@pablozrrrr/jevguard 0.2.0 → 0.2.2

package/README.md

@@ -166,13 +166,18 @@ proposal request to a hidden `jevguard-proposer` subagent:
   `jevguard-proposer` subagent has wildcard-deny permissions and wildcard-disabled
   tools, so it cannot call a tool, edit a file, or produce a patch. It returns a
   strategy and one manual apply instruction only.
+- `remediation.model` is optional. When set in `.jev/config.yaml`, it selects the
+  proposer model; when it is absent, the proposer inherits the host's model.
 - A generic toast reports that the proposal is ready in the child session. It carries
   no rule, task, diff, finding, or credential.
 
 The plugin creates at most one proposal per evaluated turn, and the child session is
 excluded from review for the plugin lifetime, so a proposal can never recurse or
 trigger a second one. A host, model, or toast failure is contained and never changes
-the review.
+the review. A contained proposal failure — an invalid model specifier, a child-session
+failure, or a prompt failure — shows a generic error toast and writes one structured
+`error` log entry carrying only a typed reason code, never any task, diff, finding,
+path, or credential.
 
 The proposer is a strategy step, not an apply step: it never edits code, and nothing
 is applied automatically. You read the proposal, copy its manual apply instruction
@@ -187,8 +192,29 @@ or secret is logged.
 
 ## Install
 
-Once `@pablozrrrr/jevguard` is installed, the intended setup is one line in
-`opencode.json`:
+Installing `@pablozrrrr/jevguard` does **not** register it with OpenCode by itself.
+OpenCode only loads plugins listed in `plugin: [...]` in `opencode.json`, so register
+the plugin from the installed CLI:
+
+```sh
+# global config: ~/.config/opencode/opencode.json
+jevguard install
+
+# project config: ./opencode.json
+jevguard install --project
+```
+
+The installer asks for confirmation, edits only the `plugin` array, and is
+idempotent. It only edits a `plugin` array of plain strings, so OpenCode's
+`[["pkg", { "options": {} }]]` tuple form is a known limitation: the installer leaves
+the file unchanged and prints the manual snippet instead. If `jevguard` is not on
+`PATH`, run it through `bunx`:
+
+```sh
+bunx --package @pablozrrrr/jevguard jevguard install
+```
+
+The manual alternative is one entry in `opencode.json`:
 
 ```json
 { "plugin": ["@pablozrrrr/jevguard"] }

package/cli/main.js

@@ -1259,7 +1259,7 @@ var REMEDIATION_MAX_TASK_LENGTH = 16384;
 var DEFAULT_REMEDIATION_CONFIG = {
   autoPropose: true,
   proposeOn: ["FAIL"],
-  model: "opencode/gpt-5.6-luna"
+  model: null
 };
 
 // packages/core/src/remediation/request.ts
@@ -1349,6 +1349,7 @@ function snapshotRule(rule) {
 // packages/core/src/remediation/config.ts
 var MODEL_PATTERN = /^[^\s/]+\/[^\s/]+$/;
 var KNOWN_KEYS = new Set(["auto_propose", "propose_on", "model"]);
+var INVALID_MODEL = Symbol("invalid-model");
 function resolveRemediationConfig(value) {
   if (value === null || value === undefined) {
     return valid(DEFAULT_REMEDIATION_CONFIG);
@@ -1371,8 +1372,8 @@ function resolveRemediationConfig(value) {
   if (proposeOn === null) {
     return invalid2();
   }
-  const model = remediation.model ?? DEFAULT_REMEDIATION_CONFIG.model;
-  if (typeof model !== "string" || !MODEL_PATTERN.test(model)) {
+  const model = resolveModel(remediation.model);
+  if (model === INVALID_MODEL) {
     return invalid2();
   }
   return valid({ autoPropose, proposeOn, model });
@@ -1387,6 +1388,15 @@ function parseModelSpecifier(model) {
     modelID: model.slice(separator + 1)
   };
 }
+function resolveModel(value) {
+  if (value === undefined) {
+    return null;
+  }
+  if (typeof value !== "string" || !MODEL_PATTERN.test(value)) {
+    return INVALID_MODEL;
+  }
+  return value;
+}
 function readProposeOn(value) {
   if (value === undefined) {
     return DEFAULT_REMEDIATION_CONFIG.proposeOn;
@@ -1695,6 +1705,217 @@ function batchFailed(reason) {
 function failedFor(request, reason) {
   return request.kind === "RULE" ? ruleFailed(reason) : batchFailed(reason);
 }
+// packages/opencode-adapter/src/opencode-config/confirmation.ts
+import { createInterface } from "readline/promises";
+function createConfirmationPrompt() {
+  return {
+    confirm: askForConfirmation
+  };
+}
+async function askForConfirmation(message) {
+  if (process.stdin.isTTY !== true) {
+    return { status: "FAILED", reason: "NOT_A_TTY" };
+  }
+  try {
+    const readline = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+      const answer = await readline.question(`${message} [y/N] `);
+      return isAffirmative(answer) ? { status: "CONFIRMED" } : { status: "DECLINED" };
+    } finally {
+      readline.close();
+    }
+  } catch {
+    return { status: "DECLINED" };
+  }
+}
+function isAffirmative(answer) {
+  const normalized = answer.trim().toLowerCase();
+  return normalized === "y" || normalized === "yes";
+}
+// packages/opencode-adapter/src/opencode-config/entry.ts
+var JEVGUARD_PLUGIN_ENTRY = "@pablozrrrr/jevguard";
+var CONFIG_SCHEMA_URL = "https://opencode.ai/config.json";
+function createDefaultConfigDocument() {
+  return { $schema: CONFIG_SCHEMA_URL };
+}
+function addPluginEntry(document, entry) {
+  if (!isPlainObject(document)) {
+    return { status: "INVALID_SHAPE" };
+  }
+  const existing = document.plugin;
+  if (existing === undefined) {
+    return { status: "ADDED", document: { ...document, plugin: [entry] } };
+  }
+  if (!isStringArray(existing)) {
