@te-river/opencode-team-mode 1.7.2 → 1.7.3

package/dist/host/v2-transcript.d.ts

@@ -1,73 +0,0 @@
-/**
- * Reading a CHILD session's own messages — in process, with no credential.
- *
- * This is the answer to the HTTP-API decision (task #32). The host's own API
- * (`docs/research/host-http-api.md`) does expose `GET /api/session/{id}/message`, and using
- * it would have meant reading the Basic-auth password out of
- * `<global-config>/service.json` — a secret that would then live in this plugin's memory,
- * in every error string the fetch layer can produce, and in any log line that quotes a
- * request. The user's condition for going there was "prove it cannot leak".
- *
- * Measured instead, on a live 2.0.18 with a plugin that only inspects its own ctx (zero
- * model tokens, `--model nope/nope`): the plugin ctx carries a full `session` domain —
- *
- *   hook create get switchAgent switchModel prompt generate command synthetic interrupt
- *   update move wait context
- *
- * and `ctx.session.context({ sessionID })` returns the session's message array. On the child
- * session of a real background dispatch that array had 5 items shaped
- * `{id, time:{created}, text, type}`. `ctx.session.get({sessionID})` returns
- * `{id, parentID, projectID, agent, model, outcome, tokens, title, location}`.
- *
- * So the capability was in front of us the whole time and the password was never needed:
- * nothing here opens a socket, reads a credential file, or can be redirected to a port that
- * is not our own host process. That is a stronger guarantee than "we will keep the secret
- * safe" — there is no secret.
- *
- * The one thing this MUST still earn is scope. `session.context` will answer for ANY session
- * id handed to it, including the user's unrelated `build`/`plan` sessions, which makes it a
- * private-content oracle if used carelessly. Therefore: parentage is verified with
- * `session.get` FIRST, and a session that is not the caller's own child is refused without
- * being read. The refusal is counted (`refused`) so "we did not look" stays distinguishable
- * from "we looked and were denied". Text bodies are never written to the trajectory — ids,
- * item counts and the chosen message's TYPE only, per R6.
- */
-export interface V2TranscriptReport {
-    /** read() calls made */
-    attempted: number;
-    /** calls that returned a non-empty body */
-    resolved: number;
-    /** calls refused because session.get said the child is not the caller's */
-    refused: number;
-    /** calls where the parentage check itself could not answer (no seam, host error) */
-    unverifiable: number;
-    lastError?: string;
-}
-export interface V2TranscriptResult {
-    text: string;
-    /** how many messages the host handed back */
-    items: number;
-    /** the `type` of the message the body was taken from, when it had one */
-    pickedType?: string;
-    /** why there is no body — names the seam that failed, never a guess */
-    error?: string;
-}
-export interface V2TranscriptReader {
-    read: (sessionID: string, callerSessionID: string) => Promise<V2TranscriptResult>;
-    report: V2TranscriptReport;
-    /** Whether this host gives the seam at all — the caller says so out loud when not. */
-    active: boolean;
-}
-/** The child's ANSWER is the last non-user message that carries text. Taking the last,
- *  rather than concatenating the transcript, is the whole point: the lead asked for the
- *  report, and the earlier turns are the work it does not want to pay tokens for. The type
- *  of the chosen item is returned so the reply can say where the text came from instead of
- *  implying it read the whole session. */
-export declare function pickChildReply(items: unknown[]): {
-    text: string;
-    type?: string;
-};
-export declare function createV2TranscriptReader(ctx: unknown): V2TranscriptReader;
-/** One line for tm_stats: what the reader was asked for and what it could say. */
-export declare function transcriptSummary(r: V2TranscriptReport): string;
-//# sourceMappingURL=v2-transcript.d.ts.map

package/dist/host/v2-transcript.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"v2-transcript.d.ts","sourceRoot":"","sources":["../../src/host/v2-transcript.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,MAAM,WAAW,kBAAkB;IACjC,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAA;IAChB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAA;IACf,oFAAoF;IACpF,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAA;IACb,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACjF,MAAM,EAAE,kBAAkB,CAAA;IAC1B,sFAAsF;IACtF,MAAM,EAAE,OAAO,CAAA;CAChB;AAkCD;;;;0CAI0C;AAC1C,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAQhF;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,CA2DzE;AAED,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAO/D"}

package/dist/host/v2-transcript.js

@@ -1,151 +0,0 @@
-/**
- * Reading a CHILD session's own messages — in process, with no credential.
