From 7114bca00a52a3ecdc3f5feb25ef0977ec6f2014 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 1 Jul 2025 14:22:31 +0000
Subject: [PATCH 1/3] Initial plan


From 2000af0ea4d2e199ceac5e9dc91efd58b91d44d6 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 1 Jul 2025 14:41:11 +0000
Subject: [PATCH 2/3] Add OAuth social login integration for Facebook, Google,
 LinkedIn, GitHub

Co-authored-by: hejny <23721952+hejny@users.noreply.github.com>
---
 examples/usage/remote-server/oauth-test.html  | 219 +++++++++++++
 .../remote-server/remote-server-with-oauth.ts | 215 ++++++++++++
 package-lock.json                             | 307 +++++++++++++++++
 package.json                                  |  12 +
 src/remote-server/startRemoteServer.ts        | 310 ++++++++++++++++++
 .../types/RemoteServerOptions.ts              |  91 +++++
 6 files changed, 1154 insertions(+)
 create mode 100644 examples/usage/remote-server/oauth-test.html
 create mode 100644 examples/usage/remote-server/remote-server-with-oauth.ts
diff --git a/examples/usage/remote-server/oauth-test.html b/examples/usage/remote-server/oauth-test.html
new file mode 100644
index 0000000000..4af5f48eb6
--- /dev/null
+++ b/examples/usage/remote-server/oauth-test.html
@@ -0,0 +1,219 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Promptbook OAuth Login Test</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            max-width: 800px;
+            margin: 50px auto;
+            padding: 20px;
+            background-color: #f5f5f5;
+        }
+        .container {
+            background: white;
+            padding: 30px;
+            border-radius: 10px;
+            box-shadow: 0 2px 10px rgba(0,0,0,0.1);
+        }
+        h1 {
+            color: #333;
+            text-align: center;
+            margin-bottom: 30px;
+        }
+        .oauth-buttons {
+            display: flex;
+            flex-direction: column;
+            gap: 15px;
+            margin: 30px 0;
+        }
+        .oauth-btn {
+            display: inline-block;
+            padding: 15px 25px;
+            text-decoration: none;
+            border-radius: 8px;
+            text-align: center;
+            font-weight: bold;
+            transition: all 0.3s ease;
+            border: none;
+            cursor: pointer;
+            font-size: 16px;
+        }
+        .facebook {
+            background-color: #1877F2;
+            color: white;
+        }
+        .facebook:hover {
+            background-color: #166FE5;
+        }
+        .google {
+            background-color: #4285F4;
+            color: white;
+        }
+        .google:hover {
+            background-color: #3367D6;
+        }
+        .linkedin {
+            background-color: #0A66C2;
+            color: white;
+        }
+        .linkedin:hover {
+            background-color: #004182;
+        }
+        .github {
+            background-color: #333;
+            color: white;
+        }
+        .github:hover {
+            background-color: #24292e;
+        }
+        .regular-login {
+            margin-top: 30px;
+            padding-top: 30px;
+            border-top: 1px solid #eee;
+        }
+        .form-group {
+            margin-bottom: 15px;
+        }
+        label {
+            display: block;
+            margin-bottom: 5px;
+            font-weight: bold;
+        }
+        input[type="text"], input[type="password"] {
+            width: 100%;
+            padding: 10px;
+            border: 1px solid #ddd;
+            border-radius: 5px;
+            font-size: 16px;
+            box-sizing: border-box;
+        }
+        .login-btn {
+            background-color: #28a745;
+            color: white;
+            padding: 12px 30px;
+            border: none;
+            border-radius: 5px;
+            cursor: pointer;
+            font-size: 16px;
+        }
+        .login-btn:hover {
+            background-color: #218838;
+        }
+        .info {
+            background-color: #e7f3ff;
+            border: 1px solid #b3d7ff;
+            padding: 15px;
+            border-radius: 5px;
+            margin-bottom: 20px;
+        }
+        .note {
+            background-color: #fff3cd;
+            border: 1px solid #ffeaa7;
+            padding: 15px;
+            border-radius: 5px;
+            margin-top: 20px;
+            font-size: 14px;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <h1>🚀 Promptbook OAuth Login Test</h1>
+        
+        <div class="info">
+            <strong>📝 Instructions:</strong><br>
+            1. Make sure your Promptbook server is running on <code>http://localhost:4444</code><br>
+            2. Configure OAuth apps and set environment variables<br>
+            3. Click on any OAuth provider below to test social login
+        </div>
+
+        <div class="oauth-buttons">
+            <a href="http://localhost:4444/auth/facebook?appId=test-app" class="oauth-btn facebook">
+                🔵 Login with Facebook
+            </a>
+            
+            <a href="http://localhost:4444/auth/google?appId=test-app" class="oauth-btn google">
+                🔴 Login with Google
+            </a>
+            
+            <a href="http://localhost:4444/auth/linkedin?appId=test-app" class="oauth-btn linkedin">
+                🔷 Login with LinkedIn
+            </a>
+            
+            <a href="http://localhost:4444/auth/github?appId=test-app" class="oauth-btn github">
+                ⚫ Login with GitHub
+            </a>
+        </div>
+
+        <div class="regular-login">
+            <h3>Or login with username/password:</h3>
+            <form id="loginForm">
+                <div class="form-group">
+                    <label for="username">Username:</label>
+                    <input type="text" id="username" name="username" value="admin" required>
+                </div>
+                <div class="form-group">
+                    <label for="password">Password:</label>
+                    <input type="password" id="password" name="password" value="password" required>
+                </div>
+                <div class="form-group">
+                    <label for="appId">App ID:</label>
+                    <input type="text" id="appId" name="appId" value="test-app">
+                </div>
+                <button type="submit" class="login-btn">🔐 Login</button>
+            </form>
+        </div>
+
+        <div class="note">
+            <strong>💡 Note:</strong> This is a test page for OAuth integration. In a real application, you would integrate OAuth login into your application's UI and handle the authentication flow properly with secure token storage.
+        </div>
+    </div>
+
+    <script>
+        // Handle regular login form
+        document.getElementById('loginForm').addEventListener('submit', async (e) => {
+            e.preventDefault();
+            
+            const username = document.getElementById('username').value;
+            const password = document.getElementById('password').value;
+            const appId = document.getElementById('appId').value;
+            
+            try {
+                const response = await fetch('http://localhost:4444/login', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                    },
+                    body: JSON.stringify({
+                        username,
+                        password,
+                        appId
+                    })
+                });
+                
+                const result = await response.json();
+                
+                if (result.isSuccess) {
+                    alert('✅ Login successful!\n\n' + JSON.stringify(result, null, 2));
+                } else {
+                    alert('❌ Login failed!\n\n' + JSON.stringify(result, null, 2));
+                }
+            } catch (error) {
+                alert('❌ Error: ' + error.message);
+            }
+        });
+        
+        // Listen for OAuth callback messages
+        window.addEventListener('message', (event) => {
+            if (event.data && event.data.type === 'oauth_success') {
+                alert('✅ OAuth Login Successful!\n\n' + event.data.message);
+            } else if (event.data && event.data.type === 'oauth_error') {
+                alert('❌ OAuth Login Failed!\n\n' + event.data.message);
+            }
+        });
+    </script>
+</body>
+</html>
\ No newline at end of file
diff --git a/examples/usage/remote-server/remote-server-with-oauth.ts b/examples/usage/remote-server/remote-server-with-oauth.ts
new file mode 100644
index 0000000000..b3445c66fd
--- /dev/null
+++ b/examples/usage/remote-server/remote-server-with-oauth.ts
@@ -0,0 +1,215 @@
+#!/usr/bin/env ts-node
+
+import { writeFileSync } from 'fs';
+import { join } from 'path';
+import { spaceTrim } from 'spacetrim';
+import { createPipelineCollection } from '../../../src/collection/constructors/createPipelineCollection';
+import { startRemoteServer } from '../../../src/remote-server/startRemoteServer';
+
+/**
+ * Sample Remote Server with OAuth social login integration
+ * 
+ * This example shows how to set up a Promptbook remote server with 
+ * Facebook, Google, LinkedIn, and GitHub OAuth authentication.
+ */
+async function main() {
+    console.info(`🚀 Starting OAuth-enabled Promptbook Server`);
+
+    // Create a sample pipeline collection
+    const collection = await createPipelineCollection(
+        // Sample book content
+        spaceTrim(`
+            # Hello World Pipeline
+
+            Show how to use promptbook with OAuth authentication
+
+            -   PERSONA Jane, marketing specialist
+            -   PIPELINE_URL https://promptbook.studio/hello-world
+            -   MODEL VARIANT Completion
+            -   MODEL NAME gpt-4o-mini
+            -   INPUT  PARAMETER {rawName} Name of the user
+            -   OUTPUT PARAMETER {greeting} Greeting for the user
+
+            ## Welcome message
+
+            - MODEL NAME gpt-4o-mini
+
+            \`\`\`
+            Hello {rawName}!
+            You have successfully authenticated via OAuth.
+            Please provide a personalized welcome message.