+    return { status: "INVALID_SHAPE" };
+  }
+  if (existing.some((value) => isPluginEntryFor(value, entry))) {
+    return { status: "PRESENT" };
+  }
+  return { status: "ADDED", document: { ...document, plugin: [...existing, entry] } };
+}
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function isPluginEntryFor(value, entry) {
+  return value === entry || value.startsWith(`${entry}@`);
+}
+// packages/opencode-adapter/src/opencode-config/file-system.ts
+import { randomUUID } from "crypto";
+import { access, mkdir, readFile, rename, rm, writeFile } from "fs/promises";
+import { dirname, join } from "path";
+function createNodeConfigFileSystem() {
+  return {
+    readFile: readOptionalFile,
+    fileExists,
+    writeFile: writeConfigFile,
+    ensureParentDirectory
+  };
+}
+async function readOptionalFile(path) {
+  try {
+    return await readFile(path, "utf8");
+  } catch (error) {
+    if (isMissingFileError(error)) {
+      return null;
+    }
+    throw error;
+  }
+}
+async function fileExists(path) {
+  try {
+    await access(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function writeConfigFile(path, contents) {
+  const temporaryPath = join(dirname(path), `.opencode.json.jevguard-tmp-${randomUUID()}`);
+  try {
+    await writeFile(temporaryPath, contents, "utf8");
+    await rename(temporaryPath, path);
+  } catch (error) {
+    await rm(temporaryPath, { force: true }).catch(() => {
+      return;
+    });
+    throw error;
+  }
+}
+async function ensureParentDirectory(path) {
+  await mkdir(dirname(path), { recursive: true });
+}
+function isMissingFileError(error) {
+  return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
+}
+// packages/opencode-adapter/src/opencode-config/install.ts
+import { dirname as dirname2, join as join3 } from "path";
+
+// packages/opencode-adapter/src/opencode-config/paths.ts
+import { isAbsolute, join as join2 } from "path";
+var PROJECT_CONFIG_FILENAME = "opencode.json";
+function resolveConfigPath(target, context) {
+  if (target === "project") {
+    return join2(context.cwd, PROJECT_CONFIG_FILENAME);
+  }
+  return join2(resolveConfigHome(context), "opencode", PROJECT_CONFIG_FILENAME);
+}
+function resolveConfigHome(context) {
+  const configured = context.environment.XDG_CONFIG_HOME;
+  if (configured !== undefined && configured !== "" && isAbsolute(configured)) {
+    return configured;
+  }
+  return join2(context.homedir, ".config");
+}
+
+// packages/opencode-adapter/src/opencode-config/install.ts
+var CONFIRMATION_MESSAGE = "Add JevGuard to the opencode.json plugin list?";
+async function install(dependencies) {
+  const path = resolveConfigPath(dependencies.target, dependencies);
+  const read = await readConfigDocument(dependencies.fileSystem, path);
+  if (read.status === "FAILED") {
+    return failed(dependencies.target, path, read.reason);
+  }
+  const mutation = addPluginEntry(read.document, JEVGUARD_PLUGIN_ENTRY);
+  if (mutation.status === "INVALID_SHAPE") {
+    return failed(dependencies.target, path, "INVALID_CONFIG_SHAPE");
+  }
+  if (mutation.status === "PRESENT") {
+    return { status: "ALREADY_INSTALLED", target: dependencies.target, path };
+  }
+  const confirmation = await requestConfirmation(dependencies.confirmation);
+  if (confirmation.status === "FAILED") {
+    return failed(dependencies.target, path, confirmation.reason);
+  }
+  if (confirmation.status === "DECLINED") {
+    return { status: "ABORTED", target: dependencies.target, path };
+  }
+  const written = await writeConfigDocument(dependencies.fileSystem, path, mutation.document);
+  if (!written) {
+    return failed(dependencies.target, path, "WRITE_FAILURE");
+  }
+  return { status: "INSTALLED", target: dependencies.target, path };
+}
+async function readConfigDocument(fileSystem, path) {
+  const contents = await readOptionalContents(fileSystem, path);
+  if (contents.status === "FAILED") {
+    return contents;
+  }
+  if (contents.value === null) {
+    return readMissingConfigDocument(fileSystem, path);
+  }
+  try {
+    return { status: "READ", document: JSON.parse(contents.value) };
+  } catch {
+    return { status: "FAILED", reason: "INVALID_JSON" };
+  }
+}
+async function readOptionalContents(fileSystem, path) {
+  try {
+    return { status: "READ", value: await fileSystem.readFile(path) };
+  } catch {
+    return { status: "FAILED", reason: "READ_FAILURE" };
+  }
+}
+async function readMissingConfigDocument(fileSystem, path) {
+  try {
+    const hasJsonc = await fileSystem.fileExists(join3(dirname2(path), "opencode.jsonc"));
+    if (hasJsonc) {
+      return { status: "FAILED", reason: "UNSUPPORTED_JSONC" };
+    }
+    return { status: "READ", document: createDefaultConfigDocument() };
+  } catch {
+    return { status: "FAILED", reason: "READ_FAILURE" };
+  }
+}
+async function requestConfirmation(confirmation) {
+  try {
+    const result = await confirmation.confirm(CONFIRMATION_MESSAGE);
+    if (result.status === "FAILED") {
+      return { status: "FAILED", reason: result.reason };
+    }
+    return { status: result.status };
+  } catch {
+    return { status: "FAILED", reason: "NOT_A_TTY" };
+  }
+}
+async function writeConfigDocument(fileSystem, path, document) {
+  const serialized = `${JSON.stringify(document, null, 2)}
+`;
+  try {
+    await fileSystem.ensureParentDirectory(path);
+    await fileSystem.writeFile(path, serialized);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function failed(target, path, reason) {
+  return { status: "FAILED", target, path, reason };
