@kidsinai/kids-client 0.0.25 → 0.0.26

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@kidsinai/kids-client",
-  "version": "0.0.25",
+  "version": "0.0.26",
   "type": "module",
   "description": "Own-client TUI for Kids OpenCode — talks to local `opencode serve` via @opencode-ai/sdk v2 with kid-warm rendering, mission progress, permission dialog, and stderr-tail audit pipeline.",
   "license": "MIT",

package/src/core/serve-manager.ts

@@ -56,6 +56,16 @@ export interface ServeManagerOptions {
    */
   serverUsername: string
   opencodeBin: string
+  /**
+   * Inline opencode config (JSON string) passed to the spawned serve via
+   * OPENCODE_CONFIG_CONTENT. opencode otherwise reads the empty global config
+   * and falls back to a default model the ChatGPT-account auth can't use
+   * (gpt-5.5-pro) with permissions unset. Passing a curated `{ model,
+   * permission }` here pins a usable default model AND enforces the kid-safety
+   * "ask before write/edit" gate at the source. (OPENCODE_CONFIG as a file
+   * path is unreliable; the inline content var is what opencode honors.)
+   */
+  opencodeConfigContent?: string
   /** Max total wait for readiness in ms. Default {@link DEFAULT_READY_TIMEOUT_MS}. */
   readyTimeoutMs?: number
   /** Per-probe abort ceiling in ms. Default {@link DEFAULT_PROBE_TIMEOUT_MS}. */
@@ -101,6 +111,9 @@ export class ServeManager {
         ...process.env,
         OPENCODE_SERVER_PASSWORD: this.opts.serverPassword,
         OPENCODE_SERVER_USERNAME: this.opts.serverUsername,
+        ...(this.opts.opencodeConfigContent
+          ? { OPENCODE_CONFIG_CONTENT: this.opts.opencodeConfigContent }
+          : {}),
       },
       stdout: "pipe",
       stderr: "pipe",

package/src/index.tsx

@@ -20,6 +20,7 @@
 import React from "react"
 import { render } from "ink"
 import { join } from "node:path"
+import { readFileSync } from "node:fs"
 import { readEnv, validateEnv, type KidsClientEnv } from "./core/env.ts"
 import { ServeManager } from "./core/serve-manager.ts"
 import { createKidsClient, type OpencodeClient } from "./core/connection.ts"
@@ -344,6 +345,7 @@ async function bootServices(env: KidsClientEnv, store: Store): Promise<ServiceSe
     serverPassword: env.opencodeServerPassword,
     serverUsername: env.opencodeServerUsername,
     opencodeBin: env.opencodeBin,
+    opencodeConfigContent: buildServeConfig(env.configDir),
     onAuditLine: (event) => {
       audit.push(event)
       store.pushAudit(event)
@@ -915,6 +917,34 @@ function errMessage(err: unknown): string {
   return String(err)
 }
 
+/**
+ * Build the inline opencode config passed to the spawned serve. opencode's
+ * own global config is effectively empty, so without this it defaults the
+ * openai provider to gpt-5.5-pro (rejected by ChatGPT-account auth) with no
+ * permission gate. We forward a curated, schema-clean subset of the kids
+ * preset: a usable default model + the kid-safety "ask before acting" gate.
+ *
+ * Deliberately NOT forwarded: the preset's `agent.tools` / `_comment` keys —
+ * they fail opencode's config schema (which silently drops the whole config).
+ * The tool whitelist is enforced by the kids plugin regardless, so nothing is
+ * lost. Returns undefined if the preset is missing/unreadable (serve then
+ * falls back to its own config — same as before this change).
+ */
+function buildServeConfig(configDir: string): string | undefined {
+  let model = "openai/gpt-5.4-mini"
+  try {
+    const preset = JSON.parse(readFileSync(join(configDir, "opencode.json"), "utf8")) as { model?: string }
+    if (typeof preset.model === "string" && preset.model.includes("/")) model = preset.model
+  } catch {
+    return undefined
+  }
+  return JSON.stringify({
+    $schema: "https://opencode.ai/config.json",
+    model,
+    permission: { edit: "ask", write: "ask", bash: "ask", webfetch: "ask" },
+  })
+}
+
 void main().catch((err) => {
   console.error("kids-client: fatal startup error:", err)
   process.exit(1)