+            \`\`\`
+
+            -> {greeting}
+        `),
+    );
+
+    // OAuth configuration (these would come from environment variables in production)
+    const oauthConfig = {
+        sessionSecret: process.env.SESSION_SECRET || 'your-secret-key-here',
+        baseUrl: process.env.BASE_URL || 'http://localhost:4444',
+        facebook: process.env.FACEBOOK_CLIENT_ID ? {
+            clientId: process.env.FACEBOOK_CLIENT_ID,
+            clientSecret: process.env.FACEBOOK_CLIENT_SECRET!,
+        } : undefined,
+        google: process.env.GOOGLE_CLIENT_ID ? {
+            clientId: process.env.GOOGLE_CLIENT_ID,
+            clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
+        } : undefined,
+        linkedin: process.env.LINKEDIN_CLIENT_ID ? {
+            clientId: process.env.LINKEDIN_CLIENT_ID,
+            clientSecret: process.env.LINKEDIN_CLIENT_SECRET!,
+        } : undefined,
+        github: process.env.GITHUB_CLIENT_ID ? {
+            clientId: process.env.GITHUB_CLIENT_ID,
+            clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+        } : undefined,
+    };
+
+    const server = startRemoteServer({
+        port: 4444,
+        isApplicationModeAllowed: true,
+        collection,
+        oauthConfig,
+        
+        // Custom login handler that supports both regular and OAuth login
+        async login(loginRequest) {
+            const { username, password, oauthProfile, appId } = loginRequest;
+            
+            console.info(`🔐 Login attempt:`, {
+                username,
+                hasOAuth: !!oauthProfile,
+                provider: oauthProfile?.provider,
+                appId,
+            });
+
+            // Handle OAuth login
+            if (oauthProfile) {
+                // In a real application, you would:
+                // 1. Check if user exists in your database
+                // 2. Create user if doesn't exist
+                // 3. Generate appropriate user token
+                // 4. Set up user permissions
+                
+                return {
+                    isSuccess: true,
+                    message: `OAuth login successful via ${oauthProfile.provider}`,
+                    identification: {
+                        isAnonymous: false,
+                        appId: appId || 'oauth-app',
+                        userId: `${oauthProfile.provider}-${oauthProfile.id}`,
+                        userToken: `oauth-token-${Date.now()}`, // In production, use proper JWT
+                        customOptions: {
+                            oauthProvider: oauthProfile.provider,
+                            userEmail: oauthProfile.email,
+                            userDisplayName: oauthProfile.displayName,
+                        },
+                    },
+                };
+            }
+
+            // Handle regular username/password login
+            // In a real application, verify credentials against your database
+            if (username === 'admin' && password === 'password') {
+                return {
+                    isSuccess: true,
+                    message: 'Regular login successful',
+                    identification: {
+                        isAnonymous: false,
+                        appId: appId || 'admin-app',
+                        userId: username,
+                        userToken: `token-${Date.now()}`,
+                    },
+                };
+            }
+
+            return {
+                isSuccess: false,
+                message: 'Invalid credentials',
+            };
+        },
+
+        // Optional: Custom LLM execution tools based on user
+        async createLlmExecutionTools(identification) {
+            console.info(`🤖 Creating LLM tools for user:`, identification.userId);
+            
+            // In a real application, you might:
+            // - Use different API keys based on user tier
+            // - Apply rate limiting per user
+            // - Log usage for billing
+            
+            // For this example, we'll use environment variables or default configuration
+            return undefined; // Use default tools
+        },
+    });
+
+    console.info(`✨ OAuth-enabled Promptbook Server is running on http://localhost:4444`);
+    console.info(``);
+    console.info(`Available OAuth providers:`);
+    if (oauthConfig.facebook) console.info(`  🔵 Facebook: http://localhost:4444/auth/facebook`);
+    if (oauthConfig.google) console.info(`  🔴 Google: http://localhost:4444/auth/google`);
+    if (oauthConfig.linkedin) console.info(`  🔷 LinkedIn: http://localhost:4444/auth/linkedin`);
+    if (oauthConfig.github) console.info(`  ⚫ GitHub: http://localhost:4444/auth/github`);
+    console.info(``);
+    console.info(`Regular login: POST http://localhost:4444/login`);
+    console.info(`  Body: {"username": "admin", "password": "password", "appId": "test-app"}`);
+    console.info(``);
+    console.info(`API Documentation: http://localhost:4444/api-docs`);
+    console.info(``);
+    
+    // Write sample .env file
+    const envContent = spaceTrim(`
+        # OAuth Configuration for Promptbook Server
+        # Copy this to .env and fill in your OAuth app credentials
+        
+        SESSION_SECRET=your-random-secret-key-here
+        BASE_URL=http://localhost:4444
+        
+        # Facebook OAuth App
+        # FACEBOOK_CLIENT_ID=your-facebook-app-id
+        # FACEBOOK_CLIENT_SECRET=your-facebook-app-secret
+        
+        # Google OAuth App  
+        # GOOGLE_CLIENT_ID=your-google-client-id
+        # GOOGLE_CLIENT_SECRET=your-google-client-secret
+        
+        # LinkedIn OAuth App
+        # LINKEDIN_CLIENT_ID=your-linkedin-client-id
+        # LINKEDIN_CLIENT_SECRET=your-linkedin-client-secret
+        
+        # GitHub OAuth App
+        # GITHUB_CLIENT_ID=your-github-client-id
+        # GITHUB_CLIENT_SECRET=your-github-client-secret
+    `);
+    
+    writeFileSync(join(__dirname, '.env.example'), envContent);
+    console.info(`📄 Created .env.example file with OAuth configuration template`);
+}
+
+if (require.main === module) {
+    main().catch(console.error);
+}
+
+/**
+ * Note: To set up OAuth apps:
+ * 
+ * Facebook:
+ * 1. Go to https://developers.facebook.com/
+ * 2. Create an app, get Client ID and Secret
+ * 3. Set redirect URI: http://localhost:4444/auth/facebook/callback
+ * 
+ * Google:
+ * 1. Go to https://console.developers.google.com/
+ * 2. Create OAuth 2.0 credentials
+ * 3. Set redirect URI: http://localhost:4444/auth/google/callback
+ * 
+ * LinkedIn:
+ * 1. Go to https://www.linkedin.com/developers/
+ * 2. Create an app, get Client ID and Secret
+ * 3. Set redirect URI: http://localhost:4444/auth/linkedin/callback
+ * 
+ * GitHub:
+ * 1. Go to https://github.com/settings/developers
+ * 2. Create OAuth App, get Client ID and Secret
+ * 3. Set redirect URI: http://localhost:4444/auth/github/callback
+ */
\ No newline at end of file
diff --git a/package-lock.json b/package-lock.json
index 55d73dd0c1..3623cb1abf 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -35,6 +35,7 @@
                 "dotenv": "16.3.1",
                 "express": "4.21.2",
                 "express-openapi-validator": "^5.4.9",
+                "express-session": "^1.18.1",
                 "glob-promise": "6.0.5",
                 "jsdom": "25.0.1",
                 "jszip": "3.10.1",
@@ -43,6 +44,11 @@
                 "moment": "2.30.1",
                 "openai": "4.63.0",
                 "papaparse": "5.4.1",
+                "passport": "^0.7.0",
+                "passport-facebook": "^3.0.0",
+                "passport-github2": "^0.1.12",
+                "passport-google-oauth20": "^2.0.0",
+                "passport-linkedin-oauth2": "^2.0.0",
                 "prettier": "2.8.1",
                 "prompts": "2.4.2",
                 "rxjs": "7.8.1",
@@ -61,10 +67,16 @@
                 "@rollup/plugin-typescript": "8.3.0",
                 "@types/crypto-js": "4.2.2",
                 "@types/express": "5.0.0",
+                "@types/express-session": "^1.18.2",
                 "@types/jest": "29.5.8",
                 "@types/jsdom": "21.1.7",
                 "@types/mime-types": "2.1.4",
                 "@types/papaparse": "5.3.15",
+                "@types/passport": "^1.0.17",
+                "@types/passport-facebook": "^3.0.3",
+                "@types/passport-github2": "^1.2.9",
+                "@types/passport-google-oauth20": "^2.0.16",
+                "@types/passport-linkedin-oauth2": "^1.5.6",
                 "@types/prettier": "2.7.3",
                 "@types/prompts": "2.4.9",
                 "@types/showdown": "2.0.6",
@@ -2903,6 +2915,16 @@
                 "@types/send": "*"
             }
         },
+        "node_modules/@types/express-session": {
+            "version": "1.18.2",
+            "resolved": "https://registry.npmjs.org/@types/express-session/-/express-session-1.18.2.tgz",
+            "integrity": "sha512-k+I0BxwVXsnEU2hV77cCobC08kIsn4y44C3gC0b46uxZVMaXA04lSPgRLR/bSL2w0t0ShJiG8o4jPzRG/nscFg==",
+            "dev": true,
+            "license": "MIT",
+            "dependencies": {
+                "@types/express": "*"
+            }
+        },
         "node_modules/@types/glob": {
             "version": "8.1.0",
             "resolved": "https://registry.npmjs.org/@types/glob/-/glob-8.1.0.tgz",
@@ -3032,6 +3054,16 @@
                 "form-data": "^4.0.0"
             }
         },
+        "node_modules/@types/oauth": {
+            "version": "0.9.6",
+            "resolved": "https://registry.npmjs.org/@types/oauth/-/oauth-0.9.6.tgz",
+            "integrity": "sha512-H9TRCVKBNOhZZmyHLqFt9drPM9l+ShWiqqJijU1B8P3DX3ub84NjxDuy+Hjrz+fEca5Kwip3qPMKNyiLgNJtIA==",
+            "dev": true,
+            "license": "MIT",
+            "dependencies": {
+                "@types/node": "*"
+            }
+        },
         "node_modules/@types/papaparse": {
             "version": "5.3.15",
             "resolved": "https://registry.npmjs.org/@types/papaparse/-/papaparse-5.3.15.tgz",
@@ -3042,6 +3074,75 @@
                 "@types/node": "*"
             }
         },
+        "node_modules/@types/passport": {
+            "version": "1.0.17",
+            "resolved": "https://registry.npmjs.org/@types/passport/-/passport-1.0.17.tgz",
+            "integrity": "sha512-aciLyx+wDwT2t2/kJGJR2AEeBz0nJU4WuRX04Wu9Dqc5lSUtwu0WERPHYsLhF9PtseiAMPBGNUOtFjxZ56prsg==",
+            "dev": true,
+            "license": "MIT",
+            "dependencies": {
+                "@types/express": "*"
+            }
+        },
+        "node_modules/@types/passport-facebook": {
+            "version": "3.0.3",
+            "resolved": "https://registry.npmjs.org/@types/passport-facebook/-/passport-facebook-3.0.3.tgz",
+            "integrity": "sha512-4cwyK2bGMo4Di8eMMLjf9JgDbpptRVYmStuy0ETZSaVo6fcY9+BtB9hCUmLEobUtqNHoIoXIWOCdDA2UynCUyg==",
+            "dev": true,
+            "license": "MIT",
+            "dependencies": {
+                "@types/express": "*",
+                "@types/passport": "*",
+                "@types/passport-oauth2": "*"
