@simplium/hive 4.0.0 → 4.2.0

package/dist/opencode/plugins/hive-log.js

@@ -0,0 +1,110 @@
+/**
+ * HIVE traceability plugin for OpenCode (parity with the Claude Code hook).
+ *
+ * Auto-loaded from .opencode/plugins/. When a HIVE agent runs as a subagent
+ * via the `task` tool, appends:
+ *   - a row to HIVE-LOG.md              (ISO 42001 A.9 audit trail)
+ *   - a line to .opencode/hive-events.jsonl  (machine-readable event stream)
+ *
+ * Design constraints (same as the CC hook):
+ *   - Zero dependencies (node:fs/node:path only — Bun supports node: imports).
+ *   - Never throws: a logging plugin must never break the tool flow.
+ *   - Only logs HIVE agents (version stamp check in the adapter file).
+ *
+ * Implementation note: `tool.execute.before` receives the tool args
+ * (input.tool + output.args, per opencode.ai/docs/plugins); the args are
+ * captured per callID there and the log row is written on
+ * `tool.execute.after` (completion), so we don't depend on the undocumented
+ * shape of the after-payload. Tool id and arg names (`task`, `subagent_type`,
+ * `description`) verified against sst/opencode source (src/tool/task.ts).
+ */
+
+import { readFileSync, writeFileSync, appendFileSync, existsSync, mkdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+
+const LOG_HEADER = `# HIVE Session Log
+
+AI agent invocation log for traceability (ISO 42001 A.9 — logging of AI decision-making events).
+
+Rows are appended automatically by the HIVE hook (Claude Code) / plugin (OpenCode).
+Manual fallback: \`npm run log-session -- --agent <name> --task "..." --outcome COMPLETED|PARTIAL|FAILED [--tokens N]\`
+
+| Date | Agent | Task | Outcome | Tokens |
+|------|-------|------|---------|--------|
+`;
+
+function sanitizeCell(text, maxLen = 120) {
+  return String(text ?? "")
+    .replace(/\s+/g, " ")
+    .replace(/\|/g, "\\|")
+    .trim()
+    .slice(0, maxLen);
+}
+
+function isHiveAgent(projectDir, agent) {
+  if (!agent || !/^[a-z][a-z0-9-]*$/.test(agent)) return false;
+  for (const rel of [join(".opencode", "agents"), join(".claude", "agents")]) {
+    const p = join(projectDir, rel, `${agent}.md`);
+    if (existsSync(p) && readFileSync(p, "utf-8").slice(0, 2000).includes("HIVE Framework v")) return true;
+  }
+  return false;
+}
+
+function logInvocation(projectDir, agent, task) {
+  const date = new Date().toISOString().split("T")[0];
+  const row = `| ${date} | ${agent} | ${sanitizeCell(task)} | COMPLETED | — |`;
+
+  const logPath = join(projectDir, "HIVE-LOG.md");
+  if (existsSync(logPath)) {
+    writeFileSync(logPath, readFileSync(logPath, "utf-8").trimEnd() + "\n" + row + "\n", "utf-8");
+  } else {
+    writeFileSync(logPath, LOG_HEADER + row + "\n", "utf-8");
+  }
+
+  const eventsPath = join(projectDir, ".opencode", "hive-events.jsonl");
+  mkdirSync(dirname(eventsPath), { recursive: true });
+  appendFileSync(
+    eventsPath,
+    JSON.stringify({
+      ts: new Date().toISOString(),
+      event: "hive_agent_invocation",
+      agent,
+      task: sanitizeCell(task),
+      runtime: "opencode",
+    }) + "\n",
+    "utf-8",
+  );
+}
+
+export const HiveLogPlugin = async ({ directory }) => {
+  const projectDir = directory || process.cwd();
+  const pending = new Map(); // callID → { agent, task }
+
+  return {
+    "tool.execute.before": async (input, output) => {
+      try {
+        if (input?.tool !== "task") return;
+        const args = output?.args ?? {};
+        const agent = args.subagent_type;
+        if (!isHiveAgent(projectDir, agent)) return;
+        const key = input?.callID ?? `${agent}:${Date.now()}`;
+        pending.set(key, { agent, task: args.description || args.prompt || "—" });
+      } catch {
+        // never break the tool flow
+      }
+    },
+
+    "tool.execute.after": async (input) => {
+      try {
+        if (input?.tool !== "task") return;
+        const key = input?.callID;
+        const entry = key !== undefined && pending.has(key) ? pending.get(key) : null;
+        if (key !== undefined) pending.delete(key);
+        if (!entry) return;
+        logInvocation(projectDir, entry.agent, entry.task);
+      } catch {
+        // never break the tool flow
+      }
+    },
+  };
+};

package/hooks/opencode-hive-log.d.ts

@@ -0,0 +1,21 @@
+/** Type declarations for the OpenCode traceability plugin (see .js for docs). */
+
+export interface OcToolInput {
+  tool?: string;
+  callID?: string;
+}
+
+export interface OcToolOutput {
+  args?: Record<string, unknown>;
+}
+
+export interface OcPluginContext {
+  directory?: string;
+}
+
+export interface OcHooks {
+  "tool.execute.before": (input: OcToolInput, output: OcToolOutput) => Promise<void>;
+  "tool.execute.after": (input: OcToolInput) => Promise<void>;
+}
+
+export function HiveLogPlugin(ctx: OcPluginContext): Promise<OcHooks>;

