@softspark/ai-toolkit 2.5.0 → 2.6.1

package/AGENTS.md

@@ -86,7 +86,7 @@ Legacy code investigation and understanding specialist. Trigger words: legacy co
 
 Code review and security audit expert. Use for security reviews, Devil's Advocate analysis, quality audits, best practices validation. Triggers: review, security, audit, quality, best practices, vulnerability.
 
-**Tools:** `Read, Edit`
+**Tools:** `Read, Edit, Grep, Glob`
 
 ---
 

package/CHANGELOG.md

@@ -7,6 +7,40 @@ Versioning follows [Semantic Versioning](https://semver.org/).
 
 ---
 
+## v2.6.1 — HIPAA Scanner Precision (2026-04-17)
+
+### Changed
+- **`hipaa-validate` Cat 3 regexes tightened to cut false positives** — `CERT_NONE` → `ssl\.CERT_NONE` (module-anchored, no longer matches constants like `USE_CERT_NONE_MODE`); `ssl\s*=\s*False` → `[,(]\s*ssl\s*=\s*False\b` (argument-position anchored, no longer matches feature flags like `is_ssl_enabled = False`).
+- **`SECURE_SSL_REDIRECT = False` severity HIGH → WARN** — commonly `False` in dev/local Django settings; compliance reviewer must confirm production config.
+- **Cat 1 Python logger patterns merged** — three overlapping regexes (`logging.*`, `logger.*`, `pprint.*`) collapsed into one `(logging|logger|pprint)\.\w+\(...` pattern; eliminates duplicate findings on the same line.
+- **SQLAlchemy session data-op regexes word-anchored** in Cat 2 and Cat 5 (`\bsession.(query|add|execute|delete|merge)\b`) — prevents false matches on unrelated identifiers.
+
+### Added
+- **`LANG_EXTENSIONS` file-extension filter** in `scripts/hipaa_scan.py` — language-tagged patterns now fire only when the file's extension matches the tag. Eliminates cross-language double-flagging (e.g. Python `logger.\w+` regex no longer triggers on `.java` files in mixed projects).
+- **`tests/test_hipaa_scan.bats`** — 11 fixture-driven tests covering Python positive/negative cases for the new patterns and the cross-language isolation guarantee. Test count: 647 → 658.
+
+---
+
+## v2.6.0 — opencode Integration (2026-04-15)
+
+### Added
+- **opencode editor support** — `ai-toolkit install --editors opencode` generates a full native integration: `AGENTS.md` (shared with Codex via distinct marker sections), `.opencode/agents/ai-toolkit-*.md` (44 subagents), `.opencode/commands/ai-toolkit-*.md` (62 slash commands), `.opencode/plugins/ai-toolkit-hooks.js` (JS plugin bridging Bash hooks to opencode lifecycle events), and `opencode.json` with MCP servers merged from `.mcp.json`.
+- **Global opencode configs** — `ai-toolkit install --editors opencode` (without `--local`) installs the **complete surface** to `~/.config/opencode/{AGENTS.md, agents/, commands/, plugins/ai-toolkit-hooks.js, opencode.json}`. Tracked in `state.json`, auto-refreshed on `update`. (Earlier pre-release iteration shipped only AGENTS.md/agents/commands globally; plugin and opencode.json are now also installed globally so hooks and MCP work without `--local`.)
+- **Expanded hook coverage** — plugin now bridges `session.compacted` → `pre-compact.sh` + `pre-compact-save.sh`, `permission.asked` → `guard-destructive.sh`, and `command.executed` → `post-tool-use.sh` on top of the original session/tool/message events. Maximises opencode lifecycle coverage without introducing new Bash hooks.
+- **Auto-detection** — projects with `opencode.json` or `.opencode/` are detected by `ai-toolkit install --local` (no explicit `--editors` needed).
+- **MCP translation** — `generate_opencode_json.py` translates Claude-style `.mcp.json` into opencode's `mcp` shape (local `command` + args flattened, remote `url` + headers preserved, `enabled: true` default). User-authored keys in `opencode.json` are preserved; re-runs are idempotent.
+- **New CLI commands** — `ai-toolkit opencode-md`, `opencode-agents`, `opencode-commands`, `opencode-plugin`, `opencode-json`. Included in `generate-all`.
+- **Skill reuse** — opencode reuses the Codex skill adapter (`codex_skill_adapter.py`) for Claude-only orchestration primitives since both lack `Agent`/`TeamCreate`/`TaskCreate` — no duplication.
+
+### Changed
+- README `What's New`, package.json description, manifest.json, and `app/.claude-plugin/plugin.json` all list opencode as a supported editor.
+- **Plugin exports** — `.opencode/plugins/ai-toolkit-hooks.js` now uses a single named export (`AiToolkitHooks`) per opencode spec. The prior redundant `export default` was removed.
+- **Agent frontmatter** — `model` field and source-model-hint comment are no longer emitted because opencode requires `provider/model-id` format, which ai-toolkit does not store. opencode falls back to the user's configured default model.
+- **Global install layout fix** — global generators now write directly under `~/.config/opencode/{agents,commands,plugins}/` instead of the incorrect `~/.config/opencode/.opencode/…` nesting. Generators accept a `config_root` parameter to distinguish project vs global layout.
+- **Test suite** — grew from 641 to 647 tests covering new event bridges, named-export invariant, missing-source-model-hint regression, and global-layout contract.
+
+---
+
 ## v2.5.0 — Community Skills, Automated Scanners & Design Craft (2026-04-15)
 
