@kylecheng3146/agent-ops 0.3.2 → 0.3.3

package/dist/runtime/src/adapters/opencode/config.js

@@ -131,7 +131,7 @@ export function buildOpencodePlugin(capabilities, runtimePath) {
         lines.push("  // opencode initializes plugins once per app, not once per session.", "  await runManagedHook($, \"SessionStart\", {", "    event: \"SessionStart\",", "    projectRoot", "  });");
     }
     if (events.includes("PreToolUse")) {
-        lines.push('  hooks["tool.execute.before"] = async (input, output) => {', '    if (input?.tool !== "bash") return;', "    await runManagedHook($, \"PreToolUse\", {", "      event: \"PreToolUse\",", "      projectRoot,", "      input,", "      output", "    });", "  };");
+        lines.push('  const WRITE_TOOLS = ["bash", "edit", "write", "patch", "apply_patch"];', '  hooks["tool.execute.before"] = async (input, output) => {', '    const tool = typeof input?.tool === "string" ? input.tool.toLowerCase() : "";', "    if (!WRITE_TOOLS.includes(tool)) return;", "    await runManagedHook($, \"PreToolUse\", {", "      event: \"PreToolUse\",", "      projectRoot,", "      input,", "      output", "    });", "  };");
     }
     if (events.includes("Stop")) {
         lines.push("  hooks.event = async ({ event }) => {", '    if (event?.type !== "session.idle") return;', "    await runManagedHook($, \"Stop\", { event: \"Stop\", projectRoot });", "  };");

package/dist/runtime/src/adapters/opencode/input.js

@@ -1,8 +1,54 @@
+import { resolve } from "node:path";
 import { normalizeHookEvent } from "../../hooks/normalize.js";
 import { normalizeShellHookEvent } from "../../hooks/shell.js";
+/**
+ * opencode tools that write a file without a shell (lowercase tool names).
+ * `apply_patch` is the GPT-model replacement for `edit`/`write`; older
+ * servers still report `patch`.
+ */
+export const OPENCODE_FILE_TOOLS = new Set([
+    "edit",
+    "write",
+    "patch",
+    "apply_patch"
+]);
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function sessionIdOf(value) {
+    const sessionId = value.sessionID;
+    return typeof sessionId === "string" && sessionId.length > 0
+        ? sessionId
+        : undefined;
+}
+/**
+ * Paths embedded in `apply_patch` marker lines, relative to the project root:
+ * `*** Add File:`, `*** Update File:`, `*** Move to:`, `*** Delete File:`.
+ */
+function patchTextPaths(patchText) {
+    const paths = [];
+    const marker = /^\*\*\*\s+(?:Add File|Update File|Move to|Delete File):\s*(.+?)\s*$/gmu;
+    for (const match of patchText.matchAll(marker)) {
+        const target = match[1]?.trim();
+        if (target !== undefined && target.length > 0 && !target.includes("\0")) {
+            paths.push(target);
+        }
+    }
+    return paths;
+}
+function fileWritePaths(args, projectRoot) {
+    const direct = args.filePath ?? args.file_path ?? args.path;
+    if (typeof direct === "string" && direct.length > 0 && !direct.includes("\0")) {
+        return [resolve(projectRoot, direct)];
+    }
+    if (typeof args.patchText === "string") {
+        const marked = patchTextPaths(args.patchText);
+        if (marked.length > 0) {
+            return marked.map((target) => resolve(projectRoot, target));
+        }
+    }
+    return null;
+}
 /**
  * The managed plugin forwards opencode's own hook payload untouched under
  * `input`, so every field this adapter reads is documented plugin input rather
@@ -21,7 +67,27 @@ export function normalizeOpencodeHookInput(input) {
     }
     if (input.event === "PreToolUse" &&
         isRecord(input.input) &&
-        input.input.tool === "bash" &&
+        typeof input.input.tool === "string" &&
+        OPENCODE_FILE_TOOLS.has(input.input.tool.toLowerCase()) &&
+        isRecord(input.output) &&
+        isRecord(input.output.args) &&
+        typeof projectRoot === "string" &&
+        projectRoot.length > 0) {
+        const paths = fileWritePaths(input.output.args, projectRoot);
+        if (paths !== null) {
+            const sessionId = sessionIdOf(input.input);
+            return {
+                event: "file-write",
+                projectRoot,
+                paths,
+                ...(sessionId === undefined ? {} : { sessionId })
+            };
+        }
+    }
+    if (input.event === "PreToolUse" &&
+        isRecord(input.input) &&
+        typeof input.input.tool === "string" &&
+        input.input.tool.toLowerCase() === "bash" &&
         isRecord(input.output) &&
         isRecord(input.output.args) &&
         typeof input.output.args.command === "string" &&

