@mortz.prk/opencode-auto-mode 0.1.1 → 0.1.3

package/README.md

@@ -145,22 +145,17 @@ Keep ordinary OpenCode permission rules requiring approval for sensitive actions
 
 ## Publishing releases
 
-The package is public on npm. GitHub releases trigger `.github/workflows/publish.yml`, which uses npm trusted publishing through GitHub Actions OIDC. No npm token is needed in repository secrets.
+Open **Actions → Release npm package → Run workflow**, select `main`, choose `patch`, `minor`, or `major` (default: `patch`), and run it. This manual workflow runs tests, lint, and typecheck, increments `package.json`, checks the package, commits and tags the version, publishes to npm, and creates an immutable GitHub release with generated notes.
 
-For the first publication, enable two-factor authentication on the `mortz.prk` npm account. Merge the migration at version `0.1.1` to `main`, check out that commit, and run the project checks before publishing:
+The same release can be started with one command:
 
 ```sh
-bun install --frozen-lockfile --ignore-scripts
-bun test
-bun run typecheck
-npm pack --dry-run
-npm login --registry=https://registry.npmjs.org
-npm publish --access public --ignore-scripts --registry=https://registry.npmjs.org
+gh workflow run publish.yml --repo mortezaPRK/opencode-auto-mode --ref main -f bump=patch
 ```
 
-After the package exists, configure its [npm trusted publisher](https://docs.npmjs.com/trusted-publishers/) with GitHub owner `mortezaPRK`, repository `opencode-auto-mode`, and workflow filename `publish.yml`. Leave the environment field empty and explicitly allow direct `npm publish`.
+Publishing uses the existing [npm trusted publisher](https://docs.npmjs.com/trusted-publishers/) for GitHub owner `mortezaPRK`, repository `opencode-auto-mode`, and workflow filename `publish.yml`. No npm token or additional personal access token is needed in repository secrets.
 
-For the first automated publication, bump the manifest to `0.1.2`, refresh the lockfile, merge to `main`, and publish GitHub release `v0.1.2` within two days of creating the trusted publisher. For later releases, update the version, merge to `main`, and publish a GitHub release with the matching `v<version>` tag. The workflow requires the tag's version to match `package.json` and its commit to be on `main`; it runs tests and a typecheck before publishing.
+GitHub release immutability is enabled in the repository settings. Releases and tags do not trigger publication; only running this workflow does.
 
 ## Credit
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mortz.prk/opencode-auto-mode",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Configurable automatic permission review for OpenCode v2.",
   "author": {
     "name": "Andrew Mellen",
@@ -16,7 +16,9 @@
   },
   "type": "module",
   "license": "MIT",
-  "files": ["src"],
+  "files": [
+    "src"
+  ],
   "exports": {
     ".": {
       "import": "./src/index.ts",
@@ -28,6 +30,7 @@
     }
   },
   "scripts": {
+    "lint": "eslint . --max-warnings=0",
     "typecheck": "tsc --noEmit",
     "test": "bun test",
     "test:integration": "bun run integration/opencode.ts"
@@ -44,13 +47,17 @@
     "solid-js": ">=1.9.0"
   },
   "devDependencies": {
+    "@eslint/js": "^10.0.1",
     "@opencode/theme": "^2.0.14",
-    "@opentui/core": "0.5.10",
+    "@opentui/core": "0.5.17",
     "@opentui/keymap": "^0.5.10",
-    "@opentui/solid": "0.5.10",
-    "@types/node": "^24.0.0",
+    "@opentui/solid": "0.5.17",
+    "@types/node": "^26.6.4",
     "@types/shell-quote": "1.7.5",
-    "solid-js": "1.9.14",
-    "typescript": "^5.8.2"
+    "@typescript/native": "npm:typescript@^7.0.2",
+    "eslint": "^10.12.0",
+    "solid-js": "1.9.17",
+    "typescript": "npm:@typescript/typescript6@^6.0.2",
+    "typescript-eslint": "^8.71.1"
   }
 }

package/src/logger.ts

@@ -15,7 +15,9 @@ export function createLogger(filename: string): Logger {
       const size = fs.fstatSync(fd).size;
       if (size > 1_048_576) fs.ftruncateSync(fd, 0);
       fs.writeSync(fd, `[${stamp()}] ${line.slice(0, 1024).replace(/[\r\n]/g, " ")}\n`);
-    } catch {} finally { if (fd !== undefined) fs.closeSync(fd); }
+    } catch {
+      // Logging is best effort and must not interrupt permission review.
+    } finally { if (fd !== undefined) fs.closeSync(fd); }
   };
   return {
     log: append,

package/src/shell.ts

@@ -10,7 +10,7 @@ const WRAPPERS = new Set(["env", "command", "builtin", "exec", "eval", "source",
 const BALANCED_QUOTES = /^(?:[^'"\\]|\\[^\r\n]|'[^']*'|"(?:[^"\\]|\\[^\r\n])*")*$/;
 
 export function shellWords(command: string): string[] | undefined {
-  if (!command || command.length > 4096 || /[$`~\r\n\0{}\[\]]/.test(command) ||
+  if (!command || command.length > 4096 || /[$`~\r\n\0{}[\]]/.test(command) ||
       /[^\S \t]/.test(command) || !BALANCED_QUOTES.test(command)) return undefined;
   try {
     const words = parse(command);

package/src/state.ts

@@ -55,5 +55,6 @@ export function recordDecision(record: DecisionRecord): void {
     fs.ftruncateSync(fd, 0);
     fs.writeSync(fd, data, 0);
   } catch {
+    // Badge state is best effort and must not interrupt permission review.
   } finally { if (fd !== undefined) fs.closeSync(fd); }
 }

package/src/tui.tsx

@@ -10,8 +10,6 @@ const MAX_RESOURCE = 48;
 const POLL_MS = 1_000;
 const STALE_MS = 90_000;
 
-type Reply = "once" | "reject";
-
 type Pending = {
   requestID: string;
   sessionID: string;
@@ -99,7 +97,7 @@ function Badge(props: {
 export default Plugin.define({
   id: "opencode-auto-mode",
   setup: async (ctx) => {
-    const options = ctx.options as Record<string, any>;
+    const options = ctx.options as Record<string, unknown>;
     const keybinds = (options.keybinds ?? {}) as Record<string, unknown>;
     const allowKey = str(keybinds.allow, "ctrl+alt+a");
     const denyKey = str(keybinds.deny, "ctrl+alt+d");
@@ -319,4 +317,4 @@ export default Plugin.define({
       disposeBadge();
     };
   },
-});
+});