@mortz.prk/opencode-auto-mode 1.0.1 → 1.1.1

package/README.md

@@ -1,206 +1,215 @@
 # OpenCode Auto Mode
 
-Reviews OpenCode permission prompts automatically. OpenCode decides what needs
-approval; the plugin reviews only `ask` actions.
+Automatic review of OpenCode permission requests. While a session's auto mode is
+on, the plugin reviews native **allow** and **ask** effects, including saved
+**Always** approvals. A native **deny** is always final.
 
-## Install and configure
+Auto Mode reduces prompts. It is not a security sandbox, and it cannot make an
+invalid configuration fail closed.
 
-Add this to `~/.config/opencode/opencode.jsonc`. It asks for permission on every
-action and reviews those requests using built-in checks. No model or API key is
-needed:
+## Requirements
 
-```jsonc
-{
-  "$schema": "https://opencode.ai/config.json",
-  "permissions": [
-    { "action": "*", "resource": "*", "effect": "ask" }
-  ],
-  "plugins": [
-    {
-      "package": "@mortz.prk/opencode-auto-mode",
-      "options": {
-        "classifiers": [
-          { "type": "static" }
-        ]
-      }
-    }
-  ]
-}
-```
+- OpenCode V2. The checked-in plugin SDK and schema targets OpenCode `2.2.0`.
+- Model references only if you use `decision` or `llm` classifier stages. Models
+  and provider credentials belong in your personal OpenCode provider config.
+  This repository supplies no model, endpoint, credential, or allowlist.
+- **Data egress:** a configured `decision` or `llm` stage sends the action and
+  resources (including full Code Mode source), agent, project/worktree, git
+  state, and up to 12 KB of user messages to that model's provider, even with
+  audit off. Choose a provider you trust.
 
-Restart OpenCode after saving:
+## Install
 
-```sh
-opencode service restart
-```
+Register the plugin **once** in your user-owned global config:
 
-There is no default review pipeline, and empty options are invalid. Add at least
-one review entry. Built-in checks deny dangerous shell commands, allow common
-read-only commands, and send other parsed commands to the configured reviewers.
-Dynamic syntax such as command substitution, nested shells, and stateful builtins
-still requires manual approval.
-
-The snippets below change parts of that configuration; keep your `classifiers`
-list when adding other options.
-
-## Add a typed decision model
+`~/.config/opencode/opencode.jsonc` (or
+`$XDG_CONFIG_HOME/opencode/opencode.jsonc`). The global config must be outside
+the repository, resolve with no symlink in its path, be user-owned and not
+group/other-writable, be a single hardlink, and use an absolute
+`XDG_CONFIG_HOME` when set.
 
 ```jsonc
 {
-  "options": {
-    "classifiers": [
-      { "type": "static" },
-      { "type": "decision", "model": "typesafe-ai/jev-latest" }
-    ]
-  }
+  "$schema": "https://opencode.ai/config.json",
+  "plugins": [{
+    "package": "@mortz.prk/opencode-auto-mode",
+    "options": {
+      "classifiers": [
+        { "type": "static" },
+        { "type": "llm", "model": "<provider>/<reviewer-model>" }
+      ]
+    }
+  }]
 }
 ```
 
-| Provider | Setup |
-| --- | --- |
-| `typesafe-ai` | Set `TYPESAFE_API_KEY`. |
-| `openai` | Set `OPENAI_API_KEY`. |
-| `laya` | Run a loopback `/v1/systemone` service. `LAYA_API_KEY` is optional. |
+The `static` stage handles low-risk reads and eligible in-project edits without a
+model. Remove the `llm` stage if you want a static-only setup; anything static
+cannot resolve then asks you.
 
-Decision entries accept `minConfidence` (default `0.9`), `timeoutMs`, and
-`apiKeyEnv`. `laya` also accepts `endpoint`.
-
-## Add an LLM
-
-Add an `llm` entry after the built-in checks:
-
-```jsonc
-{
-  "options": {
-    "classifiers": [
-      { "type": "static" },
-      { "type": "llm" }
-    ]
-  }
-}
-```
-
-When an `llm` entry has no `model`, the **session model** is used. To choose a
-different model:
+For native typed decisions, add a `decision` stage between `static` and `llm`:
 
 ```jsonc
-{ "type": "llm", "model": "anthropic/claude-sonnet-4-5" }
+{ "type": "decision", "model": "<provider>/<decision-model>", "minConfidence": 0.9 }
 ```
 
-## Combine reviewers
-
-Entries run in order. Add as many as you need:
+Only add this stage if your OpenCode provider supports native decisions. The
+plugin has no HTTP decision adapter or custom endpoint option.
 