- *
- * This is the answer to the HTTP-API decision (task #32). The host's own API
- * (`docs/research/host-http-api.md`) does expose `GET /api/session/{id}/message`, and using
- * it would have meant reading the Basic-auth password out of
- * `<global-config>/service.json` — a secret that would then live in this plugin's memory,
- * in every error string the fetch layer can produce, and in any log line that quotes a
- * request. The user's condition for going there was "prove it cannot leak".
- *
- * Measured instead, on a live 2.0.18 with a plugin that only inspects its own ctx (zero
- * model tokens, `--model nope/nope`): the plugin ctx carries a full `session` domain —
- *
- *   hook create get switchAgent switchModel prompt generate command synthetic interrupt
- *   update move wait context
- *
- * and `ctx.session.context({ sessionID })` returns the session's message array. On the child
- * session of a real background dispatch that array had 5 items shaped
- * `{id, time:{created}, text, type}`. `ctx.session.get({sessionID})` returns
- * `{id, parentID, projectID, agent, model, outcome, tokens, title, location}`.
- *
- * So the capability was in front of us the whole time and the password was never needed:
- * nothing here opens a socket, reads a credential file, or can be redirected to a port that
- * is not our own host process. That is a stronger guarantee than "we will keep the secret
- * safe" — there is no secret.
- *
- * The one thing this MUST still earn is scope. `session.context` will answer for ANY session
- * id handed to it, including the user's unrelated `build`/`plan` sessions, which makes it a
- * private-content oracle if used carelessly. Therefore: parentage is verified with
- * `session.get` FIRST, and a session that is not the caller's own child is refused without
- * being read. The refusal is counted (`refused`) so "we did not look" stays distinguishable
- * from "we looked and were denied". Text bodies are never written to the trajectory — ids,
- * item counts and the chosen message's TYPE only, per R6.
- */
-/** Unwrap whatever envelope the host puts on a result object. */
-function unwrap(raw) {
-    if (!raw || typeof raw !== "object")
-        return null;
-    const rec = raw;
-    for (const cand of [rec, rec.data, rec.result, rec.session]) {
-        if (cand && typeof cand === "object")
-            return cand;
-    }
-    return rec;
-}
-/** The text one message item carries, across the shapes the host has been seen to use:
- *  a bare `text` (measured on 2.0.18), `parts[]` (the persisted message shape), and
- *  `content[]` (the tool-result shape). Never descends into a tool payload. */
-function itemText(raw) {
-    if (!raw || typeof raw !== "object")
-        return null;
-    const it = raw;
-    const type = String(it.type ?? it.role ?? "");
-    const direct = it.text;
-    if (typeof direct === "string" && direct.trim())
-        return { text: direct, type };
-    for (const key of ["parts", "content"]) {
-        const arr = it[key];
-        if (!Array.isArray(arr))
-            continue;
-        const texts = arr
-            .map((p) => (p && typeof p === "object" ? p.text : undefined))
-            .filter((t) => typeof t === "string" && t.trim().length > 0);
-        if (texts.length)
-            return { text: texts.join(String.fromCharCode(10)), type };
-    }
-    return null;
-}
-/** The child's ANSWER is the last non-user message that carries text. Taking the last,
- *  rather than concatenating the transcript, is the whole point: the lead asked for the
- *  report, and the earlier turns are the work it does not want to pay tokens for. The type
- *  of the chosen item is returned so the reply can say where the text came from instead of
- *  implying it read the whole session. */
-export function pickChildReply(items) {
-    for (let i = items.length - 1; i >= 0; i--) {
-        const t = itemText(items[i]);
-        if (!t)
-            continue;
-        if (/^user$/i.test(t.type))
-            continue;
-        return { text: t.text, type: t.type || undefined };
-    }
-    return { text: "" };
-}
-export function createV2TranscriptReader(ctx) {
-    const report = { attempted: 0, resolved: 0, refused: 0, unverifiable: 0 };
-    const session = ctx?.session;
-    const getContext = session?.context;
-    const get = session?.get;
-    const active = typeof getContext === "function";
-    const call = async (fn, arg) => await fn.call(session, arg);
-    const read = async (sessionID, callerSessionID) => {
-        report.attempted++;
-        if (!active || typeof getContext !== "function") {
-            return { text: "", items: 0, error: "这个宿主没给 ctx.session.context" };
-        }
-        if (!sessionID || !callerSessionID)
-            return { text: "", items: 0, error: "缺少会话 id，无法核验归属" };
-        // Scope FIRST. A reader that takes whatever id it is handed is a private-content oracle,
-        // and "the user approved the API" does not extend to their unrelated sessions.
