@cortexkit/aft-opencode 0.39.3 → 0.39.4

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAqNlD;;;;;;;;;;;;;;;;GAgBG;AAQH,QAAA,MAAM,MAAM,EAAE,MAA6D,CAAC;AA63B5E,eAAe,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AA0KlD;;;;;;;;;;;;;;;;GAgBG;AAQH,QAAA,MAAM,MAAM,EAAE,MAA6D,CAAC;AA63B5E,eAAe,MAAM,CAAC"}

package/dist/index.js

@@ -12101,6 +12101,21 @@ class BridgeReplacedDuringVersionCheck extends Error {
   }
 }
 
+class BridgeTransportTimeoutError extends Error {
+  command;
+  timeoutMs;
+  code = "transport_timeout";
+  constructor(command, timeoutMs, message) {
+    super(message);
+    this.command = command;
+    this.timeoutMs = timeoutMs;
+    this.name = "BridgeTransportTimeoutError";
+  }
+}
+function isBridgeTransportTimeout(err) {
+  return err instanceof Error && err.code === "transport_timeout";
+}
+
 class BinaryBridge {
   static RESTART_RESET_MS = 5 * 60 * 1000;
   static STDERR_TAIL_MAX = 20;
@@ -12328,7 +12343,7 @@ class BinaryBridge {
             } else {
               this.warnVia(timeoutMsg2);
             }
-            entry.reject(new Error(`${this.errorPrefix} Request "${command}" (id=${id}) timed out after ${effectiveTimeoutMs}ms`));
+            entry.reject(new BridgeTransportTimeoutError(command, effectiveTimeoutMs, `${this.errorPrefix} Request "${command}" (id=${id}) timed out after ${effectiveTimeoutMs}ms`));
             return;
           }
           const childActiveSinceRequest = this.lastChildActivityAt > requestSentAt;
@@ -12898,13 +12913,17 @@ function joinNonEmpty(parts, separator = " · ") {
 function treeLine(depth, text) {
   return `${"  ".repeat(depth)}${depth === 0 ? "" : "↳ "}${text}`;
 }
+function nameMatchEdgeMarker(record, theme) {
+  return asString(record.resolved_by) === "name_match" ? ` ${theme.fg("warning", "~")}` : "";
+}
 function renderCallTreeNode(node, depth, lines, theme) {
   const name = asString(node.name) ?? "(unknown)";
   const file = shortenPath(asString(node.file) ?? "(unknown file)");
   const line = asNumber(node.line);
   const unresolved = node.resolved === false ? ` ${theme.fg("warning", "[unresolved]")}` : "";
+  const nameMatch = nameMatchEdgeMarker(node, theme);
   const location = line !== undefined ? `[${file}:${line}]` : `[${file}]`;
-  lines.push(treeLine(depth, `${name} ${location}${unresolved}`));
+  lines.push(treeLine(depth, `${name} ${location}${unresolved}${nameMatch}`));
   asRecords(node.children).forEach((child) => {
     renderCallTreeNode(child, depth + 1, lines, theme);
   });
@@ -12917,34 +12936,39 @@ function depthWarning(response, theme, depthField = "depth_limited", truncatedFi
   const detail = truncated > 0 ? `, ${truncated} truncated` : "";
   return theme.fg("warning", `(depth limited${detail})`);
 }
-function renderTracePath(path2, index, lines) {
+function renderTracePath(path2, index, lines, theme) {
   lines.push(`Path ${index + 1}`);
   asRecords(path2.hops).forEach((hop, hopIndex) => {
     const symbol = asString(hop.symbol) ?? "(unknown)";
     const file = shortenPath(asString(hop.file) ?? "(unknown file)");
     const line = asNumber(hop.line);
     const entry = hop.is_entry_point === true ? " [entry]" : "";
-    lines.push(treeLine(hopIndex + 1, `${symbol}${entry} ${line !== undefined ? `[${file}:${line}]` : `[${file}]`}`));
+    const nameMatch = nameMatchEdgeMarker(hop, theme);
+    lines.push(treeLine(hopIndex + 1, `${symbol}${entry} ${line !== undefined ? `[${file}:${line}]` : `[${file}]`}${nameMatch}`));
   });
 }
 function renderCallersGroupLines(group, theme) {
   const file = shortenPath(asString(group.file) ?? "(unknown file)");
   const lines = [theme.fg("accent", file)];
   const callers = asRecords(group.callers);
-  const bySymbol = new Map;
+  const bySymbolProvenance = new Map;
   for (const caller of callers) {
     const symbol = asString(caller.symbol) ?? "(unknown)";
+    const provenanceKey = asString(caller.resolved_by) === "name_match" ? `${symbol}\x00name_match` : `${symbol}\x00exact`;
     const line = asNumber(caller.line);
-    const bucket = bySymbol.get(symbol) ?? [];
+    const bucket = bySymbolProvenance.get(provenanceKey) ?? [];
     if (line !== undefined)
       bucket.push(line);
-    bySymbol.set(symbol, bucket);
+    bySymbolProvenance.set(provenanceKey, bucket);
   }
-  const symbols = [...bySymbol.keys()].sort((a, b) => a.localeCompare(b));
-  for (const symbol of symbols) {
-    const lineNums = (bySymbol.get(symbol) ?? []).sort((a, b) => a - b);
+  const keys = [...bySymbolProvenance.keys()].sort((a, b) => a.localeCompare(b));
+  for (const key of keys) {
+    const symbol = key.split("\x00")[0] ?? "(unknown)";
+    const isNameMatch = key.endsWith("\x00name_match");
+    const lineNums = (bySymbolProvenance.get(key) ?? []).sort((a, b) => a - b);
     const linePart = lineNums.length > 0 ? lineNums.map(String).join(", ") : "?";
-    lines.push(`  ↳ ${symbol}:${linePart}`);
+    const marker = isNameMatch ? ` ${theme.fg("warning", "~")}` : "";
+    lines.push(`  ↳ ${symbol}:${linePart}${marker}`);
   }
   return lines;
 }
@@ -12990,7 +13014,8 @@ function formatCallgraphSections(op, response, theme = PLAIN_CALLGRAPH_THEME) {
       const symbol = asString(hop.symbol) ?? "(unknown)";
       const file = shortenPath(asString(hop.file) ?? "(unknown file)");
       const line = asNumber(hop.line);
-      lines.push(treeLine(index + 1, `${symbol} ${line !== undefined ? `[${file}:${line}]` : `[${file}]`}`));
+      const nameMatch = nameMatchEdgeMarker(hop, theme);
+      lines.push(treeLine(index + 1, `${symbol} ${line !== undefined ? `[${file}:${line}]` : `[${file}]`}${nameMatch}`));
