@gendigital/sage-opencode 0.9.0

package/dist/plugin-discovery.js

@@ -0,0 +1,138 @@
+/**
+ * Discovers installed OpenCode plugins for plugin scanning.
+ * Scans NPM packages from config files and local plugin files.
+ */
+import { readdir, stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import { basename, join } from "node:path";
+import { defaultBranding, getFileContent } from "@gendigital/sage-core";
+/** Resolve XDG base directories with fallbacks to homedir defaults */
+function getConfigHome() {
+    return process.env.XDG_CONFIG_HOME ?? join(homedir(), ".config");
+}
+function getCacheHome() {
+    return process.env.XDG_CACHE_HOME ?? join(homedir(), ".cache");
+}
+const PROJECT_CONFIG_NAME = "opencode.json";
+/**
+ * Discover OpenCode plugins from all sources:
+ * 1. NPM packages from config files
+ * 2. Local plugin files (global + project)
+ */
+export async function discoverOpenCodePlugins(logger, projectDir, branding = defaultBranding) {
+    logger.debug(`${branding.name} plugin discovery: scanning OpenCode plugins`);
+    const plugins = [];
+    // 1. Discover NPM plugins from config files
+    const npmPlugins = await discoverNpmPlugins(logger, projectDir);
+    plugins.push(...npmPlugins);
+    // 2. Discover local plugin files (global)
+    const globalPluginsDir = join(getConfigHome(), "opencode", "plugins");
+    const globalPlugins = await discoverLocalPlugins(globalPluginsDir, "global", logger);
+    plugins.push(...globalPlugins);
+    // 3. Discover local plugin files (project)
+    if (projectDir) {
+        const projectPluginsDir = join(projectDir, ".opencode", "plugins");
+        const projectPlugins = await discoverLocalPlugins(projectPluginsDir, "project", logger);
+        plugins.push(...projectPlugins);
+    }
+    logger.info(`${branding.name} plugin discovery: found ${plugins.length} plugin(s)`);
+    return plugins;
+}
+/**
+ * Discover NPM plugins listed in config files
+ */
+async function discoverNpmPlugins(logger, projectDir) {
+    const plugins = [];
+    const pluginNames = new Set();
+    // Read global config
+    try {
+        const globalConfigPath = join(getConfigHome(), "opencode", "opencode.json");
+        const globalConfig = JSON.parse(await getFileContent(globalConfigPath));
+        const globalPlugins = (globalConfig.plugin ?? []);
+        for (const name of globalPlugins) {
+            pluginNames.add(name);
+        }
+    }
+    catch {
+        logger.debug("Global OpenCode config not found or invalid");
+    }
+    // Read project config (overrides global)
+    if (projectDir) {
+        try {
+            const projectConfigPath = join(projectDir, PROJECT_CONFIG_NAME);
+            const projectConfig = JSON.parse(await getFileContent(projectConfigPath));
+            const projectPlugins = (projectConfig.plugin ?? []);
+            for (const name of projectPlugins) {
+                pluginNames.add(name);
+            }
+        }
+        catch {
+            logger.debug("Project OpenCode config not found or invalid");
+        }
+    }
+    // For each plugin name, find it in node_modules
+    const npmCacheDir = join(getCacheHome(), "opencode", "node_modules");
+    for (const pluginName of pluginNames) {
+        try {
+            const installPath = join(npmCacheDir, pluginName);
+            const pkgJsonPath = join(installPath, "package.json");
+            const pkgJson = JSON.parse(await getFileContent(pkgJsonPath));
+            const stats = await stat(installPath);
+            const version = pkgJson.version ?? "unknown";
+            const key = `${pluginName}@${version}`;
+            plugins.push({
+                key,
+                installPath,
+                version,
+                lastUpdated: stats.mtime.toISOString(),
+            });
+            logger.debug(`Discovered NPM plugin: ${key}`, { installPath });
+        }
+        catch {
+            logger.warn(`NPM plugin listed in config but not found: ${pluginName}`);
+        }
+    }
+    return plugins;
+}
+/**
+ * Discover local plugin files (.js/.ts) in a directory
+ */
+async function discoverLocalPlugins(pluginsDir, context, logger) {
+    const plugins = [];
+    let entries;
+    try {
+        entries = await readdir(pluginsDir);
+    }
+    catch {
+        logger.debug(`${context} plugins directory not found: ${pluginsDir}`);
+        return [];
+    }
+    for (const entry of entries) {
+        const fullPath = join(pluginsDir, entry);
+        // Only scan .js and .ts files
+        if (!(entry.endsWith(".js") || entry.endsWith(".ts"))) {
+            continue;
+        }
+        try {
+            const stats = await stat(fullPath);
+            if (!stats.isFile())
+                continue;
+            // Use filename as plugin name
+            const name = basename(entry, entry.endsWith(".ts") ? ".ts" : ".js");
+            const version = `local-${stats.mtime.getTime()}`; // Synthetic version from mtime
+            const key = `${context}/${name}@${version}`;
+            plugins.push({
+                key,
+                installPath: fullPath,
+                version,
+                lastUpdated: stats.mtime.toISOString(),
+            });
+            logger.debug(`Discovered local plugin: ${key}`, { path: fullPath });
+        }
+        catch {
+            logger.warn(`Failed to read local plugin: ${entry}`);
+        }
+    }
+    return plugins;
+}
+//# sourceMappingURL=plugin-discovery.js.map

