@cortexkit/aft-opencode 0.20.1 → 0.22.0

package/dist/lsp-auto-install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lsp-auto-install.d.ts","sourceRoot":"","sources":["../src/lsp-auto-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAsBH,+DAA+D;AAC/D,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,WAAW,EAAE,OAAO,CAAC;IACrB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,kGAAkG;IAClG,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,mFAAmF;IACnF,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gDAAgD;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;;;OAOG;IACH,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C;;;;;;;;;OASG;IACH,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAkDD,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM/D;AAwTD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,iBAAiB,EACzB,SAAS,GAAE,OAAO,KAAa,GAC9B,iBAAiB,CAwEnB"}
+{"version":3,"file":"lsp-auto-install.d.ts","sourceRoot":"","sources":["../src/lsp-auto-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAwBH,+DAA+D;AAC/D,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,WAAW,EAAE,OAAO,CAAC;IACrB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,kGAAkG;IAClG,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,mFAAmF;IACnF,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gDAAgD;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;;;OAOG;IACH,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C;;;;;;;;;OASG;IACH,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAkDD,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM/D;AA0WD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,iBAAiB,EACzB,SAAS,GAAE,OAAO,KAAa,GAC9B,iBAAiB,CAwEnB"}

package/dist/lsp-github-install.d.ts

@@ -40,6 +40,7 @@ export interface GithubInstallConfig {
     disabled: ReadonlySet<string>;
 }
 declare function assertAllowedDownloadUrl(rawUrl: string): URL;
+declare function downloadFile(url: string, destPath: string, fetchImpl: typeof fetch, assetSize?: number, signal?: AbortSignal): Promise<void>;
 /**
  * Recursively validate that every entry under `stagingRoot` is contained
  * within it (audit #3: zip-slip + symlink containment).
@@ -58,6 +59,16 @@ declare function assertAllowedDownloadUrl(rawUrl: string): URL;
  * Throws on any violation. The caller cleans up the staging dir.
  */
 export declare function validateExtraction(stagingRoot: string): void;
+/**
+ * Extract `archivePath` into `destDir` safely:
+ *
+ *   1. Stage extraction in `<destDir>.staging-<rand>/`.
+ *   2. Run the platform extractor against the staging dir.
+ *   3. Validate the staging tree (no symlinks, no escapes).
+ *   4. Atomic rename: `staging → destDir`. Any prior `destDir` is removed first.
+ *   5. Always cleanup staging on any failure.
+ */
+declare function precheckArchiveSize(archivePath: string, archiveType: string): void;
 export interface GithubAutoInstallResult {
     cachedBinDirs: string[];
     installsStarted: number;
@@ -97,5 +108,5 @@ export declare function discoverRelevantGithubServers(projectRoot: string): Set<
  * of `downloadFile`. We expose it here so the test suite can verify the
  * allowlist independently of full network mocking.
  */
-export { type Arch, assertAllowedDownloadUrl as _assertAllowedDownloadUrlForTesting, detectHostPlatform, findGithubServerById, GITHUB_LSP_TABLE, type GithubServerSpec, type Platform, };
+export { type Arch, assertAllowedDownloadUrl as _assertAllowedDownloadUrlForTesting, detectHostPlatform, downloadFile as _downloadFileForTesting, findGithubServerById, GITHUB_LSP_TABLE, type GithubServerSpec, type Platform, precheckArchiveSize as _precheckArchiveSizeForTesting, };
 //# sourceMappingURL=lsp-github-install.d.ts.map

