@gendigital/sage-opencode 0.13.0 → 0.15.0

package/dist/tool-handler.js

@@ -13,26 +13,40 @@ export const OPENCODE_TOOL_MAP = {
     question: "Question",
     task: "Task",
     read_lines: "ReadLines",
+    // OpenCode v2 tool names
+    shell: "Bash",
+    patch: "ApplyPatch",
+    subagent: "Task",
 };
 import { SageVerdictBlockError, SageVerdictError } from "./error.js";
-import { extractFromOpenCodeTool } from "./extractors.js";
+import { extractFromOpenCodeTool, openCodeFilePath, openCodePatchTexts } from "./extractors.js";
 function asString(value) {
     return typeof value === "string" ? value : undefined;
 }
-function normalizeToolInput(toolName, args) {
+/**
+ * Map OpenCode argument names onto the Claude-style keys core reads
+ * (`file_path`, `new_string`, and `patch` for ApplyPatch AMSI scans and
+ * content snapshots).
+ */
+export function normalizeToolInput(toolName, args) {
     switch (toolName) {
         case "write":
             return {
                 ...args,
-                file_path: asString(args.filePath) ?? asString(args.file_path) ?? "",
+                file_path: openCodeFilePath(args) || (asString(args.file_path) ?? ""),
                 content: asString(args.content) ?? "",
             };
         case "edit":
             return {
                 ...args,
-                file_path: asString(args.filePath) ?? asString(args.file_path) ?? "",
+                file_path: openCodeFilePath(args) || (asString(args.file_path) ?? ""),
                 new_string: asString(args.newString) ?? asString(args.new_string) ?? "",
             };
+        case "patch":
+            return {
+                ...args,
+                patch: asString(args.patch) ?? asString(args.patchText) ?? "",
+            };
         default:
             return args;
     }
@@ -59,6 +73,10 @@ export function createToolHandlers(logger, approvalStore, threatsDir, trustedDom
         });
         try {
             const args = output.args ?? {};
+            if (input.tool === "patch" && openCodePatchTexts(args).length > 1) {
+                completeHook("blocked", { skippedReason: "conflicting_patch_fields" });
+                throw new SageVerdictBlockError(`${branding.name} blocked this patch: patchText and patch contain different content.`);
+            }
             // E2E payload-drift capture (drift loop). OpenCode is an in-process
             // ESM plugin (not MCP, not a CJS hook), so the "raw wire" payload is the
             // in-proc tool-call shape OpenCode hands us. Namespaced opencode-* so it