package/dist/plugin-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-discovery.js","sourceRoot":"","sources":["../src/plugin-discovery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAExE,sEAAsE;AACtE,SAAS,aAAa;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,MAAc,EACd,UAAmB,EACnB,WAAqB,eAAe;IAEpC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,8CAA8C,CAAC,CAAC;IAE7E,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,4CAA4C;IAC5C,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;IAE5B,0CAA0C;IAC1C,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrF,OAAO,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;IAE/B,2CAA2C;IAC3C,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,iBAAiB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,4BAA4B,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;IACpF,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,UAAmB;IACpE,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,qBAAqB;IACrB,IAAI,CAAC;QACJ,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,gBAAgB,CAAC,CAGrE,CAAC;QACF,MAAM,aAAa,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAa,CAAC;QAC9D,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAClC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IAED,yCAAyC;IACzC,IAAI,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;YAChE,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,iBAAiB,CAAC,CAGvE,CAAC;YACF,MAAM,cAAc,GAAG,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE,CAAa,CAAC;YAChE,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;gBACnC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;IAED,gDAAgD;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACrE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,WAAW,CAAC,CAA4B,CAAC;YAEzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,OAAO,GAAI,OAAO,CAAC,OAAkB,IAAI,SAAS,CAAC;YACzD,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,OAAO,EAAE,CAAC;YAEvC,OAAO,CAAC,IAAI,CAAC;gBACZ,GAAG;gBACH,WAAW;gBACX,OAAO;gBACP,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,8CAA8C,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,oBAAoB,CAClC,UAAkB,EAClB,OAAe,EACf,MAAc;IAEd,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,iCAAiC,UAAU,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEzC,8BAA8B;QAC9B,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACvD,SAAS;QACV,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YAE9B,8BAA8B;YAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,+BAA+B;YACjF,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YAE5C,OAAO,CAAC,IAAI,CAAC;gBACZ,GAAG;gBACH,WAAW,EAAE,QAAQ;gBACrB,OAAO;gBACP,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/startup-scan.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Startup and session scan handlers for OpenCode.
+ * Thin wrapper over core's createScanHandler.
+ */
+import { type Branding, type Logger } from "@gendigital/sage-core";
+export declare function createSessionScanHandler(logger: Logger, projectDir?: string, onResult?: (msg: string) => void, branding?: Branding): () => Promise<void>;
+//# sourceMappingURL=startup-scan.d.ts.map