package/dist/lsp-github-install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lsp-github-install.d.ts","sourceRoot":"","sources":["../src/lsp-github-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAsCH,OAAO,EACL,KAAK,IAAI,EACT,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACd,MAAM,uBAAuB,CAAC;AAqB/B,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAG/E;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CASrF;AASD,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC/B;AAmUD,iBAAS,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAgBrD;AA6ED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CA0E5D;AAuTD,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C;;;;OAIG;IACH,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAsBD,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC,CAMjE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,MAAM,EAAE,mBAAmB,EAC3B,SAAS,GAAE,OAAO,KAAa,GAC9B,uBAAuB,CAqFzB;AAID;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAyC9E;AAID;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,IAAI,EACT,wBAAwB,IAAI,mCAAmC,EAC/D,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,QAAQ,GACd,CAAC"}
+{"version":3,"file":"lsp-github-install.d.ts","sourceRoot":"","sources":["../src/lsp-github-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAuCH,OAAO,EACL,KAAK,IAAI,EACT,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACd,MAAM,uBAAuB,CAAC;AAqB/B,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAG/E;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CASrF;AASD,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC/B;AAoVD,iBAAS,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAgBrD;AAED,iBAAe,YAAY,CACzB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,OAAO,KAAK,EACvB,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAuDf;AA6BD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CA0E5D;AAED;;;;;;;;GAQG;AACH,iBAAS,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAqB3E;AAmVD,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C;;;;OAIG;IACH,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAsBD,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC,CAMjE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,MAAM,EAAE,mBAAmB,EAC3B,SAAS,GAAE,OAAO,KAAa,GAC9B,uBAAuB,CAwFzB;AAID;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAyC9E;AAID;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,IAAI,EACT,wBAAwB,IAAI,mCAAmC,EAC/D,kBAAkB,EAClB,YAAY,IAAI,uBAAuB,EACvC,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACb,mBAAmB,IAAI,8BAA8B,GACtD,CAAC"}

package/dist/notifications.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../src/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAyOH,MAAM,WAAW,mBAAmB;IAClC,8BAA8B;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,yBAAyB,GAAG,uBAAuB,GAAG,oBAAoB,CAAC;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW3F;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA0C1F;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,mBAAmB,EACzB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAAE,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAqCf;AAwED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,uBAAuB,EAC7B,QAAQ,EAAE,gBAAgB,EAAE,GAC3B,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0C9E"}
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../src/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAyOH,MAAM,WAAW,mBAAmB;IAClC,8BAA8B;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,yBAAyB,GAAG,uBAAuB,GAAG,oBAAoB,CAAC;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW3F;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA0C1F;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,mBAAmB,EACzB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAAE,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAqCf;AA8FD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,uBAAuB,EAC7B,QAAQ,EAAE,gBAAgB,EAAE,GAC3B,OAAO,CAAC,IAAI,CAAC,CAmCf;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0C9E"}

package/dist/shared/rpc-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rpc-server.d.ts","sourceRoot":"","sources":["../../src/shared/rpc-server.ts"],"names":[],"mappings":"AAOA,KAAK,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAExF,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,YAAY,CAAS;gBAEjB,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAIjD,sCAAsC;IACtC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI;IAIjD,6DAA6D;IACvD,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAuC9B,8CAA8C;IAC9C,IAAI,IAAI,IAAI;IAaZ,OAAO,CAAC,QAAQ;CAoEjB"}
+{"version":3,"file":"rpc-server.d.ts","sourceRoot":"","sources":["../../src/shared/rpc-server.ts"],"names":[],"mappings":"AAOA,KAAK,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAExF,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,YAAY,CAAS;gBAEjB,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAIjD,sCAAsC;IACtC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI;IAIjD,6DAA6D;IACvD,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IA0C9B,8CAA8C;IAC9C,IAAI,IAAI,IAAI;IAaZ,OAAO,CAAC,QAAQ;CAoEjB"}

package/dist/shared/subagent-detect.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Returns `true` when the given session has a non-empty `parentID`
+ * (subagent). Returns `false` for primary sessions, when the SDK is
+ * unavailable, or when any error occurs — the false default keeps
+ * primary sessions working exactly as before.
+ *
+ * First call per session: one SDK round-trip. All subsequent calls:
+ * O(1) cache lookup.
+ */
+export declare function resolveIsSubagent(client: unknown, sessionId: string | undefined, _fallbackDirectory?: string): Promise<boolean>;
+/** Test-only cache reset. Not exported from the public surface. */
+export declare function _resetSubagentCacheForTest(): void;
+//# sourceMappingURL=subagent-detect.d.ts.map

