@veris-ai/daytona-opencode 0.1.1 → 0.2.0-rc.1

package/.opencode/plugin/daytona/index.d.ts

@@ -3,8 +3,10 @@
  * SPDX-License-Identifier: Apache-2.0
  */
 import type { PluginInput } from '@opencode-ai/plugin';
+import { verisConfig } from './plugins/veris-config';
 export type { EventSessionDeleted, LogLevel, SandboxInfo, SessionInfo, ProjectSessionData } from './core/types';
 declare function daytonaPlugin(ctx: PluginInput): Promise<{
+    config: typeof verisConfig;
     tool: {
         bash: {
             description: string;
@@ -117,6 +119,15 @@ declare function daytonaPlugin(ctx: PluginInput): Promise<{
                 service?: string;
             }, ctx: import("@opencode-ai/plugin").ToolContext): Promise<string>;
         };
+        verisTwin: {
+            description: string;
+            args: {
+                service: import("zod").ZodOptional<import("zod").ZodString>;
+            };
+            execute(args: {
+                service?: string;
+            }, ctx: import("@opencode-ai/plugin").ToolContext): Promise<string>;
+        };
     };
     event: (args: any) => Promise<void>;
     'experimental.chat.system.transform': (input: import("./core/types").ExperimentalChatSystemTransformInput, output: import("./core/types").ExperimentalChatSystemTransformOutput) => Promise<void>;

package/.opencode/plugin/daytona/index.js

@@ -32,6 +32,7 @@ import { toast } from './core/toast';
 import { customTools } from './plugins/custom-tools';
 import { eventHandlers } from './plugins/session-events';
 import { systemPromptTransform } from './plugins/system-transform';
+import { verisConfig } from './plugins/veris-config';
 const xdgDataDir = xdgData ?? join(homedir(), '.local', 'share');
 const LOG_FILE = join(xdgDataDir, 'opencode', 'log', 'daytona.log');
 const STORAGE_DIR = join(xdgDataDir, 'opencode', 'storage', 'daytona');
@@ -41,6 +42,7 @@ const sessionManager = new DaytonaSessionManager(process.env.DAYTONA_API_KEY ||
 async function daytonaPlugin(ctx) {
     toast.initialize(ctx.client?.tui);
     return {
+        config: verisConfig,
         tool: await customTools(ctx, sessionManager),
         event: await eventHandlers(ctx, sessionManager, REPO_PATH),
         'experimental.chat.system.transform': await systemPromptTransform(ctx, REPO_PATH),

package/.opencode/plugin/daytona/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAErC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAIlE,MAAM,UAAU,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;AAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;AACnE,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;AACtE,MAAM,SAAS,GAAG,uBAAuB,CAAA;AAEzC,cAAc,CAAC,QAAQ,CAAC,CAAA;AACxB,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAC9C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,EACjC,WAAW,EACX,SAAS,EACT,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAC7B,CAAA;AAED,KAAK,UAAU,aAAa,CAAC,GAAgB;IAC3C,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,OAAO;QACL,IAAI,EAAE,MAAM,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC;QAC5C,KAAK,EAAE,MAAM,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,CAAC;QAC1D,oCAAoC,EAAE,MAAM,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC;QACjF,mFAAmF;QACnF,iFAAiF;QACjF,iFAAiF;QACjF,iFAAiF;QACjF,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAA;YACtE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAA;YAChG,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,eAAe,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAErC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAIpD,MAAM,UAAU,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;AAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;AACnE,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;AACtE,MAAM,SAAS,GAAG,uBAAuB,CAAA;AAEzC,cAAc,CAAC,QAAQ,CAAC,CAAA;AACxB,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAC9C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,EACjC,WAAW,EACX,SAAS,EACT,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAC7B,CAAA;AAED,KAAK,UAAU,aAAa,CAAC,GAAgB;IAC3C,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,MAAM,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC;QAC5C,KAAK,EAAE,MAAM,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,CAAC;QAC1D,oCAAoC,EAAE,MAAM,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC;QACjF,mFAAmF;QACnF,iFAAiF;QACjF,iFAAiF;QACjF,iFAAiF;QACjF,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAA;YACtE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAA;YAChG,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,eAAe,aAAa,CAAA"}

package/.opencode/plugin/daytona/index.ts

@@ -35,6 +35,7 @@ import { toast } from './core/toast'
 import { customTools } from './plugins/custom-tools'
 import { eventHandlers } from './plugins/session-events'
 import { systemPromptTransform } from './plugins/system-transform'
+import { verisConfig } from './plugins/veris-config'
 
 export type { EventSessionDeleted, LogLevel, SandboxInfo, SessionInfo, ProjectSessionData } from './core/types'
 
