@rehydra/opencode 0.6.0

package/README.md

@@ -0,0 +1,86 @@
+# @rehydra/opencode
+
+Prevent your coding agent from leaking secrets to LLM providers.
+
+This plugin intercepts the conversation between [OpenCode](https://github.com/sst/opencode) and the LLM. Secrets from your `.env` files are replaced with placeholders before they leave your machine, and transparently restored before any tool (shell commands, file writes, etc.) executes locally.
+
+The LLM never sees real secret values. Your tools run with them.
+
+## Install
+
+```bash
+npm install @rehydra/opencode
+```
+
+Add to `opencode.json`:
+
+```json
+{
+  "plugin": ["@rehydra/opencode"]
+}
+```
+
+By default, the plugin reads `.env` in your project root. Secrets with values of 4+ characters are detected and scrubbed.
+
+## Configuration
+
+For custom settings, create `.opencode/plugins/rehydra.ts`:
+
+```typescript
+import { createRehydraPlugin } from "@rehydra/opencode";
+
+export default createRehydraPlugin({
+  // Scan multiple env files
+  envFiles: [".env", ".env.local", ".env.production"],
+
+  // Always redact these values, even if not in .env
+  redactValues: ["sk-live-abc123..."],
+
+  // Minimum value length to consider a secret (default: 4)
+  minValueLength: 6,
+
+  // Disable detection of specific PII types
+  disableTypes: ["URL", "IP_ADDRESS"],
+});
+```
+
+## What gets detected
+
+- Environment variable values from `.env` files
+- API keys, tokens, and credentials (pattern-based)
+- AWS access keys and secret keys
+- JWTs, private keys, connection strings
+- Any values passed via `redactValues`
+
+## How it works
+
+The plugin uses five OpenCode hooks:
+
+| Hook | What it does |
+|---|---|
+| `messages.transform` | Scrubs secrets from all message text before it reaches the LLM |
+| `system.transform` | Tells the LLM to treat placeholders as real values |
+| `tool.execute.before` | Restores real values in tool arguments before local execution |
+| `tool.execute.after` | Restores real values in displayed tool output |
+| `text.complete` | Restores real values in LLM response text shown to you |
+
+Everything runs locally. No data leaves your machine except the scrubbed conversation sent to the LLM provider.
+
+## Logging
+
+Plugin activity is logged to OpenCode's log directory (`~/.local/share/opencode/log/`). Run with `--log-level DEBUG` for detailed output.
+
+```
+INFO service=rehydra scrubbed={"ENV_VAR_SECRET":2} messageCount=3 scrubbed 2 secret(s) from messages
+INFO service=rehydra tool=bash callID=call_abc123 rehydrated PII tags in tool args
+```
+
+## Rehydra
+
+This plugin is part of [Rehydra](https://github.com/rehydra-ai/rehydra-sdk), an open-source SDK for PII anonymization and rehydration. Rehydra combines regex-based pattern matching with NER-based detection and supports any LLM provider via fetch wrappers, proxy servers, or framework plugins.
+
+Full documentation at [docs.rehydra.ai](https://docs.rehydra.ai).
+
+## License
+
+MIT

package/index.d.ts

@@ -0,0 +1,2 @@
+export { createRehydraPlugin, default } from "rehydra/opencode-plugin";
+export type { RehydraPluginOptions } from "rehydra/opencode-plugin";

package/index.js

@@ -0,0 +1 @@
+export { createRehydraPlugin, default } from "rehydra/opencode-plugin";

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@rehydra/opencode",
+  "version": "0.6.0",
+  "description": "Rehydra plugin for OpenCode — anonymizes secrets in LLM context using native plugin hooks",
+  "type": "module",
+  "main": "index.js",
+  "types": "index.d.ts",
+  "files": [
+    "index.js",
+    "index.d.ts",
+    "README.md"
+  ],
+  "scripts": {
+    "prepublishOnly": "cd ../.. && npm run build"
+  },
+  "keywords": [
+    "anonymization",
+    "pii",
+    "privacy",
+    "secrets",
+    "opencode",
+    "rehydra"
+  ],
+  "author": "",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/rehydra-ai/rehydra-sdk.git",
+    "directory": "packages/opencode-plugin"
+  },
+  "dependencies": {
+    "rehydra": "^0.6.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}