@helloleo/plugins 0.2.21 → 0.2.23

package/src/templates/tanstack-start-2026-07-30/vite.config.ts

@@ -1,17 +0,0 @@
-import { defineConfig } from '@helloleo/vite-config'
-
-// @helloleo/vite-config owns the whole build/dev/sandbox pipeline: in dev it
-// aliases `cloudflare:workers` -> @helloleo/runtime/cf-shim (libsql .dev.db for
-// D1+KV, local disk for R2) and runs plain Vite SSR; at build it adds
-// @cloudflare/vite-plugin to emit a workerd Worker bound to wrangler.jsonc. It
-// also binds host:true/port:5173 itself (>=0.1.2).
-//
-// The one thing the wrapper doesn't set: HMR over the HelloLeo preview proxy,
-// which terminates HTTPS on :443 — so point the HMR client at wss://…:443.
-export default defineConfig({
-  vite: {
-    server: {
-      hmr: { clientPort: 443, protocol: 'wss' },
-    },
-  },
-})

package/src/tools/create-plan.ts

@@ -1,61 +0,0 @@
-import { mkdir } from "node:fs/promises";
-import path from "node:path";
-import type { Plugin } from "@opencode-ai/plugin";
-import { tool } from "@opencode-ai/plugin";
-
-function slug(title: string) {
-	return title
-		.toLowerCase()
-		.replace(/[^a-z0-9]+/g, "-")
-		.replace(/^-|-$/g, "")
-		.slice(0, 60);
-}
-
-function frontmatter(fields: Record<string, string>) {
-	const lines = Object.entries(fields).map(([k, v]) => `${k}: ${v}`);
-	return `---\n${lines.join("\n")}\n---`;
-}
-
-export const createPlan = tool({
-	description:
-		"Create a new plan file in .leo/plans/. Plans use markdown with YAML frontmatter " +
-		"tracking title, status, and timestamps. The plan ID is a slug derived from the title.",
-	args: {
-		title: tool.schema.string().describe("Title of the plan"),
-		content: tool.schema.string().describe("Markdown body of the plan"),
-	},
-	async execute(args, context) {
-		const dir = path.join(context.directory, ".leo", "plans");
-		await mkdir(dir, { recursive: true });
-
-		let id = slug(args.title);
-		let filepath = path.join(dir, `${id}.md`);
-		let suffix = 1;
-
-		while (await Bun.file(filepath).exists()) {
-			suffix++;
-			id = `${slug(args.title)}-${suffix}`;
-			filepath = path.join(dir, `${id}.md`);
-		}
-
-		const now = new Date().toISOString();
-		const header = frontmatter({
-			title: args.title,
-			status: "active",
-			created: now,
-			modified: now,
-		});
-
-		const body = `${header}\n\n${args.content}\n`;
-		await Bun.write(filepath, body);
-
-		const relative = path.relative(context.directory, filepath);
-		return `Created plan "${args.title}" at ${relative}\n\n${body}`;
-	},
-});
-
-export const CreatePlanPlugin: Plugin = async () => {
-	return {
-		tool: { create_plan: createPlan },
-	};
-};

