@cotal-ai/connector-opencode 0.11.3 → 0.11.5

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,MAAM,EAAS,MAAM,qBAAqB,CAAC;AAiBzD,eAAO,MAAM,KAAK,EAAE,MAkbnB,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,MAAM,EAAS,MAAM,qBAAqB,CAAC;AAiBzD,eAAO,MAAM,KAAK,EAAE,MA6anB,CAAC"}

package/dist/serve.js

@@ -1,233 +1,170 @@
-/**
- * Launcher shim for the OpenCode connector — gives a spawned agent a *watchable* TUI bound to the
- * exact session it drives, using OpenCode's own client/server split:
- *
- *   1. start `opencode serve` (headless) on a free port, with the Cotal plugin loaded inline;
- *   2. poke it once so the lazily-loaded plugin initializes (joins the mesh, creates ONE session);
- *   3. the plugin announces that session's id on stderr (`[cotal-session] <id>`);
- *   4. launch a foreground `opencode attach <url> --session <id>` — the TUI opens straight onto the
- *      agent's session, and every turn the plugin drives through this exact server renders live.
- *
- * The attach TUI is a pure viewer (it connects to the running server); its env strips the plugin
- * config + COTAL_* so it never loads a *second* mesh endpoint.
- *
- * SECURITY: `opencode serve` is UNAUTHENTICATED by default — the CVE-2026-22812 surface (any local
- * process, or a malicious site via DNS-rebind, can drive the session: arbitrary code execution as
- * this user + full mesh-identity takeover via the ungated cotal_* tools). So we set a random
- * per-launch `OPENCODE_SERVER_PASSWORD` in the child env; the poke and the attach TUI present it as
- * HTTP basic auth. Bind stays loopback; no CORS / mDNS.
- */
+// src/serve.ts
 import { execFileSync, spawn } from "node:child_process";
 import { createServer } from "node:net";
 import { once } from "node:events";
 import { randomBytes } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { delimiter, join } from "node:path";
-/** The opencode binary to spawn. `COTAL_OPENCODE_BIN` overrides. On Windows, `opencode` on PATH is
- *  an npm `.cmd` shim that child_process can't spawn, and the real `opencode.exe` it wraps
- *  (`<bindir>/node_modules/opencode-ai/bin/opencode.exe`) isn't itself on PATH — resolve and spawn
- *  it directly, so there's no `cmd.exe` wrapper to orphan the server on kill. POSIX spawns the name
- *  as-is. Unresolved on Windows → returns the bare name so spawn fails with a clear ENOENT. */
 function resolveOpencodeBin() {
-    const override = process.env.COTAL_OPENCODE_BIN?.trim();
-    if (override)
-        return override;
-    if (process.platform !== "win32")
-        return "opencode";
-    for (const dir of (process.env.PATH ?? "").split(delimiter)) {
-        if (!dir)
-            continue;
-        for (const exe of [join(dir, "opencode.exe"), join(dir, "node_modules", "opencode-ai", "bin", "opencode.exe")]) {
-            if (existsSync(exe))
-                return exe;
-        }
+  const override = process.env.COTAL_OPENCODE_BIN?.trim();
+  if (override) return override;
+  if (process.platform !== "win32") return "opencode";
+  for (const dir of (process.env.PATH ?? "").split(delimiter)) {
+    if (!dir) continue;
+    for (const exe of [join(dir, "opencode.exe"), join(dir, "node_modules", "opencode-ai", "bin", "opencode.exe")]) {
+      if (existsSync(exe)) return exe;
     }
-    return "opencode";
+  }
+  return "opencode";
 }
-const BIN = resolveOpencodeBin();
-const USERNAME = "opencode";
-/** Per-launch secret gating the spawned server's HTTP API (see SECURITY above). */
-const SECRET = randomBytes(24).toString("hex");
-/** Ask the OS for a free port (bind :0, read it, release) so co-located peers don't collide. */
+var BIN = resolveOpencodeBin();
+var USERNAME = "opencode";
+var SECRET = randomBytes(24).toString("hex");
 async function freePort() {
-    const srv = createServer();
-    srv.listen(0, "127.0.0.1");
-    await once(srv, "listening");