package/dist/startup-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-scan.d.ts","sourceRoot":"","sources":["../src/startup-scan.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EACN,KAAK,QAAQ,EAGb,KAAK,MAAM,EACX,MAAM,uBAAuB,CAAC;AAmB/B,wBAAgB,wBAAwB,CACvC,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAChC,QAAQ,GAAE,QAA0B,GAClC,MAAM,OAAO,CAAC,IAAI,CAAC,CAiBrB"}

package/dist/startup-scan.js

@@ -0,0 +1,41 @@
+/**
+ * Startup and session scan handlers for OpenCode.
+ * Thin wrapper over core's createScanHandler.
+ */
+import { createRequire } from "node:module";
+import { createScanHandler as coreScanHandler, defaultBranding, } from "@gendigital/sage-core";
+import { getBundledDataDirs, getSageVersion } from "./bundled-dirs.js";
+import { discoverOpenCodePlugins } from "./plugin-discovery.js";
+/**
+ * OpenCode is published as an unbundled ESM plugin (tsc only). The model
+ * download worker therefore lives in the `@gendigital/sage-core` package
+ * as `dist/model-download-worker.js`. Resolve via `require.resolve` so we
+ * pick it up wherever pnpm/node placed it.
+ */
+function resolveModelDownloadWorkerPath() {
+    try {
+        const req = createRequire(import.meta.url);
+        return req.resolve("@gendigital/sage-core/dist/model-download-worker.js");
+    }
+    catch {
+        return undefined;
+    }
+}
+export function createSessionScanHandler(logger, projectDir, onResult, branding = defaultBranding) {
+    const { threatsDir, allowlistsDir } = getBundledDataDirs();
+    const version = getSageVersion();
+    return coreScanHandler({
+        logger,
+        context: "session",
+        discoverPlugins: () => discoverOpenCodePlugins(logger, projectDir, branding),
+        selfPrefix: "@gendigital/sage-opencode@",
+        threatsDir,
+        allowlistsDir,
+        version,
+        agentRuntime: "opencode",
+        branding,
+        onResult,
+        modelDownloadWorkerPath: resolveModelDownloadWorkerPath(),
+    });
+}
+//# sourceMappingURL=startup-scan.js.map

package/dist/startup-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-scan.js","sourceRoot":"","sources":["../src/startup-scan.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAEN,iBAAiB,IAAI,eAAe,EACpC,eAAe,GAEf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE;;;;;GAKG;AACH,SAAS,8BAA8B;IACtC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,MAAc,EACd,UAAmB,EACnB,QAAgC,EAChC,WAAqB,eAAe;IAEpC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAC3D,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IAEjC,OAAO,eAAe,CAAC;QACtB,MAAM;QACN,OAAO,EAAE,SAAS;QAClB,eAAe,EAAE,GAAG,EAAE,CAAC,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC;QAC5E,UAAU,EAAE,4BAA4B;QACxC,UAAU;QACV,aAAa;QACb,OAAO;QACP,YAAY,EAAE,UAAU;QACxB,QAAQ;QACR,QAAQ;QACR,uBAAuB,EAAE,8BAA8B,EAAE;KACzD,CAAC,CAAC;AACJ,CAAC"}

package/dist/tool-handler.d.ts

@@ -0,0 +1,14 @@
+import { type ApprovalStore, type Branding, type Logger } from "@gendigital/sage-core";
+export interface ToolHandlerOptions {
+    showToast?: (msg: string, variant: "info" | "success" | "warning" | "error") => void;
+}
+export declare function createToolHandlers(logger: Logger, approvalStore: ApprovalStore, threatsDir: string, allowlistsDir: string, options?: ToolHandlerOptions, branding?: Branding): {
+    "tool.execute.before": (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+    }, output: {
+        args: Record<string, unknown>;
+    }) => Promise<void>;
+};
+//# sourceMappingURL=tool-handler.d.ts.map