package/src/tools/inspect-http.ts

@@ -1,276 +0,0 @@
-import type { Plugin } from "@opencode-ai/plugin";
-import { tool } from "@opencode-ai/plugin";
-
-const z = tool.schema;
-
-const hosts = {
-	"helloleo.dev": {
-		private: true,
-	},
-	"helloleo.app": {
-		private: false,
-	},
-	"augustin-d60.workers.dev": {
-		private: false,
-	},
-} as const;
-
-const DEFAULT_TIMEOUT_MS = 15_000;
-const MAX_TIMEOUT_MS = 30_000;
-const MAX_RESPONSE_BYTES = 1_000_000;
-
-const METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"] as const;
-const METHODS_AUTO_JSON = new Set(["POST", "PUT", "PATCH"]);
-
-// tool() is an identity function; parse args explicitly so .default() applies.
-const argsShape = {
-	url: z
-		.string()
-		.describe(
-			"Fully-qualified URL to request. Must be on the HelloLeo whitelist " +
-				"(**.helloleo.dev, **.helloleo.app, **.augustin-d60.workers.dev).",
-		),
-	method: z
-		.enum(METHODS)
-		.default("GET")
-		.describe(`HTTP method (${METHODS.join(", ")}). Defaults to GET.`),
-	body: z
-		.string()
-		.optional()
-		.describe(
-			"Request body as a string. Not valid for GET. Sent with " +
-				"Content-Type: application/json on POST/PUT/PATCH unless a " +
-				"different Content-Type is supplied via headers.",
-		),
-	headers: z
-		.record(z.string(), z.string())
-		.default({})
-		.describe(
-			"Optional additional request headers as key/value pairs (e.g. Authorization).",
-		),
-	timeout: z
-		.number()
-		.max(MAX_TIMEOUT_MS)
-		.default(DEFAULT_TIMEOUT_MS)
-		.describe(
-			`Optional timeout in milliseconds (max ${MAX_TIMEOUT_MS}, default ${DEFAULT_TIMEOUT_MS}).`,
-		),
-};
-
-const argsSchema = z.object(argsShape);
-
-export const inspectHttp = tool({
-	description:
-		"Send an HTTP request to a HelloLeo endpoint and return the status code, " +
-		"response headers, and response body. Use this to inspect the live behaviour " +
-		"of HelloLeo workers, the production API, or preview deployments so you can " +
-		"self-debug instead of operating blind. ",
-	args: argsShape,
-	async execute(rawArgs, context) {
-		const args = argsSchema.parse(rawArgs);
-		const url = parseTargetUrl(args.url);
-
-		if (args.method === "GET" && args.body !== undefined) {
-			throw new Error("GET requests cannot have a body");
-		}
-
-		await context.ask({
-			permission: "inspect_http",
-			patterns: [url.toString()],
-			always: [`${url.protocol}//${url.hostname}/*`],
-			metadata: {
-				url: url.toString(),
-				method: args.method,
-				hasBody: args.body !== undefined,
-			},
-		});
-
-		const timeoutMs = Math.max(1, Math.min(args.timeout, MAX_TIMEOUT_MS));
-
-		const previewGateSecret = process.env.PREVIEW_INSPECT_SECRET;
-		const defaultUserAgent =
-			isPrivateHost(url.hostname) && previewGateSecret
-				? `LeoInspect/${previewGateSecret}`
-				: "leoInspect/0.1";
-
-		const requestHeaders: Record<string, string> = {
-			Accept: "application/json, text/plain, */*",
-			"User-Agent": defaultUserAgent,
-			Origin: "https://app.helloleo.dev",
-			...args.headers,
-		};
-
-		if (
-			METHODS_AUTO_JSON.has(args.method) &&
-			args.body !== undefined &&
-			!hasHeader(requestHeaders, "content-type")
-		) {
-			requestHeaders["Content-Type"] = "application/json";
-		}
-
-		const signal = AbortSignal.any([
-			context.abort,
-			AbortSignal.timeout(timeoutMs),
-		]);
-
-		let response: Response;
-		try {
-			response = await fetch(url, {
-				method: args.method,
-				headers: requestHeaders,
-				body: args.method === "GET" ? undefined : args.body,
-				signal,
-				redirect: "follow",
-			});
-		} catch (err) {
-			if (err instanceof DOMException && err.name === "TimeoutError") {
-				throw new Error(`Request timed out after ${timeoutMs}ms`);
-			}
-			if (err instanceof DOMException && err.name === "AbortError") {
-				throw new Error("Request aborted");
-			}
-			const message = err instanceof Error ? err.message : String(err);
-			throw new Error(`Request failed: ${message}`);
-		}
-
-		const { text, truncated } = await readBody(response);
-		const contentType = response.headers.get("content-type");
-		const formattedBody = formatBody(text, contentType);
-
-		const redirected = response.url && response.url !== url.toString();
-
-		const lines: string[] = [`${args.method} ${url.toString()}`];
-		if (redirected) {
-			lines.push(`Final URL: ${response.url}`);
-		}
-		lines.push(
-			`Status: ${response.status}${response.statusText ? ` ${response.statusText}` : ""}`,
-			"",
-			"Response headers:",
-			formatHeaders(response.headers) || "(none)",
-			"",
-			"Response body:",
-			formattedBody.length > 0 ? formattedBody : "(empty)",
-		);
-
-		if (truncated) {
-			lines.push("", `(body truncated at ${MAX_RESPONSE_BYTES} bytes)`);
-		}
-
-		return lines.join("\n");
-	},
-});
-
-function parseTargetUrl(raw: string): URL {
-	let url: URL;
-	try {
-		url = new URL(raw);
-	} catch {
-		throw new Error(`Invalid URL: ${raw}`);
-	}
-
-	if (url.protocol !== "https:" && url.protocol !== "http:") {
-		throw new Error(
-			`URL must use http or https scheme (got "${url.protocol}")`,
-		);
-	}
-
-	if (url.username || url.password) {
-		throw new Error("URL must not contain embedded credentials");
-	}
-
-	if (!isAllowedHost(url.hostname)) {
-		throw new Error(
-			`Host "${url.hostname}" is not on the HelloLeo whitelist. Allowed: ${allowedHostsHuman()}`,
-		);
-	}
-
-	return url;
-}
-
-type HostBase = keyof typeof hosts;
-
-function findHostBase(hostname: string): HostBase | null {
-	const host = hostname.toLowerCase().replace(/\.$/, "");
-	for (const base of Object.keys(hosts) as HostBase[]) {
-		if (host === base || host.endsWith(`.${base}`)) return base;
-	}
-	return null;
-}
-
-function allowedHostsHuman(): string {
-	return (Object.keys(hosts) as HostBase[])
-		.map((base) => `**.${base}`)
-		.join(", ");
-}
-
-function isAllowedHost(hostname: string): boolean {
-	return findHostBase(hostname) !== null;
-}
-
-function isPrivateHost(hostname: string): boolean {
-	const base = findHostBase(hostname);
-	return base !== null && hosts[base].private;
-}
-
-function hasHeader(headers: Record<string, string>, name: string): boolean {
-	const target = name.toLowerCase();
-	for (const key of Object.keys(headers)) {
-		if (key.toLowerCase() === target) return true;
-	}
-	return false;
-}
-
-function formatHeaders(headers: Headers): string {
-	const entries: string[] = [];
-	headers.forEach((value, key) => {
-		entries.push(`${key}: ${value}`);
-	});
-	return entries.sort().join("\n");
-}
-
-function formatBody(raw: string, contentType: string | null): string {
-	const mime = contentType?.split(";")[0]?.trim().toLowerCase() ?? "";
-	if (mime.includes("application/json") || mime.endsWith("+json")) {
-		try {
-			return JSON.stringify(JSON.parse(raw), null, 2);
-		} catch {}
-	}
-	return raw;
-}
-
-async function readBody(response: Response): Promise<{
-	text: string;
-	truncated: boolean;
-}> {
-	if (!response.body) return { text: "", truncated: false };
-
-	const reader = response.body.getReader();
-	const decoder = new TextDecoder();
-	let text = "";
-	let total = 0;
-	let truncated = false;
-
-	while (true) {
-		const { done, value } = await reader.read();
-		if (done) break;
-		if (!value) continue;
-
-		total += value.byteLength;
-		if (total > MAX_RESPONSE_BYTES) {
-			truncated = true;
-			await reader.cancel();
-			break;
-		}
-		text += decoder.decode(value, { stream: true });
-	}
-	text += decoder.decode();
-
-	return { text, truncated };
-}
-
-export const InspectHttpPlugin: Plugin = async () => {
-	return {
-		tool: { inspect_http: inspectHttp },
-	};
-};