package/dist/runtime/src/parallel/guard.js

@@ -56,7 +56,7 @@ ensureWorktree) {
                         action: "block",
                         status: "FAIL",
                         code: "WORKTREE_CREATED",
-                        remedy: `worktree.mode is auto, so this session now has its own worktree at ${worktree}. Enter it (Claude Code: EnterWorktree with path ${worktree}) and redo this edit there, at ${join(worktree, relative(mainRoot, target))}.`
+                        remedy: `worktree.mode is auto, so this session now has its own worktree at ${worktree}. Enter it (Claude Code: EnterWorktree with path ${worktree}; otherwise use the worktree path as every command's working directory) and redo this edit there, at ${join(worktree, relative(mainRoot, target))}.`
                     };
                 }
                 catch (error) {
@@ -68,7 +68,7 @@ ensureWorktree) {
                 action: "block",
                 status: "FAIL",
                 code: "WORKTREE_REQUIRED",
-                remedy: `worktree.mode is auto, so the main checkout is shared and not edited directly.${failure} Run \`agent-ops worktree add <name> --session ${session}\` in ${mainRoot}, enter the printed path (Claude Code: EnterWorktree with that path), and edit there.`
+                remedy: `worktree.mode is auto, so the main checkout is shared and not edited directly.${failure} Run \`agent-ops worktree add <name> --session ${session}\` in ${mainRoot}, enter the printed path (Claude Code: EnterWorktree with that path; otherwise use it as every command's working directory), and edit there.`
             };
         }
     }

package/dist/runtime/src/review/probe.js

@@ -34,6 +34,30 @@ export async function probeReviewTarget(target, options) {
         ? await mkdtemp(join(tmpdir(), "agent-ops-review-probe-"))
         : options.cwd;
     try {
+        // agy's sandbox only answers inside a project-shaped directory: an empty
+        // temp dir hangs or denies file access, which this probe then misreads as
+        // unauthenticated. Cloning first matches the review attempt, which already
+        // runs inside a disposable clone; a failed clone falls back to the plain
+        // temp dir, which is exactly today's behavior.
+        let invocationCwd = directory;
+        if (deep && target === "agy") {
+            const clone = join(directory, "repository");
+            const cloned = await runVerificationCommand({
+                id: "review-probe-clone",
+                command: "git",
+                args: ["clone", "--no-hardlinks", "--quiet", "--", options.cwd, clone],
+                cwd: directory,
+                required: true,
+                evidence: { kind: "exit-code" },
+                timeoutMs: Math.min(probeTimeoutMs(options.timeoutMs), 30_000)
+            }, {
+                cwd: directory,
+                ...(options.runner === undefined ? {} : { runner: options.runner })
+            });
+            if (cloned.status === "PASS") {
+                invocationCwd = clone;
+            }
+        }
         const invocation = buildProbeInvocation({
             target,
             prompt: PROBE_PROMPT,
@@ -48,12 +72,12 @@ export async function probeReviewTarget(target, options) {
             id: `review-probe-${target}`,
             command: invocation.command,
             args: deep ? [...invocation.args] : ["--version"],
-            cwd: directory,
+            cwd: invocationCwd,
             required: true,
             evidence: { kind: "exit-code" },
             timeoutMs: probeTimeoutMs(options.timeoutMs)
         }, {
-            cwd: directory,
+            cwd: invocationCwd,
             ...(options.runner === undefined ? {} : { runner: options.runner }),
             ...(deep
                 ? {

package/docs/en/guides/configuration.md

@@ -149,17 +149,18 @@ evidence. Give each editing conversation its own worktree instead:
 