+            }
+        },
+        "node_modules/@types/passport-github2": {
+            "version": "1.2.9",
+            "resolved": "https://registry.npmjs.org/@types/passport-github2/-/passport-github2-1.2.9.tgz",
+            "integrity": "sha512-/nMfiPK2E6GKttwBzwj0Wjaot8eHrM57hnWxu52o6becr5/kXlH/4yE2v2rh234WGvSgEEzIII02Nc5oC5xEHA==",
+            "dev": true,
+            "license": "MIT",
+            "dependencies": {
+                "@types/express": "*",
+                "@types/passport": "*",
+                "@types/passport-oauth2": "*"
+            }
+        },
+        "node_modules/@types/passport-google-oauth20": {
+            "version": "2.0.16",
+            "resolved": "https://registry.npmjs.org/@types/passport-google-oauth20/-/passport-google-oauth20-2.0.16.tgz",
+            "integrity": "sha512-ayXK2CJ7uVieqhYOc6k/pIr5pcQxOLB6kBev+QUGS7oEZeTgIs1odDobXRqgfBPvXzl0wXCQHftV5220czZCPA==",
+            "dev": true,
+            "license": "MIT",
+            "dependencies": {
+                "@types/express": "*",
+                "@types/passport": "*",
+                "@types/passport-oauth2": "*"
+            }
+        },
+        "node_modules/@types/passport-linkedin-oauth2": {
+            "version": "1.5.6",
+            "resolved": "https://registry.npmjs.org/@types/passport-linkedin-oauth2/-/passport-linkedin-oauth2-1.5.6.tgz",
+            "integrity": "sha512-LlIwa+GGK8KoUHDxxwO2+5uqB6YmIHysqdLwpn+YJsjfmqFdAH+4YjhXO7riYwfYcpEr/pI+dSEDlwF0Xt+qhg==",
+            "dev": true,
+            "license": "MIT",
+            "dependencies": {
+                "@types/express": "*",
+                "@types/passport": "*"
+            }
+        },
+        "node_modules/@types/passport-oauth2": {
+            "version": "1.8.0",
+            "resolved": "https://registry.npmjs.org/@types/passport-oauth2/-/passport-oauth2-1.8.0.tgz",
+            "integrity": "sha512-6//z+4orIOy/g3zx17HyQ71GSRK4bs7Sb+zFasRoc2xzlv7ZCJ+vkDBYFci8U6HY+or6Zy7ajf4mz4rK7nsWJQ==",
+            "dev": true,
+            "license": "MIT",
+            "dependencies": {
+                "@types/express": "*",
+                "@types/oauth": "*",
+                "@types/passport": "*"
+            }
+        },
         "node_modules/@types/prettier": {
             "version": "2.7.3",
             "resolved": "https://registry.npmjs.org/@types/prettier/-/prettier-2.7.3.tgz",
@@ -4314,6 +4415,15 @@
                 "node": "^4.5.0 || >= 5.9"
             }
         },
+        "node_modules/base64url": {
+            "version": "3.0.1",
+            "resolved": "https://registry.npmjs.org/base64url/-/base64url-3.0.1.tgz",
+            "integrity": "sha512-ir1UPr3dkwexU7FdV8qBBbNDRUhMmIekYMFZfi+C/sLNnRESKPl23nB9b2pltqfOQNnGzsDdId90AEtG5tCx4A==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=6.0.0"
+            }
+        },
         "node_modules/big.js": {
             "version": "5.2.2",
             "resolved": "https://registry.npmjs.org/big.js/-/big.js-5.2.2.tgz",
@@ -7160,6 +7270,66 @@
                 "node": ">=16"
             }
         },
+        "node_modules/express-session": {
+            "version": "1.18.1",
+            "resolved": "https://registry.npmjs.org/express-session/-/express-session-1.18.1.tgz",
+            "integrity": "sha512-a5mtTqEaZvBCL9A9aqkrtfz+3SMDhOVUnjafjo+s7A9Txkq+SVX2DLvSp1Zrv4uCXa3lMSK3viWnh9Gg07PBUA==",
+            "license": "MIT",
+            "dependencies": {
+                "cookie": "0.7.2",
+                "cookie-signature": "1.0.7",
+                "debug": "2.6.9",
+                "depd": "~2.0.0",
+                "on-headers": "~1.0.2",
+                "parseurl": "~1.3.3",
+                "safe-buffer": "5.2.1",
+                "uid-safe": "~2.1.5"
+            },
+            "engines": {
+                "node": ">= 0.8.0"
+            }
+        },
+        "node_modules/express-session/node_modules/cookie-signature": {
+            "version": "1.0.7",
+            "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.7.tgz",
+            "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==",
+            "license": "MIT"
+        },
+        "node_modules/express-session/node_modules/debug": {
+            "version": "2.6.9",
+            "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+            "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+            "license": "MIT",
+            "dependencies": {
+                "ms": "2.0.0"
+            }
+        },
+        "node_modules/express-session/node_modules/ms": {
+            "version": "2.0.0",
+            "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+            "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+            "license": "MIT"
+        },
+        "node_modules/express-session/node_modules/safe-buffer": {
+            "version": "5.2.1",
+            "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+            "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+            "funding": [
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/feross"
+                },
+                {
+                    "type": "patreon",
+                    "url": "https://www.patreon.com/feross"
+                },
+                {
+                    "type": "consulting",
+                    "url": "https://feross.org/support"
+                }
+            ],
+            "license": "MIT"
+        },
         "node_modules/express/node_modules/cookie": {
             "version": "0.7.1",
             "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
@@ -10610,6 +10780,12 @@
             "integrity": "sha512-F1I/bimDpj3ncaNDhfyMWuFqmQDBwDB0Fogc2qpL3BWvkQteFD/8BzWuIRl83rq0DXfm8SGt/HFhLXZyljTXcQ==",
             "license": "MIT"
         },
+        "node_modules/oauth": {
+            "version": "0.10.2",
+            "resolved": "https://registry.npmjs.org/oauth/-/oauth-0.10.2.tgz",
+            "integrity": "sha512-JtFnB+8nxDEXgNyniwz573xxbKSOu3R8D40xQKqcjwJ2CDkYqUDI53o6IuzDJBx60Z8VKCm271+t8iFjakrl8Q==",
+            "license": "MIT"
+        },
         "node_modules/object-assign": {
             "version": "4.1.1",
             "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
@@ -10728,6 +10904,15 @@
                 "node": ">= 0.8"
             }
         },
+        "node_modules/on-headers": {
+            "version": "1.0.2",
+            "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.2.tgz",
+            "integrity": "sha512-pZAE+FJLoyITytdqK0U5s+FIpjN0JP3OzFi/u8Rx+EV5/W+JTWGXG8xFzevE7AjBfDqHv/8vL8qQsIhHnqRkrA==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
         "node_modules/once": {
             "version": "1.4.0",
             "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
@@ -11100,6 +11285,96 @@
                 "node": ">=0.10.0"
             }
         },
+        "node_modules/passport": {
+            "version": "0.7.0",
+            "resolved": "https://registry.npmjs.org/passport/-/passport-0.7.0.tgz",
+            "integrity": "sha512-cPLl+qZpSc+ireUvt+IzqbED1cHHkDoVYMo30jbJIdOOjQ1MQYZBPiNvmi8UM6lJuOpTPXJGZQk0DtC4y61MYQ==",
+            "license": "MIT",
+            "dependencies": {
+                "passport-strategy": "1.x.x",
+                "pause": "0.0.1",
+                "utils-merge": "^1.0.1"
+            },
+            "engines": {
+                "node": ">= 0.4.0"
+            },
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/jaredhanson"
+            }
+        },
+        "node_modules/passport-facebook": {
+            "version": "3.0.0",
+            "resolved": "https://registry.npmjs.org/passport-facebook/-/passport-facebook-3.0.0.tgz",
+            "integrity": "sha512-K/qNzuFsFISYAyC1Nma4qgY/12V3RSLFdFVsPKXiKZt434wOvthFW1p7zKa1iQihQMRhaWorVE1o3Vi1o+ZgeQ==",
+            "license": "MIT",
+            "dependencies": {
+                "passport-oauth2": "1.x.x"
+            },
+            "engines": {
+                "node": ">= 0.4.0"
+            }
+        },
+        "node_modules/passport-github2": {
+            "version": "0.1.12",
+            "resolved": "https://registry.npmjs.org/passport-github2/-/passport-github2-0.1.12.tgz",
+            "integrity": "sha512-3nPUCc7ttF/3HSP/k9sAXjz3SkGv5Nki84I05kSQPo01Jqq1NzJACgMblCK0fGcv9pKCG/KXU3AJRDGLqHLoIw==",
+            "dependencies": {
+                "passport-oauth2": "1.x.x"
+            },
+            "engines": {
+                "node": ">= 0.8.0"
+            }
+        },
+        "node_modules/passport-google-oauth20": {
+            "version": "2.0.0",
+            "resolved": "https://registry.npmjs.org/passport-google-oauth20/-/passport-google-oauth20-2.0.0.tgz",
+            "integrity": "sha512-KSk6IJ15RoxuGq7D1UKK/8qKhNfzbLeLrG3gkLZ7p4A6DBCcv7xpyQwuXtWdpyR0+E0mwkpjY1VfPOhxQrKzdQ==",
+            "license": "MIT",
+            "dependencies": {
+                "passport-oauth2": "1.x.x"
+            },
+            "engines": {
+                "node": ">= 0.4.0"
+            }
+        },
+        "node_modules/passport-linkedin-oauth2": {
+            "version": "2.0.0",
+            "resolved": "https://registry.npmjs.org/passport-linkedin-oauth2/-/passport-linkedin-oauth2-2.0.0.tgz",
+            "integrity": "sha512-PnSeq2HzFQ/y1/p2RTF/kG2zhJ7kwGVg4xO3E+JNxz2aI0pFJGAqC503FVpUksYbhQdNhL6QYlK9qrEXD7ZYCg==",
+            "license": "MIT",
+            "dependencies": {
+                "passport-oauth2": "1.x.x"
+            }
+        },
+        "node_modules/passport-oauth2": {
+            "version": "1.8.0",
+            "resolved": "https://registry.npmjs.org/passport-oauth2/-/passport-oauth2-1.8.0.tgz",
+            "integrity": "sha512-cjsQbOrXIDE4P8nNb3FQRCCmJJ/utnFKEz2NX209f7KOHPoX18gF7gBzBbLLsj2/je4KrgiwLLGjf0lm9rtTBA==",
+            "license": "MIT",
+            "dependencies": {
+                "base64url": "3.x.x",
+                "oauth": "0.10.x",
+                "passport-strategy": "1.x.x",
+                "uid2": "0.0.x",
+                "utils-merge": "1.x.x"
+            },
+            "engines": {
+                "node": ">= 0.4.0"
+            },
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/jaredhanson"
+            }
+        },
+        "node_modules/passport-strategy": {
+            "version": "1.0.0",
+            "resolved": "https://registry.npmjs.org/passport-strategy/-/passport-strategy-1.0.0.tgz",
+            "integrity": "sha512-CB97UUvDKJde2V0KDWWB3lyf6PC3FaZP7YxZ2G8OAtn9p4HI9j9JLP9qjOGZFvyl8uwNT8qM+hGnz/n16NI7oA==",
+            "engines": {
+                "node": ">= 0.4.0"
+            }
+        },
         "node_modules/path-browserify": {
             "version": "1.0.1",
             "resolved": "https://registry.npmjs.org/path-browserify/-/path-browserify-1.0.1.tgz",
@@ -11167,6 +11442,11 @@
                 "node": ">=8"
             }
         },
+        "node_modules/pause": {
+            "version": "0.0.1",
+            "resolved": "https://registry.npmjs.org/pause/-/pause-0.0.1.tgz",
+            "integrity": "sha512-KG8UEiEVkR3wGEb4m5yZkVCzigAD+cVEJck2CzYZO37ZGJfctvVptVO192MwrtPhzONn6go8ylnOdMhKqi4nfg=="