-    const port = srv.address().port;
-    await new Promise((r) => srv.close(() => r()));
-    return port;
+  const srv = createServer();
+  srv.listen(0, "127.0.0.1");
+  await once(srv, "listening");
+  const port = srv.address().port;
+  await new Promise((r) => srv.close(() => r()));
+  return port;
 }
-/** SIGTERM the serve, then SIGKILL if it's still alive 3s later — a lingering serve keeps the
- *  agent's data dir (SQLite) open and wedges every later same-name spawn. Resolves once it's dead. */
 async function killServe(serve) {
-    if (serve.exitCode !== null || serve.signalCode !== null)
-        return;
-    serve.kill("SIGTERM");
-    const dead = await Promise.race([
-        once(serve, "exit").then(() => true),
-        new Promise((r) => setTimeout(() => r(false), 3000)),
-    ]);
-    if (!dead) {
-        serve.kill("SIGKILL");
-        await once(serve, "exit");
-    }
+  if (serve.exitCode !== null || serve.signalCode !== null) return;
+  serve.kill("SIGTERM");
+  const dead = await Promise.race([
+    once(serve, "exit").then(() => true),
+    new Promise((r) => setTimeout(() => r(false), 3e3))
+  ]);
+  if (!dead) {
+    serve.kill("SIGKILL");
+    await once(serve, "exit");
+  }
 }
 function processCommand(pid) {
-    try {
-        if (process.platform === "win32") {
-            return execFileSync("powershell.exe", [
-                "-NoProfile",
-                "-NonInteractive",
-                "-Command",
-                `(Get-CimInstance Win32_Process -Filter 'ProcessId = ${pid}').CommandLine`,
-            ], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
-        }
-        return execFileSync("ps", ["-p", String(pid), "-o", "command="], {
-            encoding: "utf8",
-            stdio: ["ignore", "pipe", "ignore"],
-        }).trim();
-    }
-    catch {
-        return undefined;
+  try {
+    if (process.platform === "win32") {
+      return execFileSync("powershell.exe", [
+        "-NoProfile",
+        "-NonInteractive",
+        "-Command",
+        `(Get-CimInstance Win32_Process -Filter 'ProcessId = ${pid}').CommandLine`
+      ], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
     }
+    return execFileSync("ps", ["-p", String(pid), "-o", "command="], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+  } catch {
+    return void 0;
+  }
 }
 function isLiveOpencodeServe(pid) {
-    if (!Number.isInteger(pid) || pid <= 0)
-        return false;
-    try {
-        process.kill(pid, 0);
-    }
-    catch {
-        return false;
-    }
-    const cmd = processCommand(pid);
-    if (!cmd)
-        return true; // If the platform cannot inspect it, keep the old fail-closed behavior.
-    return /\bserve\b/.test(cmd) && (/(?:^|[\\/\s])opencode(?:\.exe)?(?:\s|$)/i.test(cmd) ||
-        (/--hostname\s+127\.0\.0\.1\b/.test(cmd) && /--port\s+\d+\b/.test(cmd)));
+  if (!Number.isInteger(pid) || pid <= 0) return false;
+  try {
+    process.kill(pid, 0);
+  } catch {
+    return false;
+  }
+  const cmd = processCommand(pid);
+  if (!cmd) return true;
+  return /\bserve\b/.test(cmd) && (/(?:^|[\\/\s])opencode(?:\.exe)?(?:\s|$)/i.test(cmd) || /--hostname\s+127\.0\.0\.1\b/.test(cmd) && /--port\s+\d+\b/.test(cmd));
 }
 async function main() {
-    const port = process.env.COTAL_OPENCODE_PORT?.trim() || String(await freePort());
-    const url = `http://127.0.0.1:${port}`;
-    // Own SQLite DB per agent: opencode auth/config stay on the operator's normal HOME/XDG roots,
-    // while sessions avoid the global DB write lock that stalls concurrent `opencode serve`s.
-    const name = process.env.COTAL_NAME?.trim() || "agent";
-    // Data root the connector pins (the manager's workspace, or the launch dir for standalone spawn) —
-    // NOT process.cwd(), which the manager can point at any repo per-agent. Fail loud if it's missing
-    // rather than silently scattering the DB/pidfile into the launch cwd.
