@gendigital/sage-opencode 0.13.0 → 0.15.0

package/dist/plugin-discovery.d.ts

@@ -10,4 +10,11 @@ import type { Branding, Logger, PluginInfo } from "@gendigital/sage-core";
  * 3. Loose skills (global + project) as pseudo-plugins
  */
 export declare function discoverOpenCodePlugins(logger: Logger, projectDir?: string, branding?: Branding): Promise<PluginInfo[]>;
+/**
+ * NPM package names from an `opencode.json`. OpenCode v1 lists plugins under
+ * `plugin` (`"name"` or `["name", options]`); v2 uses `plugins` (`"name"` or
+ * `{ package: "name", options }`). Both keys are read so either host's config
+ * is covered. Malformed entries and local file specs are ignored.
+ */
+export declare function configPluginNames(config: Record<string, unknown>): string[];
 //# sourceMappingURL=plugin-discovery.d.ts.map

package/dist/plugin-discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-discovery.d.ts","sourceRoot":"","sources":["../src/plugin-discovery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAa,MAAM,uBAAuB,CAAC;AA4CrF;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC5C,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,MAAM,EACnB,QAAQ,GAAE,QAA0B,GAClC,OAAO,CAAC,UAAU,EAAE,CAAC,CA6BvB"}
+{"version":3,"file":"plugin-discovery.d.ts","sourceRoot":"","sources":["../src/plugin-discovery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAa,MAAM,uBAAuB,CAAC;AA+CrF;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC5C,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,MAAM,EACnB,QAAQ,GAAE,QAA0B,GAClC,OAAO,CAAC,UAAU,EAAE,CAAC,CAgCvB;AAaD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAa3E"}

package/dist/plugin-discovery.js

@@ -14,6 +14,8 @@ function getCacheHome() {
     return process.env.XDG_CACHE_HOME ?? join(homedir(), ".cache");
 }
 const PROJECT_CONFIG_NAME = "opencode.json";
+/** Local plugin directory names OpenCode loads inside its config directories. */
+const LOCAL_PLUGIN_DIRS = ["plugins", "plugin"];
 /**
  * Loose-skill roots OpenCode loads, at both scopes. Global (personal) skills
  * live under the user profile; project skills live inside the project dir.
@@ -46,15 +48,18 @@ export async function discoverOpenCodePlugins(logger, projectDir, branding = def
     // 1. Discover NPM plugins from config files
     const npmPlugins = await discoverNpmPlugins(logger, projectDir);
     plugins.push(...npmPlugins);
-    // 2. Discover local plugin files (global)
-    const globalPluginsDir = join(getConfigHome(), "opencode", "plugins");
-    const globalPlugins = await discoverLocalPlugins(globalPluginsDir, "global", logger);
-    plugins.push(...globalPlugins);
+    // 2. Discover local plugin files (global). OpenCode globs both `plugins/`
+    // and `plugin/` inside its config directories.
+    for (const dirName of LOCAL_PLUGIN_DIRS) {
+        const globalPluginsDir = join(getConfigHome(), "opencode", dirName);
+        plugins.push(...(await discoverLocalPlugins(globalPluginsDir, "global", logger)));
+    }
     // 3. Discover local plugin files (project)
     if (projectDir) {
-        const projectPluginsDir = join(projectDir, ".opencode", "plugins");
-        const projectPlugins = await discoverLocalPlugins(projectPluginsDir, "project", logger);
-        plugins.push(...projectPlugins);
+        for (const dirName of LOCAL_PLUGIN_DIRS) {
+            const projectPluginsDir = join(projectDir, ".opencode", dirName);
+            plugins.push(...(await discoverLocalPlugins(projectPluginsDir, "project", logger)));
+        }
     }
     // 4. Discover loose skills as pseudo-plugins (deduped by resolved path,
     // fails open per root) so the scan pipeline covers skills installed outside
@@ -64,6 +69,38 @@ export async function discoverOpenCodePlugins(logger, projectDir, branding = def
     logger.debug(`${branding.name} plugin discovery: found ${plugins.length} plugin(s)`);
     return plugins;
 }
+/** Plugin specs that point at local files rather than npm packages. */
+function isPathSpec(spec) {
+    return (spec.startsWith("file:") ||
+        spec.startsWith("./") ||
+        spec.startsWith("../") ||
+        spec.startsWith("/") ||
+        spec.startsWith("~"));
+}
+/**
+ * NPM package names from an `opencode.json`. OpenCode v1 lists plugins under
+ * `plugin` (`"name"` or `["name", options]`); v2 uses `plugins` (`"name"` or
+ * `{ package: "name", options }`). Both keys are read so either host's config
+ * is covered. Malformed entries and local file specs are ignored.