+        },
         "node_modules/pbkdf2": {
             "version": "3.1.2",
             "resolved": "https://registry.npmjs.org/pbkdf2/-/pbkdf2-3.1.2.tgz",
@@ -11576,6 +11856,15 @@
             ],
             "license": "MIT"
         },
+        "node_modules/random-bytes": {
+            "version": "1.0.0",
+            "resolved": "https://registry.npmjs.org/random-bytes/-/random-bytes-1.0.0.tgz",
+            "integrity": "sha512-iv7LhNVO047HzYR3InF6pUcUsPQiHTM1Qal51DcGSuZFBil1aBBWG5eHPNek7bvILMaYJ/8RU1e8w1AMdHmLQQ==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
         "node_modules/randombytes": {
             "version": "2.1.0",
             "resolved": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz",
@@ -13617,6 +13906,24 @@
                 "node": ">=14.17"
             }
         },
+        "node_modules/uid-safe": {
+            "version": "2.1.5",
+            "resolved": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.1.5.tgz",
+            "integrity": "sha512-KPHm4VL5dDXKz01UuEd88Df+KzynaohSL9fBh096KWAxSKZQDI2uBrVqtvRM4rwrIrRRKsdLNML/lnaaVSRioA==",
+            "license": "MIT",
+            "dependencies": {
+                "random-bytes": "~1.0.0"
+            },
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
+        "node_modules/uid2": {
+            "version": "0.0.4",
+            "resolved": "https://registry.npmjs.org/uid2/-/uid2-0.0.4.tgz",
+            "integrity": "sha512-IevTus0SbGwQzYh3+fRsAMTVVPOoIVufzacXcHPmdlle1jUpq7BRL+mw3dgeLanvGZdwwbWhRV6XrcFNdBmjWA==",
+            "license": "MIT"
+        },
         "node_modules/underscore": {
             "version": "1.13.7",
             "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.7.tgz",
diff --git a/package.json b/package.json
index fd4910278d..449505e897 100644
--- a/package.json
+++ b/package.json
@@ -208,10 +208,16 @@
         "@rollup/plugin-typescript": "8.3.0",
         "@types/crypto-js": "4.2.2",
         "@types/express": "5.0.0",
+        "@types/express-session": "^1.18.2",
         "@types/jest": "29.5.8",
         "@types/jsdom": "21.1.7",
         "@types/mime-types": "2.1.4",
         "@types/papaparse": "5.3.15",
+        "@types/passport": "^1.0.17",
+        "@types/passport-facebook": "^3.0.3",
+        "@types/passport-github2": "^1.2.9",
+        "@types/passport-google-oauth20": "^2.0.16",
+        "@types/passport-linkedin-oauth2": "^1.5.6",
         "@types/prettier": "2.7.3",
         "@types/prompts": "2.4.9",
         "@types/showdown": "2.0.6",
@@ -249,6 +255,7 @@
         "dotenv": "16.3.1",
         "express": "4.21.2",
         "express-openapi-validator": "^5.4.9",
+        "express-session": "^1.18.1",
         "glob-promise": "6.0.5",
         "jsdom": "25.0.1",
         "jszip": "3.10.1",
@@ -257,6 +264,11 @@
         "moment": "2.30.1",
         "openai": "4.63.0",
         "papaparse": "5.4.1",
+        "passport": "^0.7.0",
+        "passport-facebook": "^3.0.0",
+        "passport-github2": "^0.1.12",
+        "passport-google-oauth20": "^2.0.0",
+        "passport-linkedin-oauth2": "^2.0.0",
         "prettier": "2.8.1",
         "prompts": "2.4.2",
         "rxjs": "7.8.1",
diff --git a/src/remote-server/startRemoteServer.ts b/src/remote-server/startRemoteServer.ts
index a80ea91f03..008ea3f774 100644
--- a/src/remote-server/startRemoteServer.ts
+++ b/src/remote-server/startRemoteServer.ts
@@ -1,7 +1,13 @@
 import colors from 'colors'; // <- TODO: [🔶] Make system to put color and style to both node and browser
 import express from 'express';
+import session from 'express-session';
 import * as OpenApiValidator from 'express-openapi-validator';
 import http from 'http';
+import passport from 'passport';
+import { Strategy as FacebookStrategy } from 'passport-facebook';
+import { Strategy as GitHubStrategy } from 'passport-github2';
+import { Strategy as GoogleStrategy } from 'passport-google-oauth20';
+import { Strategy as LinkedInStrategy } from 'passport-linkedin-oauth2';
 import { DefaultEventsMap, Server, Socket } from 'socket.io';
 import { spaceTrim } from 'spacetrim';
 import swaggerUi from 'swagger-ui-express';
@@ -42,8 +48,16 @@ import type { PromptbookServer_PreparePipeline_Response } from './socket-types/p
 import type { PromptbookServer_Prompt_Request } from './socket-types/prompt/PromptbookServer_Prompt_Request';
 import type { PromptbookServer_Prompt_Response } from './socket-types/prompt/PromptbookServer_Prompt_Response';
 import type { LoginResponse } from './types/RemoteServerOptions';
+import type { OAuthProfile } from './types/RemoteServerOptions';
 import type { RemoteServerOptions } from './types/RemoteServerOptions';
 
+// Extend Express Request to include user property for OAuth
+declare global {
+    namespace Express {
+        interface User extends OAuthProfile {}
+    }
+}
+
 keepTypeImported<PromptbookServer_Prompt_Response>(); // <- Note: [🤛]
 keepTypeImported<PromptbookServer_Error>(); // <- Note: [🤛]
 keepTypeImported<PromptbookServer_ListModels_Response>(); // <- Note: [🤛]
@@ -139,6 +153,111 @@ export function startRemoteServer<TCustomOptions = undefined>(
     const app = express();
 
     app.use(express.json());
+    
+    // Configure OAuth if provided
+    if (options.oauthConfig) {
+        const { oauthConfig } = options;
+        
+        // Session configuration
+        app.use(session({
+            secret: oauthConfig.sessionSecret,
+            resave: false,
+            saveUninitialized: false,
+            cookie: { secure: false } // Set to true in production with HTTPS
+        }));
+        
+        // Initialize Passport
+        app.use(passport.initialize());
+        app.use(passport.session());
+        
+        // Passport user serialization
+        passport.serializeUser((user: any, done: any) => {
+            done(null, user);
+        });
+        
+        passport.deserializeUser((user: any, done: any) => {
+            done(null, user);
+        });
+        
+        // Configure Facebook OAuth
+        if (oauthConfig.facebook) {
+            passport.use(new FacebookStrategy({
+                clientID: oauthConfig.facebook.clientId,
+                clientSecret: oauthConfig.facebook.clientSecret,
+                callbackURL: `${oauthConfig.baseUrl}/auth/facebook/callback`,
+                profileFields: ['id', 'displayName', 'email', 'picture']
+            }, (accessToken: string, refreshToken: string, profile: any, done: any) => {
+                const oauthProfile: OAuthProfile = {
+                    provider: 'facebook',
+                    id: profile.id,
+                    displayName: profile.displayName,
+                    email: profile.emails?.[0]?.value,
+                    photoUrl: profile.photos?.[0]?.value,
+                    raw: profile
+                };
+                done(null, oauthProfile);
+            }));
+        }
+        
+        // Configure Google OAuth
+        if (oauthConfig.google) {
+            passport.use(new GoogleStrategy({
+                clientID: oauthConfig.google.clientId,
+                clientSecret: oauthConfig.google.clientSecret,
+                callbackURL: `${oauthConfig.baseUrl}/auth/google/callback`
+            }, (accessToken: string, refreshToken: string, profile: any, done: any) => {
+                const oauthProfile: OAuthProfile = {
+                    provider: 'google',
+                    id: profile.id,
+                    displayName: profile.displayName,
+                    email: profile.emails?.[0]?.value,
+                    photoUrl: profile.photos?.[0]?.value,
+                    raw: profile
+                };
+                done(null, oauthProfile);
+            }));
+        }
+        
+        // Configure LinkedIn OAuth
+        if (oauthConfig.linkedin) {
+            passport.use(new LinkedInStrategy({
+                clientID: oauthConfig.linkedin.clientId,
+                clientSecret: oauthConfig.linkedin.clientSecret,
+                callbackURL: `${oauthConfig.baseUrl}/auth/linkedin/callback`,
+                scope: ['r_emailaddress', 'r_liteprofile']
+            }, (accessToken: string, refreshToken: string, profile: any, done: any) => {
+                const oauthProfile: OAuthProfile = {
+                    provider: 'linkedin',
+                    id: profile.id,
+                    displayName: profile.displayName,
+                    email: profile.emails?.[0]?.value,
+                    photoUrl: profile.photos?.[0]?.value,
+                    raw: profile
+                };
+                done(null, oauthProfile);
+            }));
+        }
+        
+        // Configure GitHub OAuth
+        if (oauthConfig.github) {
+            passport.use(new GitHubStrategy({
+                clientID: oauthConfig.github.clientId,
+                clientSecret: oauthConfig.github.clientSecret,
+                callbackURL: `${oauthConfig.baseUrl}/auth/github/callback`
+            }, (accessToken: string, refreshToken: string, profile: any, done: any) => {
+                const oauthProfile: OAuthProfile = {
+                    provider: 'github',
+                    id: profile.id,
+                    displayName: profile.displayName,
+                    email: profile.emails?.[0]?.value,
+                    photoUrl: profile.photos?.[0]?.value,
+                    raw: profile
+                };
+                done(null, oauthProfile);
+            }));
+        }
+    }
+    
     app.use(function (request, response, next) {
         response.setHeader('X-Powered-By', 'Promptbook engine');
         next();
@@ -354,6 +473,197 @@ export function startRemoteServer<TCustomOptions = undefined>(
         }
     });
 
+    // OAuth routes
+    if (options.oauthConfig) {
+        // OAuth initiation routes
+        if (options.oauthConfig.facebook) {
+            app.get('/auth/facebook', passport.authenticate('facebook', { scope: ['email'] }));
+            app.get('/auth/facebook/callback', 
+                passport.authenticate('facebook', { failureRedirect: '/login' }),
+                async (request, response) => {
+                    try {
+                        if (!login) {
+                            response.redirect('/auth/error?message=Login not configured');
+                            return;
+                        }
+                        
+                        const oauthProfile = request.user as OAuthProfile;
+                        const appId = request.query.appId as string || null;
+                        
+                        const { isSuccess, error, message, identification } = await login({
+                            username: oauthProfile.email || oauthProfile.id,
+                            password: '', // Not used for OAuth
+                            appId,
+                            oauthProfile,
+                            rawRequest: request,
+                            rawResponse: response,
+                        });
+                        
+                        // Redirect to success page with login status