-    const dataRoot = process.env.COTAL_OPENCODE_HOME?.trim();
-    if (!dataRoot)
-        throw new Error("COTAL_OPENCODE_HOME is not set — the connector must pin the agent's data root");
-    const agentHome = join(dataRoot, ".cotal", "opencode", name);
-    const dbPath = join(agentHome, "opencode.db");
-    // Two serves on one agent DB share the SQLite file and stall each other — refuse up front.
-    const pidFile = join(agentHome, "serve.pid");
-    if (existsSync(pidFile)) {
-        const pid = Number(readFileSync(pidFile, "utf8"));
-        if (isLiveOpencodeServe(pid))
-            throw new Error(`agent "${name}" is already running (opencode serve pid ${pid}) — kill it first`);
-        rmSync(pidFile);
+  const port = process.env.COTAL_OPENCODE_PORT?.trim() || String(await freePort());
+  const url = `http://127.0.0.1:${port}`;
+  const name = process.env.COTAL_NAME?.trim() || "agent";
+  const dataRoot = process.env.COTAL_OPENCODE_HOME?.trim();
+  if (!dataRoot) throw new Error("COTAL_OPENCODE_HOME is not set \u2014 the connector must pin the agent's data root");
+  const agentHome = join(dataRoot, ".cotal", "opencode", name);
+  const dbPath = join(agentHome, "opencode.db");
+  const pidFile = join(agentHome, "serve.pid");
+  if (existsSync(pidFile)) {
+    const pid = Number(readFileSync(pidFile, "utf8"));
+    if (isLiveOpencodeServe(pid))
+      throw new Error(`agent "${name}" is already running (opencode serve pid ${pid}) \u2014 kill it first`);
+    rmSync(pidFile);
+  }
+  mkdirSync(agentHome, { recursive: true });
+  const serve = spawn(BIN, ["serve", "--hostname", "127.0.0.1", "--port", port], {
+    env: {
+      ...process.env,
+      COTAL_OPENCODE_SERVER_URL: url,
+      OPENCODE_SERVER_USERNAME: USERNAME,
+      OPENCODE_SERVER_PASSWORD: SECRET,
+      OPENCODE_DB: dbPath
+    },
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+  writeFileSync(pidFile, String(serve.pid));
+  serve.on("exit", () => rmSync(pidFile, { force: true }));
+  let sessionId;
+  let attached = false;
+  let onSession;
+  const scan = (d) => {
+    if (!attached) process.stderr.write(d);
+    if (!sessionId) {
+      const m = d.toString().match(/\[cotal-session\] (\S+)/);
+      if (m) {
+        sessionId = m[1];
+        onSession?.(sessionId);
+      }
     }
-    mkdirSync(agentHome, { recursive: true });
-    const serve = spawn(BIN, ["serve", "--hostname", "127.0.0.1", "--port", port], {
-        env: {
-            ...process.env,
-            COTAL_OPENCODE_SERVER_URL: url,
-            OPENCODE_SERVER_USERNAME: USERNAME,
-            OPENCODE_SERVER_PASSWORD: SECRET,
-            OPENCODE_DB: dbPath,
-        },
-        stdio: ["ignore", "pipe", "pipe"],
-    });
-    writeFileSync(pidFile, String(serve.pid));
-    serve.on("exit", () => rmSync(pidFile, { force: true }));
-    // Scan the server's output for the plugin's session handshake; forward boot logs to our stderr
-    // until the TUI takes over the terminal (after that, drop them so they can't corrupt its display).
-    let sessionId;
-    let attached = false;
-    let onSession;
-    const scan = (d) => {
-        if (!attached)
-            process.stderr.write(d);
-        if (!sessionId) {
-            const m = d.toString().match(/\[cotal-session\] (\S+)/);
-            if (m) {
-                sessionId = m[1];
-                onSession?.(sessionId);
-            }
-        }
-    };
-    serve.stdout?.on("data", scan);
-    serve.stderr?.on("data", scan);
-    serve.on("exit", (code, signal) => {
-        if (!attached)
-            process.exit(code ?? (signal ? 1 : 0)); // died before the TUI came up
-    });
-    // Poke the server until the plugin's session handshake lands (lazy plugin load → mesh join +
-    // session create). Poking must NOT stop at the first 2xx: early in boot the server can answer
-    // /session before the project instance has bootstrapped, and only a later request triggers the
-    // bootstrap that loads the plugin. Each poke carries its own abort timeout: a request that
-    // lands in the early-boot window can hang with no response, and an un-timed fetch would pin
-    // the loop on it forever (undici queues later requests behind it on the pooled connection).