+}
 // packages/opencode-adapter/src/policy/config-yaml.ts
 import { parseDocument, visit } from "yaml";
 function parsePolicyConfig(text) {
@@ -1731,16 +1952,16 @@ function invalid3() {
   return { status: "INVALID", reason: "INVALID_CONFIG" };
 }
 // packages/opencode-adapter/src/policy/file-source.ts
-import { readFile } from "fs/promises";
-import { join } from "path";
+import { readFile as readFile2 } from "fs/promises";
+import { join as join4 } from "path";
 function createPolicyFileLoader(dependencies) {
   return {
     async load() {
-      const rules = await readOptionalFile(dependencies.fileSystem, join(dependencies.root, ".jev", "rules.md"));
+      const rules = await readOptionalFile2(dependencies.fileSystem, join4(dependencies.root, ".jev", "rules.md"));
       if (rules.status === "FAILED") {
         return { status: "FAILED", reason: "RULES_READ_FAILURE" };
       }
-      const config = await readOptionalFile(dependencies.fileSystem, join(dependencies.root, ".jev", "config.yaml"));
+      const config = await readOptionalFile2(dependencies.fileSystem, join4(dependencies.root, ".jev", "config.yaml"));
       if (config.status === "FAILED") {
         return { status: "FAILED", reason: "CONFIG_READ_FAILURE" };
       }
@@ -1753,20 +1974,20 @@ function createPolicyFileLoader(dependencies) {
 }
 function createNodePolicyFileSystem() {
   return {
-    readFile: (path) => readFile(path, "utf8")
+    readFile: (path) => readFile2(path, "utf8")
   };
 }
-async function readOptionalFile(fileSystem, path) {
+async function readOptionalFile2(fileSystem, path) {
   try {
     return { status: "READ", value: await fileSystem.readFile(path) };
   } catch (error) {
-    if (isMissingFileError(error)) {
+    if (isMissingFileError2(error)) {
       return { status: "READ", value: null };
     }
     return { status: "FAILED" };
   }
 }
-function isMissingFileError(error) {
+function isMissingFileError2(error) {
   return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 }
 // packages/opencode-adapter/src/presentation/display.ts
@@ -1996,25 +2217,50 @@ function toOutcomeExtra(result) {
 }
 // packages/opencode-adapter/src/presentation/remediation.ts
 var TITLE = "JevGuard";
+var SERVICE_NAME2 = "jevguard";
 var PREPARING_MESSAGE = "JevGuard is preparing a remediation proposal in the child session.";
 var READY_MESSAGE = "JevGuard remediation proposal ready.";
+var FAILED_MESSAGE = "JevGuard could not prepare a remediation proposal.";
+var FAILURE_LOG_MESSAGE = "JevGuard remediation proposal failed";
 function createRemediationNotifier(toast) {
   return {
     async proposalPreparing() {
-      return showRemediationToast(toast, PREPARING_MESSAGE);
+      return showRemediationToast(toast, PREPARING_MESSAGE, "info");
     },
     async proposalReady() {
-      return showRemediationToast(toast, READY_MESSAGE);
+      return showRemediationToast(toast, READY_MESSAGE, "info");
+    },
+    async proposalFailed() {
+      return showRemediationToast(toast, FAILED_MESSAGE, "error");
     }
   };
 }
-async function showRemediationToast(toast, message) {
+async function showRemediationToast(toast, message, variant) {
   try {
-    return await toast.show({ title: TITLE, message, variant: "info" });
+    return await toast.show({ title: TITLE, message, variant });
   } catch {
     return "FAILED";
   }
 }
+function createRemediationFailureLogSink(client) {
+  return {
+    async write(reason) {
+      try {
+        const result = await client.app.log({
+          body: {
+            service: SERVICE_NAME2,
+            level: "error",
+            message: FAILURE_LOG_MESSAGE,
+            extra: { reason }
+          }
+        });
+        return result.error === undefined ? "DELIVERED" : "FAILED";
+      } catch {
+        return "FAILED";
+      }
+    }
+  };
+}
 function createOpenCodeSessionNavigator(client) {
   return {
     async navigate(sessionID) {
@@ -2065,11 +2311,12 @@ function createOpenCodeProposalSessionFacade(client) {
       return result.data.id;
     },
     async prompt(input) {
+      const model = input.model;
       const result = await client.session.prompt({
         path: { id: input.sessionID },
         body: {
           agent: input.agent,
-          model: { providerID: input.model.providerID, modelID: input.model.modelID },
+          ...model === null ? {} : { model: { providerID: model.providerID, modelID: model.modelID } },
           system: input.system,
           tools: { ...input.tools },
           parts: [{ type: "text", text: input.text }]
@@ -2081,15 +2328,37 @@ function createOpenCodeProposalSessionFacade(client) {
     }
   };
 }
+// packages/plugin/src/cli/install.ts
+import { homedir } from "os";
+function performInstall(target) {
+  return install({
+    confirmation: createConfirmationPrompt(),
+    fileSystem: createNodeConfigFileSystem(),
+    target,
+    cwd: process.cwd(),
+    environment: process.env,
+    homedir: homedir()
+  });
+}
+
 // packages/plugin/src/cli/login.ts
 function performLogin() {
   return login({ prompt: createSecretPrompt(), store: createKeyringCredentialStore() });
 }
 
 // packages/plugin/src/cli/messages.ts
-var USAGE = "Usage: jevguard login";
+var USAGE = [
+  "Usage: jevguard login",
+  "       jevguard install [--project]",
+  "",
+  "`jev-init` and `jevguard-rules` are OpenCode skills, not CLI commands. Register",
+  "the plugin in opencode.json (or run `jevguard install`) and invoke them from",
+  "OpenCode."