-        if (typeof get !== "function") {
-            report.unverifiable++;
-            return { text: "", items: 0, error: "宿主没给 ctx.session.get，无法核验子会话归属，因此没有读取正文" };
-        }
-        let parentID;
-        try {
-            const rec = unwrap(await call(get, { sessionID }));
-            const p = rec?.parentID ?? rec?.parent_id;
-            parentID = typeof p === "string" && p ? p : undefined;
-        }
-        catch (err) {
-            report.unverifiable++;
-            report.lastError = String(err?.message ?? err).slice(0, 160);
-            return { text: "", items: 0, error: `归属核验失败：${report.lastError ?? "宿主未回应"}` };
-        }
-        if (!parentID) {
-            report.unverifiable++;
-            return { text: "", items: 0, error: "宿主回答里没有 parentID，无法确认这个会话是你的子会话，因此没有读取正文" };
-        }
-        if (parentID !== callerSessionID) {
-            report.refused++;
-            return { text: "", items: 0, error: "这个会话不是你的子会话（宿主给的 parentID 不匹配），我没有读它" };
-        }
-        try {
-            const raw = await call(getContext, { sessionID });
-            const arr = Array.isArray(raw) ? raw : Array.isArray(raw?.data) ? raw.data : null;
-            if (!arr) {
-                report.lastError = "context 返回值不是数组";
-                return { text: "", items: 0, error: report.lastError };
-            }
-            const picked = pickChildReply(arr);
-            if (picked.text)
-                report.resolved++;
-            return { text: picked.text, items: arr.length, pickedType: picked.type };
-        }
-        catch (err) {
-            report.lastError = String(err?.message ?? err).slice(0, 160);
-            return { text: "", items: 0, error: `ctx.session.context 失败：${report.lastError}` };
-        }
-    };
-    return { read, report, active };
-}
-/** One line for tm_stats: what the reader was asked for and what it could say. */
-export function transcriptSummary(r) {
-    if (!r.attempted)
-        return "子会话正文读取：没被调用过（缝在场，没数据）";
-    return (`子会话正文读取：尝试 ${r.attempted} · 拿到正文 ${r.resolved} · ` +
-        `归属不符拒绝 ${r.refused} · 无法核验 ${r.unverifiable}` +
-        (r.lastError ? ` · 最后错误：${r.lastError}` : ""));
-}
-//# sourceMappingURL=v2-transcript.js.map

package/dist/host/v2-transcript.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"v2-transcript.js","sourceRoot":"","sources":["../../src/host/v2-transcript.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAiCH,iEAAiE;AACjE,SAAS,MAAM,CAAC,GAAY;IAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAChD,MAAM,GAAG,GAAG,GAAU,CAAA;IACtB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAW,CAAA;IAC1D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;+EAE+E;AAC/E,SAAS,QAAQ,CAAC,GAAY;IAC5B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAChD,MAAM,EAAE,GAAG,GAAU,CAAA;IACrB,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,CAAA;IACtB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC9E,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAU,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,CAAA;QACnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,SAAQ;QACjC,MAAM,KAAK,GAAG,GAAG;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;aACtE,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QAC3E,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IAC9E,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;0CAI0C;AAC1C,MAAM,UAAU,cAAc,CAAC,KAAgB;IAC7C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5B,IAAI,CAAC,CAAC;YAAE,SAAQ;QAChB,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAQ;QACpC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,CAAA;IACpD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,MAAM,MAAM,GAAuB,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;IAC7F,MAAM,OAAO,GAAI,GAA4C,EAAE,OAAO,CAAA;IACtE,MAAM,UAAU,GAAG,OAAO,EAAE,OAAO,CAAA;IACnC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,CAAA;IACxB,MAAM,MAAM,GAAG,OAAO,UAAU,KAAK,UAAU,CAAA;IAE/C,MAAM,IAAI,GAAG,KAAK,EAAE,EAAW,EAAE,GAAY,EAAoB,EAAE,CACjE,MAAO,EAA+B,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAE3D,MAAM,IAAI,GAAG,KAAK,EAAE,SAAiB,EAAE,eAAuB,EAA+B,EAAE;QAC7F,MAAM,CAAC,SAAS,EAAE,CAAA;QAClB,IAAI,CAAC,MAAM,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;YAChD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAA;QACpE,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,CAAC,eAAe;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAA;QAE1F,yFAAyF;QACzF,+EAA+E;QAC/E,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,CAAC,YAAY,EAAE,CAAA;YACrB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAA;QACjF,CAAC;QACD,IAAI,QAA4B,CAAA;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;YAClD,MAAM,CAAC,GAAG,GAAG,EAAE,QAAQ,IAAI,GAAG,EAAE,SAAS,CAAA;YACzC,QAAQ,GAAG,