@aexol/opencode-wizard 0.1.15 → 0.1.16

package/README.md

@@ -21,6 +21,7 @@ Useful commands:
 
 ```bash
 npm run typecheck
+npm run test
 npm run build
 npm run release:check
 ```
@@ -45,7 +46,7 @@ Use `skills.urls` only for public registries that are intentionally cacheable by
 
 ## Catalog discovery and auth bootstrap
 
-On chat/system-context startup, the plugin attempts to load the catalog automatically with the stored plugin auth at `~/.config/opencode/opencode-wizard.json` (`auth` field). If no valid plugin session exists, startup stays passive and reports that interactive fetch will bootstrap browser login when needed; it does not open the browser from system context.
+Catalog discovery uses the backend-issued plugin session token stored at `~/.config/opencode/opencode-wizard.json` (`auth` field); the plugin does not persist or send Microsoft/Entra tokens to GraphQL. If no valid plugin session exists, no-arg `opencode_wizard_published_skills_fetch`, explicit `opencode_wizard_status`, TUI status, and chat/system-context startup may start the browser Entra PKCE flow and exchange the callback for a fresh backend-issued plugin session.
 
 Call `opencode_wizard_published_skills_fetch` without `skill` or `skills` to manually bootstrap plugin login if needed and return catalog-only discovery output for the current directory scope.
 

package/dist/config.d.ts

@@ -0,0 +1,6 @@
+export declare const PUBLISHED_BACKEND_ORIGIN = "https://opencode-wizard.aexol.work";
+export declare const normalizeBackendOrigin: (value: string | undefined) => string | null;
+export declare const resolveBackendOriginFromValues: ({ environmentBackendOrigin, localBackendOrigin, }: {
+    environmentBackendOrigin?: string;
+    localBackendOrigin?: string;
+}) => string;

package/dist/config.js

@@ -0,0 +1,19 @@
+export const PUBLISHED_BACKEND_ORIGIN = 'https://opencode-wizard.aexol.work';
+export const normalizeBackendOrigin = value => {
+  if (!value) return null;
+  try {
+    const normalizedUrl = new URL(value);
+    return normalizedUrl.origin;
+  } catch {
+    return null;
+  }
+};
+export const resolveBackendOriginFromValues = ({
+  environmentBackendOrigin,
+  localBackendOrigin
+}) => {
+  const configuredBackendOrigin = normalizeBackendOrigin(environmentBackendOrigin) ?? normalizeBackendOrigin(localBackendOrigin);
+  if (configuredBackendOrigin) return configuredBackendOrigin;
+  return PUBLISHED_BACKEND_ORIGIN;
+};
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["PUBLISHED_BACKEND_ORIGIN","normalizeBackendOrigin","value","normalizedUrl","URL","origin","resolveBackendOriginFromValues","environmentBackendOrigin","localBackendOrigin","configuredBackendOrigin"],"sources":["../src/config.ts"],"sourcesContent":["export const PUBLISHED_BACKEND_ORIGIN = 'https://opencode-wizard.aexol.work';\n\nexport const normalizeBackendOrigin = (value: string | undefined): string | null => {\n  if (!value) return null;\n\n  try {\n    const normalizedUrl = new URL(value);\n    return normalizedUrl.origin;\n  } catch {\n    return null;\n  }\n};\n\nexport const resolveBackendOriginFromValues = ({\n  environmentBackendOrigin,\n  localBackendOrigin,\n}: {\n  environmentBackendOrigin?: string;\n  localBackendOrigin?: string;\n}): string => {\n  const configuredBackendOrigin =\n    normalizeBackendOrigin(environmentBackendOrigin) ?? normalizeBackendOrigin(localBackendOrigin);\n\n  if (configuredBackendOrigin) return configuredBackendOrigin;\n\n  return PUBLISHED_BACKEND_ORIGIN;\n};\n"],"mappings":"AAAA,OAAO,MAAMA,wBAAwB,GAAG,oCAAoC;AAE5E,OAAO,MAAMC,sBAAsB,GAAIC,KAAyB,IAAoB;EAClF,IAAI,CAACA,KAAK,EAAE,OAAO,IAAI;EAEvB,IAAI;IACF,MAAMC,aAAa,GAAG,IAAIC,GAAG,CAACF,KAAK,CAAC;IACpC,OAAOC,aAAa,CAACE,MAAM;EAC7B,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF,CAAC;AAED,OAAO,MAAMC,8BAA8B,GAAGA,CAAC;EAC7CC,wBAAwB;EACxBC;AAIF,CAAC,KAAa;EACZ,MAAMC,uBAAuB,GAC3BR,sBAAsB,CAACM,wBAAwB,CAAC,IAAIN,sBAAsB,CAACO,kBAAkB,CAAC;EAEhG,IAAIC,uBAAuB,EAAE,OAAOA,uBAAuB;EAE3D,OAAOT,wBAAwB;AACjC,CAAC","ignoreList":[]}