+ */
+export function configPluginNames(config) {
+    const names = [];
+    for (const key of ["plugin", "plugins"]) {
+        const entries = config[key];
+        if (!Array.isArray(entries))
+            continue;
+        for (const entry of entries) {
+            let spec = entry;
+            if (Array.isArray(entry))
+                spec = entry[0];
+            else if (entry && typeof entry === "object")
+                spec = entry.package;
+            if (typeof spec === "string" && spec && !isPathSpec(spec))
+                names.push(spec);
+        }
+    }
+    return names;
+}
 /**
  * Discover NPM plugins listed in config files
  */
@@ -74,8 +111,7 @@ async function discoverNpmPlugins(logger, projectDir) {
     try {
         const globalConfigPath = join(getConfigHome(), "opencode", "opencode.json");
         const globalConfig = JSON.parse(await getFileContent(globalConfigPath));
-        const globalPlugins = (globalConfig.plugin ?? []);
-        for (const name of globalPlugins) {
+        for (const name of configPluginNames(globalConfig)) {
             pluginNames.add(name);
         }
     }
@@ -87,8 +123,7 @@ async function discoverNpmPlugins(logger, projectDir) {
         try {
             const projectConfigPath = join(projectDir, PROJECT_CONFIG_NAME);
             const projectConfig = JSON.parse(await getFileContent(projectConfigPath));
-            const projectPlugins = (projectConfig.plugin ?? []);
-            for (const name of projectPlugins) {
+            for (const name of configPluginNames(projectConfig)) {
                 pluginNames.add(name);
             }
         }

package/dist/plugin-discovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-discovery.js","sourceRoot":"","sources":["../src/plugin-discovery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EACN,eAAe,EACf,8BAA8B,EAC9B,cAAc,EACd,UAAU,GACV,MAAM,uBAAuB,CAAC;AAE/B,sEAAsE;AACtE,SAAS,aAAa;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAE5C;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,UAAmB;IAC7C,MAAM,KAAK,GAAgB;QAC1B,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE;QACxF,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE;QAClF,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE;KAClF,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,EACnF,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,EAC/E,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAC/E,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,MAAc,EACd,UAAmB,EACnB,WAAqB,eAAe;IAEpC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,8CAA8C,CAAC,CAAC;IAE7E,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,4CAA4C;IAC5C,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;IAE5B,0CAA0C;IAC1C,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrF,OAAO,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;IAE/B,2CAA2C;IAC3C,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,iBAAiB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;IACjC,CAAC;IAED,wEAAwE;IACxE,4EAA4E;IAC5E,cAAc;IACd,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IAExB,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,4BAA4B,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,UAAmB;IACpE,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,qBAAqB;IACrB,IAAI,CAAC;QACJ,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,gBAAgB,CAAC,CAGrE,CAAC;QACF,MAAM,aAAa,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAa,CAAC;QAC9D,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAClC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IAED,yCAAyC;IACzC,IAAI,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;YAChE,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,iBAAiB,CAAC,CAGvE,CAAC;YACF,MAAM,cAAc,GAAG,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE,CAAa,CAAC;YAChE,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;gBACnC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;IAED,gDAAgD;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACrE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,WAAW,CAAC,CAA4B,CAAC;YAEzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,OAAO,GAAI,OAAO,CAAC,OAAkB,IAAI,SAAS,CAAC;YACzD,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,OAAO,EAAE,CAAC;YAEvC,OAAO,CAAC,IAAI,CAAC;gBACZ,GAAG;gBACH,WAAW;gBACX,OAAO;gBACP,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,8CAA8C,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,oBAAoB,CAClC,UAAkB,EAClB,OAAe,EACf,MAAc;IAEd,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,iCAAiC,UAAU,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEzC,8BAA8B;QAC9B,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACvD,SAAS;QACV,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YAE9B,8BAA8B;YAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,+BAA+B;YACjF,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YAE5C,OAAO,CAAC,IAAI,CAAC;gBACZ,GAAG;gBACH,WAAW,EAAE,QAAQ;gBACrB,OAAO;gBACP,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC"}
+{"version":3,"file":"plugin-discovery.js","sourceRoot":"","sources":["../src/plugin-discovery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EACN,eAAe,EACf,8BAA8B,EAC9B,cAAc,EACd,UAAU,GACV,MAAM,uBAAuB,CAAC;AAE/B,sEAAsE;AACtE,SAAS,aAAa;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAE5C,iFAAiF;AACjF,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAEhD;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,UAAmB;IAC7C,MAAM,KAAK,GAAgB;QAC1B,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE;QACxF,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE;QAClF,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE;KAClF,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,EACnF,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,EAC/E,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAC/E,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,MAAc,EACd,UAAmB,EACnB,WAAqB,eAAe;IAEpC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,8CAA8C,CAAC,CAAC;IAE7E,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,4CAA4C;IAC5C,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;IAE5B,0EAA0E;IAC1E,+CAA+C;IAC/C,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,2CAA2C;IAC3C,IAAI,UAAU,EAAE,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACzC,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,oBAAoB,CAAC,iBAAiB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC;IACF,CAAC;IAED,wEAAwE;IACxE,4EAA4E;IAC5E,cAAc;IACd,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IAExB,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,4BAA4B,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,uEAAuE;AACvE,SAAS,UAAU,CAAC,IAAY;IAC/B,OAAO,CACN,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QACxB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CACpB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA+B;IAChE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,IAAI,GAAY,KAAK,CAAC;YAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;iBACrC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,IAAI,GAAI,KAA+B,CAAC,OAAO,CAAC;YAC7F,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,UAAmB;IACpE,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,qBAAqB;IACrB,IAAI,CAAC;QACJ,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,gBAAgB,CAAC,CAGrE,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;YACpD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IAED,yCAAyC;IACzC,IAAI,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;YAChE,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,iBAAiB,CAAC,CAGvE,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;gBACrD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;IAED,gDAAgD;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACrE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,WAAW,CAAC,CAA4B,CAAC;YAEzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,OAAO,GAAI,OAAO,CAAC,OAAkB,IAAI,SAAS,CAAC;YACzD,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,OAAO,EAAE,CAAC;YAEvC,OAAO,CAAC,IAAI,CAAC;gBACZ,GAAG;gBACH,WAAW;gBACX,OAAO;gBACP,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,8CAA8C,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,oBAAoB,CAClC,UAAkB,EAClB,OAAe,EACf,MAAc;IAEd,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,iCAAiC,UAAU,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEzC,8BAA8B;QAC9B,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACvD,SAAS;QACV,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YAE9B,8BAA8B;YAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,+BAA+B;YACjF,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YAE5C,OAAO,CAAC,IAAI,CAAC;gBACZ,GAAG;gBACH,WAAW,EAAE,QAAQ;gBACrB,OAAO;gBACP,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/shared.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Host-agnostic Sage controller shared by the OpenCode v1 (`server`) and v2
+ * (`setup`) entry points: config/branding, the scan orchestration and skill
+ * verdict watcher, the tool interception pipeline, the approval lifecycle and
+ * the Sage MCP server definition. Adapters only translate host hook shapes.