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,YAAY,EAAE,CAAA;YACrB,MAAM,CAAC,SAAS,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YACvF,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,CAAA;QAC/E,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,YAAY,EAAE,CAAA;YACrB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAA;QAClF,CAAC;QACD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACjC,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAA;QAC9E,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;YACjD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,GAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAG,GAAW,CAAC,IAAkB,CAAC,CAAC,CAAC,IAAI,CAAA;YAClH,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,CAAC,SAAS,GAAG,iBAAiB,CAAA;gBACpC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,CAAA;YACxD,CAAC;YACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;YAClC,IAAI,MAAM,CAAC,IAAI;gBAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;YAClC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,SAAS,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YACvF,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,0BAA0B,MAAM,CAAC,SAAS,EAAE,EAAE,CAAA;QACpF,CAAC;IACH,CAAC,CAAA;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AACjC,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,CAAqB;IACrD,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,wBAAwB,CAAA;IACjD,OAAO,CACL,cAAc,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,QAAQ,KAAK;QACnD,UAAU,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,YAAY,EAAE;QAC9C,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAA;AACH,CAAC"}

package/dist/host-hooks.d.ts

@@ -1,126 +0,0 @@
-/**
- * Host-hook leverage beyond the tool surface (2026-09-18 audit follow-up).
- *
- * Everything here rides an ALREADY-PUBLISHED plugin hook — no host source is
- * touched — and each knob is independently switchable, because this host's
- * d.ts has promised surfaces the runtime never delivered (`permission.ask`
- * is declared and never fires on 1.18.29/30). So: pure decisions in one
- * place, adapters that never throw and never mutate unless the payload has
- * the exact shape we verified.
- *
- * The four hooks implemented here:
- *   - `tool.definition`                → append OUR discipline to a built-in
- *     tool's OWN description, where the model decides (a bash timeout rule
- *     buried in a system prompt loses to one printed next to the parameter);
- *   - `chat.params`                    → per-agent sampling overrides
- *     (off by default: "all agents at 0.2" is a documented project
- *     invariant, so changing it is the user's call, not ours);
- *   - `experimental.session.compacting`
- *     + `experimental.compaction.autocontinue` → keep the reply skeleton and
- *     the handle rules ALIVE across a compaction, instead of letting the
- *     summarizer invent its own contract;
- *   - `shell.env`                      → NO_COLOR/TERM=dumb for every child
- *     shell (ANSI escapes in npm/cargo/pytest output are pure context
- *     tokens), plus an explicit operator passthrough.
- *
- * Deliberately NOT here: `experimental.chat.messages.transform`. Rewriting
- * the outgoing message array means guessing the live shape of tool results
- * at that layer; a wrong guess silently deletes the evidence the EVIDENCE
- * line depends on. It needs a live host probe first, not a plausible patch.
- */
-export declare const HOOK_ENV_DEFAULTS: {
-    readonly toolHints: "on";
-    readonly agentTemperature: "off";
-    readonly compactionContext: "on";
-    readonly compactionAutoContinue: "on";
-    readonly shellNoColor: "on";
-};
-type EnvLike = Record<string, string | undefined>;
-/** The on/off switches the plugin entry needs before building adapters. */
-export declare function hookSwitches(env?: EnvLike): {
-    toolHints: boolean;
-    compactionContext: boolean;
-};
-/**
- * Footers appended to a built-in tool's description, keyed by tool id.
- * Short, imperative, and about THIS plugin's guarantees — the point is that
- * the model reads it at the call site, not thousands of tokens earlier.
- */
-export declare const TOOL_HINTS: Record<string, string>;
-/**
- * The `task` footer when the operator has the host's background sub-agents
- * enabled (OPENCODE_EXPERIMENTAL_BACKGROUND_SUBAGENTS).  Without the flag the
- * hint above only explains the block; with it, `background:true` becomes the
- * route for parallel work the lead will keep following up on — the host's own
- * card links to the live child session and the host wakes the parent on
- * completion, neither of which a plugin tool can do.  TeamMode keeps the
- * injected text out of the context window (see src/task-offload.ts), so
- * visibility no longer costs tokens.
