@gendigital/sage-opencode 0.9.0

package/README.md

@@ -0,0 +1,102 @@
+# Sage for OpenCode
+
+Sage integrates with OpenCode as a plugin and evaluates tool calls before they run.
+
+## What it protects
+
+- `bash` commands
+- `webfetch` URLs
+- File operations (`read`, `write`, `edit`, `ls`, `glob`, `grep`)
+
+Unmapped tools pass through unchanged.
+
+## Install
+
+Clone the repo, build the OpenCode package, then point OpenCode to this package path:
+
+```bash
+git clone https://github.com/gendigitalinc/sage
+cd sage
+pnpm install
+pnpm --filter @gendigital/sage-opencode run build
+```
+
+Global config (`~/.config/opencode/opencode.json`):
+
+```json
+{
+  "plugin": ["/absolute/path/to/sage/packages/opencode"]
+}
+```
+
+## Behavior
+
+- **deny** verdicts: blocked immediately
+- **ask** verdicts: blocked with an explicit `sage_approve` action ID
+- **allow** verdicts: pass through
+
+## Approval Flow
+
+OpenCode does not expose a plugin-spawned permission dialog, so Sage uses tool-based approval:
+
+1. Sage blocks an `ask` verdict and returns an `actionId`
+2. Ask the user for explicit confirmation in chat
+3. If approved, call:
+
+```ts
+sage_approve({ actionId: "...", approved: true })
+```
+
+4. Retry the original tool call
+
+## Session Startup Scanning
+
+Sage automatically scans all installed OpenCode plugins when a new session starts.
+
+### What's Scanned
+
+- **NPM plugins**: Packages listed in `opencode.json` config (global + project)
+- **Local plugins**: Files in `~/.config/opencode/plugins/` (global)
+- **Project plugins**: Files in `.opencode/plugins/` (project-specific)
+
+### When Scanning Runs
+
+- **Trigger**: Once per session on `session.updated` event (deduplicated by session ID)
+- **Performance**: Results are cached for fast subsequent sessions
+
+### How Findings Are Shown
+
+1. **System Prompt Injection**: Findings appear as first message in agent's context
+2. **One-Shot**: Only injected once per session (not repeated)
+3. **Agent Notification**: Agent sees threats and can inform user
+4. **Console Logging**: Findings also logged to OpenCode console
+
+### What Gets Scanned
+
+- Plugin source code (JS/TS/PY files)
+- Package metadata (package.json)
+- Embedded URLs (checked against threat intelligence)
+- Suspicious patterns (credentials, obfuscation, persistence)
+
+### Self-Protection
+
+- Sage excludes itself from scanning (`@gendigital/sage-opencode`)
+- Fail-open philosophy: Errors don't block OpenCode
+
+### Cache Location
+
+Scan cache stored at `~/.sage/plugin_scan_cache.json` for performance.
+
+## Build
+
+```bash
+pnpm --filter @gendigital/sage-opencode run build
+```
+
+This copies `threats/` and `allowlists/` into `packages/opencode/resources/`.
+
+## Test
+
+```bash
+pnpm test -- packages/opencode/src/__tests__/integration.test.ts
+```

package/dist/bundled-dirs.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Bundled directory and version helpers for OpenCode plugin.
+ * Centralizes package path resolution for reuse across modules.
+ */
+export declare function getBundledDataDirs(): {
+    pluginDir: string;
+    packageRoot: string;
+    threatsDir: string;
+    allowlistsDir: string;
+};
+export declare function getSageVersion(): string;
+//# sourceMappingURL=bundled-dirs.d.ts.map

package/dist/bundled-dirs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundled-dirs.d.ts","sourceRoot":"","sources":["../src/bundled-dirs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,wBAAgB,kBAAkB,IAAI;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACtB,CASA;AAED,wBAAgB,cAAc,IAAI,MAAM,CASvC"}