+ */
+import { type Branding, type Logger, type PendingEntry } from "@gendigital/sage-core";
+import { createToolHandlers } from "./tool-handler.js";
+/** Stable plugin ID reported to both OpenCode v1 and v2 loaders. */
+export declare const SAGE_PLUGIN_ID = "@gendigital/sage-opencode";
+/** Key under which the Sage MCP server is registered in OpenCode's `mcp` config. */
+export declare const SAGE_MCP_SERVER_NAME = "sage";
+export type ToastVariant = "info" | "success" | "warning" | "error";
+export type ToastFn = (msg: string, variant: ToastVariant, durationMs?: number) => void;
+/** Sage MCP server launch definition (host-neutral; each adapter adds its own flags). */
+export declare function sageMcpServerConfig(): {
+    type: "local";
+    command: string[];
+    environment: Record<string, string>;
+};
+export interface SageHostOptions {
+    /** Project directory used for the plugin/skill scan. */
+    directory: string;
+    /**
+     * Builds the native toast notifier once branding is resolved. Omitted on
+     * hosts without a notification API (OpenCode v2 server plugins);
+     * notifications then go to the operational log instead.
+     */
+    createNotifier?: (branding: Branding) => ToastFn;
+    /** Host label for log messages (e.g. "v1", "v2"). */
+    host: string;
+}
+export interface SageController {
+    branding: Branding;
+    logger: Logger;
+    /** Canonical tool interception; throws `SageVerdictBlockError` to block. */
+    beforeToolUse: ReturnType<typeof createToolHandlers>["tool.execute.before"];
+    /** Run the plugin/skill scan once per session ID. */
+    scanSession(sessionID: string): Promise<void>;
+    /** `sage_approve` description shared by both hosts. */
+    approveToolDescription: string;
+    /** `sage_approve` actionId argument description shared by both hosts. */
+    approveArgDescription: string;
+    /**
+     * Run the `sage_approve` lifecycle. `askUser` shows the host's native
+     * dialog and must throw (or reject) when the user declines; any failure is
+     * treated as a rejection (fail closed) and the pending entry is dropped.
+     */
+    resolveApproval(actionId: string, askUser: (pending: PendingEntry) => Promise<void>): Promise<string>;
+}
+/**
+ * Thrown by an adapter's `askUser` when the native approval dialog could not
+ * be shown at all (as opposed to the user declining). The action still stays
+ * blocked (fail closed), but the message is returned to the agent so the user
+ * learns why no dialog appeared and how to fix it.
+ */
+export declare class ApprovalUnavailableError extends Error {
+    readonly name = "ApprovalUnavailableError";
+}
+/** Human-readable artifact labels for approval dialogs. */
+export declare function approvalPatterns(pending: PendingEntry): string[];
+export declare function createSageController(options: SageHostOptions): Promise<SageController>;
+//# sourceMappingURL=shared.d.ts.map

package/dist/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../src/shared.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAIN,KAAK,QAAQ,EAQb,KAAK,MAAM,EAGX,KAAK,YAAY,EAKjB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,oEAAoE;AACpE,eAAO,MAAM,cAAc,8BAA8B,CAAC;AAE1D,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAI3C,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AACpE,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAgLxF,yFAAyF;AACzF,wBAAgB,mBAAmB,IAAI;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAOA;AAED,MAAM,WAAW,eAAe;IAC/B,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC;IACjD,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,aAAa,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAC5E,qDAAqD;IACrD,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,uDAAuD;IACvD,sBAAsB,EAAE,MAAM,CAAC;IAC/B,yEAAyE;IACzE,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,eAAe,CACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,GAC/C,OAAO,CAAC,MAAM,CAAC,CAAC;CACnB;AAED;;;;;GAKG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IAClD,SAAkB,IAAI,8BAA8B;CACpD;AAED,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,EAAE,CAEhE;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAsL5F"}

package/dist/shared.js

@@ -0,0 +1,352 @@
+/**
+ * Host-agnostic Sage controller shared by the OpenCode v1 (`server`) and v2
+ * (`setup`) entry points: config/branding, the scan orchestration and skill
+ * verdict watcher, the tool interception pipeline, the approval lifecycle and
+ * the Sage MCP server definition. Adapters only translate host hook shapes.