package/dist/shared/subagent-detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-detect.d.ts","sourceRoot":"","sources":["../../src/shared/subagent-detect.ts"],"names":[],"mappings":"AAqDA;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,OAAO,CAAC,CAqElB;AAWD,mEAAmE;AACnE,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}

package/dist/tools/ast.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ast.d.ts","sourceRoot":"","sources":["../../src/tools/ast.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAiCjD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CA0R3E"}
+{"version":3,"file":"ast.d.ts","sourceRoot":"","sources":["../../src/tools/ast.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAkDjD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CA6S3E"}

package/dist/tools/bash.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bash.d.ts","sourceRoot":"","sources":["../../src/tools/bash.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAe,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAIvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAqEjD,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAuMjE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAqCvE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAmBrE"}
+{"version":3,"file":"bash.d.ts","sourceRoot":"","sources":["../../src/tools/bash.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAe,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAMvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA0EjD,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAwOjE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAqCvE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAmBrE"}

package/dist/tools/hoisted.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hoisted.d.ts","sourceRoot":"","sources":["../../src/tools/hoisted.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAI1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAmEjD,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,GAAI,IAAI,MAAM,EAAE,QAAQ,MAAM,EAAE,OAAO,MAAM,KAAG,MAChD,CAAC;AAqRtC;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAkJjE;AAihCD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAwB/E;AAMD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAyEnF"}
+{"version":3,"file":"hoisted.d.ts","sourceRoot":"","sources":["../../src/tools/hoisted.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAI1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAuEjD,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,GAAI,IAAI,MAAM,EAAE,QAAQ,MAAM,EAAE,OAAO,MAAM,KAAG,MAChD,CAAC;AAqRtC;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CA+JjE;AAkkCD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAwB/E;AAMD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CA6EnF"}

package/dist/tools/imports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"imports.d.ts","sourceRoot":"","sources":["../../src/tools/imports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAWjD;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAmF9E"}
+{"version":3,"file":"imports.d.ts","sourceRoot":"","sources":["../../src/tools/imports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAYjD;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAiF9E"}