package/dist/tool-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-handler.d.ts","sourceRoot":"","sources":["../src/tool-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,QAAQ,EAOb,KAAK,MAAM,EACX,MAAM,uBAAuB,CAAC;AA+C/B,MAAM,WAAW,kBAAkB;IAClC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,KAAK,IAAI,CAAC;CACrF;AAED,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,kBAAkB,EAC5B,QAAQ,GAAE,QAA0B;mCAG5B;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,UAClD;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KACvC,OAAO,CAAC,IAAI,CAAC;EA+DhB"}

package/dist/tool-handler.js

@@ -0,0 +1,93 @@
+import { canonicalizeToolName, defaultBranding, formatAskMessage, formatDenyMessage, guardToolCall, } from "@gendigital/sage-core";
+const OPENCODE_TOOL_MAP = {
+    bash: "Bash",
+    webfetch: "WebFetch",
+    write: "Write",
+    edit: "Edit",
+    read: "Read",
+    glob: "Glob",
+    grep: "Grep",
+    ls: "List",
+    codesearch: "CodeSearch",
+    websearch: "WebSearch",
+    question: "Question",
+    task: "Task",
+    read_lines: "ReadLines",
+};
+import { SageVerdictBlockError, SageVerdictError } from "./error.js";
+import { extractFromOpenCodeTool } from "./extractors.js";
+function asString(value) {
+    return typeof value === "string" ? value : undefined;
+}
+function normalizeToolInput(toolName, args) {
+    switch (toolName) {
+        case "write":
+            return {
+                ...args,
+                file_path: asString(args.filePath) ?? asString(args.file_path) ?? "",
+                content: asString(args.content) ?? "",
+            };
+        case "edit":
+            return {
+                ...args,
+                file_path: asString(args.filePath) ?? asString(args.file_path) ?? "",
+                new_string: asString(args.newString) ?? asString(args.new_string) ?? "",
+            };
+        default:
+            return args;
+    }
+}
+export function createToolHandlers(logger, approvalStore, threatsDir, allowlistsDir, options, branding = defaultBranding) {
+    const beforeToolUse = async (input, output) => {
+        logger.debug(`tool.execute.before hook invoked (tool=${input.tool})`);
+        try {
+            const args = output.args ?? {};
+            const artifacts = extractFromOpenCodeTool(input.tool, args);
+            if (!artifacts || artifacts.length === 0) {
+                return;
+            }
+            const { verdict, actionId } = await guardToolCall({
+                sessionId: input.sessionID,
+                conversationId: input.sessionID,
+                agentRuntime: "opencode",
+                toolName: canonicalizeToolName(OPENCODE_TOOL_MAP, input.tool),
+                toolInput: normalizeToolInput(input.tool, args),
+                artifacts,
+            }, {
+                threatsDir,
+                allowlistsDir,
+                logger,
+            }, approvalStore);
+            if (verdict.decision === "allow") {
+                return;
+            }
+            try {
+                const toastMsg = verdict.decision === "deny"
+                    ? `${branding.name} blocked: ${verdict.reasons[0] ?? "Threat detected"} (${verdict.category})`
+                    : `${branding.name} flagged: ${verdict.reasons[0] ?? "Action flagged"} (${verdict.category})`;
+                options?.showToast?.(toastMsg, verdict.severity === "critical" ? "error" : "warning");
+            }
+            catch {
+                // Toast failure is non-critical — never prevent enforcement
+            }
+            if (verdict.decision === "deny") {
+                throw new SageVerdictBlockError(formatDenyMessage(verdict, branding));
+            }
+            // ask — actionId is always set for ask verdicts
+            throw new SageVerdictBlockError(formatAskMessage(actionId, verdict, artifacts, branding));
+        }
+        catch (error) {
+            // Verdict errors are expected (blocks and asks); others are logged as fail-open
+            if (error instanceof SageVerdictError)
+                throw error;
+            logger.error(`${branding.name} opencode hook failed open`, {
+                error: String(error),
+                tool: input.tool,
+            });
+        }
+    };
+    return {
+        "tool.execute.before": beforeToolUse,
+    };
+}
+//# sourceMappingURL=tool-handler.js.map