 - `mode: "auto"` routes every editing conversation through
   `agent-ops worktree add <name> --session <id>`, run from the main checkout.
-  On Claude Code a direct Edit or Write of the main checkout outside
+  On Claude Code and opencode a direct Edit or Write of the main checkout outside
   `.worktrees/` is denied (run `agent-ops update` once so the PreToolUse hook
   matches the file tools). Absent or `"off"` keeps today's single checkout.
 - `agent-ops task create` run from the main checkout with a known session
   creates that session's worktree first (or reuses it) and records the task
   there, so the work starts in the worktree. Its output names the path to
   enter and the `--base` to verify against.
-- As a fallback on Claude Code, the first denied edit creates that worktree:
+- As a fallback on Claude Code and opencode, the first denied edit creates that worktree:
   `.worktrees/session-<first eight characters of the session id>`, setup
   included, bound to the session. The denial names the path to enter with
-  EnterWorktree; a later denial for the same session reuses it. If creation
+  EnterWorktree on Claude Code, or to use as every command's working directory
+  otherwise; a later denial for the same session reuses it. If creation
   fails, the denial says why and falls back to the manual `worktree add`.
   Run `agent-ops update` once so the PreToolUse hook gets the 600-second
   timeout setup needs.

package/docs/zh-TW/guides/configuration.md

@@ -132,16 +132,17 @@ fingerprint，因此兩個對話修改同一個 checkout 會互相作廢對方
 ```
 
 - `mode: "auto"` 讓每個修改中的對話都先在主 checkout 執行
-  `agent-ops worktree add <name> --session <id>`。Claude Code 直接以 Edit 或
+  `agent-ops worktree add <name> --session <id>`。Claude Code 與 opencode 直接以 Edit 或
   Write 修改主 checkout 中 `.worktrees/` 以外的檔案會被拒絕（需先執行一次
   `agent-ops update`，讓 PreToolUse hook 比對檔案工具）。未設定或 `"off"` 則維持
   目前的單一 checkout。
 - 在主 checkout、已知 session 的情況下執行 `agent-ops task create`，會先建立（或重用）
   該 session 的 worktree，並把 task 記錄在那裡，讓工作一開始就在 worktree 內。輸出會列出
   要進入的路徑與 verify 用的 `--base`。
-- 作為 Claude Code 上的後備，第一次被拒絕的編輯會自動建立該 worktree：
+- 作為 Claude Code 與 opencode 上的後備，第一次被拒絕的編輯會自動建立該 worktree：
   `.worktrees/session-<session id 前八個字元>`，包含 setup，並綁定該 session。
-  拒絕訊息會列出要以 EnterWorktree 進入的路徑；同一 session 之後被拒絕時會重用它。
+  拒絕訊息會列出要進入的路徑（Claude Code 以 EnterWorktree 進入，其他 harness
+  則作為每條命令的工作目錄）；同一 session 之後被拒絕時會重用它。
   建立失敗時，拒絕訊息會說明原因並退回手動 `worktree add`。需先執行一次
   `agent-ops update`，讓 PreToolUse hook 取得 setup 所需的 600 秒逾時。
 - `add` 從主 checkout 的 HEAD 建立 `.worktrees/<name>` 與 branch

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kylecheng3146/agent-ops",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Evidence-driven development loops for agy, Codex, Claude Code, and opencode",
   "type": "module",
   "license": "MIT",