@webpresso/opencode-plugin 3.3.3 → 3.3.4

package/index.js

@@ -151,12 +151,40 @@ function currentAgentKitPackageRoot() {
   return null;
 }
 
+// Bun's global bin dir is stable ($BUN_INSTALL/bin, else ~/.bun/bin) even though
+// its global PACKAGE dir is not: that follows $BUN_INSTALL, bunfig
+// install.globalDir, and version defaults, and can land at $HOME/node_modules.
+// Discover through the bin symlink bun itself writes rather than guessing a
+// package layout. Keep in sync with packages/{claude,codex}-plugin/bin/wp.
+function bunGlobalWpCandidate() {
+  const home = process.env.HOME || homedir();
+  return join(process.env.BUN_INSTALL || join(home, ".bun"), "bin", "wp");
+}
+
+/**
+ * The package root reached through bun's own global bin link, or null. Trusted
+ * for the same reason the hardcoded anchors are: bun wrote the link inside the
+ * user's own bun install, and the target must still be a real agent-kit package
+ * root. It does NOT widen trust to arbitrary PATH entries.
+ */
+function bunGlobalInstallPackageRoot() {
+  try {
+    const resolved = realpathSync(bunGlobalWpCandidate());
+    const packageRoot = dirname(dirname(resolved));
+    if (resolved !== join(packageRoot, "bin", "wp")) return null;
+    return isUsableWebpressoPackageRoot(packageRoot) ? packageRoot : null;
+  } catch {
+    return null;
+  }
+}
+
 function trustedHomeInstallPackageRoots() {
   const home = process.env.HOME || homedir();
   return [
     join(home, ".claude", "plugins", "cache", "webpresso", "agent-kit"),
     join(home, ".bun", "install", "global", "node_modules", "@webpresso", "agent-kit"),
-  ];
+    bunGlobalInstallPackageRoot(),
+  ].filter(Boolean);
 }
 
 function isTrustedWebpressoPackageRoot(packageRoot) {
@@ -194,6 +222,13 @@ async function resolveWpHookCommand($, directory, hookName) {
     }
   }
 
+  // `command -v wp` misses a bun global install whose bin dir is not on PATH —
+  // the common case for a host-launched hook with a sanitized environment.
+  const bunWp = bunGlobalWpCandidate();
+  if (isAgentKitWp(bunWp, directory)) {
+    return `${shellQuote(bunWp)} hook ${hookName}`;
+  }
+
   throw new Error(
     "webpresso wp launcher not found; run wp setup after installing @webpresso/agent-kit",
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpresso/opencode-plugin",
-  "version": "3.3.3",
+  "version": "3.3.4",
   "private": false,
   "description": "OpenCode plugin adapter package for Webpresso agent-kit.",
   "homepage": "https://github.com/webpresso/agent-kit#readme",

package/plugin-skill-ownership.json

@@ -2,14 +2,14 @@
   "schemaVersion": 1,
   "host": "opencode",
   "packageName": "@webpresso/opencode-plugin",
-  "packageVersion": "3.3.3",
+  "packageVersion": "3.3.4",
   "runtimeDirs": [],
   "skills": {
     "ai-deslop": {
       "digest": "sha256:c1da1003009073dd3923454947e1141efc2e7df5ad8d725a511ed5cff03bfb5c"
     },
     "autopilot": {
-      "digest": "sha256:1d2f1ff0902f283c273395e474d9b7841b206b8635457b3c238e8e1df149b6ef"
+      "digest": "sha256:9205e5af016d0c4a665b0a64716c0c0a808044b37bbb61e939f74b55a7ca2d17"
     },
     "autoresearch": {
       "digest": "sha256:b4d51cd53beb4a3271827172dfbd0b1d27bd58761ca07a35d49a5d6324b87fdf"
@@ -87,7 +87,7 @@
       "digest": "sha256:bed3684a850651534f315d355cdeae50d951c429817df0f105cccdb7f4e1561b"
     },
     "ultragoal": {
-      "digest": "sha256:7ed3e728027a9d1047a1dd030f88f23a6120450bf336fa73b1c9037857ab56ee"
+      "digest": "sha256:1eddfd05c48fb2abf26e5796e5f659a1e8ae3de466a847f1ba9ca635bf5e1a44"
     },
     "verify": {
       "digest": "sha256:bb22b3c997ef3b003e5558c01f0b1e844158a48f1bb5d7169851e5b0b343cd64"

package/skills/autopilot/SKILL.md

@@ -20,7 +20,7 @@ using `wp_ultragoal_run` / `wp ultragoal run` and the current handoff.
 