 ### Added

package/README.md

@@ -1,15 +1,29 @@
 # ai-toolkit
 
-> Professional-grade AI coding toolkit with multi-platform support. Machine-enforced safety, 94 skills, 44 agents, expanded lifecycle hooks, persona presets, experimental opt-in plugin packs, and benchmark tooling — works with Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo Code, Aider, Augment, Google Antigravity, and Codex CLI, ready in 60 seconds.
+> Professional-grade AI coding toolkit with multi-platform support. Machine-enforced safety, 94 skills, 44 agents, expanded lifecycle hooks, persona presets, experimental opt-in plugin packs, and benchmark tooling — works with Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo Code, Aider, Augment, Google Antigravity, Codex CLI, and opencode, ready in 60 seconds.
 
 [![CI](https://github.com/softspark/ai-toolkit/actions/workflows/ci.yml/badge.svg)](https://github.com/softspark/ai-toolkit/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Skills](https://img.shields.io/badge/skills-94-brightgreen)](app/skills/)
 [![Agents](https://img.shields.io/badge/agents-44-blue)](app/agents/)
-[![Tests](https://img.shields.io/badge/tests-618%20passing-success)](tests/)
+[![Tests](https://img.shields.io/badge/tests-658%20passing-success)](tests/)
 
 ---
 
+## What's New in v2.6.1
+
+- **HIPAA scanner precision** — Cat 3 TLS regexes anchored (`ssl.CERT_NONE`, `[,(] ssl=False`) to eliminate false positives on feature flags and constant names
+- **Cross-language isolation** — new `LANG_EXTENSIONS` filter ensures Python regexes don't match `.java` files in mixed projects, and vice versa
+- **`SECURE_SSL_REDIRECT = False` HIGH → WARN** — commonly False in dev settings; reviewer confirms prod config instead of flooding every Django project with HIGH findings
+- **11 new bats tests** (`tests/test_hipaa_scan.bats`) — fixture-driven positive/negative cases covering the Python pattern expansion and isolation guarantee. Test count: 647 → 658
+
+## What's New in v2.6.0
+
+- **opencode integration** — `ai-toolkit install --editors opencode` generates `AGENTS.md`, `.opencode/agents/`, `.opencode/commands/`, plus a JS plugin bridging our Bash hooks to opencode's lifecycle events
+- **opencode MCP merge** — `.mcp.json` servers are translated into `opencode.json` under the `mcp` key, preserving user-authored entries
+- **Global opencode configs** — `~/.config/opencode/{AGENTS.md,agents/,commands/}` managed from `state.json`, auto-refreshed on `update`
+- **Shared AGENTS.md** — opencode and Codex CLI both read the same `AGENTS.md` via distinct marker sections; installing both does not clobber either
+
 ## What's New in v2.5.0
 
 - **`/seo-validate`** — 9-category SEO scanner with automated `seo-scanner.py` script (community contribution)
@@ -107,6 +121,7 @@ See [CLI Reference](kb/reference/cli-reference.md) for all commands and options.
 | Augment | `.augment/rules/ai-toolkit-*.md` | project |
 | Google Antigravity | `.agent/rules/*.md` + `.agent/workflows/*.md` | project |
 | Codex CLI | `AGENTS.md` + `.agents/rules/*.md` + `.agents/skills/*` + `.codex/hooks.json` | project + global plugin |
+| opencode | `AGENTS.md` + `.opencode/{agents,commands,plugins}/*` + `opencode.json` | project + global (`~/.config/opencode/`) |
 
 > Claude Code is always installed (primary platform). Other editors on demand with `--editors`. All platforms receive the same agent/skill catalog, guidelines, and registered custom rules.
 
