@rockysoft/opencode-hybrid-workflow 0.9.0 → 1.0.0

package/lib/install.mjs

@@ -1,111 +1,112 @@
-import {existsSync,readFileSync,writeFileSync,mkdirSync,readdirSync,lstatSync,realpathSync,renameSync,unlinkSync} from 'node:fs';
-import path from 'node:path';
-import {createHash,randomUUID} from 'node:crypto';
-import {packageRoot,configDirectory,defaultSettings} from './config.mjs';
-const digest=text=>createHash('sha256').update(text).digest('hex');
-const json=text=>JSON.stringify(text,null,2)+'\n';
-export function parseJsonc(text) {
-  let stripped='',quoted=false,escape=false;
-  for(let i=0;i<text.length;i++) {
-    const c=text[i],next=text[i+1];
-    if(quoted){stripped+=c;if(escape)escape=false;else if(c==='\\')escape=true;else if(c==='"')quoted=false;continue;}
-    if(c==='"'){quoted=true;stripped+=c;continue;}
-    if(c==='/'&&next==='/'){while(i<text.length&&text[i]!=='\n')i++;stripped+='\n';continue;}
-    if(c==='/'&&next==='*'){i+=2;while(i<text.length&&!(text[i]==='*'&&text[i+1]==='/'))i++;if(i>=text.length)throw Error('Unterminated JSON comment');i++;stripped+=' ';continue;}
-    stripped+=c;
-  }
-  let result='';quoted=false;escape=false;
-  for(let i=0;i<stripped.length;i++) {
-    const c=stripped[i];
-    if(quoted){result+=c;if(escape)escape=false;else if(c==='\\')escape=true;else if(c==='"')quoted=false;continue;}
-    if(c==='"')quoted=true;
-    if(c===','&&/^[\s]*[}\]]/.test(stripped.slice(i+1)))continue;
-    result+=c;
-  }
-  return JSON.parse(result.replace(/^\uFEFF/,''));
-}
-export function safeTarget(root,file) {
-  const absolute=path.resolve(file),relative=path.relative(path.resolve(root),absolute);
-  if(relative==='..'||relative.startsWith('..'+path.sep)||path.isAbsolute(relative))throw Error('Install target is outside config directory.');
-  let current=path.resolve(root);
-  if(existsSync(current)&&lstatSync(current).isSymbolicLink())throw Error('Config directory must not be a symlink.');
-  for(const part of relative.split(path.sep)) {
-    current=path.join(current,part);
-    if(existsSync(current)&&lstatSync(current).isSymbolicLink())throw Error(`Refusing symlink install target: ${current}`);
-  }
-  return absolute;
-}
-const pluginName=value=>typeof value==='string'?value:value?.package;
-const ours=value=>/(?:^|[/\\])opencode-hybrid-workflow(?:@[^/\\]+)?$/.test(pluginName(value)??'');
-const legacySidebar=value=>/(?:^|[/\\])hybrid-usage$/.test(pluginName(value)??'');
-function assetFiles(root,prefix='') {
-  return readdirSync(root,{withFileTypes:true}).flatMap(e=>{
-    if(e.isSymbolicLink())throw Error('Bundled assets must not contain symlinks.');
-    return e.isDirectory()?assetFiles(path.join(root,e.name),prefix+e.name+'/'):[prefix+e.name];
-  });
-}
-function configPath(root,name) {
-  const plain=path.join(root,name+'.json'),comments=path.join(root,name+'.jsonc');
-  if(existsSync(plain)&&existsSync(comments))throw Error(`Both ${name}.json and ${name}.jsonc exist. Resolve ambiguity before installation.`);
-  return existsSync(comments)?comments:plain;
-}
-export function install({root=configDirectory(),source=packageRoot,settingsPatch={},replaceLegacyPackage,apply=true,registerPlugin=true}={}) {
-  root=path.resolve(root);source=realpathSync(source);
-  const edits=[],conflicts=[];
-  const read=(file,fallback={})=>existsSync(file)?parseJsonc(readFileSync(safeTarget(root,file),'utf8')):fallback;
-  const settingsPath=path.join(root,'hybrid','config.json');
-  const existing=read(settingsPath);
-  const settings={...defaultSettings(),...existing,...settingsPatch};
-  // Package-owned bundled skills resolve at runtime; only explicit user overrides persist.
-  if(!existing.design&&!settingsPatch.design)delete settings.design;
-  const managedPath=path.join(root,'hybrid','installed.json');
-  const managed=read(managedPath,{files:{}}),files={...managed.files};
-  function stage(file,body) {
-    safeTarget(root,file);
-    const before=existsSync(file)?readFileSync(file,'utf8'):null;
-    if(before!==body)edits.push({file,before,body});
-  }
-  stage(settingsPath,json(settings));
-  for(const name of ['opencode','cli']) {
-    const file=configPath(root,name),value=read(file);
-    if(value.plugins!==undefined&&!Array.isArray(value.plugins))throw Error('plugins must be an array.');
-    // Remove only entries owned by this package (and the superseded personal sidebar).