     });
     return lines;
   }
@@ -13010,7 +13035,7 @@ function formatCallgraphSections(op, response, theme = PLAIN_CALLGRAPH_THEME) {
       sections2.push(theme.fg("muted", "No entry paths found."));
     paths.forEach((path2, index) => {
       const lines = [];
-      renderTracePath(path2, index, lines);
+      renderTracePath(path2, index, lines, theme);
       sections2.push(lines.join(`
 `));
     });
@@ -13035,11 +13060,12 @@ function formatCallgraphSections(op, response, theme = PLAIN_CALLGRAPH_THEME) {
       const symbol = asString(caller.caller_symbol) ?? "(unknown)";
       const line = asNumber(caller.line) ?? 0;
       const entry = caller.is_entry_point === true ? ` ${theme.fg("warning", "[entry]")}` : "";
+      const nameMatch = nameMatchEdgeMarker(caller, theme);
       const expression = asString(caller.call_expression);
       const params = Array.isArray(caller.parameters) ? caller.parameters.map(String).join(", ") : "";
       sections2.push([
         `${theme.fg("accent", file)}:${line}`,
-        `  ↳ ${symbol}${entry}`,
+        `  ↳ ${symbol}${entry}${nameMatch}`,
         expression ? `  ${theme.fg("muted", expression)}` : undefined,
         params ? `  ${theme.fg("muted", `params: ${params}`)}` : undefined
       ].filter(Boolean).join(`
@@ -13062,7 +13088,8 @@ function formatCallgraphSections(op, response, theme = PLAIN_CALLGRAPH_THEME) {
     const variable = asString(hop.variable) ?? "(unknown)";
     const line = asNumber(hop.line) ?? 0;
     const approximate = hop.approximate === true ? ` ${theme.fg("warning", "[approx]")}` : "";
-    sections.push(treeLine(index, `${variable} ${theme.fg("muted", `${asString(hop.flow_type) ?? "flow"}`)} ${symbol} [${file}:${line}]${approximate}`));
+    const nameMatch = nameMatchEdgeMarker(hop, theme);
+    sections.push(treeLine(index, `${variable} ${theme.fg("muted", `${asString(hop.flow_type) ?? "flow"}`)} ${symbol} [${file}:${line}]${approximate}${nameMatch}`));
   });
   return sections;
 }
@@ -13405,7 +13432,7 @@ function formatEditSummary(data) {
   if (data.created === true) {
     let s2 = `Created file (${counts}).`;
     if (data.formatted)
-      s2 += " Auto-formatted.";
+      s2 += formatAutoFormattedSuffix(data);
     return s2;
   }
   let detail = counts;
@@ -13416,9 +13443,21 @@ function formatEditSummary(data) {
   }
   let s = `Edited (${detail}).`;
   if (data.formatted)
-    s += " Auto-formatted.";
+    s += formatAutoFormattedSuffix(data);
   return s;
 }
+function formatAutoFormattedSuffix(data) {
+  const reflowText = data.reformatted?.text;
+  if (typeof reflowText === "string" && reflowText.length > 0) {
+    return `
+Auto-formatted — the formatter reflowed your edit. On disk now:
+${reflowText}`;
+  }
+  if (data.reformatted?.extensive === true) {
+    return " Auto-formatted — extensive reflow; re-read the file before your next anchored edit.";
+  }
+  return " Auto-formatted.";
+}
 // ../aft-bridge/dist/jsonc.js
 function stripJsoncSymbols(value) {
   if (Array.isArray(value)) {
@@ -33555,6 +33594,34 @@ function normalizeToolMap(tools) {
   }
   return tools;
 }
+// src/shared/ignored-message.ts
+async function sendIgnoredMessage2(client, sessionID, text) {
+  const typedClient = client;
+  let agent;
+  try {
+    const ctx = await resolvePromptContext(client, sessionID);
+    agent = ctx?.agent;
+  } catch {
+    agent = undefined;
+  }
+  const body = {
+    noReply: true,
+    parts: [{ type: "text", text, ignored: true }]
+  };
+  if (agent)
+    body.agent = agent;
+  const promptInput = { path: { id: sessionID }, body };
+  if (typeof typedClient.session?.prompt === "function") {
+    await Promise.resolve(typedClient.session.prompt(promptInput));
+    return;
+  }
+  if (typeof typedClient.session?.promptAsync === "function") {
+    await typedClient.session.promptAsync(promptInput);
+    return;
+  }
+  throw new Error("[aft-plugin] client.session.prompt is unavailable");
+}
+
 // src/shared/pty-cache.ts
 var import_headless = __toESM(require_xterm_headless(), 1);
 import * as fs2 from "node:fs/promises";
@@ -34495,6 +34562,27 @@ async function callBashBridge(ctx, runtime, command, params = {}, options) {
 import * as fs4 from "node:fs";
 import * as path4 from "node:path";
 var UNSUPPORTED_ASK_HOST = "AFT requires OpenCode 1.15.5 or newer for permission asks; please upgrade OpenCode";
+var RESTRICT_NOTICE_THROTTLE_MS = 5 * 60 * 1000;
+var restrictNoticeLastSentAt = new Map;
+function restrictNoticeWording(target) {
+  return `AFT blocked access to a path outside the project:
+  ${target}
+` + "`restrict_to_project_root` is enabled (full isolation), so AFT does not access paths " + "outside the project root. To allow external paths, set `restrict_to_project_root: false` " + "in your aft.jsonc.";
+}
+function notifyRestrictBlocked(ctx, context, target) {
+  const sessionID = context.sessionID;
+  if (!sessionID)
+    return;
+  const now = Date.now();
+  const last = restrictNoticeLastSentAt.get(sessionID);
+  if (last !== undefined && now - last < RESTRICT_NOTICE_THROTTLE_MS)
+    return;
+  restrictNoticeLastSentAt.set(sessionID, now);
+  sendIgnoredMessage2(ctx.client, sessionID, restrictNoticeWording(target)).catch(() => {});
+}
+function restrictDenialMessage(target) {
+  return `Blocked: '${target}' is outside the project root and restrict_to_project_root is enabled ` + "(AFT full isolation). Not overridable per-call; set restrict_to_project_root: false in " + "aft.jsonc to allow external paths.";
+}
 async function runAsk(maybe) {