package/dist/tools/permissions.d.ts

@@ -25,5 +25,74 @@ export declare function resolveRelativePattern(context: ToolContext, target: str
 export declare function resolveRelativePatterns(context: ToolContext, targets: string[]): string[];
 export declare function workspacePattern(_context: ToolContext): string;
 export declare function askEditPermission(context: ToolContext, patterns: string[], metadata?: Record<string, unknown>): Promise<string | undefined>;
+/**
+ * Check if `child` is inside `parent`. Mirrors `AppFileSystem.contains` in
+ * opencode core (uses `path.relative` and ensures it doesn't start with `..`).
+ */
+declare function containsPath(parent: string, child: string): boolean;
+/**
+ * Normalize a path pattern (which may end in `*`) for the same reasons
+ * normalizePath() exists, but without trying to realpath a pattern that
+ * doesn't correspond to a real entry.
+ *
+ * Mirrors `AppFileSystem.normalizePathPattern` in opencode core.
+ *
+ *   `*`                 → `*`
+ *   `~/projects/*`      → `~/projects/*`  (`~` is expanded by opencode's matcher)
+ *   `C:\some\dir\*`     → `C:\some\dir\*` (drive case canonicalized via realpath of the dir part)
+ *
+ * No-op on non-Windows.
+ */
+declare function normalizePathPattern(p: string): string;
+export declare const _permissionsInternalsForTest: {
+    containsPath: typeof containsPath;
+    normalizePathPattern: typeof normalizePathPattern;
+};
+/**
+ * Trigger OpenCode's host-side `external_directory` permission check when the
+ * target path falls outside the current project's directory and worktree.
+ * Mirrors `opencode/src/tool/external-directory.ts::assertExternalDirectoryEffect`.
+ *
+ * Why this exists: AFT hoisted tools previously only called `permission: "edit"`,
+ * which bypassed OpenCode's separate `external_directory` rule (default `ask`).
+ * That meant `/tmp/anything` writes routed through AFT silently bypassed the
+ * prompt OpenCode native `write`/`edit`/`apply_patch`/`read` show. This helper
+ * closes that gap so AFT's hoisted surface matches native behavior.
+ *
+ * Returns `undefined` on allow (or when target is inside project), or a
+ * denial message string on deny so callers can wrap with
+ * `permissionDeniedResponse(...)`.
+ *
+ * Always call this BEFORE the regular `askEditPermission` so the user sees the
+ * external-directory prompt first (matching opencode native ordering). When the
+ * external-directory rule is `allow` (e.g. for `${os.tmpdir()}/opencode/*`), the
+ * call short-circuits and the regular permission flow continues normally.
+ */
+export declare function assertExternalDirectoryPermission(context: ToolContext, target: string, options?: {
+    kind?: "file" | "directory";
+}): Promise<string | undefined>;
+/**
+ * Trigger OpenCode's host-side `grep` permission check.
+ *
+ * Mirrors `opencode/src/tool/grep.ts` shape exactly so users with
+ * `"permission": { "grep": { "*": "ask" } }` (or "deny") see the same
+ * prompt regardless of whether they're using AFT's hoisted `grep` or
+ * OpenCode's built-in.
+ */
+export declare function askGrepPermission(context: ToolContext, pattern: string, metadata?: {
+    path?: string;
+    include?: string;
+}): Promise<string | undefined>;
+/**
+ * Trigger OpenCode's host-side `glob` permission check.
+ *
+ * Mirrors `opencode/src/tool/glob.ts` shape exactly so users with
+ * `"permission": { "glob": { "*": "ask" } }` see the same prompt
+ * regardless of which glob tool is used.
+ */
+export declare function askGlobPermission(context: ToolContext, pattern: string, metadata?: {
+    path?: string;
+}): Promise<string | undefined>;
 export declare function permissionDeniedResponse(message: string): string;
+export {};
 //# sourceMappingURL=permissions.d.ts.map

package/dist/tools/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/tools/permissions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAazF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAE9D;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,MAAM,EAAE,EAClB,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACrC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAiB7B;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAOhE"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/tools/permissions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAKhC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAazF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAE9D;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,MAAM,EAAE,EAClB,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACrC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB7B;AAED;;;GAGG;AACH,iBAAS,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI5D;AA6CD;;;;;;;;;;;;GAYG;AACH,iBAAS,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAO/C;AAED,eAAO,MAAM,4BAA4B;;;CAAyC,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,iCAAiC,CACrD,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,GACxC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqD7B;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB7B;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB7B;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAOhE"}

package/dist/tools/refactoring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refactoring.d.ts","sourceRoot":"","sources":["../../src/tools/refactoring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAajD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAgInF"}
+{"version":3,"file":"refactoring.d.ts","sourceRoot":"","sources":["../../src/tools/refactoring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAcjD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CA0InF"}

package/dist/tools/safety.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/tools/safety.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAYjD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CA6F9E"}
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/tools/safety.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAajD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAoH9E"}

package/dist/tools/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAwDjD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CA0BrD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAmF9E"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA8DjD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CA0BrD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAoI9E"}

package/dist/tools/structure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"structure.d.ts","sourceRoot":"","sources":["../../src/tools/structure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAWjD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAiKjF"}
+{"version":3,"file":"structure.d.ts","sourceRoot":"","sources":["../../src/tools/structure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAYjD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAkKjF"}

