@te-river/opencode-team-mode 1.6.0 → 1.6.1

package/dist/host/v2-transcript.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Reading a CHILD session's own messages — in process, with no credential.
+ *
+ * This is the answer to the HTTP-API decision (task #32). The host's own API
+ * (`docs/research/host-http-api.md`) does expose `GET /api/session/{id}/message`, and using
+ * it would have meant reading the Basic-auth password out of
+ * `<global-config>/service.json` — a secret that would then live in this plugin's memory,
+ * in every error string the fetch layer can produce, and in any log line that quotes a
+ * request. The user's condition for going there was "prove it cannot leak".
+ *
+ * Measured instead, on a live 2.0.18 with a plugin that only inspects its own ctx (zero
+ * model tokens, `--model nope/nope`): the plugin ctx carries a full `session` domain —
+ *
+ *   hook create get switchAgent switchModel prompt generate command synthetic interrupt
+ *   update move wait context
+ *
+ * and `ctx.session.context({ sessionID })` returns the session's message array. On the child
+ * session of a real background dispatch that array had 5 items shaped
+ * `{id, time:{created}, text, type}`. `ctx.session.get({sessionID})` returns
+ * `{id, parentID, projectID, agent, model, outcome, tokens, title, location}`.
+ *
+ * So the capability was in front of us the whole time and the password was never needed:
+ * nothing here opens a socket, reads a credential file, or can be redirected to a port that
+ * is not our own host process. That is a stronger guarantee than "we will keep the secret
+ * safe" — there is no secret.
+ *
+ * The one thing this MUST still earn is scope. `session.context` will answer for ANY session
+ * id handed to it, including the user's unrelated `build`/`plan` sessions, which makes it a
+ * private-content oracle if used carelessly. Therefore: parentage is verified with
+ * `session.get` FIRST, and a session that is not the caller's own child is refused without
+ * being read. The refusal is counted (`refused`) so "we did not look" stays distinguishable
+ * from "we looked and were denied". Text bodies are never written to the trajectory — ids,
+ * item counts and the chosen message's TYPE only, per R6.
+ */
+export interface V2TranscriptReport {
+    /** read() calls made */
+    attempted: number;
+    /** calls that returned a non-empty body */
+    resolved: number;
+    /** calls refused because session.get said the child is not the caller's */
+    refused: number;
+    /** calls where the parentage check itself could not answer (no seam, host error) */
+    unverifiable: number;
+    lastError?: string;
+}
+export interface V2TranscriptResult {
+    text: string;
+    /** how many messages the host handed back */
+    items: number;
+    /** the `type` of the message the body was taken from, when it had one */
+    pickedType?: string;
+    /** why there is no body — names the seam that failed, never a guess */
+    error?: string;
+}
+export interface V2TranscriptReader {
+    read: (sessionID: string, callerSessionID: string) => Promise<V2TranscriptResult>;
+    report: V2TranscriptReport;
+    /** Whether this host gives the seam at all — the caller says so out loud when not. */
+    active: boolean;
+}
+/** The child's ANSWER is the last non-user message that carries text. Taking the last,
+ *  rather than concatenating the transcript, is the whole point: the lead asked for the
+ *  report, and the earlier turns are the work it does not want to pay tokens for. The type
+ *  of the chosen item is returned so the reply can say where the text came from instead of
+ *  implying it read the whole session. */
+export declare function pickChildReply(items: unknown[]): {
+    text: string;
+    type?: string;
+};
+export declare function createV2TranscriptReader(ctx: unknown): V2TranscriptReader;
+/** One line for tm_stats: what the reader was asked for and what it could say. */
+export declare function transcriptSummary(r: V2TranscriptReport): string;
+//# sourceMappingURL=v2-transcript.d.ts.map

package/dist/host/v2-transcript.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-transcript.d.ts","sourceRoot":"","sources":["../../src/host/v2-transcript.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,MAAM,WAAW,kBAAkB;IACjC,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAA;IAChB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAA;IACf,oFAAoF;IACpF,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAA;IACb,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACjF,MAAM,EAAE,kBAAkB,CAAA;IAC1B,sFAAsF;IACtF,MAAM,EAAE,OAAO,CAAA;CAChB;AAkCD;;;;0CAI0C;AAC1C,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAQhF;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,CA2DzE;AAED,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAO/D"}

package/dist/host/v2-transcript.js

@@ -0,0 +1,151 @@
+/**
+ * Reading a CHILD session's own messages — in process, with no credential.