package/dist/server.d.ts

@@ -185,6 +185,11 @@ export type NativeSkillsUrlCompatibility = {
     guidance: string;
 };
 export declare const NATIVE_SKILLS_URL_COMPATIBILITY: NativeSkillsUrlCompatibility;
+type PublishedSkillsResult = {
+    directoryPath: string;
+    workspaceResolution: WorkspaceResolution;
+    fetchResult: FetchResult;
+};
 type PublishedSkillsIgnoreState = {
     scopeKey: string;
     userKey: string;
@@ -238,6 +243,7 @@ export declare const selectPublishedSkills: <TItem extends PublishedSkillCatalog
     selectedItems: TItem[];
     missingIdentifiers: string[];
 };
+export declare const buildSystemNote: (result: PublishedSkillsResult, config: ResolvedConfig, details: PublishedSkillDetail[]) => string | null;
 declare const toWorkspaceResolutionOutput: (resolution: WorkspaceResolution) => {
     requestedDirectory: string;
     repositoryRoot: string;

package/dist/server.js

@@ -6,6 +6,8 @@ import crypto from 'node:crypto';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
 import { URL, fileURLToPath } from 'node:url';
+import { resolveBackendOriginFromValues } from './config.js';
+import { deleteFileIfExists, readJsonFile, writePrivateJsonFile } from './storage.js';
 const execFileAsync = promisify(execFile);
 const MODULE_FILE_PATH = fileURLToPath(import.meta.url);
 const PACKAGE_ROOT_PATH = path.resolve(path.dirname(MODULE_FILE_PATH), '..');
@@ -14,7 +16,6 @@ const CACHE_TTL_MS = 30_000;
 const ROOT_SKILL_SEED_PATH = '.opencode/skills';
 const GLOBAL_CONFIG_PATH = path.join(os.homedir(), '.config', 'opencode', 'opencode-wizard.json');
 const LEGACY_AUTH_STATE_PATH = 'plugin/opencode-wizard/.generated/auth-state.json';
-const PUBLISHED_BACKEND_ORIGIN = 'https://opencode-wizard.aexol.work';
 const OIDC_ISSUER = 'https://login.microsoftonline.com/86f4caf4-0d6f-4682-9a06-ea57f3e4e76c/v2.0';
 const OIDC_CLIENT_ID = 'da963901-2375-442b-9e99-14e59f43eda2';
 const OIDC_CALLBACK_ORIGIN = 'http://localhost:24953';
@@ -307,20 +308,12 @@ const readLocalEnvValues = async startDirectory => {
     return new Map();
   }
 };
-const normalizeBackendOrigin = value => {
-  if (!value) return null;
-  try {
-    const normalizedUrl = new URL(value);
-    return normalizedUrl.origin;
-  } catch {
-    return null;
-  }
-};
 const resolveBackendOrigin = async worktree => {
   const envValues = await readLocalEnvValues(worktree);
-  const configuredBackendOrigin = normalizeBackendOrigin(process.env.OPENCODE_WIZARD_BACKEND_ORIGIN) ?? normalizeBackendOrigin(envValues.get('OPENCODE_WIZARD_BACKEND_ORIGIN'));
-  if (configuredBackendOrigin) return configuredBackendOrigin;
-  return PUBLISHED_BACKEND_ORIGIN;
+  return resolveBackendOriginFromValues({
+    environmentBackendOrigin: process.env.OPENCODE_WIZARD_BACKEND_ORIGIN,
+    localBackendOrigin: envValues.get('OPENCODE_WIZARD_BACKEND_ORIGIN')
+  });
 };
 const toWorkspaceSlug = value => {
   const normalized = value.trim().toLowerCase().replace(/[^a-z0-9-]+/gu, '-').replace(/^-+|-+$/gu, '');
@@ -436,26 +429,6 @@ const formatSkillLabel = item => {
   return item.skill.name;
 };
 const toFrontmatterString = value => JSON.stringify(value);
-const readJsonFile = async filePath => {
-  try {
-    const raw = await fs.readFile(filePath, 'utf8');
-    const parsed = JSON.parse(raw);
-    return parsed;
-  } catch {
-    return null;
-  }
-};
-const writeJsonFile = async (filePath, value) => {
-  await fs.mkdir(path.dirname(filePath), {
-    recursive: true
-  });
-  await fs.writeFile(filePath, `${JSON.stringify(value, null, 2)}\n`, 'utf8');
-};
-const deleteFileIfExists = async filePath => {
-  await fs.rm(filePath, {
-    force: true
-  });
-};
 const isRecord = value => {
   return typeof value === 'object' && value !== null && !Array.isArray(value);
 };
@@ -472,7 +445,7 @@ const readGlobalConfig = async configFile => {
   return {};
 };
 const writeGlobalConfig = async (configFile, config) => {
-  await writeJsonFile(configFile, config);
+  await writePrivateJsonFile(configFile, config);
 };
 const withoutLegacyPublishedSkillPreferences = config => {
   const {
@@ -833,7 +806,7 @@ const buildSkillDetailSnippetLine = detail => {