package/dist/tool-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-handler.js","sourceRoot":"","sources":["../src/tool-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,oBAAoB,EACpB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,aAAa,EAEb,SAAS,EACT,kBAAkB,GAClB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,iBAAiB,GAAsC;IACnE,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,MAAM;IACV,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,WAAW;CACvB,CAAC;AAEF,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAC1B,QAAgB,EAChB,IAA6B;IAE7B,QAAQ,QAAQ,EAAE,CAAC;QAClB,KAAK,OAAO;YACX,OAAO;gBACN,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;gBACpE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;aACrC,CAAC;QACH,KAAK,MAAM;YACV,OAAO;gBACN,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;gBACpE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;aACvE,CAAC;QACH;YACC,OAAO,IAAI,CAAC;IACd,CAAC;AACF,CAAC;AAMD,MAAM,UAAU,kBAAkB,CACjC,MAAc,EACd,aAA4B,EAC5B,UAAkB,EAClB,iBAAyB,EACzB,OAA4B,EAC5B,WAAqB,eAAe;IAEpC,MAAM,aAAa,GAAG,KAAK,EAC1B,KAA0D,EAC1D,MAAyC,EACzB,EAAE;QAClB,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,OAAgC,EAAE,EAAQ,EAAE;YACjF,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC5C,YAAY,EAAE,UAAU;gBACxB,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,MAAM;gBACvB,MAAM;gBACN,GAAG,IAAI;aACP,CAAC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;YAC1C,YAAY,EAAE,UAAU;YACxB,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,MAAM;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YAE/B,oEAAoE;YACpE,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,6DAA6D;YAC7D,IAAI,cAAc,EAAE,EAAE,CAAC;gBACtB,MAAM,gBAAgB,CACrB,YAAY,EACZ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAC5E;oBACC,QAAQ,EAAE,oBAAoB,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC;oBAC7D,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;iBAC/C,EACD,EAAE,UAAU,EAAE,WAAW,EAAE,CAC3B,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAE5D,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1C,YAAY,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;gBAC3D,OAAO;YACR,CAAC;YAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAChD;gBACC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,cAAc,EAAE,KAAK,CAAC,SAAS;gBAC/B,YAAY,EAAE,UAAU;gBACxB,QAAQ;gBACR,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;gBAC/C,SAAS;aACT,EACD;gBACC,UAAU;gBACV,iBAAiB;gBACjB,MAAM;aACN,EACD,aAAa,CACb,CAAC;YAEF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,YAAY,CAAC,WAAW,EAAE;oBACzB,QAAQ;oBACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,cAAc,EAAE,SAAS,CAAC,MAAM;iBAChC,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChC,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,QAAQ,GACb,OAAO,CAAC,QAAQ,KAAK,MAAM;oBAC1B,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,aAAa,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,iBAAiB,KAAK,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE;oBAC3G,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,aAAa,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,gBAAgB,KAAK,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAC7G,OAAO,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACvF,CAAC;YAAC,MAAM,CAAC;gBACR,4DAA4D;YAC7D,CAAC;YAED,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACjC,YAAY,CAAC,WAAW,EAAE;oBACzB,QAAQ;oBACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,cAAc,EAAE,SAAS,CAAC,MAAM;iBAChC,CAAC,CAAC;gBACH,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACvE,CAAC;YAED,gDAAgD;YAChD,MAAM,UAAU,GAAG,CAAC,CAAC;YACrB,MAAM,OAAO,GACZ,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAChD,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU;wBACnC,CAAC,CAAC,aAAa,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,OAAO;wBACzD,CAAC,CAAC,EAAE,CAAC;gBACP,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;YACrB,YAAY,CAAC,WAAW,EAAE;gBACzB,QAAQ;gBACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,cAAc,EAAE,SAAS,CAAC,MAAM;gBAChC,QAAQ;aACR,CAAC,CAAC;YACH,MAAM,IAAI,qBAAqB,CAC9B;gBACC,GAAG,QAAQ,CAAC,IAAI,yBAAyB,OAAO,CAAC,QAAQ,MAAM,OAAO,EAAE;gBACxE,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE;gBAC7C,kCAAkC,QAAQ,yCAAyC;gBACnF,0EAA0E;aAC1E,CAAC,IAAI,CAAC,IAAI,CAAC,CACZ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,gFAAgF;YAChF,IAAI,KAAK,YAAY,gBAAgB;gBAAE,MAAM,KAAK,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,4BAA4B,EAAE;gBAC1D,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;aAChB,CAAC,CAAC;YACH,YAAY,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;IACF,CAAC,CAAC;IAEF,OAAO;QACN,qBAAqB,EAAE,aAAa;KACpC,CAAC;AACH,CAAC"}
+{"version":3,"file":"tool-handler.js","sourceRoot":"","sources":["../src/tool-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,oBAAoB,EACpB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,aAAa,EAEb,SAAS,EACT,kBAAkB,GAClB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,iBAAiB,GAAsC;IACnE,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,MAAM;IACV,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,WAAW;IACvB,yBAAyB;IACzB,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,MAAM;CAChB,CAAC;AAEF,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEhG,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CACjC,QAAgB,EAChB,IAA6B;IAE7B,QAAQ,QAAQ,EAAE,CAAC;QAClB,KAAK,OAAO;YACX,OAAO;gBACN,GAAG,IAAI;gBACP,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;aACrC,CAAC;QACH,KAAK,MAAM;YACV,OAAO;gBACN,GAAG,IAAI;gBACP,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;aACvE,CAAC;QACH,KAAK,OAAO;YACX,OAAO;gBACN,GAAG,IAAI;gBACP,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;aAC7D,CAAC;QACH;YACC,OAAO,IAAI,CAAC;IACd,CAAC;AACF,CAAC;AAMD,MAAM,UAAU,kBAAkB,CACjC,MAAc,EACd,aAA4B,EAC5B,UAAkB,EAClB,iBAAyB,EACzB,OAA4B,EAC5B,WAAqB,eAAe;IAEpC,MAAM,aAAa,GAAG,KAAK,EAC1B,KAA0D,EAC1D,MAAyC,EACzB,EAAE;QAClB,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,OAAgC,EAAE,EAAQ,EAAE;YACjF,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC5C,YAAY,EAAE,UAAU;gBACxB,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,MAAM;gBACvB,MAAM;gBACN,GAAG,IAAI;aACP,CAAC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;YAC1C,YAAY,EAAE,UAAU;YACxB,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,MAAM;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnE,YAAY,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACvE,MAAM,IAAI,qBAAqB,CAC9B,GAAG,QAAQ,CAAC,IAAI,qEAAqE,CACrF,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,6DAA6D;YAC7D,IAAI,cAAc,EAAE,EAAE,CAAC;gBACtB,MAAM,gBAAgB,CACrB,YAAY,EACZ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAC5E;oBACC,QAAQ,EAAE,oBAAoB,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC;oBAC7D,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;iBAC/C,EACD,EAAE,UAAU,EAAE,WAAW,EAAE,CAC3B,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAE5D,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1C,YAAY,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;gBAC3D,OAAO;YACR,CAAC;YAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAChD;gBACC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,cAAc,EAAE,KAAK,CAAC,SAAS;gBAC/B,YAAY,EAAE,UAAU;gBACxB,QAAQ;gBACR,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;gBAC/C,SAAS;aACT,EACD;gBACC,UAAU;gBACV,iBAAiB;gBACjB,MAAM;aACN,EACD,aAAa,CACb,CAAC;YAEF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,YAAY,CAAC,WAAW,EAAE;oBACzB,QAAQ;oBACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,cAAc,EAAE,SAAS,CAAC,MAAM;iBAChC,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChC,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,QAAQ,GACb,OAAO,CAAC,QAAQ,KAAK,MAAM;oBAC1B,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,aAAa,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,iBAAiB,KAAK,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE;oBAC3G,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,aAAa,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,gBAAgB,KAAK,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAC7G,OAAO,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACvF,CAAC;YAAC,MAAM,CAAC;gBACR,4DAA4D;YAC7D,CAAC;YAED,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACjC,YAAY,CAAC,WAAW,EAAE;oBACzB,QAAQ;oBACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,cAAc,EAAE,SAAS,CAAC,MAAM;iBAChC,CAAC,CAAC;gBACH,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACvE,CAAC;YAED,gDAAgD;YAChD,MAAM,UAAU,GAAG,CAAC,CAAC;YACrB,MAAM,OAAO,GACZ,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAChD,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU;wBACnC,CAAC,CAAC,aAAa,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,OAAO;wBACzD,CAAC,CAAC,EAAE,CAAC;gBACP,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;YACrB,YAAY,CAAC,WAAW,EAAE;gBACzB,QAAQ;gBACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,cAAc,EAAE,SAAS,CAAC,MAAM;gBAChC,QAAQ;aACR,CAAC,CAAC;YACH,MAAM,IAAI,qBAAqB,CAC9B;gBACC,GAAG,QAAQ,CAAC,IAAI,yBAAyB,OAAO,CAAC,QAAQ,MAAM,OAAO,EAAE;gBACxE,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE;gBAC7C,kCAAkC,QAAQ,yCAAyC;gBACnF,0EAA0E;aAC1E,CAAC,IAAI,CAAC,IAAI,CAAC,CACZ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,gFAAgF;YAChF,IAAI,KAAK,YAAY,gBAAgB;gBAAE,MAAM,KAAK,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,4BAA4B,EAAE;gBAC1D,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;aAChB,CAAC,CAAC;YACH,YAAY,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;IACF,CAAC,CAAC;IAEF,OAAO;QACN,qBAAqB,EAAE,aAAa;KACpC,CAAC;AACH,CAAC"}