   await maybe;
 }
@@ -34574,11 +34662,9 @@ function normalizePathPattern(p) {
   const dir = /^[A-Za-z]:$/.test(match[1]) ? `${match[1]}\\` : match[1];
   return path4.join(normalizePath(dir), match[2]);
 }
-async function assertExternalDirectoryPermission(context, target, options) {
+async function assertExternalDirectoryPermission(ctx, context, target, options) {
   if (!target)
     return;
-  if (typeof context.ask !== "function")
-    return UNSUPPORTED_ASK_HOST;
   const resolved = resolveAbsolutePath(context, target);
   const absoluteTarget = normalizePath(resolved);
   const root = projectRootFor(context);
@@ -34590,6 +34676,12 @@ async function assertExternalDirectoryPermission(context, target, options) {
   if (worktree && worktree !== "/" && worktree !== directory && containsPath(worktree, absoluteTarget)) {
     return;
   }
+  if (ctx.config.restrict_to_project_root === true) {
+    notifyRestrictBlocked(ctx, context, absoluteTarget);
+    return restrictDenialMessage(absoluteTarget);
+  }
+  if (typeof context.ask !== "function")
+    return UNSUPPORTED_ASK_HOST;
   const kind = options?.kind ?? "file";
   const parentDir = kind === "directory" ? absoluteTarget : path4.dirname(absoluteTarget);
   const rawGlob = process.platform === "win32" ? normalizePathPattern(path4.join(parentDir, "*")) : path4.join(parentDir, "*").replaceAll("\\", "/");
@@ -34686,12 +34778,12 @@ async function resolveAstPaths(ctx, context, paths) {
   const resolved = await Promise.all(paths.filter((p) => typeof p === "string" && p.length > 0).map((p) => resolvePathArg(ctx, context, p)));
   return resolved.length > 0 ? resolved : undefined;
 }
-async function checkAstPathsPermission(context, paths) {
+async function checkAstPathsPermission(ctx, context, paths) {
   if (paths === undefined)
     return;
   const uniquePaths = Array.from(new Set(paths));
   for (const p of uniquePaths) {
-    const denial = await assertExternalDirectoryPermission(context, p, { kind: "directory" });
+    const denial = await assertExternalDirectoryPermission(ctx, context, p, { kind: "directory" });
     if (denial)
       return denial;
   }
@@ -34725,7 +34817,7 @@ function astTools(ctx) {
     },
     execute: async (args, context) => {
       const paths = await resolveAstPaths(ctx, context, args.paths);
-      const externalDenied = await checkAstPathsPermission(context, paths);
+      const externalDenied = await checkAstPathsPermission(ctx, context, paths);
       if (externalDenied)
         return permissionDeniedResponse(externalDenied);
       const params = {
@@ -34823,13 +34915,13 @@ ${hint}`;
     execute: async (args, context) => {
       const isDryRun = args.dryRun === true;
       const paths = await resolveAstPaths(ctx, context, args.paths);
-      const externalDenied = await checkAstPathsPermission(context, paths);
+      const externalDenied = await checkAstPathsPermission(ctx, context, paths);
       if (externalDenied)
         return permissionDeniedResponse(externalDenied);
       if (!isDryRun) {
         if (!Array.isArray(args.paths)) {
           const targetPath = await resolvePathArg(ctx, context, ".");
-          const denial = await assertExternalDirectoryPermission(context, targetPath, {
+          const denial = await assertExternalDirectoryPermission(ctx, context, targetPath, {
             kind: "directory"
           });
           if (denial)
@@ -35391,7 +35483,7 @@ function conflictTools(ctx) {
           const expanded = expandTilde2(String(args.path));
           const projectRoot = await resolveProjectRoot(ctx, context);
           const resolved = resolvePathFromProjectRoot(projectRoot, expanded);
-          const denied = await assertExternalDirectoryPermission(context, resolved, {
+          const denied = await assertExternalDirectoryPermission(ctx, context, resolved, {
             kind: "directory"
           });
           if (denied)
@@ -35719,6 +35811,9 @@ var BASH_WAIT_POLL_INTERVAL_MS = 100;
 var DEFAULT_BASH_STATUS_WAIT_TIMEOUT_MS = 30000;
 var MAX_BASH_STATUS_WAIT_TIMEOUT_MS = 30 * 60 * 1000;
 var REGEX_WAIT_SCAN_WINDOW_BYTES = 64 * 1024;
+function unavailableSnapshot() {
+  return { status: "unknown" };
+}
 function createBashWatchTool(ctx) {
   return {
     description: "Watch a background bash task. Sync (default) blocks until a pattern matches, the task exits, or timeout — use it when the result is the next thing you need, even for long builds/tests/installs (pass timeoutMs up to 30 min for those). The user can interrupt anytime; the wait auto-converts to an async notification. Async (background:true, requires pattern) registers a non-blocking notification and returns immediately — use when you have parallel work or want to end your turn. Never loop bash_status to wait.",
@@ -35823,6 +35918,9 @@ Waited ${waited.elapsed_ms}ms; matched ${JSON.stringify(waited.match ?? "")} at
     } else if (waited.reason === "timeout") {
       text += `
 Waited ${waited.elapsed_ms}ms; timeout reached without match.`;
+    } else if (waited.reason === "unavailable") {
+      text += `
+Waited ${waited.elapsed_ms}ms; the bridge stayed busy and status couldn't be read. The task may still be running — check with bash_status({ taskId }).`;
     } else {
       const stat = String(data.status ?? "unknown");
       const e = typeof data.exit_code === "number" ? `, exit ${data.exit_code}` : "";
@@ -35856,9 +35954,31 @@ async function waitForBashStatus(ctx, runtime, taskId, outputMode, waitFor, effe
   clearSyncWatchAbort(runtime.sessionID);
   markTaskWaiting(runtime.sessionID, taskId);