-```jsonc
-{
-  "options": {
-    "classifiers": [
-      { "type": "static" },
-      { "type": "decision", "model": "typesafe-ai/jev-latest" },
-      { "type": "llm" }
-    ]
-  }
-}
-```
+Keep the plugin registration in global config only. Do not add the full plugin to
+project config, `cli.json`, or `.opencode/plugins/` as well: the plugin reads its
+safety options from exactly one global registration. The server registration
+loads the TUI part automatically. Desktop loads the experimental GUI part from
+global config and needs the built `dist/gui-experimental.cjs` bundle; in a local
+checkout, run `bun run build:gui` first.
 
-An entry can allow, deny, or ask, which stops the pipeline. If it abstains or
-fails, the next entry runs. If nothing decides, the action remains `ask`.
+## Verify
 
-## Use it for specific agents
+Restart nothing for a config-only change. OpenCode watches config files and
+reloads plugins after a save; `/reload` forces a full reload if needed.
 
-OpenCode allows everything by default. To review only the `build` agent, set its
-permissions and leave global permissions unchanged:
+Run:
 
-```jsonc
-{
-  "agents": {
-    "build": {
-      "permissions": [
-        { "action": "*", "resource": "*", "effect": "ask" }
-      ]
-    }
-  }
-}
+```text
+/auto-mode status
 ```
 
-## TUI indicator
+A working install reports `Auto mode: on`, today's allow/ask/deny counts, active
+reviews, and breaker state. With invalid configuration, the command reports
+`Auto mode: invalid` and `Review disabled: <error>`; the desktop pill reads
+`Invalid config — review disabled`. A storage or status failure is not a config
+error: the command appends its error and the pill reads `Review unavailable` or
+`status unavailable`. Fix the strict option shapes below rather than expecting a
+migration hint.
 
-A passive indicator shows when the plugin is reviewing the current session.
-It is enabled by default. Set `tui: false` in plugin options to hide it.
-Invalid options show `auto-mode: invalid config` in the same place and an error
-toast at startup. OpenCode's own permission dialog handles manual approvals.
+## Use
 
-## Review options
+- `/auto-mode` toggles the current session.
+- `/auto-mode on` enables review and resets the breaker.
+- `/auto-mode off` restores the native host effect.
+- `/auto-mode status` reports mode, counts, active reviews, and breaker state.
 
-Each LLM or typed decision reviewer can have its own policy:
+Configure native permissions for ordinary safe work and leave residual risky
+operations as `ask`. Keep hard denials in user-owned global `policies`
+(`tool.use`); the plugin does not install or rewrite native rules.
 
-```jsonc
-{
-  "options": {
-    "classifiers": [
-      {
-        "type": "llm",
-        "policy": {
-          "trusted": ["the repository and its CI configuration"],
-          "blocks": ["publish packages", "change production infrastructure"],
-          "exceptions": ["run the repository's test and lint scripts"]
-        }
-      }
-    ]
-  }
-}
-```
+## Options
 
-`trusted` describes the trusted boundary, `blocks` describes actions to deny, and
-`exceptions` describes narrow acceptable cases. Omitted lists use the built-in
-policy; an empty list clears that list. Policies are independent between
-reviewers and do not apply to static checks or replace OpenCode permissions.
+Unknown keys are rejected. `classifiers` is required and must contain 1–64
+ordered stages, with at most one `static` stage.
 
-## Auditing
+| Option | Default | Contract |
+| --- | --- | --- |
+| `classifiers` | required | Ordered `static`, `decision`, and `llm` stages. No default list and no unconfigured mode. |
+| `reviewTimeoutMs` | `15000` | Whole-review deadline; integer 1–120000. |
+| `breaker` | `3 / 10 / 50` | `{consecutiveDenies, windowDenies, windowSize}`. All three keys are required when supplied. |