+].join(`
+`);
 var LOGIN_SAVED_MESSAGE = "Credential saved to the OS credential store.";
 var LOGIN_ABORTED_MESSAGE = "Login cancelled. No credential was saved.";
+var MANUAL_INSTALL_SNIPPET = `{ "plugin": ["${JEVGUARD_PLUGIN_ENTRY}"] }`;
 function describeLoginFailure(reason) {
   switch (reason) {
     case "NOT_A_TTY":
@@ -2102,13 +2371,51 @@ function describeLoginFailure(reason) {
       return "Could not save the credential to the OS credential store. Check that a credential store is available and try again.";
   }
 }
+function describeInstallInstalled(target, path) {
+  return `Registered JevGuard for the ${target} target in ${path}. Restart OpenCode to load it.`;
+}
+function describeInstallAlreadyInstalled(target, path) {
+  return `JevGuard is already registered for the ${target} target in ${path}.`;
+}
+function describeInstallAborted(path) {
+  return `Install cancelled. ${path} was not changed.`;
+}
+function describeInstallFailure(reason, path) {
+  switch (reason) {
+    case "NOT_A_TTY":
+      return manualSnippetFailure(`${path} cannot be confirmed without an interactive terminal.`);
+    case "UNSUPPORTED_JSONC":
+      return manualSnippetFailure(`${path} is absent, but a sibling opencode.jsonc exists. JevGuard never edits .jsonc files.`);
+    case "INVALID_JSON":
+      return manualSnippetFailure(`Could not parse ${path} as JSON.`);
+    case "INVALID_CONFIG_SHAPE":
+      return manualSnippetFailure(`The plugin entry in ${path} is not an array of strings, so JevGuard did not change it.`);
+    case "READ_FAILURE":
+      return `Could not read ${path}. Check the file permissions and try again.`;
+    case "WRITE_FAILURE":
+      return `Could not write ${path}. Check the file permissions and try again.`;
+  }
+}
+function manualSnippetFailure(message) {
+  return [message, "Add this to the plugin array manually:", MANUAL_INSTALL_SNIPPET].join(`
+`);
+}
 
 // packages/plugin/src/cli/run-cli.ts
 async function runCli(argv, io, dependencies) {
-  if (argv.length !== 1 || argv[0] !== "login") {
-    io.writeErr(USAGE);
-    return 1;
+  if (argv.length === 1 && argv[0] === "login") {
+    return runLogin(io, dependencies);
+  }
+  if (argv.length === 1 && argv[0] === "install") {
+    return runInstall(io, dependencies, "global");
+  }
+  if (argv.length === 2 && argv[0] === "install" && argv[1] === "--project") {
+    return runInstall(io, dependencies, "project");
   }
+  io.writeErr(USAGE);
+  return 1;
+}
+async function runLogin(io, dependencies) {
   const outcome = await dependencies.login();
   if (outcome.status === "SAVED") {
     io.writeOut(LOGIN_SAVED_MESSAGE);
@@ -2121,6 +2428,26 @@ async function runCli(argv, io, dependencies) {
   io.writeErr(describeLoginFailure(outcome.reason));
   return 1;
 }
+async function runInstall(io, dependencies, target) {
+  const outcome = await dependencies.install(target);
+  return reportInstall(io, outcome);
+}
+function reportInstall(io, outcome) {
+  if (outcome.status === "INSTALLED") {
+    io.writeOut(describeInstallInstalled(outcome.target, outcome.path));
+    return 0;
+  }
+  if (outcome.status === "ALREADY_INSTALLED") {
+    io.writeOut(describeInstallAlreadyInstalled(outcome.target, outcome.path));
+    return 0;
+  }
+  if (outcome.status === "ABORTED") {
+    io.writeErr(describeInstallAborted(outcome.path));
+    return 1;
+  }
+  io.writeErr(describeInstallFailure(outcome.reason, outcome.path));
+  return 1;
+}
 
 // packages/plugin/src/cli/main.ts
 var io = {
@@ -2129,5 +2456,8 @@ var io = {
   writeErr: (message) => process.stderr.write(`${message}
 `)
 };
-var exitCode = await runCli(process.argv.slice(2), io, { login: performLogin });
+var exitCode = await runCli(process.argv.slice(2), io, {
+  login: performLogin,
+  install: performInstall
+});
 process.exitCode = exitCode;

package/index.js

@@ -906,7 +906,7 @@ var REMEDIATION_MAX_TASK_LENGTH = 16384;
 var DEFAULT_REMEDIATION_CONFIG = {
   autoPropose: true,
   proposeOn: ["FAIL"],
-  model: "opencode/gpt-5.6-luna"
+  model: null
 };
 
 // packages/core/src/remediation/request.ts
@@ -996,6 +996,7 @@ function snapshotRule(rule) {
 // packages/core/src/remediation/config.ts
 var MODEL_PATTERN = /^[^\s/]+\/[^\s/]+$/;
 var KNOWN_KEYS = new Set(["auto_propose", "propose_on", "model"]);
+var INVALID_MODEL = Symbol("invalid-model");
 function resolveRemediationConfig(value) {
   if (value === null || value === undefined) {
     return valid(DEFAULT_REMEDIATION_CONFIG);
@@ -1018,8 +1019,8 @@ function resolveRemediationConfig(value) {
   if (proposeOn === null) {
     return invalid2();
   }
-  const model = remediation.model ?? DEFAULT_REMEDIATION_CONFIG.model;
-  if (typeof model !== "string" || !MODEL_PATTERN.test(model)) {
+  const model = resolveModel(remediation.model);
+  if (model === INVALID_MODEL) {
     return invalid2();
   }
   return valid({ autoPropose, proposeOn, model });
@@ -1034,6 +1035,15 @@ function parseModelSpecifier(model) {
     modelID: model.slice(separator + 1)
   };
 }
+function resolveModel(value) {
+  if (value === undefined) {
+    return null;
+  }
+  if (typeof value !== "string" || !MODEL_PATTERN.test(value)) {
+    return INVALID_MODEL;
+  }
+  return value;
+}
 function readProposeOn(value) {
