@haposoft/cafekit 0.16.0-rc.6 → 0.16.0-rc.8

package/src/opencode/plugins/task-scaffold-guard.ts

@@ -1,161 +0,0 @@
-/**
- * Copyright (c) 2026 Haposoft. MIT License.
- *
- * OpenCode Plugin — task-scaffold-guard.ts
- *
- * Port of .claude/hooks/task-scaffold-guard.cjs to OpenCode plugin protocol.
- * Also covers the OpenCode-only `apply_patch` file-creation vector
- * (`*** Add File: <path>` in `output.args.patchText`).
- *
- * Behavior:
- * - Block `write` and `apply_patch` that create `specs/<feature>/tasks/task-*.md`.
- * - Task files must be generated via `spec-scaffold.cjs`, then Edit-filled.
- *
- * Safety valves:
- *   1. Escape hatch: `.opencode/runtime.json` `{ "spec": { "scaffold_guard": false } }`
- *      (fail-closed: missing/broken runtime keeps the guard ON).
- *   2. Fail-open if `.opencode/scripts/spec-scaffold.cjs` is absent.
- *   3. Actionable block message with the exact scaffold command.
- */
-
-import type { Plugin } from "@opencode-ai/plugin";
-import { existsSync, readFileSync, mkdirSync, appendFileSync } from "node:fs";
-import { join, dirname } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const TASK_FILE_RE = /(^|\/)specs\/[^/]+\/tasks\/task-[^/]+\.md$/;
-const TASK_FILE_REL_RE = /(?:^|\/)(specs\/[^/]+\/tasks\/task-[^/]+\.md)$/;
-const FEATURE_RE = /(^|\/)specs\/([^/]+)\/tasks\//;
-const ADD_FILE_RE = /^\*\*\* Add File:\s*(.+?)\s*$/gm;
-
-const PLUGIN_DIR = dirname(fileURLToPath(import.meta.url));
-
-function readRuntime(cwd: string): Record<string, unknown> {
-  try {
-    const file = join(cwd, ".opencode", "runtime.json");
-    return existsSync(file) ? JSON.parse(readFileSync(file, "utf8")) : {};
-  } catch {
-    return {};
-  }
-}
-
-function isTaskFile(filePath: string): boolean {
-  const norm = filePath.replace(/\\/g, "/");
-  return TASK_FILE_RE.test(norm);
-}
-
-function extractFeature(filePath: string): string {
-  const norm = filePath.replace(/\\/g, "/");
-  const m = norm.match(FEATURE_RE);
-  return m ? m[2] : "<feature>";
-}
-
-function pathsFromApplyPatch(patchText: string): string[] {
-  const paths: string[] = [];
-  let match: RegExpExecArray | null;
-  const re = new RegExp(ADD_FILE_RE.source, ADD_FILE_RE.flags);
-  while ((match = re.exec(patchText)) !== null) {
-    const p = match[1]?.trim();
-    if (p) paths.push(p);
-  }
-  return paths;
-}
-
-function collectTargetPaths(tool: string, args: Record<string, unknown>): string[] {
-  if (tool === "write") {
-    const filePath = typeof args.filePath === "string" ? args.filePath.trim() : "";
-    return filePath ? [filePath] : [];
-  }
-  if (tool === "apply_patch") {
-    const patchText = typeof args.patchText === "string" ? args.patchText : "";
-    return patchText ? pathsFromApplyPatch(patchText) : [];
-  }
-  return [];
-}
-
-/**
- * Resolve a (possibly sandbox-virtual) tool path to the real on-disk task file.
- * OpenCode may present paths like /home/user/specs/... to the model; the
- * project-relative `specs/...` suffix joined onto the plugin `directory` is
- * the reliable location for existence checks.
- */
-function resolveTaskFile(directory: string, filePath: string): string {
-  const norm = filePath.replace(/\\/g, "/");
-  const m = norm.match(TASK_FILE_REL_RE);
-  return m ? join(directory, m[1]) : filePath;
-}
-
-function formatBlockMessage(filePath: string): string {
-  const feature = extractFeature(filePath);
-  // NOTE: deliberately does NOT mention the runtime.json escape hatch.
-  // Smoke-tested on opencode 1.17.15: when the block message advertised the
-  // override, the model simply wrote runtime.json and disabled the guard.
