antechamber 0.2.0 → 0.2.1

package/CHANGELOG.md

@@ -7,6 +7,23 @@ and this project uses [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [0.2.1] - 2026-10-15
+
+### Fixed
+
+- fix(session): accept OmO messages stored as plain-string content when titling, binding and restoring sessions instead of crashing
+- fix(api): answer OpenChamber's location eviction (`DELETE /api/debug/location`) with OpenCode's empty 204
+- fix(api): answer the v2 routes OpenChamber 2.3.2 calls instead of a generic 404/501. Plugin list and check return an empty inventory, `/api/experimental/generate` returns OpenCode's typed 503, and plugin update, credential update/activate, integration connections and session generate/background/move return `UnsupportedError`
+- fix(api): stop faking mutations. `POST /api/credential` and `PATCH /api/project/{projectID}` return `UnsupportedError` instead of keeping an in-memory credential or echoing an unsaved project
+- fix(api): reject missing or empty prompt and synthetic-context input with a typed 400 before anything reaches OmO
+- fix(vcs): back `/api/vcs/status`, `/api/vcs/diff`, `/api/vcs/branch` and `/api/vcs/base` with read-only git instead of fixed empty data
+- fix(cli): refuse `opencode-antechamber upgrade` with the antechamber upgrade command, and document OpenChamber 2.3.2's OpenCode update notice
+
+### Changed
+
+- refactor: use `findLast` for last-match scans
+- docs(api): unknown routes return 404 on both APIs; only unknown subpaths of an existing v2 session return 501
+
 ## [0.2.0] - 2026-10-14
 
 ### Added

package/README.md

@@ -147,6 +147,13 @@ Restart OpenChamber, or `systemctl --user restart openchamber.service` for a
 managed service. Run `antechamber doctor` again. If the executable moved,
 rerun `antechamber setup`.
 
