@te-river/opencode-team-mode 1.6.0 → 1.6.1

package/dist/host/v2-probe.js

@@ -0,0 +1,268 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { parseHostEnvelope } from "../task-offload.js";
+const URLish = (s) => {
+    if (typeof s !== "string")
+        return false;
+    return /^https?:\/\//i.test(s.trim()) || /^\[[0-9a-f:.]+\]$/i.test(s.trim());
+};
+const keysOf = (v) => {
+    if (!v || typeof v !== "object" || Array.isArray(v))
+        return [];
+    return Object.keys(v).sort();
+};
+/** Any ctx domain whose `hook` is absent is reported rather than crashing boot. */
+function hookFn(ctx, domain) {
+    const d = ctx?.[domain];
+    const h = d?.hook;
+    return typeof h === "function" ? h : null;
+}
+export async function applyV2Probe(ctx, opts = {}) {
+    const env = opts.env ?? process.env;
+    const file = typeof env.TM_V2_PROBE === "string" && env.TM_V2_PROBE.trim() ? env.TM_V2_PROBE.trim() : null;
+    const maxLines = Number.isFinite(Number(opts.maxLines)) && Number(opts.maxLines) > 0 ? Number(opts.maxLines) : 400;
+    const flushMs = Number.isFinite(Number(opts.flushMs)) && Number(opts.flushMs) >= 0 ? Number(opts.flushMs) : 20_000;
+    const report = {
+        agentsSeen: [],
+        toolNames: [],
+        executed: [],
+        executedAfter: [],
+        actions: [],
+        urlResources: 0,
+        evaluations: 0,
+        messages: 0,
+        taskEnvelopes: 0,
+        maxEnvelopeChars: 0,
+        messageShapes: [],
+        envelopeForms: new Set(),
+        hooksMissing: [],
+        ctxDomains: [],
+        probeTarget: file ? path.basename(file) : "",
+        lines: 0,
+    };
+    report.ctxDomains = Object.keys((ctx ?? {})).sort();
+    const seenToolNames = new Set();
+    const seenExecuted = new Set();
+    const seenExecutedAfter = new Set();
+    const seenActions = new Set();
+    const seenAgents = new Set();
+    const seenBeforeShapes = new Set();
+    const messageShapes = [];
+    const envelopeForms = report.envelopeForms;
+    const write = (rec) => {
+        if (!file || report.lines >= maxLines)
+            return;
+        report.lines += 1;
+        try {
+            fs.appendFileSync(file, `${JSON.stringify({ at: new Date().toISOString(), ...rec })}\n`);
+        }
+        catch {
+            /* a probe that cannot write stays silent; it must never break a tool call */
+        }
+    };
+    let lastFlush = 0;
+    let lastSummary = "";
+    // Declared BEFORE any hook is registered: the host can fire a context hook while
+    // this function is still awaiting its own registrations, and a callback landing
+    // in the temporal dead zone would throw inside somebody's model request.
+    const flush = (force = false) => {
+        if (!opts.onSummary)
+            return;
+        const now = Date.now();
+        if (!force && now - lastFlush < flushMs)
+            return;
+        const summary = probeSummary(report);
+        const flat = JSON.stringify(summary);
+        // An idle session re-runs the context hook on every request; writing an
+        // identical line each time would be noise that buries the ones that differ.
+        if (!force && flat === lastSummary)
+            return;
+        lastFlush = now;
+        lastSummary = flat;
+        try {
+            opts.onSummary(summary);
+        }
+        catch {
+            /* observability is an extra, never a reason to fail a request */
+        }
+    };
+    const pending = [];
+    const registrations = [];
+    const arm = (domain, point, cb) => {
+        const hook = hookFn(ctx, domain);
+        if (!hook) {
+            report.hooksMissing.push(`${domain}.${point}`);
+            return;
+        }
+        // The host's convention is `ctx.session.hook("context", …)` — the POINT name,
+        // not "session.context".  Passing the dotted form would register a hook under a
+        // name nothing fires, and the probe would report an empty surface as if the host
+        // had none.  The label keeps the domain so a missing seam reads unambiguously.
+        // The body is wrapped so a defect HERE can never surface as a failed tool call
+        // or a broken model request: an observer that can break the thing it observes is
+        // not an observer.  (This was not theoretical — a callback referencing a `const`
+        // declared further down the module hit its temporal dead zone while the host was
+        // mid-hook, which is exactly how the shape recorder reported nothing.)