package/dist/tool-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-handler.js","sourceRoot":"","sources":["../src/tool-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,GAEb,MAAM,uBAAuB,CAAC;AAE/B,MAAM,iBAAiB,GAAsC;IAC5D,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,MAAM;IACV,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,WAAW;CACvB,CAAC;AAEF,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAC1B,QAAgB,EAChB,IAA6B;IAE7B,QAAQ,QAAQ,EAAE,CAAC;QAClB,KAAK,OAAO;YACX,OAAO;gBACN,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;gBACpE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;aACrC,CAAC;QACH,KAAK,MAAM;YACV,OAAO;gBACN,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;gBACpE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;aACvE,CAAC;QACH;YACC,OAAO,IAAI,CAAC;IACd,CAAC;AACF,CAAC;AAMD,MAAM,UAAU,kBAAkB,CACjC,MAAc,EACd,aAA4B,EAC5B,UAAkB,EAClB,aAAqB,EACrB,OAA4B,EAC5B,WAAqB,eAAe;IAEpC,MAAM,aAAa,GAAG,KAAK,EAC1B,KAA0D,EAC1D,MAAyC,EACzB,EAAE;QAClB,MAAM,CAAC,KAAK,CAAC,0CAA0C,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QAEtE,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAE5D,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1C,OAAO;YACR,CAAC;YAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAChD;gBACC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,cAAc,EAAE,KAAK,CAAC,SAAS;gBAC/B,YAAY,EAAE,UAAU;gBACxB,QAAQ,EAAE,oBAAoB,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC;gBAC7D,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;gBAC/C,SAAS;aACT,EACD;gBACC,UAAU;gBACV,aAAa;gBACb,MAAM;aACN,EACD,aAAa,CACb,CAAC;YAEF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,OAAO;YACR,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,QAAQ,GACb,OAAO,CAAC,QAAQ,KAAK,MAAM;oBAC1B,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,aAAa,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,iBAAiB,KAAK,OAAO,CAAC,QAAQ,GAAG;oBAC9F,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,aAAa,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,gBAAgB,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC;gBAChG,OAAO,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACvF,CAAC;YAAC,MAAM,CAAC;gBACR,4DAA4D;YAC7D,CAAC;YAED,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACjC,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACvE,CAAC;YAED,gDAAgD;YAChD,MAAM,IAAI,qBAAqB,CAC9B,gBAAgB,CAAC,QAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAClE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,gFAAgF;YAChF,IAAI,KAAK,YAAY,gBAAgB;gBAAE,MAAM,KAAK,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,4BAA4B,EAAE;gBAC1D,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;aAChB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;IAEF,OAAO;QACN,qBAAqB,EAAE,aAAa;KACpC,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@gendigital/sage-opencode",
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "version": "0.9.0",
+  "type": "module",
+  "description": "Safety for Agents - ADR layer for OpenCode",
+  "homepage": "https://github.com/gendigitalinc/sage",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/gendigitalinc/sage.git",
+    "directory": "packages/opencode"
+  },
+  "bugs": {
+    "url": "https://github.com/gendigitalinc/sage/issues"
+  },
+  "main": "./dist/index.js",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist/**",
+    "resources/**",
+    "package.json",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@gendigital/sage-core": "0.9.0"
+  },
+  "devDependencies": {
+    "@opencode-ai/plugin": "^1.2.10",
+    "@types/node": "^22.0.0",
+    "typescript": "^5.9.0",
+    "vitest": "^4.0.0"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "opencode",
+    "opencode-plugin",
+    "security",
+    "adr",
+    "agent-security",
+    "safety",
+    "malware-detection"
+  ],
+  "scripts": {
+    "build": "pnpm -C ../core build && pnpm run clean && pnpm run sync:assets && tsc",
+    "clean": "node ../../scripts/clean.mjs dist resources tsconfig.tsbuildinfo",
+    "sync:assets": "node scripts/sync-assets.mjs",
+    "test": "vitest run"
+  }
+}

