@rehydra/opencode 0.16.0 → 0.16.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -3
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -53,7 +53,7 @@ OpenCode 2 passes options natively, with no local plugin file needed:
|
|
|
53
53
|
"redactValues": ["sk-live-abc123..."],
|
|
54
54
|
"minValueLength": 6,
|
|
55
55
|
"disableTypes": ["URL", "IP_ADDRESS"],
|
|
56
|
-
"redactTools": ["webfetch", "websearch", "exa_*"],
|
|
56
|
+
"redactTools": ["webfetch", "websearch", "*image_generate", "exa_*"],
|
|
57
57
|
"vcsIdentities": true
|
|
58
58
|
}
|
|
59
59
|
}
|
|
@@ -98,7 +98,7 @@ export default createRehydraPluginV2({
|
|
|
98
98
|
disableTypes: ["URL", "IP_ADDRESS"],
|
|
99
99
|
|
|
100
100
|
// Keep placeholders in the arguments of tools that call external services
|
|
101
|
-
redactTools: ["webfetch", "websearch", "exa_*"],
|
|
101
|
+
redactTools: ["webfetch", "websearch", "*image_generate", "exa_*"],
|
|
102
102
|
|
|
103
103
|
// Redact identities in Git and GitHub CLI output
|
|
104
104
|
vcsIdentities: true,
|
|
@@ -109,7 +109,7 @@ On OpenCode 1, import `createRehydraPlugin` instead (it returns the callable V1
|
|
|
109
109
|
|
|
110
110
|
`vcsIdentities` detects logins in `gh pr` and `gh api` output, plus author and committer names in `git log`, `git show`, and `git blame` output. It redacts every occurrence of those identities in the same tool output without touching npm scopes or other `@` identifiers in unrelated commands. GitHub display names outside these structured fields still require the optional local NER model.
|
|
111
111
|
|
|
112
|
-
`redactTools` lists tools whose arguments keep their placeholders. The plugin normally restores real values before a tool runs. For these tools it leaves the placeholders in place and redacts any other detected values in the arguments, so secrets and PII don't reach external services through tools such as `webfetch` or `
|
|
112
|
+
`redactTools` lists tools whose arguments keep their placeholders. The plugin normally restores real values before a tool runs. For these tools it leaves the placeholders in place and redacts any other detected values in the arguments, so secrets and PII don't reach external services through tools such as `webfetch`, `websearch`, or OpenCode 2's `experimental_image_generate`, which sends its prompt to an image model. `*` matches any characters, which helps with MCP tools: `"exa_*"`. The default is `["webfetch", "websearch", "*image_generate"]`. Setting `redactTools` replaces it, so keep those in your list, or pass `[]` to restore real values for every tool.
|
|
113
113
|
|
|
114
114
|
## What gets detected
|
|
115
115
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@rehydra/opencode",
|
|
3
|
-
"version": "0.16.
|
|
3
|
+
"version": "0.16.1",
|
|
4
4
|
"description": "Rehydra plugin for OpenCode — anonymizes secrets in LLM context using native plugin hooks",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "index.js",
|
|
@@ -29,7 +29,7 @@
|
|
|
29
29
|
"directory": "packages/opencode-plugin"
|
|
30
30
|
},
|
|
31
31
|
"dependencies": {
|
|
32
|
-
"rehydra": "^0.16.
|
|
32
|
+
"rehydra": "^0.16.1"
|
|
33
33
|
},
|
|
34
34
|
"engines": {
|
|
35
35
|
"node": ">=18.0.0"
|