@khalilgharbaoui/opencode-claude-code-plugin 0.49.0 → 0.51.0

package/dist/index.d.ts

@@ -335,6 +335,9 @@ type OpenCodeHooks = {
 };
 type OpenCodePlugin = (input: unknown, options?: Record<string, unknown>) => Promise<OpenCodeHooks>;
 
+/** Account name -> group name. Empty is never stored; `null` means no guard. */
+type AccountGroups = Readonly<Record<string, string>>;
+
 type LogLevel = "debug" | "info" | "notice" | "warn" | "error";
 type LogMode = "silent" | "debug";
 
@@ -390,6 +393,12 @@ interface ClaudeCodeConfig {
      */
     accountInProcess?: boolean;
     accountFailover?: AccountFailoverMode;
+    /**
+     * The resolved `accountGroups` guard, or null for "no guard". Resolved once
+     * by `createClaudeCode` from the user's option, so every turn reads a value
+     * that has already been validated and warned about (h #g226).
+     */
+    accountGroups?: AccountGroups | null;
     providerID?: string;
     skipPermissions?: boolean;
     /**
@@ -404,6 +413,7 @@ interface ClaudeCodeConfig {
     mcpConfig?: string | string[];
     strictMcpConfig?: boolean;
     bridgeOpencodeMcp?: boolean;
+    bridgeMcpOauthTokens?: boolean;
     controlRequestBehavior?: ControlRequestBehavior;
     controlRequestToolBehaviors?: Record<string, ControlRequestBehavior>;
     controlRequestDenyMessage?: string;
@@ -530,6 +540,35 @@ interface ClaudeCodeProviderSettings {
      * error. See README "Account failover".
      */
     accountFailover?: AccountFailoverMode;
+    /**
+     * Which accounts may see each other's conversations. A map from an account
+     * name in `accounts` to a group name, e.g. `{ "appical": "work" }`.
+     *
+     * **Off unless set**, and unset is the default: with no map, or an empty one,
+     * every account behaves as one group and nothing about today's behaviour
+     * changes. Every account not named here, `default` included, is in one
+     * implicit group, so naming the one account that must stay apart is the whole
+     * configuration.
+     *
+     * When it is set, the plugin only ever moves a conversation between accounts
+     * in the SAME group: the by-hand switch (picking a model under another
+     * account's provider), the account-switch form, the override that form sets,
+     * and `crossAccountResume`. A switch ACROSS groups sends the other account
+     * nothing at all, not the Claude transcript and not a text replay of the
+     * thread either, because the replay is the same history by another route. The
+     * turn there starts fresh with only the current message and says so once, in
+     * one `▌ **account group:**` note naming both accounts. The conversation is
+     * left intact on the account it was on, so switching back continues it.
+     *
+     * The switch form offers only accounts in the limited account's own group,
+     * and with none left it behaves as a single-account install does.
+     *
+     * An account name that is not in `accounts` is a typo, so it is ignored with
+     * one WARN rather than silently creating a group that guards nothing. The
+     * resolved map is printed in the startup block and in
+     * `/claude-code-doctor`, names only.
+     */
+    accountGroups?: Record<string, string>;
     /**
      * Model that subagents run on when their own definition pins nothing.
      * Unset means no implicit override at all, so an agent keeps inheriting the
@@ -586,6 +625,25 @@ interface ClaudeCodeProviderSettings {
      * the same MCP servers opencode is configured with.
      */
     bridgeOpencodeMcp?: boolean;
+    /**
+     * Give a bridged remote MCP server the OAuth bearer token opencode already
+     * holds for it, so the Claude CLI can use a server you authenticated
+     * through opencode's own OAuth flow instead of reporting it `needs-auth`
+     * for the whole session.
+     *
+     * **Off by default, and deliberately.** You authenticated that server to
+     * opencode; this copies the token into the private config file the plugin
+     * writes for a second program, which then lets a model drive calls with it.
+     * That is your decision rather than a default. Nothing is read from
+     * opencode's credential store unless this is `true`.
+     *
+     * opencode 1 only: opencode 2 keeps MCP credentials in its database behind
+     * a typed plugin domain rather than in the `mcp-auth.json` file this reads,
+     * so the option finds nothing there. A server with no usable token is
+     * bridged exactly as it is today, never dropped, and an `Authorization`
+     * header you set yourself always wins.
+     */
+    bridgeMcpOauthTokens?: boolean;
     /**
      * Behavior for Claude CLI `control_request` permission checks
      * (`subtype: can_use_tool`) when `skipPermissions` is false.
@@ -1388,6 +1446,17 @@ declare class ClaudeCodeLanguageModel implements LanguageModelV3 {
 }
 
 type McpHostApi = "v1" | "v2";
+/**
+ * How a bridge call reaches opencode's MCP OAuth store.
+ *
+ * `oauthTokens` is the `bridgeMcpOauthTokens` provider option and is false
+ * unless the operator set it. `stateDir` exists so a spec can point the read
+ * at a scratch directory; production callers never pass it.
+ */
+interface McpBridgeAuthOptions {
+    oauthTokens?: boolean;
+    stateDir?: string;
+}
 interface BridgedMcp {
     /** Path to the temp file containing the translated `--mcp-config`. */
     path: string;
@@ -1429,8 +1498,12 @@ type RuntimeMcpStatus = Record<string, string>;
  * translate each server to Claude CLI format, write a scratch file, and
  * return its path + a stable hash. Returns null when no enabled MCP servers
  * remain after the merge + overlay.
+ *
+ * @param stateDir  Override the opencode state directory (`~/.local/share/opencode`
+ *                  by default) where `mcp-auth.json` is read from. Exposed for
+ *                  testing; production callers should omit it.
  */
-declare function bridgeOpencodeMcp(cwd: string, runtimeStatus?: RuntimeMcpStatus, excludeServers?: ReadonlySet<string>, hostApi?: McpHostApi): BridgedMcp | null;
+declare function bridgeOpencodeMcp(cwd: string, runtimeStatus?: RuntimeMcpStatus, excludeServers?: ReadonlySet<string>, hostApi?: McpHostApi, auth?: McpBridgeAuthOptions): BridgedMcp | null;
 
 type AgentRecord = {
     mode?: string;