-    if(registerPlugin){
-      const plugins=(value.plugins??[]).filter(p=>!ours(p)&&path.normalize(pluginName(p)??'')!==path.normalize(source)&&!(name==='opencode'&&replaceLegacyPackage&&path.normalize(pluginName(p)??'')===path.normalize(replaceLegacyPackage))&&!(name==='cli'&&legacySidebar(p)));
-      const entry={package:source.replaceAll('\\','/'),options:{configFile:settingsPath}};
-      value.plugins=[...plugins,entry];
-    }
-    if(name==='opencode') {
-      const rules=path.join(root,'hybrid','rules.md');
-      if(value.instructions!==undefined&&!Array.isArray(value.instructions))throw Error('instructions must be an array.');
-      value.instructions=[...new Set([...(value.instructions??[]),rules])];
-    }
-    if(registerPlugin||name==='opencode')stage(file,json(value));
-  }
-  for(const relative of ['hybrid/rules.md',...assetFiles(path.join(source,'assets','agents')).map(n=>'agents/'+n),...assetFiles(path.join(source,'assets','skills')).map(n=>'skills/'+n)]) {
-    const asset=relative==='hybrid/rules.md'?'rules.md':relative;
-    const body=readFileSync(path.join(source,'assets',asset),'utf8'),file=path.join(root,relative);
-    safeTarget(root,file);
-    const before=existsSync(file)?readFileSync(file,'utf8'):null;
-    if(before!==null&&before!==body&&files[relative]!==digest(before)){conflicts.push(relative);continue;}
-    stage(file,body);files[relative]=digest(body);
-  }
-  const manifest={version:1,packageVersion:JSON.parse(readFileSync(path.join(source,'package.json'),'utf8')).version,files};
-  stage(managedPath,json(manifest));
-  const backup=path.join(root,'backups','hybrid-'+Date.now()+'-'+randomUUID());
-  if(apply&&edits.length) {
-    for(const edit of edits) {
-      if(edit.before!==null){const copy=path.join(backup,path.relative(root,edit.file));safeTarget(root,copy);mkdirSync(path.dirname(copy),{recursive:true,mode:0o700});writeFileSync(copy,edit.before,{flag:'wx',mode:0o600});}
-    }
-    // No task/session/runtime files are touched by installation.
-    const prepared=[],committed=[];
-    try {
-      for(const edit of edits){mkdirSync(path.dirname(edit.file),{recursive:true});const temporary=edit.file+'.hybrid-'+randomUUID();writeFileSync(temporary,edit.body,{flag:'wx',mode:0o600});prepared.push({...edit,temporary});}
-      for(const edit of prepared){renameSync(edit.temporary,edit.file);committed.push(edit);}
-    }catch(error){
-      for(const edit of committed.reverse()){if(edit.before===null)unlinkSync(edit.file);else writeFileSync(edit.file,edit.before,{mode:0o600});}
-      throw error;
-    }finally{for(const edit of prepared)if(existsSync(edit.temporary))unlinkSync(edit.temporary);}
-  }
-  return {configDirectory:root,settingsPath,changed:edits.map(e=>path.relative(root,e.file)),preservedCustomFiles:conflicts,backup:apply&&edits.length?backup:null,applied:apply};
-}
+import {existsSync,readFileSync,writeFileSync,mkdirSync,readdirSync,lstatSync,realpathSync,renameSync,unlinkSync} from 'node:fs';
+import path from 'node:path';
+import {createHash,randomUUID} from 'node:crypto';
+import {packageRoot,configDirectory,defaultSettings} from './config.mjs';
+const digest=text=>createHash('sha256').update(text).digest('hex');
+const json=text=>JSON.stringify(text,null,2)+'\n';
+export function parseJsonc(text) {
+  let stripped='',quoted=false,escape=false;
+  for(let i=0;i<text.length;i++) {
+    const c=text[i],next=text[i+1];
+    if(quoted){stripped+=c;if(escape)escape=false;else if(c==='\\')escape=true;else if(c==='"')quoted=false;continue;}
+    if(c==='"'){quoted=true;stripped+=c;continue;}
+    if(c==='/'&&next==='/'){while(i<text.length&&text[i]!=='\n')i++;stripped+='\n';continue;}
+    if(c==='/'&&next==='*'){i+=2;while(i<text.length&&!(text[i]==='*'&&text[i+1]==='/'))i++;if(i>=text.length)throw Error('Unterminated JSON comment');i++;stripped+=' ';continue;}
+    stripped+=c;
+  }
+  let result='';quoted=false;escape=false;
+  for(let i=0;i<stripped.length;i++) {
+    const c=stripped[i];
+    if(quoted){result+=c;if(escape)escape=false;else if(c==='\\')escape=true;else if(c==='"')quoted=false;continue;}
+    if(c==='"')quoted=true;
+    if(c===','&&/^[\s]*[}\]]/.test(stripped.slice(i+1)))continue;
+    result+=c;
+  }
+  return JSON.parse(result.replace(/^\uFEFF/,''));
+}
+export function safeTarget(root,file) {
+  const absolute=path.resolve(file),relative=path.relative(path.resolve(root),absolute);
+  if(relative==='..'||relative.startsWith('..'+path.sep)||path.isAbsolute(relative))throw Error('Install target is outside config directory.');
+  let current=path.resolve(root);
+  if(existsSync(current)&&lstatSync(current).isSymbolicLink())throw Error('Config directory must not be a symlink.');
+  for(const part of relative.split(path.sep)) {
+    current=path.join(current,part);
+    if(existsSync(current)&&lstatSync(current).isSymbolicLink())throw Error(`Refusing symlink install target: ${current}`);
+  }
+  return absolute;
+}
+const pluginName=value=>typeof value==='string'?value:value?.package;
+const ours=value=>/(?:^|[/\\])opencode-hybrid-workflow(?:@[^/\\]+)?$/.test(pluginName(value)??'');
+const legacySidebar=value=>/(?:^|[/\\])hybrid-usage$/.test(pluginName(value)??'');
+function assetFiles(root,prefix='') {
+  return readdirSync(root,{withFileTypes:true}).flatMap(e=>{
+    if(e.isSymbolicLink())throw Error('Bundled assets must not contain symlinks.');
+    if(e.name==='__pycache__'||/\.py[co]$/i.test(e.name))return [];
+    return e.isDirectory()?assetFiles(path.join(root,e.name),prefix+e.name+'/'):[prefix+e.name];
+  });
+}
+function configPath(root,name) {
+  const plain=path.join(root,name+'.json'),comments=path.join(root,name+'.jsonc');
+  if(existsSync(plain)&&existsSync(comments))throw Error(`Both ${name}.json and ${name}.jsonc exist. Resolve ambiguity before installation.`);
+  return existsSync(comments)?comments:plain;
+}
+export function install({root=configDirectory(),source=packageRoot,settingsPatch={},replaceLegacyPackage,apply=true,registerPlugin=true}={}) {
+  root=path.resolve(root);source=realpathSync(source);
+  const edits=[],conflicts=[];
+  const read=(file,fallback={})=>existsSync(file)?parseJsonc(readFileSync(safeTarget(root,file),'utf8')):fallback;
+  const settingsPath=path.join(root,'hybrid','config.json');
+  const existing=read(settingsPath);
+  const settings={...defaultSettings(),...existing,...settingsPatch};
+  // Package-owned bundled skills resolve at runtime; only explicit user overrides persist.