   let sawTerminal = false;
+  let lastData;
   try {
     while (true) {
-      const data = await bashStatusSnapshot2(ctx, runtime, taskId, outputMode, bridgeOptions);
+      let data;
+      try {
+        data = await bashStatusSnapshot2(ctx, runtime, taskId, outputMode, bridgeOptions);
+      } catch (err) {
+        if (!isBridgeTransportTimeout(err))
+          throw err;
+        if (isSyncWatchAborted(runtime.sessionID)) {
+          return withWaited(lastData ?? unavailableSnapshot(), {
+            reason: "user_message",
+            elapsed_ms: Date.now() - startedAt
+          });
+        }
+        if (Date.now() >= deadline) {
+          return withWaited(lastData ?? unavailableSnapshot(), {
+            reason: "unavailable",
+            elapsed_ms: Date.now() - startedAt
+          });
+        }
+        await sleep(Math.min(BASH_WAIT_POLL_INTERVAL_MS, Math.max(0, deadline - Date.now())));
+        continue;
+      }
+      lastData = data;
       const terminal = isTerminalStatus(data.status);
       if (waitFor) {
         const scan = await readNewTaskOutput(runtime, taskId, data, spillCursor);
@@ -36392,7 +36512,7 @@ function createReadTool(ctx) {
       const projectRoot = await resolveProjectRoot(ctx, context);
       const filePath = resolvePathFromProjectRoot(projectRoot, file2);
       {
-        const denial = await assertExternalDirectoryPermission(context, filePath);
+        const denial = await assertExternalDirectoryPermission(ctx, context, filePath);
         if (denial)
           return permissionDeniedResponse(denial);
       }
@@ -36503,7 +36623,7 @@ function createWriteTool(ctx, editToolName = "edit") {
       const filePath = resolvePathFromProjectRoot(projectRoot, file2);
       const relPath = path5.relative(projectRoot, filePath);
       {
-        const denial2 = await assertExternalDirectoryPermission(context, filePath);
+        const denial2 = await assertExternalDirectoryPermission(ctx, context, filePath);
         if (denial2)
           return permissionDeniedResponse(denial2);
       }
@@ -36654,7 +36774,7 @@ function createEditTool(ctx, writeToolName = "write") {
       const filePath = resolvePathFromProjectRoot(projectRoot, file2);
       const relPath = path5.relative(projectRoot, filePath);
       {
-        const denial2 = await assertExternalDirectoryPermission(context, filePath);
+        const denial2 = await assertExternalDirectoryPermission(ctx, context, filePath);
         if (denial2)
           return permissionDeniedResponse(denial2);
       }
@@ -36890,7 +37010,7 @@ function createApplyPatchTool(ctx) {
           if (asked.has(filePath))
             continue;
           asked.add(filePath);
-          const denial2 = await assertExternalDirectoryPermission(context, filePath);
+          const denial2 = await assertExternalDirectoryPermission(ctx, context, filePath);
           if (denial2)
             return permissionDeniedResponse(denial2);
         }
@@ -37201,7 +37321,7 @@ function createDeleteTool(ctx) {
           if (asked.has(filePath))
             continue;
           asked.add(filePath);
-          const denial = await assertExternalDirectoryPermission(context, filePath);
+          const denial = await assertExternalDirectoryPermission(ctx, context, filePath);
           if (denial)
             return permissionDeniedResponse(denial);
         }
@@ -37249,13 +37369,13 @@ function createMoveTool(ctx) {
       const filePath = resolvePathFromProjectRoot(projectRoot, args.filePath);
       const destPath = resolvePathFromProjectRoot(projectRoot, args.destination);
       {
-        const sourceDenial = await assertExternalDirectoryPermission(context, filePath, {
+        const sourceDenial = await assertExternalDirectoryPermission(ctx, context, filePath, {
           kind: "file"
         });
         if (sourceDenial)
           return permissionDeniedResponse(sourceDenial);
         if (destPath !== filePath) {
-          const destDenial = await assertExternalDirectoryPermission(context, destPath);
+          const destDenial = await assertExternalDirectoryPermission(ctx, context, destPath);
           if (destDenial)
             return permissionDeniedResponse(destDenial);
         }
@@ -37317,7 +37437,7 @@ function aftPrefixedTools(ctx) {
           const filePath = resolvePathFromProjectRoot(projectRoot, file2);
           const relPath = path5.relative(projectRoot, filePath);
           {
-            const denial2 = await assertExternalDirectoryPermission(context, filePath);
+            const denial2 = await assertExternalDirectoryPermission(ctx, context, filePath);
             if (denial2)
               return permissionDeniedResponse(denial2);
           }
@@ -37394,7 +37514,7 @@ function importTools(ctx) {
         }
         const filePath = await resolvePathArg(ctx, context, args.filePath);
         {
-          const denial = await assertExternalDirectoryPermission(context, filePath);
+          const denial = await assertExternalDirectoryPermission(ctx, context, filePath);
           if (denial)
             return permissionDeniedResponse(denial);
         }
@@ -37544,7 +37664,7 @@ async function resolveAndGateScope(ctx, context, scope) {
     if (checked.has(target))
       continue;
     checked.add(target);
-    const denial = await assertExternalDirectoryPermission(context, target);
+    const denial = await assertExternalDirectoryPermission(ctx, context, target);
     if (denial)
       return { scope: undefined, denial };
   }
@@ -37641,6 +37761,7 @@ function navigationTools(ctx) {
 