+ *
+ * This is the answer to the HTTP-API decision (task #32). The host's own API
+ * (`docs/research/host-http-api.md`) does expose `GET /api/session/{id}/message`, and using
+ * it would have meant reading the Basic-auth password out of
+ * `<global-config>/service.json` — a secret that would then live in this plugin's memory,
+ * in every error string the fetch layer can produce, and in any log line that quotes a
+ * request. The user's condition for going there was "prove it cannot leak".
+ *
+ * Measured instead, on a live 2.0.18 with a plugin that only inspects its own ctx (zero
+ * model tokens, `--model nope/nope`): the plugin ctx carries a full `session` domain —
+ *
+ *   hook create get switchAgent switchModel prompt generate command synthetic interrupt
+ *   update move wait context
+ *
+ * and `ctx.session.context({ sessionID })` returns the session's message array. On the child
+ * session of a real background dispatch that array had 5 items shaped
+ * `{id, time:{created}, text, type}`. `ctx.session.get({sessionID})` returns
+ * `{id, parentID, projectID, agent, model, outcome, tokens, title, location}`.
+ *
+ * So the capability was in front of us the whole time and the password was never needed:
+ * nothing here opens a socket, reads a credential file, or can be redirected to a port that
+ * is not our own host process. That is a stronger guarantee than "we will keep the secret
+ * safe" — there is no secret.
+ *
+ * The one thing this MUST still earn is scope. `session.context` will answer for ANY session
+ * id handed to it, including the user's unrelated `build`/`plan` sessions, which makes it a
+ * private-content oracle if used carelessly. Therefore: parentage is verified with
+ * `session.get` FIRST, and a session that is not the caller's own child is refused without
+ * being read. The refusal is counted (`refused`) so "we did not look" stays distinguishable
+ * from "we looked and were denied". Text bodies are never written to the trajectory — ids,
+ * item counts and the chosen message's TYPE only, per R6.
+ */
+/** Unwrap whatever envelope the host puts on a result object. */
+function unwrap(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const rec = raw;
+    for (const cand of [rec, rec.data, rec.result, rec.session]) {
+        if (cand && typeof cand === "object")
+            return cand;
+    }
+    return rec;
+}
+/** The text one message item carries, across the shapes the host has been seen to use:
+ *  a bare `text` (measured on 2.0.18), `parts[]` (the persisted message shape), and
+ *  `content[]` (the tool-result shape). Never descends into a tool payload. */
+function itemText(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const it = raw;
+    const type = String(it.type ?? it.role ?? "");
+    const direct = it.text;
+    if (typeof direct === "string" && direct.trim())
+        return { text: direct, type };
+    for (const key of ["parts", "content"]) {
+        const arr = it[key];
+        if (!Array.isArray(arr))
+            continue;
+        const texts = arr
+            .map((p) => (p && typeof p === "object" ? p.text : undefined))
+            .filter((t) => typeof t === "string" && t.trim().length > 0);
+        if (texts.length)
+            return { text: texts.join(String.fromCharCode(10)), type };
+    }
+    return null;
+}
+/** The child's ANSWER is the last non-user message that carries text. Taking the last,
+ *  rather than concatenating the transcript, is the whole point: the lead asked for the
+ *  report, and the earlier turns are the work it does not want to pay tokens for. The type
+ *  of the chosen item is returned so the reply can say where the text came from instead of
+ *  implying it read the whole session. */
+export function pickChildReply(items) {
+    for (let i = items.length - 1; i >= 0; i--) {
+        const t = itemText(items[i]);
+        if (!t)
+            continue;
+        if (/^user$/i.test(t.type))
+            continue;
+        return { text: t.text, type: t.type || undefined };
+    }
+    return { text: "" };
+}
+export function createV2TranscriptReader(ctx) {
+    const report = { attempted: 0, resolved: 0, refused: 0, unverifiable: 0 };
+    const session = ctx?.session;
+    const getContext = session?.context;
+    const get = session?.get;
+    const active = typeof getContext === "function";
+    const call = async (fn, arg) => await fn.call(session, arg);
+    const read = async (sessionID, callerSessionID) => {
+        report.attempted++;
+        if (!active || typeof getContext !== "function") {
+            return { text: "", items: 0, error: "这个宿主没给 ctx.session.context" };
+        }
+        if (!sessionID || !callerSessionID)
+            return { text: "", items: 0, error: "缺少会话 id，无法核验归属" };
+        // Scope FIRST. A reader that takes whatever id it is handed is a private-content oracle,
+        // and "the user approved the API" does not extend to their unrelated sessions.
