@kontourai/flow-agents 0.1.2 → 0.3.0

package/src/tools/build-universal-bundles.ts

@@ -332,6 +332,285 @@ function buildCodex(agents: Agent[]): void {
   writeText(path.join(bundle, "install.sh"), installScript("Codex", "/path/to/workspace"));
   fs.chmodSync(path.join(bundle, "install.sh"), 0o755);
 }
+function exportOpencodeAgent(spec: Agent): string {
+  // Determine agent mode: orchestrator-like agents -> primary, others -> subagent
+  const primaryAgents = new Set(["dev"]);
+  const mode = primaryAgents.has(spec.name) ? "primary" : "subagent";
+  const prompt = appendExportNote(sanitizeText(spec.prompt, "opencode", "<bundle-root>"), "Kiro hook wiring and JSON-only runtime fields were omitted. If this agent mentions Kiro-specific scheduler or hook behavior, treat that as optional operational guidance rather than a hard dependency.");
+  const lines: string[] = ["---"];
+  lines.push(`description: ${String(spec.description ?? "").trim()}`);
+  lines.push(`mode: ${mode}`);
+  lines.push(`model: ${mapped("claude_model_map", spec.model)}`);
+  lines.push("---");
+  lines.push("");
+  lines.push(prompt);
+  return lines.join("\n");
+}
+function exportOpencodePlugin(): string {
+  // Generate the Flow Agents opencode plugin.
+  // opencode plugins are auto-loaded from .opencode/plugins/*.js at startup.
+  //
+  // NOTE: opencode has no direct user-prompt-submit hook. For prompt-submit
+  // workflow steering, we wire the steering command behind session.created
+  // (for session-start steering context) and tool.execute.before (for
+  // policy). This is the closest reasonable approximation — documented here
+  // as an honest gap matching the codex live-hook-influence caveat pattern.
+  //
+  // KNOWN GAP (verified 2026-06-11, opencode v1.16.2): session.created is NOT
+  // delivered to plugin event handlers in opencode  (non-interactive) mode.
+  // The session IS created server-side but the event fires before the plugin
+  // hook dispatch loop is active. As a result, agentSpawn telemetry (session.start)
+  // is never emitted in run-mode sessions — only tool.invoke/tool.result appear.
+  // This is an opencode runtime limitation, not a bug in this plugin.
+  // Session.start telemetry carries L1 conformance but is unavailable in run mode.
+  // See docs/spec/runtime-hook-surface.md opencode mapping row for the full gap note.
+  return `/**
+ * Flow Agents opencode plugin.
+ *
+ * Auto-loaded from .opencode/plugins/flow-agents.js at opencode startup.
+ * Delegates policy and telemetry decisions to shared scripts in scripts/hooks/
+ * using the same payload contract as the claude/codex adapters.
+ *
+ * EVENT MAPPING NOTE: opencode has no direct user-prompt-submit hook.
+ * Workflow steering (workflow-steering.js) is wired to session.created
+ * (session-start context) and tool.execute.before (per-tool policy).
+ * This approximates the UserPromptSubmit behavior in other runtimes but
+ * cannot intercept mid-session user messages before they are processed.
+ * This is an accepted gap documented here analogously to the codex
+ * live-hook-influence caveat.
+ *
+ * KNOWN GAP: session.created is NOT delivered to plugin handlers in opencode
+ * run (non-interactive) mode (verified v1.16.2, 2026-06-11). agentSpawn
+ * telemetry (session.start) is therefore absent from run-mode sessions.
+ * tool.invoke and tool.result events (L1) are still recorded normally.
+ * This is an opencode runtime limitation; no workaround is available without
+ * a different hook surface. See docs/spec/runtime-hook-surface.md for details.
+ */
+
+import { spawnSync } from 'node:child_process';
+import { join, basename } from 'node:path';
+
+// opencode runs plugins inside its own compiled (Bun-based) binary, so
+// process.execPath points at opencode itself — spawning it with a script
+// path silently does nothing (caught by live acceptance smoke 2026-06-11).