+                        if (isSuccess) {
+                            response.redirect(`/auth/success?message=${encodeURIComponent(message || 'Login successful')}`);
+                        } else {
+                            response.redirect(`/auth/error?message=${encodeURIComponent(message || 'Login failed')}`);
+                        }
+                    } catch (error) {
+                        console.error('Facebook OAuth callback error:', error);
+                        response.redirect('/auth/error?message=Authentication failed');
+                    }
+                }
+            );
+        }
+        
+        if (options.oauthConfig.google) {
+            app.get('/auth/google', passport.authenticate('google', { scope: ['profile', 'email'] }));
+            app.get('/auth/google/callback',
+                passport.authenticate('google', { failureRedirect: '/login' }),
+                async (request, response) => {
+                    try {
+                        if (!login) {
+                            response.redirect('/auth/error?message=Login not configured');
+                            return;
+                        }
+                        
+                        const oauthProfile = request.user as OAuthProfile;
+                        const appId = request.query.appId as string || null;
+                        
+                        const { isSuccess, error, message, identification } = await login({
+                            username: oauthProfile.email || oauthProfile.id,
+                            password: '', // Not used for OAuth
+                            appId,
+                            oauthProfile,
+                            rawRequest: request,
+                            rawResponse: response,
+                        });
+                        
+                        if (isSuccess) {
+                            response.redirect(`/auth/success?message=${encodeURIComponent(message || 'Login successful')}`);
+                        } else {
+                            response.redirect(`/auth/error?message=${encodeURIComponent(message || 'Login failed')}`);
+                        }
+                    } catch (error) {
+                        console.error('Google OAuth callback error:', error);
+                        response.redirect('/auth/error?message=Authentication failed');
+                    }
+                }
+            );
+        }
+        
+        if (options.oauthConfig.linkedin) {
+            app.get('/auth/linkedin', passport.authenticate('linkedin'));
+            app.get('/auth/linkedin/callback',
+                passport.authenticate('linkedin', { failureRedirect: '/login' }),
+                async (request, response) => {
+                    try {
+                        if (!login) {
+                            response.redirect('/auth/error?message=Login not configured');
+                            return;
+                        }
+                        
+                        const oauthProfile = request.user as OAuthProfile;
+                        const appId = request.query.appId as string || null;
+                        
+                        const { isSuccess, error, message, identification } = await login({
+                            username: oauthProfile.email || oauthProfile.id,
+                            password: '', // Not used for OAuth
+                            appId,
+                            oauthProfile,
+                            rawRequest: request,
+                            rawResponse: response,
+                        });
+                        
+                        if (isSuccess) {
+                            response.redirect(`/auth/success?message=${encodeURIComponent(message || 'Login successful')}`);
+                        } else {
+                            response.redirect(`/auth/error?message=${encodeURIComponent(message || 'Login failed')}`);
+                        }
+                    } catch (error) {
+                        console.error('LinkedIn OAuth callback error:', error);
+                        response.redirect('/auth/error?message=Authentication failed');
+                    }
+                }
+            );
+        }
+        
+        if (options.oauthConfig.github) {
+            app.get('/auth/github', passport.authenticate('github', { scope: ['user:email'] }));
+            app.get('/auth/github/callback',
+                passport.authenticate('github', { failureRedirect: '/login' }),
+                async (request, response) => {
+                    try {
+                        if (!login) {
+                            response.redirect('/auth/error?message=Login not configured');
+                            return;
+                        }
+                        
+                        const oauthProfile = request.user as OAuthProfile;
+                        const appId = request.query.appId as string || null;
+                        
+                        const { isSuccess, error, message, identification } = await login({
+                            username: oauthProfile.email || oauthProfile.id,
+                            password: '', // Not used for OAuth
+                            appId,
+                            oauthProfile,
+                            rawRequest: request,
+                            rawResponse: response,
+                        });
+                        
+                        if (isSuccess) {
+                            response.redirect(`/auth/success?message=${encodeURIComponent(message || 'Login successful')}`);
+                        } else {
+                            response.redirect(`/auth/error?message=${encodeURIComponent(message || 'Login failed')}`);
+                        }
+                    } catch (error) {
+                        console.error('GitHub OAuth callback error:', error);
+                        response.redirect('/auth/error?message=Authentication failed');
+                    }
+                }
+            );
+        }
+        
+        // OAuth success/error pages
+        app.get('/auth/success', (request, response) => {
+            const message = request.query.message || 'Login successful';
+            response.send(`
+                <html>
+                    <head><title>Login Successful</title></head>
+                    <body>
+                        <h1>✅ Login Successful</h1>
+                        <p>${message}</p>
+                        <p>You can now close this window and return to the application.</p>
+                        <script>
+                            // Try to close the window if it was opened as a popup
+                            if (window.opener) {
+                                window.opener.postMessage({type: 'oauth_success', message: '${message}'}, '*');
+                                window.close();
+                            }
+                        </script>
+                    </body>
+                </html>
+            `);
+        });
+        
+        app.get('/auth/error', (request, response) => {
+            const message = request.query.message || 'Login failed';
+            response.send(`
+                <html>
+                    <head><title>Login Failed</title></head>
+                    <body>
+                        <h1>❌ Login Failed</h1>
+                        <p>${message}</p>
+                        <p>Please try again or contact support.</p>
+                        <script>
+                            if (window.opener) {
+                                window.opener.postMessage({type: 'oauth_error', message: '${message}'}, '*');
+                                window.close();
+                            }
+                        </script>
+                    </body>
+                </html>
+            `);
+        });
+    }
+
     app.get(`/books`, async (request, response) => {
         if (collection === null) {
             response.status(500).send('No collection available');
diff --git a/src/remote-server/types/RemoteServerOptions.ts b/src/remote-server/types/RemoteServerOptions.ts
index 17ce56623e..00a2e1c3ab 100644
--- a/src/remote-server/types/RemoteServerOptions.ts
+++ b/src/remote-server/types/RemoteServerOptions.ts
@@ -33,6 +33,55 @@ export type RemoteServerOptions<TCustomOptions> = CommonToolsOptions & {
      */
     readonly port: number;
 
+    /**
+     * OAuth configuration for social login providers
+     * 
+     * Note: These are optional and only needed if you want to enable OAuth login
+     */
+    readonly oauthConfig?: {
+        /**
+         * Session secret for cookie encryption
+         */
+        readonly sessionSecret: string;
+        
+        /**
+         * Base URL for OAuth callbacks (e.g., "https://yourdomain.com")
+         */
+        readonly baseUrl: string;
+        
+        /**
+         * Facebook OAuth configuration
+         */
+        readonly facebook?: {
+            readonly clientId: string;
+            readonly clientSecret: string;
+        };
+        
+        /**
+         * Google OAuth configuration
+         */
+        readonly google?: {
+            readonly clientId: string;
+            readonly clientSecret: string;
+        };
+        
+        /**
+         * LinkedIn OAuth configuration
+         */
+        readonly linkedin?: {
+            readonly clientId: string;
+            readonly clientSecret: string;
+        };
+        
+        /**
+         * GitHub OAuth configuration
+         */
+        readonly github?: {
+            readonly clientId: string;
+            readonly clientSecret: string;
+        };
+    };
+
     /**
      * Creates execution tools the client
      *
@@ -125,6 +174,41 @@ export type ApplicationRemoteServerClientOptions<TCustomOptions> = {
     readonly customOptions?: TCustomOptions;
 };
 
+/**
+ * OAuth profile information from social login providers
+ */
+export type OAuthProfile = {
+    /**
+     * OAuth provider name
+     */
+    readonly provider: 'facebook' | 'google' | 'linkedin' | 'github';
+    
+    /**
+     * User ID from the OAuth provider
+     */
+    readonly id: string;
+    
+    /**
+     * User's display name
+     */
+    readonly displayName?: string;
+    
+    /**
+     * User's email address
+     */
+    readonly email?: string;
+    
+    /**
+     * User's profile photo URL
+     */
+    readonly photoUrl?: string;
+    
+    /**
+     * Raw profile data from the OAuth provider
+     */
+    readonly raw: any;
+};
+
 /**
  * Login request for the application mode
  */
@@ -145,6 +229,13 @@ export type LoginRequest = {
      * Password of the user
      */
     readonly password: string_password;
+    
+    /**
+     * OAuth profile information (when using social login)
+     * 
+     * Note: When this is provided, username/password are ignored
+     */
+    readonly oauthProfile?: OAuthProfile;
 
     /**
      * Request object from express if you want to access some request data for example headers, IP address, etc.