package/dist/bundled-dirs.js

@@ -0,0 +1,29 @@
+/**
+ * Bundled directory and version helpers for OpenCode plugin.
+ * Centralizes package path resolution for reuse across modules.
+ */
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+export function getBundledDataDirs() {
+    const pluginDir = dirname(fileURLToPath(import.meta.url));
+    const packageRoot = join(pluginDir, "..");
+    return {
+        pluginDir,
+        packageRoot,
+        threatsDir: join(packageRoot, "resources", "threats"),
+        allowlistsDir: join(packageRoot, "resources", "allowlists"),
+    };
+}
+export function getSageVersion() {
+    try {
+        const { packageRoot } = getBundledDataDirs();
+        const pkgPath = join(packageRoot, "package.json");
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+        return pkg.version ?? "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+//# sourceMappingURL=bundled-dirs.js.map

package/dist/bundled-dirs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundled-dirs.js","sourceRoot":"","sources":["../src/bundled-dirs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,kBAAkB;IAMjC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO;QACN,SAAS;QACT,WAAW;QACX,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC;QACrD,aAAa,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC;KAC3D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,IAAI,CAAC;QACJ,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAA4B,CAAC;QAClF,OAAQ,GAAG,CAAC,OAAkB,IAAI,OAAO,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,OAAO,CAAC;IAChB,CAAC;AACF,CAAC"}

package/dist/error.d.ts

@@ -0,0 +1,7 @@
+export declare abstract class SageVerdictError extends Error {
+    constructor(message: string, name?: string);
+}
+export declare class SageVerdictBlockError extends SageVerdictError {
+    constructor(message: string);
+}
+//# sourceMappingURL=error.d.ts.map

package/dist/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":"AAAA,8BAAsB,gBAAiB,SAAQ,KAAK;gBACvC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAI1C;AAED,qBAAa,qBAAsB,SAAQ,gBAAgB;gBAC9C,OAAO,EAAE,MAAM;CAG3B"}

package/dist/error.js

@@ -0,0 +1,12 @@
+export class SageVerdictError extends Error {
+    constructor(message, name) {
+        super(message);
+        this.name = name ?? "SageVerdictError";
+    }
+}
+export class SageVerdictBlockError extends SageVerdictError {
+    constructor(message) {
+        super(message, "SageVerdictBlockError");
+    }
+}
+//# sourceMappingURL=error.js.map

package/dist/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":"AAAA,MAAM,OAAgB,gBAAiB,SAAQ,KAAK;IACnD,YAAY,OAAe,EAAE,IAAa;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,kBAAkB,CAAC;IACxC,CAAC;CACD;AAED,MAAM,OAAO,qBAAsB,SAAQ,gBAAgB;IAC1D,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IACzC,CAAC;CACD"}

package/dist/extractors.d.ts

@@ -0,0 +1,6 @@
+/**
+ * OpenCode tool input extraction mapped onto @gendigital/sage-core artifact extractors.
+ */
+import { type Artifact } from "@gendigital/sage-core";
+export declare function extractFromOpenCodeTool(toolName: string, args: Record<string, unknown>): Artifact[] | null;
+//# sourceMappingURL=extractors.d.ts.map

package/dist/extractors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extractors.d.ts","sourceRoot":"","sources":["../src/extractors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACN,KAAK,QAAQ,EAKb,MAAM,uBAAuB,CAAC;AAU/B,wBAAgB,uBAAuB,CACtC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,QAAQ,EAAE,GAAG,IAAI,CA2FnB"}