+        const guarded = (event) => {
+            try {
+                cb(event);
+            }
+            catch (err) {
+                const tag = `${domain}.${point}`;
+                if (!report.hooksMissing.includes(`${tag}:callback-threw`))
+                    report.hooksMissing.push(`${tag}:callback-threw`);
+                void err;
+            }
+        };
+        try {
+            pending.push(Promise.resolve(hook(point, guarded)));
+        }
+        catch (err) {
+            report.hooksMissing.push(`${domain}.${point}:${String(err?.message ?? err).slice(0, 60)}`);
+        }
+    };
+    arm("session", "context", (raw) => {
+        const event = raw;
+        const names = Object.keys(event?.tools ?? {});
+        const msgs = Array.isArray(event.messages) ? event.messages : [];
+        report.messages = Math.max(report.messages, msgs.length);
+        // The KEY NAMES of what a message actually is — recorded because guessing the
+        // shape is what made the v1 envelope matcher quietly dead: the probe reported
+        // "0 envelopes" and the honest reading was "I do not know where this lands",
+        // not "nothing lands".  Names only, never content.
+        if (msgs.length && !messageShapes.length) {
+            for (const m of msgs.slice(0, 3)) {
+                const keys = keysOf(m);
+                const nested = {};
+                for (const k of keys) {
+                    const v = m[k];
+                    if (v && typeof v === "object")
+                        nested[k] = Array.isArray(v) ? [`array(${v.length})`] : keysOf(v).slice(0, 8);
+                }
+                messageShapes.push({ keys, nested });
+            }
+            report.messageShapes = messageShapes;
+            write({ where: "message-shape", shapes: messageShapes });
+        }
+        // Shape only: a boolean "this looks like the host's envelope" and a character
+        // count.  Nothing of the body is kept, hashed or written.
+        for (const m of msgs) {
+            // Read the TEXT of each part.  JSON.stringify was wrong twice over: escaping
+            // the quotes means an envelope inside a part never matches its own parser (so
+            // this counter reported 0 on a host that was emitting them), and it would have
+            // serialized fields nobody should have in a probe file.
+            const texts = [];
+            if (typeof m === "string")
+                texts.push(m);
+            else {
+                const parts = m?.parts;
+                if (Array.isArray(parts)) {
+                    for (const pt of parts) {
+                        if (typeof pt?.text === "string")
+                            texts.push(pt.text);
+                    }
+                }
+                else if (typeof m?.text === "string")
+                    texts.push(m.text);
+            }
+            // Asked of the same parser the offload uses — a probe that greps for the v1
+            // string while the host emits another reports "0 envelopes" forever, and a
+            // zero like that is indistinguishable from "nothing was big enough".
+            for (const text of texts) {
+                const env = parseHostEnvelope(text);
+                if (!env)
+                    continue;
+                report.taskEnvelopes += 1;
+                report.maxEnvelopeChars = Math.max(report.maxEnvelopeChars, text.length);
+                report.envelopeForms.add(env.form);
+            }
+        }
+        for (const n of names)
+            seenToolNames.add(n);
+        const agent = String(event?.agent ?? "?");
+        if (!seenAgents.has(agent)) {
+            seenAgents.add(agent);
+            report.agentsSeen = [...seenAgents].sort();
+            write({ where: "context", agent, toolCount: names.length, tools: names.slice().sort() });
+        }
+        report.toolNames = [...seenToolNames].sort();
+        flush(false);
+    });
+    arm("tool", "execute.before", (raw) => {
+        const event = raw;
+        const id = String(event?.tool ?? "?");
+        if (!seenExecuted.has(id)) {
+            seenExecuted.add(id);
+            report.executed = [...seenExecuted].sort();
+            write({ where: "execute.before", tool: id, inputKeys: keysOf(event?.input) });
+            return;
+        }
+        // A tool already on record still tells us something new when its argument
+        // table differs — the native browser namespace is the open question here, and
+        // one line per distinct argument shape is what answers it.
+        const shape = keysOf(event?.input).join(",");
+        if (id.includes("browser") && !seenBeforeShapes.has(`${id}(${shape})`)) {
+            seenBeforeShapes.add(`${id}(${shape})`);
+            write({ where: "execute.before.input", tool: id, inputKeys: keysOf(event?.input) });
+        }
+    });
+    arm("tool", "execute.after", (raw) => {
+        const event = raw;
+        const id = String(event?.tool ?? "?");
+        if (!seenExecutedAfter.has(id)) {
+            seenExecutedAfter.add(id);
+            report.executedAfter = [...seenExecutedAfter].sort();
+            write({ where: "execute.after", tool: id, resultKeys: keysOf(event?.result) });
+        }
+    });
+    arm("permission", "evaluate", (raw) => {
+        const event = raw;
+        report.evaluations += 1;
+        const action = String(event?.action ?? "?");
+        const resources = Array.isArray(event?.resources) ? event.resources : [];
+        const hasUrl = resources.some(URLish);
+        if (hasUrl)
+            report.urlResources += 1;
+        if (seenActions.has(action))
+            return;
+        seenActions.add(action);
+        report.actions = [...seenActions].sort();
+        write({ where: "permission.evaluate", action, resourceCount: resources.length, hasUrl });
+    });
+    // A registration that rejects is a host fact worth recording — silently dropping
+    // it would leave the probe reporting "no browser tools" when the real reason is
+    // that the hook never attached.