@@ -54,6 +55,7 @@ const sessionManager = new DaytonaSessionManager(
 async function daytonaPlugin(ctx: PluginInput) {
   toast.initialize(ctx.client?.tui)
   return {
+    config: verisConfig,
     tool: await customTools(ctx, sessionManager),
     event: await eventHandlers(ctx, sessionManager, REPO_PATH),
     'experimental.chat.system.transform': await systemPromptTransform(ctx, REPO_PATH),

package/.opencode/plugin/daytona/plugins/custom-tools.d.ts

@@ -119,4 +119,13 @@ export declare function customTools(ctx: PluginInput, sessionManager: DaytonaSes
             service?: string;
         }, ctx: import("@opencode-ai/plugin").ToolContext): Promise<string>;
     };
+    verisTwin: {
+        description: string;
+        args: {
+            service: import("zod").ZodOptional<import("zod").ZodString>;
+        };
+        execute(args: {
+            service?: string;
+        }, ctx: import("@opencode-ai/plugin").ToolContext): Promise<string>;
+    };
 }>;

package/.opencode/plugin/daytona/plugins/system-transform.js

@@ -32,6 +32,14 @@ export async function systemPromptTransform(ctx, repoPath) {
             'read what the twin actually received. If the receipt is empty, the change does not',
             'work yet — report that, do not report success. Cite the receipt when you claim an',
             'integration works.',
+            '',
+            'The twin already exists and this plugin owns its lifecycle: it was created with the',
+            'sandbox and is deleted with it. Do NOT create or delete Veris sandboxes. Run the',
+            'verisTwin tool to get its id (every Veris MCP tool takes one) and to read a',
+            "service's manual before writing code against it. Nothing here runs under",
+            '`veris-proxy` — egress is already intercepted at the sandbox boundary, so any',
+            'instruction to start a proxy or provision a sandbox is describing a different setup',
+            'than this one.',
         ].join('\n'));
     };
 }

package/.opencode/plugin/daytona/plugins/system-transform.js.map

@@ -1 +1 @@
-{"version":3,"file":"system-transform.js","sourceRoot":"","sources":["system-transform.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAgB,EAAE,QAAgB;IAC5E,OAAO,KAAK,EAAE,KAA2C,EAAE,MAA6C,EAAE,EAAE;QAC1G,MAAM,CAAC,MAAM,CAAC,IAAI,CAChB;YACE,gCAAgC;YAChC,oDAAoD;YACpD,8CAA8C,QAAQ,GAAG;YACzD,2CAA2C;YAC3C,gHAAgH;YAChH,+FAA+F;YAC/F,yFAAyF;YACzF,wGAAwG;YACxG,EAAE;YACF,eAAe;YACf,qFAAqF;YACrF,qFAAqF;YACrF,iFAAiF;YACjF,mFAAmF;YACnF,iFAAiF;YACjF,+EAA+E;YAC/E,EAAE;YACF,oFAAoF;YACpF,mFAAmF;YACnF,oFAAoF;YACpF,oFAAoF;YACpF,oFAAoF;YACpF,mFAAmF;YACnF,oBAAoB;SACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;IACH,CAAC,CAAA;AACH,CAAC"}
+{"version":3,"file":"system-transform.js","sourceRoot":"","sources":["system-transform.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAgB,EAAE,QAAgB;IAC5E,OAAO,KAAK,EAAE,KAA2C,EAAE,MAA6C,EAAE,EAAE;QAC1G,MAAM,CAAC,MAAM,CAAC,IAAI,CAChB;YACE,gCAAgC;YAChC,oDAAoD;YACpD,8CAA8C,QAAQ,GAAG;YACzD,2CAA2C;YAC3C,gHAAgH;YAChH,+FAA+F;YAC/F,yFAAyF;YACzF,wGAAwG;YACxG,EAAE;YACF,eAAe;YACf,qFAAqF;YACrF,qFAAqF;YACrF,iFAAiF;YACjF,mFAAmF;YACnF,iFAAiF;YACjF,+EAA+E;YAC/E,EAAE;YACF,oFAAoF;YACpF,mFAAmF;YACnF,oFAAoF;YACpF,oFAAoF;YACpF,oFAAoF;YACpF,mFAAmF;YACnF,oBAAoB;YACpB,EAAE;YACF,qFAAqF;YACrF,kFAAkF;YAClF,6EAA6E;YAC7E,0EAA0E;YAC1E,+EAA+E;YAC/E,qFAAqF;YACrF,gBAAgB;SACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;IACH,CAAC,CAAA;AACH,CAAC"}

package/.opencode/plugin/daytona/plugins/system-transform.ts

@@ -37,6 +37,14 @@ export async function systemPromptTransform(ctx: PluginInput, repoPath: string)
         'read what the twin actually received. If the receipt is empty, the change does not',
         'work yet — report that, do not report success. Cite the receipt when you claim an',
         'integration works.',
+        '',
+        'The twin already exists and this plugin owns its lifecycle: it was created with the',
+        'sandbox and is deleted with it. Do NOT create or delete Veris sandboxes. Run the',
+        'verisTwin tool to get its id (every Veris MCP tool takes one) and to read a',
+        "service's manual before writing code against it. Nothing here runs under",
+        '`veris-proxy` — egress is already intercepted at the sandbox boundary, so any',
+        'instruction to start a proxy or provision a sandbox is describing a different setup',
+        'than this one.',
       ].join('\n'),
     )
   }