From 72e3842f2005f601622077d9662a9c5540e5bb32 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 1 Jul 2025 14:46:44 +0000
Subject: [PATCH 3/3] Add OAuth CLI command and comprehensive documentation

Co-authored-by: hejny <23721952+hejny@users.noreply.github.com>
---
 docs/oauth-integration.md           | 303 ++++++++++++++++++++++++++++
 package-lock.json                   | 182 ++++++++++++++---
 package.json                        |   1 +
 src/cli/cli-commands/oauth-login.ts | 186 +++++++++++++++++
 src/cli/promptbookCli.ts            |   2 +
 5 files changed, 650 insertions(+), 24 deletions(-)
 create mode 100644 docs/oauth-integration.md
 create mode 100644 src/cli/cli-commands/oauth-login.ts

diff --git a/docs/oauth-integration.md b/docs/oauth-integration.md
new file mode 100644
index 0000000000..b5e5d81418
--- /dev/null
+++ b/docs/oauth-integration.md
@@ -0,0 +1,303 @@
+# OAuth Social Login Integration
+
+This document explains how to set up and use OAuth social login with Promptbook, enabling users to authenticate via Facebook, Google, LinkedIn, and GitHub without manually configuring API keys.
+
+## Overview
+
+The OAuth integration allows users to:
+- Authenticate via popular social platforms
+- Use Promptbook without manually entering API keys
+- Get started in under 3 minutes from landing page to working system
+- Seamlessly integrate with existing authentication systems
+
+## Supported Providers
+
+- ✅ **Facebook** - Full OAuth 2.0 support
+- ✅ **Google** - OAuth 2.0 with profile and email access
+- ✅ **LinkedIn** - OAuth 2.0 with profile information  
+- ✅ **GitHub** - OAuth 2.0 with user data and email
+
+## Server Setup
+
+### 1. Install Dependencies
+
+OAuth dependencies are included when you install Promptbook:
+
+```bash
+npm install promptbook-engine
+# OAuth dependencies (passport, express-session, etc.) are automatically included
+```
+
+### 2. Configure OAuth Apps
+
+Set up OAuth applications with each provider:
+
+#### Facebook OAuth App
+1. Go to [Facebook Developers](https://developers.facebook.com/)
+2. Create a new app
+3. Get Client ID and Client Secret
+4. Set redirect URI: `http://localhost:4444/auth/facebook/callback`
+
+#### Google OAuth App  
+1. Go to [Google Cloud Console](https://console.developers.google.com/)
+2. Create OAuth 2.0 credentials
+3. Get Client ID and Client Secret
+4. Set redirect URI: `http://localhost:4444/auth/google/callback`
+
+#### LinkedIn OAuth App
+1. Go to [LinkedIn Developers](https://www.linkedin.com/developers/)
+2. Create an app
+3. Get Client ID and Client Secret  
+4. Set redirect URI: `http://localhost:4444/auth/linkedin/callback`
+
+#### GitHub OAuth App
+1. Go to [GitHub Developer Settings](https://github.com/settings/developers)
+2. Create OAuth App
+3. Get Client ID and Client Secret
+4. Set redirect URI: `http://localhost:4444/auth/github/callback`
+
+### 3. Environment Configuration
+
+Create a `.env` file with your OAuth credentials:
+
+```env
+SESSION_SECRET=your-random-secret-key-here
+BASE_URL=http://localhost:4444
+
+# Facebook OAuth App
+FACEBOOK_CLIENT_ID=your-facebook-app-id
+FACEBOOK_CLIENT_SECRET=your-facebook-app-secret
+
+# Google OAuth App  
+GOOGLE_CLIENT_ID=your-google-client-id
+GOOGLE_CLIENT_SECRET=your-google-client-secret
+
+# LinkedIn OAuth App
+LINKEDIN_CLIENT_ID=your-linkedin-client-id
+LINKEDIN_CLIENT_SECRET=your-linkedin-client-secret
+
+# GitHub OAuth App
+GITHUB_CLIENT_ID=your-github-client-id
+GITHUB_CLIENT_SECRET=your-github-client-secret
+```
+
+### 4. Server Implementation
+
+```typescript
+import { startRemoteServer } from '@promptbook/remote-server';
+import { createPipelineCollection } from '@promptbook/core';
+
+const server = startRemoteServer({
+    port: 4444,
+    isApplicationModeAllowed: true,
+    collection: await createPipelineCollection(/* your books */),
+    
+    // OAuth configuration
+    oauthConfig: {
+        sessionSecret: process.env.SESSION_SECRET!,
+        baseUrl: process.env.BASE_URL!,
+        facebook: process.env.FACEBOOK_CLIENT_ID ? {
+            clientId: process.env.FACEBOOK_CLIENT_ID,
+            clientSecret: process.env.FACEBOOK_CLIENT_SECRET!,
+        } : undefined,
+        google: process.env.GOOGLE_CLIENT_ID ? {
+            clientId: process.env.GOOGLE_CLIENT_ID,
+            clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
+        } : undefined,
+        linkedin: process.env.LINKEDIN_CLIENT_ID ? {
+            clientId: process.env.LINKEDIN_CLIENT_ID,
+            clientSecret: process.env.LINKEDIN_CLIENT_SECRET!,
+        } : undefined,
+        github: process.env.GITHUB_CLIENT_ID ? {
+            clientId: process.env.GITHUB_CLIENT_ID,
+            clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+        } : undefined,
+    },
+    
+    // Custom login handler
+    async login(loginRequest) {
+        const { username, password, oauthProfile, appId } = loginRequest;
+        
+        // Handle OAuth login
+        if (oauthProfile) {
+            // Verify user, create account if needed, generate tokens
+            return {
+                isSuccess: true,
+                message: `OAuth login successful via ${oauthProfile.provider}`,
+                identification: {
+                    isAnonymous: false,
+                    appId: appId || 'oauth-app',
+                    userId: `${oauthProfile.provider}-${oauthProfile.id}`,
+                    userToken: 'your-jwt-token-here',
+                    customOptions: {
+                        oauthProvider: oauthProfile.provider,
+                        userEmail: oauthProfile.email,
+                        userDisplayName: oauthProfile.displayName,
+                    },
+                },
+            };
+        }
+        
+        // Handle regular username/password login
+        // ... your existing authentication logic
+    },
+});
+```
+
+## OAuth Endpoints
+
+Once configured, your server will expose these OAuth endpoints:
+
+- `GET /auth/facebook` - Initiate Facebook OAuth
+- `GET /auth/google` - Initiate Google OAuth  
+- `GET /auth/linkedin` - Initiate LinkedIn OAuth
+- `GET /auth/github` - Initiate GitHub OAuth
+- `GET /auth/*/callback` - OAuth callback handlers
+- `GET /auth/success` - Success page
+- `GET /auth/error` - Error page
+
+## CLI Usage
+
+Use the new OAuth login command for seamless CLI authentication:
+
+```bash
+# OAuth login with default provider (Google)
+ptbk oauth-login
+
+# Login with specific provider
+ptbk oauth-login --provider facebook
+ptbk oauth-login --provider google  
+ptbk oauth-login --provider linkedin
+ptbk oauth-login --provider github
+
+# Custom server URL
+ptbk oauth-login --provider google --server https://your-server.com
+
+# Custom app ID
+ptbk oauth-login --provider google --app-id my-cli-app
+```
+
+The CLI command will:
+1. Start a local callback server
+2. Open your browser to the OAuth provider
+3. Handle the authentication flow
+4. Store credentials securely for future use
+5. Enable API-key-free usage of Promptbook CLI
+
+## Frontend Integration
+
+For web applications, redirect users to OAuth endpoints:
+
+```html
+<!-- OAuth login buttons -->
+<a href="/auth/facebook?appId=my-app">Login with Facebook</a>
+<a href="/auth/google?appId=my-app">Login with Google</a>
+<a href="/auth/linkedin?appId=my-app">Login with LinkedIn</a>
+<a href="/auth/github?appId=my-app">Login with GitHub</a>
+```
+
+Or use popup windows with JavaScript:
+
+```javascript
+function loginWithOAuth(provider) {
+    const popup = window.open(
+        `/auth/${provider}?appId=my-app`,
+        'oauth-login',
+        'width=500,height=600'
+    );
+    
+    window.addEventListener('message', (event) => {
+        if (event.data?.type === 'oauth_success') {
+            popup.close();
+            // Handle successful login
+            console.log('Login successful:', event.data.message);
+        } else if (event.data?.type === 'oauth_error') {
+            popup.close();
+            // Handle login error
+            console.error('Login failed:', event.data.message);
+        }
+    });
+}
+```
+
+## OAuth Profile Data
+
+The `OAuthProfile` contains user information from the social provider:
+
+```typescript
+interface OAuthProfile {
+    provider: 'facebook' | 'google' | 'linkedin' | 'github';
+    id: string;                    // Provider user ID
+    displayName?: string;          // User's display name
+    email?: string;               // User's email address  
+    photoUrl?: string;            // Profile photo URL
+    raw: any;                     // Raw profile data from provider
+}
+```
+
+## Security Considerations
+
+- **HTTPS in Production**: Always use HTTPS for OAuth in production
+- **Secure Session Secret**: Use a strong, random session secret
+- **Validate Redirect URIs**: Ensure OAuth apps have correct callback URLs
+- **Token Security**: Store user tokens securely (use JWT with proper signing)
+- **Rate Limiting**: Implement rate limiting for OAuth endpoints
+- **User Validation**: Always validate OAuth profile data
+
+## Troubleshooting
+
+### Common Issues
+
+1. **OAuth App Not Configured**
+   - Verify CLIENT_ID and CLIENT_SECRET environment variables
+   - Check OAuth app redirect URIs match your server URLs
+
+2. **Session Errors**
+   - Ensure SESSION_SECRET is set
+   - Check that cookies are enabled in browser
+
+3. **Callback URL Mismatch**
+   - Verify redirect URIs in OAuth app settings
+   - Ensure BASE_URL matches your server's actual URL
+
+4. **Provider-Specific Issues**
+   - **Facebook**: Ensure app is live or user is added as test user
+   - **Google**: Check that OAuth consent screen is configured
+   - **LinkedIn**: Verify required permissions are requested
+   - **GitHub**: Ensure user:email scope is included
+
+### Debug Mode
+
+Enable verbose logging for OAuth troubleshooting:
+
+```typescript
+const server = startRemoteServer({
+    // ... other config
+    isVerbose: true,
+});
+```
+
+## Examples
+
+See the complete examples in:
+- `examples/usage/remote-server/remote-server-with-oauth.ts` - Full server setup
+- `examples/usage/remote-server/oauth-test.html` - Frontend testing page
+
+## Roadmap Integration
+
+This OAuth implementation addresses key roadmap items:
+