@@ -143,7 +158,7 @@ ai-toolkit/
 │   └── ARCHITECTURE.md  # Full system design
 ├── kb/                  # Reference docs, procedures, plans
 ├── scripts/             # Validation, install, evaluation scripts
-├── tests/               # Bats test suite (618 tests)
+├── tests/               # Bats test suite (658 tests)
 └── CHANGELOG.md
 ```
 
@@ -267,6 +282,7 @@ Need multi-agent coordination?
 | Distribution Model | [kb/reference/distribution-model.md](kb/reference/distribution-model.md) |
 | Ecosystem Comparison | [kb/reference/comparison.md](kb/reference/comparison.md) |
 | Codex CLI Compatibility | [kb/reference/codex-cli-compatibility.md](kb/reference/codex-cli-compatibility.md) |
+| opencode Compatibility | [kb/reference/opencode-compatibility.md](kb/reference/opencode-compatibility.md) |
 | Maintenance SOP | [kb/procedures/maintenance-sop.md](kb/procedures/maintenance-sop.md) |
 
 ---

package/app/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ai-toolkit",
   "description": "Professional-grade Claude Code toolkit with persona presets, skill security auditor, expanded lifecycle hooks, experimental opt-in plugin packs, benchmark harvesting, and multi-tool support.",
-  "version": "2.5.0",
+  "version": "2.6.1",
   "author": {
     "name": "SoftSpark",
     "url": "https://github.com/softspark"
@@ -30,7 +30,8 @@
     "skills",
     "agents",
     "cursor",
-    "codex"
+    "codex",
+    "opencode"
   ],
   "marketplace": {
     "category": "developer-tools",

package/app/ARCHITECTURE.md

@@ -309,6 +309,17 @@ Lead Session (You)
 
 Language rules are propagated to **all configured editors** — not just Claude. `dir_rules_shared.build_language_rules()` reads `app/rules/<lang>/*.md`, strips frontmatter, and returns combined content per language. Each directory-based generator (Cursor, Windsurf, Cline, Roo, Augment, Antigravity, Codex) emits `ai-toolkit-lang-<lang>` files in its native format. Registered custom rules (`~/.softspark/ai-toolkit/rules/`) are similarly propagated as `ai-toolkit-custom-<name>` files via `build_registered_rules()`.
 
+### opencode Integration (v2.5.0+)
+opencode is the 11th supported editor. Five generators handle its integration surface:
+
+- `generate_opencode.py` → `AGENTS.md` body (shared with Codex; separate marker section prevents clobbering).
+- `generate_opencode_agents.py` → `.opencode/agents/ai-toolkit-*.md` (one per ai-toolkit agent, `mode: subagent`).
+- `generate_opencode_commands.py` → `.opencode/commands/ai-toolkit-*.md` (one per user-invocable skill, uses required `template: |` field; knowledge-only skills excluded).
+- `generate_opencode_plugin.py` → `.opencode/plugins/ai-toolkit-hooks.js` (single named export `AiToolkitHooks`; bridges `session.created`, `session.compacted`, `session.deleted`, `message.updated/part.updated`, `tool.execute.before/after`, `permission.asked`, `command.executed` to the shared Bash hooks in `~/.softspark/ai-toolkit/hooks/` via Bun `$` — script path bound as a JS constant, payload on stdin, no shell interpolation).
+- `generate_opencode_json.py` → `opencode.json` MCP merge (translates `.mcp.json` local/remote shapes; preserves user-authored keys; idempotent).
+
+All five generators accept a `config_root` / `output_path` parameter so the same code path handles project-local (`./.opencode/…`) and global (`~/.config/opencode/…`, no `.opencode/` nesting) layouts. Skill adaptation for Claude-only orchestration primitives (`Agent`/`TeamCreate`/`TaskCreate`) is handled by reusing `codex_skill_adapter.py` — opencode, like Codex CLI, lacks these primitives, so the same translation layer applies (no duplication). Global install: `~/.config/opencode/{AGENTS.md,agents/,commands/,plugins/,opencode.json}`. Auto-detection markers: `opencode.json`, `.opencode/`, `.opencode/agents`, `.opencode/commands`.
+
 ### Extension API (`inject-hook`, `inject-rule`)
 The `inject_section_cli.py` script provides a stable marker-based injection API. Any tool can add sections to `CLAUDE.md`, `constitution.md`, or `ARCHITECTURE.md` without overwriting user content, using `<!-- TOOLKIT:START:<id> -->` / `<!-- TOOLKIT:END:<id> -->` markers. `inject_hook_cli.py` injects hooks into `settings.json` with `_source` tags — supports both local files and HTTPS URLs (cached in `~/.softspark/ai-toolkit/hooks/external/`, auto-refreshed on `update`). Shared URL fetch logic lives in `url_fetch.py`.
 