+| `tui` | `true` | Show or hide the TUI indicator. UI-only; review still runs server-side. |
+| `audit` | `{enabled:false,maxBytes:10485760}` | Object only. Local audit is off by default. |
 
-Enable the audit log in plugin options:
+Stage shapes:
 
-```jsonc
-{
-  "options": {
-    "auditLog": true
-  }
-}
-```
-
-Decisions are appended as JSON lines to
-`$XDG_STATE_HOME/opencode-auto-mode/decisions.jsonl`. Replay recorded tool calls
-without executing anything:
-
-```sh
-bun scripts/replay.ts [--days 14] [--session ID] [--agent build|any] [--json]
-```
-
-To send decisions through OpenCode's OTLP telemetry, configure OTLP for OpenCode
-with its standard environment variables, then enable the plugin flag. This sends
-correlated decision logs and review traces, including model reviewer attempts:
-
-```jsonc
-{
-  "options": {
-    "otlp": true
-  }
-}
+| Stage | Shape |
+| --- | --- |
+| `static` | `{ "type": "static", "allowInProjectEdits"?: boolean }` |
+| `decision` | `{ "type": "decision", "model": "<provider>/<model>", "timeoutMs"?: number, "minConfidence"?: number }` |
+| `llm` | `{ "type": "llm", "model": "<provider>/<model>", "timeoutMs"?: number }` |
+
+## How review works
+
+1. Native permissions, policies, and saved approvals produce `allow`, `ask`, or
+   `deny`. A native **deny is final** and is never reviewed or weakened.
+2. With mode on, native allows and asks are reviewed. Saved **Always** entries
+   are re-reviewed but never deleted or rewritten.
+3. Built-in guards run first: protected paths and credentials, risky shell
+   structure, recursive external deletion, history changes, and ambiguous syntax.
+   These guards are not user-extensible.
+4. Configured classifiers run in array order. A static stage may resolve low-risk
+   work; a decision stage uses OpenCode's native decision API; an LLM stage uses
+   its explicit reviewer. The first decisive allow or deny stops the chain.
+5. Exhaustion, unusable context, interruption, failure, or timeout resolves to
+   **ask**. A deny ends with `Continue with a safer alternative.`
+
+Mode off restores the original host effect. A paused breaker turns a reviewed
+native allow into `ask`; an existing native ask keeps its prompt.
+
+Assuming classifiers: [static, decision, llm] (array order is authoritative).
+
+```mermaid
+flowchart TD
+    A[permission evaluate<br/>allow / ask / deny] --> B{native deny?}
+    B -- yes --> B1[final, untouched<br/>audit only]
+    B -- no --> C{config valid &<br/>session on?}
+    C -- invalid --> C1[passthrough<br/>review disabled]
+    C -- off --> C2[restore native<br/>effect + message]
+    C -- paused --> C3[allow → ask<br/>ask → passthrough]
+
+    C -- on --> D[context fetch<br/>size ≤ 64 KiB]
+    D --> E[Code Mode hash identity<br/>execute:sha256]
+    E --> S
+
+    subgraph S [scoreRequest — every hand-written safety check lives here]
+      S1[shell: guardShell + visibleShellDeny<br/>parse / operand roles / recursive delete]
+      S2[tiers: protected paths, credential names,<br/>symlink traversal, project scope]
+      S3[read/edit/write: URL, scope, safeTarget]
+      S4[webfetch/websearch/execute/unknown → HIGH]
+      S5[git history → evaluateVcsGate]
+      S1 --> S2 --> S3 --> S4 --> S5
+    end
+
+    S -- deny --> X1[DENY]
+    S -- ask --> X2[ASK]
+    S -- low / medium / high --> R
+
+    subgraph R [runClassifiers]
+      R0{score deny/ask?} -- yes --> X1
+      R0 -- no --> R1[static: low → ALLOW<br/>else abstain]
+      R1 -- abstain --> R2[decision: native generate.decisions<br/>confidence ≥ 0.9]
+      R2 -- ask / low confidence --> R3[llm: native generate.text]
+      R2 -- allow / deny --> T[terminal]
+      R3 -- allow / deny --> T
+      R3 -- ask / unresolved --> X2
+    end
+
+    X1 --> F[modes.finish<br/>counts + breaker]
+    X2 --> F
+    T --> F
+    F --> G[apply effect to host]
 ```
 