+    const settled = await Promise.allSettled(pending);
+    settled.forEach((r, i) => {
+        if (r.status === "fulfilled" && r.value && typeof r.value.dispose === "function")
+            registrations.push(r.value);
+        else if (r.status === "rejected")
+            report.hooksMissing.push(`#${i}:${String(r.reason?.message ?? r.reason).slice(0, 60)}`);
+    });
+    flush(true);
+    return { enabled: Boolean(file), report, registrations, flush };
+}
+/** Compact form for the trajectory — names are safe, values never are. */
+export function probeSummary(report) {
+    const browserTools = report.toolNames.filter((n) => n.toLowerCase().includes("browser"));
+    return {
+        probe_agents: report.agentsSeen.join(" "),
+        probe_tool_count: report.toolNames.length,
+        probe_browser_tools: browserTools.join(" "),
+        probe_executed: report.executed.join(" "),
+        probe_executed_after: report.executedAfter.join(" "),
+        probe_actions: report.actions.join(" "),
+        probe_evaluations: report.evaluations,
+        probe_messages: report.messages,
+        probe_task_envelopes: report.taskEnvelopes,
+        probe_max_envelope_chars: report.maxEnvelopeChars,
+        probe_message_shapes: JSON.stringify(report.messageShapes).slice(0, 500),
+        probe_envelope_forms: [...report.envelopeForms].join(" "),
+        probe_url_resources: report.urlResources,
+        probe_hooks_missing: report.hooksMissing.join(" "),
+        probe_ctx_domains: report.ctxDomains.join(" "),
+        probe_lines: report.lines,
+        probe_target: report.probeTarget,
+    };
+}
+//# sourceMappingURL=v2-probe.js.map

package/dist/host/v2-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-probe.js","sourceRoot":"","sources":["../../src/host/v2-probe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAqFtD,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACvC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;AAC9E,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,CAAU,EAAY,EAAE;IACtC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC,CAAC,IAAI,EAAE,CAAA;AACzD,CAAC,CAAA;AAED,mFAAmF;AACnF,SAAS,MAAM,CAAC,GAAY,EAAE,MAAc;IAC1C,MAAM,CAAC,GAAI,GAA2C,EAAE,CAAC,MAAM,CAAwC,CAAA;IACvG,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,CAAA;IACjB,OAAO,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC,CAAE,CAAyD,CAAC,CAAC,CAAC,IAAI,CAAA;AACpG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,OAAqB,EAAE;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACnC,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1G,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAClH,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAElH,MAAM,MAAM,GAAkB;QAC5B,UAAU,EAAE,EAAE;QACd,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,EAAE;QACZ,aAAa,EAAE,EAAE;QACjB,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,CAAC;QACf,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,aAAa,EAAE,CAAC;QAChB,gBAAgB,EAAE,CAAC;QACnB,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,IAAI,GAAG,EAAU;QAChC,YAAY,EAAE,EAAE;QAChB,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;QAC5C,KAAK,EAAE,CAAC;KACT,CAAA;IAED,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,CAA4B,CAAC,CAAC,IAAI,EAAE,CAAA;IAE9E,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAA;IACvC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IACtC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACrC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC1C,MAAM,aAAa,GAAmC,EAAE,CAAA;IACxD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAA;IAE1C,MAAM,KAAK,GAAG,CAAC,GAA4B,EAAE,EAAE;QAC7C,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,QAAQ;YAAE,OAAM;QAC7C,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;QACjB,IAAI,CAAC;YACH,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;QAC/E,CAAC;IACH,CAAC,CAAA;IAED,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,WAAW,GAAG,EAAE,CAAA;IACpB,iFAAiF;IACjF,gFAAgF;IAChF,yEAAyE;IACzE,MAAM,KAAK,GAAG,CAAC,KAAK,GAAG,KAAK,EAAE,EAAE;QAC9B,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAM;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,SAAS,GAAG,OAAO;YAAE,OAAM;QAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACpC,wEAAwE;QACxE,4EAA4E;QAC5E,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,WAAW;YAAE,OAAM;QAC1C,SAAS,GAAG,GAAG,CAAA;QACf,WAAW,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC,CAAA;IAED,MAAM,OAAO,GAAmC,EAAE,CAAA;IAClD,MAAM,aAAa,GAAqB,EAAE,CAAA;IAC1C,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,KAAa,EAAE,EAA4B,EAAE,EAAE;QAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAA;YAC9C,OAAM;QACR,CAAC;QACD,8EAA8E;QAC9E,gFAAgF;QAChF,iFAAiF;QACjF,+EAA+E;QAC/E,+EAA+E;QAC/E,iFAAiF;QACjF,iFAAiF;QACjF,iFAAiF;QACjF,uEAAuE;QACvE,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE;YACjC,IAAI,CAAC;gBACH,EAAE,CAAC,KAAK,CAAC,CAAA;YACX,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,KAAK,EAAE,CAAA;gBAChC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,GAAG,iBAAiB,CAAC;oBAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,GAAG,iBAAiB,CAAC,CAAA;gBAC7G,KAAK,GAAG,CAAA;YACV,CAAC;QACH,CAAC,CAAA;QACD,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAA8B,CAAC,CAAC,CAAA;