@massa-ai/opencode-plugin 1.52.0 → 1.54.1

package/dist/config-cli.js

@@ -1906,17 +1906,11 @@ function detectRoute(platform, host) {
   if (route === "file")
     return { kind: "proceed" };
   if (route === "marketplace") {
-    if (host === "claude")
+    if (host === "claude" || host === "codex")
       return { kind: "proceed" };
-    if (host === "codex") {
-      return {
-        kind: "refuse",
-        reason: "codex marketplace-route installs are refused (in-place bundle rewrite would dirty a checkout " + "and break the drift gate) \u2014 use the dev path: MASSA_AI_MODEL_PROFILE + regenerate."
-      };
-    }
     return {
       kind: "refuse",
-      reason: "claude/codex marketplace-route installs are refused (in-place bundle rewrite would dirty a checkout " + "and break the drift gate) \u2014 use the dev path: MASSA_AI_MODEL_PROFILE + regenerate."
+      reason: "marketplace-route installs need an explicit, supported host before switching " + "(claude and codex proceed; no other host resolves a live write target yet) \u2014 " + "use the dev path: MASSA_AI_MODEL_PROFILE + regenerate."
     };
   }
   return {
@@ -2110,12 +2104,68 @@ import fs6 from "fs";
 import path10 from "path";
 import os6 from "os";
 import crypto3 from "crypto";
+import { execFileSync as execFileSync2 } from "child_process";
 