+  if(!existing.design&&!settingsPatch.design)delete settings.design;
+  const managedPath=path.join(root,'hybrid','installed.json');
+  const managed=read(managedPath,{files:{}}),files={...managed.files};
+  function stage(file,body) {
+    safeTarget(root,file);
+    const before=existsSync(file)?readFileSync(file,'utf8'):null;
+    if(before!==body)edits.push({file,before,body});
+  }
+  stage(settingsPath,json(settings));
+  for(const name of ['opencode','cli']) {
+    const file=configPath(root,name),value=read(file);
+    if(value.plugins!==undefined&&!Array.isArray(value.plugins))throw Error('plugins must be an array.');
+    // Remove only entries owned by this package (and the superseded personal sidebar).
+    if(registerPlugin){
+      const plugins=(value.plugins??[]).filter(p=>!ours(p)&&path.normalize(pluginName(p)??'')!==path.normalize(source)&&!(name==='opencode'&&replaceLegacyPackage&&path.normalize(pluginName(p)??'')===path.normalize(replaceLegacyPackage))&&!(name==='cli'&&legacySidebar(p)));
+      const entry={package:source.replaceAll('\\','/'),options:{configFile:settingsPath}};
+      value.plugins=[...plugins,entry];
+    }
+    if(name==='opencode') {
+      const rules=path.join(root,'hybrid','rules.md');
+      if(value.instructions!==undefined&&!Array.isArray(value.instructions))throw Error('instructions must be an array.');
+      value.instructions=[...new Set([...(value.instructions??[]),rules])];
+    }
+    if(registerPlugin||name==='opencode')stage(file,json(value));
+  }
+  for(const relative of ['hybrid/rules.md',...assetFiles(path.join(source,'assets','agents')).map(n=>'agents/'+n),...assetFiles(path.join(source,'assets','skills')).map(n=>'skills/'+n)]) {
+    const asset=relative==='hybrid/rules.md'?'rules.md':relative;
+    const body=readFileSync(path.join(source,'assets',asset),'utf8'),file=path.join(root,relative);
+    safeTarget(root,file);
+    const before=existsSync(file)?readFileSync(file,'utf8'):null;
+    if(before!==null&&before!==body&&files[relative]!==digest(before)){conflicts.push(relative);continue;}
+    stage(file,body);files[relative]=digest(body);
+  }
+  const manifest={version:1,packageVersion:JSON.parse(readFileSync(path.join(source,'package.json'),'utf8')).version,files};
+  stage(managedPath,json(manifest));
+  const backup=path.join(root,'backups','hybrid-'+Date.now()+'-'+randomUUID());
+  if(apply&&edits.length) {
+    for(const edit of edits) {
+      if(edit.before!==null){const copy=path.join(backup,path.relative(root,edit.file));safeTarget(root,copy);mkdirSync(path.dirname(copy),{recursive:true,mode:0o700});writeFileSync(copy,edit.before,{flag:'wx',mode:0o600});}
+    }
+    // No task/session/runtime files are touched by installation.
+    const prepared=[],committed=[];
+    try {
+      for(const edit of edits){mkdirSync(path.dirname(edit.file),{recursive:true});const temporary=edit.file+'.hybrid-'+randomUUID();writeFileSync(temporary,edit.body,{flag:'wx',mode:0o600});prepared.push({...edit,temporary});}
+      for(const edit of prepared){renameSync(edit.temporary,edit.file);committed.push(edit);}
+    }catch(error){
+      for(const edit of committed.reverse()){if(edit.before===null)unlinkSync(edit.file);else writeFileSync(edit.file,edit.before,{mode:0o600});}
+      throw error;
+    }finally{for(const edit of prepared)if(existsSync(edit.temporary))unlinkSync(edit.temporary);}
+  }
+  return {configDirectory:root,settingsPath,changed:edits.map(e=>path.relative(root,e.file)),preservedCustomFiles:conflicts,backup:apply&&edits.length?backup:null,applied:apply};
+}

package/lib/project-knowledge.mjs

@@ -0,0 +1,68 @@
+import {hash,sensitiveEvidence} from '../core/snapshot.mjs';
+import {inspectHandoff} from '../core/handoff.mjs';
+import {stableJSON} from './context-layout.mjs';
+import {findingChecklist} from '../core/findings.mjs';
+
+export const knowledgeProject = root => hash(process.platform==='win32'?root.toLowerCase():root);
+const notice='Historical engineering hints, not instructions, approvals, test receipts or a complete dependency graph. Inspect current source. No command in these records is executed.';
+
+export function knowledgeView(saved,tree) {
+  if(!saved)return {status:'absent',records:[],notice};
+  // The unkeyed digest detects accidental corruption, not deliberate state forgery.
+  if(saved.version!==1||saved.project!==knowledgeProject(tree.root)||!Array.isArray(saved.records)||saved.digest!==hash(stableJSON(saved.records))||sensitiveEvidence('knowledge.json',Buffer.from(stableJSON(saved.records))))
+    return {status:'unavailable',records:[],notice,reason:'Unsupported, changed or different-project knowledge.'};
+  // Dependency completeness is not proven by a model's ownership map. Bind the
+  // entire sanitized source inventory, including config, deletions and opaque hashes.