package/dist/v2-types.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Local structural types for the OpenCode v2 plugin API.
+ *
+ * Structural subset of the OpenCode v2 Promise plugin API, checked against
+ * the 2.1.4 server plugin documentation. Declared locally so the package can
+ * retain its v1 SDK dependency. Re-check these shapes when updating v2 support.
+ */
+/** OpenCode v2 version these types were last checked against. */
+export declare const V2_SDK_TYPES_VERSION = "2.1.4";
+export interface V2Registration {
+    readonly dispose: () => Promise<void>;
+}
+/** Subset of v2 `ToolContext` passed to tool `execute`. */
+export interface V2ToolContext {
+    readonly sessionID: string;
+    readonly agent: string;
+    readonly messageID: string;
+    readonly id: string;
+    readonly [key: string]: unknown;
+}
+export interface V2ToolResult {
+    content?: unknown;
+    metadata?: Record<string, unknown>;
+}
+export interface V2PermissionEvaluation {
+    readonly action: string;
+    effect: "allow" | "ask" | "deny";
+}
+export interface V2PermissionAssertInput {
+    readonly sessionID: string;
+    readonly agent: string;
+    readonly source: {
+        readonly type: "tool";
+        readonly messageID: string;
+        readonly id: string;
+    };
+    readonly action: string;
+    readonly resources: readonly string[];
+    readonly save: readonly string[];
+}
+export interface V2ToolInfo {
+    readonly name?: string;
+    readonly description: string;
+    readonly input: unknown;
+    readonly options?: {
+        readonly codemode?: boolean;
+    };
+    readonly execute: (input: unknown, context: V2ToolContext) => Promise<V2ToolResult>;
+}
+export interface V2ToolEditor {
+    get(id: string): V2ToolInfo | undefined;
+    add(tool: V2ToolInfo): void;
+}
+export interface V2McpEditor {
+    get(name: string): unknown;
+    set(name: string, config: Record<string, unknown>): void;
+}
+export interface V2ToolExecuteBefore {
+    tool: string;
+    readonly sessionID: string;
+    readonly id: string;
+    input: unknown;
+}
+/** Structural subset of the v2 promise plugin `Context` Sage relies on. */
+export interface V2PluginContext {
+    readonly location?: {
+        readonly directory?: string;
+    };
+    readonly tool: {
+        readonly transform: (callback: (editor: V2ToolEditor) => void) => Promise<V2Registration>;
+        readonly hook: (name: "execute.before", callback: (event: V2ToolExecuteBefore) => Promise<void> | void) => Promise<V2Registration>;
+    };
+    readonly permission: {
+        readonly assert: (input: V2PermissionAssertInput) => Promise<void>;
+        readonly hook: (name: "evaluate", callback: (event: V2PermissionEvaluation) => Promise<void> | void) => Promise<V2Registration>;
+    };
+    readonly mcp?: {
+        readonly transform: (callback: (editor: V2McpEditor) => void) => Promise<V2Registration>;
+    };
+    readonly session?: {
+        readonly hook: (name: "prompt", callback: (event: {
+            readonly sessionID: string;
+        }) => Promise<void> | void) => Promise<V2Registration>;
+    };
+    /** Not part of the v2 server context today; used if a future host exposes it. */
+    readonly toast?: {
+        show(options: {
+            title?: string;
+            message: string;
+            variant?: string;
+            duration?: number;
+        }): void;
+    };
+}
+//# sourceMappingURL=v2-types.d.ts.map