+        if (typeof get !== "function") {
+            report.unverifiable++;
+            return { text: "", items: 0, error: "宿主没给 ctx.session.get，无法核验子会话归属，因此没有读取正文" };
+        }
+        let parentID;
+        try {
+            const rec = unwrap(await call(get, { sessionID }));
+            const p = rec?.parentID ?? rec?.parent_id;
+            parentID = typeof p === "string" && p ? p : undefined;
+        }
+        catch (err) {
+            report.unverifiable++;
+            report.lastError = String(err?.message ?? err).slice(0, 160);
+            return { text: "", items: 0, error: `归属核验失败：${report.lastError ?? "宿主未回应"}` };
+        }
+        if (!parentID) {
+            report.unverifiable++;
+            return { text: "", items: 0, error: "宿主回答里没有 parentID，无法确认这个会话是你的子会话，因此没有读取正文" };
+        }
+        if (parentID !== callerSessionID) {
+            report.refused++;
+            return { text: "", items: 0, error: "这个会话不是你的子会话（宿主给的 parentID 不匹配），我没有读它" };
+        }
+        try {
+            const raw = await call(getContext, { sessionID });
+            const arr = Array.isArray(raw) ? raw : Array.isArray(raw?.data) ? raw.data : null;
+            if (!arr) {
+                report.lastError = "context 返回值不是数组";
+                return { text: "", items: 0, error: report.lastError };
+            }
+            const picked = pickChildReply(arr);
+            if (picked.text)
+                report.resolved++;
+            return { text: picked.text, items: arr.length, pickedType: picked.type };
+        }
+        catch (err) {
+            report.lastError = String(err?.message ?? err).slice(0, 160);
+            return { text: "", items: 0, error: `ctx.session.context 失败：${report.lastError}` };
+        }
+    };
+    return { read, report, active };
+}
+/** One line for tm_stats: what the reader was asked for and what it could say. */
+export function transcriptSummary(r) {
+    if (!r.attempted)
+        return "子会话正文读取：没被调用过（缝在场，没数据）";
+    return (`子会话正文读取：尝试 ${r.attempted} · 拿到正文 ${r.resolved} · ` +
+        `归属不符拒绝 ${r.refused} · 无法核验 ${r.unverifiable}` +
+        (r.lastError ? ` · 最后错误：${r.lastError}` : ""));
+}
+//# sourceMappingURL=v2-transcript.js.map

package/dist/host/v2-transcript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-transcript.js","sourceRoot":"","sources":["../../src/host/v2-transcript.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAiCH,iEAAiE;AACjE,SAAS,MAAM,CAAC,GAAY;IAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAChD,MAAM,GAAG,GAAG,GAAU,CAAA;IACtB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAW,CAAA;IAC1D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;+EAE+E;AAC/E,SAAS,QAAQ,CAAC,GAAY;IAC5B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAChD,MAAM,EAAE,GAAG,GAAU,CAAA;IACrB,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,CAAA;IACtB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC9E,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAU,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,CAAA;QACnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,SAAQ;QACjC,MAAM,KAAK,GAAG,GAAG;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;aACtE,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QAC3E,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IAC9E,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;0CAI0C;AAC1C,MAAM,UAAU,cAAc,CAAC,KAAgB;IAC7C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5B,IAAI,CAAC,CAAC;YAAE,SAAQ;QAChB,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAQ;QACpC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,CAAA;IACpD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,MAAM,MAAM,GAAuB,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;IAC7F,MAAM,OAAO,GAAI,GAA4C,EAAE,OAAO,CAAA;IACtE,MAAM,UAAU,GAAG,OAAO,EAAE,OAAO,CAAA;IACnC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,CAAA;IACxB,MAAM,MAAM,GAAG,OAAO,UAAU,KAAK,UAAU,CAAA;IAE/C,MAAM,IAAI,GAAG,KAAK,EAAE,EAAW,EAAE,GAAY,EAAoB,EAAE,CACjE,MAAO,EAA+B,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAE3D,MAAM,IAAI,GAAG,KAAK,EAAE,SAAiB,EAAE,eAAuB,EAA+B,EAAE;QAC7F,MAAM,CAAC,SAAS,EAAE,CAAA;QAClB,IAAI,CAAC,MAAM,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;YAChD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAA;QACpE,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,CAAC,eAAe;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAA;QAE1F,yFAAyF;QACzF,+EAA+E;QAC/E,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,CAAC,YAAY,EAAE,CAAA;YACrB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAA;QACjF,CAAC;QACD,IAAI,QAA4B,CAAA;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;YAClD,MAAM,CAAC,GAAG,GAAG,EAAE,QAAQ,IAAI,GAAG,EAAE,SAAS,CAAA;YACzC,QAAQ,GAAG,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,YAAY,EAAE,CAAA;YACrB,MAAM,CAAC,SAAS,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YACvF,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,CAAA;QAC/E,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,YAAY,EAAE,CAAA;YACrB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAA;QAClF,CAAC;QACD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACjC,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAA;QAC9E,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;YACjD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,GAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAG,GAAW,CAAC,IAAkB,CAAC,CAAC,CAAC,IAAI,CAAA;YAClH,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,CAAC,SAAS,GAAG,iBAAiB,CAAA;gBACpC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,CAAA;YACxD,CAAC;YACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;YAClC,IAAI,MAAM,CAAC,IAAI;gBAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;YAClC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,SAAS,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YACvF,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,0BAA0B,MAAM,CAAC,SAAS,EAAE,EAAE,CAAA;QACpF,CAAC;IACH,CAAC,CAAA;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AACjC,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,CAAqB;IACrD,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,wBAAwB,CAAA;IACjD,OAAO,CACL,cAAc,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,QAAQ,KAAK;QACnD,UAAU,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,YAAY,EAAE;QAC9C,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAA;AACH,CAAC"}

package/dist/host/v2-types.d.ts

@@ -0,0 +1,229 @@
+/**
+ * Hand-written structural types for the OpenCode v2 plugin surface.
+ *
+ * We deliberately do NOT import `@opencode/plugin`: it is a separate package
+ * from the v1 SDK, and a v2 SDK that becomes a runtime dependency would break
+ * the dual-personality export for every v1 user who cannot resolve it.  The
+ * shapes below cover only the members this plugin actually touches, and they
+ * are transcribed from `@opencode/plugin@2.0.16/dist/promise/*.d.ts` plus two
+ * live-host probes (2026-09-25) — the probe is what proves `hook()` returns a
+ * disposable registration and that `execute.before` can really deny.
+ *
+ * Kept intentionally loose (`unknown` where we only pass values through): a
+ * type that is wider than the host's never fails a build, and every field we
+ * READ is read defensively because the host makes no stability promise.
+ */
+export interface V2Registration {
+    readonly dispose: () => Promise<void>;
+}
+/** `Hooks<Spec>` in the SDK: register by name, get a disposable back. */
+export type V2Hooks<Spec> = <Name extends keyof Spec>(name: Name, callback: (input: Spec[Name]) => Promise<void> | void) => Promise<V2Registration>;
+/** `Transform<Input>` in the SDK: mutate an in-memory editor. */
+export type V2Transform<Input> = (callback: (input: Input) => void) => Promise<V2Registration>;
+export interface V2TextContent {
+    type: "text";
+    text: string;
+}
+export interface V2FileContent {
+    type: "file";
+    uri: string;
+    mime: string;
+    name?: string;
+}
+export type V2Content = V2TextContent | V2FileContent;
+/**
+ * `Tool.Result`.  A live probe measured the host's own rejection of the v1
+ * shape: returning `{output: "<text>"}` with no declared `output` schema came
+ * back as "Tool result declared output without an output schema" for all three
+ * probe tools — so this plugin's v2 adapters return `content` instead.