package/.opencode/plugin/daytona/plugins/veris-config.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Copyright Veris AI
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * Wires the Veris MCP server into the session, and gates the two of its tools
+ * that are always wrong here.
+ *
+ * The MCP is the shared home for twin LIFECYCLE (get, promote, reset). Keeping
+ * it there rather than reimplementing those as plugin tools is what stops a
+ * second engine plugin from having to grow the same surface again: the only
+ * thing to copy is this file.
+ *
+ * Everything is `??=`, so a user's own opencode.json always wins and someone who
+ * already has `opencode-veris-sim` installed globally gets no double
+ * registration. The whole body is wrapped: a failed registration should surface
+ * as a missing MCP server, never as OpenCode failing to start.
+ */
+import type { Hooks } from '@opencode-ai/plugin';
+type OpencodeConfig = Parameters<NonNullable<Hooks['config']>>[0];
+export declare function verisConfig(cfg: OpencodeConfig): Promise<void>;
+export {};

package/.opencode/plugin/daytona/plugins/veris-config.js

@@ -0,0 +1,76 @@
+/**
+ * Copyright Veris AI
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * Wires the Veris MCP server into the session, and gates the two of its tools
+ * that are always wrong here.
+ *
+ * The MCP is the shared home for twin LIFECYCLE (get, promote, reset). Keeping
+ * it there rather than reimplementing those as plugin tools is what stops a
+ * second engine plugin from having to grow the same surface again: the only
+ * thing to copy is this file.
+ *
+ * Everything is `??=`, so a user's own opencode.json always wins and someone who
+ * already has `opencode-veris-sim` installed globally gets no double
+ * registration. The whole body is wrapped: a failed registration should surface
+ * as a missing MCP server, never as OpenCode failing to start.
+ */
+import { logger } from '../core/logger';
+/**
+ * Defaults for the MCP's destructive tools. The plugin creates and owns this
+ * session's twin, which is what makes two of these never the right call:
+ *
+ *   create_sandbox   makes a twin the plugin does not know about. Traffic still
+ *                    goes to the plugin's twin and verisReceipt still reads the
+ *                    plugin's twin, so the agent would seed the orphan and then
+ *                    report success — the exact failure the receipt exists to
+ *                    catch, reintroduced one layer up.
+ *   delete_sandbox   destroys the running session's twin. The egress credential
+ *                    dies with it and every later call fails obscurely.
+ *   promote_sandbox  legitimate, but it freezes and scrubs the sandbox AND
+ *                    rewrites what every future run in the environment starts
+ *                    from. That is a human's decision.
+ *   reset_sandbox    legitimate, but it clears /veris/requests, which is the
+ *                    receipt.
+ */
+const TOOL_PERMISSIONS = {
+    veris_create_sandbox: 'deny',
+    veris_delete_sandbox: 'deny',
+    veris_promote_sandbox: 'ask',
+    veris_reset_sandbox: 'ask',
+};
+const DEFAULT_API_BASE = 'https://svc.api.veris.ai';
+export async function verisConfig(cfg) {
+    try {
+        // No key, no registration. Registering with an empty header instead would
+        // give a server that fails every call and reads as a Veris outage; the
+        // session manager already reports the missing credential properly.
+        const apiKey = process.env.VERIS_API_KEY;
+        if (!apiKey)
+            return;
+        cfg.mcp ??= {};
+        cfg.mcp.veris ??= {
+            type: 'remote',
+            url: `${process.env.VERIS_API_BASE || DEFAULT_API_BASE}/mcp`,
+            headers: { 'X-API-Key': apiKey },
+            // The Veris MCP authenticates by header. Without this, OAuth
+            // auto-detection can intercept the connection and prompt for a login
+            // that does not exist.
+            oauth: false,
+        };
+        // `permission` may legally be a bare 'ask' | 'allow' | 'deny' that applies
+        // to everything; only the object form takes per-tool keys. The bundled SDK
+        // types predate both that string form and the arbitrary-tool-name index
+        // signature the running config schema documents, hence the assertion.
+        if (typeof cfg.permission === 'string')
+            return;
+        const permission = (cfg.permission ??= {});
+        for (const [tool, action] of Object.entries(TOOL_PERMISSIONS)) {
+            permission[tool] ??= action;
+        }
+    }
+    catch (err) {
+        logger.warn(`[veris] MCP registration skipped: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+//# sourceMappingURL=veris-config.js.map