package/dist/v2-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-types.d.ts","sourceRoot":"","sources":["../src/v2-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,iEAAiE;AACjE,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,YAAY;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,YAAY;IAC5B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IACxC,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC3B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACzD;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;CACf;AAED,2EAA2E;AAC3E,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,QAAQ,CAAC,IAAI,EAAE;QACd,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;QAC1F,QAAQ,CAAC,IAAI,EAAE,CACd,IAAI,EAAE,gBAAgB,EACtB,QAAQ,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,KAC1D,OAAO,CAAC,cAAc,CAAC,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACnE,QAAQ,CAAC,IAAI,EAAE,CACd,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,KAC7D,OAAO,CAAC,cAAc,CAAC,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,GAAG,CAAC,EAAE;QACd,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;KACzF,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,EAAE;QAClB,QAAQ,CAAC,IAAI,EAAE,CACd,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,CAAC,KAAK,EAAE;YAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,KACrE,OAAO,CAAC,cAAc,CAAC,CAAC;KAC7B,CAAC;IACF,iFAAiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE;QAChB,IAAI,CAAC,OAAO,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;KAC9F,CAAC;CACF"}

package/dist/v2-types.js

@@ -0,0 +1,10 @@
+/**
+ * Local structural types for the OpenCode v2 plugin API.
+ *
+ * Structural subset of the OpenCode v2 Promise plugin API, checked against
+ * the 2.1.4 server plugin documentation. Declared locally so the package can
+ * retain its v1 SDK dependency. Re-check these shapes when updating v2 support.
+ */
+/** OpenCode v2 version these types were last checked against. */
+export const V2_SDK_TYPES_VERSION = "2.1.4";
+//# sourceMappingURL=v2-types.js.map