package/dist/tui.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@cortexkit/aft-opencode",
-  version: "0.20.1",
+  version: "0.22.0",
   type: "module",
   description: "OpenCode plugin for Agent File Tools (AFT) \u2014 tree-sitter and lsp powered code analysis",
   main: "dist/index.js",
@@ -30,7 +30,7 @@ var package_default = {
   },
   dependencies: {
     "@clack/prompts": "^1.2.0",
-    "@cortexkit/aft-bridge": "0.20.1",
+    "@cortexkit/aft-bridge": "0.22.0",
     "@opencode-ai/plugin": "^1.14.39",
     "@opencode-ai/sdk": "^1.14.39",
     "comment-json": "^4.6.2",
@@ -38,11 +38,11 @@ var package_default = {
     zod: "^4.1.8"
   },
   optionalDependencies: {
-    "@cortexkit/aft-darwin-arm64": "0.20.1",
-    "@cortexkit/aft-darwin-x64": "0.20.1",
-    "@cortexkit/aft-linux-arm64": "0.20.1",
-    "@cortexkit/aft-linux-x64": "0.20.1",
-    "@cortexkit/aft-win32-x64": "0.20.1"
+    "@cortexkit/aft-darwin-arm64": "0.22.0",
+    "@cortexkit/aft-darwin-x64": "0.22.0",
+    "@cortexkit/aft-linux-arm64": "0.22.0",
+    "@cortexkit/aft-linux-x64": "0.22.0",
+    "@cortexkit/aft-win32-x64": "0.22.0"
   },
   devDependencies: {
     "@types/node": "^22.0.0",
@@ -827,6 +827,41 @@ async function showStatusDialog(api) {
     api.ui.dialog.setSize("medium");
   });
 }
+function registerStatusCommand(api) {
+  const apiAny = api;
+  if (typeof apiAny.keymap?.registerLayer === "function") {
+    apiAny.keymap.registerLayer({
+      commands: [
+        {
+          namespace: "palette",
+          name: "aft.status",
+          title: "AFT: Status",
+          category: "AFT",
+          slashName: STATUS_COMMAND,
+          run() {
+            showStatusDialog(api);
+          }
+        }
+      ],
+      bindings: []
+    });
+    return;
+  }
+  if (typeof apiAny.command?.register === "function") {
+    apiAny.command.register(() => [
+      {
+        title: "AFT: Status",
+        value: "aft.status",
+        category: "AFT",
+        slash: { name: STATUS_COMMAND },
+        onSelect() {
+          showStatusDialog(api);
+        }
+      }
+    ]);
+    return;
+  }
+}
 async function showStartupNotifications(api) {
   const directory = api.state.path.directory ?? "";
   if (!directory)
@@ -869,17 +904,7 @@ var tui = async (api) => {
   try {
     api.slots.register(createAftSidebarSlot(api, package_default.version));
   } catch {}
-  api.command.register(() => [
-    {
-      title: "AFT: Status",
-      value: "aft.status",
-      category: "AFT",
-      slash: { name: STATUS_COMMAND },
-      onSelect() {
-        showStatusDialog(api);
-      }
-    }
-  ]);
+  registerStatusCommand(api);
   showStartupNotifications(api);
 };
 var id = "aft-opencode";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/aft-opencode",
-  "version": "0.20.1",
+  "version": "0.22.0",
   "type": "module",
   "description": "OpenCode plugin for Agent File Tools (AFT) — tree-sitter and lsp powered code analysis",
   "main": "dist/index.js",
@@ -28,7 +28,7 @@
   },
   "dependencies": {
     "@clack/prompts": "^1.2.0",
-    "@cortexkit/aft-bridge": "0.20.1",
+    "@cortexkit/aft-bridge": "0.22.0",
     "@opencode-ai/plugin": "^1.14.39",
     "@opencode-ai/sdk": "^1.14.39",
     "comment-json": "^4.6.2",
@@ -36,11 +36,11 @@
     "zod": "^4.1.8"
   },
   "optionalDependencies": {
-    "@cortexkit/aft-darwin-arm64": "0.20.1",
-    "@cortexkit/aft-darwin-x64": "0.20.1",
-    "@cortexkit/aft-linux-arm64": "0.20.1",
-    "@cortexkit/aft-linux-x64": "0.20.1",
-    "@cortexkit/aft-win32-x64": "0.20.1"
+    "@cortexkit/aft-darwin-arm64": "0.22.0",
+    "@cortexkit/aft-darwin-x64": "0.22.0",
+    "@cortexkit/aft-linux-arm64": "0.22.0",
+    "@cortexkit/aft-linux-x64": "0.22.0",
+    "@cortexkit/aft-win32-x64": "0.22.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/src/shared/rpc-server.ts