package/src/tools/list-plans.ts

@@ -1,85 +0,0 @@
-import { existsSync } from "node:fs";
-import path from "node:path";
-import type { Plugin } from "@opencode-ai/plugin";
-import { tool } from "@opencode-ai/plugin";
-
-const STATUS = ["active", "completed", "cancelled"] as const;
-
-function parseFrontmatter(raw: string) {
-	const match = raw.match(/^---\n([\s\S]*?)\n---/);
-	if (!match) return {} as Record<string, string>;
-
-	const fields: Record<string, string> = {};
-	for (const line of (match[1] ?? "").split("\n")) {
-		const idx = line.indexOf(":");
-		if (idx === -1) continue;
-		fields[line.slice(0, idx).trim()] = line.slice(idx + 1).trim();
-	}
-
-	return fields;
-}
-
-export const listPlans = tool({
-	description:
-		"List all plans in .leo/plans/. Returns each plan's slug, title, status, and last modified date. " +
-		"Optionally filter by status.",
-	args: {
-		status: tool.schema
-			.enum(STATUS)
-			.optional()
-			.describe(`Filter plans by status: ${STATUS.join(", ")}`),
-	},
-	async execute(args, context) {
-		const dir = path.join(context.directory, ".leo", "plans");
-
-		if (!existsSync(dir)) {
-			return args.status
-				? `No plans with status "${args.status}"`
-				: "No plans found";
-		}
-
-		const glob = new Bun.Glob("*.md");
-		const entries: {
-			id: string;
-			title: string;
-			status: string;
-			modified: string;
-		}[] = [];
-
-		for await (const match of glob.scan({ cwd: dir, absolute: true })) {
-			const raw = await Bun.file(match).text();
-			const fields = parseFrontmatter(raw);
-			const id = path.basename(match, ".md");
-
-			if (args.status && fields.status !== args.status) continue;
-
-			entries.push({
-				id,
-				title: fields.title ?? id,
-				status: fields.status ?? "unknown",
-				modified: fields.modified ?? fields.created ?? "unknown",
-			});
-		}
-
-		if (entries.length === 0) {
-			return args.status
-				? `No plans with status "${args.status}"`
-				: "No plans found";
-		}
-
-		entries.sort((a, b) => (b.modified > a.modified ? 1 : -1));
-
-		const header = `Found ${entries.length} plan${entries.length === 1 ? "" : "s"}:\n`;
-		const rows = entries.map(
-			(e) => `${e.id} | ${e.status} | ${e.title} | modified ${e.modified}`,
-		);
-
-		return header + rows.join("\n");
-	},
-});
-
-export const ListPlansPlugin: Plugin = async () => {
-	return {
-		tool: { list_plans: listPlans },
-	};
-};