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,KAAK,IAAI,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QACvG,CAAC;IACH,CAAC,CAAA;IAED,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,GAA0D,CAAA;QACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAA;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAE,KAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;QACzH,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACxD,8EAA8E;QAC9E,8EAA8E;QAC9E,6EAA6E;QAC7E,mDAAmD;QACnD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YACzC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;gBACtB,MAAM,MAAM,GAA6B,EAAE,CAAA;gBAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,MAAM,CAAC,GAAI,CAA6B,CAAC,CAAC,CAAC,CAAA;oBAC3C,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBAC/G,CAAC;gBACD,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YACtC,CAAC;YACD,MAAM,CAAC,aAAa,GAAG,aAAa,CAAA;YACpC,KAAK,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAA;QAC1D,CAAC;QACD,8EAA8E;QAC9E,0DAA0D;QAC1D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,6EAA6E;YAC7E,8EAA8E;YAC9E,+EAA+E;YAC/E,wDAAwD;YACxD,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;iBACnC,CAAC;gBACJ,MAAM,KAAK,GAAI,CAAyB,EAAE,KAAK,CAAA;gBAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzB,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;wBACvB,IAAI,OAAQ,EAAyB,EAAE,IAAI,KAAK,QAAQ;4BAAE,KAAK,CAAC,IAAI,CAAE,EAAuB,CAAC,IAAI,CAAC,CAAA;oBACrG,CAAC;gBACH,CAAC;qBAAM,IAAI,OAAQ,CAAwB,EAAE,IAAI,KAAK,QAAQ;oBAAE,KAAK,CAAC,IAAI,CAAE,CAAsB,CAAC,IAAI,CAAC,CAAA;YAC1G,CAAC;YACD,4EAA4E;YAC5E,2EAA2E;YAC3E,qEAAqE;YACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;gBACnC,IAAI,CAAC,GAAG;oBAAE,SAAQ;gBAClB,MAAM,CAAC,aAAa,IAAI,CAAC,CAAA;gBACzB,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;gBACxE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,GAAG,CAAC,CAAA;QACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACrB,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAA;YAC1C,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC1F,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5C,KAAK,CAAC,KAAK,CAAC,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,GAAyC,CAAA;QACvD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,GAAG,CAAC,CAAA;QACrC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACpB,MAAM,CAAC,QAAQ,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAA;YAC1C,KAAK,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;YAC7E,OAAM;QACR,CAAC;QACD,0EAA0E;QAC1E,8EAA8E;QAC9E,2DAA2D;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5C,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACvE,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,KAAK,GAAG,CAAC,CAAA;YACvC,KAAK,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,GAA0C,CAAA;QACxD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,GAAG,CAAC,CAAA;QACrC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACzB,MAAM,CAAC,aAAa,GAAG,CAAC,GAAG,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAA;YACpD,KAAK,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QAChF,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,GAA0D,CAAA;QACxE,MAAM,CAAC,WAAW,IAAI,CAAC,CAAA;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,GAAG,CAAC,CAAA;QAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;QACxE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,MAAM;YAAE,MAAM,CAAC,YAAY,IAAI,CAAC,CAAA;QACpC,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAM;QACnC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACvB,MAAM,CAAC,OAAO,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAA;QACxC,KAAK,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;IAEF,iFAAiF;IACjF,gFAAgF;IAChF,gCAAgC;IAChC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IACjD,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,UAAU;YAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;aACxG,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;YAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAE,CAAC,CAAC,MAAgB,EAAE,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;IACtI,CAAC,CAAC,CAAA;IACF,KAAK,CAAC,IAAI,CAAC,CAAA;IAEX,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAA;AACjE,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,MAAqB;IAChD,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;IACxF,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QACzC,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;QACzC,mBAAmB,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACzC,oBAAoB,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QACpD,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QACvC,iBAAiB,EAAE,MAAM,CAAC,WAAW;QACrC,cAAc,EAAE,MAAM,CAAC,QAAQ;QAC/B,oBAAoB,EAAE,MAAM,CAAC,aAAa;QAC1C,wBAAwB,EAAE,MAAM,CAAC,gBAAgB;QACjD,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACxE,oBAAoB,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACzD,mBAAmB,EAAE,MAAM,CAAC,YAAY;QACxC,mBAAmB,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QAClD,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9C,WAAW,EAAE,MAAM,CAAC,KAAK;QACzB,YAAY,EAAE,MAAM,CAAC,WAAW;KACjC,CAAA;AACH,CAAC"}

package/dist/host/v2-scope.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Team-scope isolation for the v2 personality (#22, user requirement 2026-09-25).