-  // The hatch stays functional for humans; it is documented in the docs only.
-  return [
-    "TASK SCAFFOLD REQUIRED: task files must be generated, not hand-written.",
-    `Blocked Write: ${filePath}`,
-    "",
-    "Generate the stub(s), then Edit-fill the {{...}} placeholders:",
-    `  node .opencode/scripts/spec-scaffold.cjs ${feature} --tasks "R0-01-slug,R1-01-slug,..." --tasks-only`,
-    "Then use Edit (not Write) on each tasks/task-*.md stub.",
-  ].join("\n");
-}
-
-function logCrash(error: unknown): void {
-  try {
-    const logDir = join(PLUGIN_DIR, ".logs");
-    if (!existsSync(logDir)) mkdirSync(logDir, { recursive: true });
-    appendFileSync(
-      join(logDir, "hook-log.jsonl"),
-      JSON.stringify({
-        ts: new Date().toISOString(),
-        hook: "task-scaffold-guard",
-        status: "crash",
-        error: error instanceof Error ? error.message : String(error),
-      }) + "\n",
-    );
-  } catch {
-    // fail-open
-  }
-}
-
-export const TaskScaffoldGuard: Plugin = async ({ directory }) => ({
-  "tool.execute.before": async (input, output) => {
-    try {
-      if (input.tool !== "write" && input.tool !== "apply_patch" && input.tool !== "edit") return;
-
-      const runtime = readRuntime(directory);
-      const spec = runtime.spec as Record<string, unknown> | undefined;
-      if (spec?.scaffold_guard === false) return;
-
-      const scaffold = join(directory, ".opencode", "scripts", "spec-scaffold.cjs");
-      if (!existsSync(scaffold)) return;
-
-      const args = (output.args ?? {}) as Record<string, unknown>;
-
-      // OpenCode's `edit` CAN create new files (unlike Claude's Edit, which
-      // requires an existing file — the original guard's design premise).
-      // Verified on opencode 1.17.15. Gate: edit on a NON-existent task file
-      // is creation (block); edit on an existing stub is legitimate filling.
-      if (input.tool === "edit") {
-        const filePath = typeof args.filePath === "string" ? args.filePath.trim() : "";
-        if (filePath && isTaskFile(filePath) && !existsSync(resolveTaskFile(directory, filePath))) {
-          throw new Error(formatBlockMessage(filePath));
-        }
-        return;
-      }
-
-      const paths = collectTargetPaths(input.tool, args);
-      for (const filePath of paths) {
-        if (!isTaskFile(filePath)) continue;
-        throw new Error(formatBlockMessage(filePath));
-      }
-    } catch (error) {
-      // Re-throw intentional scaffold blocks; swallow programming errors.
-      if (error instanceof Error && error.message.includes("TASK SCAFFOLD REQUIRED")) {
-        throw error;
-      }
-      logCrash(error);
-    }
-  },
-});

package/src/opencode/plugins/usage.ts

@@ -1,178 +0,0 @@
-/**
- * Copyright (c) 2026 Haposoft. MIT License.
- *
- * OpenCode Plugin — usage.ts
- *
- * Port of .claude/hooks/usage.cjs adapted to OpenCode's plugin surface.
- *
- * Claude's version polls the Anthropic OAuth API for plan usage so the
- * statusline can render quota. OpenCode has no statusline injection point
- * and no OAuth plumbing, so this port instead tracks per-session token
- * usage by inspecting `message.updated` payloads and writing the rolling
- * totals to `.opencode/session-state/usage.json` for downstream tooling.
- *
- * Disable via .opencode/runtime.json: { "usage": { "enabled": false } }.
- */
-
-import type { Plugin } from "@opencode-ai/plugin";
-import {
-  existsSync,
-  readFileSync,
-  writeFileSync,
-  mkdirSync,
-} from "node:fs";
-import { join, dirname } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const PLUGIN_DIR = dirname(fileURLToPath(import.meta.url));
-
-interface UsageTotals {
-  inputTokens: number;
-  outputTokens: number;
-  cacheReadTokens: number;
-  cacheWriteTokens: number;
-  messages: number;
-  lastUpdated: string;
-}
-
-interface UsageFile {
-  sessionId: string;
-  startedAt: string;
-  totals: UsageTotals;
-}
-
-function resolveProjectDir(directory?: string): string {
-  if (directory && existsSync(directory)) return directory;
-  // Plugin installed under <project>/.opencode/plugins/, so go up twice.