- */
-export declare const TASK_HINT_BACKGROUND: Partial<typeof TOOL_HINTS>;
-/**
- * The `tool.definition` adapter. Returns true when it appended (so the
- * caller can log it). Idempotent: a re-issued description that already
- * carries the marker is left byte-exact, and the host description is never
- * replaced — only extended.
- */
-export declare function applyToolDefinition(input: unknown, output: unknown, enabled?: boolean, overrides?: Partial<typeof TOOL_HINTS>): boolean;
-/**
- * Sampling per role, ONLY when the operator opts in. architect is the one
- * role whose job (design alternatives) genuinely suffers at 0.2; the
- * mechanical roles stay cold — a specialist that hallucinates a file path
- * costs the whole team a round.
- */
-export declare const AGENT_TEMPERATURES: Record<string, number>;
-/**
- * `TM_AGENT_TEMPERATURE` = off | on | `agent=value;agent=value`.
- * Returns the temperature to force, or null to leave the host's value alone.
- * A malformed table resolves to null rather than half-applying garbage.
- */
-export declare function resolveAgentTemperature(agent: unknown, env?: EnvLike): number | null;
-/** The `chat.params` adapter: only `temperature` is touched, and only when
- *  this agent has an override. */
-export declare function applyChatParams(input: unknown, output: unknown, env?: EnvLike): boolean;
-/**
- * Context lines handed to the host's compaction summarizer
- * (`experimental.session.compacting` → `output.context[]`).  We ADD to the
- * default prompt and never replace it: setting `output.prompt` would void
- * whatever the host itself learns to preserve, and the summarizer would stop
- * being the host's.
- *
- * Each line corresponds to a thing that, once summarized away, cannot be
- * re-derived without spending a round to rediscover it:
- *   - the reply skeleton — prose instead of STATUS:/CHANGES/… makes the
- *     lead's machine check fail for the rest of the session;
- *   - offload handles (ref/access_token/expire_at) — they are the ONLY
- *     window onto a payload that never entered context;
- *   - sub-agent child session ids (host `task`, leftovers of the old
- *     running work, and after a summary it looks indistinguishably like done
- *     work;
- *   - provenance (file:line / URL + confidence) — without it a finding
- *     degrades into model memory, the one thing this project refuses;
- *   - the todo list and board paths — the state lives there, not in chat.
- */
-export declare const COMPACTION_CONTEXT: string[];
-/** The `experimental.session.compacting` adapter — additive, idempotent. */
-export declare function applySessionCompacting(output: unknown, enabled?: boolean): boolean;
-/**
- * `experimental.compaction.autocontinue`.  Left ALONE by default: the host
- * resuming after a summary is what keeps a long pipeline moving, and
- * stopping mid-flight without being asked is a worse surprise than a
- * continued one.  `TM_COMPACTION_AUTOCONTINUE=off` opts out — then the run
- * pauses for the user to re-read state before anything touches files again.
- */
-export declare function applyCompactionAutoContinue(output: unknown, env?: EnvLike): boolean;
-/**
- * Environment for every child shell. NO_COLOR/TERM=dumb is a token saving
- * with no functional cost (an agent reading a progress bar reads nothing),
- * and `TM_SHELL_ENV` is the explicit operator passthrough (`K=V;K2=V2`) —
- * deliberately allowlisted rather than forwarding process env, so this hook
- * can never become a side channel for secrets into a sub-agent's shell.
- */
-export declare function resolveShellEnv(env?: EnvLike): Record<string, string>;
-/** The `shell.env` adapter. Never deletes an existing key the host set. */
-export declare function applyShellEnv(output: unknown, env?: EnvLike): boolean;
-export {};
-//# sourceMappingURL=host-hooks.d.ts.map

package/dist/host-hooks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"host-hooks.d.ts","sourceRoot":"","sources":["../src/host-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAA;AAEV,KAAK,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;AAOjD,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,GAAG,GAAE,OAAqB,GAAG;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,iBAAiB,EAAE,OAAO,CAAA;CAAE,CAK3G;AAID;;;;GAIG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAK7C,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,OAAO,UAAU,CAG3D,CAAA;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,OAAO,EACf,OAAO,UAAO,EACd,SAAS,CAAC,EAAE,OAAO,CAAC,OAAO,UAAU,CAAC,GACrC,OAAO,CAeT;AAID;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAOrD,CAAA;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,GAAE,OAAqB,GAAG,MAAM,GAAG,IAAI,CAkBjG;AAED;kCACkC;AAClC,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAE,OAAqB,GAAG,OAAO,CAWpG;AAID;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,kBAAkB,UAO9B,CAAA;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,UAAO,GAAG,OAAO,CAkB/E;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,GAAE,OAAqB,GAAG,OAAO,CAUhG;AAID;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,GAAE,OAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBlF;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,GAAE,OAAqB,GAAG,OAAO,CAkBlF"}

package/dist/host-hooks.js

@@ -1,284 +0,0 @@
-/**
- * Host-hook leverage beyond the tool surface (2026-09-18 audit follow-up).