package/.opencode/plugin/daytona/plugins/veris-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"veris-config.js","sourceRoot":"","sources":["veris-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAIvC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,gBAAgB,GAAmC;IACvD,oBAAoB,EAAE,MAAM;IAC5B,oBAAoB,EAAE,MAAM;IAC5B,qBAAqB,EAAE,KAAK;IAC5B,mBAAmB,EAAE,KAAK;CAC3B,CAAA;AAED,MAAM,gBAAgB,GAAG,0BAA0B,CAAA;AAEnD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAmB;IACnD,IAAI,CAAC;QACH,0EAA0E;QAC1E,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QACxC,IAAI,CAAC,MAAM;YAAE,OAAM;QAEnB,GAAG,CAAC,GAAG,KAAK,EAAE,CAAA;QACd,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK;YAChB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,gBAAgB,MAAM;YAC5D,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;YAChC,6DAA6D;YAC7D,qEAAqE;YACrE,uBAAuB;YACvB,KAAK,EAAE,KAAK;SACb,CAAA;QAED,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;YAAE,OAAM;QAC9C,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,CAA4B,CAAA;QACrE,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9D,UAAU,CAAC,IAAI,CAAC,KAAK,MAAM,CAAA;QAC7B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACtG,CAAC;AACH,CAAC"}

package/.opencode/plugin/daytona/plugins/veris-config.ts

@@ -0,0 +1,81 @@
+/**
+ * Copyright Veris AI
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * Wires the Veris MCP server into the session, and gates the two of its tools
+ * that are always wrong here.
+ *
+ * The MCP is the shared home for twin LIFECYCLE (get, promote, reset). Keeping
+ * it there rather than reimplementing those as plugin tools is what stops a
+ * second engine plugin from having to grow the same surface again: the only
+ * thing to copy is this file.
+ *
+ * Everything is `??=`, so a user's own opencode.json always wins and someone who
+ * already has `opencode-veris-sim` installed globally gets no double
+ * registration. The whole body is wrapped: a failed registration should surface
+ * as a missing MCP server, never as OpenCode failing to start.
+ */
+
+import type { Hooks } from '@opencode-ai/plugin'
+import { logger } from '../core/logger'
+
+type OpencodeConfig = Parameters<NonNullable<Hooks['config']>>[0]
+
+/**
+ * Defaults for the MCP's destructive tools. The plugin creates and owns this
+ * session's twin, which is what makes two of these never the right call:
+ *
+ *   create_sandbox   makes a twin the plugin does not know about. Traffic still
+ *                    goes to the plugin's twin and verisReceipt still reads the
+ *                    plugin's twin, so the agent would seed the orphan and then
+ *                    report success — the exact failure the receipt exists to
+ *                    catch, reintroduced one layer up.
+ *   delete_sandbox   destroys the running session's twin. The egress credential
+ *                    dies with it and every later call fails obscurely.
+ *   promote_sandbox  legitimate, but it freezes and scrubs the sandbox AND
+ *                    rewrites what every future run in the environment starts
+ *                    from. That is a human's decision.
+ *   reset_sandbox    legitimate, but it clears /veris/requests, which is the
+ *                    receipt.
+ */
+const TOOL_PERMISSIONS: Record<string, 'ask' | 'deny'> = {
+  veris_create_sandbox: 'deny',
+  veris_delete_sandbox: 'deny',
+  veris_promote_sandbox: 'ask',
+  veris_reset_sandbox: 'ask',
+}
+
+const DEFAULT_API_BASE = 'https://svc.api.veris.ai'
+
+export async function verisConfig(cfg: OpencodeConfig): Promise<void> {
+  try {
+    // No key, no registration. Registering with an empty header instead would
+    // give a server that fails every call and reads as a Veris outage; the
+    // session manager already reports the missing credential properly.
+    const apiKey = process.env.VERIS_API_KEY
+    if (!apiKey) return
+
+    cfg.mcp ??= {}
+    cfg.mcp.veris ??= {
+      type: 'remote',
+      url: `${process.env.VERIS_API_BASE || DEFAULT_API_BASE}/mcp`,
+      headers: { 'X-API-Key': apiKey },
+      // The Veris MCP authenticates by header. Without this, OAuth
+      // auto-detection can intercept the connection and prompt for a login
+      // that does not exist.
+      oauth: false,
+    }
+
+    // `permission` may legally be a bare 'ask' | 'allow' | 'deny' that applies
+    // to everything; only the object form takes per-tool keys. The bundled SDK
+    // types predate both that string form and the arbitrary-tool-name index
+    // signature the running config schema documents, hence the assertion.
+    if (typeof cfg.permission === 'string') return
+    const permission = (cfg.permission ??= {}) as Record<string, unknown>
+    for (const [tool, action] of Object.entries(TOOL_PERMISSIONS)) {
+      permission[tool] ??= action
+    }
+  } catch (err) {
+    logger.warn(`[veris] MCP registration skipped: ${err instanceof Error ? err.message : String(err)}`)
+  }
+}