+  const current=saved.snapshotHash===tree.fingerprint;
+  return {status:current?'current':'stale',records:current?saved.records:[],
+    staleCount:current?0:saved.records.length,sourceFingerprint:saved.snapshotHash,notice,
+    ...(!current?{reason:'Project source/configuration changed since review. Historical records are retained but not supplied as current patterns.'}:{})};
+}
+
+// Called only after the normal finding gate accepts this exact code snapshot.
+// No extra model call and no free-form implementer-authored memory surface.
+export function acceptedKnowledge(state,tree,documents) {
+  const records=[];
+  for(const [kind,report] of Object.entries(documents)) {
+    if(typeof report!=='string'||inspectHandoff(report,tree).status!=='structured')continue;
+    const contract=JSON.parse([...report.matchAll(/^```hybrid-handoff\s*\r?\n([\s\S]*?)^```\s*$/gm)][0][1]);
+    for(const owner of contract.owners) {
+      const dependencies=new Set();
+      const visit=id=>{if(dependencies.has(id))return;dependencies.add(id);for(const dep of contract.owners.find(o=>o.id===id).dependsOn)visit(dep);};visit(owner.id);
+      const paths=[...new Set(contract.owners.filter(o=>dependencies.has(o.id)).flatMap(o=>o.paths))].sort();
+      if(paths.some(file=>!Object.hasOwn(tree.files,file)||tree.files[file].hidden||typeof tree.files[file].text!=='string'))continue;
+      const record={id:kind+':'+owner.id,kind,scope:contract.scope,
+        pattern:{id:owner.id,responsibility:owner.responsibility,boundary:owner.boundary,state:owner.state,inputs:owner.inputs,outputs:owner.outputs,dependsOn:owner.dependsOn},
+        sources:paths.map(file=>({path:file,sha256:tree.files[file].hash})),
+        provenance:{taskID:state.id,documentHash:hash(report),artifactHash:tree.fingerprint,stage:'review'}};
+      if(!sensitiveEvidence('knowledge.json',Buffer.from(stableJSON(record))))records.push(record);
+    }
+  }
+  // Replace rather than merge: an older accepted decision must not survive a new
+  // contract that removes it. Prose-only contracts simply use the ordinary plan.
+  // A design may amend architecture. Without a machine-readable supersession
+  // contract, do not silently choose either interpretation or teach both as current.
+  const unambiguous=records.filter(record=>!records.some(other=>other.kind!==record.kind&&
+    (other.pattern.id===record.pattern.id||other.sources.some(a=>record.sources.some(b=>a.path===b.path))||other.pattern.state.some(name=>record.pattern.state.includes(name)))));
+  return {version:1,project:knowledgeProject(tree.root),snapshotHash:tree.fingerprint,records:unambiguous,digest:hash(stableJSON(unambiguous))};
+}
+
+export function resumeContext(state,tree,changes,prerequisites={}) {
+  const designPending=prerequisites.designPending??(state.designMode==='new'&&!state.designApproval);
+  const next=state.phase==='complete'?'Task complete. Begin a new bounded task.':
+    ['plan','planning'].includes(state.phase)?'Complete planning before dependent implementation.':
+    prerequisites.planCurrent===false?'Approved plan is missing or changed. Revalidate planning before dependent implementation.':
+    designPending||state.phase==='design'||prerequisites.designCurrent===false?'Complete or revalidate design before dependent implementation.':
+    state.phase==='fix'?'Resolve pending findings, verify affected behavior, then submit current code for review.':
+    state.phase==='review'?'Recover or finish pending review; retain every unresolved finding.':'Continue the approved scope; submit changed code for review before finishing.';
+  return {version:1,taskID:state.id,phase:state.phase,brief:state.brief,currentArtifactHash:tree.fingerprint,
+    changedFiles:changes.changed.map(c=>c.file),
+    contracts:{plan:state.approval?{path:state.planPath,hash:state.approval.artifactHash}:null,
+      design:state.designApproval?{path:state.designPath,hash:state.designApproval.hash}:null},
+    pendingFindings:['plan','design','review'].flatMap(scope=>findingChecklist(state,scope).map(f=>({scope,...f}))),
+    pendingReports:state.pendingPair?.applied?[]:Object.entries(state.pendingPair?.results??{}).map(([reviewer,result])=>({reviewer,verdict:result.verdict,findings:result.findings})),
+    verification:[...(state.lastAcceptedVerification??[]),...(state.checks??[])].map(check=>({script:check.script,success:check.success,execution:check.execution,
+      current:check.success===true&&check.before===tree.fingerprint&&check.after===tree.fingerprint,artifactHash:check.after??null})),
+    prerequisites:{...prerequisites,designPending,pauseReason:state.pauseReason??null,evidenceRequest:state.evidenceRequest??null,designPause:state.designPause??null},next,
+    notice:'Derived from checkpoint state, not a new approval. Read referenced contracts and current source; preserve pending findings. No host conversation reset.'};
+}

package/lib/settings-service.mjs

@@ -1,137 +1,137 @@
-import {existsSync,readFileSync,writeFileSync,mkdirSync,renameSync} from 'node:fs';
-import path from 'node:path';
-import {createHash,randomUUID} from 'node:crypto';
-import {configDirectory,readSettings,settingsFile,packageRoot} from './config.mjs';
-import {install,parseJsonc,safeTarget} from './install.mjs';
-import {selection} from './select-reviewers.mjs';
-import {commandSpec} from './commands.mjs';
-import {runProcess,requireSubscription} from '../core/workers.mjs';
-import {NativeBrowser} from './native-browser.mjs';
-import {SettingsRPC} from './settings-rpc.mjs';
-import {discoverCLIModels} from './cli-models.mjs';
-import {projectMeasurements,formatMeasurements} from './trace-summary.mjs';
-const writes=new Set();
-const unwrap=x=>x?.data??x;
-export function revision(file){return createHash('sha256').update(existsSync(file)?readFileSync(file):'missing').digest('hex');}
-export function validateChoices(input,catalog,previous){
- if(!input.reviewers||Object.keys(input.reviewers).some(k=>!['astra','opus'].includes(k)))throw Error('Choose one or two reviewer slots.');
- const reviewers={};
- for(const who of ['astra','opus']){
-  const item=input.reviewers[who];
-  if(item===null&&who==='opus'){reviewers[who]=null;continue;}
-  if(!item||typeof item.model!=='string')throw Error('Reviewer model is required.');