@@ -46,9 +46,12 @@ export class AftRpcServer {
         // Write port file atomically
         try {
           const dir = dirname(this.portFilePath);
-          mkdirSync(dir, { recursive: true });
+          mkdirSync(dir, { recursive: true, mode: 0o700 });
           const tmpPath = `${this.portFilePath}.tmp`;
-          writeFileSync(tmpPath, JSON.stringify({ port: this.port, token: this.token }), "utf-8");
+          writeFileSync(tmpPath, JSON.stringify({ port: this.port, token: this.token }), {
+            encoding: "utf-8",
+            mode: 0o600,
+          });
           renameSync(tmpPath, this.portFilePath);
           log(`RPC server listening on 127.0.0.1:${this.port}`);
         } catch (err) {

package/src/shared/subagent-detect.ts

@@ -0,0 +1,150 @@
+/**
+ * Subagent detection via OpenCode SDK.
+ *
+ * AFT bash auto-promotes anything that takes more than ~5s to a background
+ * task. For the main agent (Alfonso), promotion is fine — the completion
+ * reminder fires back into the conversation and the agent picks it up on
+ * its next idle. For SUBAGENTS, promotion is fatal: a subagent waiting for
+ * a background-bash completion must end its turn to receive the reminder,
+ * which closes the subagent session permanently. The subagent never gets
+ * to commit its work.
+ *
+ * This module detects whether a session is a subagent (has a non-empty
+ * `parentID`) so the bash tool can:
+ *   1. Refuse `background: true` outright for subagents.
+ *   2. Disable auto-promotion: the foreground poll window extends to the
+ *      task's full hard-kill timeout instead of the default 5s.
+ *
+ * Detection is via the OpenCode SDK `client.session.get`. The result is
+ * cached per sessionID for the lifetime of the plugin process — subagent
+ * identity is sticky (parentID never changes after session creation), so
+ * the cache never needs invalidation.
+ *
+ * Errors are not cached. If the SDK is briefly unavailable on the first
+ * call, we retry on the next bash invocation rather than permanently
+ * misclassifying. This is cheap because the cache is hit on every
+ * subsequent call within the same session.
+ *
+ * Mirrors the pattern in `session-directory.ts`.
+ */
+import { sessionLog, sessionWarn } from "../logger.js";
+
+interface SessionInfo {
+  parentID?: string;
+}
+
+interface OpenCodeClientShape {
+  session?: {
+    get?: (input: {
+      path: { id: string };
+      query?: { directory?: string };
+      throwOnError?: boolean;
+    }) => Promise<{ data?: SessionInfo } | SessionInfo | undefined>;
+  };
+}
+
+interface CacheEntry {
+  isSubagent: boolean;
+  recordedAt: number;
+}
+
+const CACHE_MAX_ENTRIES = 200;
+const cache = new Map<string, CacheEntry>();
+
+/**
+ * Returns `true` when the given session has a non-empty `parentID`
+ * (subagent). Returns `false` for primary sessions, when the SDK is
+ * unavailable, or when any error occurs — the false default keeps
+ * primary sessions working exactly as before.
+ *
+ * First call per session: one SDK round-trip. All subsequent calls:
+ * O(1) cache lookup.
+ */
+export async function resolveIsSubagent(
+  client: unknown,
+  sessionId: string | undefined,
+  _fallbackDirectory?: string,
+): Promise<boolean> {
+  if (!sessionId) {
+    sessionLog(undefined, "[subagent-detect] no sessionId provided → primary");