package/dist/extractors.js

@@ -0,0 +1,111 @@
+/**
+ * OpenCode tool input extraction mapped onto @gendigital/sage-core artifact extractors.
+ */
+import { extractFromBash, extractFromEdit, extractFromWebFetch, extractFromWrite, } from "@gendigital/sage-core";
+function asString(value) {
+    return typeof value === "string" ? value : undefined;
+}
+function asNumber(value) {
+    return typeof value === "number" ? value : undefined;
+}
+export function extractFromOpenCodeTool(toolName, args) {
+    switch (toolName) {
+        case "bash": {
+            const command = asString(args.command) ?? "";
+            return command ? extractFromBash(command) : null;
+        }
+        case "webfetch": {
+            const url = asString(args.url) ?? "";
+            return url ? extractFromWebFetch({ url }) : null;
+        }
+        case "write": {
+            const filePath = asString(args.filePath) ?? "";
+            if (!filePath)
+                return null;
+            return extractFromWrite({
+                file_path: filePath,
+                content: asString(args.content) ?? "",
+            });
+        }
+        case "edit": {
+            const filePath = asString(args.filePath) ?? "";
+            if (!filePath)
+                return null;
+            return extractFromEdit({
+                file_path: filePath,
+                old_string: asString(args.oldString) ?? "",
+                new_string: asString(args.newString) ?? "",
+            });
+        }
+        case "read": {
+            const filePath = asString(args.filePath) ?? "";
+            if (!filePath)
+                return null;
+            return [{ type: "file_path", value: filePath, context: "read" }];
+        }
+        case "glob": {
+            const pattern = asString(args.pattern) ?? "";
+            if (!pattern)
+                return null;
+            return [{ type: "file_path", value: pattern, context: "glob_pattern" }];
+        }
+        case "grep": {
+            const pattern = asString(args.pattern) ?? "";
+            if (!pattern)
+                return null;
+            const artifacts = [{ type: "content", value: pattern, context: "grep_pattern" }];
+            const include = asString(args.include);
+            if (include) {
+                artifacts.push({ type: "file_path", value: include, context: "grep_include" });
+            }
+            return artifacts;
+        }
+        case "ls": {
+            const dir = asString(args.path) ?? asString(args.directoryPath) ?? "";
+            if (!dir)
+                return null;
+            return [{ type: "file_path", value: dir, context: "list" }];
+        }
+        case "codesearch": {
+            const query = asString(args.query) ?? "";
+            return query ? [{ type: "content", value: query, context: "codesearch_query" }] : null;
+        }
+        case "websearch": {
+            const query = asString(args.query) ?? "";
+            return query ? [{ type: "content", value: query, context: "websearch_query" }] : null;
+        }
+        case "question": {
+            const selected = Array.isArray(args.selected) ? args.selected : [];
+            const joined = selected
+                .map((item) => (typeof item === "string" ? item : null))
+                .filter((item) => item !== null)
+                .join("\n");
+            if (!joined)
+                return null;
+            return [{ type: "content", value: joined, context: "question_options" }];
+        }
+        case "task": {
+            const prompt = asString(args.prompt) ?? "";
+            const desc = asString(args.description) ?? "";
+            const payload = [desc, prompt].filter(Boolean).join("\n\n");
+            return payload ? [{ type: "content", value: payload, context: "task" }] : null;
+        }
+        case "read_lines": {
+            const filePath = asString(args.filePath) ?? "";
+            if (!filePath)
+                return null;
+            const offset = asNumber(args.offset);
+            const limit = asNumber(args.limit);
+            return [
+                {
+                    type: "file_path",
+                    value: `${filePath}:${offset ?? 1}:${limit ?? 0}`,
+                    context: "read_lines",
+                },
+            ];
+        }
+        default:
+            return null;
+    }
+}
+//# sourceMappingURL=extractors.js.map