 ` + `All ops require both 'filePath' and 'symbol'. 'expression' is additionally required for trace_data; 'toSymbol' for trace_to_symbol.
 
+` + `Markers: ~ = edge resolved by name only (may point at the wrong same-named symbol); [unresolved] = callee not resolved to a definition, so the location shown is the call site. Unmarked edges are resolved exactly.
 `,
       args: {
         op: z11.enum(["call_tree", "callers", "trace_to", "trace_to_symbol", "impact", "trace_data"]).describe("Navigation operation"),
@@ -37671,7 +37792,7 @@ function navigationTools(ctx) {
           if (checked.has(target))
             continue;
           checked.add(target);
-          const denial = await assertExternalDirectoryPermission(context, target);
+          const denial = await assertExternalDirectoryPermission(ctx, context, target);
           if (denial)
             return permissionDeniedResponse(denial);
         }
@@ -37748,7 +37869,7 @@ function readingTools(ctx) {
               throw new Error("'target' must be a non-empty string or array of strings");
             }
             const resolvedTargets = await Promise.all(target.map((entry) => resolvePathArg(ctx, context, entry)));
-            const permissionDenied3 = await assertPathExternalPermissions(context, resolvedTargets, "directory");
+            const permissionDenied3 = await assertPathExternalPermissions(ctx, context, resolvedTargets, "directory");
             if (permissionDenied3)
               return permissionDeniedResponse(permissionDenied3);
             const response3 = await callBridge(ctx, context, "outline", {
@@ -37770,7 +37891,7 @@ function readingTools(ctx) {
             const st = await stat(resolvedPath);
             isDirectory2 = st.isDirectory();
           } catch {}
-          const permissionDenied2 = await assertPathExternalPermissions(context, resolvedPath, isDirectory2 ? "directory" : "file");
+          const permissionDenied2 = await assertPathExternalPermissions(ctx, context, resolvedPath, isDirectory2 ? "directory" : "file");
           if (permissionDenied2)
             return permissionDeniedResponse(permissionDenied2);
           const params = isDirectory2 ? { directory: resolvedPath, files: true } : { file: resolvedPath, files: true };
@@ -37789,7 +37910,7 @@ function readingTools(ctx) {
         }
         if (isArray) {
           const resolvedTargets = await Promise.all(target.map((entry) => resolvePathArg(ctx, context, entry)));
-          const permissionDenied2 = await assertPathExternalPermissions(context, resolvedTargets);
+          const permissionDenied2 = await assertPathExternalPermissions(ctx, context, resolvedTargets);
           if (permissionDenied2)
             return permissionDeniedResponse(permissionDenied2);
           const response2 = await callBridge(ctx, context, "outline", {
@@ -37810,7 +37931,7 @@ function readingTools(ctx) {
           const st = await stat(resolvedTarget);
           isDirectory = st.isDirectory();
         } catch {}
-        const permissionDenied = await assertPathExternalPermissions(context, resolvedTarget, isDirectory ? "directory" : "file");
+        const permissionDenied = await assertPathExternalPermissions(ctx, context, resolvedTarget, isDirectory ? "directory" : "file");
         if (permissionDenied)
           return permissionDeniedResponse(permissionDenied);
         if (isDirectory) {
@@ -37905,7 +38026,7 @@ function readingTools(ctx) {
             }
           }
           const resolvedTargets = await Promise.all(targets.map((t) => resolvePathArg(ctx, context, t.filePath)));
-          const permissionDenied = await assertPathExternalPermissions(context, resolvedTargets);
+          const permissionDenied = await assertPathExternalPermissions(ctx, context, resolvedTargets);
           if (permissionDenied)
             return permissionDeniedResponse(permissionDenied);
           const responses = await Promise.all(targets.map((t, index) => {
@@ -37937,7 +38058,7 @@ function readingTools(ctx) {
         }
         const file2 = hasUrl ? args.url : await resolvePathArg(ctx, context, args.filePath);
         if (!hasUrl) {
-          const permissionDenied = await assertPathExternalPermissions(context, file2);
+          const permissionDenied = await assertPathExternalPermissions(ctx, context, file2);
           if (permissionDenied)
             return permissionDeniedResponse(permissionDenied);
         }
@@ -38009,7 +38130,7 @@ function formatZoomBatchResult(targetLabel, symbols, responses) {
 `) };
 }
 var MAX_UNCHECKED_FILES_IN_FOOTER = 10;