package/src/tools/modify-plan.ts

@@ -1,79 +0,0 @@
-import path from "node:path";
-import type { Plugin } from "@opencode-ai/plugin";
-import { tool } from "@opencode-ai/plugin";
-
-const STATUS = ["active", "completed", "cancelled"] as const;
-
-function parseFrontmatter(raw: string) {
-	const match = raw.match(/^---\n([\s\S]*?)\n---\n?([\s\S]*)$/);
-	if (!match) return { fields: {} as Record<string, string>, body: raw };
-
-	const fields: Record<string, string> = {};
-	for (const line of (match[1] ?? "").split("\n")) {
-		const idx = line.indexOf(":");
-		if (idx === -1) continue;
-		fields[line.slice(0, idx).trim()] = line.slice(idx + 1).trim();
-	}
-
-	return { fields, body: (match[2] ?? "").trim() };
-}
-
-function formatFrontmatter(fields: Record<string, string>, body: string) {
-	const lines = Object.entries(fields).map(([k, v]) => `${k}: ${v}`);
-	return `---\n${lines.join("\n")}\n---\n\n${body}\n`;
-}
-
-export const modifyPlan = tool({
-	description:
-		"Modify an existing plan in .leo/plans/. You can update the content, the status, or both. " +
-		"The modified timestamp is updated automatically.",
-	args: {
-		planId: tool.schema
-			.string()
-			.describe("Plan slug ID (e.g. refactor-auth-flow)"),
-		content: tool.schema
-			.string()
-			.optional()
-			.describe("New markdown body for the plan"),
-		status: tool.schema
-			.enum(STATUS)
-			.optional()
-			.describe("New status for the plan"),
-	},
-	async execute(args, context) {
-		if (!args.content && !args.status) {
-			throw new Error("Provide at least one of content or status to modify");
-		}
-
-		const filepath = path.join(
-			context.directory,
-			".leo",
-			"plans",
-			`${args.planId}.md`,
-		);
-		const file = Bun.file(filepath);
-
-		if (!(await file.exists())) {
-			throw new Error(`Plan not found: ${args.planId}`);
-		}
-
-		const raw = await file.text();
-		const parsed = parseFrontmatter(raw);
-
-		if (args.status) parsed.fields.status = args.status;
-		parsed.fields.modified = new Date().toISOString();
-
-		const body = args.content ?? parsed.body;
-		const output = formatFrontmatter(parsed.fields, body);
-		await Bun.write(filepath, output);
-
-		const relative = path.relative(context.directory, filepath);
-		return `Updated plan "${args.planId}" at ${relative}\n\n${output}`;
-	},
-});
-
-export const ModifyPlanPlugin: Plugin = async () => {
-	return {
-		tool: { modify_plan: modifyPlan },
-	};
-};

package/src/tools/remove.ts

@@ -1,53 +0,0 @@
-import { unlink } from "node:fs/promises";
-import path from "node:path";
-import type { Plugin } from "@opencode-ai/plugin";
-import { tool } from "@opencode-ai/plugin";
-
-export const remove = tool({
-	description:
-		"Remove a file from the project. The file path must be relative to the project root. " +
-		"This tool will ask for permission before deleting. " +
-		"Cannot delete files outside the project boundary.",
-	args: {
-		filePath: tool.schema
-			.string()
-			.describe("Relative path to the file to remove (e.g. src/App.tsx)"),
-	},
-	async execute(args, context) {
-		const resolved = path.resolve(context.directory, args.filePath);
-		const normalized = path.normalize(resolved);
-
-		if (
-			!normalized.startsWith(context.directory + path.sep) &&
-			normalized !== context.directory
-		) {
-			throw new Error(
-				`Path "${args.filePath}" resolves outside the project boundary. Deletion blocked.`,
-			);
-		}
-
-		const file = Bun.file(resolved);
-		if (!(await file.exists())) {
-			throw new Error(`File not found: ${args.filePath}`);
-		}
-
-		const relative = path.relative(context.directory, resolved);
-
-		await context.ask({
-			permission: "remove",
-			patterns: [resolved],
-			always: [resolved],
-			metadata: { filePath: relative },
-		});
-
-		await unlink(resolved);
-
-		return `Removed ${relative}`;
-	},
-});
-
-export const RemovePlugin: Plugin = async () => {
-	return {
-		tool: { remove: remove },
-	};
-};