+    return false;
+  }
+
+  const cached = cache.get(sessionId);
+  if (cached) {
+    // Refresh LRU position
+    cache.delete(sessionId);
+    cache.set(sessionId, cached);
+    sessionLog(sessionId, `[subagent-detect] cache hit: isSubagent=${cached.isSubagent}`);
+    return cached.isSubagent;
+  }
+
+  const c = client as OpenCodeClientShape;
+  const sessionApi = c?.session;
+  if (!sessionApi || typeof sessionApi.get !== "function") {
+    // SDK shape unavailable. Cache as not-subagent so we don't retry
+    // every call when the host doesn't expose session.get.
+    sessionLog(
+      sessionId,
+      `[subagent-detect] client.session.get unavailable (client=${typeof client}, session=${typeof sessionApi}, get=${typeof sessionApi?.get}) → caching as primary`,
+    );
+    setCache(sessionId, false);
+    return false;
+  }
+
+  sessionLog(
+    sessionId,
+    `[subagent-detect] cache miss, calling client.session.get(id=${sessionId})`,
+  );
+
+  let isSubagent = false;
+  let parentIdRaw: unknown;
+  try {
+    // Call as a method so the SDK's `this._client` reference resolves
+    // correctly. Extracting `sessionApi.get` into a local would lose
+    // the binding and crash the SDK with "undefined is not an object".
+    // SDK schema: SessionGetData uses `path: { id }`, NOT a flat `sessionID`.
+    // We do NOT pass `directory` — looking up a session by ID is an identity
+    // query, not a directory-scoped one. Passing the wrong shape returned a
+    // different session whose `parentID` was undefined, defeating the gate.
+    const result = await sessionApi.get({
+      path: { id: sessionId },
+    });
+    // SDK responses come either as `{ data: Session }` or directly as
+    // `Session` depending on `ThrowOnError`. Handle both shapes.
+    const session: SessionInfo | undefined =
+      (result as { data?: SessionInfo } | undefined)?.data ?? (result as SessionInfo | undefined);
+    parentIdRaw = session?.parentID;
+    isSubagent =
+      session !== undefined && typeof session.parentID === "string" && session.parentID.length > 0;
+    sessionLog(
+      sessionId,
+      `[subagent-detect] SDK returned session=${session !== undefined ? "present" : "undefined"}, parentID=${JSON.stringify(parentIdRaw)} → isSubagent=${isSubagent}`,
+    );
+  } catch (err) {
+    // Don't poison the cache on transient errors — but do log once.
+    // Return false so primary-session behavior is preserved.
+    sessionWarn(
+      sessionId,
+      `[subagent-detect] SDK lookup failed: ${err instanceof Error ? err.message : String(err)}`,
+    );
+    return false;
+  }
+
+  setCache(sessionId, isSubagent);
+  return isSubagent;
+}
+
+function setCache(sessionId: string, isSubagent: boolean): void {
+  if (cache.has(sessionId)) cache.delete(sessionId);
+  cache.set(sessionId, { isSubagent, recordedAt: Date.now() });
+  if (cache.size > CACHE_MAX_ENTRIES) {
+    const oldest = cache.keys().next().value;
+    if (oldest !== undefined) cache.delete(oldest);
+  }
+}
+
+/** Test-only cache reset. Not exported from the public surface. */
+export function _resetSubagentCacheForTest(): void {
+  cache.clear();
+}

package/src/tui/index.tsx

@@ -138,6 +138,69 @@ async function showStatusDialog(api: TuiPluginApi): Promise<void> {
   );
 }
 