+ */
+import { mkdirSync, watchFile } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { ApprovalStore, approveAction, checkAllowlistMigration, createOperationalLogger, foreignSourceRuntime, formatAllowlistMigrationWarning, formatConfigurationWarnings, formatNoticeById, getConfigurationWarnings, loadConfig, loadSkillVerdictCache, resolveBranding, resolvePath, } from "@gendigital/sage-core";
+import { getBundledDataDirs } from "./bundled-dirs.js";
+import { createSessionScanHandler } from "./startup-scan.js";
+import { createToolHandlers } from "./tool-handler.js";
+/** Stable plugin ID reported to both OpenCode v1 and v2 loaders. */
+export const SAGE_PLUGIN_ID = "@gendigital/sage-opencode";
+/** Key under which the Sage MCP server is registered in OpenCode's `mcp` config. */
+export const SAGE_MCP_SERVER_NAME = "sage";
+const APPROVAL_STORE_CLEANUP_INTERVAL_MS = 5 * 60 * 1000; // 5 minutes
+const DEFAULT_TOAST_DURATION_MS = 5000;
+// The startup security summary lists every risky skill, so it's shown longer to
+// give the user time to read the list before it dismisses.
+const STARTUP_SUMMARY_DURATION_MS = 10_000;
+// Module-scoped so repeated plugin instantiations (OpenCode may load the
+// plugin more than once) share a single watcher and one notified-set, instead
+// of each instance attaching its own watcher and toasting the same verdict.
+//
+// This state (watcher, notified-set, session scans, toast queue/notifier) is
+// shared by the v1 and v2 adapters. That assumes one OpenCode host per process:
+// a host loads either `server` (v1) or `setup` (v2), never both. If both ever
+// ran in one process, the first instance's notifier would serve both and each
+// session would be scanned once in total, not once per adapter.
+const notifiedSkillVerdicts = new Set();
+let skillWatcherAttached = false;
+// One scan per session, shared across instances: the entry guards against
+// re-running the scan when session events fire repeatedly or on more than one
+// plugin instance.
+const sessionScanPromises = new Map();
+const toastQueue = [];
+let toastPumpRunning = false;
+// Bound to the first instance's notifier (see createSageController).
+let displayToast;
+async function pumpToasts() {
+    if (toastPumpRunning)
+        return;
+    toastPumpRunning = true;
+    try {
+        while (toastQueue.length > 0) {
+            const next = toastQueue[0];
+            // No notifier bound yet — leave the item queued; a later enqueue resumes.
+            if (!displayToast || !next)
+                break;
+            displayToast(next.message, next.variant, next.durationMs);
+            toastQueue.shift();
+            // Hold the slot for this toast's full duration before showing the next,
+            // so a following toast can't replace it early (showToast overwrites).
+            await new Promise((resolve) => setTimeout(resolve, next.durationMs));
+        }
+    }
+    finally {
+        toastPumpRunning = false;
+    }
+}
+function enqueueToast(message, variant, durationMs = DEFAULT_TOAST_DURATION_MS) {
+    toastQueue.push({ message, variant, durationMs });
+    void pumpToasts();
+}
+// Shared dedup key across the two surfacing paths: the scan-findings popup keys
+// on `finding.artifact` (which is `skillId.slice(0, 16)`), and the cache watcher
+// keys on the full skillId — so both reduce to this 16-char content-hash prefix
+// and `notifiedSkillVerdicts` never double-announces the same skill version.
+function shortSkillId(skillId) {
+    return skillId.slice(0, 16);
+}
+/**
+ * Read `~/.sage/skill_verdict_cache.json` and return every HIGH/CRITICAL verdict
+ * relevant to this runtime — one per cache entry, NOT deduped, since dedup is
+ * caller-specific (the popup keys on current content, the toast queue on
+ * skillId). HIGH maps to the "WARNING" label. Verdicts sourced only from other
+ * agent runtimes are skipped so one host doesn't echo another's finds.
+ */
+async function collectRiskySkills(agentRuntime) {
+    const cache = await loadSkillVerdictCache();
+    const out = [];
+    for (const [skillId, verdict] of Object.entries(cache.entries)) {
+        const risk = (verdict.verdict ?? "").toUpperCase();
+        if (risk !== "HIGH" && risk !== "CRITICAL")
+            continue;
+        if (foreignSourceRuntime(verdict.sources, agentRuntime))
+            continue;
+        const key = verdict.sources?.find((s) => s.containerKey)?.containerKey ||
+            verdict.skillName ||
+            skillId.slice(0, 16);
+        out.push({
+            skillId,
+            key,
+            severity: risk === "CRITICAL" ? "CRITICAL" : "WARNING",
+            summary: verdict.summary?.trim(),
+        });
+    }
+    return out;
+}
+/**
+ * Watch `~/.sage/skill_verdict_cache.json` and queue one toast per verdict the
+ * upload worker writes mid-session (it writes asynchronously, ~one session after
+ * discovery). The serial queue shows them one at a time so two skills finishing
+ * together are both seen.