+// Resolve a real node binary instead; fall back to PATH lookup.
+const NODE_BIN = basename(process.execPath).startsWith('node') ? process.execPath : 'node';
+
+export const FlowAgentsPlugin = async ({ project, client, $, directory, worktree }) => {
+  const root = directory || process.cwd();
+
+  // The hook scripts read the event payload from stdin; an empty stdin makes
+  // the telemetry pipeline silently skip the emit (fail-open), so every spawn
+  // must pass a payload (caught by live acceptance smoke 2026-06-11).
+  function hookPayload(eventName, detail) {
+    return JSON.stringify({ hook_event_name: eventName, cwd: root, ...(detail || {}) });
+  }
+
+  function runAdapter(adapterScript, eventName, detail, ...args) {
+    const adapterPath = join(root, 'scripts', 'hooks', adapterScript);
+    const result = spawnSync(NODE_BIN, [adapterPath, eventName, ...args], {
+      input: hookPayload(eventName, detail),
+      encoding: 'utf8',
+      cwd: root,
+      env: { ...process.env, FLOW_AGENTS_HOOK_RUNTIME: 'opencode' },
+      timeout: 30000,
+    });
+    try {
+      return JSON.parse(result.stdout || '{}');
+    } catch {
+      return { allow: true };
+    }
+  }
+
+  function runTelemetry(eventName, detail) {
+    const telemetryPath = join(root, 'scripts', 'hooks', 'opencode-telemetry-hook.js');
+    spawnSync(NODE_BIN, [telemetryPath, eventName, 'dev'], {
+      input: hookPayload(eventName, detail),
+      encoding: 'utf8',
+      cwd: root,
+      env: { ...process.env, FLOW_AGENTS_TELEMETRY_RUNTIME: 'opencode' },
+      timeout: 10000,
+    });
+  }
+
+  return {
+    'session.created': async (_input, _output) => {
+      runTelemetry('session.created');
+      // Wire workflow steering on session start for context injection
+      runAdapter('opencode-hook-adapter.js', 'session.created', null, 'workflow-steering', 'workflow-steering.js', 'default');
+    },
+    'tool.execute.before': async (input, output) => {
+      const detail = { tool: input && input.tool, args: output && output.args };
+      runTelemetry('tool.execute.before', detail);
+      const policyResult = runAdapter('opencode-hook-adapter.js', 'tool.execute.before', detail, 'config-protection', 'config-protection.js', 'default');
+      if (policyResult && policyResult.allow === false) {
+        throw new Error(policyResult.reason || 'Blocked by Flow Agents hook policy.');
+      }
+    },
+    'tool.execute.after': async (input, output) => {
+      const detail = { tool: input && input.tool };
+      runTelemetry('tool.execute.after', detail);
+      runAdapter('opencode-hook-adapter.js', 'tool.execute.after', detail, 'quality-gate', 'quality-gate.js', 'default');
+    },
+    'session.idle': async (_input, _output) => {
+      runTelemetry('session.idle');
+      runAdapter('opencode-hook-adapter.js', 'session.idle', null, 'stop-goal-fit', 'stop-goal-fit.js', 'default');
+    },
+    'session.error': async (_input, _output) => {
+      runTelemetry('session.error');
+    },
+    'session.compacted': async (_input, _output) => {
+      runTelemetry('session.compacted');
+    },
+    'permission.asked': async (_input, _output) => {
+      runTelemetry('permission.asked');
+    },
+    'file.edited': async (_input, _output) => {
+      runTelemetry('file.edited');
+    },
+  };
+};
+`;
+}
+function exportOpencodeConfig(): string {
+  // opencode's config schema requires `instructions` to be an ARRAY of
+  // instruction file paths/globs (a bare string fails validation and aborts
+  // startup). AGENTS.md is loaded natively by opencode, so the config stays
+  // minimal rather than double-including it.