   if (value === undefined) {
     return DEFAULT_REMEDIATION_CONFIG.proposeOn;
@@ -1693,6 +1703,217 @@ function batchFailed(reason) {
 function failedFor(request, reason) {
   return request.kind === "RULE" ? ruleFailed(reason) : batchFailed(reason);
 }
+// packages/opencode-adapter/src/opencode-config/confirmation.ts
+import { createInterface } from "readline/promises";
+function createConfirmationPrompt() {
+  return {
+    confirm: askForConfirmation
+  };
+}
+async function askForConfirmation(message) {
+  if (process.stdin.isTTY !== true) {
+    return { status: "FAILED", reason: "NOT_A_TTY" };
+  }
+  try {
+    const readline = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+      const answer = await readline.question(`${message} [y/N] `);
+      return isAffirmative(answer) ? { status: "CONFIRMED" } : { status: "DECLINED" };
+    } finally {
+      readline.close();
+    }
+  } catch {
+    return { status: "DECLINED" };
+  }
+}
+function isAffirmative(answer) {
+  const normalized = answer.trim().toLowerCase();
+  return normalized === "y" || normalized === "yes";
+}
+// packages/opencode-adapter/src/opencode-config/entry.ts
+var JEVGUARD_PLUGIN_ENTRY = "@pablozrrrr/jevguard";
+var CONFIG_SCHEMA_URL = "https://opencode.ai/config.json";
+function createDefaultConfigDocument() {
+  return { $schema: CONFIG_SCHEMA_URL };
+}
+function addPluginEntry(document, entry) {
+  if (!isPlainObject(document)) {
+    return { status: "INVALID_SHAPE" };
+  }
+  const existing = document.plugin;
+  if (existing === undefined) {
+    return { status: "ADDED", document: { ...document, plugin: [entry] } };
+  }
+  if (!isStringArray(existing)) {
+    return { status: "INVALID_SHAPE" };
+  }
+  if (existing.some((value) => isPluginEntryFor(value, entry))) {
+    return { status: "PRESENT" };
+  }
+  return { status: "ADDED", document: { ...document, plugin: [...existing, entry] } };
+}
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function isPluginEntryFor(value, entry) {
+  return value === entry || value.startsWith(`${entry}@`);
+}
+// packages/opencode-adapter/src/opencode-config/file-system.ts
+import { randomUUID } from "crypto";
+import { access, mkdir, readFile, rename, rm, writeFile } from "fs/promises";
+import { dirname, join } from "path";
+function createNodeConfigFileSystem() {
+  return {
+    readFile: readOptionalFile,
+    fileExists,
+    writeFile: writeConfigFile,
+    ensureParentDirectory
+  };
+}
+async function readOptionalFile(path) {
+  try {
+    return await readFile(path, "utf8");
+  } catch (error) {
+    if (isMissingFileError(error)) {
+      return null;
+    }
+    throw error;
+  }
+}
+async function fileExists(path) {
+  try {
+    await access(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function writeConfigFile(path, contents) {
+  const temporaryPath = join(dirname(path), `.opencode.json.jevguard-tmp-${randomUUID()}`);
+  try {
+    await writeFile(temporaryPath, contents, "utf8");
+    await rename(temporaryPath, path);
+  } catch (error) {
+    await rm(temporaryPath, { force: true }).catch(() => {
+      return;
+    });
+    throw error;
+  }
+}
+async function ensureParentDirectory(path) {
+  await mkdir(dirname(path), { recursive: true });
+}
+function isMissingFileError(error) {
+  return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
+}
+// packages/opencode-adapter/src/opencode-config/install.ts
+import { dirname as dirname2, join as join3 } from "path";
+
+// packages/opencode-adapter/src/opencode-config/paths.ts
+import { isAbsolute, join as join2 } from "path";
+var PROJECT_CONFIG_FILENAME = "opencode.json";
+function resolveConfigPath(target, context) {
+  if (target === "project") {
+    return join2(context.cwd, PROJECT_CONFIG_FILENAME);
+  }
+  return join2(resolveConfigHome(context), "opencode", PROJECT_CONFIG_FILENAME);
+}
+function resolveConfigHome(context) {
+  const configured = context.environment.XDG_CONFIG_HOME;
+  if (configured !== undefined && configured !== "" && isAbsolute(configured)) {
+    return configured;
+  }
+  return join2(context.homedir, ".config");
+}
+
+// packages/opencode-adapter/src/opencode-config/install.ts
+var CONFIRMATION_MESSAGE = "Add JevGuard to the opencode.json plugin list?";
+async function install(dependencies) {
+  const path = resolveConfigPath(dependencies.target, dependencies);
+  const read = await readConfigDocument(dependencies.fileSystem, path);
+  if (read.status === "FAILED") {
+    return failed(dependencies.target, path, read.reason);
+  }
+  const mutation = addPluginEntry(read.document, JEVGUARD_PLUGIN_ENTRY);
+  if (mutation.status === "INVALID_SHAPE") {
+    return failed(dependencies.target, path, "INVALID_CONFIG_SHAPE");
+  }
+  if (mutation.status === "PRESENT") {
+    return { status: "ALREADY_INSTALLED", target: dependencies.target, path };
+  }
+  const confirmation = await requestConfirmation(dependencies.confirmation);
+  if (confirmation.status === "FAILED") {
+    return failed(dependencies.target, path, confirmation.reason);
+  }
+  if (confirmation.status === "DECLINED") {
+    return { status: "ABORTED", target: dependencies.target, path };
+  }
+  const written = await writeConfigDocument(dependencies.fileSystem, path, mutation.document);