package/app/skills/hipaa-validate/SKILL.md

@@ -100,7 +100,11 @@ Scan the full project for log/print statements that reference PHI keywords.
 | `console\.\w+\(.*req\.body` | WARN | JS/TS | Raw request body may contain PHI |
 | `JSON\.stringify\(.*patient` | WARN | JS/TS | Full patient object serialization |
 | `print\(.*\b(patient\|ssn\|social.security)` | HIGH | Python | PHI in print statements |
-| `logging\.\w+\(.*\b(patient\|ssn\|mrn\|dob)` | HIGH | Python | PHI fields in logger calls |
+| `(logging\|logger\|pprint)\.\w+\(.*\b(patient\|ssn\|mrn\|dob)` | HIGH | Python | PHI in logger/named logger/pprint output |
+| `print\(.*request\.(data\|json\|form\|POST\|body)` | WARN | Python | Raw request body may contain PHI (Django/Flask/FastAPI) |
+| `(logging\|logger)\.\w+\(.*request\.(data\|json\|form\|POST\|body)` | WARN | Python | Raw request body in logger |
+| `\brepr\(.*\b(patient\|ssn\|mrn)` | WARN | Python | repr() may expose PHI fields |
+| `\bvars\(.*\b(patient\|ssn\|mrn)` | WARN | Python | vars() dumps all PHI fields |
 | `fmt\.Print.*\b(patient\|ssn\|mrn)` | HIGH | Go | PHI in fmt output |
 | `log\.\w+\(.*\b(patient\|ssn\|mrn)` | HIGH | Go/Any | PHI in log calls |
 | `System\.out\.print.*\b(patient\|ssn\|mrn)` | HIGH | Java | PHI in stdout |
@@ -110,7 +114,7 @@ Scan the full project for log/print statements that reference PHI keywords.
 | `Console\.Write.*\b(patient\|ssn\|mrn)` | HIGH | C# | PHI in Console output |
 | `_logger\.\w+\(.*\b(patient\|ssn\|mrn\|dob)` | HIGH | C# | PHI in ILogger calls |
 
-> **Language coverage note**: JS/TS patterns are the most comprehensive. Go, Ruby, and Java have baseline coverage for common log patterns. Contributions for additional language-specific patterns are welcome.
+> **Language coverage note**: JS/TS and Python patterns are the most comprehensive. Go, Ruby, and Java have baseline coverage for common log patterns. Contributions for additional language-specific patterns are welcome.
 
 **Minimum Necessary violations** (§164.502(b)):
 
@@ -135,7 +139,7 @@ Scan the full project for files that handle PHI data operations but lack audit-r
 
 **PHI route file definition**: A file qualifies if it contains BOTH:
 1. A healthcare keyword from Step 0 (`patient`, `diagnosis`, `medication`, etc.)
-2. A data operation pattern: `router`, `app.get`, `app.post`, `app.put`, `app.delete`, `@RequestMapping`, `@GetMapping`, `@PostMapping`, `@PutMapping`, `@DeleteMapping`, `Model.find`, `Model.save`, `Model.update`, `db.query`, `db.execute`, `cursor.execute`, `repository.`, `findBy`, `save(`, `delete(`
+2. A data operation pattern: `router`, `app.get`, `app.post`, `app.put`, `app.delete`, `@RequestMapping`, `@GetMapping`, `@PostMapping`, `@PutMapping`, `@DeleteMapping`, `Model.find`, `Model.save`, `Model.update`, `db.query`, `db.execute`, `cursor.execute`, `repository.`, `findBy`, `save(`, `delete(`, `@app.route`, `@blueprint.route`, `@api_view`, `ViewSet`, `APIView`, `\bsession.(query|add|execute|delete|merge)\b` (word-anchored — SQLAlchemy only, avoids matching Express `req.session.save`)
 
 Files with a healthcare keyword but no data operation pattern are excluded.
 
@@ -158,13 +162,20 @@ See: [reference/hipaa-rules.md](reference/hipaa-rules.md) §164.312(b) for audit
 
 *Context-gated: scans PHI-adjacent files only.*
 
-| Pattern | Severity | Description |
-|---------|----------|-------------|
-| `http://` in API calls (not `localhost`/`127.0.0.1`) | HIGH | §164.312(e)(1) requires encryption in transit |
-| Missing TLS/SSL config in database connections | HIGH | Database connections must be encrypted |
-| `rejectUnauthorized:\s*false` | HIGH | TLS verification disabled |
-| `ws://` (WebSocket without TLS) | WARN | Unencrypted WebSocket may carry PHI |
-| Email sending without TLS config | WARN | PHI in email must use TLS |
+| Pattern | Severity | Language | Description |
+|---------|----------|----------|-------------|
+| `http://` in API calls (not `localhost`/`127.0.0.1`) | HIGH | Any | §164.312(e)(1) requires encryption in transit |
+| Missing TLS/SSL config in database connections | HIGH | Any | Database connections must be encrypted |
+| `rejectUnauthorized:\s*false` | HIGH | Any | TLS verification disabled |
+| `ws://` (WebSocket without TLS) | WARN | Any | Unencrypted WebSocket may carry PHI |
+| `verify\s*=\s*False` | HIGH | Python | TLS verification disabled (requests/httpx) |
+| `InsecureRequestWarning` | WARN | Python | TLS warning suppressed |