+  return `${JSON.stringify({
+    $schema: "https://opencode.ai/config.json",
+  }, null, 2)}\n`;
+}
+function buildOpencode(agents: Agent[]): void {
+  const bundle = path.join(dist, "opencode");
+  resetDir(bundle);
+  copySharedContent(bundle, "opencode", "<bundle-root>");
+  writeText(path.join(bundle, manifest.opencode.task_dir, ".gitkeep"), "");
+  for (const spec of agents) {
+    writeText(path.join(bundle, ".opencode/agents", `${spec.name}.md`), exportOpencodeAgent(spec));
+  }
+  for (const skill of fs.readdirSync(path.join(root, "skills"))) {
+    const skillPath = path.join(root, "skills", skill, "SKILL.md");
+    if (fs.existsSync(skillPath)) writeText(path.join(bundle, ".opencode/skills", skill, "SKILL.md"), sanitizeText(readText(skillPath), "opencode", "<bundle-root>"));
+  }
+  writeText(path.join(bundle, ".opencode/plugins/flow-agents.js"), exportOpencodePlugin());
+  writeText(path.join(bundle, "opencode.json"), exportOpencodeConfig());
+  writeText(path.join(bundle, "AGENTS.md"), exportRootAgentsMd("opencode", agents, manifest.opencode.task_dir));
+  writeText(path.join(bundle, "README.md"), exportTargetReadme("opencode", "bash install.sh /path/to/workspace"));
+  writeText(path.join(bundle, "install.sh"), installScript("opencode", "/path/to/workspace"));
+  fs.chmodSync(path.join(bundle, "install.sh"), 0o755);
+}
+function exportPiExtension(): string {
+  // Generate the Flow Agents pi extension.
+  // pi extensions are auto-discovered from .pi/extensions/*.ts (needs project trust).
+  // pi has no named-subagent registry; agents are not exported. The extension
+  // provides workflow steering (via before_agent_start context injection),
+  // tool-call policy (via tool_call event), and telemetry delegation to shared scripts.
+  return `/**
+ * Flow Agents pi extension.
+ *
+ * Auto-discovered from .pi/extensions/flow-agents.ts at startup (needs project trust).
+ * Delegates policy and telemetry to shared scripts/hooks/ using spawnSync,
+ * mirroring the payload contract used by the claude/codex adapters.
+ *
+ * NOTE: pi has no named-subagent registry. Agents are not exported for pi.
+ * Rely on AGENTS.md + skills + this extension for workflow guidance.
+ */
+
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { spawnSync } from "node:child_process";
+import { join, basename } from "node:path";
+
+// pi may run extensions under a non-node runtime (Bun), where process.execPath
+// is not a node binary and spawning it with a script path silently fails.
+// Same failure class the opencode live smoke caught on 2026-06-11.
+const NODE_BIN = basename(process.execPath).startsWith("node") ? process.execPath : "node";
+
+export default function (pi: ExtensionAPI) {
+  const root = process.cwd();
+
+  function runAdapter(adapterScript: string, eventName: string, hookId: string, relScript: string): { allow: boolean; context?: string; reason?: string } {
+    const adapterPath = join(root, "scripts", "hooks", adapterScript);
+    const payload = JSON.stringify({ hook_event_name: eventName, cwd: root });
+    const result = spawnSync(NODE_BIN, [adapterPath, eventName, hookId, relScript, "default"], {
+      input: payload,
+      encoding: "utf8",
+      cwd: root,
+      env: { ...process.env, FLOW_AGENTS_HOOK_RUNTIME: "pi" },
+      timeout: 30000,
+    });
+    try {
+      return JSON.parse(result.stdout || "{}") as { allow: boolean; context?: string; reason?: string };
+    } catch {
+      return { allow: true };
+    }
+  }
+
+  function runTelemetry(eventName: string): void {
+    const telemetryPath = join(root, "scripts", "hooks", "pi-telemetry-hook.js");
+    const payload = JSON.stringify({ hook_event_name: eventName, cwd: root });
+    spawnSync(NODE_BIN, [telemetryPath, eventName, "dev"], {
+      input: payload,
+      encoding: "utf8",
+      cwd: root,
+      env: { ...process.env, FLOW_AGENTS_TELEMETRY_RUNTIME: "pi" },
+      timeout: 10000,
+    });
+  }
+
+  pi.on("session_start", async (_event, _ctx) => {
+    runTelemetry("session_start");
+  });
+
+  pi.on("before_agent_start", async (event, _ctx) => {
+    // Telemetry for agentSpawn is emitted by session_start above; do not repeat it here
+    // to avoid duplicate session.start events in the telemetry log.