+  if (!written) {
+    return failed(dependencies.target, path, "WRITE_FAILURE");
+  }
+  return { status: "INSTALLED", target: dependencies.target, path };
+}
+async function readConfigDocument(fileSystem, path) {
+  const contents = await readOptionalContents(fileSystem, path);
+  if (contents.status === "FAILED") {
+    return contents;
+  }
+  if (contents.value === null) {
+    return readMissingConfigDocument(fileSystem, path);
+  }
+  try {
+    return { status: "READ", document: JSON.parse(contents.value) };
+  } catch {
+    return { status: "FAILED", reason: "INVALID_JSON" };
+  }
+}
+async function readOptionalContents(fileSystem, path) {
+  try {
+    return { status: "READ", value: await fileSystem.readFile(path) };
+  } catch {
+    return { status: "FAILED", reason: "READ_FAILURE" };
+  }
+}
+async function readMissingConfigDocument(fileSystem, path) {
+  try {
+    const hasJsonc = await fileSystem.fileExists(join3(dirname2(path), "opencode.jsonc"));
+    if (hasJsonc) {
+      return { status: "FAILED", reason: "UNSUPPORTED_JSONC" };
+    }
+    return { status: "READ", document: createDefaultConfigDocument() };
+  } catch {
+    return { status: "FAILED", reason: "READ_FAILURE" };
+  }
+}
+async function requestConfirmation(confirmation) {
+  try {
+    const result = await confirmation.confirm(CONFIRMATION_MESSAGE);
+    if (result.status === "FAILED") {
+      return { status: "FAILED", reason: result.reason };
+    }
+    return { status: result.status };
+  } catch {
+    return { status: "FAILED", reason: "NOT_A_TTY" };
+  }
+}
+async function writeConfigDocument(fileSystem, path, document) {
+  const serialized = `${JSON.stringify(document, null, 2)}
+`;
+  try {
+    await fileSystem.ensureParentDirectory(path);
+    await fileSystem.writeFile(path, serialized);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function failed(target, path, reason) {
+  return { status: "FAILED", target, path, reason };
+}
 // packages/opencode-adapter/src/policy/config-yaml.ts
 import { parseDocument, visit } from "yaml";
 function parsePolicyConfig(text) {
@@ -1729,16 +1950,16 @@ function invalid3() {
   return { status: "INVALID", reason: "INVALID_CONFIG" };
 }
 // packages/opencode-adapter/src/policy/file-source.ts
-import { readFile } from "fs/promises";
-import { join } from "path";
+import { readFile as readFile2 } from "fs/promises";
+import { join as join4 } from "path";
 function createPolicyFileLoader(dependencies) {
   return {
     async load() {
-      const rules = await readOptionalFile(dependencies.fileSystem, join(dependencies.root, ".jev", "rules.md"));
+      const rules = await readOptionalFile2(dependencies.fileSystem, join4(dependencies.root, ".jev", "rules.md"));
       if (rules.status === "FAILED") {
         return { status: "FAILED", reason: "RULES_READ_FAILURE" };
       }
-      const config = await readOptionalFile(dependencies.fileSystem, join(dependencies.root, ".jev", "config.yaml"));
+      const config = await readOptionalFile2(dependencies.fileSystem, join4(dependencies.root, ".jev", "config.yaml"));
       if (config.status === "FAILED") {
         return { status: "FAILED", reason: "CONFIG_READ_FAILURE" };
       }
@@ -1751,20 +1972,20 @@ function createPolicyFileLoader(dependencies) {
 }
 function createNodePolicyFileSystem() {
   return {
-    readFile: (path) => readFile(path, "utf8")
+    readFile: (path) => readFile2(path, "utf8")
   };
 }
-async function readOptionalFile(fileSystem, path) {
+async function readOptionalFile2(fileSystem, path) {
   try {
     return { status: "READ", value: await fileSystem.readFile(path) };
   } catch (error) {
-    if (isMissingFileError(error)) {
+    if (isMissingFileError2(error)) {
       return { status: "READ", value: null };
     }
     return { status: "FAILED" };
   }
 }
-function isMissingFileError(error) {
+function isMissingFileError2(error) {
   return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 }
 // packages/opencode-adapter/src/presentation/display.ts
@@ -1994,25 +2215,50 @@ function toOutcomeExtra(result) {
 }
 // packages/opencode-adapter/src/presentation/remediation.ts
 var TITLE = "JevGuard";
+var SERVICE_NAME2 = "jevguard";
 var PREPARING_MESSAGE = "JevGuard is preparing a remediation proposal in the child session.";
 var READY_MESSAGE = "JevGuard remediation proposal ready.";
+var FAILED_MESSAGE = "JevGuard could not prepare a remediation proposal.";
+var FAILURE_LOG_MESSAGE = "JevGuard remediation proposal failed";
 function createRemediationNotifier(toast) {
   return {
     async proposalPreparing() {
-      return showRemediationToast(toast, PREPARING_MESSAGE);
+      return showRemediationToast(toast, PREPARING_MESSAGE, "info");
     },
     async proposalReady() {
-      return showRemediationToast(toast, READY_MESSAGE);
+      return showRemediationToast(toast, READY_MESSAGE, "info");
+    },
+    async proposalFailed() {
+      return showRemediationToast(toast, FAILED_MESSAGE, "error");
     }
   };
 }
-async function showRemediationToast(toast, message) {
+async function showRemediationToast(toast, message, variant) {
   try {
-    return await toast.show({ title: TITLE, message, variant: "info" });