package/.opencode/plugin/daytona/tools/veris-receipt.d.ts

@@ -2,7 +2,7 @@
  * Copyright Veris AI
  * SPDX-License-Identifier: Apache-2.0
  *
- * The eleventh tool, and the only one this fork adds.
+ * The tool this fork exists for.
  *
  * Every other tool tells the agent what its own code did. This one tells it
  * what the VENDOR received — read from the twin, not from the sandbox — which

package/.opencode/plugin/daytona/tools/veris-receipt.js

@@ -2,7 +2,7 @@
  * Copyright Veris AI
  * SPDX-License-Identifier: Apache-2.0
  *
- * The eleventh tool, and the only one this fork adds.
+ * The tool this fork exists for.
  *
  * Every other tool tells the agent what its own code did. This one tells it
  * what the VENDOR received — read from the twin, not from the sandbox — which

package/.opencode/plugin/daytona/tools/veris-receipt.ts

@@ -2,7 +2,7 @@
  * Copyright Veris AI
  * SPDX-License-Identifier: Apache-2.0
  *
- * The eleventh tool, and the only one this fork adds.
+ * The tool this fork exists for.
  *
  * Every other tool tells the agent what its own code did. This one tells it
  * what the VENDOR received — read from the twin, not from the sandbox — which

package/.opencode/plugin/daytona/tools/veris-twin.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Copyright Veris AI
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * Where the agent finds out which twin is its own.
+ *
+ * Every tool on the Veris MCP takes a `sandbox_id`, and the twin's id is not
+ * something the agent can discover from inside the sandbox — it is held by the
+ * session manager on the host, keyed by session. That mapping is the one thing
+ * an MCP server cannot know, which is why this is a plugin tool and the
+ * lifecycle operations are not.
+ *
+ * It is also the reachable way in to a service's manual, which is the document
+ * Veris expects you to read before designing anything against a twin.
+ */
+import { z } from 'zod';
+import type { PluginInput } from '@opencode-ai/plugin';
+import type { ToolContext } from '@opencode-ai/plugin/tool';
+import type { DaytonaSessionManager } from '../core/session-manager';
+export declare const verisTwinTool: (sessionManager: DaytonaSessionManager, projectId: string, worktree: string, pluginCtx: PluginInput) => {
+    description: string;
+    args: {
+        service: z.ZodOptional<z.ZodString>;
+    };
+    execute(args: {
+        service?: string;
+    }, ctx: ToolContext): Promise<string>;
+};

package/.opencode/plugin/daytona/tools/veris-twin.js

@@ -0,0 +1,63 @@
+/**
+ * Copyright Veris AI
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * Where the agent finds out which twin is its own.
+ *
+ * Every tool on the Veris MCP takes a `sandbox_id`, and the twin's id is not
+ * something the agent can discover from inside the sandbox — it is held by the
+ * session manager on the host, keyed by session. That mapping is the one thing
+ * an MCP server cannot know, which is why this is a plugin tool and the
+ * lifecycle operations are not.
+ *
+ * It is also the reachable way in to a service's manual, which is the document
+ * Veris expects you to read before designing anything against a twin.
+ */
+import { z } from 'zod';
+import { isVerisSandbox } from '@veris-ai/daytona';
+export const verisTwinTool = (sessionManager, projectId, worktree, pluginCtx) => ({
+    description: "Identify this session's Veris twin: its id, and the vendor services it answers for. " +
+        'Call it before any Veris MCP tool, which all take a sandbox_id — this is where that id ' +
+        'comes from, and creating a new Veris sandbox instead would give you one nothing else ' +
+        "in the session is using. Pass a service name to read that service's manual: what the " +
+        'twin models and how its data is shaped, which is worth reading before writing code ' +
+        'against it.',
+    args: {
+        service: z
+            .string()
+            .optional()
+            .describe("Service name (e.g. \"stripe\") to read its manual. Omit to list the twin's services."),
+    },
+    async execute(args, ctx) {
+        const sandbox = await sessionManager.getSandbox(ctx.sessionID, projectId, worktree, pluginCtx);
+        // Without this OpenCode renders the call as "verisTwin Unknown".
+        const title = (t) => ctx.metadata({ title: t });
+        if (!isVerisSandbox(sandbox)) {
+            title('no twin attached');
+            return ('No Veris twin is attached to this sandbox.\n' +
+                'Set VERIS_API_KEY and VERIS_ENVIRONMENT_ID and start a new session to get one.');
+        }
+        const twinId = sandbox.verisSandboxId;
+        if (args.service) {
+            const manual = await sandbox.veris.manual(args.service);
+            title(`${args.service} manual`);
+            return `Manual for '${args.service}' (twin ${twinId}):\n\n${manual}`;
+        }
+        const services = await sandbox.veris.services();
+        title(`twin ${twinId} — ${services.length} service(s)`);
+        if (services.length === 0) {
+            return (`Veris twin ${twinId} answers for no services.\n\n` +
+                'Its environment has none configured, so no vendor call from this sandbox will be ' +
+                'intercepted. Check VERIS_ENVIRONMENT_ID.');
+        }
+        const rows = services
+            .map((s) => `  ${s.name} (${s.status}) -> ${s.url}`)
+            .join('\n');
+        return (`Veris twin ${twinId}\n\n` +
+            `${services.length} service(s):\n${rows}\n\n` +
+            'Pass a service name to this tool to read its manual. Use the twin id above as ' +
+            "sandbox_id for Veris MCP tools; do not create a new Veris sandbox — this session's " +
+            'twin is created and deleted for you.');
+    },
+});
+//# sourceMappingURL=veris-twin.js.map