-## Development
-
-```sh
-bun install
-bun test
-bun run lint
-bun run typecheck
-bun run test:integration
-```
+## Safety limits
+
+- **Native Auto/YOLO is client-local.** If enabled, OpenCode may auto-approve an
+  `ask` without a dialog, including a plugin ask. Plugin checks still run and
+  plugin denies still block, but the plugin cannot read, change, or synchronize
+  that switch. Disable client Auto/YOLO if you need prompts.
+- **Invalid configuration acts disabled.** The plugin performs no review and
+  native behavior applies. That is passthrough, not fail-closed.
+- Coverage is limited to the permission `evaluate` hook and the Code Mode
+  `execute.before` bridge. Native path grants are not an OS sandbox.
+- Code Mode stays HIGH: JavaScript can hide egress behind aliases and computed
+  URLs. Its permission identity is the SHA-256 of the exact UTF-8 source. Old
+  raw-code approvals generally do not match.
+- Other project plugins can affect residual effects; only run code you trust.
+
+## Audit
+
+Audit is the only plugin-generated telemetry and is **off by default**. It is
+local and unsafe: raw records are unredacted and can contain secrets, file
+contents, prompts, and model outputs. If enabled, the fixed path is
+`$XDG_STATE_HOME/opencode-auto-mode/decisions.jsonl` (or
+`~/.local/state/opencode-auto-mode/decisions.jsonl` when `XDG_STATE_HOME` is not
+absolute). Rotated archives are retained; delete them manually. See
+[README.llm.md](README.llm.md#audit-and-replay) before enabling it.
+
+## More documentation
+
+- [README.llm.md](README.llm.md) — installation instructions for an AI agent,
+  full options, migration from 1.0.x, audit, and troubleshooting.
+- [CONTRIBUTING.md](CONTRIBUTING.md) — repository map, local development,
+  tests, and release checks. It ships with the package.
 
 ## Credit
 
 Created originally by [Andrew Mellen (mellena1)](https://github.com/mellena1) in
-[mellena1/opencode-auto-mode](https://github.com/mellena1/opencode-auto-mode),
-also credited as the author in [package.json](package.json). This independent
-project retains the original [MIT license](LICENSE).
+[mellena1/opencode-auto-mode](https://github.com/mellena1/opencode-auto-mode).
+This independent project retains the original [MIT license](LICENSE).