+    return await toast.show({ title: TITLE, message, variant });
   } catch {
     return "FAILED";
   }
 }
+function createRemediationFailureLogSink(client) {
+  return {
+    async write(reason) {
+      try {
+        const result = await client.app.log({
+          body: {
+            service: SERVICE_NAME2,
+            level: "error",
+            message: FAILURE_LOG_MESSAGE,
+            extra: { reason }
+          }
+        });
+        return result.error === undefined ? "DELIVERED" : "FAILED";
+      } catch {
+        return "FAILED";
+      }
+    }
+  };
+}
 function createOpenCodeSessionNavigator(client) {
   return {
     async navigate(sessionID) {
@@ -2063,11 +2309,12 @@ function createOpenCodeProposalSessionFacade(client) {
       return result.data.id;
     },
     async prompt(input) {
+      const model = input.model;
       const result = await client.session.prompt({
         path: { id: input.sessionID },
         body: {
           agent: input.agent,
-          model: { providerID: input.model.providerID, modelID: input.model.modelID },
+          ...model === null ? {} : { model: { providerID: model.providerID, modelID: model.modelID } },
           system: input.system,
           tools: { ...input.tools },
           parts: [{ type: "text", text: input.text }]
@@ -2146,21 +2393,28 @@ async function proposeForTurn(request, dependencies) {
   if (request === null) {
     return;
   }
-  const model = parseModelSpecifier(request.model);
-  if (model === null) {
+  const model = request.model === null ? null : parseModelSpecifier(request.model);
+  if (request.model !== null && model === null) {
+    await reportProposalFailure("MODEL_SPECIFIER_INVALID", dependencies);
     return;
   }
   if (!dependencies.proposals.claim(request.evaluationId)) {
     return;
   }
+  let sessionID;
   try {
-    const sessionID = await dependencies.proposalFacade.createChildSession({
+    sessionID = await dependencies.proposalFacade.createChildSession({
       parentID: request.sessionID,
       title: PROPOSAL_SESSION_TITLE
     });
-    dependencies.proposals.registerChildSession(sessionID);
-    await navigateToProposal(dependencies.navigator, sessionID);
-    await notifyProposalPreparing(dependencies.notifier);
+  } catch {
+    await reportProposalFailure("CHILD_SESSION_FAILED", dependencies);
+    return;
+  }
+  dependencies.proposals.registerChildSession(sessionID);
+  await navigateToProposal(dependencies.navigator, sessionID);
+  await notifyProposalPreparing(dependencies.notifier);
+  try {
     await dependencies.proposalFacade.prompt({
       sessionID,
       agent: PROPOSER_AGENT_NAME,
@@ -2169,7 +2423,26 @@ async function proposeForTurn(request, dependencies) {
       tools: PROPOSER_TOOLS,
       text: buildProposalText(request)
     });
-    await notifyProposalReady(dependencies.notifier);
+  } catch {
+    await reportProposalFailure("PROPOSAL_PROMPT_FAILED", dependencies);
+    return;
+  }
+  await notifyProposalReady(dependencies.notifier);
+}
+async function reportProposalFailure(reason, dependencies) {
+  await writeFailureLog(dependencies.failures, reason);
+  await notifyProposalFailed(dependencies.notifier);
+}
+async function writeFailureLog(sink, reason) {
+  try {
+    await sink.write(reason);
+  } catch {
+    return;
+  }
+}
+async function notifyProposalFailed(notifier) {
+  try {
+    await notifier.proposalFailed();
   } catch {
     return;
   }
@@ -2416,7 +2689,7 @@ function createConfigHook(options) {
 
 // packages/plugin/src/skills/skill-directory.ts
 import { existsSync } from "fs";
-import { join as join2 } from "path";
+import { join as join5 } from "path";
 import { fileURLToPath } from "url";
 var BUNDLED_SKILL_NAMES = ["jevguard-rules", "jev-init"];
 var SKILL_ENTRY_FILE = "SKILL.md";
@@ -2424,7 +2697,7 @@ var SKILL_DIRECTORY_PREFIXES = ["./skills/", "../skills/"];
 function resolveSkillDirectory(moduleUrl, skillName, exists) {
   for (const prefix of SKILL_DIRECTORY_PREFIXES) {
     const directory = fileURLToPath(new URL(`${prefix}${skillName}`, moduleUrl));
-    if (exists(join2(directory, SKILL_ENTRY_FILE))) {
+    if (exists(join5(directory, SKILL_ENTRY_FILE))) {
       return directory;
     }
   }
@@ -2461,6 +2734,7 @@ var JevGuardPlugin = async (input) => {
     proposalFacade: createOpenCodeProposalSessionFacade(input.client),
     navigator: createOpenCodeSessionNavigator(presentationClient),
     notifier: createRemediationNotifier(toast),
+    failures: createRemediationFailureLogSink(presentationClient),
     jev: createFifoJevPort(createTypeSafeJevTransport(createCredentialProvider({
       environment: createProcessEnvironment(),
       store: createKeyringCredentialStore()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pablozrrrr/jevguard",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "OpenCode plugin that reviews a completed agent turn against a repository semantic rule using Jev.",
   "license": "MIT",
   "type": "module",

package/skills/jev-init/SKILL.md

@@ -165,11 +165,12 @@ remediation:
   auto_propose: true
   propose_on:
     - FAIL
-  model: opencode/gpt-5.6-luna
 ```
 
-Do not invent thresholds, add keys, or change the model. The default configuration is
-valid and uses the documented defaults.