+/**
+ * Register the `/aft-status` slash command, preferring the v1.14.42+ keymap
+ * API and falling back to the legacy `api.command.register` for older hosts.
+ *
+ * The `keymap.registerLayer` shape uses `name`/`title`/`run`/`namespace`/
+ * `slashName` (see `@opencode-ai/plugin/tui` types) and is what the host's
+ * own legacy command-shim translates into. Calling it directly skips the
+ * deprecation warning and works without depending on the (now-deprecated)
+ * `api.command` namespace existing at all.
+ */
+function registerStatusCommand(api: TuiPluginApi): void {
+  type ApiAny = {
+    keymap?: {
+      registerLayer?: (layer: {
+        commands: Array<Record<string, unknown>>;
+        bindings: Array<Record<string, unknown>>;
+      }) => unknown;
+    };
+    command?: {
+      register?: (cb: () => Array<Record<string, unknown>>) => unknown;
+    };
+  };
+  const apiAny = api as unknown as ApiAny;
+
+  if (typeof apiAny.keymap?.registerLayer === "function") {
+    apiAny.keymap.registerLayer({
+      commands: [
+        {
+          namespace: "palette",
+          name: "aft.status",
+          title: "AFT: Status",
+          category: "AFT",
+          slashName: STATUS_COMMAND,
+          run() {
+            void showStatusDialog(api);
+          },
+        },
+      ],
+      bindings: [],
+    });
+    return;
+  }
+
+  if (typeof apiAny.command?.register === "function") {
+    apiAny.command.register(() => [
+      {
+        title: "AFT: Status",
+        value: "aft.status",
+        category: "AFT",
+        slash: { name: STATUS_COMMAND },
+        onSelect() {
+          void showStatusDialog(api);
+        },
+      },
+    ]);
+    return;
+  }
+
+  // Neither API surface is present. The TUI host can still load — we only
+  // lose the slash-command entry point. The sidebar (registered above)
+  // remains available so users can still see AFT status visually.
+}
+
 async function showStartupNotifications(api: TuiPluginApi): Promise<void> {
   const directory = api.state.path.directory ?? "";
   if (!directory) return;
@@ -203,17 +266,15 @@ const tui: TuiPlugin = async (api) => {
     // and keep the slash command working.
   }
 
-  api.command.register(() => [
-    {
-      title: "AFT: Status",
-      value: "aft.status",
-      category: "AFT",
-      slash: { name: STATUS_COMMAND },
-      onSelect() {
-        void showStatusDialog(api);
-      },
-    },
-  ]);
+  // OpenCode 1.14.42 removed `api.command.register` entirely
+  // (anomalyco/opencode PR #26053). Later patches reinstated it as a
+  // deprecated shim that translates to `api.keymap.registerLayer`. To work
+  // across the whole 1.14.x line — including the brief 1.14.42 / 1.14.43
+  // window where neither the legacy API nor a shim was present — we prefer
+  // `api.keymap.registerLayer` and fall back to `api.command.register` only
+  // when the keymap surface is missing (older hosts that predate keymap).
+  // See https://github.com/cortexkit/aft/issues/33.
+  registerStatusCommand(api);
 
   // Show startup notifications — RPC server is already running by the time TUI loads
   void showStartupNotifications(api);

package/dist/shared/runtime.d.ts

@@ -1,10 +0,0 @@
-type BridgeLike = {
-    getBridge: (directory: string, sessionID: string) => {
-        send: (command: string, params?: Record<string, unknown>) => Promise<Record<string, unknown>>;
-    };
-};
-export declare function setSharedBridgePool(pool: BridgeLike): void;
-export declare function getSharedBridgePool(): BridgeLike | null;
-export declare function clearSharedBridgePool(): void;
-export {};
-//# sourceMappingURL=runtime.d.ts.map

package/dist/shared/runtime.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/shared/runtime.ts"],"names":[],"mappings":"AAAA,KAAK,UAAU,GAAG;IAChB,SAAS,EAAE,CACT,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,KACd;QACH,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAC/F,CAAC;CACH,CAAC;AAQF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAE1D;AAED,wBAAgB,mBAAmB,IAAI,UAAU,GAAG,IAAI,CAEvD;AAED,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C"}