-    const auth = `Basic ${Buffer.from(`${USERNAME}:${SECRET}`).toString("base64")}`;
-    void (async () => {
-        for (let i = 0; i < 300 && !sessionId; i++) {
-            try {
-                await fetch(`${url}/session`, { headers: { authorization: auth }, signal: AbortSignal.timeout(1500) });
-            }
-            catch {
-                /* not up yet (or a hung early request, aborted) — retry on a fresh connection */
-            }
-            await new Promise((r) => setTimeout(r, 200));
-        }
-    })();
-    // Wait for the agent's session, then attach a foreground TUI to it.
-    const id = await new Promise((resolve) => {
-        if (sessionId)
-            return resolve(sessionId);
-        onSession = resolve;
-        setTimeout(() => resolve(sessionId), 60_000);
-    });
-    if (!id) {
-        process.stderr.write(`[cotal-connector] serve: agent session never came up (~60s) — aborting. Check the boot log above for plugin/mesh errors (OPENCODE_DB=${dbPath})\n`);
-        await killServe(serve);
-        process.exit(1);
+  };
+  serve.stdout?.on("data", scan);
+  serve.stderr?.on("data", scan);
+  serve.on("exit", (code, signal) => {
+    if (!attached) process.exit(code ?? (signal ? 1 : 0));
+  });
+  const auth = `Basic ${Buffer.from(`${USERNAME}:${SECRET}`).toString("base64")}`;
+  void (async () => {
+    for (let i = 0; i < 300 && !sessionId; i++) {
+      try {
+        await fetch(`${url}/session`, { headers: { authorization: auth }, signal: AbortSignal.timeout(1500) });
+      } catch {
+      }
+      await new Promise((r) => setTimeout(r, 200));
     }
-    // Headless mode (COTAL_SERVE_HEADLESS=1): no foreground TUI. Hand the running server back to a
-    // non-terminal host (a web studio, an automated harness) via one machine-readable handshake line
-    // on stdout, then keep the serve alive. The host drives the session over HTTP (basic auth with the
-    // password below) and tails its event stream. `attached` stays false, so the `serve.on("exit")`
-    // handler above still exits us if the server dies; SIGTERM tears the server down for real.
-    if (process.env.COTAL_SERVE_HEADLESS?.trim() === "1") {
-        process.stdout.write(`[cotal-serve] ${JSON.stringify({ port: Number(port), session: id, password: SECRET })}\n`);
-        for (const sig of ["SIGINT", "SIGTERM"])
-            process.on(sig, () => void killServe(serve).then(() => process.exit(0)));
-        return;
-    }
-    const tuiEnv = {
-        ...process.env,
-        OPENCODE_SERVER_USERNAME: USERNAME,
-        OPENCODE_SERVER_PASSWORD: SECRET,
-        OPENCODE_DB: dbPath,
-    };
-    delete tuiEnv.OPENCODE_CONFIG_CONTENT; // a viewer, not a peer — must NOT load the plugin again
-    for (const k of Object.keys(tuiEnv))
-        if (k.startsWith("COTAL_"))
-            delete tuiEnv[k];
-    attached = true;
-    const tui = spawn(BIN, ["attach", url, "--session", id, "--password", SECRET], {
-        env: tuiEnv,
-        stdio: "inherit",
-    });
+  })();
+  const id = await new Promise((resolve) => {
+    if (sessionId) return resolve(sessionId);
+    onSession = resolve;
+    setTimeout(() => resolve(sessionId), 6e4);
+  });
+  if (!id) {
+    process.stderr.write(
+      `[cotal-connector] serve: agent session never came up (~60s) \u2014 aborting. Check the boot log above for plugin/mesh errors (OPENCODE_DB=${dbPath})
+`
+    );
+    await killServe(serve);
+    process.exit(1);
+  }
+  if (process.env.COTAL_SERVE_HEADLESS?.trim() === "1") {
+    process.stdout.write(`[cotal-serve] ${JSON.stringify({ port: Number(port), session: id, password: SECRET })}
+`);
     for (const sig of ["SIGINT", "SIGTERM"])
-        process.on(sig, () => {
-            tui.kill(sig);
-            serve.kill(sig);
-        });
-    tui.on("exit", (code, signal) => {
-        // TUI closed → tear down the server, for real (SIGKILL fallback), before exiting.