package/.opencode/plugin/daytona/tools/veris-twin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"veris-twin.js","sourceRoot":"","sources":["veris-twin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAGlD,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,cAAqC,EACrC,SAAiB,EACjB,QAAgB,EAChB,SAAsB,EACtB,EAAE,CAAC,CAAC;IACJ,WAAW,EACT,sFAAsF;QACtF,yFAAyF;QACzF,uFAAuF;QACvF,uFAAuF;QACvF,qFAAqF;QACrF,aAAa;IACf,IAAI,EAAE;QACJ,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,sFAAsF,CAAC;KACpG;IACD,KAAK,CAAC,OAAO,CAAC,IAA0B,EAAE,GAAgB;QACxD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;QAE9F,iEAAiE;QACjE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QAEvD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,kBAAkB,CAAC,CAAA;YACzB,OAAO,CACL,8CAA8C;gBAC9C,gFAAgF,CACjF,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAA;QAErC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACvD,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,SAAS,CAAC,CAAA;YAC/B,OAAO,eAAe,IAAI,CAAC,OAAO,WAAW,MAAM,SAAS,MAAM,EAAE,CAAA;QACtE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC/C,KAAK,CAAC,QAAQ,MAAM,MAAM,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAA;QAEvD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CACL,cAAc,MAAM,+BAA+B;gBACnD,mFAAmF;gBACnF,0CAA0C,CAC3C,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ;aAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,CAAA;QAEb,OAAO,CACL,cAAc,MAAM,MAAM;YAC1B,GAAG,QAAQ,CAAC,MAAM,iBAAiB,IAAI,MAAM;YAC7C,gFAAgF;YAChF,qFAAqF;YACrF,sCAAsC,CACvC,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/.opencode/plugin/daytona/tools/veris-twin.ts

@@ -0,0 +1,87 @@
+/**
+ * Copyright Veris AI
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * Where the agent finds out which twin is its own.
+ *
+ * Every tool on the Veris MCP takes a `sandbox_id`, and the twin's id is not
+ * something the agent can discover from inside the sandbox — it is held by the
+ * session manager on the host, keyed by session. That mapping is the one thing
+ * an MCP server cannot know, which is why this is a plugin tool and the
+ * lifecycle operations are not.
+ *
+ * It is also the reachable way in to a service's manual, which is the document
+ * Veris expects you to read before designing anything against a twin.
+ */
+
+import { z } from 'zod'
+import type { PluginInput } from '@opencode-ai/plugin'
+import type { ToolContext } from '@opencode-ai/plugin/tool'
+import { isVerisSandbox } from '@veris-ai/daytona'
+import type { DaytonaSessionManager } from '../core/session-manager'
+
+export const verisTwinTool = (
+  sessionManager: DaytonaSessionManager,
+  projectId: string,
+  worktree: string,
+  pluginCtx: PluginInput,
+) => ({
+  description:
+    "Identify this session's Veris twin: its id, and the vendor services it answers for. " +
+    'Call it before any Veris MCP tool, which all take a sandbox_id — this is where that id ' +
+    'comes from, and creating a new Veris sandbox instead would give you one nothing else ' +
+    "in the session is using. Pass a service name to read that service's manual: what the " +
+    'twin models and how its data is shaped, which is worth reading before writing code ' +
+    'against it.',
+  args: {
+    service: z
+      .string()
+      .optional()
+      .describe("Service name (e.g. \"stripe\") to read its manual. Omit to list the twin's services."),
+  },
+  async execute(args: { service?: string }, ctx: ToolContext) {
+    const sandbox = await sessionManager.getSandbox(ctx.sessionID, projectId, worktree, pluginCtx)
+
+    // Without this OpenCode renders the call as "verisTwin Unknown".
+    const title = (t: string) => ctx.metadata({ title: t })
+
+    if (!isVerisSandbox(sandbox)) {
+      title('no twin attached')
+      return (
+        'No Veris twin is attached to this sandbox.\n' +
+        'Set VERIS_API_KEY and VERIS_ENVIRONMENT_ID and start a new session to get one.'
+      )
+    }
+
+    const twinId = sandbox.verisSandboxId
+
+    if (args.service) {
+      const manual = await sandbox.veris.manual(args.service)
+      title(`${args.service} manual`)
+      return `Manual for '${args.service}' (twin ${twinId}):\n\n${manual}`
+    }
+
+    const services = await sandbox.veris.services()
+    title(`twin ${twinId} — ${services.length} service(s)`)
+
+    if (services.length === 0) {
+      return (
+        `Veris twin ${twinId} answers for no services.\n\n` +
+        'Its environment has none configured, so no vendor call from this sandbox will be ' +
+        'intercepted. Check VERIS_ENVIRONMENT_ID.'
+      )
+    }
+
+    const rows = services
+      .map((s) => `  ${s.name} (${s.status}) -> ${s.url}`)
+      .join('\n')
+
+    return (
+      `Veris twin ${twinId}\n\n` +
+      `${services.length} service(s):\n${rows}\n\n` +
+      'Pass a service name to this tool to read its manual. Use the twin id above as ' +
+      "sandbox_id for Veris MCP tools; do not create a new Veris sandbox — this session's " +
+      'twin is created and deleted for you.'
+    )
+  },
+})