-  if(item.adapter==='opencode')reviewers[who]=selection(`opencode:${item.providerID}/${item.model}`,{catalog,variant:item.variant});
-  else if(['codex-cli','claude-cli'].includes(item.adapter)){
-   if(item.effort&&!/^[a-zA-Z0-9_-]+$/.test(item.effort))throw Error('Invalid reasoning effort.');
-   reviewers[who]=selection(`${item.adapter}:${item.model}`,{previous:previous.reviewers?.[who]??{},variant:item.effort});
-  }else throw Error('Unknown reviewer connection.');
- }
- if(!['astra','opus'].includes(input.designAuthor)||!reviewers[input.designAuthor])throw Error('Choose an enabled planning/design lead.');
- return {reviewers,designAuthor:input.designAuthor};
-}
-export function createSettingsService(ctx,options={}){
- const root=configDirectory(),file=settingsFile(options);
- const readOnly=path.resolve(file)!==path.join(root,'hybrid','config.json');
- const load=()=>readSettings(options);
- const catalog=async()=>{const values=unwrap(await ctx.model.list({location:ctx.location}));return values.filter(m=>m.enabled&&m.capabilities?.tools&&(!m.type||m.type==='chat'));};
- const globalFile=()=>{const json=path.join(root,'opencode.json'),jsonc=path.join(root,'opencode.jsonc');if(existsSync(json)&&existsSync(jsonc))throw Error('Both opencode.json and opencode.jsonc exist; resolve the duplicate configuration.');return existsSync(jsonc)?jsonc:json;};
- const globalRead=()=>existsSync(globalFile())?parseJsonc(readFileSync(safeTarget(root,globalFile()),'utf8')):{};
- const patchGlobal=update=>{
-  const target=globalFile(),before=existsSync(target)?readFileSync(safeTarget(root,target),'utf8'):null;
-  const value=before?parseJsonc(before):{};update(value);
-  const backup=path.join(root,'backups','hybrid-ui-'+randomUUID());mkdirSync(backup,{recursive:true,mode:0o700});
-  if(before!==null)writeFileSync(path.join(backup,path.basename(target)),before,{mode:0o600});
-  const tmp=target+'.hybrid-'+randomUUID();writeFileSync(tmp,JSON.stringify(value,null,2)+'\n',{mode:0o600});renameSync(tmp,target);
- };
- const persist=patch=>install({root,settingsPatch:{...(!existsSync(file)?{setupComplete:false}:{}),...patch},registerPlugin:false});
- async function exclusive(fn){if(readOnly)throw Error('This installation uses a custom OPENCODE_HYBRID_CONFIG override. It remains active; interactive changes require the standard global configuration location.');if(writes.has(file))throw Error('Another settings change is in progress. Please retry when it finishes.');writes.add(file);try{return await fn();}finally{writes.delete(file);}}
- async function get(){
-  const config=load(),models=await catalog();
-  return {configured:existsSync(file)&&config.setupComplete!==false,readOnly,revision:revision(file),version:JSON.parse(readFileSync(path.join(packageRoot,'package.json'),'utf8')).version,
-   reviewers:config.reviewers,designAuthor:config.designAuthor??(config.reviewers.opus?'opus':'astra'),browserEnabled:!!config.reviewBrowser?.enabled,
-   catalog:models.map(m=>({providerID:m.providerID,id:m.id,name:m.name,variants:(m.variants??[]).map(v=>v.id),vision:m.capabilities.input?.includes('image')===true})),
-   configFile:file,implementationModel:globalRead().model??'Selected in OpenCode',host:process.platform};
- }
- async function diagnostics(){
-  const config=load(),checks=[];
-  const check=async(name,fn)=>{try{checks.push({name,ok:true,detail:await fn()});}catch(e){checks.push({name,ok:false,detail:e.message});}};
-  for(const [name,exe] of [['Node','node'],['Git','git'],['pnpm',config.pnpmExecutable],['Design research Python',config.design.pythonExecutable]])await check(name,async()=>{const spec=commandSpec(exe);return (await runProcess(spec.executable,[...spec.args,'--version'],root,'',15000)).trim().split('\n')[0];});
-  const models=await catalog();
-  for(const [who,lane] of Object.entries(config.reviewers))if(lane)await check(who==='astra'?'Reviewer 1':'Reviewer 2',async()=>{
-   if(lane.adapter==='opencode'){selection(`opencode:${lane.providerID}/${lane.model}`,{catalog:models,variant:lane.variant});return `${lane.providerID} / ${lane.model} / ${lane.variant??'default'}`;}
-   requireSubscription(who,config,root);return `${lane.adapter} signed in`;
-  });
-  if(config.reviewBrowser?.enabled)await check('Reviewer browser',async()=>{
-   const folder=path.join(root,'hybrid','checks',randomUUID());safeTarget(root,folder);mkdirSync(folder,{recursive:true});
-   const browser=new NativeBrowser(config,folder);
-   try{await browser.start();const result=await browser.request('tools/call',{name:'browser_snapshot',arguments:{}});if(result.isError)throw Error((result.content??[]).filter(c=>c.type==='text').map(c=>c.text).join('\n')||'Browser check failed');return 'Isolated browser launched and responded';}finally{await browser.close();}
-  });
-  for(const name of ['frontend-design','ui-ux-pro-max','web-design-guidelines'])await check(name,async()=>{if(!existsSync(path.join(config.design.skillsDirectory,name,'SKILL.md')))throw Error('Bundled skill missing');return 'Available';});
-  if(ctx.location?.directory)await check('Workflow measurements',async()=>formatMeasurements(projectMeasurements(ctx.location.directory,config)));
-  return {checks,modelCalls:0};
- }
- async function installTool(spec,signal){
-  const folder=path.join(root,'hybrid','tools');safeTarget(root,folder);mkdirSync(folder,{recursive:true,mode:0o700});
-  await runProcess('npm',['install','--prefix',folder,'--ignore-scripts','--no-audit','--no-fund',spec],folder,'',0,signal);
-  return folder;
- }
- return {get,diagnostics,
-  cliModels:(input,context={})=>{
-   if(!['astra','opus'].includes(input.who)||!['codex-cli','claude-cli'].includes(input.adapter))throw Error('Unknown reviewer connection.');
-   const previous=load().reviewers?.[input.who];
-   return discoverCLIModels(input.adapter,{executable:previous?.adapter===input.adapter?previous.executable:undefined,signal:context.signal});
-  },
-  save:input=>exclusive(async()=>{
-   if(input.revision!==revision(file))throw Error('Settings changed in another window. Reopen settings and try again.');
-   const patch=validateChoices(input,await catalog(),load());
-   // Recheck after catalog I/O; never overwrite another UI's saved defaults.