package/dist/gui-experimental.cjs

@@ -0,0 +1 @@
+Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});let e=require("solid-js"),t=require("@opencode/plugin/gui"),n=require("@opencode/plugin/rpc");var r={type:`object`,properties:{enabled:{type:`boolean`},mode:{type:`string`,enum:[`on`,`off`,`paused`,`invalid`]},configError:{type:`string`,maxLength:200},errorKind:{type:`string`,enum:[`config`,`storage`,`status`]},reviewTimeoutMs:{type:`number`},reviewing:{type:`array`,maxItems:256,items:{type:`object`,properties:{sessionID:{type:`string`},reviewID:{type:`string`},startedAt:{type:`number`}},required:[`sessionID`,`reviewID`,`startedAt`],additionalProperties:!1}},counts:{type:`object`,properties:{allow:{type:`integer`,minimum:0},ask:{type:`integer`,minimum:0},deny:{type:`integer`,minimum:0}},required:[`allow`,`ask`,`deny`],additionalProperties:!1},breaker:{type:`boolean`}},required:[`enabled`,`mode`,`reviewTimeoutMs`,`reviewing`,`counts`],additionalProperties:!1},i=n.Rpc.define({id:`opencode-auto-mode`,methods:{status:{input:{type:`object`,properties:{sessionID:{type:`string`,minLength:1,maxLength:256}},additionalProperties:!1},output:r},setMode:{input:{type:`object`,properties:{sessionID:{type:`string`,minLength:1,maxLength:256},mode:{type:`string`,enum:[`on`,`off`,`resume`]}},required:[`sessionID`,`mode`],additionalProperties:!1},output:r}},events:{decision:{schema:{type:`object`,properties:{reviewID:{type:`string`},sessionID:{type:`string`},action:{type:`string`,maxLength:128},decision:{type:`string`,maxLength:64},stage:{type:`string`,maxLength:64},reason:{type:`string`,maxLength:200},durationMs:{type:`number`},at:{type:`number`},errorKind:{type:`string`,maxLength:64}},required:[`reviewID`,`sessionID`,`action`,`decision`,`stage`,`reason`,`durationMs`,`at`],additionalProperties:!1}}}});function a(e,t){return JSON.stringify([e,t.directory,t.workspaceID])}function o(e){if(!(e?.location===void 0||!e.id||e.id.length>256||!e.location.directory))return{key:a(e.key,e.location),sessionID:e.id,ownServer:e.server.builtin,location:{...e.location}}}var s={enabled:!1,mode:`invalid`,configError:`status unavailable`,errorKind:`status`,reviewTimeoutMs:0,reviewing:[],counts:{allow:0,ask:0,deny:0}},c=5e3;function l(e,t,n){let r=new AbortController,i=new Promise((e,n)=>{r.signal.addEventListener(`abort`,()=>n(Error(t)),{once:!0})}),a=setTimeout(()=>r.abort(),e),o=Promise.resolve().then(()=>{if(r.signal.aborted)throw Error(t);return n(r.signal)});return{abort:()=>r.abort(),done:Promise.race([o,i]).finally(()=>clearTimeout(a))}}function u(e,t,n=c){let r,i,a=0,o=!1,u=()=>{i?.request.abort(),i=void 0};return Object.assign(c=>{if(o||(r!==c?.key&&(r=c?.key,a++,u(),t(void 0)),c===void 0||!c.ownServer))return Promise.resolve();if(i!==void 0)return i.done;let d=a,f=l(n,`status request aborted`,t=>e(c,t)),p=f.done.then(e=>{!o&&d===a&&t(e??{...s},c)},()=>{!o&&d===a&&t({...s},c)}).finally(()=>{i?.request===f&&(i=void 0)});return i={request:f,done:p},p},{invalidate(){a++,u()},dispose(){o=!0,a++,u()}})}function d(e,t,n,r=()=>{},i=c){let a=new Map,o=!1,s=Number.isFinite(i)&&i>0?i:c;return{pending:e=>a.has(e.key),run(i,c){if(o||i===void 0||!i.ownServer||c===void 0)return Promise.resolve();let u=a.get(i.key);if(u)return u.done;let d=l(s,`mode change aborted`,t=>e(i,c,t)),f=d.done.then(e=>{!o&&e!==void 0&&t(i,e)},()=>{o||n()}).finally(()=>{a.get(i.key)?.request===d&&a.delete(i.key),o||r()});return a.set(i.key,{request:d,done:f}),r(),f},dispose(){o=!0;for(let e of a.values())e.request.abort();a.clear()}}}function f(e){switch(e?.mode){case`on`:return e.enabled?`off`:`on`;case`off`:return`on`;case`paused`:return`resume`;default:return}}function p(e){if(e!==void 0)switch(e.mode){case`invalid`:return e.errorKind===`status`||e.errorKind===void 0&&e.configError===`status unavailable`?`status unavailable`:e.errorKind===`config`?`Invalid config — review disabled`:`Review unavailable`;case`paused`:return`paused (breaker)`;case`off`:return`off`;case`on`:return e.enabled?`auto`:`off`}}function m(e){if(e?.mode===`invalid`&&e.configError!==void 0&&e.configError!==`status unavailable`)return`${p(e)}: ${e.configError}`}function h(e){if(e!==void 0)return e.mode===`invalid`?`danger`:e.mode===`paused`?`warning`:e.mode===`on`&&e.enabled?`success`:void 0}function g(e,t,n=Date.now){let r=new Set,i=0,a=0;return o=>{let s=e();if(s===void 0||!s.ownServer||o.location.directory!==s.location.directory||o.location.workspaceID!