package/dist/v2-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-types.js","sourceRoot":"","sources":["../src/v2-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,iEAAiE;AACjE,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC"}

package/dist/v2.d.ts

@@ -0,0 +1,24 @@
+/**
+ * OpenCode v2 (opencode2 / `@opencode-ai/core`) adapter.
+ *
+ * v2 loads the package's default export as `{ id, setup }` and calls
+ * `setup(context)` with domain APIs instead of v1's hooks object. This adapter
+ * maps those domains onto the shared Sage controller:
+ * - `tool.hook("execute.before")` → Sage tool interception. Throwing from the
+ *   hook fails just that tool call with the thrown message (the turn continues),
+ *   which is the v1 block semantics, so the same `SageVerdictBlockError` works.
+ * - `tool.transform` → registers `sage_approve`, which requests a native
+ *   permission prompt through `permission.assert`.
+ * - `permission.hook("evaluate")` → forces Sage approval requests to ask.
+ * - `mcp.transform` → registers the Sage MCP server unless `sage` exists.
+ * - `session.hook("prompt")` → per-session plugin/skill scan.
+ *
+ * The v2 API types live in `v2-types.ts` (see there for the SDK version they
+ * mirror); every payload is validated before use (fail open).
+ */
+import type { V2PluginContext } from "./v2-types.js";
+export type { V2McpEditor, V2PluginContext, V2ToolContext, V2ToolEditor, V2ToolExecuteBefore, V2ToolInfo, V2ToolResult, } from "./v2-types.js";
+export declare const SAGE_APPROVE_TOOL = "sage_approve";
+/** OpenCode v2 plugin `setup`. Returns a cleanup that disposes registrations. */
+export declare function setupV2(context: V2PluginContext): Promise<() => Promise<void>>;
+//# sourceMappingURL=v2.d.ts.map

package/dist/v2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2.d.ts","sourceRoot":"","sources":["../src/v2.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAWH,OAAO,KAAK,EAAE,eAAe,EAA8B,MAAM,eAAe,CAAC;AAEjF,YAAY,EACX,WAAW,EACX,eAAe,EACf,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,UAAU,EACV,YAAY,GACZ,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AA0ChD,iFAAiF;AACjF,wBAAsB,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAuGpF"}