+ *
+ * "Everything the plugin changes must stay inside Team mode; the other modes
+ * (build, plan, anything the user installed) must look exactly like a freshly
+ * installed OpenCode."  Every v2 hook we register is GLOBAL — `execute.after`,
+ * `permission.evaluate`, `session.context` fire for every session on the host, not
+ * only for ours.  Without one shared answer to "is this ours?", the plugin would
+ *  · delete tools from a build agent's request,
+ *  · set `temperature` on somebody else's model call,
+ *  · offload a stranger's tool result into OUR run store,
+ *  · force `background: true` on a dispatch the user made on purpose,
+ *  · and tighten a permission the user's own config already decided.
+ *
+ * The answer is deliberately three-valued, and the third value is the one that
+ * needs explaining.  `unknown` means the host did not tell us which agent this is
+ * (the field is optional in the shape we were handed).  We then treat the call as
+ * NOT ours — requirement first, coverage second — but we COUNT it, because
+ * "governance is live" and "governance silently stopped applying because a field
+ * went missing in a host upgrade" are two different facts, and the second one has
+ * to be readable from `tm_stats` rather than inferred from a bad feeling.
+ *
+ * A session can also become known from the inside: every call to one of OUR tools
+ * carries a session id and an agent in its own context, so `learn()` records that
+ * pair and a later `execute.after` for the same session resolves even if the host
+ * left `agent` off that event.
+ */
+export type ScopeVerdict = "ours" | "foreign" | "unknown";
+export interface V2ScopeReport {
+    /** calls that belong to a Team role — the ones we are allowed to touch */
+    ours: number;
+    /** calls we identified as somebody else's and left completely alone */
+    foreign: number;
+    /** calls where the host gave us no agent at all — skipped, and the number that
+     *  tells whether the governance layers are actually live */
+    unknown: number;
+}
+export interface TeamScope {
+    readonly names: ReadonlySet<string>;
+    isOurs(agent: unknown): boolean;
+    decide(event: {
+        agent?: unknown;
+        sessionID?: unknown;
+    } | null | undefined): ScopeVerdict;
+    learn(agent: unknown, sessionID: unknown): void;
+    readonly report: V2ScopeReport;
+    /** counted at each call site, so a layer that never fires cannot look healthy */
+    count(verdict: ScopeVerdict): ScopeVerdict;
+}
+export declare function createTeamScope(names: Iterable<string>): TeamScope;
+//# sourceMappingURL=v2-scope.d.ts.map

package/dist/host/v2-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-scope.d.ts","sourceRoot":"","sources":["../../src/host/v2-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;AAEzD,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAA;IACZ,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAA;IACf;gEAC4D;IAC5D,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAA;IAC/B,MAAM,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,CAAA;IACxF,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI,CAAA;IAC/C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,iFAAiF;IACjF,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,YAAY,CAAA;CAC3C;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAyBlE"}

package/dist/host/v2-scope.js

@@ -0,0 +1,58 @@
+/**
+ * Team-scope isolation for the v2 personality (#22, user requirement 2026-09-25).
+ *
+ * "Everything the plugin changes must stay inside Team mode; the other modes
+ * (build, plan, anything the user installed) must look exactly like a freshly
+ * installed OpenCode."  Every v2 hook we register is GLOBAL — `execute.after`,
+ * `permission.evaluate`, `session.context` fire for every session on the host, not
+ * only for ours.  Without one shared answer to "is this ours?", the plugin would
+ *  · delete tools from a build agent's request,
+ *  · set `temperature` on somebody else's model call,
+ *  · offload a stranger's tool result into OUR run store,
+ *  · force `background: true` on a dispatch the user made on purpose,
+ *  · and tighten a permission the user's own config already decided.
+ *
+ * The answer is deliberately three-valued, and the third value is the one that
+ * needs explaining.  `unknown` means the host did not tell us which agent this is
+ * (the field is optional in the shape we were handed).  We then treat the call as
+ * NOT ours — requirement first, coverage second — but we COUNT it, because
+ * "governance is live" and "governance silently stopped applying because a field
+ * went missing in a host upgrade" are two different facts, and the second one has
+ * to be readable from `tm_stats` rather than inferred from a bad feeling.