+    // Inject workflow steering context at agent start
+    const result = runAdapter("pi-hook-adapter.js", "before_agent_start", "workflow-steering", "workflow-steering.js");
+    if (result.context) {
+      return {
+        systemPrompt: event.systemPrompt + "\\n\\n" + result.context,
+      };
+    }
+  });
+
+  pi.on("tool_call", async (event, _ctx) => {
+    runTelemetry("tool_call");
+    const result = runAdapter("pi-hook-adapter.js", "tool_call", "config-protection", "config-protection.js");
+    if (result && result.allow === false) {
+      return { block: true, reason: result.reason || "Blocked by Flow Agents hook policy." };
+    }
+  });
+
+  pi.on("tool_result", async (_event, _ctx) => {
+    runTelemetry("tool_result");
+    runAdapter("pi-hook-adapter.js", "tool_result", "quality-gate", "quality-gate.js");
+  });
+
+  pi.on("session_shutdown", async (_event, _ctx) => {
+    runTelemetry("session_shutdown");
+    runAdapter("pi-hook-adapter.js", "session_shutdown", "stop-goal-fit", "stop-goal-fit.js");
+  });
+}
+`;
+}
+function buildPi(agents: Agent[]): void {
+  const bundle = path.join(dist, "pi");
+  resetDir(bundle);
+  copySharedContent(bundle, "pi", "<bundle-root>");
+  writeText(path.join(bundle, manifest.pi.task_dir, ".gitkeep"), "");
+  // pi has no named-subagent registry; agents are left canonical/unexported.
+  // Skills are exported to .pi/skills/ (direct .md files supported in that dir).
+  for (const skill of fs.readdirSync(path.join(root, "skills"))) {
+    const skillPath = path.join(root, "skills", skill, "SKILL.md");
+    if (fs.existsSync(skillPath)) writeText(path.join(bundle, ".pi/skills", skill, "SKILL.md"), sanitizeText(readText(skillPath), "pi", "<bundle-root>"));
+  }
+  writeText(path.join(bundle, ".pi/extensions/flow-agents.ts"), exportPiExtension());
+  writeText(path.join(bundle, "AGENTS.md"), exportRootAgentsMd("pi", agents, manifest.pi.task_dir));
+  writeText(path.join(bundle, "README.md"), exportTargetReadme("pi", "bash install.sh /path/to/workspace"));
+  writeText(path.join(bundle, "install.sh"), installScript("pi", "/path/to/workspace"));
+  fs.chmodSync(path.join(bundle, "install.sh"), 0o755);
+}
 function buildCatalog(agents: Agent[]): Record<string, unknown> {
   const kitsCatalog = path.join(root, "kits/catalog.json");
   return {
@@ -350,6 +629,8 @@ export function main(): number {
   buildKiro(agents);
   buildClaudeCode(agents);
   buildCodex(agents);
+  buildOpencode(agents);
+  buildPi(agents);
   writeText(path.join(dist, "catalog.json"), `${JSON.stringify(buildCatalog(agents), null, 2)}\n`);
   writeText(path.join(dist, "README.md"), "# Universal Bundles\n\nRun `npm run build:bundles` from the repo root to regenerate these bundles.\n");
   console.log("Built bundles:");
@@ -357,6 +638,8 @@ export function main(): number {
   console.log(" - dist/kiro");
   console.log(" - dist/claude-code");
   console.log(" - dist/codex");
+  console.log(" - dist/opencode");
+  console.log(" - dist/pi");
   if (printDiagnostics && dropDiagnostics.length) {
     console.error("Export sanitization diagnostics:");
     for (const item of dropDiagnostics) console.error(` - ${item}`);

package/src/tools/filter-installed-packs.ts

@@ -107,10 +107,13 @@ export function main(argv = process.argv.slice(2)): number {