package/dist/v2.js

@@ -0,0 +1,151 @@
+/**
+ * OpenCode v2 (opencode2 / `@opencode-ai/core`) adapter.
+ *
+ * v2 loads the package's default export as `{ id, setup }` and calls
+ * `setup(context)` with domain APIs instead of v1's hooks object. This adapter
+ * maps those domains onto the shared Sage controller:
+ * - `tool.hook("execute.before")` → Sage tool interception. Throwing from the
+ *   hook fails just that tool call with the thrown message (the turn continues),
+ *   which is the v1 block semantics, so the same `SageVerdictBlockError` works.
+ * - `tool.transform` → registers `sage_approve`, which requests a native
+ *   permission prompt through `permission.assert`.
+ * - `permission.hook("evaluate")` → forces Sage approval requests to ask.
+ * - `mcp.transform` → registers the Sage MCP server unless `sage` exists.
+ * - `session.hook("prompt")` → per-session plugin/skill scan.
+ *
+ * The v2 API types live in `v2-types.ts` (see there for the SDK version they
+ * mirror); every payload is validated before use (fail open).
+ */
+import { ApprovalUnavailableError, approvalPatterns, createSageController, SAGE_MCP_SERVER_NAME, sageMcpServerConfig, } from "./shared.js";
+export const SAGE_APPROVE_TOOL = "sage_approve";
+const SAGE_APPROVAL_ACTION = "sage_approval";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function createApproveTool(sage, plugin) {
+    return {
+        name: SAGE_APPROVE_TOOL,
+        description: sage.approveToolDescription,
+        input: {
+            type: "object",
+            properties: {
+                actionId: { type: "string", description: sage.approveArgDescription },
+            },
+            required: ["actionId"],
+            additionalProperties: false,
+        },
+        // The approval dialog must be driven by the model directly, not from a
+        // code-mode script.
+        options: { codemode: false },
+        async execute(input, context) {
+            const actionId = isRecord(input) && typeof input.actionId === "string" ? input.actionId : "";
+            const result = await sage.resolveApproval(actionId, async (pending) => {
+                if (!plugin.permission || typeof plugin.permission.assert !== "function") {
+                    throw new ApprovalUnavailableError("OpenCode v2 permission API is unavailable");
+                }
+                await plugin.permission.assert({
+                    sessionID: context.sessionID,
+                    agent: context.agent,
+                    source: { type: "tool", messageID: context.messageID, id: context.id },
+                    action: SAGE_APPROVAL_ACTION,
+                    resources: [`${actionId}: ${approvalPatterns(pending).join(", ")}`],
+                    save: [],
+                });
+            });
+            return { content: result };
+        },
+    };
+}
+/** OpenCode v2 plugin `setup`. Returns a cleanup that disposes registrations. */
+export async function setupV2(context) {
+    const toast = context.toast;
+    const createNotifier = toast && typeof toast.show === "function"
+        ? (branding) => (message, variant, duration) => {
+            try {
+                toast.show({ title: branding.name, message, variant, duration });
+            }
+            catch {
+                // Notifications are best-effort
+            }
+        }
+        : undefined;
+    const sage = await createSageController({
+        directory: context.location?.directory ?? process.cwd(),
+        createNotifier,
+        host: "v2",
+    });
+    const registrations = [];
+    if (!context.permission || typeof context.permission.hook !== "function") {
+        throw new Error("OpenCode v2 permission hook is required for Sage approvals");
+    }
+    registrations.push(await context.permission.hook("evaluate", (event) => {
+        if (event.action === SAGE_APPROVAL_ACTION && event.effect === "allow")
+            event.effect = "ask";
+    }));
+    registrations.push(await context.tool.hook("execute.before", async (event) => {
+        // Unexpected shapes fail open: Sage never blocks a call it can't read.
+        if (!isRecord(event) || typeof event.tool !== "string")
+            return;
+        let args;
+        let unrecognizedReason = "not_an_object";
+        if (isRecord(event.input)) {
+            args = event.input;
+        }
+        else if (typeof event.input === "string") {
+            try {
+                const parsed = JSON.parse(event.input);
+                if (isRecord(parsed))
+                    args = parsed;
+                else
+                    unrecognizedReason = "json_not_an_object";
+            }
+            catch {
+                unrecognizedReason = "invalid_json";
+            }
+        }
+        if (!args) {
+            sage.logger.warn("OpenCode v2 tool input has unrecognized shape", {
+                tool: event.tool,
+                sessionID: event.sessionID,
+                callID: event.id,
+                inputType: Array.isArray(event.input)
+                    ? "array"
+                    : event.input === null
+                        ? "null"
+                        : typeof event.input,
+                reason: unrecognizedReason,
+            });
+        }
+        await sage.beforeToolUse({
+            tool: event.tool,
+            sessionID: typeof event.sessionID === "string" ? event.sessionID : "unknown",
+            callID: typeof event.id === "string" ? event.id : "",
+        }, { args: args ?? {} });
+    }));
+    registrations.push(await context.tool.transform((editor) => {
+        if (!editor.get(SAGE_APPROVE_TOOL)) {
+            editor.add(createApproveTool(sage, context));
+        }
+    }));
+    if (context.mcp) {
+        registrations.push(await context.mcp.transform((editor) => {
+            // Never clobber a user-supplied `sage` server.
+            if (editor.get(SAGE_MCP_SERVER_NAME) !== undefined)
+                return;
+            editor.set(SAGE_MCP_SERVER_NAME, sageMcpServerConfig());
+        }));
+    }
+    if (context.session) {
+        registrations.push(await context.session.hook("prompt", (event) => {
+            const sessionID = isRecord(event) && typeof event.sessionID === "string" ? event.sessionID : "";
+            // Don't hold up the prompt on the scan.
+            void sage.scanSession(sessionID).catch((error) => {
+                sage.logger.debug("Session scan failed", { error: String(error) });
+            });
+        }));
+    }
+    return async () => {
+        await Promise.allSettled(registrations.map((r) => r.dispose()));
+    };
+}
+//# sourceMappingURL=v2.js.map