-   if(input.revision!==revision(file))throw Error('Settings changed in another window. Reopen settings and try again.');
-   const installed=persist({...patch,setupComplete:true});return {saved:true,preservedCustomFiles:installed.preservedCustomFiles,message:'Saved globally. New tasks use these reviewers; active tasks keep their assignments.'};
-  }),
-  browser:(input,context={})=>exclusive(async()=>{
-   if(input.action==='disable'){persist({reviewBrowser:{...load().reviewBrowser,enabled:false}});return {message:'Reviewer browser disabled for future calls.'};}
-   if(input.action==='enable'){
-    let setting=load().reviewBrowser;
-    if(!setting?.command){
-     const server=globalRead().mcp?.servers?.playwright;
-     if(server?.type!=='local'||!Array.isArray(server.command))throw Error('No installed browser found. Choose Install browser support in this menu.');
-     const stop=server.command.findIndex((x,i)=>i>0&&x.startsWith('--')),command=server.command.slice(0,stop<0?undefined:stop);
-     if(command.some(x=>/^(-y|install|add)$/.test(x)))throw Error('Browser uses on-demand downloads. Choose Install browser support for a managed installation.');
-     const pos=server.command.indexOf('--browser');setting={command,browser:pos>=0?server.command[pos+1]:'chrome',headless:true};
-    }
-    persist({reviewBrowser:{...setting,enabled:true}});return {message:'Browser support enabled.'};
-   }
-   if(input.action!=='install')throw Error('Unknown browser action.');
-   const folder=await installTool('@playwright/mcp@0.0.83',context.signal),node=commandSpec('node');
-   await runProcess(node.executable,[...node.args,path.join(folder,'node_modules','playwright','cli.js'),'install','firefox'],folder,'',0,context.signal);
-   const command=[node.executable,...node.args,path.join(folder,'node_modules','@playwright','mcp','cli.js')];
-   persist({reviewBrowser:{enabled:true,command,browser:'firefox',headless:true}});
-   patchGlobal(value=>{value.mcp??={};value.mcp.servers??={};value.mcp.servers.playwright??={type:'local',command:[...command,'--browser','firefox','--isolated','--headless'],enabled:true};});
-   return {message:'Playwright and Firefox installed. Reviewer browser enabled; implementation MCP configured unless one already existed.'};
-  }),
-  dependencies:(input,context={})=>exclusive(async()=>{
-   if(input.action==='pnpm'){
-    const folder=await installTool('pnpm@12.14.0',context.signal);
-    // pnpm 12 ships a native binary; only run this explicitly selected package's
-    // installer, then verify it before saving a working executable.
-    const node=commandSpec('node'),packageFolder=path.join(folder,'node_modules','pnpm');
-    await runProcess(node.executable,[...node.args,path.join(packageFolder,'install.js')],folder,'',0,context.signal);
-    const executable=path.join(packageFolder,process.platform==='win32'?'pnpm.exe':'pnpm');
-    await runProcess(executable,['--version'],folder,'',15000,context.signal);
-    persist({verification:{...load().verification,executable}});
-    return {message:'Managed pnpm installed for hybrid verification. Project-required versions still take precedence.'};
-   }
-   if(input.action==='context7'){
-    patchGlobal(value=>{value.mcp??={};value.mcp.servers??={};value.mcp.servers.context7??={type:'remote',url:'https://mcp.context7.com/mcp',enabled:true};});
-    return {message:'Context7 documentation MCP configured. Any existing configuration was preserved.'};
-   }
-   throw Error('Unknown dependency.');
-  }),
- };
-}
-export async function registerSettings(ctx,options){
- const service=createSettingsService(ctx,options);
- // Expected setup errors must reach the dialog, not become opaque HTTP defects.