+ */
+export interface V2ToolResult {
+    content?: string | ReadonlyArray<V2Content>;
+    metadata?: Record<string, unknown>;
+}
+export interface V2ToolContext {
+    readonly sessionID: string;
+    readonly agent: string;
+    readonly messageID?: string;
+    readonly id?: string;
+    readonly signal?: AbortSignal;
+    readonly progress?: (update: unknown) => Promise<void>;
+}
+export interface V2ToolInfo {
+    readonly name: string;
+    readonly description: string;
+    /** A JSON Schema object; the host also accepts zod/StandardSchema. */
+    readonly input: unknown;
+    readonly execute: (args: Record<string, unknown>, context: V2ToolContext) => Promise<V2ToolResult>;
+    readonly options?: {
+        readonly namespace?: string;
+        readonly permission?: string;
+        /**
+         * Read from the 2.0.16 binary, NOT from the SDK types (which have no such
+         * word): host-built tools carry `options:{codemode:false}` and a tool whose
+         * codemode is not false is offered only through the Code Mode catalog, where
+         * its description is cut to the first line.  This is why a live Team session
+         * showed six tools and zero `tm_*` even though registration succeeded.
+         */
+        readonly codemode?: boolean;
+    };
+}
+export interface V2ToolEditor {
+    list(): ReadonlyArray<V2ToolInfo & {
+        id?: string;
+    }>;
+    get(id: string): (V2ToolInfo & {
+        id?: string;
+    }) | undefined;
+    add(tool: V2ToolInfo): void;
+    update?(id: string, update: (tool: V2ToolInfo) => void): void;
+    remove?(id: string): void;
+    namespace?(namespace: unknown): void;
+}
+export interface V2ToolExecuteBefore {
+    readonly tool: string;
+    readonly sessionID: string;
+    readonly agent?: string;
+    input: unknown;
+}
+export interface V2ToolExecuteAfter {
+    readonly tool: string;
+    readonly sessionID: string;
+    readonly agent?: string;
+    readonly status: "completed" | "error";
+    readonly result?: unknown;
+    readonly error?: unknown;
+}
+export interface V2ToolHooks {
+    readonly "execute.before": V2ToolExecuteBefore;
+    readonly "execute.after": V2ToolExecuteAfter;
+}
+export interface V2ToolDomain {
+    readonly transform: V2Transform<V2ToolEditor>;
+    readonly list: () => Promise<ReadonlyArray<V2ToolInfo & {
+        id?: string;
+    }>>;
+    readonly hook: V2Hooks<V2ToolHooks>;
+    readonly reload?: () => Promise<void>;
+}
+export interface V2PermissionRule {
+    readonly action: string;
+    readonly resource: string;
+    readonly effect: "allow" | "deny" | "ask";
+}
+export interface V2AgentInfo {
+    id?: string;
+    name?: string;
+    description?: string;
+    /** v2's spelling of v1's `prompt`. */
+    system?: string;
+    mode?: "subagent" | "primary" | "all";
+    hidden?: boolean;
+    color?: string;
+    permissions?: V2PermissionRule[];
+    [key: string]: unknown;
+}
+export interface V2AgentEditor {
+    list(): ReadonlyArray<V2AgentInfo>;
+    get(id: string): V2AgentInfo | undefined;
+    default(id: string | undefined): void;
+    update(id: string, update: (agent: V2AgentInfo) => void): void;
+    remove(id: string): void;
+}
+export interface V2AgentDomain {
+    readonly transform: V2Transform<V2AgentEditor>;
+    readonly list?: () => Promise<ReadonlyArray<V2AgentInfo>>;
+}
+/**
+ * `PermissionEvaluation` — `effect` is the mutable decision.  A live probe saw
+ * the host itself produce `effect:"ask"` (for an out-of-workspace
+ * `external_directory` read) and publish `permission.asked` afterwards, so an
+ * `ask` written here is honored by a real dialog.  Observed `action` values:
+ * `shell` / `read` / `edit` / `external_directory`, with `resources` carrying
+ * the concrete command line or path.