package/dist/v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2.js","sourceRoot":"","sources":["../src/v2.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACN,wBAAwB,EACxB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EAEpB,mBAAmB,GAEnB,MAAM,aAAa,CAAC;AAarB,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAChD,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAE7C,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAoB,EAAE,MAAuB;IACvE,OAAO;QACN,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,IAAI,CAAC,sBAAsB;QACxC,KAAK,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACX,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,qBAAqB,EAAE;aACrE;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;YACtB,oBAAoB,EAAE,KAAK;SAC3B;QACD,uEAAuE;QACvE,oBAAoB;QACpB,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;YAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACrE,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;oBAC1E,MAAM,IAAI,wBAAwB,CAAC,2CAA2C,CAAC,CAAC;gBACjF,CAAC;gBACD,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE;oBACtE,MAAM,EAAE,oBAAoB;oBAC5B,SAAS,EAAE,CAAC,GAAG,QAAQ,KAAK,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnE,IAAI,EAAE,EAAE;iBACR,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;KACD,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAwB;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,cAAc,GACnB,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU;QACxC,CAAC,CAAC,CAAC,QAA0B,EAAW,EAAE,CACxC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC9B,IAAI,CAAC;gBACJ,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACR,gCAAgC;YACjC,CAAC;QACF,CAAC;QACH,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC;QACvC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE;QACvD,cAAc;QACd,IAAI,EAAE,IAAI;KACV,CAAC,CAAC;IACH,MAAM,aAAa,GAAqB,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC/E,CAAC;IACD,aAAa,CAAC,IAAI,CACjB,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;QACnD,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;YAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;IAC7F,CAAC,CAAC,CACF,CAAC;IAEF,aAAa,CAAC,IAAI,CACjB,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACzD,uEAAuE;QACvE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,IAAI,IAAyC,CAAC;QAC9C,IAAI,kBAAkB,GAAG,eAAe,CAAC;QACzC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACpB,CAAC;aAAM,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAChD,IAAI,QAAQ,CAAC,MAAM,CAAC;oBAAE,IAAI,GAAG,MAAM,CAAC;;oBAC/B,kBAAkB,GAAG,oBAAoB,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACR,kBAAkB,GAAG,cAAc,CAAC;YACrC,CAAC;QACF,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;gBACjE,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,EAAE;gBAChB,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;oBACpC,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;wBACrB,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK;gBACtB,MAAM,EAAE,kBAAkB;aAC1B,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,CACvB;YACC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC5E,MAAM,EAAE,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;SACpD,EACD,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CACpB,CAAC;IACH,CAAC,CAAC,CACF,CAAC;IAEF,aAAa,CAAC,IAAI,CACjB,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE;QACvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9C,CAAC;IACF,CAAC,CAAC,CACF,CAAC;IAEF,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,aAAa,CAAC,IAAI,CACjB,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE;YACtC,+CAA+C;YAC/C,IAAI,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,SAAS;gBAAE,OAAO;YAC3D,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CACF,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,aAAa,CAAC,IAAI,CACjB,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAC9C,MAAM,SAAS,GACd,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,wCAAwC;YACxC,KAAK,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CACF,CAAC;IACH,CAAC;IAED,OAAO,KAAK,IAAI,EAAE;QACjB,MAAM,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC;AACH,CAAC"}

package/index.js

@@ -0,0 +1,3 @@
+// OpenCode v2's local-directory loader looks for an index or server module at
+// the directory root. The published package and OpenCode v1 still use dist/index.js.
+export { default, SagePlugin } from "./dist/index.js";

package/package.json

@@ -4,7 +4,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.13.0",
+  "version": "0.15.0",
   "type": "module",
   "description": "Safety for Agents - ADR layer for OpenCode",
   "homepage": "https://github.com/gendigitalinc/sage",
@@ -24,6 +24,7 @@
     }
   },
   "files": [
+    "index.js",
     "dist/**",
     "resources/**",
     "package.json",
@@ -32,8 +33,8 @@
   ],
   "dependencies": {
     "@opencode-ai/plugin": "^1.14.48",
-    "@gendigital/sage-core": "0.13.0",
-    "@gendigital/sage-mcp": "0.13.0"
+    "@gendigital/sage-core": "0.15.0",
+    "@gendigital/sage-mcp": "0.15.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/resources/threats/credentials.yaml

