@andyqiu/codeforge 0.5.13 → 0.5.14

package/dist/index.js

@@ -21355,23 +21355,27 @@ var RISK_PATTERNS = [
   },
   {
     tag: "write_secrets",
+    kinds: ["bash"],
     re: /(\.env(?:\.\w+)?|id_[edr]sa|\.ssh\/id_|\.pem|\.p12|secret\.json)/i,
-    matchOn: ["command", "filePath", "path"]
+    matchOn: ["command"]
   },
   {
     tag: "write_etc",
     kinds: ["bash", "edit"],
-    re: /(?:^|\s|"|')\/etc\//
+    re: /(?:^|\s|"|')\/etc\//,
+    matchOn: ["command", "filePath", "path"]
   },
   {
     tag: "write_usr",
     kinds: ["bash", "edit"],
-    re: /(?:^|\s|"|')\/usr\//
+    re: /(?:^|\s|"|')\/usr\//,
+    matchOn: ["command", "filePath", "path"]
   },
   {
     tag: "write_root_home",
     kinds: ["bash", "edit"],
-    re: /(?:^|\s|"|')(\/root|\/home\/root)\//
+    re: /(?:^|\s|"|')(\/root|\/home\/root)\//,
+    matchOn: ["command", "filePath", "path"]
   },
   {
     tag: "internal_url",
@@ -21774,7 +21778,7 @@ import * as zlib from "node:zlib";
 // lib/version-injected.ts
 function getInjectedVersion() {
   try {
-    const v = "0.5.13";
+    const v = "0.5.14";
     if (typeof v === "string" && /^\d+\.\d+\.\d+/.test(v)) {
       return v;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@andyqiu/codeforge",
-  "version": "0.5.13",
+  "version": "0.5.14",
   "description": "CodeForge — opencode 的零侵入扩展包",
   "type": "module",
   "private": false,

package/scripts/sync-agent-models.mjs

@@ -25,6 +25,7 @@
 import { promises as fs } from "node:fs"
 import * as path from "node:path"
 import * as url from "node:url"
+import { syncToGlobalOpencode } from "./dev-sync.mjs"
 
 const args = new Set(process.argv.slice(2))
 const CHECK = args.has("--check")
@@ -99,6 +100,13 @@ async function main() {
       process.exit(1)
     }
   }
+
+  // 写盘完成后，把更新后的 agents/*.md 同步到 ~/.config/opencode/agents/
+  // 仅在非 DRY/CHECK 模式且有 .codeforge/.dev-marker 时生效（dev-sync.mjs 内部检查 marker）
+  if (!DRY && summary.changed.length > 0) {
+    console.log("[sync-models] 同步已更新 agents/*.md -> 全局 opencode (ADR:dev-sync-to-global)")
+    await syncToGlobalOpencode({ projectRoot: ROOT, dryRun: false })
+  }
 }
 
 /**