- *
- * Everything here rides an ALREADY-PUBLISHED plugin hook — no host source is
- * touched — and each knob is independently switchable, because this host's
- * d.ts has promised surfaces the runtime never delivered (`permission.ask`
- * is declared and never fires on 1.18.29/30). So: pure decisions in one
- * place, adapters that never throw and never mutate unless the payload has
- * the exact shape we verified.
- *
- * The four hooks implemented here:
- *   - `tool.definition`                → append OUR discipline to a built-in
- *     tool's OWN description, where the model decides (a bash timeout rule
- *     buried in a system prompt loses to one printed next to the parameter);
- *   - `chat.params`                    → per-agent sampling overrides
- *     (off by default: "all agents at 0.2" is a documented project
- *     invariant, so changing it is the user's call, not ours);
- *   - `experimental.session.compacting`
- *     + `experimental.compaction.autocontinue` → keep the reply skeleton and
- *     the handle rules ALIVE across a compaction, instead of letting the
- *     summarizer invent its own contract;
- *   - `shell.env`                      → NO_COLOR/TERM=dumb for every child
- *     shell (ANSI escapes in npm/cargo/pytest output are pure context
- *     tokens), plus an explicit operator passthrough.
- *
- * Deliberately NOT here: `experimental.chat.messages.transform`. Rewriting
- * the outgoing message array means guessing the live shape of tool results
- * at that layer; a wrong guess silently deletes the evidence the EVIDENCE
- * line depends on. It needs a live host probe first, not a plausible patch.
- */
-export const HOOK_ENV_DEFAULTS = {
-    toolHints: "on",
-    agentTemperature: "off",
-    compactionContext: "on",
-    compactionAutoContinue: "on",
-    shellNoColor: "on",
-};
-const isOn = (raw, def) => {
-    const v = String(raw ?? "").trim().toLowerCase();
-    if (v === "")
-        return def === "on";
-    return !(v === "off" || v === "0" || v === "false" || v === "no");
-};
-/** The on/off switches the plugin entry needs before building adapters. */
-export function hookSwitches(env = process.env) {
-    return {
-        toolHints: isOn(env.TM_TOOL_HINTS, HOOK_ENV_DEFAULTS.toolHints),
-        compactionContext: isOn(env.TM_COMPACTION_CONTEXT, HOOK_ENV_DEFAULTS.compactionContext),
-    };
-}
-/* ---------- tool.definition ---------- */
-/**
- * Footers appended to a built-in tool's description, keyed by tool id.
- * Short, imperative, and about THIS plugin's guarantees — the point is that
- * the model reads it at the call site, not thousands of tokens earlier.
- */
-export const TOOL_HINTS = {
-    bash: "\n\n[OpenCode TeamMode] Time discipline: leave `timeout` out unless this step is genuinely slow — the default kill is 120 s and a bigger number only lengthens the silence, a read-only probe (ls/grep/rg/cat/Get-ChildItem) is never a 120-second command (values above the probe ceiling are clamped before the command runs). Independent steps do NOT belong chained with `;` into one call — separate calls, or one tm_ptc_run program.",
-    task: "\n\n[OpenCode TeamMode] This blocks your session until the child returns — the right shape for one task whose answer you need next. For several independent tasks you will keep following up on, pass `background: true` (needs the operator flag OPENCODE_EXPERIMENTAL_BACKGROUND_SUBAGENTS) so the user can watch the child and the host wakes you when it lands. Keep every brief self-contained: the child sees none of this conversation.",
-};
-/**
- * The `task` footer when the operator has the host's background sub-agents
- * enabled (OPENCODE_EXPERIMENTAL_BACKGROUND_SUBAGENTS).  Without the flag the
- * hint above only explains the block; with it, `background:true` becomes the
- * route for parallel work the lead will keep following up on — the host's own
- * card links to the live child session and the host wakes the parent on
- * completion, neither of which a plugin tool can do.  TeamMode keeps the
- * injected text out of the context window (see src/task-offload.ts), so
- * visibility no longer costs tokens.