@@ -9,7 +9,7 @@
   category: secrets
   severity: critical
   confidence: 0.80
-  pattern: "(sk-[a-zA-Z0-9_-]{20,}|sk-proj-[a-zA-Z0-9_-]{20,}|AKIA[0-9A-Z]{16}|AIza[0-9A-Za-z_-]{35}|ghp_[0-9a-zA-Z]{36}|gho_[0-9a-zA-Z]{36}|glpat-[0-9a-zA-Z_-]{20,}|xox[baprs]-[0-9a-zA-Z-]+)"
+  pattern: "\\b(sk-[a-zA-Z0-9_-]{20,}|sk-proj-[a-zA-Z0-9_-]{20,}|AKIA[0-9A-Z]{16}|AIza[0-9A-Za-z_-]{35}|ghp_[0-9a-zA-Z]{36}|gho_[0-9a-zA-Z]{36}|glpat-[0-9a-zA-Z_-]{20,}|xox[baprs]-[0-9a-zA-Z-]+)"
   match_on: [command, content]
   title: "Known API key prefix detected"
   expires_at: null

package/resources/threats/dummy.yaml

@@ -19,6 +19,9 @@
 #   WebFetch/Bash  url         ✓            ✓                      ✓
 #   WebFetch/Bash  domain      ✓            —                      —
 #
+# Submit-only (flags: ["submit_only"], allow + capped non-blocking telemetry):
+#   Bash (command), Write/Edit/Read (file_path)
+#
 # The file_path rules also cover Read, Delete, Glob, and LS tools
 # (they produce the same artifact type).
 # The url rules also cover URLs embedded in Bash commands and file content.
@@ -84,7 +87,6 @@
   title: "[TEST] Canary log-only command"
   expires_at: null
   revoked: false
-  flags: ["report"]
 
 # ─── File-path patterns (Write / Edit / Read / Delete tools) ────────
 
@@ -123,7 +125,6 @@
   title: "[TEST] Canary log-only file path"
   expires_at: null
   revoked: false
-  flags: ["report"]
 
 # ─── Content patterns (Write / Edit tools — file body) ──────────────
 
@@ -162,7 +163,6 @@
   title: "[TEST] Canary log-only content"
   expires_at: null
   revoked: false
-  flags: ["report"]
 
 # ─── URL patterns (WebFetch / Bash / Write content) ─────────────────
 # Uses .test TLD (RFC 2606 reserved, never resolves) for safety.
@@ -202,7 +202,6 @@
   title: "[TEST] Canary log-only URL"
   expires_at: null
   revoked: false
-  flags: ["report"]
 
 # ─── Domain pattern (verifies domain→url routing in heuristics) ─────
 
@@ -217,3 +216,37 @@
   title: "[TEST] Canary deny domain"
   expires_at: null
   revoked: false
+
+# ─── Submit-only patterns (telemetry, never block) ──────────────────
+#
+# `flags: ["submit_only"]` removes the rule from the verdict entirely and
+# instead submits a non-blocking event to /v2/heuristic, capped at one submit
+# per rule per client per 24h (packages/core/src/submit-limits.ts). The
+# confidence is deliberately deny-level so a regression that lets the flag
+# leak into the verdict shows up as a deny.
+
+- id: "DUMMY-CMD-SUBMIT-001"
+  version: 1
+  detection_name: "CMD:SageTestCommandSubmit-A [Tst]"
+  category: testing
+  severity: critical
+  confidence: 0.95
+  pattern: "diagmark_cmd_d7e7127e"
+  match_on: command
+  title: "[TEST] Canary submit-only command"
+  expires_at: null
+  revoked: false
+  flags: ["submit_only"]
+
+- id: "DUMMY-FILE-SUBMIT-001"
+  version: 1
+  detection_name: "FN:SageTestFileSubmit-A [Tst]"
+  category: testing
+  severity: critical
+  confidence: 0.95
+  pattern: "diagmark_file_57871281"
+  match_on: file_path
+  title: "[TEST] Canary submit-only file path"
+  expires_at: null
+  revoked: false
+  flags: ["submit_only"]

package/resources/threats/prompt-injection.yaml

@@ -440,3 +440,16 @@
   expires_at: null
   revoked: false
   # Source: ATR-2026-00097 (pattern unchanged from upstream). Covers zh-CN, zh-TW, ja, ko.
+
+- id: "CLT-PI-094"
+  version: 1
+  detection_name: "Other:SagePromptInjection-CP [Heur]"
+  category: prompt_injection
+  severity: warning
+  confidence: 0.70
+  case_insensitive: true
+  pattern: "\\b(?:disregard|ignore|forget|override)\\s+(?:all\\s+|any\\s+)?(?:your|the|my)\\s+system\\s+(?:prompt|message|instructions?)\\b"
+  match_on: content
+  title: "Instruction override: disregard system prompt"
+  expires_at: null
+  revoked: false