package/dist/extractors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extractors.js","sourceRoot":"","sources":["../src/extractors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAEN,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GAChB,MAAM,uBAAuB,CAAC;AAE/B,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,QAAgB,EAChB,IAA6B;IAE7B,QAAQ,QAAQ,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YACjB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACrC,OAAO,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,OAAO,gBAAgB,CAAC;gBACvB,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;aACrC,CAAC,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,OAAO,eAAe,CAAC;gBACtB,SAAS,EAAE,QAAQ;gBACnB,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;gBAC1C,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;aAC1C,CAAC,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC1B,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC1B,MAAM,SAAS,GAAe,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;YAC7F,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACX,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YACtE,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YAClB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YACjB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,QAAQ;iBACrB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;iBACvD,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5D,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YACnB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO;gBACN;oBACC,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE,GAAG,QAAQ,IAAI,MAAM,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE;oBACjD,OAAO,EAAE,YAAY;iBACrB;aACD,CAAC;QACH,CAAC;QACD;YACC,OAAO,IAAI,CAAC;IACd,CAAC;AACF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Sage OpenCode plugin.
+ * Intercepts tool calls and uses @gendigital/sage-core to enforce security verdicts.
+ */
+import type { Plugin } from "@opencode-ai/plugin";
+export declare const SagePlugin: Plugin;
+export default SagePlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AASlD,eAAO,MAAM,UAAU,EAAE,MAqIxB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,128 @@
+/**
+ * Sage OpenCode plugin.
+ * Intercepts tool calls and uses @gendigital/sage-core to enforce security verdicts.
+ */
+import { ApprovalStore, approveAction, loadConfig, resolveBranding } from "@gendigital/sage-core";
+import { tool } from "@opencode-ai/plugin/tool";
+import { getBundledDataDirs } from "./bundled-dirs.js";
+import { OpencodeLogger } from "./logger-adaptor.js";
+import { createSessionScanHandler } from "./startup-scan.js";
+import { createToolHandlers } from "./tool-handler.js";
+const APPROVAL_STORE_CLEANUP_INTERVAL_MS = 5 * 60 * 1000; // 5 minutes
+export const SagePlugin = async ({ client, directory }) => {
+    const logger = new OpencodeLogger(client);
+    const config = await loadConfig(undefined, logger);
+    const branding = resolveBranding(config.brand_key, logger);
+    const { threatsDir, allowlistsDir } = getBundledDataDirs();
+    const approvalStore = new ApprovalStore();
+    // State: track findings per session for one-shot injection
+    const pendingFindingsBySession = new Map();
+    // Track scanned sessions to avoid re-triggering on repeated session.updated events
+    const scannedSessions = new Set();
+    // Set up the cron job that cleans up the approval store.
+    const interval = setInterval(() => {
+        approvalStore.cleanup();
+    }, APPROVAL_STORE_CLEANUP_INTERVAL_MS);
+    interval.unref?.();
+    const toolHandlers = createToolHandlers(logger, approvalStore, threatsDir, allowlistsDir, {
+        showToast: (msg, variant) => {
+            client.tui
+                .showToast({
+                body: { title: branding.name, message: msg, variant, duration: 5000 },
+            })
+                .catch(() => { });
+        },
+    }, branding);
+    return {
+        "tool.execute.before": toolHandlers["tool.execute.before"],
+        /**
+         * Inject plugin scan findings into first user message as <system-reminder>.
+         * This approach leverages OpenCode's existing pattern of appending system
+         * reminders to user messages (e.g., plan mode constraints), enabling the
+         * agent to reason about security findings before tool execution. Appending
+         * to assistant messages or system prompts was less effective.
+         */
+        "experimental.chat.messages.transform": async (_input, output) => {
+            if (pendingFindingsBySession.size === 0)
+                return;
+            const userMessage = output.messages.filter((m) => m.info.role === "user");
+            const message = userMessage[0];
+            if (!message)
+                return;
+            const sessionID = message.info.sessionID;
+            const findings = pendingFindingsBySession.get(sessionID);
+            if (!findings)
+                return;
+            const textPart = {
+                id: crypto.randomUUID(),
+                sessionID,
+                messageID: message.info.id,
+                type: "text",
+                text: [
+                    `<system-reminder>`,
+                    findings,
+                    "",
+                    "Inform the user about these security findings.",
+                    `</system-reminder>`,
+                ].join("\n"),
+                synthetic: true,
+            };
+            message.parts.push(textPart);
+            logger.info(`Injected sage plugin scan findings to user message`, {
+                findings,
+            });
+            pendingFindingsBySession.delete(sessionID);
+        },
+        // Trigger session scan on first session.updated event per session.
+        // OpenCode >=1.3 replaced session.created with session.updated events.
+        event: async ({ event }) => {
+            if (event.type !== "session.updated")
+                return;
+            // biome-ignore lint/suspicious/noExplicitAny: Event types from SDK not fully typed
+            const props = event.properties;
+            const sessionID = props?.sessionID ?? props?.info?.id ?? "unknown";
+            if (sessionID !== "unknown" && scannedSessions.has(sessionID))
+                return;
+            try {