+ *
+ * Verdicts cached by earlier sessions are *seeded silently* on attach — marked
+ * notified without a toast — because the plugin initialises before the TUI is
+ * ready to render toasts. Those are surfaced instead by the session-start
+ * summary popup (see `surfaceStartupSummary`), which runs after the scan when
+ * the TUI is up.
+ *
+ * Dedup keys on `skillId` (content hash), not the container key, so editing a
+ * skill — which yields a new hash under the same key — is treated as a new
+ * finding and re-announced rather than silently collapsed into the old one.
+ */
+function setupSkillFindingsWatcher(logger, agentRuntime) {
+    if (skillWatcherAttached)
+        return;
+    const sageDir = resolvePath("~/.sage");
+    const seedNotified = async () => {
+        try {
+            for (const s of await collectRiskySkills(agentRuntime)) {
+                notifiedSkillVerdicts.add(shortSkillId(s.skillId));
+            }
+        }
+        catch (e) {
+            logger.debug("Skill verdict seed failed", { error: String(e) });
+        }
+    };
+    // Mid-session: queue one toast per newly written (not-yet-notified) verdict.
+    const announceNew = async () => {
+        try {
+            for (const s of await collectRiskySkills(agentRuntime)) {
+                const short = shortSkillId(s.skillId);
+                if (notifiedSkillVerdicts.has(short))
+                    continue;
+                notifiedSkillVerdicts.add(short);
+                const detail = s.summary ? `${s.key} — ${s.summary}` : `${s.key} detected`;
+                logger.debug("Skill finding toast queued", { key: s.key, severity: s.severity });
+                enqueueToast(`${detail} (${s.severity})`, s.severity === "CRITICAL" ? "error" : "warning");
+            }
+        }
+        catch (e) {
+            logger.debug("Skill verdict watcher scan failed", { error: String(e) });
+        }
+    };
+    try {
+        mkdirSync(sageDir, { recursive: true });
+        void seedNotified();
+        // Poll the cache file with watchFile rather than watch() the directory.
+        // On Windows, fs.watch aborts the whole process (an uncatchable libuv
+        // assertion in fs-event.c) when the watched path is an 8.3 short name
+        // (e.g. an os.tmpdir() like C:\Users\FOO~1.BAR\...) or symlinked home.
+        // watchFile is stat-based polling — immune to that. A few seconds of
+        // latency for mid-session verdicts is fine (matches the statusline poll
+        // cadence used elsewhere). Handles a not-yet-existent file (polls until
+        // it appears).
+        const cacheFile = join(sageDir, "skill_verdict_cache.json");
+        const watcher = watchFile(cacheFile, { interval: 3000 }, (curr, prev) => {
+            if (curr.mtimeMs !== prev.mtimeMs)
+                void announceNew();
+        });
+        watcher.unref?.();
+        skillWatcherAttached = true;
+        logger.debug("Skill findings watcher attached", { cacheFile });
+    }
+    catch (e) {
+        // ~/.sage/ may be unwritable — no watcher, no notifications (fail-open).
+        logger.debug("Skill findings watcher setup failed", { error: String(e) });
+    }
+}
+/** Sage MCP server launch definition (host-neutral; each adapter adds its own flags). */
+export function sageMcpServerConfig() {
+    const serverPath = join(dirname(fileURLToPath(import.meta.url)), "mcp-server.cjs");
+    return {
+        type: "local",
+        command: [process.execPath, serverPath],
+        environment: { BUN_BE_BUN: "1", SAGE_AGENT_RUNTIME: "opencode" },
+    };
+}
+/**
+ * Thrown by an adapter's `askUser` when the native approval dialog could not
+ * be shown at all (as opposed to the user declining). The action still stays
+ * blocked (fail closed), but the message is returned to the agent so the user
+ * learns why no dialog appeared and how to fix it.
+ */
+export class ApprovalUnavailableError extends Error {
+    name = "ApprovalUnavailableError";
+}
+/** Human-readable artifact labels for approval dialogs. */
+export function approvalPatterns(pending) {
+    return pending.artifacts.map((a) => `[${a.type}] ${a.value}`);
+}
+export async function createSageController(options) {
+    const config = await loadConfig();
+    const operationalLogger = createOperationalLogger(config.operational_logging, "opencode");
+    const logger = operationalLogger.forComponent("plugin");
+    const toolLogger = operationalLogger.forComponent("tool-handler");
+    const scanLogger = operationalLogger.forComponent("startup-scan");
+    const branding = resolveBranding(config.brand_key, logger);
+    // Hosts without a toast API still surface notifications — in the log.
+    const notify = options.createNotifier?.(branding) ??
+        ((msg, variant) => {
+            const data = { host: options.host, variant };
+            if (variant === "error" || variant === "warning") {
+                logger.warn(`${branding.name}: ${msg}`, data);
+            }
+            else {
+                logger.info(`${branding.name}: ${msg}`, data);
+            }
+        });
+    // Bind the module-scoped skill-toast queue to this (first) instance's notifier.