+| `[,(]\s*ssl\s*=\s*False\b` | HIGH | Python | SSL disabled in connector call (anchored to arg position to avoid matching `is_ssl_enabled = False`) |
+| `ssl\.CERT_NONE` | HIGH | Python | TLS certificate verification disabled (anchored to `ssl.` module) |
+| `check_hostname\s*=\s*False` | HIGH | Python | TLS hostname verification disabled |
+| `urllib3\.disable_warnings` | WARN | Python | TLS warnings suppressed (urllib3) |
+| `SECURE_SSL_REDIRECT\s*=\s*False` | WARN | Python | Django HTTPS redirect disabled (commonly False in dev settings — verify production config) |
+| `NODE_TLS_REJECT_UNAUTHORIZED.*0` | HIGH | JS/TS | TLS rejection disabled globally |
 
 See: [reference/hipaa-rules.md](reference/hipaa-rules.md) §164.312(e)(1) for transmission security requirements.
 
@@ -194,13 +205,16 @@ See: [reference/phi-identifiers.md](reference/phi-identifiers.md) for the full l
 
 *Context-gated: scans PHI-adjacent files only. Heuristic — flags potential gaps.*
 
-**Auth keywords** (co-occurrence check): `auth`, `authenticate`, `requireAuth`, `isAuthenticated`, `protect`, `guard`, `Authorize`, `login_required`, `Permission`
+**Auth keywords** (co-occurrence check): `auth`, `authenticate`, `requireAuth`, `isAuthenticated`, `protect`, `guard`, `Authorize`, `login_required`, `Permission`, `permission_required`, `LoginRequiredMixin`, `PermissionRequiredMixin`, `IsAuthenticated`, `Depends`, `Security`
 
-| Pattern | Severity | Description |
-|---------|----------|-------------|
-| PHI route file without any auth keywords in same file | WARN | POTENTIAL access control gap — verify auth middleware covers these routes (§164.312(d)) |
-| `Access-Control-Allow-Origin:\s*\*` or `origin:\s*(true\|\*)` in PHI-adjacent files | HIGH | Unrestricted cross-origin access to PHI endpoints |
-| Routes marked `public`, `noAuth`, `anonymous` exposing PHI keywords | HIGH | PHI must require authentication |
+**Data operation patterns** (Python frameworks): `@app.route`, `@blueprint.route`, `@api_view`, `ViewSet`, `APIView`, `cursor.execute`, `\bsession.(query|execute)\b` (word-anchored — SQLAlchemy only)
+
+| Pattern | Severity | Language | Description |
+|---------|----------|----------|-------------|
+| PHI route file without any auth keywords in same file | WARN | Any | POTENTIAL access control gap — verify auth middleware covers these routes (§164.312(d)) |
+| `Access-Control-Allow-Origin:\s*\*` or `origin:\s*(true\|\*)` in PHI-adjacent files | HIGH | Any | Unrestricted cross-origin access to PHI endpoints |
+| Routes marked `public`, `noAuth`, `anonymous` exposing PHI keywords | HIGH | Any | PHI must require authentication |
+| `permission_classes\s*=.*AllowAny` | WARN | Python | DRF AllowAny — verify no PHI exposed |
 
 > **Note**: Auth middleware is commonly applied at router-level or app-level. The co-occurrence heuristic checks the same file only. False positives expected when auth is configured globally. Use `.hipaaignore` to suppress.
 
@@ -253,13 +267,15 @@ Instead of per-finding rows, emit a single **BAA Verification Checklist** in the
 
 Detects PHI storage patterns without encryption references. Per §164.312(a)(2)(iv), ePHI must be encrypted when stored.
 
-| Pattern | Severity | Description |
-|---------|----------|-------------|
-| `encrypt\s*[:=]\s*false` in database config files | HIGH | §164.312(a)(2)(iv) — Encryption explicitly disabled |
-| File write operations (`writeFile`, `fs.write`, `open(.*w`, `File.Create`) in PHI-adjacent code without encryption references | WARN | PHI written to disk may lack encryption at rest |
-| Database connection without `ssl`, `encrypt`, or `tls` keywords in PHI-adjacent config | WARN | Database storing PHI should enforce encrypted connections |
-| `localStorage.setItem` or `sessionStorage.setItem` with PHI keywords | HIGH | Browser storage is unencrypted — PHI must not be stored client-side without encryption |
-| `SharedPreferences` or `UserDefaults` with PHI keywords | HIGH | Mobile local storage is unencrypted by default |
+| Pattern | Severity | Language | Description |
+|---------|----------|----------|-------------|
+| `encrypt\s*[:=]\s*false` in database config files | HIGH | Any | §164.312(a)(2)(iv) — Encryption explicitly disabled |
+| File write operations (`writeFile`, `fs.write`, `open(.*w`, `File.Create`) in PHI-adjacent code without encryption references | WARN | Any | PHI written to disk may lack encryption at rest |