- */
-export const TASK_HINT_BACKGROUND = {
-    task: "\n\n[OpenCode TeamMode] Delegating: `background:true` frees this session at once, the user can open the child's card to watch it, and the host wakes you with the result — TeamMode keeps that finished text OUT of your context (you get a preview). Use it when several children run at once and you will keep working meanwhile; a plain `task` call is right when your very next step needs the answer in hand. To pull a finished child's whole reply back deliberately: `tm_join { ids: [\"<child session>\"] }` — it comes through the offload pipeline as a handle + preview instead of kilotokens inline.",
-};
-/**
- * The `tool.definition` adapter. Returns true when it appended (so the
- * caller can log it). Idempotent: a re-issued description that already
- * carries the marker is left byte-exact, and the host description is never
- * replaced — only extended.
- */
-export function applyToolDefinition(input, output, enabled = true, overrides) {
-    if (!enabled)
-        return false;
-    try {
-        const toolID = String(input?.toolID ?? "").trim().toLowerCase();
-        const key = Object.keys(TOOL_HINTS).find((k) => toolID === k || toolID.endsWith(`:${k}`) || toolID.endsWith(`/${k}`));
-        if (!key)
-            return false;
-        const out = output;
-        if (!out || typeof out.description !== "string")
-            return false;
-        const marker = "[OpenCode TeamMode]";
-        if (out.description.includes(marker))
-            return false;
-        out.description = out.description + (overrides?.[key] ?? TOOL_HINTS[key]);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/* ---------- chat.params ---------- */
-/**
- * Sampling per role, ONLY when the operator opts in. architect is the one
- * role whose job (design alternatives) genuinely suffers at 0.2; the
- * mechanical roles stay cold — a specialist that hallucinates a file path
- * costs the whole team a round.
- */
-export const AGENT_TEMPERATURES = {
-    architect: 0.35,
-    researcher: 0.3,
-    team: 0.2,
-    implementer: 0.2,
-    reviewer: 0.1,
-    tester: 0.2,
-};
-/**
- * `TM_AGENT_TEMPERATURE` = off | on | `agent=value;agent=value`.
- * Returns the temperature to force, or null to leave the host's value alone.
- * A malformed table resolves to null rather than half-applying garbage.
- */
-export function resolveAgentTemperature(agent, env = process.env) {
-    const raw = String(env.TM_AGENT_TEMPERATURE ?? HOOK_ENV_DEFAULTS.agentTemperature).trim().toLowerCase();
-    if (raw === "" || raw === HOOK_ENV_DEFAULTS.agentTemperature)
-        return null;
-    const name = String(agent ?? "").trim().toLowerCase();
-    if (!name)
-        return null;
-    if (raw === "on" || raw === "true" || raw === "1") {
-        const t = AGENT_TEMPERATURES[name];
-        return typeof t === "number" ? t : null;
-    }
-    const table = {};
-    for (const part of raw.split(/[;,]/)) {
-        const m = /^\s*([a-z0-9_-]{1,24})\s*=\s*(\d+(?:\.\d+)?)\s*$/.exec(part);
-        if (!m)
-            return null;
-        const value = Number(m[2]);
-        if (!Number.isFinite(value) || value < 0 || value > 2)
-            return null;
-        table[m[1]] = value;
-    }
-    return typeof table[name] === "number" ? table[name] : null;
-}
-/** The `chat.params` adapter: only `temperature` is touched, and only when
- *  this agent has an override. */
-export function applyChatParams(input, output, env = process.env) {
-    try {
-        const t = resolveAgentTemperature(input?.agent, env);
-        if (t === null)
-            return false;
-        const out = output;
-        if (!out || typeof out.temperature !== "number")
-            return false;
-        out.temperature = t;
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/* ---------- compaction ---------- */
-/**
- * Context lines handed to the host's compaction summarizer
- * (`experimental.session.compacting` → `output.context[]`).  We ADD to the
- * default prompt and never replace it: setting `output.prompt` would void
- * whatever the host itself learns to preserve, and the summarizer would stop
- * being the host's.
- *
- * Each line corresponds to a thing that, once summarized away, cannot be
- * re-derived without spending a round to rediscover it:
- *   - the reply skeleton — prose instead of STATUS:/CHANGES/… makes the
- *     lead's machine check fail for the rest of the session;
- *   - offload handles (ref/access_token/expire_at) — they are the ONLY
- *     window onto a payload that never entered context;
- *   - sub-agent child session ids (host `task`, leftovers of the old
- *     running work, and after a summary it looks indistinguishably like done
- *     work;
- *   - provenance (file:line / URL + confidence) — without it a finding
- *     degrades into model memory, the one thing this project refuses;
- *   - the todo list and board paths — the state lives there, not in chat.