+                logger.debug(`${branding.name}: starting session scan`, { sessionID });
+                const scanHandler = createSessionScanHandler(logger, directory, (msg) => {
+                    pendingFindingsBySession.set(sessionID, msg);
+                }, branding);
+                await scanHandler();
+                if (sessionID !== "unknown") {
+                    scannedSessions.add(sessionID);
+                }
+            }
+            catch (error) {
+                logger.error(`${branding.name} session scan failed (fail-open)`, {
+                    sessionID,
+                    error: String(error),
+                });
+            }
+        },
+        tool: {
+            // TODO: After the following PR merged to support client V2 in Opencode Plugin, gitleaks:allow
+            // use QuestionTools.ask to replace sage_approve tool
+            // PR: https://github.com/anomalyco/opencode/pull/12046
+            // Discussion: https://github.com/avast/sage/pull/21#discussion_r2873812399
+            sage_approve: tool({
+                description: `Approve or reject a ${branding.name}-flagged tool call. IMPORTANT: you MUST ask the user for explicit confirmation in the conversation BEFORE calling this tool. Never auto-approve - always present the flagged action and wait for the user to response.`,
+                args: {
+                    actionId: tool.schema
+                        .string()
+                        .describe(`Action ID from ${branding.name} blocked message`),
+                    approved: tool.schema.boolean().describe("true to approve, false to reject"),
+                },
+                async execute(args, _context) {
+                    if (!args.approved) {
+                        approvalStore.deletePending(args.actionId);
+                        return "Rejected by user.";
+                    }
+                    return approveAction(approvalStore, args.actionId, branding);
+                },
+            }),
+        },
+    };
+};
+export default SagePlugin;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAElG,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,kCAAkC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAEtE,MAAM,CAAC,MAAM,UAAU,GAAW,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IACjE,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAC3D,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAE1C,2DAA2D;IAC3D,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3D,mFAAmF;IACnF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1C,yDAAyD;IACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,aAAa,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC,EAAE,kCAAkC,CAAC,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IAEnB,MAAM,YAAY,GAAG,kBAAkB,CACtC,MAAM,EACN,aAAa,EACb,UAAU,EACV,aAAa,EACb;QACC,SAAS,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;YAC3B,MAAM,CAAC,GAAG;iBACR,SAAS,CAAC;gBACV,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;aACrE,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnB,CAAC;KACD,EACD,QAAQ,CACR,CAAC;IAEF,OAAO;QACN,qBAAqB,EAAE,YAAY,CAAC,qBAAqB,CAAC;QAE1D;;;;;;WAMG;QACH,sCAAsC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAChE,IAAI,wBAAwB,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO;YAEhD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO;gBAAE,OAAO;YAErB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YACzC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAEtB,MAAM,QAAQ,GAAG;gBAChB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;gBACvB,SAAS;gBACT,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;gBAC1B,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE;oBACL,mBAAmB;oBACnB,QAAQ;oBACR,EAAE;oBACF,gDAAgD;oBAChD,oBAAoB;iBACpB,CAAC,IAAI,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,IAAI;aACf,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAE7B,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;gBACjE,QAAQ;aACR,CAAC,CAAC;YACH,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QAED,mEAAmE;QACnE,uEAAuE;QACvE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;gBAAE,OAAO;YAE7C,mFAAmF;YACnF,MAAM,KAAK,GAAI,KAAa,CAAC,UAAU,CAAC;YACxC,MAAM,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,SAAS,CAAC;YACnE,IAAI,SAAS,KAAK,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO;YAEtE,IAAI,CAAC;gBACJ,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,yBAAyB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvE,MAAM,WAAW,GAAG,wBAAwB,CAC3C,MAAM,EACN,SAAS,EACT,CAAC,GAAG,EAAE,EAAE;oBACP,wBAAwB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBAC9C,CAAC,EACD,QAAQ,CACR,CAAC;gBACF,MAAM,WAAW,EAAE,CAAC;gBACpB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC7B,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAChC,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,kCAAkC,EAAE;oBAChE,SAAS;oBACT,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;iBACpB,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,EAAE;YACL,8FAA8F;YAC9F,qDAAqD;YACrD,uDAAuD;YACvD,2EAA2E;YAC3E,YAAY,EAAE,IAAI,CAAC;gBAClB,WAAW,EAAE,uBAAuB,QAAQ,CAAC,IAAI,wNAAwN;gBACzQ,IAAI,EAAE;oBACL,QAAQ,EAAE,IAAI,CAAC,MAAM;yBACnB,MAAM,EAAE;yBACR,QAAQ,CAAC,kBAAkB,QAAQ,CAAC,IAAI,kBAAkB,CAAC;oBAC7D,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;iBAC5E;gBACD,KAAK,CAAC,OAAO,CAAC,IAA6C,EAAE,QAAQ;oBACpE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACpB,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBAC3C,OAAO,mBAAmB,CAAC;oBAC5B,CAAC;oBACD,OAAO,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAC9D,CAAC;aACD,CAAC;SACF;KACD,CAAC;AACH,CAAC,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/logger-adaptor.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Bridges OpenCode's client logger to Sage's Logger interface.
+ */
+import type { Logger } from "@gendigital/sage-core";
+import type { PluginInput } from "@opencode-ai/plugin";
+export declare class OpencodeLogger implements Logger {
+    private client;
+    constructor(client: PluginInput["client"]);
+    debug(msg: string, data?: Record<string, unknown>): Promise<void>;
+    info(msg: string, data?: Record<string, unknown>): Promise<void>;
+    warn(msg: string, data?: Record<string, unknown>): Promise<void>;
+    error(msg: string, data?: Record<string, unknown>): Promise<void>;
+    private write;
+}
+//# sourceMappingURL=logger-adaptor.d.ts.map