 // ../../packages/shared/dist/profile-switch/claude-marketplace.js
 import fs5 from "fs";
 import os5 from "os";
 import path9 from "path";
 var DEFAULT_PLUGIN_KEY = "massa-ai@massa-ai";
+function splitPluginKey(pluginKey) {
+  const at = pluginKey.indexOf("@");
+  if (at === -1)
+    return null;
+  const pluginName = pluginKey.slice(0, at);
+  const marketplaceName = pluginKey.slice(at + 1);
+  if (!pluginName || !marketplaceName)
+    return null;
+  return { pluginName, marketplaceName };
+}
+function isContainedPath(root, candidate) {
+  const rel = path9.relative(root, candidate);
+  return rel === "" || !rel.startsWith("..") && !path9.isAbsolute(rel);
+}
+function resolveDirectorySourceRoot(targetHome, pluginKey) {
+  const split = splitPluginKey(pluginKey);
+  if (!split)
+    return;
+  const { pluginName, marketplaceName } = split;
+  const knownMarketplacesPath = path9.join(targetHome, ".claude", "plugins", "known_marketplaces.json");
+  let known;
+  try {
+    known = JSON.parse(fs5.readFileSync(knownMarketplacesPath, "utf8"));
+  } catch {
+    return;
+  }
+  const entry = known?.[marketplaceName];
+  if (!entry || entry.source?.source !== "directory")
+    return;
+  const installLocation = entry.installLocation;
+  if (!installLocation)
+    return null;
+  const manifestPath = path9.join(installLocation, ".claude-plugin", "marketplace.json");
+  let manifest;
+  try {
+    manifest = JSON.parse(fs5.readFileSync(manifestPath, "utf8"));
+  } catch {
+    return null;
+  }
+  const plugin = manifest.plugins?.find((p) => p?.name === pluginName);
+  const relSource = plugin?.source;
+  if (!relSource)
+    return null;
+  const resolvedInstallLocation = path9.resolve(installLocation);
+  const composed = path9.resolve(resolvedInstallLocation, relSource);
+  if (!isContainedPath(resolvedInstallLocation, composed))
+    return null;
+  try {
+    if (!fs5.existsSync(composed))
+      return null;
+  } catch {
+    return null;
+  }
+  return composed;
+}
 function selectRecord(records) {
   if (records.length === 0)
     return;
@@ -2135,6 +2185,9 @@ function selectRecord(records) {
 function resolveClaudeMarketplaceRoot(opts = {}) {
   const targetHome = opts.targetHome ?? os5.homedir();
   const pluginKey = opts.pluginKey ?? DEFAULT_PLUGIN_KEY;
+  const directoryResult = resolveDirectorySourceRoot(targetHome, pluginKey);
+  if (directoryResult !== undefined)
+    return directoryResult;
   const registryPath = path9.join(targetHome, ".claude", "plugins", "installed_plugins.json");
   let records;
   try {
@@ -2246,6 +2299,48 @@ function matchesGlob(filename, glob) {
   const suffix = glob.slice(starIdx + 1);
   return filename.length >= prefix.length + suffix.length && filename.startsWith(prefix) && filename.endsWith(suffix);
 }
+function matchingFileNames(dir, glob) {
+  return fs6.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && matchesGlob(e.name, glob)).map((e) => e.name);
+}
+function detectGitAvailability(dir) {
+  try {
+    const out = execFileSync2("git", ["-C", dir, "rev-parse", "--is-inside-work-tree"], {
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    return out.toString().trim() === "true" ? "in-repo" : "not-a-repo";
+  } catch (err) {
+    return err.code === "ENOENT" ? "no-git" : "not-a-repo";
+  }
+}
+function gitTrackedFileNames(dir, filenames) {
+  if (filenames.length === 0)
+    return new Set;
+  try {
+    const out = execFileSync2("git", ["-C", dir, "ls-files", "--", ...filenames], {
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    return new Set(out.toString().split(`
+`).map((line) => line.trim()).filter(Boolean));
+  } catch {
+    return new Set;
+  }
+}
+var GUARD_PASS = { blocked: false, unchecked: false };
+var GUARD_UNCHECKED = { blocked: false, unchecked: true };
+function checkTrackedPathGuard(activeDir, filenames) {
+  if (filenames.length === 0 || !fs6.existsSync(activeDir))
+    return GUARD_PASS;
+  const availability = detectGitAvailability(activeDir);
+  if (availability === "no-git")
+    return GUARD_UNCHECKED;
+  if (availability === "not-a-repo")
+    return GUARD_PASS;
+  const tracked = gitTrackedFileNames(activeDir, filenames);
+  if (tracked.size === 0)
+    return GUARD_PASS;
+  const offending = filenames.find((name) => tracked.has(name));
+  return { blocked: true, path: path10.join(activeDir, offending), unchecked: false };
+}
 function assertStateWritable(stateFilePath) {
   const dir = path10.dirname(stateFilePath);
   try {
@@ -2375,12 +2470,27 @@ function switchProfile(opts) {
         rows.push({ host: h.host, status: "switched" });
         continue;
       }
+      const candidateNames = matchingFileNames(h.variantDir, h.layout.activeGlob);
+      const guard = checkTrackedPathGuard(h.layout.activeDir, candidateNames);
+      if (guard.blocked) {
+        rows.push({
+          host: h.host,
+          status: "failed",
+          reason: `refusing to write ${guard.path} \u2014 it is tracked by git and this switch would dirty the checkout`
+        });
+        continue;
+      }
       try {
         const filesChanged = copyVariant(h.host, h.layout, h.variantDir);
         updatePlatform(stateFilePath, h.host, {
           modelProfile: { profile: opts.profile, switchedAt: new Date().toISOString() }
         });
-        rows.push({ host: h.host, status: "switched", filesChanged });
+        rows.push({
+          host: h.host,
+          status: "switched",
+          filesChanged,
+          ...guard.unchecked ? { reason: "tracked-path guard could not verify (git unavailable) \u2014 proceeded unchecked" } : {}
+        });
       } catch (err) {
         rows.push({ host: h.host, status: "failed", reason: err.message });
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massa-ai/opencode-plugin",
-  "version": "1.52.0",
+  "version": "1.54.1",
   "description": "massa-ai plugin for OpenCode - Semantic code search, memory, and context compression",
   "type": "module",
   "main": "dist/index.js",
@@ -24,8 +24,8 @@
   "dependencies": {
     "@opencode-ai/plugin": "^1.2.15",
     "@opencode-ai/sdk": "^1.2.15",
-    "@massa-ai/core": "^1.52.0",
-    "@massa-ai/shared": "^1.52.0"
+    "@massa-ai/core": "^1.54.1",
+    "@massa-ai/shared": "^1.54.1"
   },
   "devDependencies": {
     "@types/node": "^22.10.5",