+    displayToast ??= notify;
+    const warningMessage = formatConfigurationWarnings(await getConfigurationWarnings(undefined, logger), branding);
+    if (warningMessage)
+        notify(warningMessage, "warning", DEFAULT_TOAST_DURATION_MS);
+    const allowlistMigration = await checkAllowlistMigration();
+    if (allowlistMigration.needed) {
+        notify(formatAllowlistMigrationWarning(allowlistMigration.entryTypes, branding), "warning", 8000);
+    }
+    const { threatsDir, trustedDomainsDir } = getBundledDataDirs();
+    const approvalStore = new ApprovalStore();
+    // Watch for verdicts the upload worker writes mid-session (queued toasts).
+    // Verdicts cached by earlier sessions are surfaced by surfaceStartupSummary.
+    setupSkillFindingsWatcher(logger, "opencode");
+    // Surface the scan's structured findings after the scan (TUI ready). Findings
+    // are install- and content-accurate: the scan hashes current on-disk content
+    // and looks up its verdict, so a deleted skill isn't discovered and an edited
+    // skill is matched by its new hash — no cache re-derivation needed.
+    //
+    // Single startup surface: one summary toast listing every risky skill from
+    // this scan. Summarized skills are marked notified so the cache watcher does
+    // not also announce them per-skill; verdicts that land *after* the scan
+    // (worker uploads) are still surfaced individually by the watcher.
+    const surfaceStartupSummary = (scanResults) => {
+        try {
+            const skills = [];
+            const seen = new Set();
+            for (const result of scanResults) {
+                for (const finding of result.findings) {
+                    if (finding.threatId !== "SKILL_CHECK")
+                        continue;
+                    if (finding.severity !== "critical" && finding.severity !== "warning")
+                        continue;
+                    if (seen.has(result.plugin.key))
+                        continue;
+                    seen.add(result.plugin.key);
+                    skills.push({
+                        key: result.plugin.key,
+                        severity: finding.severity === "critical" ? "CRITICAL" : "WARNING",
+                        finding,
+                    });
+                }
+            }
+            if (skills.length === 0)
+                return;
+            // Mark every summarized skill as notified so the cache watcher doesn't
+            // also announce it per-skill. `finding.artifact` is the 16-char short
+            // hash — the same key the watcher dedups on. Verdicts that land after
+            // this scan (worker uploads) are still surfaced individually.
+            for (const s of skills) {
+                if (s.finding.artifact)
+                    notifiedSkillVerdicts.add(s.finding.artifact);
+            }
+            // The summary: a single toast listing every risky skill, shown longer.
+            const hasCritical = skills.some((s) => s.severity === "CRITICAL");
+            const body = skills.map((s) => `${s.key} (${s.severity})`).join("\n");
+            enqueueToast(`${branding.name} detected ${skills.length} malicious/suspicious skill(s):\n${body}`, hasCritical ? "error" : "warning", STARTUP_SUMMARY_DURATION_MS);
+        }
+        catch (e) {
+            logger.debug("Skill summary popup failed", { error: String(e) });
+        }
+    };
+    // Set up the cron job that cleans up the approval store.
+    const interval = setInterval(() => {
+        approvalStore.cleanup();
+    }, APPROVAL_STORE_CLEANUP_INTERVAL_MS);
+    interval.unref?.();
+    const toolHandlers = createToolHandlers(toolLogger, approvalStore, threatsDir, trustedDomainsDir, { showToast: notify }, branding);
+    /**
+     * Run the session scan exactly once per session and cache the promise. The
+     * cached promise is the dedupe guard — a second call (repeated session
+     * events, or another plugin instance) returns the same in-flight/settled
+     * promise instead of re-scanning. The scan's structured findings drive the
+     * summary popup (see `surfaceStartupSummary`).
+     */
+    const scanSession = (sessionID) => {
+        if (!sessionID || sessionID === "unknown")
+            return Promise.resolve();
+        const existing = sessionScanPromises.get(sessionID);
+        if (existing)
+            return existing;
+        const promise = (async () => {
+            logger.debug(`${branding.name}: starting session scan`, { sessionID, host: options.host });
+            const scanHandler = createSessionScanHandler(scanLogger, options.directory, 
+            // After the scan (TUI ready): summary popup from the structured findings.
+            surfaceStartupSummary, branding, 
+            // One-time notices (e.g. skill-upload consent) as info toasts.