-async function assertPathExternalPermissions(context, target, kind = "file") {
+async function assertPathExternalPermissions(ctx, context, target, kind = "file") {
   const targets = Array.isArray(target) ? target : [target];
   const checked = new Set;
   for (const resolvedPath of targets) {
@@ -38019,7 +38140,7 @@ async function assertPathExternalPermissions(context, target, kind = "file") {
     if (checked.has(key))
       continue;
     checked.add(key);
-    const denial = await assertExternalDirectoryPermission(context, resolvedPath, { kind });
+    const denial = await assertExternalDirectoryPermission(ctx, context, resolvedPath, { kind });
     if (denial)
       return denial;
   }
@@ -38185,7 +38306,7 @@ function refactoringTools(ctx) {
             if (asked.has(affectedPath))
               continue;
             asked.add(affectedPath);
-            const denial = await assertExternalDirectoryPermission(context, affectedPath);
+            const denial = await assertExternalDirectoryPermission(ctx, context, affectedPath);
             if (denial)
               return permissionDeniedResponse(denial);
           }
@@ -38293,7 +38414,7 @@ function safetyTools(ctx) {
           }
           const previewPaths = Array.from(new Set(responsePaths(preview2)));
           for (const filePath2 of previewPaths) {
-            const denial = await assertExternalDirectoryPermission(context, filePath2);
+            const denial = await assertExternalDirectoryPermission(ctx, context, filePath2);
             if (denial)
               return permissionDeniedResponse(denial);
           }
@@ -38317,7 +38438,7 @@ function safetyTools(ctx) {
               if (uniqueParents.has(parent))
                 continue;
               uniqueParents.add(parent);
-              const denial = await assertExternalDirectoryPermission(context, abs, {
+              const denial = await assertExternalDirectoryPermission(ctx, context, abs, {
                 kind: "file"
               });
               if (denial)
@@ -38331,7 +38452,7 @@ function safetyTools(ctx) {
             throw new Error(bridgeErrorMessage(preview2, "checkpoint path preview failed"));
           }
           for (const filePath of new Set(responsePaths(preview2))) {
-            const denial = await assertExternalDirectoryPermission(context, filePath);
+            const denial = await assertExternalDirectoryPermission(ctx, context, filePath);
             if (denial)
               return permissionDeniedResponse(denial);
           }
@@ -38526,7 +38647,7 @@ function searchTools(ctx) {
         return permissionDeniedResponse(grepDenied);
       if (pathSplit) {
         for (const target of searchPathTargets(projectRoot, pathSplit, "file")) {
-          const externalDenied = await assertExternalDirectoryPermission(context, target.target, {
+          const externalDenied = await assertExternalDirectoryPermission(ctx, context, target.target, {
             kind: target.kind
           });
           if (externalDenied)
@@ -38579,7 +38700,7 @@ function searchTools(ctx) {
         return permissionDeniedResponse(globDenied);
       if (pathSplit) {
         for (const target of searchPathTargets(projectRoot, pathSplit, "directory")) {
-          const externalDenied = await assertExternalDirectoryPermission(context, target.target, {
+          const externalDenied = await assertExternalDirectoryPermission(ctx, context, target.target, {
             kind: target.kind
           });
           if (externalDenied)
@@ -38787,32 +38908,6 @@ function isTuiMode2() {
 function throwSentinel(command) {
   throw new Error(`${SENTINEL_PREFIX}${command.toUpperCase().replace(/-/g, "_")}_HANDLED__`);
 }
-async function sendIgnoredMessage2(client, sessionID, text) {
-  const typedClient = client;
-  let agent;
-  try {
-    const ctx = await resolvePromptContext(client, sessionID);
-    agent = ctx?.agent;
-  } catch {
-    agent = undefined;
-  }
-  const body = {
-    noReply: true,
-    parts: [{ type: "text", text, ignored: true }]
-  };
-  if (agent)
-    body.agent = agent;
-  const promptInput = { path: { id: sessionID }, body };
-  if (typeof typedClient.session?.prompt === "function") {
-    await Promise.resolve(typedClient.session.prompt(promptInput));
-    return;
-  }
-  if (typeof typedClient.session?.promptAsync === "function") {
-    await typedClient.session.promptAsync(promptInput);
-    return;
-  }
-  throw new Error("[aft-plugin] client.session.prompt is unavailable");
-}
 var PLUGIN_VERSION = (() => {
   try {
     const req = createRequire3(import.meta.url);

