keep real Zod tool schemas for both hosts, register bundled skills, and port `/supabase` with browser authorization and onboarding. The connected V2 dialog uses OpenCode's native selection component for plugin-defined Continue/Disconnect actions; advanced account management stays in V2's native `/connect` integration UI. Add V2 packed-TUI CI coverage and prune V2's npm cache before uploading diagnostics. + + Builds on Rafael Santos's (@rafaelsnv) initial V2 migration in PR #79. + +### Patch Changes + +- e918865: Make the packed-TUI e2e harness compatible with OpenCode V2 (`@opencode/cli`): register the plugin by writing project `.opencode/opencode.json` (V2 `plugin add` is an interactive wizard), use lowercase `--log-level debug`, and isolate the V2 managed `serve --service` daemon on its own port. V1 behavior unchanged. +- 0acee2b: Fix the OAuth callback writing tokens to the wrong local auth store (#32). Persist tokens against the per-flow pending auth entry (keyed by state) instead of the singleton callback server's first-call input, so concurrent flows for different directories no longer cross-write each other's store. +- daa6816: Fix V2 OAuth refresh dedup dropping its entry too early and keying on the raw broker URL (#90, #91). Keep a successful refresh cached under the consumed old refresh token until the process ends: the OpenCode host persists the rotated credential only after `refresh()` resolves, so a second resolve in that window must converge on the cached result instead of re-sending the single-use token (broker 401). Failed refreshes still delete the entry so waiters are released and a retry reaches the broker. Dedup keys now strip the trailing slash with the same normalization `makeBrokerRequest()` applies, so `https://host/broker` and `https://host/broker/` aliases no longer send the credential twice. +- e549fc1: Refresh vendored Supabase skills from `supabase/agent-skills` v0.1.9 (commit `544bfc5`). Adds scoped personal access token guidance, declarative schema workflow, and a debugging section to the `supabase` skill; broadens the `supabase-postgres-best-practices` trigger description; records both skill changelogs. Provenance updated in `skills/.upstream.json`. Context: #46. + ## 0.5.1 ### Patch Changes diff --git a/package.json b/package.json index e6dd5c0..b940554 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "opencode-supabase", - "version": "0.5.1", + "version": "0.6.0", "type": "module", "description": "OpenCode plugin for Supabase integration with server and TUI components", "license": "Apache-2.0",