+| Database connection without `ssl`, `encrypt`, or `tls` keywords in PHI-adjacent config | WARN | Any | Database storing PHI should enforce encrypted connections |
+| `localStorage.setItem` or `sessionStorage.setItem` with PHI keywords | HIGH | JS/TS | Browser storage is unencrypted — PHI must not be stored client-side without encryption |
+| `SharedPreferences` or `UserDefaults` with PHI keywords | HIGH | Java/Any | Mobile local storage is unencrypted by default |
+| `pickle\.(dump\|dumps)\(` with PHI keywords | HIGH | Python | pickle serialization is unencrypted — PHI must be encrypted at rest |
+| `shelve\.open\(` with PHI keywords | HIGH | Python | shelve storage is unencrypted — PHI must be encrypted at rest |
 
 See: [reference/hipaa-rules.md](reference/hipaa-rules.md) §164.312(a)(2)(iv) for encryption requirements.
 

package/app/skills/hipaa-validate/scripts/hipaa_scan.py

@@ -62,6 +62,19 @@ LANGUAGE_INDICATORS = {
     "*.csproj": "csharp",
 }
 
+# Map language tag to file extensions. Used by scan_patterns to avoid
+# cross-language double-flagging when the same regex is valid for more
+# than one language (e.g. `logger.info(...)` in Python vs Java).
+LANG_EXTENSIONS = {
+    "js": {".js", ".jsx", ".mjs", ".cjs", ".ts", ".tsx"},
+    "ts": {".ts", ".tsx"},
+    "python": {".py", ".pyi"},
+    "java": {".java", ".kt", ".scala"},
+    "go": {".go"},
+    "ruby": {".rb", ".erb"},
+    "csharp": {".cs"},
+}
+
 # ---------------------------------------------------------------------------
 # Pattern definitions per category
 # ---------------------------------------------------------------------------
@@ -72,9 +85,15 @@ CAT1_PATTERNS = [
     (r"console\.log\(.*patient", "HIGH", "js", "Patient data in console.log", "1"),
     (r"console\.\w+\(.*req\.body", "WARN", "js", "Raw request body may contain PHI", "1"),
     (r"JSON\.stringify\(.*patient", "WARN", "js", "Full patient object serialization", "1"),
-    # Python
+    # Python (logger pattern covers logging.*, logger.*, and pprint.* in one regex
+    # to avoid overlapping findings and double-flag with the Java `logger.` pattern.
+    # Language is enforced by file extension via LANG_EXTENSIONS.)
     (r"print\(.*\b(patient|ssn|social.security)", "HIGH", "python", "PHI in print statement", "1"),
-    (r"logging\.\w+\(.*\b(patient|ssn|mrn|dob)", "HIGH", "python", "PHI fields in logger", "1"),
+    (r"(logging|logger|pprint)\.\w+\(.*\b(patient|ssn|mrn|dob)", "HIGH", "python", "PHI in Python logger/pprint", "1"),
+    (r"print\(.*request\.(data|json|form|POST|body)", "WARN", "python", "Raw request body may contain PHI", "1"),
+    (r"(logging|logger)\.\w+\(.*request\.(data|json|form|POST|body)", "WARN", "python", "Raw request body in logger", "1"),
+    (r"\brepr\(.*\b(patient|ssn|mrn)", "WARN", "python", "repr() may expose PHI fields", "1"),
+    (r"\bvars\(.*\b(patient|ssn|mrn)", "WARN", "python", "vars() dumps all PHI fields", "1"),
     # Go
     (r"fmt\.Print.*\b(patient|ssn|mrn)", "HIGH", "go", "PHI in fmt output", "1"),
     (r"log\.\w+\(.*\b(patient|ssn|mrn)", "HIGH", "go", "PHI in log call", "1"),
@@ -101,6 +120,14 @@ CAT3_PATTERNS = [
     (r"NODE_TLS_REJECT_UNAUTHORIZED.*0", "HIGH", "js", "TLS rejection disabled globally", "3"),
     (r"verify\s*=\s*False", "HIGH", "python", "TLS verification disabled (requests)", "3"),
     (r"InsecureRequestWarning", "WARN", "python", "TLS warning suppressed", "3"),
+    # Anchored to argument position ([, or () to avoid matching `is_ssl_enabled = False`
+    (r"[,(]\s*ssl\s*=\s*False\b", "HIGH", "python", "SSL disabled in connector call", "3"),
+    (r"ssl\.CERT_NONE", "HIGH", "python", "TLS certificate verification disabled (ssl.CERT_NONE)", "3"),
+    (r"check_hostname\s*=\s*False", "HIGH", "python", "TLS hostname verification disabled", "3"),
+    (r"urllib3\.disable_warnings", "WARN", "python", "TLS warnings suppressed (urllib3)", "3"),
+    # WARN (not HIGH): commonly False in DEBUG/dev settings — compliance reviewer
+    # must confirm production config. Avoids flooding every Django project.
+    (r"SECURE_SSL_REDIRECT\s*=\s*False", "WARN", "python", "Django HTTPS redirect disabled (verify prod config)", "3"),
 ]
 
 # Category 4: Hardcoded PHI/Test Data
@@ -119,6 +146,9 @@ CAT7_PATTERNS = [
     (r"sessionStorage\.setItem\(.*\b(patient|ssn|mrn|phi|health)", "HIGH", "js", "PHI in session storage", "7"),
