@ax0l0tl/agent-governance-opencode 4.0.4 → 4.0.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ax0l0tl/agent-governance-opencode",
-  "version": "4.0.4",
+  "version": "4.0.6",
   "description": "Public Preview — OpenCode CLI governance plugin for Agent Governance Toolkit developer protection policies",
   "type": "module",
   "main": "src/index.mjs",
@@ -42,8 +42,7 @@
   },
   "homepage": "https://github.com/microsoft/agent-governance-toolkit/tree/main/agent-governance-opencode",
   "dependencies": {
-    "@microsoft/agent-governance-sdk": "3.7.0",
-    "@opencode-ai/plugin": "1.17.1"
+    "@microsoft/agent-governance-sdk": "3.7.0"
   },
   "engines": {
     "node": ">=22.0.0"

package/src/index.mjs

@@ -1,10 +1,8 @@
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT License.
 
-import { appendFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import { tool } from "@opencode-ai/plugin";
+import { appendFileSync } from "fs";
+import { dirname, join } from "path";
 import {
   checkArbitraryText,
   evaluateOpenCodePrompt,
@@ -82,12 +80,6 @@ export const AgtGovernance = async (ctx) => {
       // OpenCode emits a wide range of events. Only inspect prompt-bearing
       // events; ignore the rest cheaply.
       const prompt = extractPromptFromEvent(event);
-      // TODO(temporary): remove after verifying which event types reach this hook.
-      try {
-        const logPath = join(homedir(), ".config", "opencode", "agt", "event-debug.ndjson");
-        const entry = JSON.stringify({ ts: new Date().toISOString(), type: event?.type ?? null, covered: Boolean(prompt), event }) + "\n";
-        appendFileSync(logPath, entry, "utf8");
-      } catch { /* best-effort */ }
       if (!prompt) {
         return;
       }
@@ -98,6 +90,13 @@ export const AgtGovernance = async (ctx) => {
         sessionId: event?.properties?.sessionID ?? event?.properties?.sessionId,
       });
       if (result.effect === "deny") {
+        // TEMP: file log to verify event hook fires on user input
+        try {
+          const entry = `[AGT DENY] ${new Date().toISOString()} sessionId=${event?.properties?.sessionID ?? event?.properties?.sessionId ?? "unknown"} reason=${result.reason}\n`;
+          appendFileSync(join(dirname(state.auditPath), "agt-deny.log"), entry, "utf8");
+        } catch {
+          // best-effort — do not suppress the deny
+        }
         throw new Error(result.reason || "AGT governance blocked the submitted prompt.");
       }
     },
@@ -159,9 +158,9 @@ export const AgtGovernance = async (ctx) => {
       agt_policy_check_text: {
         description:
           "Check text against AGT prompt, context-poisoning, and MCP-style threat detectors.",
-        args: {
-          text: tool.schema.string().describe("Text to inspect."),
-        },
+          args: {
+            text: { type: "string", description: "Text to inspect." },
+          },
         async execute(args) {
           const state = await getState();
           const text = typeof args?.text === "string" ? args.text : "";