+- ✅ **Working without need to pass API key** - Users authenticate via OAuth
+- ✅ **Make ad-hoc login to Promptbook.studio** - Social login integration
+- ✅ **Facebook** - Fully working OAuth integration
+- ✅ **Google** - Fully working OAuth integration  
+- ✅ **LinkedIn** - Fully working OAuth integration
+- ✅ **GitHub** - Fully working OAuth integration
+
+## Next Steps
+
+1. **Test Integration**: Use the provided examples to test OAuth flows
+2. **Production Deployment**: Configure OAuth apps for production URLs
+3. **User Database**: Integrate with your user management system
+4. **Token Management**: Implement proper JWT handling and refresh logic
+5. **Analytics**: Track OAuth usage and conversion metrics
\ No newline at end of file
diff --git a/package-lock.json b/package-lock.json
index 3623cb1abf..d8d8884a4f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -42,6 +42,7 @@
                 "lorem-ipsum": "2.0.8",
                 "markitdown-ts": "0.0.4",
                 "moment": "2.30.1",
+                "open": "^10.1.2",
                 "openai": "4.63.0",
                 "papaparse": "5.4.1",
                 "passport": "^0.7.0",
@@ -4790,6 +4791,21 @@
             "license": "MIT",
             "peer": true
         },
+        "node_modules/bundle-name": {
+            "version": "4.1.0",
+            "resolved": "https://registry.npmjs.org/bundle-name/-/bundle-name-4.1.0.tgz",
+            "integrity": "sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q==",
+            "license": "MIT",
+            "dependencies": {
+                "run-applescript": "^7.0.0"
+            },
+            "engines": {
+                "node": ">=18"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
+            }
+        },
         "node_modules/busboy": {
             "version": "1.6.0",
             "resolved": "https://registry.npmjs.org/busboy/-/busboy-1.6.0.tgz",
@@ -6101,6 +6117,34 @@
                 "node": ">=0.10.0"
             }
         },
+        "node_modules/default-browser": {
+            "version": "5.2.1",
+            "resolved": "https://registry.npmjs.org/default-browser/-/default-browser-5.2.1.tgz",
+            "integrity": "sha512-WY/3TUME0x3KPYdRRxEJJvXRHV4PyPoUsxtZa78lwItwRQRHhd2U9xOscaT/YTf8uCXIAjeJOFBVEh/7FtD8Xg==",
+            "license": "MIT",
+            "dependencies": {
+                "bundle-name": "^4.1.0",
+                "default-browser-id": "^5.0.0"
+            },
+            "engines": {
+                "node": ">=18"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
+            }
+        },
+        "node_modules/default-browser-id": {
+            "version": "5.0.0",
+            "resolved": "https://registry.npmjs.org/default-browser-id/-/default-browser-id-5.0.0.tgz",
+            "integrity": "sha512-A6p/pu/6fyBcA1TRz/GqWYPViplrftcW2gZC9q79ngNCKAeR/X3gcEdXQHl4KNXV+3wgIJ1CPkJQ3IHM6lcsyA==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=18"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
+            }
+        },
         "node_modules/define-data-property": {
             "version": "1.1.4",
             "resolved": "https://registry.npmjs.org/define-data-property/-/define-data-property-1.1.4.tgz",
@@ -6120,13 +6164,15 @@
             }
         },
         "node_modules/define-lazy-prop": {
-            "version": "2.0.0",
-            "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-2.0.0.tgz",
-            "integrity": "sha512-Ds09qNh8yw3khSjiJjiUInaGX9xlqZDY7JVryGxdxV7NPeuqQfplOpQ66yJFZut3jLa5zOwkXw1g9EI2uKh4Og==",
-            "dev": true,
+            "version": "3.0.0",
+            "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-3.0.0.tgz",
+            "integrity": "sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg==",
             "license": "MIT",
             "engines": {
-                "node": ">=8"
+                "node": ">=12"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
             }
         },
         "node_modules/define-properties": {
@@ -8717,16 +8763,15 @@
             }
         },
         "node_modules/is-docker": {
-            "version": "2.2.1",
-            "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz",
-            "integrity": "sha512-F+i2BKsFrH66iaUFc0woD8sLy8getkwTwtOBjvs56Cx4CgJDeKQeqfz8wAYiSb8JOprWhHH5p77PbmYCvvUuXQ==",
-            "dev": true,
+            "version": "3.0.0",
+            "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-3.0.0.tgz",
+            "integrity": "sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ==",
             "license": "MIT",
             "bin": {
                 "is-docker": "cli.js"
             },
             "engines": {
-                "node": ">=8"
+                "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
             },
             "funding": {
                 "url": "https://github.com/sponsors/sindresorhus"
@@ -8785,6 +8830,24 @@
                 "node": ">=0.10.0"
             }
         },
+        "node_modules/is-inside-container": {
+            "version": "1.0.0",
+            "resolved": "https://registry.npmjs.org/is-inside-container/-/is-inside-container-1.0.0.tgz",
+            "integrity": "sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA==",
+            "license": "MIT",
+            "dependencies": {
+                "is-docker": "^3.0.0"
+            },
+            "bin": {
+                "is-inside-container": "cli.js"
+            },
+            "engines": {
+                "node": ">=14.16"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
+            }
+        },
         "node_modules/is-number": {
             "version": "7.0.0",
             "resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz",
@@ -8848,16 +8911,18 @@
             }
         },
         "node_modules/is-wsl": {
-            "version": "2.2.0",
-            "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz",
-            "integrity": "sha512-fKzAra0rGJUUBwGBgNkHZuToZcn+TtXHpeCgmkMJMMYx1sQDYaCSyjJBSCa2nH1DGm7s3n1oBnohoVTBaN7Lww==",
-            "dev": true,
+            "version": "3.1.0",
+            "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-3.1.0.tgz",
+            "integrity": "sha512-UcVfVfaK4Sc4m7X3dUSoHoozQGBEFeDC+zVo06t98xe8CzHSZZBekNXH+tu0NalHolcJ/QAGqS46Hef7QXBIMw==",
             "license": "MIT",
             "dependencies": {
-                "is-docker": "^2.0.0"
+                "is-inside-container": "^1.0.0"
             },
             "engines": {
-                "node": ">=8"
+                "node": ">=16"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
             }
         },
         "node_modules/isarray": {
@@ -10948,18 +11013,18 @@
             }
         },
         "node_modules/open": {
-            "version": "8.4.2",
-            "resolved": "https://registry.npmjs.org/open/-/open-8.4.2.tgz",
-            "integrity": "sha512-7x81NCL719oNbsq/3mh+hVrAWmFuEYUqrq/Iw3kUzH8ReypT9QQ0BLoJS7/G9k6N81XjW4qHWtjWwe/9eLy1EQ==",
-            "dev": true,
+            "version": "10.1.2",
+            "resolved": "https://registry.npmjs.org/open/-/open-10.1.2.tgz",
+            "integrity": "sha512-cxN6aIDPz6rm8hbebcP7vrQNhvRcveZoJU72Y7vskh4oIm+BZwBECnx5nTmrlres1Qapvx27Qo1Auukpf8PKXw==",
             "license": "MIT",
             "dependencies": {
-                "define-lazy-prop": "^2.0.0",
-                "is-docker": "^2.1.1",
-                "is-wsl": "^2.2.0"
+                "default-browser": "^5.2.1",
+                "define-lazy-prop": "^3.0.0",
+                "is-inside-container": "^1.0.0",
+                "is-wsl": "^3.1.0"
             },
             "engines": {
-                "node": ">=12"
+                "node": ">=18"
             },
             "funding": {
                 "url": "https://github.com/sponsors/sindresorhus"
@@ -12269,6 +12334,63 @@
                 }
             }
         },
+        "node_modules/rollup-plugin-visualizer/node_modules/define-lazy-prop": {
+            "version": "2.0.0",
+            "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-2.0.0.tgz",
+            "integrity": "sha512-Ds09qNh8yw3khSjiJjiUInaGX9xlqZDY7JVryGxdxV7NPeuqQfplOpQ66yJFZut3jLa5zOwkXw1g9EI2uKh4Og==",
+            "dev": true,
+            "license": "MIT",
+            "engines": {
+                "node": ">=8"
+            }
+        },
+        "node_modules/rollup-plugin-visualizer/node_modules/is-docker": {
+            "version": "2.2.1",
+            "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz",
+            "integrity": "sha512-F+i2BKsFrH66iaUFc0woD8sLy8getkwTwtOBjvs56Cx4CgJDeKQeqfz8wAYiSb8JOprWhHH5p77PbmYCvvUuXQ==",
+            "dev": true,
+            "license": "MIT",
+            "bin": {
+                "is-docker": "cli.js"
+            },
+            "engines": {
+                "node": ">=8"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
+            }
+        },
+        "node_modules/rollup-plugin-visualizer/node_modules/is-wsl": {
+            "version": "2.2.0",
+            "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz",
+            "integrity": "sha512-fKzAra0rGJUUBwGBgNkHZuToZcn+TtXHpeCgmkMJMMYx1sQDYaCSyjJBSCa2nH1DGm7s3n1oBnohoVTBaN7Lww==",
+            "dev": true,
+            "license": "MIT",
+            "dependencies": {
+                "is-docker": "^2.0.0"
+            },
+            "engines": {
+                "node": ">=8"
+            }
+        },
+        "node_modules/rollup-plugin-visualizer/node_modules/open": {
+            "version": "8.4.2",
+            "resolved": "https://registry.npmjs.org/open/-/open-8.4.2.tgz",
+            "integrity": "sha512-7x81NCL719oNbsq/3mh+hVrAWmFuEYUqrq/Iw3kUzH8ReypT9QQ0BLoJS7/G9k6N81XjW4qHWtjWwe/9eLy1EQ==",
+            "dev": true,
+            "license": "MIT",
+            "dependencies": {
+                "define-lazy-prop": "^2.0.0",
+                "is-docker": "^2.1.1",
+                "is-wsl": "^2.2.0"
+            },
+            "engines": {
+                "node": ">=12"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
+            }
+        },
         "node_modules/rollup-plugin-visualizer/node_modules/source-map": {
             "version": "0.7.4",