+Do not invent thresholds or add keys. The default configuration is valid and uses the
+documented defaults. Never pin `remediation.model`: when it is absent the proposer
+inherits the host model, which is the only portable choice. A hard-coded provider
+model can be absent on the user's machine and would make every proposal fail.
 
 ### 7. Preview both files and require explicit confirmation
 

package/skills/jev-init/validate-init.js

@@ -910,7 +910,7 @@ var REMEDIATION_MAX_TASK_LENGTH = 16384;
 var DEFAULT_REMEDIATION_CONFIG = {
   autoPropose: true,
   proposeOn: ["FAIL"],
-  model: "opencode/gpt-5.6-luna"
+  model: null
 };
 
 // packages/core/src/remediation/request.ts
@@ -1000,6 +1000,7 @@ function snapshotRule(rule) {
 // packages/core/src/remediation/config.ts
 var MODEL_PATTERN = /^[^\s/]+\/[^\s/]+$/;
 var KNOWN_KEYS = new Set(["auto_propose", "propose_on", "model"]);
+var INVALID_MODEL = Symbol("invalid-model");
 function resolveRemediationConfig(value) {
   if (value === null || value === undefined) {
     return valid(DEFAULT_REMEDIATION_CONFIG);
@@ -1022,8 +1023,8 @@ function resolveRemediationConfig(value) {
   if (proposeOn === null) {
     return invalid2();
   }
-  const model = remediation.model ?? DEFAULT_REMEDIATION_CONFIG.model;
-  if (typeof model !== "string" || !MODEL_PATTERN.test(model)) {
+  const model = resolveModel(remediation.model);
+  if (model === INVALID_MODEL) {
     return invalid2();
   }
   return valid({ autoPropose, proposeOn, model });
@@ -1038,6 +1039,15 @@ function parseModelSpecifier(model) {
     modelID: model.slice(separator + 1)
   };
 }
+function resolveModel(value) {
+  if (value === undefined) {
+    return null;
+  }
+  if (typeof value !== "string" || !MODEL_PATTERN.test(value)) {
+    return INVALID_MODEL;
+  }
+  return value;
+}
 function readProposeOn(value) {
   if (value === undefined) {
     return DEFAULT_REMEDIATION_CONFIG.proposeOn;

package/skills/jevguard-rules/validate-rules.js

@@ -910,7 +910,7 @@ var REMEDIATION_MAX_TASK_LENGTH = 16384;
 var DEFAULT_REMEDIATION_CONFIG = {
   autoPropose: true,
   proposeOn: ["FAIL"],
-  model: "opencode/gpt-5.6-luna"
+  model: null
 };
 
 // packages/core/src/remediation/request.ts
@@ -1000,6 +1000,7 @@ function snapshotRule(rule) {
 // packages/core/src/remediation/config.ts
 var MODEL_PATTERN = /^[^\s/]+\/[^\s/]+$/;
 var KNOWN_KEYS = new Set(["auto_propose", "propose_on", "model"]);
+var INVALID_MODEL = Symbol("invalid-model");
 function resolveRemediationConfig(value) {
   if (value === null || value === undefined) {
     return valid(DEFAULT_REMEDIATION_CONFIG);
@@ -1022,8 +1023,8 @@ function resolveRemediationConfig(value) {
   if (proposeOn === null) {
     return invalid2();
   }
-  const model = remediation.model ?? DEFAULT_REMEDIATION_CONFIG.model;
-  if (typeof model !== "string" || !MODEL_PATTERN.test(model)) {
+  const model = resolveModel(remediation.model);
+  if (model === INVALID_MODEL) {
     return invalid2();
   }
   return valid({ autoPropose, proposeOn, model });
@@ -1038,6 +1039,15 @@ function parseModelSpecifier(model) {
     modelID: model.slice(separator + 1)
   };
 }
+function resolveModel(value) {
+  if (value === undefined) {
+    return null;
+  }
+  if (typeof value !== "string" || !MODEL_PATTERN.test(value)) {
+    return INVALID_MODEL;
+  }
+  return value;
+}
 function readProposeOn(value) {
   if (value === undefined) {
     return DEFAULT_REMEDIATION_CONFIG.proposeOn;