-  return dirname(dirname(PLUGIN_DIR));
-}
-
-function readRuntime(cwd: string): Record<string, any> {
-  try {
-    const file = join(cwd, ".opencode", "runtime.json");
-    if (existsSync(file)) {
-      return JSON.parse(readFileSync(file, "utf8"));
-    }
-  } catch {
-    /* fail-open */
-  }
-  return {};
-}
-
-function isEnabled(cwd: string): boolean {
-  const runtime = readRuntime(cwd);
-  return runtime?.usage?.enabled !== false;
-}
-
-function usagePath(cwd: string): string {
-  return join(cwd, ".opencode", "session-state", "usage.json");
-}
-
-function readUsage(file: string): UsageFile | null {
-  try {
-    if (!existsSync(file)) return null;
-    return JSON.parse(readFileSync(file, "utf8"));
-  } catch {
-    return null;
-  }
-}
-
-function writeUsage(file: string, payload: UsageFile): void {
-  try {
-    mkdirSync(dirname(file), { recursive: true });
-    writeFileSync(file, JSON.stringify(payload, null, 2));
-  } catch {
-    /* fail-open */
-  }
-}
-
-// Defensive extractor: OpenCode message payloads may expose usage either
-// directly on the message or nested under metadata/usage. Accept both.
-function extractUsage(message: any): {
-  input: number;
-  output: number;
-  cacheRead: number;
-  cacheWrite: number;
-} | null {
-  const candidates = [
-    message?.usage,
-    message?.metadata?.usage,
-    message?.tokens,
-    message?.metadata?.tokens,
-  ].filter(Boolean);
-
-  for (const c of candidates) {
-    const input =
-      Number(c.input_tokens ?? c.inputTokens ?? c.prompt_tokens ?? 0) || 0;
-    const output =
-      Number(c.output_tokens ?? c.outputTokens ?? c.completion_tokens ?? 0) ||
-      0;
-    const cacheRead =
-      Number(
-        c.cache_read_input_tokens ??
-          c.cacheReadInputTokens ??
-          c.cache_read_tokens ??
-          0,
-      ) || 0;
-    const cacheWrite =
-      Number(
-        c.cache_creation_input_tokens ??
-          c.cacheCreationInputTokens ??
-          c.cache_write_tokens ??
-          0,
-      ) || 0;
-    if (input || output || cacheRead || cacheWrite) {
-      return { input, output, cacheRead, cacheWrite };
-    }
-  }
-  return null;
-}
-
-export const UsagePlugin: Plugin = async ({ directory }) => {
-  const cwd = resolveProjectDir(directory);
-
-  return {
-    event: async ({ event }) => {
-      if (event.type !== "message.updated") return;
-      if (!isEnabled(cwd)) return;
-
-      const message = (event as any).properties?.info ?? (event as any).properties?.message;
-      if (!message) return;
-
-      const tokens = extractUsage(message);
-      if (!tokens) return;
-
-      const sessionId = message.sessionID ?? message.sessionId ?? "default";
-      const file = usagePath(cwd);
-      const now = new Date().toISOString();
-      const existing = readUsage(file);
-
-      const sameSession = existing && existing.sessionId === sessionId;
-      const totals: UsageTotals = sameSession
-        ? existing!.totals
-        : {
-            inputTokens: 0,
-            outputTokens: 0,
-            cacheReadTokens: 0,
-            cacheWriteTokens: 0,
-            messages: 0,
-            lastUpdated: now,
-          };
-
-      totals.inputTokens += tokens.input;
-      totals.outputTokens += tokens.output;
-      totals.cacheReadTokens += tokens.cacheRead;
-      totals.cacheWriteTokens += tokens.cacheWrite;
-      totals.messages += 1;
-      totals.lastUpdated = now;
-
-      writeUsage(file, {
-        sessionId,
-        startedAt: sameSession ? existing!.startedAt : now,
-        totals,
-      });
-    },
-  };
-};
-
-export default UsagePlugin;