feat: Support 1Password Connect server in 1Password plugin#533
Open
feat: Support 1Password Connect server in 1Password plugin#533
Conversation
🦋 Changeset detectedLatest commit: fb8767b The changes in this PR will be included in the next version bump. This PR includes changesets to release 1 package
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
Add a new auth mode for self-hosted 1Password Connect servers using connectHost + connectToken parameters in @initOp(). Uses direct REST API calls via native fetch - no op CLI or 1Password SDK required. Includes: - Connect REST API integration with vault/item/field resolution - op:// reference parsing for Connect API lookups - Vault and item ID caching within a session - New opConnectToken data type - Clear error for opLoadEnvironment (not supported with Connect) - Updated README with Connect server documentation - Changeset for minor version bump Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/6fa88b02-ac93-4548-adfb-94a31cd5ac69 Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>
Prevent potential filter syntax issues if vault/item names contain double quotes by escaping them before constructing filter expressions. Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/6fa88b02-ac93-4548-adfb-94a31cd5ac69 Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
Address CodeQL incomplete-sanitization alert by escaping backslashes before quotes in filter expressions to prevent filter injection. Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/6fa88b02-ac93-4548-adfb-94a31cd5ac69 Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>
Copilot
AI
changed the title
[WIP] Add support for 1password connect server in 1password plugin
feat: Support 1Password Connect server in 1Password plugin
Apr 2, 2026
Rename private members of OpPluginInstance to make it immediately clear they are only relevant to the Connect server auth mode: - vaultIdCache → connectVaultIdCache - resolveVaultId → connectResolveVaultId - itemIdCache → connectItemIdCache - resolveItemId → connectResolveItemId - extractField → connectExtractField Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/85435a8e-c00e-4d7e-9660-8b6966e6f017 Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>
this is purely additive functionality
theoephraim
approved these changes
Apr 2, 2026
commit: |
commit: |
theoephraim
approved these changes
Apr 2, 2026
philmillman
approved these changes
Apr 2, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
OpPluginInstancethat need clearer namesresolveVaultId→connectResolveVaultId,resolveItemId→connectResolveItemId,extractField→connectExtractField, and the two caches accordingly