+ */
+export interface V2PermissionEvaluation {
+    readonly sessionID: string;
+    readonly agent?: string;
+    readonly action: string;
+    readonly resources: ReadonlyArray<string>;
+    readonly metadata?: Record<string, unknown>;
+    effect: "allow" | "deny" | "ask";
+    message?: string;
+}
+export interface V2PermissionDomain {
+    readonly hook: V2Hooks<{
+        evaluate: V2PermissionEvaluation;
+    }>;
+    readonly list?: (input?: unknown) => Promise<unknown>;
+    readonly get?: (input?: unknown) => Promise<unknown>;
+    readonly reply?: (input?: unknown) => Promise<unknown>;
+}
+export interface V2SessionContext {
+    readonly agent?: string;
+    readonly system: unknown[];
+    readonly messages: unknown[];
+    readonly tools: Record<string, {
+        description: string;
+        input: unknown;
+    }>;
+    options: Record<string, unknown>;
+}
+export interface V2SessionHooks {
+    readonly context: V2SessionContext;
+    readonly compaction: V2SessionContext & {
+        result?: unknown;
+    };
+}
+export interface V2SessionDomain {
+    readonly hook: V2Hooks<V2SessionHooks>;
+    readonly [key: string]: unknown;
+}
+export interface V2ShellCreateBefore {
+    command: string;
+    cwd: string;
+    timeout: number;
+    shell: string;
+    env: Record<string, string | undefined>;
+}
+export interface V2ShellDomain {
+    readonly hook: V2Hooks<{
+        "create.before": V2ShellCreateBefore;
+    }>;
+}
+export interface V2StorageDomain {
+    readonly get: (key: string) => Promise<unknown>;
+    readonly set: (key: string, value: unknown) => Promise<void>;
+    readonly remove: (key: string) => Promise<void>;
+    readonly scan: (options: unknown) => Promise<unknown>;
+}
+export interface V2Event {
+    readonly type?: string;
+    readonly data?: unknown;
+}
+export interface V2Context {
+    readonly location?: {
+        readonly directory?: string;
+        readonly project?: {
+            readonly directory?: string;
+            readonly id?: string;
+        };
+    };
+    readonly options?: Record<string, unknown>;
+    readonly tool: V2ToolDomain;
+    readonly agent?: V2AgentDomain;
+    readonly permission?: V2PermissionDomain;
+    readonly session?: V2SessionDomain;
+    readonly shell?: V2ShellDomain;
+    readonly storage?: V2StorageDomain;
+    readonly event?: {
+        readonly subscribe: () => AsyncIterable<V2Event>;
+    };
+    readonly [key: string]: unknown;
+}
+export type V2Cleanup = () => Promise<void> | void;
+export interface V2Plugin {
+    readonly id: string;
+    readonly setup: (ctx: V2Context) => Promise<V2Cleanup | void> | V2Cleanup | void;
+}
+//# sourceMappingURL=v2-types.d.ts.map

package/dist/host/v2-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-types.d.ts","sourceRoot":"","sources":["../../src/host/v2-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACtC;AAED,yEAAyE;AACzE,MAAM,MAAM,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,SAAS,MAAM,IAAI,EAClD,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,KAClD,OAAO,CAAC,cAAc,CAAC,CAAA;AAE5B,iEAAiE;AACjE,MAAM,MAAM,WAAW,CAAC,KAAK,IAAI,CAC/B,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,KAC7B,OAAO,CAAC,cAAc,CAAC,CAAA;AAI5B,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,aAAa,CAAA;AAErD;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACvD;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,CAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,aAAa,KACnB,OAAO,CAAC,YAAY,CAAC,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;QAC5B;;;;;;WAMG;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAC5B,CAAA;CACF;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,IAAI,aAAa,CAAC,UAAU,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACnD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,CAAC,UAAU,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS,CAAA;IAC3D,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAA;IAC3B,MAAM,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,IAAI,CAAA;IAC7D,MAAM,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,CAAC,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAAA;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAA;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,mBAAmB,CAAA;IAC9C,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAA;CAC7C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,YAAY,CAAC,CAAA;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAA;IACzE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACtC;AAID,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAA;CAC1C;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,KAAK,CAAA;IACrC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,IAAI,aAAa,CAAC,WAAW,CAAC,CAAA;IAClC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAA;IACxC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;IACrC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,IAAI,CAAA;IAC9D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,aAAa,CAAC,CAAA;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAA;CAC1D;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3C,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAA;IAChC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,QAAQ,EAAE,sBAAsB,CAAA;KAAE,CAAC,CAAA;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACrD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACvD;AAID,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IACvE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,GAAG;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAiB7D;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;IACtC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAChC;AAID,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;CACxC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,eAAe,EAAE,mBAAmB,CAAA;KAAE,CAAC,CAAA;CACjE;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACtD;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CACxB;AAID,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE;YAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KACzE,CAAA;IACD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC1C,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAA;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC,OAAO,CAAC,CAAA;KAAE,CAAA;IACrE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAChC;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAElD,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,SAAS,GAAG,IAAI,CAAA;CACjF"}

package/dist/host/v2-types.js

@@ -0,0 +1,17 @@
+/**
+ * Hand-written structural types for the OpenCode v2 plugin surface.