   removed += pruneNamedDirs(rootDir, "skills", allPackMembers(packs, "skills"), selected.skills, dryRun);
   removed += pruneNamedDirs(rootDir, ".claude/skills", allPackMembers(packs, "skills"), selected.skills, dryRun);
   removed += pruneNamedDirs(rootDir, ".codex/skills", allPackMembers(packs, "skills"), selected.skills, dryRun);
+  removed += pruneNamedDirs(rootDir, ".opencode/skills", allPackMembers(packs, "skills"), selected.skills, dryRun);
+  removed += pruneNamedDirs(rootDir, ".pi/skills", allPackMembers(packs, "skills"), selected.skills, dryRun);
   removed += pruneNamedDirs(rootDir, "powers", allPackMembers(packs, "powers"), selected.powers, dryRun);
   removed += pruneAgentFiles(rootDir, "agents", ".json", allPackMembers(packs, "agents"), selected.agents, dryRun);
   removed += pruneAgentFiles(rootDir, ".claude/agents", ".md", allPackMembers(packs, "agents"), selected.agents, dryRun);
   removed += pruneAgentFiles(rootDir, ".codex/agents", ".toml", allPackMembers(packs, "agents"), selected.agents, dryRun);
+  removed += pruneAgentFiles(rootDir, ".opencode/agents", ".md", allPackMembers(packs, "agents"), selected.agents, dryRun);
   const summary = {
     selected_packs: [...selectedNames].sort(),
     removed_entries: removed,

package/src/tools/validate-source-tree.ts

@@ -62,6 +62,10 @@ const hookFilePolicies = new Map<string, { category: string; requiredNeedles: st
   ["scripts/hooks/run-hook.js", { category: "hook runner", requiredNeedles: ["isHookEnabled", "Path traversal rejected"] }],
   ["scripts/hooks/config-protection.js", { category: "policy hook", requiredNeedles: ["Config Protection Hook"] }],
   ["scripts/hooks/governance-audit.sh", { category: "policy hook", requiredNeedles: ["governance-audit.sh", "audit_emit"] }],
+  ["scripts/hooks/opencode-hook-adapter.js", { category: "runtime adapter", requiredNeedles: ["opencode", "run-hook.js"] }],
+  ["scripts/hooks/opencode-telemetry-hook.js", { category: "telemetry shim", requiredNeedles: ["opencode", "telemetry"] }],
+  ["scripts/hooks/pi-hook-adapter.js", { category: "runtime adapter", requiredNeedles: ["pi", "run-hook.js"] }],
+  ["scripts/hooks/pi-telemetry-hook.js", { category: "telemetry shim", requiredNeedles: ["pi", "telemetry"] }],
   ["scripts/hooks/post-edit-accumulator.js", { category: "policy hook", requiredNeedles: ["Post-Edit"] }],
   ["scripts/hooks/pre-commit-quality.js", { category: "repo guardrail hook", requiredNeedles: ["staged"] }],
   ["scripts/hooks/quality-gate.js", { category: "policy hook", requiredNeedles: ["Quality"] }],
@@ -95,7 +99,7 @@ const requiredUsageFeedbackFiles = [
 const fixtureOwnershipSelfAuditRefs = new Set([
   "evals/integration/test_fixture_retirement_audit.sh",
 ]);
-const pythonInventoryExcludes = new Set([".git", ".flow-agents", "node_modules", ".venv", "dist", "__pycache__", ".pytest_cache", ".cache", "build"]);
+const pythonInventoryExcludes = new Set([".git", ".flow-agents", "node_modules", ".venv", "dist", "__pycache__", ".pytest_cache", ".cache", "build", "integrations"]);
 const pythonCommandScanRoots = ["README.md", "docs", "context", "skills", "prompts", "agents", "evals", "scripts", "packaging", "package.json"];
 const allowedPythonCommandFiles = [
   /^agents\/tool-explore-deps\.json$/,