     (r"SharedPreferences.*\b(patient|ssn|mrn|phi|health)", "HIGH", "java", "PHI in unencrypted mobile storage", "7"),
     (r"UserDefaults.*\b(patient|ssn|mrn|phi|health)", "HIGH", "any", "PHI in unencrypted UserDefaults", "7"),
+    # Python
+    (r"pickle\.(dump|dumps)\(.*\b(patient|phi|health|ssn|mrn)", "HIGH", "python", "PHI in unencrypted pickle", "7"),
+    (r"shelve\.open\(.*\b(patient|phi|health|ssn|mrn)", "HIGH", "python", "PHI in unencrypted shelve storage", "7"),
 ]
 
 # Category 8: PHI Temp File Exposure
@@ -132,12 +162,17 @@ CAT8_PATTERNS = [
 CAT5_AUTH_KEYWORDS = [
     "auth", "authenticate", "requireAuth", "isAuthenticated",
     "protect", "guard", "Authorize", "login_required", "Permission",
+    # Python frameworks
+    "permission_required", "LoginRequiredMixin", "PermissionRequiredMixin",
+    "IsAuthenticated", "Depends", "Security",
 ]
 
 CAT5_PATTERNS = [
     (r"Access-Control-Allow-Origin:\s*\*", "HIGH", "any", "Unrestricted CORS on PHI endpoint", "5"),
     (r"origin:\s*(true|\*)", "HIGH", "any", "Unrestricted CORS origin", "5"),
     (r"\b(public|noAuth|anonymous)\b.*\b(patient|phi|health|medical)", "HIGH", "any", "Public route exposing PHI", "5"),
+    # Python
+    (r"permission_classes\s*=.*AllowAny", "WARN", "python", "DRF AllowAny — verify no PHI exposed", "5"),
 ]
 
 # HIPAA rule citations per category
@@ -284,7 +319,15 @@ def detect_languages(root: Path) -> set[str]:
 
 def scan_patterns(files: list[Path], patterns: list[tuple],
                   languages: set[str], root: Path) -> list[dict]:
-    """Run regex patterns against files, return findings."""
+    """Run regex patterns against files, return findings.
+
+    Language-tagged patterns fire only when:
+      1. The project's detected languages include the tag, AND
+      2. The file's extension matches that language (per LANG_EXTENSIONS).
+
+    This prevents cross-language double-flagging when two languages share
+    a regex (e.g. `logger.info(patient)` valid in both Python and Java).
+    """
     findings = []
     for fpath in files:
         try:
@@ -292,11 +335,16 @@ def scan_patterns(files: list[Path], patterns: list[tuple],
         except (OSError, PermissionError):
             continue
         rel = str(fpath.relative_to(root))
+        ext = fpath.suffix.lower()
 
         for line_num, line in enumerate(lines, 1):
             for pat, severity, lang, desc, cat in patterns:
-                if lang != "any" and lang not in languages:
-                    continue
+                if lang != "any":
+                    if lang not in languages:
+                        continue
+                    exts = LANG_EXTENSIONS.get(lang)
+                    if exts and ext not in exts:
+                        continue
                 if re.search(pat, line, re.IGNORECASE):
                     findings.append({
                         "file": rel,
@@ -333,7 +381,12 @@ def scan_cat2_audit_gaps(phi_files: list[Path], root: Path) -> list[dict]:
         r"@(Request|Get|Post|Put|Delete)Mapping|"
         r"Model\.(find|save|update|delete)|"
         r"db\.(query|execute)|cursor\.execute|"
-        r"repository\.|findBy|\.save\(|\.delete\()",
+        r"repository\.|findBy|\.save\(|\.delete\(|"
+        # Python frameworks (SQLAlchemy session methods only — avoids matching
+        # Express req.session.save/destroy which use different method names)
+        r"@app\.route|@blueprint\.route|"
+        r"@api_view|ViewSet|APIView|"
+        r"\bsession\.(query|add|execute|delete|merge)\b)",
         re.IGNORECASE,
     )
     audit_kw = re.compile(
@@ -382,7 +435,11 @@ def scan_cat5_access_gaps(phi_files: list[Path], languages: set[str],
     )
     data_ops = re.compile(
         r"(router|app\.(get|post|put|delete)|"
-        r"@(Request|Get|Post|Put|Delete)Mapping)",
+        r"@(Request|Get|Post|Put|Delete)Mapping|"
+        # Python frameworks (session methods anchored to SQLAlchemy)
+        r"@app\.route|@blueprint\.route|"
+        r"@api_view|ViewSet|APIView|"
+        r"cursor\.execute|\bsession\.(query|execute)\b)",
         re.IGNORECASE,
     )
 

package/bin/ai-toolkit.js

@@ -30,6 +30,7 @@ const GENERATORS = {
   'augment-rules':        { script: 'generate_augment.py',       dest: path.join('.augment', 'rules', 'ai-toolkit.md'), mkdir: '.augment/rules' },
   'agents-md':            { script: 'generate_agents_md.py',     dest: 'AGENTS.md' },