package/dist/shared/ignored-message.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Append an `ignored: true` synthetic user message to a session.
+ *
+ * Used for user-facing informational panels that must NOT trigger an agent
+ * turn (e.g. status output, the external-directory restriction notice). The
+ * message renders under the current agent (resolved from recent messages) so
+ * it shows in the right place in the OpenCode UI, and carries `noReply: true`
+ * so no LLM call is made.
+ *
+ * IMPORTANT (cache + crash safety): this path deliberately passes ONLY `agent`
+ * (never model/variant). OpenCode crashes if model/variant are supplied on a
+ * `noReply: true` prompt, and omitting them keeps the synthetic message from
+ * busting the provider prefix cache the previous assistant turn warmed.
+ *
+ * Lives in `shared/` (not `index.ts`) because `index.ts` must export only the
+ * plugin default; both the plugin entry and `tools/permissions.ts` call this.
+ */
+export declare function sendIgnoredMessage(client: unknown, sessionID: string, text: string): Promise<void>;
+//# sourceMappingURL=ignored-message.d.ts.map

package/dist/shared/ignored-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ignored-message.d.ts","sourceRoot":"","sources":["../../src/shared/ignored-message.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAqCf"}

package/dist/tools/ast.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ast.d.ts","sourceRoot":"","sources":["../../src/tools/ast.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAmFjD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CA8S3E"}
+{"version":3,"file":"ast.d.ts","sourceRoot":"","sources":["../../src/tools/ast.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAoFjD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CA8S3E"}

package/dist/tools/bash_watch.d.ts

@@ -8,7 +8,7 @@ export type BashWaitPattern = {
     source: string;
 };
 export type BashStatusWaited = {
-    reason: "matched" | "exited" | "timeout" | "user_message";
+    reason: "matched" | "exited" | "timeout" | "user_message" | "unavailable";
     elapsed_ms: number;
     match?: string;
     match_offset?: number;

package/dist/tools/bash_watch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bash_watch.d.ts","sourceRoot":"","sources":["../../src/tools/bash_watch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAcvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AASjD,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACtC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,cAAc,CAAC;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AACF,KAAK,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAGlF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAwGtE;AA8GD,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,eAAe,GAAG,SAAS,EACpC,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,kBAAkB,CAAC,CAgF7B;AA6DD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CAI5E;AAkGD,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAEtC"}
+{"version":3,"file":"bash_watch.d.ts","sourceRoot":"","sources":["../../src/tools/bash_watch.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAcvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AASjD,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACtC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,cAAc,GAAG,aAAa,CAAC;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAUF,KAAK,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAGlF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAwGtE;AAgHD,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,eAAe,GAAG,SAAS,EACpC,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,kBAAkB,CAAC,CA0G7B;AA6DD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CAI5E;AAkGD,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAEtC"}

package/dist/tools/navigation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"navigation.d.ts","sourceRoot":"","sources":["../../src/tools/navigation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAqBjD;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAkGlF"}
+{"version":3,"file":"navigation.d.ts","sourceRoot":"","sources":["../../src/tools/navigation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAqBjD;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAmGlF"}

package/dist/tools/permissions.d.ts

@@ -1,4 +1,5 @@
 import type { ToolContext } from "@opencode-ai/plugin";
+import type { PluginContext } from "../types.js";
 /**
  * Execute a `ctx.ask(...)` result.
  *
@@ -61,7 +62,7 @@ export declare const _permissionsInternalsForTest: {
  * external-directory rule is `allow` (e.g. for `${os.tmpdir()}/opencode/*`), the
  * call short-circuits and the regular permission flow continues normally.
  */
-export declare function assertExternalDirectoryPermission(context: ToolContext, target: string, options?: {
+export declare function assertExternalDirectoryPermission(ctx: PluginContext, context: ToolContext, target: string, options?: {
     kind?: "file" | "directory";
 }): Promise<string | undefined>;
 /**

package/dist/tools/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/tools/permissions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAMvD;;;;;;;;;;;GAWG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,MAAM,GACnB,MAAM,CAER;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAazF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAE9D;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,MAAM,EAAE,EAClB,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACrC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB7B;AAED;;;GAGG;AACH,iBAAS,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI5D;AA6CD;;;;;;;;;;;;GAYG;AACH,iBAAS,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAO/C;AAED,eAAO,MAAM,4BAA4B;;;CAAyC,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,iCAAiC,CACrD,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,GACxC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAsD7B;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB7B;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB7B;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAOhE"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/tools/permissions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAoDjD;;;;;;;;;;;GAWG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,MAAM,GACnB,MAAM,CAER;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAazF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAE9D;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,MAAM,EAAE,EAClB,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACrC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB7B;AAED;;;GAGG;AACH,iBAAS,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI5D;AA6CD;;;;;;;;;;;;GAYG;AACH,iBAAS,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAO/C;AAED,eAAO,MAAM,4BAA4B;;;CAAyC,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,iCAAiC,CACrD,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,GACxC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmE7B;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB7B;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB7B;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAOhE"}