   const body = detail.markdownBody || detail.renderedContent || detail.markdownDocument;
   return `- ${detail.artifactName || detail.skillName}: ${truncateText(body, 700)}`;
 };
-const buildSystemNote = (result, config, details) => {
+export const buildSystemNote = (result, config, details) => {
   if (!result.fetchResult.ok) return null;
   const catalog = toPublishedSkillCatalog(result.fetchResult.payload);
   const skillNames = catalog.skills.map(skill => skill.artifactName || skill.skillName || skill.skillSlug);
@@ -844,7 +817,7 @@ const buildSystemNote = (result, config, details) => {
   const projectSkills = catalog.skills.filter(skill => skill.contextKind === 'project').slice(0, 5).map(buildSkillCatalogLine);
   const detailLines = details.slice(0, SYSTEM_NOTE_DETAIL_LIMIT).map(buildSkillDetailSnippetLine);
   const detailBlock = detailLines.length > 0 ? ` Loaded body snippets (capped):\n${truncateText(detailLines.join('\n'), SYSTEM_NOTE_DETAIL_CHAR_LIMIT)}` : '';
-  return [result.fetchResult.payload.workspace ? `opencode-wizard published skills are available from backend runtime delivery for workspace ${result.fetchResult.payload.workspace.slug}.` : 'opencode-wizard published global skills are available from backend runtime delivery; workspace-specific skills are unavailable because the workspace was not found.', `Current directory: ${result.directoryPath}.`, `Published skills for this scope: ${renderedSkillNames}${renderedCountSuffix}; counts: ${catalog.assignmentCounts.global} global, ${catalog.assignmentCounts.project} project, ${catalog.assignmentCounts.other} other.`, 'Catalog lines use short whenToUse guidance when available; fetch the full skill only when that guidance matches the task.', 'GLOBAL_CONTEXT skills are active context skills and are not project-installable; PROJECT_INSTALLABLE skills can be assigned globally or to project/workspace scopes; assignment rows decide which skills are active here.', globalSkills.length > 0 ? `Global context skills:\n${globalSkills.join('\n')}` : 'Global context skills: none.', projectSkills.length > 0 ? `Project-scoped active skills:\n${projectSkills.join('\n')}` : 'Project-scoped active skills: none.', detailBlock, 'Use opencode_wizard_published_skills_fetch for one or multiple skills.', `Root source seed path remains non-runtime input only: ${config.rootSkillSeedPath}/**.`].filter(line => line.length > 0).join(' ');
+  return [result.fetchResult.payload.workspace ? `Prefer opencode-wizard backend-published fetched skill bodies for scoped/private wizard skills in workspace ${result.fetchResult.payload.workspace.slug}.` : 'Prefer opencode-wizard backend-published global fetched skill bodies; workspace-specific skills are unavailable because the workspace was not found.', `Current directory: ${result.directoryPath}.`, `Published skills for this scope: ${renderedSkillNames}${renderedCountSuffix}; counts: ${catalog.assignmentCounts.global} global, ${catalog.assignmentCounts.project} project, ${catalog.assignmentCounts.other} other.`, 'Use catalog whenToUse guidance to decide applicability; when it matches the task, fetch full bodies with opencode_wizard_published_skills_fetch and prefer those fetched bodies for current scoped/private wizard guidance.', 'GLOBAL_CONTEXT skills are active context skills and are not project-installable; PROJECT_INSTALLABLE skills can be assigned globally or to project/workspace scopes; assignment rows decide which skills are active here.', globalSkills.length > 0 ? `Global context skills:\n${globalSkills.join('\n')}` : 'Global context skills: none.', projectSkills.length > 0 ? `Project-scoped active skills:\n${projectSkills.join('\n')}` : 'Project-scoped active skills: none.', detailBlock, 'Local/native sources can still complement wizard skills: .opencode/skills is source seed content, skills.urls is a public/static complement, and backend-published fetched bodies are preferred for private/scoped wizard guidance.', `Root source seed path remains seed/source content: ${config.rootSkillSeedPath}/**.`].filter(line => line.length > 0).join(' ');
 };
 const toWorkspaceResolutionOutput = resolution => ({
   requestedDirectory: resolution.requestedDirectory,