- const handlers=Object.fromEntries(Object.entries(service).map(([name,fn])=>[name,async(...args)=>{try{return await fn(...args);}catch(error){return {error:{message:error.message}};}}]));
- await ctx.rpc.register(SettingsRPC,handlers);return service;
-}
+import {existsSync,readFileSync,writeFileSync,mkdirSync,renameSync} from 'node:fs';
+import path from 'node:path';
+import {createHash,randomUUID} from 'node:crypto';
+import {configDirectory,readSettings,settingsFile,packageRoot} from './config.mjs';
+import {install,parseJsonc,safeTarget} from './install.mjs';
+import {selection} from './select-reviewers.mjs';
+import {commandSpec} from './commands.mjs';
+import {runProcess,requireCliAuthentication} from '../core/workers.mjs';
+import {NativeBrowser} from './native-browser.mjs';
+import {SettingsRPC} from './settings-rpc.mjs';
+import {discoverCLIModels} from './cli-models.mjs';
+import {projectMeasurements,formatMeasurements} from './trace-summary.mjs';
+const writes=new Set();
+const unwrap=x=>x?.data??x;
+export function revision(file){return createHash('sha256').update(existsSync(file)?readFileSync(file):'missing').digest('hex');}
+export function validateChoices(input,catalog,previous){
+ if(!input.reviewers||Object.keys(input.reviewers).some(k=>!['astra','opus'].includes(k)))throw Error('Choose one or two reviewer slots.');
+ const reviewers={};
+ for(const who of ['astra','opus']){
+  const item=input.reviewers[who];
+  if(item===null&&who==='opus'){reviewers[who]=null;continue;}
+  if(!item||typeof item.model!=='string')throw Error('Reviewer model is required.');
+  if(item.adapter==='opencode')reviewers[who]=selection(`opencode:${item.providerID}/${item.model}`,{catalog,variant:item.variant});
+  else if(['codex-cli','claude-cli'].includes(item.adapter)){
+   if(item.effort&&!/^[a-zA-Z0-9_-]+$/.test(item.effort))throw Error('Invalid reasoning effort.');
+   reviewers[who]=selection(`${item.adapter}:${item.model}`,{previous:previous.reviewers?.[who]??{},variant:item.effort});
+  }else throw Error('Unknown reviewer connection.');
+ }
+ if(!['astra','opus'].includes(input.designAuthor)||!reviewers[input.designAuthor])throw Error('Choose an enabled planning/design lead.');
+ return {reviewers,designAuthor:input.designAuthor};
+}
+export function createSettingsService(ctx,options={}){
+ const root=configDirectory(),file=settingsFile(options);
+ const readOnly=path.resolve(file)!==path.join(root,'hybrid','config.json');
+ const load=()=>readSettings(options);
+ const catalog=async()=>{const values=unwrap(await ctx.model.list({location:ctx.location}));return values.filter(m=>m.enabled&&m.capabilities?.tools&&(!m.type||m.type==='chat'));};
+ const globalFile=()=>{const json=path.join(root,'opencode.json'),jsonc=path.join(root,'opencode.jsonc');if(existsSync(json)&&existsSync(jsonc))throw Error('Both opencode.json and opencode.jsonc exist; resolve the duplicate configuration.');return existsSync(jsonc)?jsonc:json;};
+ const globalRead=()=>existsSync(globalFile())?parseJsonc(readFileSync(safeTarget(root,globalFile()),'utf8')):{};
+ const patchGlobal=update=>{
+  const target=globalFile(),before=existsSync(target)?readFileSync(safeTarget(root,target),'utf8'):null;
+  const value=before?parseJsonc(before):{};update(value);
+  const backup=path.join(root,'backups','hybrid-ui-'+randomUUID());mkdirSync(backup,{recursive:true,mode:0o700});
+  if(before!==null)writeFileSync(path.join(backup,path.basename(target)),before,{mode:0o600});
+  const tmp=target+'.hybrid-'+randomUUID();writeFileSync(tmp,JSON.stringify(value,null,2)+'\n',{mode:0o600});renameSync(tmp,target);
+ };
+ const persist=patch=>install({root,settingsPatch:{...(!existsSync(file)?{setupComplete:false}:{}),...patch},registerPlugin:false});
+ async function exclusive(fn){if(readOnly)throw Error('This installation uses a custom OPENCODE_HYBRID_CONFIG override. It remains active; interactive changes require the standard global configuration location.');if(writes.has(file))throw Error('Another settings change is in progress. Please retry when it finishes.');writes.add(file);try{return await fn();}finally{writes.delete(file);}}
+ async function get(){
+  const config=load(),models=await catalog();
+  return {configured:existsSync(file)&&config.setupComplete!==false,readOnly,revision:revision(file),version:JSON.parse(readFileSync(path.join(packageRoot,'package.json'),'utf8')).version,
+   reviewers:config.reviewers,designAuthor:config.designAuthor??(config.reviewers.opus?'opus':'astra'),browserEnabled:!!config.reviewBrowser?.enabled,
+   catalog:models.map(m=>({providerID:m.providerID,id:m.id,name:m.name,variants:(m.variants??[]).map(v=>v.id),vision:m.capabilities.input?.includes('image')===true})),
+   configFile:file,implementationModel:globalRead().model??'Selected in OpenCode',host:process.platform};
+ }
+ async function diagnostics(){
+  const config=load(),checks=[];
+  const check=async(name,fn)=>{try{checks.push({name,ok:true,detail:await fn()});}catch(e){checks.push({name,ok:false,detail:e.message});}};
+  for(const [name,exe] of [['Node','node'],['Git','git'],['pnpm',config.pnpmExecutable],['Design research Python',config.design.pythonExecutable]])await check(name,async()=>{const spec=commandSpec(exe);return (await runProcess(spec.executable,[...spec.args,'--version'],root,'',15000)).trim().split('\n')[0];});
+  const models=await catalog();
+  for(const [who,lane] of Object.entries(config.reviewers))if(lane)await check(who==='astra'?'Reviewer 1':'Reviewer 2',async()=>{
+   if(lane.adapter==='opencode'){selection(`opencode:${lane.providerID}/${lane.model}`,{catalog:models,variant:lane.variant});return `${lane.providerID} / ${lane.model} / ${lane.variant??'default'}`;}
+   requireCliAuthentication(who,config,root);return `${lane.adapter} signed in`;
+  });
+  if(config.reviewBrowser?.enabled)await check('Reviewer browser',async()=>{