package/.opencode/plugin/daytona/tools.d.ts

@@ -116,4 +116,13 @@ export declare function createDaytonaTools(sessionManager: DaytonaSessionManager
             service?: string;
         }, ctx: import("@opencode-ai/plugin").ToolContext): Promise<string>;
     };
+    verisTwin: {
+        description: string;
+        args: {
+            service: import("zod").ZodOptional<import("zod").ZodString>;
+        };
+        execute(args: {
+            service?: string;
+        }, ctx: import("@opencode-ai/plugin").ToolContext): Promise<string>;
+    };
 };

package/.opencode/plugin/daytona/tools.js

@@ -16,6 +16,7 @@ import { grepTool } from './tools/grep';
 import { getPreviewURLTool } from './tools/get-preview-url';
 import { gitSyncTool } from './tools/git-sync';
 import { verisReceiptTool } from './tools/veris-receipt';
+import { verisTwinTool } from './tools/veris-twin';
 export function createDaytonaTools(sessionManager, projectId, worktree, pluginCtx) {
     const repoPath = sessionManager.repoPath;
     return {
@@ -30,6 +31,7 @@ export function createDaytonaTools(sessionManager, projectId, worktree, pluginCt
         getPreviewURL: getPreviewURLTool(sessionManager, projectId, worktree, pluginCtx),
         gitSync: gitSyncTool(sessionManager, projectId, worktree, pluginCtx),
         verisReceipt: verisReceiptTool(sessionManager, projectId, worktree, pluginCtx),
+        verisTwin: verisTwinTool(sessionManager, projectId, worktree, pluginCtx),
     };
 }
 //# sourceMappingURL=tools.js.map

package/.opencode/plugin/daytona/tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"tools.js","sourceRoot":"","sources":["tools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAKxD,MAAM,UAAU,kBAAkB,CAChC,cAAqC,EACrC,SAAiB,EACjB,QAAgB,EAChB,SAAsB;IAEtB,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAA;IACxC,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;QACxE,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9D,KAAK,EAAE,SAAS,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAChE,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9D,SAAS,EAAE,aAAa,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QACxE,EAAE,EAAE,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC1D,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9D,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9D,aAAa,EAAE,iBAAiB,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAChF,OAAO,EAAE,WAAW,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QACpE,YAAY,EAAE,gBAAgB,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;KAC/E,CAAA;AACH,CAAC"}
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["tools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAKlD,MAAM,UAAU,kBAAkB,CAChC,cAAqC,EACrC,SAAiB,EACjB,QAAgB,EAChB,SAAsB;IAEtB,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAA;IACxC,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;QACxE,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9D,KAAK,EAAE,SAAS,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAChE,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9D,SAAS,EAAE,aAAa,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QACxE,EAAE,EAAE,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC1D,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9D,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9D,aAAa,EAAE,iBAAiB,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAChF,OAAO,EAAE,WAAW,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QACpE,YAAY,EAAE,gBAAgB,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9E,SAAS,EAAE,aAAa,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;KACzE,CAAA;AACH,CAAC"}

package/.opencode/plugin/daytona/tools.ts

@@ -18,6 +18,7 @@ import { grepTool } from './tools/grep'
 import { getPreviewURLTool } from './tools/get-preview-url'
 import { gitSyncTool } from './tools/git-sync'
 import { verisReceiptTool } from './tools/veris-receipt'
+import { verisTwinTool } from './tools/veris-twin'
 
 import type { DaytonaSessionManager } from './core/session-manager'
 import type { PluginInput } from '@opencode-ai/plugin'
@@ -41,5 +42,6 @@ export function createDaytonaTools(
     getPreviewURL: getPreviewURLTool(sessionManager, projectId, worktree, pluginCtx),
     gitSync: gitSyncTool(sessionManager, projectId, worktree, pluginCtx),
     verisReceipt: verisReceiptTool(sessionManager, projectId, worktree, pluginCtx),
+    verisTwin: verisTwinTool(sessionManager, projectId, worktree, pluginCtx),
   }
 }

package/README.md

@@ -25,7 +25,7 @@ Then `opencode`. No image to build, no network configuration, nothing to start.
 