             "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.7.4.tgz",
@@ -12285,6 +12407,18 @@
             "integrity": "sha512-TrEMa7JGdVm0UThDJSx7ddw5nVm3UJS9o9CCIZ72B1vSyEZoziDqBYP3XIoi/12lKrJR8rE3jeFHMok2F/Mnsg==",
             "license": "MIT"
         },
+        "node_modules/run-applescript": {
+            "version": "7.0.0",
+            "resolved": "https://registry.npmjs.org/run-applescript/-/run-applescript-7.0.0.tgz",
+            "integrity": "sha512-9by4Ij99JUr/MCFBUkDKLWK3G9HVXmabKz9U5MlIAIuvuzkiOicRYs8XJLxX+xahD+mLiiCYDqF9dKAgtzKP1A==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=18"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
+            }
+        },
         "node_modules/run-parallel": {
             "version": "1.2.0",
             "resolved": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz",
diff --git a/package.json b/package.json
index 449505e897..96a1d32ddb 100644
--- a/package.json
+++ b/package.json
@@ -262,6 +262,7 @@
         "lorem-ipsum": "2.0.8",
         "markitdown-ts": "0.0.4",
         "moment": "2.30.1",
+        "open": "^10.1.2",
         "openai": "4.63.0",
         "papaparse": "5.4.1",
         "passport": "^0.7.0",
diff --git a/src/cli/cli-commands/oauth-login.ts b/src/cli/cli-commands/oauth-login.ts
new file mode 100644
index 0000000000..415bc1f3c0
--- /dev/null
+++ b/src/cli/cli-commands/oauth-login.ts
@@ -0,0 +1,186 @@
+import type {
+    Command as Program /* <- Note: [🔸] Using Program because Command is misleading name */,
+} from 'commander';
+import open from 'open';
+import spaceTrim from 'spacetrim';
+import { $provideLlmToolsForCli } from '../common/$provideLlmToolsForCli';
+import { handleActionErrors } from './common/handleActionErrors';
+
+/**
+ * Initializes `oauth-login` command for Promptbook CLI utilities
+ * 
+ * This command opens the user's default browser to initiate OAuth login
+ * with social providers (Facebook, Google, LinkedIn, GitHub)
+ *
+ * Note: `$` is used to indicate that this function is not a pure function - it registers a command in the CLI
+ *
+ * @private internal function of `promptbookCli`
+ */
+export function $initializeOAuthLoginCommand(program: Program) {
+    const oauthLoginCommand = program.command('oauth-login');
+    oauthLoginCommand.description(
+        spaceTrim(`
+            Login to Promptbook via OAuth (social login)
+            
+            Opens your browser to authenticate with Facebook, Google, LinkedIn, or GitHub.
+            This eliminates the need to manually configure API keys.
+        `),
+    );
+
+    oauthLoginCommand.option(
+        '--provider <provider>',
+        'OAuth provider to use (facebook, google, linkedin, github)',
+        'google'
+    );
+    
+    oauthLoginCommand.option(
+        '--server <url>',
+        'Promptbook server URL',
+        'https://promptbook.studio'
+    );
+    
+    oauthLoginCommand.option(
+        '--app-id <appId>',
+        'Application ID for authentication',
+        'cli'
+    );
+    
+    oauthLoginCommand.option(
+        '--port <port>',
+        'Local port to listen for OAuth callback',
+        '8080'
+    );
+
+    oauthLoginCommand.action(
+        handleActionErrors(async (options) => {
+            const { provider, server, appId, port } = options;
+            
+            console.info(`🚀 Starting OAuth login with ${provider}`);
+            console.info(`📡 Server: ${server}`);
+            console.info(`🆔 App ID: ${appId}`);
+            console.info('');
+            
+            // Validate provider
+            const validProviders = ['facebook', 'google', 'linkedin', 'github'];
+            if (!validProviders.includes(provider)) {
+                console.error(`❌ Invalid provider: ${provider}`);
+                console.error(`Valid providers: ${validProviders.join(', ')}`);
+                process.exit(1);
+            }
+            
+            // Start local callback server
+            const express = await import('express');
+            const app = express.default();
+            let authResult: any = null;
+            
+            app.get('/callback', (req, res) => {
+                const { success, error, token, message } = req.query;
+                
+                if (success === 'true') {
+                    authResult = { success: true, token, message };
+                    res.send(`
+                        <html>
+                            <head><title>Login Successful</title></head>
+                            <body>
+                                <h1>✅ OAuth Login Successful!</h1>
+                                <p>You can now close this browser window and return to the CLI.</p>
+                                <script>window.close();</script>
+                            </body>
+                        </html>
+                    `);
+                } else {
+                    authResult = { success: false, error: error || 'Unknown error', message };
+                    res.send(`
+                        <html>
+                            <head><title>Login Failed</title></head>
+                            <body>
+                                <h1>❌ OAuth Login Failed</h1>
+                                <p>Error: ${error || 'Unknown error'}</p>
+                                <p>Please try again or contact support.</p>
+                                <script>window.close();</script>
+                            </body>
+                        </html>
+                    `);
+                }
+            });
+            
+            const localServer = app.listen(parseInt(port), () => {
+                console.info(`🔗 Local callback server started on http://localhost:${port}`);
+            });
+            
+            try {
+                // Construct OAuth URL
+                const callbackUrl = `http://localhost:${port}/callback`;
+                const oauthUrl = `${server}/auth/${provider}?appId=${encodeURIComponent(appId)}&redirect=${encodeURIComponent(callbackUrl)}`;
+                
+                console.info(`🌐 Opening browser for ${provider} OAuth...`);
+                console.info(`📍 OAuth URL: ${oauthUrl}`);
+                console.info('');
+                console.info('Please complete the authentication in your browser...');
+                
+                // Open browser
+                await open(oauthUrl);
+                
+                // Wait for callback
+                await new Promise<void>((resolve) => {
+                    const checkInterval = setInterval(() => {
+                        if (authResult) {
+                            clearInterval(checkInterval);
+                            resolve();
+                        }
+                    }, 500);
+                    
+                    // Timeout after 5 minutes
+                    setTimeout(() => {
+                        if (!authResult) {
+                            clearInterval(checkInterval);
+                            authResult = { 
+                                success: false, 
+                                error: 'timeout', 
+                                message: 'Authentication timed out after 5 minutes' 
+                            };
+                            resolve();
+                        }
+                    }, 5 * 60 * 1000);
+                });
+                
+                // Close local server
+                localServer.close();
+                
+                if (authResult.success) {
+                    console.info('✅ OAuth authentication successful!');
+                    console.info(`🔑 Token: ${authResult.token}`);
+                    console.info(`💬 Message: ${authResult.message}`);
+                    
+                    // Store credentials for future CLI usage
+                    console.info('');
+                    console.info('💾 Saving authentication credentials...');
+                    
+                    // TODO: Store the OAuth token securely for future CLI operations
+                    // This would typically go into a config file or secure credential store
+                    
+                    console.info('✨ Setup complete! You can now use Promptbook CLI without API keys.');
+                    process.exit(0);
+                } else {
+                    console.error('❌ OAuth authentication failed!');
+                    console.error(`💥 Error: ${authResult.error}`);
+                    console.error(`💬 Message: ${authResult.message}`);
+                    process.exit(1);
+                }
+                
+            } catch (error) {
+                console.error('❌ OAuth login failed:', error);
+                localServer.close();
+                process.exit(1);
+            }
+        }),
+    );
+}
+
+/**
+ * TODO: Implement secure token storage
+ * TODO: Integrate with existing CLI authentication system
+ * TODO: Add support for refreshing expired tokens
+ * Note: [💞] Ignore a discrepancy between file name and entity name
+ * Note: [🟡] Code in this file should never be published outside of `@promptbook/cli`
+ */
\ No newline at end of file
diff --git a/src/cli/promptbookCli.ts b/src/cli/promptbookCli.ts
index 5c8855a5f7..a2b86750ea 100644
--- a/src/cli/promptbookCli.ts
+++ b/src/cli/promptbookCli.ts
@@ -11,6 +11,7 @@ import { $initializeListModelsCommand } from './cli-commands/list-models';
 import { $initializeListScrapersCommand } from './cli-commands/list-scrapers';
 import { $initializeLoginCommand } from './cli-commands/login';
 import { $initializeMakeCommand } from './cli-commands/make';
+import { $initializeOAuthLoginCommand } from './cli-commands/oauth-login';
 import { $initializePrettifyCommand } from './cli-commands/prettify';
 import { $initializeRunCommand } from './cli-commands/run';
 import { $initializeStartServerCommand } from './cli-commands/start-server';
@@ -54,6 +55,7 @@ export async function promptbookCli(): Promise<void> {
     $initializeAboutCommand(program);
     $initializeRunCommand(program);
     $initializeLoginCommand(program);
+    $initializeOAuthLoginCommand(program);
     $initializeHelloCommand(program);
     $initializeMakeCommand(program);
     $initializePrettifyCommand(program);
