@ory/opencode 0.8.1 → 0.8.2

package/dist/plugin.js

@@ -174,6 +174,15 @@ function createPermissionHandler(client, _options) {
         if ((0, argus_1.resolveConfig)().auditOnly) {
             return;
         }
+        // Interactive tools: leave output.status at "ask" so the user makes
+        // the final call. Pre-answering on Ory's behalf hides the prompt the
+        // user is meant to see.
+        if ((0, argus_1.isInteractiveTool)("opencode", toolId)) {
+            client.tracer.record("user.interaction", "ok", {
+                attributes: { harness: "opencode", toolName: toolId, kind: "permission-ask" },
+            });
+            return;
+        }
         // Use the session as the subject fallback, matching tool.execute.before.
         // Letting this default to the agent's own subject (the prior behavior)
         // would silently match the agent's tuples instead of the user's.
@@ -195,7 +204,17 @@ function createPermissionHandler(client, _options) {
                 output.status = decision.kind === "deny" ? "deny" : "allow";
                 return;
             }
-            const decision = await (0, argus_1.checkAndDecide)(client, { namespace: resolveNamespace(), object: toolId, relation: "use", ...subject }, { spanAttributes: { toolName: toolId } });
+            const outcome = await (0, argus_1.gateToolCall)(client, {
+                harness: "opencode",
+                toolName: toolId,
+                check: { namespace: resolveNamespace(), object: toolId, relation: "use", ...subject },
+                spanAttributes: { toolName: toolId },
+            });
+            if (outcome.kind === "interactive") {
+                // Leave output.status as "ask" (default).
+                return;
+            }
+            const decision = outcome;
             if (decision.kind === "fail_open") {
                 const code = decision.error.code;
                 if (code === "network_error" || code === "rate_limited") {
@@ -307,7 +326,19 @@ function createToolBeforeHandler(client) {
                 });
             }
             const namespace = resolveNamespace();
-            const decision = await (0, argus_1.checkAndDecide)(client, { namespace, object: input.tool, relation: "use", ...subject }, { spanAttributes: { toolName: input.tool } });
+            const outcome = await (0, argus_1.gateToolCall)(client, {
+                harness: "opencode",
+                toolName: input.tool,
+                check: { namespace, object: input.tool, relation: "use", ...subject },
+                spanAttributes: { toolName: input.tool },
+            });
+            // Interactive tools (operator-extensible via ORY_INTERACTIVE_TOOLS):
+            // user.interaction span is already recorded; pass through with no
+            // throw, no tool.invoke, no tool.block.
+            if (outcome.kind === "interactive") {
+                return;
+            }
+            const decision = outcome;
             if (decision.kind === "fail_open") {
                 handlePermissionError(decision.error, input.tool, client);
                 return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/opencode",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "Ory plugin for OpenCode: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -63,7 +63,7 @@
     "!dist/**/*.tsbuildinfo"
   ],
   "dependencies": {
-    "@ory/argus": "0.8.1"
+    "@ory/argus": "0.8.2"
   },
   "engines": {
     "node": ">=22"