package/dist/logger-adaptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger-adaptor.d.ts","sourceRoot":"","sources":["../src/logger-adaptor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,qBAAa,cAAe,YAAW,MAAM;IAC5C,OAAO,CAAC,MAAM,CAAwB;gBAE1B,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC;IAI5B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAIjD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAIhD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAIhD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;YAIhD,KAAK;CAUnB"}

package/dist/logger-adaptor.js

@@ -0,0 +1,32 @@
+/**
+ * Bridges OpenCode's client logger to Sage's Logger interface.
+ */
+export class OpencodeLogger {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async debug(msg, data) {
+        await this.write("debug", msg, data).catch(() => { });
+    }
+    async info(msg, data) {
+        await this.write("info", msg, data).catch(() => { });
+    }
+    async warn(msg, data) {
+        await this.write("warn", msg, data).catch(() => { });
+    }
+    async error(msg, data) {
+        await this.write("error", msg, data).catch(() => { });
+    }
+    async write(level, msg, data) {
+        await this.client.app.log({
+            body: {
+                service: "sage-opencode",
+                level,
+                message: msg,
+                extra: data && typeof data === "object" ? data : undefined,
+            },
+        });
+    }
+}
+//# sourceMappingURL=logger-adaptor.js.map

package/dist/logger-adaptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger-adaptor.js","sourceRoot":"","sources":["../src/logger-adaptor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,MAAM,OAAO,cAAc;IAClB,MAAM,CAAwB;IAEtC,YAAY,MAA6B;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,IAA8B;QAC7D,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,IAA8B;QAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,IAA8B;QAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,IAA8B;QAC7D,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,KAA0C,EAAE,GAAW,EAAE,IAAc;QAC1F,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YACzB,IAAI,EAAE;gBACL,OAAO,EAAE,eAAe;gBACxB,KAAK;gBACL,OAAO,EAAE,GAAG;gBACZ,KAAK,EAAE,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,SAAS;aACvF;SACD,CAAC,CAAC;IACJ,CAAC;CACD"}

package/dist/plugin-discovery.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Discovers installed OpenCode plugins for plugin scanning.
+ * Scans NPM packages from config files and local plugin files.
+ */
+import type { Branding, Logger, PluginInfo } from "@gendigital/sage-core";
+/**
+ * Discover OpenCode plugins from all sources:
+ * 1. NPM packages from config files
+ * 2. Local plugin files (global + project)
+ */
+export declare function discoverOpenCodePlugins(logger: Logger, projectDir?: string, branding?: Branding): Promise<PluginInfo[]>;
+//# sourceMappingURL=plugin-discovery.d.ts.map

package/dist/plugin-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-discovery.d.ts","sourceRoot":"","sources":["../src/plugin-discovery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAc1E;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC5C,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,MAAM,EACnB,QAAQ,GAAE,QAA0B,GAClC,OAAO,CAAC,UAAU,EAAE,CAAC,CAuBvB"}