+            (noticeIds) => {
+                for (const id of noticeIds) {
+                    const text = formatNoticeById(id, branding);
+                    if (text)
+                        enqueueToast(text, "info", STARTUP_SUMMARY_DURATION_MS);
+                }
+            });
+            await scanHandler();
+        })();
+        sessionScanPromises.set(sessionID, promise);
+        return promise;
+    };
+    const resolveApproval = async (actionId, askUser) => {
+        const pending = approvalStore.getPending(actionId);
+        if (!pending) {
+            return `No pending ${branding.name} approval found for this action ID.`;
+        }
+        try {
+            await askUser(pending);
+        }
+        catch (error) {
+            logger.debug(`${branding.name}: approval dialog failed`, {
+                actionId,
+                host: options.host,
+                error: String(error),
+            });
+            approvalStore.deletePending(actionId);
+            if (error instanceof ApprovalUnavailableError) {
+                logger.warn(`${branding.name}: approval dialog unavailable`, {
+                    actionId,
+                    host: options.host,
+                    error: error.message,
+                });
+                return `Rejected: the ${branding.name} approval dialog could not be shown (${error.message}). The action stays blocked.`;
+            }
+            logger.debug("OpenCode approval rejected", { actionId, host: options.host });
+            return "Rejected by user.";
+        }
+        logger.info("OpenCode approval accepted", { actionId, host: options.host });
+        return approveAction(approvalStore, actionId, branding);
+    };
+    return {
+        branding,
+        logger,
+        beforeToolUse: toolHandlers["tool.execute.before"],
+        scanSession,
+        approveToolDescription: `Review a ${branding.name}-flagged tool call. Shows a native approval dialog to the user. Call this immediately when ${branding.name} flags an action — do NOT ask the user in chat first.`,
+        approveArgDescription: `Action ID from ${branding.name} flagged message`,
+        resolveApproval,
+    };
+}
+//# sourceMappingURL=shared.js.map

package/dist/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../src/shared.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAEN,aAAa,EACb,aAAa,EAEb,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,+BAA+B,EAC/B,2BAA2B,EAC3B,gBAAgB,EAChB,wBAAwB,EAExB,UAAU,EACV,qBAAqB,EAIrB,eAAe,EACf,WAAW,GACX,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,2BAA2B,CAAC;AAE1D,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C,MAAM,kCAAkC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAKtE,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,gFAAgF;AAChF,2DAA2D;AAC3D,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAE3C,yEAAyE;AACzE,8EAA8E;AAC9E,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,gEAAgE;AAChE,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAU,CAAC;AAChD,IAAI,oBAAoB,GAAG,KAAK,CAAC;AAEjC,0EAA0E;AAC1E,8EAA8E;AAC9E,mBAAmB;AACnB,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAO7D,MAAM,UAAU,GAAkB,EAAE,CAAC;AACrC,IAAI,gBAAgB,GAAG,KAAK,CAAC;AAC7B,qEAAqE;AACrE,IAAI,YAAiC,CAAC;AAEtC,KAAK,UAAU,UAAU;IACxB,IAAI,gBAAgB;QAAE,OAAO;IAC7B,gBAAgB,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC;QACJ,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC3B,0EAA0E;YAC1E,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI;gBAAE,MAAM;YAClC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1D,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;YAAS,CAAC;QACV,gBAAgB,GAAG,KAAK,CAAC;IAC1B,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CACpB,OAAe,EACf,OAAqB,EACrB,UAAU,GAAG,yBAAyB;IAEtC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAClD,KAAK,UAAU,EAAE,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,6EAA6E;AAC7E,SAAS,YAAY,CAAC,OAAe;IACpC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AASD;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAAC,YAA0B;IAC3D,MAAM,KAAK,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU;YAAE,SAAS;QACrD,IAAI,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC;YAAE,SAAS;QAClE,MAAM,GAAG,GACR,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY;YAC1D,OAAO,CAAC,SAAS;YACjB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC;YACR,OAAO;YACP,GAAG;YACH,QAAQ,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACtD,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE;SAChC,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,yBAAyB,CAAC,MAAc,EAAE,YAA0B;IAC5E,IAAI,oBAAoB;QAAE,OAAO;IACjC,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAEvC,MAAM,YAAY,GAAG,KAAK,IAAmB,EAAE;QAC9C,IAAI,CAAC;YACJ,KAAK,MAAM,CAAC,IAAI,MAAM,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxD,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACF,CAAC,CAAC;IAEF,6EAA6E;IAC7E,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC7C,IAAI,CAAC;YACJ,KAAK,MAAM,CAAC,IAAI,MAAM,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC/C,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC;gBAC3E,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACjF,YAAY,CAAC,GAAG,MAAM,KAAK,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5F,CAAC;QACF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACF,CAAC,CAAC;IAEF,IAAI,CAAC;QACJ,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,KAAK,YAAY,EAAE,CAAC;QACpB,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,eAAe;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACvE,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;gBAAE,KAAK,WAAW,EAAE,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,oBAAoB,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,yEAAyE;QACzE,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;AACF,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,mBAAmB;IAKlC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnF,OAAO;QACN,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;QACvC,WAAW,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,EAAE,UAAU,EAAE;KAChE,CAAC;AACH,CAAC;AAqCD;;;;;GAKG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAChC,IAAI,GAAG,0BAA0B,CAAC;CACpD;AAED,2DAA2D;AAC3D,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IACrD,OAAO,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAwB;IAClE,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,MAAM,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAE3D,sEAAsE;IACtE,MAAM,MAAM,GACX,OAAO,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC;QAClC,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;YACjB,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAC7C,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;YAC/C,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,gFAAgF;IAChF,YAAY,KAAK,MAAM,CAAC;IAExB,MAAM,cAAc,GAAG,2BAA2B,CACjD,MAAM,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC,EACjD,QAAQ,CACR,CAAC;IACF,IAAI,cAAc;QAAE,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACjF,MAAM,kBAAkB,GAAG,MAAM,uBAAuB,EAAE,CAAC;IAC3D,IAAI,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,CACL,+BAA+B,CAAC,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,EACxE,SAAS,EACT,IAAI,CACJ,CAAC;IACH,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAE1C,2EAA2E;IAC3E,6EAA6E;IAC7E,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE9C,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,oEAAoE;IACpE,EAAE;IACF,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,mEAAmE;IACnE,MAAM,qBAAqB,GAAG,CAAC,WAA+B,EAAQ,EAAE;QACvE,IAAI,CAAC;YACJ,MAAM,MAAM,GAIP,EAAE,CAAC;YACR,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;gBAClC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,aAAa;wBAAE,SAAS;oBACjD,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;wBAAE,SAAS;oBAChF,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAC1C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC5B,MAAM,CAAC,IAAI,CAAC;wBACX,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;wBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;wBAClE,OAAO;qBACP,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEhC,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,8DAA8D;YAC9D,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ;oBAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvE,CAAC;YAED,uEAAuE;YACvE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtE,YAAY,CACX,GAAG,QAAQ,CAAC,IAAI,aAAa,MAAM,CAAC,MAAM,oCAAoC,IAAI,EAAE,EACpF,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EACjC,2BAA2B,CAC3B,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;IACF,CAAC,CAAC;IAEF,yDAAyD;IACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,aAAa,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC,EAAE,kCAAkC,CAAC,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IAEnB,MAAM,YAAY,GAAG,kBAAkB,CACtC,UAAU,EACV,aAAa,EACb,UAAU,EACV,iBAAiB,EACjB,EAAE,SAAS,EAAE,MAAM,EAAE,EACrB,QAAQ,CACR,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAiB,EAAE;QACxD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACpE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,yBAAyB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3F,MAAM,WAAW,GAAG,wBAAwB,CAC3C,UAAU,EACV,OAAO,CAAC,SAAS;YACjB,0EAA0E;YAC1E,qBAAqB,EACrB,QAAQ;YACR,+DAA+D;YAC/D,CAAC,SAAS,EAAE,EAAE;gBACb,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;oBAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;oBAC5C,IAAI,IAAI;wBAAE,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,2BAA2B,CAAC,CAAC;gBACnE,CAAC;YACF,CAAC,CACD,CAAC;YACF,MAAM,WAAW,EAAE,CAAC;QACrB,CAAC,CAAC,EAAE,CAAC;QACL,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,eAAe,GAAsC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACtF,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,cAAc,QAAQ,CAAC,IAAI,qCAAqC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,0BAA0B,EAAE;gBACxD,QAAQ;gBACR,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACpB,CAAC,CAAC;YACH,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,KAAK,YAAY,wBAAwB,EAAE,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,+BAA+B,EAAE;oBAC5D,QAAQ;oBACR,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,KAAK,EAAE,KAAK,CAAC,OAAO;iBACpB,CAAC,CAAC;gBACH,OAAO,iBAAiB,QAAQ,CAAC,IAAI,wCAAwC,KAAK,CAAC,OAAO,8BAA8B,CAAC;YAC1H,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7E,OAAO,mBAAmB,CAAC;QAC5B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,OAAO,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC,CAAC;IAEF,OAAO;QACN,QAAQ;QACR,MAAM;QACN,aAAa,EAAE,YAAY,CAAC,qBAAqB,CAAC;QAClD,WAAW;QACX,sBAAsB,EAAE,YAAY,QAAQ,CAAC,IAAI,8FAA8F,QAAQ,CAAC,IAAI,uDAAuD;QACnN,qBAAqB,EAAE,kBAAkB,QAAQ,CAAC,IAAI,kBAAkB;QACxE,eAAe;KACf,CAAC;AACH,CAAC"}

package/dist/tool-handler.d.ts

@@ -1,5 +1,11 @@
 import { type ApprovalStore, type Branding, type CanonicalToolType, type Logger } from "@gendigital/sage-core";
 export declare const OPENCODE_TOOL_MAP: Record<string, CanonicalToolType>;
+/**
+ * Map OpenCode argument names onto the Claude-style keys core reads
+ * (`file_path`, `new_string`, and `patch` for ApplyPatch AMSI scans and
+ * content snapshots).
+ */
+export declare function normalizeToolInput(toolName: string, args: Record<string, unknown>): Record<string, unknown>;
 export interface ToolHandlerOptions {
     showToast?: (msg: string, variant: "info" | "success" | "warning" | "error") => void;
 }

package/dist/tool-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-handler.d.ts","sourceRoot":"","sources":["../src/tool-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EAOtB,KAAK,MAAM,EAGX,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAc/D,CAAC;AA+BF,MAAM,WAAW,kBAAkB;IAClC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,KAAK,IAAI,CAAC;CACrF;AAED,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,MAAM,EACzB,OAAO,CAAC,EAAE,kBAAkB,EAC5B,QAAQ,GAAE,QAA0B;mCAG5B;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,UAClD;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KACvC,OAAO,CAAC,IAAI,CAAC;EA2IhB"}
+{"version":3,"file":"tool-handler.d.ts","sourceRoot":"","sources":["../src/tool-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EAOtB,KAAK,MAAM,EAGX,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAkB/D,CAAC;AASF;;;;GAIG;AACH,wBAAgB,kBAAkB,CACjC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AAED,MAAM,WAAW,kBAAkB;IAClC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,KAAK,IAAI,CAAC;CACrF;AAED,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,MAAM,EACzB,OAAO,CAAC,EAAE,kBAAkB,EAC5B,QAAQ,GAAE,QAA0B;mCAG5B;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,UAClD;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KACvC,OAAO,CAAC,IAAI,CAAC;EAiJhB"}