package/dist/tools/reading.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reading.d.ts","sourceRoot":"","sources":["../../src/tools/reading.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAe,cAAc,EAAc,MAAM,qBAAqB,CAAC;AAEnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAoCjD,UAAU,qBAAqB;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,eAAe;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CA8X/E;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EAAE,EACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACnC,eAAe,CAyBjB;AA+CD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CA2ChF"}
+{"version":3,"file":"reading.d.ts","sourceRoot":"","sources":["../../src/tools/reading.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAe,cAAc,EAAc,MAAM,qBAAqB,CAAC;AAEnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAoCjD,UAAU,qBAAqB;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,eAAe;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAyY/E;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EAAE,EACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACnC,eAAe,CAyBjB;AAgDD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CA2ChF"}

package/dist/tools/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAuJjD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CA0BrD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CA4J9E"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAuJjD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CA0BrD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAsK9E"}

package/dist/tui.js

@@ -7790,7 +7790,7 @@ var require_src2 = __commonJS((exports, module) => {
 // src/tui/index.tsx
 import { createMemo as createMemo2, createSignal as createSignal2, onCleanup as onCleanup2 } from "solid-js";
 // package.json
-var version = "0.39.3";
+var version = "0.39.4";
 
 // src/shared/rpc-client.ts
 import { existsSync, readdirSync, readFileSync, unlinkSync } from "node:fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/aft-opencode",
-  "version": "0.39.3",
+  "version": "0.39.4",
   "type": "module",
   "description": "OpenCode plugin for Agent File Tools (AFT) — tree-sitter and lsp powered code analysis",
   "main": "dist/index.js",
@@ -30,19 +30,19 @@
   },
   "dependencies": {
     "@clack/prompts": "^1.2.0",
-    "@cortexkit/aft-bridge": "0.39.3",
+    "@cortexkit/aft-bridge": "0.39.4",
     "@xterm/headless": "^5.5.0",
     "comment-json": "^4.6.2",
     "undici": "^7.25.0",
     "zod": "^4.1.8"
   },
   "optionalDependencies": {
-    "@cortexkit/aft-darwin-arm64": "0.39.3",
-    "@cortexkit/aft-darwin-x64": "0.39.3",
-    "@cortexkit/aft-linux-arm64": "0.39.3",
-    "@cortexkit/aft-linux-x64": "0.39.3",
-    "@cortexkit/aft-win32-arm64": "0.39.3",
-    "@cortexkit/aft-win32-x64": "0.39.3"
+    "@cortexkit/aft-darwin-arm64": "0.39.4",
+    "@cortexkit/aft-darwin-x64": "0.39.4",
+    "@cortexkit/aft-linux-arm64": "0.39.4",
+    "@cortexkit/aft-linux-x64": "0.39.4",
+    "@cortexkit/aft-win32-arm64": "0.39.4",
+    "@cortexkit/aft-win32-x64": "0.39.4"
   },
   "devDependencies": {
     "@opencode-ai/plugin": "^1.17.7",

package/src/shared/ignored-message.ts

@@ -0,0 +1,61 @@
+import { resolvePromptContext } from "./last-assistant-model.js";
+
+/**
+ * Append an `ignored: true` synthetic user message to a session.
+ *
+ * Used for user-facing informational panels that must NOT trigger an agent
+ * turn (e.g. status output, the external-directory restriction notice). The
+ * message renders under the current agent (resolved from recent messages) so
+ * it shows in the right place in the OpenCode UI, and carries `noReply: true`
+ * so no LLM call is made.
+ *
+ * IMPORTANT (cache + crash safety): this path deliberately passes ONLY `agent`
+ * (never model/variant). OpenCode crashes if model/variant are supplied on a
+ * `noReply: true` prompt, and omitting them keeps the synthetic message from
+ * busting the provider prefix cache the previous assistant turn warmed.
+ *
+ * Lives in `shared/` (not `index.ts`) because `index.ts` must export only the
+ * plugin default; both the plugin entry and `tools/permissions.ts` call this.
+ */
+export async function sendIgnoredMessage(
+  client: unknown,
+  sessionID: string,
+  text: string,
+): Promise<void> {
+  const typedClient = client as {
+    session?: {
+      prompt?: (input: unknown) => unknown;
+      promptAsync?: (input: unknown) => unknown;
+    };
+  };
+
+  let agent: string | undefined;
+  try {
+    const ctx = await resolvePromptContext(
+      client as Parameters<typeof resolvePromptContext>[0],
+      sessionID,
+    );
+    agent = ctx?.agent;
+  } catch {
+    agent = undefined;
+  }
+
+  const body: Record<string, unknown> = {
+    noReply: true,
+    parts: [{ type: "text", text, ignored: true }],
+  };
+  if (agent) body.agent = agent;
+  const promptInput = { path: { id: sessionID }, body };
+
+  if (typeof typedClient.session?.prompt === "function") {
+    await Promise.resolve(typedClient.session.prompt(promptInput));
+    return;
+  }
+
+  if (typeof typedClient.session?.promptAsync === "function") {
+    await typedClient.session.promptAsync(promptInput);
+    return;
+  }
+
+  throw new Error("[aft-plugin] client.session.prompt is unavailable");
+}