+ *
+ * We deliberately do NOT import `@opencode/plugin`: it is a separate package
+ * from the v1 SDK, and a v2 SDK that becomes a runtime dependency would break
+ * the dual-personality export for every v1 user who cannot resolve it.  The
+ * shapes below cover only the members this plugin actually touches, and they
+ * are transcribed from `@opencode/plugin@2.0.16/dist/promise/*.d.ts` plus two
+ * live-host probes (2026-09-25) — the probe is what proves `hook()` returns a
+ * disposable registration and that `execute.before` can really deny.
+ *
+ * Kept intentionally loose (`unknown` where we only pass values through): a
+ * type that is wider than the host's never fails a build, and every field we
+ * READ is read defensively because the host makes no stability promise.
+ */
+export {};
+//# sourceMappingURL=v2-types.js.map

package/dist/host/v2-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-types.js","sourceRoot":"","sources":["../../src/host/v2-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/host/v2.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The v2 personality: `Plugin.define({id, setup(ctx)})`.
+ *
+ * `Plugin.define` in @opencode/plugin@2.0.16 is literally `plugin => plugin`,
+ * so this module exports the plain object and the v2 SDK never becomes a
+ * runtime dependency — which is what keeps the dual-personality package
+ * installable by a v1 user who cannot resolve that package at all.
+ *
+ * Scope of this file (milestone M2): build the governed runtime on a
+ * filesystem-backed client shim, register the tm_* tools through
+ * `ctx.tool.transform`, and normalize the permission matrix onto the agents the
+ * CONFIG declares. It deliberately does NOT touch: the approval gate (#94), the
+ * session hooks / compaction / description appends (#93), or the browser
+ * (#95). Those need this seam proven live first.
+ *
+ * Two v1 behaviors do not carry over, and both absences are stated rather than
+ * discovered later:
+ *  - creating agents: `AgentEditor` has no `add`, so the six roles must come
+ *    from the user's config (the installer writes `agents/*.md`).
+ *  - the conservative default-agent promotion: v1 read `cfg.default_agent` and
+ *    only filled it when empty or "build".  v2 exposes `default(id)` with NO
+ *    getter, so "only if the user did not choose" is not expressible — the
+ *    choice is between never promoting and promoting every boot.  The user's
+ *    standing instruction (2026-09-25) is that Team is ALWAYS the default, so
+ *    this promotes unconditionally; `defaultAgent: false` in the plugin options
+ *    opts out, exactly as on v1.
+ *
+ * The official confirmation dialog is absent as well, and for a different
+ * reason: probed on the live host, a plugin has no way to raise one.
+ * `askFnOf` therefore finds no bridge and every governed call fails closed with
+ * the v2-worded refusal set below.
+ */
+import type { V2Plugin } from "./v2-types.js";
+/** The refusal has to name the real reason: on v2 the absence is the new
+ *  protocol, and "旧版协议" would send the model looking for an upgrade the
+ *  user already installed.  It must ALSO not point at a domain gate this
+ *  personality no longer runs (the default is `"*"`), so the knob it names is
+ *  the host's own permission config, and the address red line is excluded from
+ *  "ask the user" because that one has no consent path at all. */
+export declare const V2_NO_DIALOG_NOTE: string;
+export declare const v2Personality: V2Plugin;
+//# sourceMappingURL=v2.d.ts.map

package/dist/host/v2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2.d.ts","sourceRoot":"","sources":["../../src/host/v2.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAwBH,OAAO,KAAK,EAA0B,QAAQ,EAA8B,MAAM,eAAe,CAAA;AAEjG;;;;;kEAKkE;AAClE,eAAO,MAAM,iBAAiB,QAGmB,CAAA;AASjD,eAAO,MAAM,aAAa,EAAE,QA8oB3B,CAAA"}