+ *
+ * A session can also become known from the inside: every call to one of OUR tools
+ * carries a session id and an agent in its own context, so `learn()` records that
+ * pair and a later `execute.after` for the same session resolves even if the host
+ * left `agent` off that event.
+ */
+export function createTeamScope(names) {
+    const set = new Set([...names].map(String));
+    const bySession = new Map();
+    const report = { ours: 0, foreign: 0, unknown: 0 };
+    const scope = {
+        names: set,
+        isOurs: (agent) => typeof agent === "string" && set.has(agent),
+        learn(agent, sessionID) {
+            if (typeof sessionID !== "string" || !sessionID)
+                return;
+            if (typeof agent === "string" && set.has(agent))
+                bySession.set(sessionID, agent);
+        },
+        decide(event) {
+            const agent = event?.agent;
+            if (typeof agent === "string" && agent)
+                return set.has(agent) ? "ours" : "foreign";
+            const sid = event?.sessionID;
+            if (typeof sid === "string" && bySession.has(sid))
+                return "ours";
+            return "unknown";
+        },
+        count(verdict) {
+            report[verdict]++;
+            return verdict;
+        },
+        report,
+    };
+    return scope;
+}
+//# sourceMappingURL=v2-scope.js.map

package/dist/host/v2-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-scope.js","sourceRoot":"","sources":["../../src/host/v2-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAwBH,MAAM,UAAU,eAAe,CAAC,KAAuB;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC3C,MAAM,MAAM,GAAkB,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;IACjE,MAAM,KAAK,GAAc;QACvB,KAAK,EAAE,GAAG;QACV,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9D,KAAK,CAAC,KAAK,EAAE,SAAS;YACpB,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS;gBAAE,OAAM;YACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QAClF,CAAC;QACD,MAAM,CAAC,KAAK;YACV,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,CAAA;YAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK;gBAAE,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;YAClF,MAAM,GAAG,GAAG,KAAK,EAAE,SAAS,CAAA;YAC5B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAA;YAChE,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,KAAK,CAAC,OAAO;YACX,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;YACjB,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,MAAM;KACP,CAAA;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/host/v2-session-client.d.ts

@@ -0,0 +1,74 @@
+/**
+ * The v2 session read seam, shaped like the v1 client the collect path expects (#8).
+ *
+ * `tm_join` collects a child in two ways: it looks the child up in its own registry
+ * (children THIS plugin process created — and since `babfcb8` also the host's `subagent`
+ * children), and otherwise it asks the host. That ask was written against v1's SDK client
+ * (`client.session.get({path:{id}})`), and on a live host it never once resolved.
+ *
+ * Why it failed, read out of 2.0.18 rather than guessed (both quotes are from the embedded
+ * JS): the plugin-facing wrapper is a schema decode plus a single-object call —
+ *
+ *   te = (schema, fn) => (input) => decode(schema, input ?? {}) → fn(decoded)
+ *   get: te(N["session.get"], a.session.get)
+ *
+ * and the host's own call sites are flat:
+ *
+ *   await e.session.get({ sessionID: n })
+ *   await e.message.list({ sessionID: n, limit: 200, cursor: r })
+ *
+ * So our adapter had TWO bugs: the key (`path.id` / `id` instead of `sessionID`) and the
+ * arity (every shape was passed as a one-element ARRAY, which no `te`-wrapped method
+ * accepts). A decode failure looks exactly like "the host has no such method", which is
+ * how this stayed wrong for a whole release cycle.
+ *
+ * What this surface does NOT give, stated rather than discovered later:
+ *  · no `children` method, so adoption from the host's session tree is still impossible on
+ *    v2 — only an explicitly named id can be claimed, which is what the lead's prompt says.
+ *  · no `message`/`messages` domain on the plugin ctx (the host's internal `message.list`
+ *    is the SDK client, not this surface). `context` is the only candidate that could
+ *    carry a child's reply, so it is tried, and its outcome — including the NAMES of the
+ *    keys it returned — is recorded. Key names are safe; a message body is not written to
+ *    the trajectory by this file.
+ *  · the HTTP API does expose `GET /api/session/{id}/message` (136 distinct routes were
+ *    enumerated from a scanned window of the binary, and none of them is a todo list —
+ *    which settles the `tm_ledger` question: there is no host todo resource to read), but
+ *    reaching it needs the basic-auth password from
+ *    `~/.config/opencode/service.json`. A plugin reading the user's credential file to
+ *    call back into the host is a new trust boundary, so it is NOT done here; it is
+ *    recorded as the option with its cost attached. See
+ *    `docs/research/host-http-api.md`.