-        void killServe(serve).then(() => process.exit(code ?? (signal ? 1 : 0)));
+      process.on(sig, () => void killServe(serve).then(() => process.exit(0)));
+    return;
+  }
+  const tuiEnv = {
+    ...process.env,
+    OPENCODE_SERVER_USERNAME: USERNAME,
+    OPENCODE_SERVER_PASSWORD: SECRET,
+    OPENCODE_DB: dbPath
+  };
+  delete tuiEnv.OPENCODE_CONFIG_CONTENT;
+  for (const k of Object.keys(tuiEnv)) if (k.startsWith("COTAL_")) delete tuiEnv[k];
+  attached = true;
+  const tui = spawn(BIN, ["attach", url, "--session", id, "--password", SECRET], {
+    env: tuiEnv,
+    stdio: "inherit"
+  });
+  for (const sig of ["SIGINT", "SIGTERM"])
+    process.on(sig, () => {
+      tui.kill(sig);
+      serve.kill(sig);
     });
+  tui.on("exit", (code, signal) => {
+    void killServe(serve).then(() => process.exit(code ?? (signal ? 1 : 0)));
+  });
 }
 void main();
-//# sourceMappingURL=serve.js.map

package/dist/tools.d.ts

@@ -4,9 +4,8 @@
  * tools (the `tool()` helper). One source of truth → the cotal_* surface can't drift across
  * adapters: an OpenCode peer gets the same tools (incl. channels / join / leave / channel_info).
  *
- * The one OpenCode-specific tool is `cotal_inbox`: this connector DRIVES delivery (it surfaces
- * each batch into a turn and acks on completion), so the agent's inbox tool is READ-ONLY — it
- * peeks (never drains), or it would race the connector's ack. It still honors focus-mode recall.
+ * The one OpenCode-specific tool is `cotal_inbox`: automatic traffic remains owned by the driver,
+ * while the tool destructively pulls only quiet ambient (plus read-only focus recall).
  */
 import { type ToolDefinition } from "@opencode-ai/plugin";
 import { type MeshAgent, type AgentConfig } from "@cotal-ai/connector-core";

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAkB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5F,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CA4BrG"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAkB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5F,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CA0BrG"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cotal-ai/connector-opencode",
   "description": "Cotal connector for OpenCode: a native in-process plugin that joins a session to the mesh.",
-  "version": "0.11.3",
+  "version": "0.11.5",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -17,9 +17,6 @@
       "import": "./dist/index.js"
     }
   },
-  "dependencies": {
-    "@cotal-ai/connector-core": "0.11.3"
-  },
   "peerDependencies": {
     "@cotal-ai/core": ">=0.1.0",
     "@opencode-ai/plugin": "^1.16.2",
@@ -30,7 +27,8 @@
     "@opencode-ai/sdk": "^1.16.2",
     "esbuild": "^0.28.0",
     "tsx": "^4.22.4",
-    "@cotal-ai/core": "0.11.3"
+    "@cotal-ai/core": "0.11.5",
+    "@cotal-ai/connector-core": "0.11.5"
   },
   "files": [
     "dist"
@@ -40,7 +38,7 @@
   },
   "scripts": {
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "build": "tsc -p tsconfig.json && pnpm run bundle",
-    "bundle": "esbuild src/plugin.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/plugin.bundle.js --external:@opencode-ai/plugin --external:@opencode-ai/sdk"
+    "build": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\" && tsc -p tsconfig.json --emitDeclarationOnly && pnpm run bundle",
+    "bundle": "esbuild src/index.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/index.js --external:@cotal-ai/core --external:@opencode-ai/plugin --external:@opencode-ai/sdk && esbuild src/plugin.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/plugin.bundle.js --external:@opencode-ai/plugin --external:@opencode-ai/sdk && esbuild src/serve.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/serve.js --external:@opencode-ai/plugin --external:@opencode-ai/sdk"
   }
 }