- */
-export const COMPACTION_CONTEXT = [
-    "The GOAL directive survives compaction: the user's own ask (GOAL + its ACCEPTANCE criteria) is the contract for this run — carry it verbatim, keep working while a criterion lacks EVIDENCE, and never let a summarized transcript quietly redefine or shrink what they asked for.",
-    "OpenCode TeamMode contract survives compaction: every specialist reply keeps the STATUS / CHANGES / FINDINGS / EVIDENCE / HANDOFF skeleton and the lead machine-checks it — never summarize a reply into prose without those keys.",
-    "Offloaded payloads are addressed by handle (ref + access_token + expire_at) from tm_* results. Carry the handles forward VERBATIM; never re-run a tool to rediscover a payload a handle already names.",
-    "Sub-agent children (the host's task tool, including background tasks) must survive with their session ids: an uncollected child is still-running work, not finished work — and a turn that ends with children open does NOT mean the task is done. After this summary, keep waiting/collecting before reporting anything as delivered.",
-    "Every finding keeps its source (file:line or URL) and confidence tag after compaction, otherwise it is unverifiable memory.",
-    "The todo list and the blackboard files are the state, not the transcript: keep task items and board paths, drop chit-chat and raw command echo.",
-];
-/** The `experimental.session.compacting` adapter — additive, idempotent. */
-export function applySessionCompacting(output, enabled = true) {
-    if (!enabled)
-        return false;
-    try {
-        const out = output;
-        if (!out)
-            return false;
-        if (!Array.isArray(out.context))
-            out.context = [];
-        const list = out.context;
-        let added = 0;
-        for (const line of COMPACTION_CONTEXT) {
-            if (!list.includes(line)) {
-                list.push(line);
-                added++;
-            }
-        }
-        return added > 0;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * `experimental.compaction.autocontinue`.  Left ALONE by default: the host
- * resuming after a summary is what keeps a long pipeline moving, and
- * stopping mid-flight without being asked is a worse surprise than a
- * continued one.  `TM_COMPACTION_AUTOCONTINUE=off` opts out — then the run
- * pauses for the user to re-read state before anything touches files again.
- */
-export function applyCompactionAutoContinue(output, env = process.env) {
-    try {
-        if (isOn(env.TM_COMPACTION_AUTOCONTINUE, HOOK_ENV_DEFAULTS.compactionAutoContinue))
-            return false;
-        const out = output;
-        if (!out || typeof out.enabled !== "boolean")
-            return false;
-        out.enabled = false;
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/* ---------- shell.env ---------- */
-/**
- * Environment for every child shell. NO_COLOR/TERM=dumb is a token saving
- * with no functional cost (an agent reading a progress bar reads nothing),
- * and `TM_SHELL_ENV` is the explicit operator passthrough (`K=V;K2=V2`) —
- * deliberately allowlisted rather than forwarding process env, so this hook
- * can never become a side channel for secrets into a sub-agent's shell.
- */
-export function resolveShellEnv(env = process.env) {
-    const out = {};
-    if (isOn(env.TM_SHELL_NO_COLOR, HOOK_ENV_DEFAULTS.shellNoColor)) {
-        out.NO_COLOR = "1";
-        out.CLANG_COLOR_MODE = "never";
-        out.TERM = "dumb";
-    }
-    const raw = String(env.TM_SHELL_ENV ?? "").trim();
-    if (raw) {
-        for (const part of raw.split(/[;]/)) {
-            const m = /^\s*([A-Za-z_][A-Za-z0-9_]{0,40})\s*=\s*(.*)$/.exec(part);
-            if (!m)
-                continue;
-            out[m[1]] = m[2].replace(/\s+$/, "");
-        }
-    }
-    return out;
-}
-/** The `shell.env` adapter. Never deletes an existing key the host set. */
-export function applyShellEnv(output, env = process.env) {
-    try {
-        const patch = resolveShellEnv(env);
-        const out = output;
-        if (!out || Object.keys(patch).length === 0)
-            return false;
-        if (!out.env || typeof out.env !== "object")
-            out.env = {};
-        const target = out.env;
-        let added = 0;
-        for (const [k, v] of Object.entries(patch)) {
-            if (target[k] === undefined) {
-                target[k] = v;
-                added++;
-            }
-        }
-        return added > 0;
-    }
-    catch {
-        return false;
-    }
-}
-//# sourceMappingURL=host-hooks.js.map