+ */
+export interface V2SessionReaderReport {
+    /** calls made through this adapter */
+    attempted: number;
+    /** calls that produced an object with a parent id */
+    resolved: number;
+    /** which argument shape the host answered — `sessionID` is the measured one */
+    usedShape?: string;
+    /** last error text, unwrapped from the host's own error envelope */
+    lastError?: string;
+    /** shapes tried and failed on the last call */
+    failedShapes: string[];
+    /** `ctx.session.context` was reached at all */
+    contextTried: number;
+    contextOk: number;
+    contextError?: string;
+    /** the KEY NAMES the context call returned (names only, never values) */
+    contextKeys: string[];
+}
+export interface V2SessionReader {
+    /** a `{session:{get,messages}}` object safe to hand to code written for the v1 client */
+    client: unknown;
+    report: V2SessionReaderReport;
+}
+/** Turn the host's flat context items into the `{info,parts}` shape the collect path
+ *  already understands. Only the ROLE is inferred here, and only from the item's own `type`
+ *  field (measured values: "user" for the brief, something else for the answer); a
+ *  `time.completed` is NEVER invented, because that field is the settle verdict and a
+ *  fabricated one would let tm_join claim a child finished at a time nobody observed.
+ *  Anything already shaped like v1 passes through untouched, so a host that changes back
+ *  does not need this code to change. */
+export declare function normaliseContextMessages(list: unknown): unknown;
+export declare function createV2SessionReader(ctx: unknown): V2SessionReader;
+//# sourceMappingURL=v2-session-client.d.ts.map

package/dist/host/v2-session-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-session-client.d.ts","sourceRoot":"","sources":["../../src/host/v2-session-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAA;IAChB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,+CAA+C;IAC/C,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,qBAAqB,CAAA;CAC9B;AA+BD;;;;;;yCAMyC;AACzC,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAgB/D;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,eAAe,CAwEnE"}

package/dist/host/v2-session-client.js

@@ -0,0 +1,171 @@
+/**
+ * The v2 session read seam, shaped like the v1 client the collect path expects (#8).
+ *
+ * `tm_join` collects a child in two ways: it looks the child up in its own registry
+ * (children THIS plugin process created — and since `babfcb8` also the host's `subagent`
+ * children), and otherwise it asks the host. That ask was written against v1's SDK client
+ * (`client.session.get({path:{id}})`), and on a live host it never once resolved.
+ *
+ * Why it failed, read out of 2.0.18 rather than guessed (both quotes are from the embedded
+ * JS): the plugin-facing wrapper is a schema decode plus a single-object call —
+ *
+ *   te = (schema, fn) => (input) => decode(schema, input ?? {}) → fn(decoded)
+ *   get: te(N["session.get"], a.session.get)
+ *
+ * and the host's own call sites are flat:
+ *
+ *   await e.session.get({ sessionID: n })
+ *   await e.message.list({ sessionID: n, limit: 200, cursor: r })
+ *
+ * So our adapter had TWO bugs: the key (`path.id` / `id` instead of `sessionID`) and the
+ * arity (every shape was passed as a one-element ARRAY, which no `te`-wrapped method
+ * accepts). A decode failure looks exactly like "the host has no such method", which is
+ * how this stayed wrong for a whole release cycle.
+ *
+ * What this surface does NOT give, stated rather than discovered later:
+ *  · no `children` method, so adoption from the host's session tree is still impossible on
+ *    v2 — only an explicitly named id can be claimed, which is what the lead's prompt says.
+ *  · no `message`/`messages` domain on the plugin ctx (the host's internal `message.list`
+ *    is the SDK client, not this surface). `context` is the only candidate that could
+ *    carry a child's reply, so it is tried, and its outcome — including the NAMES of the
+ *    keys it returned — is recorded. Key names are safe; a message body is not written to
+ *    the trajectory by this file.
+ *  · the HTTP API does expose `GET /api/session/{id}/message` (136 distinct routes were
+ *    enumerated from a scanned window of the binary, and none of them is a todo list —
+ *    which settles the `tm_ledger` question: there is no host todo resource to read), but
+ *    reaching it needs the basic-auth password from
+ *    `~/.config/opencode/service.json`. A plugin reading the user's credential file to
+ *    call back into the host is a new trust boundary, so it is NOT done here; it is
+ *    recorded as the option with its cost attached. See
+ *    `docs/research/host-http-api.md`.
+ */
+/** Measured first, then the v1 spellings kept as fallbacks for an older 2.x build. Each
+ *  builder returns the ARGUMENT OBJECT — `te`-wrapped methods take one object, not an
+ *  array, and that alone is why every previous shape failed. */
+const SHAPES = [
+    ["sessionID", (id) => ({ sessionID: id })],
+    ["path", (id) => ({ path: { id } })],
+    ["flat", (id) => ({ id })],
+];
+function idOf(opts) {
+    const o = (opts ?? {});
+    return String(o.path?.id ?? o.query?.id ?? o.sessionID ?? o.id ?? "");
+}
+function unwrap(value) {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const rec = value;
+    // `{data}` and `{result}` are both envelopes on this surface; reading a field off the
+    // wrapper yields undefined, which then reads as "not my child" and refuses a child that is.