package/hooks/opencode-hive-log.js

@@ -0,0 +1,110 @@
+/**
+ * HIVE traceability plugin for OpenCode (parity with the Claude Code hook).
+ *
+ * Auto-loaded from .opencode/plugins/. When a HIVE agent runs as a subagent
+ * via the `task` tool, appends:
+ *   - a row to HIVE-LOG.md              (ISO 42001 A.9 audit trail)
+ *   - a line to .opencode/hive-events.jsonl  (machine-readable event stream)
+ *
+ * Design constraints (same as the CC hook):
+ *   - Zero dependencies (node:fs/node:path only — Bun supports node: imports).
+ *   - Never throws: a logging plugin must never break the tool flow.
+ *   - Only logs HIVE agents (version stamp check in the adapter file).
+ *
+ * Implementation note: `tool.execute.before` receives the tool args
+ * (input.tool + output.args, per opencode.ai/docs/plugins); the args are
+ * captured per callID there and the log row is written on
+ * `tool.execute.after` (completion), so we don't depend on the undocumented
+ * shape of the after-payload. Tool id and arg names (`task`, `subagent_type`,
+ * `description`) verified against sst/opencode source (src/tool/task.ts).
+ */
+
+import { readFileSync, writeFileSync, appendFileSync, existsSync, mkdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+
+const LOG_HEADER = `# HIVE Session Log
+
+AI agent invocation log for traceability (ISO 42001 A.9 — logging of AI decision-making events).
+
+Rows are appended automatically by the HIVE hook (Claude Code) / plugin (OpenCode).
+Manual fallback: \`npm run log-session -- --agent <name> --task "..." --outcome COMPLETED|PARTIAL|FAILED [--tokens N]\`
+
+| Date | Agent | Task | Outcome | Tokens |
+|------|-------|------|---------|--------|
+`;
+
+function sanitizeCell(text, maxLen = 120) {
+  return String(text ?? "")
+    .replace(/\s+/g, " ")
+    .replace(/\|/g, "\\|")
+    .trim()
+    .slice(0, maxLen);
+}
+
+function isHiveAgent(projectDir, agent) {
+  if (!agent || !/^[a-z][a-z0-9-]*$/.test(agent)) return false;
+  for (const rel of [join(".opencode", "agents"), join(".claude", "agents")]) {
+    const p = join(projectDir, rel, `${agent}.md`);
+    if (existsSync(p) && readFileSync(p, "utf-8").slice(0, 2000).includes("HIVE Framework v")) return true;
+  }
+  return false;
+}
+
+function logInvocation(projectDir, agent, task) {
+  const date = new Date().toISOString().split("T")[0];
+  const row = `| ${date} | ${agent} | ${sanitizeCell(task)} | COMPLETED | — |`;
+
+  const logPath = join(projectDir, "HIVE-LOG.md");
+  if (existsSync(logPath)) {
+    writeFileSync(logPath, readFileSync(logPath, "utf-8").trimEnd() + "\n" + row + "\n", "utf-8");
+  } else {
+    writeFileSync(logPath, LOG_HEADER + row + "\n", "utf-8");
+  }
+
+  const eventsPath = join(projectDir, ".opencode", "hive-events.jsonl");
+  mkdirSync(dirname(eventsPath), { recursive: true });
+  appendFileSync(
+    eventsPath,
+    JSON.stringify({
+      ts: new Date().toISOString(),
+      event: "hive_agent_invocation",
+      agent,
+      task: sanitizeCell(task),
+      runtime: "opencode",
+    }) + "\n",
+    "utf-8",
+  );
+}
+
+export const HiveLogPlugin = async ({ directory }) => {
+  const projectDir = directory || process.cwd();
+  const pending = new Map(); // callID → { agent, task }
+
+  return {
+    "tool.execute.before": async (input, output) => {
+      try {
+        if (input?.tool !== "task") return;
+        const args = output?.args ?? {};
+        const agent = args.subagent_type;
+        if (!isHiveAgent(projectDir, agent)) return;
+        const key = input?.callID ?? `${agent}:${Date.now()}`;
+        pending.set(key, { agent, task: args.description || args.prompt || "—" });
+      } catch {
+        // never break the tool flow
+      }
+    },
+
+    "tool.execute.after": async (input) => {
+      try {
+        if (input?.tool !== "task") return;
+        const key = input?.callID;
+        const entry = key !== undefined && pending.has(key) ? pending.get(key) : null;
+        if (key !== undefined) pending.delete(key);
+        if (!entry) return;
+        logInvocation(projectDir, entry.agent, entry.task);
+      } catch {
+        // never break the tool flow
+      }
+    },
+  };
+};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@simplium/hive",
-  "version": "4.0.0",
-  "description": "Multi-agent AI framework for software development — 36 specialized agents, NestJS runtime, evidence-based validation, MCP integration",
+  "version": "4.2.0",
+  "description": "Agent governance layer — 36 curated agent & skill definitions with portable permission translation, traceability and anti-fabrication discipline for Claude Code and OpenCode",
   "license": "Apache-2.0",
   "author": "José (Simplium.io) <servicios@simplium.io>",
   "homepage": "https://github.com/marcablanca/hive-framework#readme",