package/resources/allowlists/trusted-installer-domains.yaml

@@ -0,0 +1,55 @@
+# Trusted installer domains for Sage
+#
+# Pipe-to-shell commands (curl | bash) targeting these domains are suppressed
+# from CLT-CMD-001, CLT-CMD-002, CLT-SUPPLY-001, and CLT-SUPPLY-004 heuristic matches.
+#
+# Only dedicated installer endpoints are listed here — generic hosting
+# platforms (e.g. raw.githubusercontent.com) are deliberately excluded.
+#
+# Format: list of {domain, reason} entries. Domains are matched by suffix
+# with dot boundary (e.g. "bun.sh" matches "cdn.bun.sh" but not "notbun.sh").
+
+- domain: bun.sh
+  reason: Bun JavaScript runtime installer
+
+- domain: astral.sh
+  reason: Astral tools (uv, ruff) installer
+
+- domain: brew.sh
+  reason: Homebrew package manager installer
+
+- domain: sh.rustup.rs
+  reason: Rust toolchain installer (rustup)
+
+- domain: rustup.rs
+  reason: Rust toolchain installer (alternate domain)
+
+- domain: get.docker.com
+  reason: Docker installer
+
+- domain: install.python-poetry.org
+  reason: Python Poetry installer
+
+- domain: get.volta.sh
+  reason: Volta Node.js version manager installer
+
+- domain: volta.sh
+  reason: Volta Node.js version manager (alternate domain)
+
+- domain: get.sdkman.io
+  reason: SDKMAN JVM toolchain manager installer
+
+- domain: pyenv.run
+  reason: pyenv Python version manager installer
+
+- domain: deno.land
+  reason: Deno runtime installer
+
+- domain: get.pnpm.io
+  reason: pnpm package manager installer
+
+- domain: nodesource.com
+  reason: Node.js binary distribution installer
+
+- domain: ohmyz.sh
+  reason: Oh My Zsh shell framework installer

package/resources/threats/LICENSE

@@ -0,0 +1,45 @@
+Detection Rule License (DRL) 1.1
+
+Copyright 2026 Gen Digital Inc.
+
+Default author for all rules in this directory: Gen Digital Inc.
+Individual rules may specify a different author in their "author" field.
+
+---
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this rule set and associated documentation files (the "Rules"), to deal in
+the Rules without restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Rules, and to permit persons to whom the Rules are furnished to do so,
+subject to the following conditions:
+
+If you share the Rules (including in modified form), you must retain the
+following if it is supplied within the Rules:
+
+1. identification of the authors(s) ("author" field) of the Rule and any
+   others designated to receive attribution, in any reasonable manner
+   requested by the Rule author (including by pseudonym if designated).
+
+2. a URI or hyperlink to the Rule set or explicit Rule to the extent
+   reasonably practicable
+
+3. indicate the Rules are licensed under this Detection Rule License, and
+   include the text of, or the URI or hyperlink to, this Detection Rule
+   License to the extent reasonably practicable
+
+If you use the Rules (including in modified form) on data, messages based on
+matches with the Rules must retain the following if it is supplied within the
+Rules:
+
+1. identification of the authors(s) ("author" field) of the Rule and any
+   others designated to receive attribution, in any reasonable manner
+   requested by the Rule author (including by pseudonym if designated).
+
+THE RULES ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE RULES OR THE USE OR OTHER DEALINGS IN THE
+RULES.