==s.location.workspaceID||o.data===null||typeof o.data!=`object`)return;let c=o.data;if(c.sessionID!==s.sessionID||typeof c.reviewID!=`string`||c.reviewID.length>256)return;let l=c.stage===`breaker`?`breaker`:c.decision===`deny`?`deny`:void 0;if(l===void 0)return;let u=JSON.stringify([s.key,c.reviewID,l]);if(r.has(u))return;r.add(u),r.size>128&&r.delete(r.values().next().value);let d=n();d-i>=5e3&&(i=d,a=0),!(l===`deny`&&a>=4)&&(a++,t({kind:l,message:l===`breaker`?`Auto mode paused (breaker)`:`Auto mode denied`}))}}function _(e){let t,n,r,i=!1,a=()=>{n?.abort(),r?.(),n=void 0,r=void 0};return{update(o,s){if(i||o===t)return;a(),t=o;let c=new AbortController;n=c;try{r=s(t=>{c.signal.aborted||e(t)},c.signal)}catch{a(),t=void 0}},dispose(){i=!0,a(),t=void 0}}}var v=1e3,y=t.Plugin.define({setup(n){let[r,a]=(0,e.createSignal)(void 0),[s,c]=(0,e.createSignal)(0),l=()=>o(n.sessions.current()),y=u((e,t)=>n.client.rpc(i).status({sessionID:e.sessionID},{location:e.location,signal:t}),(e,t)=>{e===void 0?a(void 0):t!==void 0&&l()?.key===t.key&&a({key:t.key,value:e})}),b=d((e,t,r)=>(y.invalidate(),n.client.rpc(i).setMode({sessionID:e.sessionID,mode:t},{location:e.location,signal:r})),(e,t)=>{l()?.key===e.key&&a({key:e.key,value:t})},()=>n.toast.show({title:`Auto-mode`,description:`Could not change auto mode. Try again.`,variant:`error`,duration:5e3}),()=>c(e=>e+1)),x=_(g(l,e=>{n.toast.show({title:`Auto-mode`,description:e.message,variant:e.kind===`deny`?`error`:`default`,duration:5e3})})),S=()=>{let e=n.client;x.update(e,(t,n)=>e.rpc(i).events.on(`decision`,t,{signal:n}));let t=l();t!==void 0&&b.pending(t)||y(t)};(0,t.createKeyed)(()=>l()?.key,S,{otherwise:S});let C=setInterval(S,v);(0,e.onCleanup)(()=>{clearInterval(C),b.dispose(),y.dispose(),x.dispose()}),n.add(t.ComposerPill,{id:`status`,order:20,show:e=>{s();let t=o(e.session),n=r(),i=t?.ownServer&&n?.key===t.key?n.value:void 0,a=f(i),c=t!==void 0&&b.pending(t),l=c?`changing auto mode…`:p(i)??`status unavailable`,u=m(i);return{label:l,tone:h(i),title:c?`Auto-mode: change pending`:u===void 0?a===void 0?`Auto-mode unavailable`:`Auto-mode: ${a}`:`Auto-mode: ${u}`,run:!c&&a!==void 0&&t?.ownServer?()=>{b.run(t,a)}:void 0}}})}});exports.default=y;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mortz.prk/opencode-auto-mode",
-  "version": "1.0.1",
+  "version": "1.1.1",
   "description": "Configurable automatic permission review for OpenCode v2.",
   "author": {
     "name": "Andrew Mellen",
@@ -17,7 +17,11 @@
   "type": "module",
   "license": "MIT",
   "files": [
-    "src"
+    "src",
+    "dist",
+    "README.md",
+    "README.llm.md",
+    "CONTRIBUTING.md"
   ],
   "exports": {
     ".": {
@@ -27,38 +31,45 @@
     "./tui": {
       "import": "./src/tui.tsx",
       "types": "./src/tui.tsx"
-    }
+    },
+    "./rpc": {
+      "import": "./src/rpc.ts",
+      "types": "./src/rpc.ts"
+    },
+    "./gui-experimental": "./dist/gui-experimental.cjs"
   },
   "scripts": {
-    "lint": "eslint . --max-warnings=0",
+    "lint": "eslint . --max-warnings=0 && node scripts/complexity-lint.js",
+    "lint:complexity": "node scripts/complexity-lint.js",
     "typecheck": "tsc --noEmit",
     "test": "bun test",
-    "test:integration": "bun run integration/opencode.ts"
+    "test:integration": "bun run integration/opencode.ts",
+    "build:gui": "vite build",
+    "prepublishOnly": "bun run build:gui"
   },
   "dependencies": {
-    "@opencode/ai": "2.0.30",
-    "@opencode/plugin": "^2.0.14",
-    "@opencode/schema": "^2.0.30",
-    "effect": "4.0.1",
+    "@opencode/plugin": "2.2.0",
+    "@opencode/schema": "2.2.0",
     "shell-quote": "1.12.0"
   },
   "peerDependencies": {
-    "@opentui/core": ">=0.5.10",
-    "@opentui/solid": ">=0.5.10",
+    "@opentui/core": ">=0.6.6",
+    "@opentui/solid": ">=0.6.6",
     "solid-js": ">=1.9.0"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@opencode/theme": "^2.0.14",
-    "@opentui/core": "0.6.6",
-    "@opentui/keymap": "^0.6.6",
-    "@opentui/solid": "0.6.6",
+    "@opencode/theme": "2.2.0",
+    "@opentui/core": "0.7.0",
+    "@opentui/solid": "0.7.0",
     "@types/node": "^26.6.4",
     "@types/shell-quote": "1.7.5",
     "@typescript/native": "npm:typescript@^7.0.2",
     "eslint": "^10.12.0",
     "solid-js": "1.9.17",
     "typescript": "npm:@typescript/typescript6@^6.0.2",
-    "typescript-eslint": "^8.71.1"
+    "typescript-eslint": "^8.71.1",
+    "vite": "^8.3.5",
+    "vite-plugin-solid": "^2.11.0"
   }
 }