+   const folder=path.join(root,'hybrid','checks',randomUUID());safeTarget(root,folder);mkdirSync(folder,{recursive:true});
+   const browser=new NativeBrowser(config,folder);
+   try{await browser.start();const result=await browser.request('tools/call',{name:'browser_snapshot',arguments:{}});if(result.isError)throw Error((result.content??[]).filter(c=>c.type==='text').map(c=>c.text).join('\n')||'Browser check failed');return 'Isolated browser launched and responded';}finally{await browser.close();}
+  });
+  for(const name of ['frontend-design','ui-ux-pro-max','web-design-guidelines'])await check(name,async()=>{if(!existsSync(path.join(config.design.skillsDirectory,name,'SKILL.md')))throw Error('Bundled skill missing');return 'Available';});
+  if(ctx.location?.directory)await check('Workflow measurements',async()=>formatMeasurements(projectMeasurements(ctx.location.directory,config)));
+  return {checks,modelCalls:0};
+ }
+ async function installTool(spec,signal){
+  const folder=path.join(root,'hybrid','tools');safeTarget(root,folder);mkdirSync(folder,{recursive:true,mode:0o700});
+  await runProcess('npm',['install','--prefix',folder,'--ignore-scripts','--no-audit','--no-fund',spec],folder,'',0,signal);
+  return folder;
+ }
+ return {get,diagnostics,
+  cliModels:(input,context={})=>{
+   if(!['astra','opus'].includes(input.who)||!['codex-cli','claude-cli'].includes(input.adapter))throw Error('Unknown reviewer connection.');
+   const previous=load().reviewers?.[input.who];
+   return discoverCLIModels(input.adapter,{executable:previous?.adapter===input.adapter?previous.executable:undefined,signal:context.signal});
+  },
+  save:input=>exclusive(async()=>{
+   if(input.revision!==revision(file))throw Error('Settings changed in another window. Reopen settings and try again.');
+   const patch=validateChoices(input,await catalog(),load());
+   // Recheck after catalog I/O; never overwrite another UI's saved defaults.
+   if(input.revision!==revision(file))throw Error('Settings changed in another window. Reopen settings and try again.');
+   const installed=persist({...patch,setupComplete:true});return {saved:true,preservedCustomFiles:installed.preservedCustomFiles,message:'Saved globally. New tasks use these reviewers; active tasks keep their assignments.'};
+  }),
+  browser:(input,context={})=>exclusive(async()=>{
+   if(input.action==='disable'){persist({reviewBrowser:{...load().reviewBrowser,enabled:false}});return {message:'Reviewer browser disabled for future calls.'};}
+   if(input.action==='enable'){
+    let setting=load().reviewBrowser;
+    if(!setting?.command){
+     const server=globalRead().mcp?.servers?.playwright;
+     if(server?.type!=='local'||!Array.isArray(server.command))throw Error('No installed browser found. Choose Install browser support in this menu.');
+     const stop=server.command.findIndex((x,i)=>i>0&&x.startsWith('--')),command=server.command.slice(0,stop<0?undefined:stop);
+     if(command.some(x=>/^(-y|install|add)$/.test(x)))throw Error('Browser uses on-demand downloads. Choose Install browser support for a managed installation.');
+     const pos=server.command.indexOf('--browser');setting={command,browser:pos>=0?server.command[pos+1]:'chrome',headless:true};
+    }
+    persist({reviewBrowser:{...setting,enabled:true}});return {message:'Browser support enabled.'};
+   }
+   if(input.action!=='install')throw Error('Unknown browser action.');
+   const folder=await installTool('@playwright/mcp@0.0.83',context.signal),node=commandSpec('node');
+   await runProcess(node.executable,[...node.args,path.join(folder,'node_modules','playwright','cli.js'),'install','firefox'],folder,'',0,context.signal);
+   const command=[node.executable,...node.args,path.join(folder,'node_modules','@playwright','mcp','cli.js')];
+   persist({reviewBrowser:{enabled:true,command,browser:'firefox',headless:true}});
+   patchGlobal(value=>{value.mcp??={};value.mcp.servers??={};value.mcp.servers.playwright??={type:'local',command:[...command,'--browser','firefox','--isolated','--headless'],enabled:true};});
+   return {message:'Playwright and Firefox installed. Reviewer browser enabled; implementation MCP configured unless one already existed.'};
+  }),
+  dependencies:(input,context={})=>exclusive(async()=>{
+   if(input.action==='pnpm'){
+    const folder=await installTool('pnpm@12.14.0',context.signal);
+    // pnpm 12 ships a native binary; only run this explicitly selected package's
+    // installer, then verify it before saving a working executable.
+    const node=commandSpec('node'),packageFolder=path.join(folder,'node_modules','pnpm');
+    await runProcess(node.executable,[...node.args,path.join(packageFolder,'install.js')],folder,'',0,context.signal);
+    const executable=path.join(packageFolder,process.platform==='win32'?'pnpm.exe':'pnpm');
+    await runProcess(executable,['--version'],folder,'',15000,context.signal);
+    persist({verification:{...load().verification,executable}});
+    return {message:'Managed pnpm installed for hybrid verification. Project-required versions still take precedence.'};
+   }
+   if(input.action==='context7'){
+    patchGlobal(value=>{value.mcp??={};value.mcp.servers??={};value.mcp.servers.context7??={type:'remote',url:'https://mcp.context7.com/mcp',enabled:true};});
+    return {message:'Context7 documentation MCP configured. Any existing configuration was preserved.'};
+   }
+   throw Error('Unknown dependency.');
+  }),
+ };
+}
+export async function registerSettings(ctx,options){
+ const service=createSettingsService(ctx,options);
+ // Expected setup errors must reach the dialog, not become opaque HTTP defects.
+ const handlers=Object.fromEntries(Object.entries(service).map(([name,fn])=>[name,async(...args)=>{try{return await fn(...args);}catch(error){return {error:{message:error.message}};}}]));
+ await ctx.rpc.register(SettingsRPC,handlers);return service;
+}