 ## Outside-voice (required)
 
-After each ultragoal **phase or plan-gate milestone**, run an **OpenCode Go** outside-voice review and pick the model by purpose (plan critique → DeepSeek Pro; coding quality → Kimi Code first; cheap recheck → DeepSeek Flash). Resolve IDs from live `opencode models opencode-go`. Lifecycle authority only via converged `wp review gate` — never self-approve. Full protocol: the `ultragoal` skill. Respect `review_budget` (default one sequential path; no multi-host stampede).
+After each ultragoal **phase or plan-gate milestone**, run an **OpenCode Go** outside-voice review and pick the model by purpose. The purpose→family ordering lives in one place — the committed reviewer policy rendered into the `opencode-go` skill — so follow that skill and do not restate the ordering here. Resolve IDs from live `opencode models opencode-go`. Lifecycle authority only via converged `wp review gate` — never self-approve. Full protocol: the `ultragoal` skill. Respect `review_budget` (default owned by `workflow-skills-routing.md`): one sequential path, no multi-host stampede.
 
 ## Vague gate
 
@@ -34,8 +34,9 @@ A brief is anchored when it includes a file path, symbol, issue number, test nam
 A leading `force:` is the only explicit bypass; strip it before creating the goal and
 record the bypass in the blueprint.
 
-Default budgets if the user omits them: `concurrency=4`, `fix_budget=1`,
-`review_budget=1`, no `/loop`. See `ultragoal` skill.
+Default budgets if the user omits them: `concurrency=4`, `fix_budget=1`, no
+`/loop`; `review_budget` per `workflow-skills-routing.md`. See `ultragoal`
+skill.
 
 ## Tooling map
 

package/skills/ultragoal/SKILL.md

@@ -21,12 +21,12 @@ multi-agent swarms.
 
 ## Default budgets (override only when the user sets them)
 
-| Budget          | Default   | Meaning                                                    |
-| --------------- | --------- | ---------------------------------------------------------- |
-| `concurrency`   | 4 (max 8) | Parallel ready tasks / implementer lanes                   |
-| `fix_budget`    | 1         | Pre-existing issues fixable via `/fix` this phase          |
-| `review_budget` | 1         | Outside-voice reviewers for merge-ready (0 for local work) |
-| `loop`          | off       | Do not run `/loop` or unbounded stop-hooks                 |
+| Budget          | Default                          | Meaning                                            |
+| --------------- | -------------------------------- | -------------------------------------------------- |
+| `concurrency`   | 4 (max 8)                        | Parallel ready tasks / implementer lanes           |
+| `fix_budget`    | 1                                | Pre-existing issues fixable via `/fix` this phase  |
+| `review_budget` | see `workflow-skills-routing.md` | Outside-voice reviewer paths, local vs merge-ready |
+| `loop`          | off                              | Do not run `/loop` or unbounded stop-hooks         |
 
 Reject unbudgeted sleep-mode briefs (“complete all”, “full autopilot”, “go to sleep”)
 unless they name a blueprint/slug, budgets, and a stop condition. Route vague briefs
@@ -66,7 +66,8 @@ Fallback to `wp …` CLI only when the matching MCP tool is unavailable. Prefer
 6. **Opportunistic `/fix`:** at most `fix_budget` pre-existing issues per phase, each with
    named invariant + failing proof. Excess → handoff backlog (do not expand epic).
 7. **Validate / land:** local proof with `wp_qa` / targeted tools; outside review only when
-   merge-ready and within `review_budget` (default **exactly 1** sequential outside voice).
+   merge-ready and within `review_budget` — **exactly one sequential** outside voice unless
+   the user sets N (the default value lives in `workflow-skills-routing.md`).
    Prefer `wp review gate` for lifecycle authority. Use `wp_pr_*` for PR babysit — no
    multi-sleep poll loops; no parallel multi-reviewer stampede.
 8. Stop on `complete`, `cancelled`, blocked guard exhaustion, or `WP_ULTRAGOAL_DISABLE=1`.
@@ -87,7 +88,7 @@ primary checkout.
 
 Autopilot and agent-driven ultragoal loops **must** request an **OpenCode Go** outside-voice review after each **goal/phase milestone**, and must pick the model by purpose. Direct `wp review run` output is advisory only. Lifecycle authority that can satisfy promotion/completion gates comes only from a converged **`wp review gate`** (content-addressed ledger + bound artifact).
 
-Count each milestone review against `review_budget` for merge-ready claims: **exactly one sequential** reviewer path unless the user sets N. Prefer purpose-matched OpenCode Go first; do not fan out multi-host review swarms.
+Count each milestone review against `review_budget` for merge-ready claims: **exactly one sequential** reviewer path unless the user sets N; the default value is owned by `workflow-skills-routing.md`. Prefer purpose-matched OpenCode Go first; do not fan out multi-host review swarms.
 
 ### Milestones that require a review
 
@@ -147,7 +148,8 @@ Use `--purpose plan` for plan-phase promotion and `--purpose delivery` for imple
 - If no PR-bound green CI is available, fall back to local **`wp_qa`**.
 - Open a PR early so CI can satisfy QA. Do **not** raise timeouts.
 - **Land** still requires a **MERGED** PR with green required checks bound to the projected
-  source snapshot. Use `/verify --merge-ready` (review_budget=1), not default local verify.
+  source snapshot. Use `/verify --merge-ready` (merge-ready `review_budget`, per
+  `workflow-skills-routing.md`), not default local verify.
 
 ## Snapshot / dirty worktree