 The ten sandbox-backed tools from [`@daytona/opencode`](https://www.npmjs.com/package/@daytona/opencode)
 — bash, read, write, edit, multiedit, ls, glob, grep, getPreviewURL, gitSync —
-plus one.
+plus two, and the Veris MCP server.
 
 **`verisReceipt`** reports what the twin *received*.
 
@@ -52,6 +52,41 @@ it. Do not report this change as working.
 The system prompt tells the agent to check it before claiming an integration
 works. You can also just ask for it.
 
+**`verisTwin`** names the twin and what it answers for — and with a service
+argument, returns that service's manual: what it models and how its data is
+shaped.
+
+```
+Veris twin sbx_a1b2c3
+
+1 service(s):
+  stripe (ready) -> https://gw.api.veris.ai/stripe
+```
+
+### The Veris MCP
+
+The plugin also registers Veris's MCP server, so the agent can manage the twin's
+lifecycle — read the environment, promote a sandbox to the environment's
+baseline, reset it. Nothing to configure: it uses the `VERIS_API_KEY` you
+already set, and is skipped entirely if that is unset.
+
+Two of its tools are denied by default, because this plugin creates and owns the
+session's twin:
+
+| tool | default | why |
+|---|---|---|
+| `create_sandbox` | `deny` | makes a twin nothing else in the session uses — the agent would seed it and report success while traffic and receipts went elsewhere |
+| `delete_sandbox` | `deny` | destroys the running session's twin |
+| `promote_sandbox` | `ask` | rewrites what every future run in the environment starts from |
+| `reset_sandbox` | `ask` | clears the request log the receipt is read from |
+
+Set them yourself in `opencode.json` and your values win; the plugin only fills
+in what you have not.
+
+Every one of these calls is made from your machine, never from inside the
+sandbox. The twin's control plane is deliberately unreachable from the sandbox:
+code that could reach `/veris/reset` could erase its own receipt.
+
 ## Why the sandbox cannot reach the real vendor
 
 The sandbox is created with a `domainAllowList` — the vendor hostnames the twin
@@ -67,11 +102,26 @@ if you want the same thing without an agent.
 ## Relationship to `@daytona/opencode`
 
 This is a fork of `@daytona/opencode` 0.192.0 (Apache-2.0, Copyright Daytona
-Platforms Inc.), and a deliberately small one: one changed import, one added
-tool, one paragraph in the system prompt, and a check that the Veris
-coordinates are set. The ten inherited tools, the git-sync flow and the session
+Platforms Inc.), and a deliberately small one: one changed import, two added
+tools, a config hook, two paragraphs in the system prompt, and a check that the
+Veris coordinates are set. The ten inherited tools, the git-sync flow and the session
 bookkeeping are untouched, so upstream changes stay easy to take.
 
+## Using the veris-sim skills alongside
+
+[`opencode-veris-sim`](https://www.npmjs.com/package/opencode-veris-sim) carries
+Veris's reference material on twins — schemas, seeding, faults, webhooks — and
+composes with this plugin:
+
+```sh
+opencode plugin opencode-veris-sim -g
+```
+
+Its `/veris-sim:setup|build|fix` commands describe a different setup: your code
+running on your own machine under `veris-proxy`. In a session backed by this
+plugin the sandbox is the boundary and there is no proxy to start, so those
+commands' steps do not apply. The reference material does.
+
 ## Limitations
 
 - **Requires a Veris control plane that serves an HTTP CONNECT gateway.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veris-ai/daytona-opencode",
-  "version": "0.1.1",
+  "version": "0.2.0-rc.1",
   "description": "Run every OpenCode session in a Daytona sandbox whose vendor API calls are answered by a Veris twin. One line in opencode.json: unmodified code, real hostnames, and a receipt of what the vendor actually received.",
   "main": "./.opencode/plugin/index.js",
   "types": "./.opencode/plugin/index.d.ts",
@@ -33,10 +33,11 @@
   "scripts": {
     "build": "tsc",
     "typecheck": "tsc --noEmit",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build",
+    "test": "vitest run"
   },
   "dependencies": {
-    "@veris-ai/daytona": "^0.1.1",
+    "@veris-ai/daytona": "^0.2.0-rc.1",
     "@daytona/sdk": "^0.204.1",
     "@opencode-ai/plugin": "1.1.59",
     "xdg-basedir": "^5.1.0",
@@ -44,7 +45,8 @@
   },
   "devDependencies": {
     "@types/node": "^22",
-    "typescript": "^5.6.0"
+    "typescript": "^5.6.0",
+    "vitest": "^3.2.7"
   },
   "publishConfig": {
     "access": "public"