   'codex-md':             { script: 'generate_codex.py',         dest: 'AGENTS.md' },
+  'opencode-md':          { script: 'generate_opencode.py',      dest: 'AGENTS.md' },
 };
 
 // ---------------------------------------------------------------------------
@@ -98,10 +99,15 @@ const COMMANDS = {
   'codex-md': 'Generate AGENTS.md for OpenAI Codex CLI',
   'codex-rules': 'Generate .agents/rules/ for OpenAI Codex CLI',
   'codex-hooks': 'Generate .codex/hooks.json for OpenAI Codex CLI',
+  'opencode-md': 'Generate AGENTS.md for opencode',
+  'opencode-agents': 'Generate .opencode/agents/ for opencode (subagents)',
+  'opencode-commands': 'Generate .opencode/commands/ for opencode (slash commands)',
+  'opencode-plugin': 'Generate .opencode/plugins/ai-toolkit-hooks.js (lifecycle bridge)',
+  'opencode-json': 'Merge .mcp.json servers into opencode.json',
   'agents-md': 'Regenerate AGENTS.md from agent definitions',
   'compile-slm': 'Compile toolkit into a minimal SLM system prompt (--budget, --model-size, --dry-run)',
   'llms-txt': 'Generate llms.txt and llms-full.txt',
-  'generate-all': 'Generate all platform configs at once (agents, cursor, windsurf, copilot, gemini, cline, roo, aider, augment, antigravity, codex, llms)',
+  'generate-all': 'Generate all platform configs at once (agents, cursor, windsurf, copilot, gemini, cline, roo, aider, augment, antigravity, codex, opencode, llms)',
   help: 'Show this help message',
 };
 
@@ -225,7 +231,7 @@ function showHelp() {
   console.log('  --persona <p>   Persona preset: backend-lead, frontend-lead, devops-eng, junior-dev');
   console.log('  --modules <list>  Install specific modules (e.g. core,agents,rules-typescript)');
   console.log('  --lang <list>   Explicitly select language rules (e.g. typescript, go,python)');
-  console.log('  --editors <list> Install editor configs: cursor,windsurf,cline,roo,aider,augment,copilot,antigravity,codex (or "all")');
+  console.log('  --editors <list> Install editor configs: cursor,windsurf,cline,roo,aider,augment,copilot,antigravity,codex,opencode (or "all")');
   console.log('                  Default with --local: auto-detect from existing project files');
   console.log('  --auto-detect   Detect project languages and install matching rule modules');
   console.log('  --list, --dry-run  Dry-run: show what would be applied');
@@ -438,9 +444,10 @@ function handleConfig(args) {
  */
 function handleGenerateAll(_args) {
   for (const [name, gen] of Object.entries(GENERATORS)) {
-    // Skip codex-md — it injects a Codex config block via markers (used by install --local --editors codex)
-    // agents-md generates the full agent list which is the standalone AGENTS.md
-    if (name === 'codex-md') continue;
+    // Skip codex-md and opencode-md — they inject into AGENTS.md via markers
+    // (used by install --local --editors codex|opencode), not as standalone files.
+    // agents-md generates the full agent list which is the standalone AGENTS.md.
+    if (name === 'codex-md' || name === 'opencode-md') continue;
     writeGeneratorOutput(gen);
   }
   // Directory-based generators (multi-file output)
@@ -452,6 +459,10 @@ function handleGenerateAll(_args) {
   run(scriptPath('generate_augment_rules.py'), [CWD]);
   run(scriptPath('generate_codex_rules.py'), [CWD]);
   run(scriptPath('generate_codex_hooks.py'), [CWD]);
+  run(scriptPath('generate_opencode_agents.py'), [CWD]);
+  run(scriptPath('generate_opencode_commands.py'), [CWD]);
+  run(scriptPath('generate_opencode_plugin.py'), [CWD]);
+  run(scriptPath('generate_opencode_json.py'), [CWD]);
   // Single-file generators
   const conventionsOut = runGenerator('generate_conventions.py');
   fs.writeFileSync(path.join(CWD, 'CONVENTIONS.md'), conventionsOut);
@@ -559,6 +570,10 @@ const SPECIAL_HANDLERS = {
   'augment-dir-rules': (_args) => run(scriptPath('generate_augment_rules.py'), [CWD]),
   'codex-rules': (_args) => run(scriptPath('generate_codex_rules.py'), [CWD]),
   'codex-hooks': (_args) => run(scriptPath('generate_codex_hooks.py'), [CWD]),
+  'opencode-agents': (_args) => run(scriptPath('generate_opencode_agents.py'), [CWD]),
+  'opencode-commands': (_args) => run(scriptPath('generate_opencode_commands.py'), [CWD]),
+  'opencode-plugin': (_args) => run(scriptPath('generate_opencode_plugin.py'), [CWD]),
+  'opencode-json': (_args) => run(scriptPath('generate_opencode_json.py'), [CWD]),
   'generate-all': handleGenerateAll,
 };