+    for (const cand of [rec, rec.data, rec.result, rec.session]) {
+        if (cand && typeof cand === "object" && (("parentID" in cand) || ("parent_id" in cand) || ("id" in cand))) {
+            return cand;
+        }
+    }
+    return rec;
+}
+/** Turn the host's flat context items into the `{info,parts}` shape the collect path
+ *  already understands. Only the ROLE is inferred here, and only from the item's own `type`
+ *  field (measured values: "user" for the brief, something else for the answer); a
+ *  `time.completed` is NEVER invented, because that field is the settle verdict and a
+ *  fabricated one would let tm_join claim a child finished at a time nobody observed.
+ *  Anything already shaped like v1 passes through untouched, so a host that changes back
+ *  does not need this code to change. */
+export function normaliseContextMessages(list) {
+    if (!Array.isArray(list))
+        return list;
+    return list.map((item) => {
+        if (!item || typeof item !== "object")
+            return item;
+        const rec = item;
+        if (rec.info || Array.isArray(rec.parts) || Array.isArray(rec.content))
+            return item;
+        const text = rec.text;
+        if (typeof text !== "string" || !text.trim())
+            return item;
+        const type = String(rec.type ?? "");
+        const role = /^user$/i.test(type) ? "user" : "assistant";
+        const created = rec.time?.created;
+        return {
+            info: { role, ...(typeof created === "number" ? { time: { created } } : {}) },
+            parts: [{ type: "text", text }],
+        };
+    });
+}
+export function createV2SessionReader(ctx) {
+    const report = {
+        attempted: 0, resolved: 0, failedShapes: [], contextTried: 0, contextOk: 0, contextKeys: [],
+    };
+    const domain = ctx?.session;
+    const call = async (method, arg) => {
+        const fn = domain?.[method];
+        if (typeof fn !== "function")
+            return undefined;
+        // Property access on the domain, never a captured reference: a detached `get` loses
+        // its receiver and the host's client throws (the dispatch.ts §10 rule).
+        return await fn.call(domain, arg);
+    };
+    const client = {
+        session: {
+            get: async (opts) => {
+                const id = idOf(opts);
+                report.attempted++;
+                if (!id || !id.startsWith("ses"))
+                    return { data: undefined };
+                const tried = [];
+                for (const [shape, build] of SHAPES) {
+                    try {
+                        const raw = await call("get", build(id));
+                        const rec = unwrap(raw);
+                        if (rec) {
+                            report.resolved++;
+                            report.usedShape = shape;
+                            report.failedShapes = [];
+                            const parent = rec.parentID ?? rec.parent_id;
+                            return { data: { id, parentID: typeof parent === "string" ? parent : undefined, raw: rec } };
+                        }
+                        tried.push(shape);
+                    }
+                    catch (err) {
+                        tried.push(shape);
+                        report.lastError = String(err?.message ?? err).slice(0, 160);
+                    }
+                }
+                report.failedShapes = tried;
+                return { data: undefined };
+            },
+            /** The reply path: `ctx.session.context({sessionID})` is the in-process seam that
+             *  answers for a child's messages — measured on 2.0.18, where it returns an ARRAY of
+             *  `{id, time:{created}, text, type}`. That is NOT v1's `[{info:{role},parts:[…]}]`,
+             *  and this is the reason `tm_join` kept saying it could not read a reply that was
+             *  sitting right there: `lastAssistantMessage` tolerates an unknown shape by returning
+             *  no text, so the call succeeded and the body was silently dropped. The flat shape is
+             *  therefore NORMALISED here, at the seam that knows it, so the collect path stays
+             *  single-shaped — and the result says WHICH seam answered, because a reply that
+             *  credits "session.messages" (a v1 endpoint this host does not have) is a claim about
+             *  the host that nobody measured. */
+            messages: async (opts) => {
+                const id = idOf(opts);
+                if (!id || typeof domain?.context !== "function")
+                    return { data: undefined };
+                report.contextTried++;
+                try {
+                    const raw = await call("context", { sessionID: id });
+                    const rec = unwrap(raw);
+                    if (!rec)
+                        return { data: undefined };
+                    report.contextOk++;
+                    report.contextKeys = Array.isArray(rec) ? ["array"] : Object.keys(rec).slice(0, 24);
+                    const list = Array.isArray(rec) ? rec : (rec.messages ?? rec.data ?? rec);
+                    return { data: normaliseContextMessages(list), via: "ctx.session.context" };
+                }
+                catch (err) {
+                    report.contextError = String(err?.message ?? err).slice(0, 160);
+                    return { data: undefined };
+                }
+            },
+        },
+    };
+    return { client, report };
+}
+//# sourceMappingURL=v2-session-client.js.map