+OpenChamber 2.3.2 may announce a newer OpenCode release. antechamber reports
+OpenCode API 2.0.20, the minimum OpenChamber accepts, and OpenChamber offers
+no signal that keeps that check while hiding the notice. Dismiss it or turn off
+OpenCode update notifications in OpenChamber. Its Update action runs
+`opencode-antechamber upgrade`, which refuses; upgrade antechamber with the
+commands above.
+
 To roll back wiring, copy the backup printed by setup over the settings file:
 
 ```bash

package/bin/opencode-antechamber

@@ -22,6 +22,10 @@ fi
 case "${1:-}" in
   serve) shift; exec node "$CLI" serve "$@" ;;
   --version|-v) exec node "$CLI" --version ;;
+  upgrade)
+    echo "opencode-antechamber: OpenChamber cannot upgrade antechamber; run 'npm update -g antechamber' (or 'bun add -g antechamber') instead" >&2
+    exit 1
+    ;;
 esac
 echo "opencode-antechamber: unsupported command '${1:-}' (only 'serve' and '--version' are implemented)" >&2
 exit 1

package/dist/pi-event-translation.d.ts

@@ -21,7 +21,7 @@ export declare function id(prefix: string): string;
  */
 export declare function piModelId(responseModel: unknown, model: unknown): unknown;
 export declare function piStopReason(stopReason: string | undefined, errorMessage?: string): Pick<OCAssistantMessage, "finish" | "error">;
-export declare function textOf(content: Array<Record<string, unknown>> | undefined): string;
+export declare function textOf(content: string | Array<Record<string, unknown>> | undefined): string;
 /**
  * Recompute the session's own spend from its loaded assistant messages. Subagent
  * spend stays on the child sessions: OpenChamber sums the parentID subtree, so

package/dist/pi-event-translation.js

@@ -38,6 +38,9 @@ export function piStopReason(stopReason, errorMessage) {
     }
 }
 export function textOf(content) {
+    // pi allows plain-string message content (extensions, append_user_message).
+    if (typeof content === "string")
+        return content;
     if (!Array.isArray(content))
         return "";
     return content.map((b) => (b?.type === "text" && typeof b.text === "string" ? b.text : "")).join("");
@@ -177,7 +180,7 @@ export class PiEventTranslator {
         });
         if (status.type === "idle") {
             s.info.time.idle = Date.now();
-            const last = [...(s.messages ?? [])].reverse().find((message) => message.info.role === "assistant");
+            const last = s.messages?.findLast((message) => message.info.role === "assistant");
             s.info.outcome =
                 s.interruptRequested || (last?.info.role === "assistant" && last.info.error?.name === "MessageAbortedError")
                     ? "interrupted"
@@ -418,7 +421,7 @@ export class PiEventTranslator {
                 // Trust that over our snapshot, which goes stale whenever pi switches on
                 // its own side (subagent routing, an in-session /model, a resumed file).
                 this.services.applyPiModel(s, msg.provider, piModelId(msg.responseModel, msg.model));
-                const parent = [...(s.messages ?? [])].reverse().find((m) => m.info.role === "user");
+                const parent = s.messages?.findLast((m) => m.info.role === "user");
                 const assistant = {
                     id: id("msg"),
                     sessionID: s.info.id,

package/dist/routes-v1.js

@@ -31,6 +31,8 @@ function handleV1GlobalRoute(res, path, method) {
     return false;
 }
 function parseV1Prompt(body, defaultModel) {
+    if (!Array.isArray(body.parts))
+        throw new RequestBodyError(400, "parts must be an array");
     const parts = parsePromptParts(body.parts);
     if (body.delivery !== undefined && body.delivery !== "steer" && body.delivery !== "queue")
         throw new RequestBodyError(400, "delivery must be steer or queue");
@@ -39,8 +41,9 @@ function parseV1Prompt(body, defaultModel) {
         .map((part) => part.text ?? "")
         .join("\n");
     const model = modelRefFromBody(body.model ?? (body.variant !== undefined ? defaultModel : undefined), body.variant);
-    if (!body.noReply)
-        nativePromptInput(text, parts);
+    const native = nativePromptInput(text, parts);
+    if (native.message.trim() === "" && !native.images?.length)
+        throw new RequestBodyError(400, "prompt requires non-whitespace text, file content, or an agent mention");
     return { text, model, parts, delivery: body.delivery ?? "steer" };
 }
 export async function handleV1(services, req, res, url, path, method, directory) {

package/dist/routes-v2.js

@@ -10,6 +10,7 @@ import { OPENCODE_API_VERSION } from "./version.js";
 import { toV2Permission } from "./approvals.js";
 import { formQuestionAnswer, questionFormID, toQuestionForm } from "./question-forms.js";
 import { getAgentName } from "./agent-name.js";
+import { vcsRead, VcsError } from "./vcs.js";
 import { announceSessionError, compactSession, getCommands, unsupportedShare } from "./session-commands.js";
 import { defaultV2Model, flattenModels, toV2Message, toV2Session } from "./v2.js";
 import { agentDescriptors, modelRefFromBody, numberParam, OPENCODE_COMPAT_VERSION, promptAsync, runSessionShell, runSessionSlash, sessionDirectory, sessionMetadata, } from "./route-services.js";
@@ -31,15 +32,6 @@ function v2Session(services, info) {
     return toV2Session(info, { model: managed?.model, agent: info.agent ?? getAgentName() });
 }
 const execFileAsync = promisify(execFile);
-const credentialsByDirectory = new Map();
-function credentials(directory) {
-    let stored = credentialsByDirectory.get(directory);
-    if (stored === undefined) {
-        stored = new Map();
-        credentialsByDirectory.set(directory, stored);
-    }
-    return stored;
-}
 function encodeSessionCursor(session) {
     return Buffer.from(JSON.stringify({ updated: session.time.updated, id: session.id })).toString("base64url");
 }
@@ -179,45 +171,24 @@ export async function handleV2(services, req, res, url, path, method, directory)
     if (await handleV2Bootstrap(services, res, path, method, directory))
         return;
     if (path === "/api/debug/location" && method === "DELETE") {
-        json(res, 400, errorBody("UnsupportedError", "Location eviction is not available with OmO"));
+        // OpenChamber evicts a location after git worktree changes so OpenCode re-reads it. antechamber
+        // keeps no per-location instance (project and VCS reads are fresh per request): nothing to evict.
+        res.writeHead(204).end();
         return;
     }
     // --- project / vcs / permission / form (2.0.4 bootstrap) ---
     if (path === "/api/credential" && method === "GET") {
-        json(res, 200, withLocation([...credentials(directory).values()]));
+        json(res, 200, withLocation([]));
         return;
     }
-    if (path === "/api/credential" && method === "POST") {
-        const body = (await services.body(req));
-        if (typeof body.id !== "string" ||
-            body.id === "" ||
-            typeof body.integrationID !== "string" ||
-            body.integrationID === "" ||
-            typeof body.label !== "string") {
-            json(res, 400, errorBody("BadRequestError", "credential id, integrationID, and label are required"));
-            return;
-        }
-        const stored = credentials(directory);
-        if (body.activate === true) {
-            for (const credential of stored.values()) {
-                if (credential.integrationID === body.integrationID)
-                    credential.active = false;
-            }
-        }
-        const credential = {
-            id: body.id,
-            integrationID: body.integrationID,
-            label: body.label,
-            value: body.value,
-            active: body.activate === true,
-        };
-        stored.set(credential.id, credential);
-        json(res, 200, withLocation(credential));
+    const credentialMatch = path.match(/^\/api\/credential\/([^/]+)(\/activate)?$/);
+    if ((path === "/api/credential" && method === "POST") ||
+        (credentialMatch && method === (credentialMatch[2] ? "POST" : "PATCH"))) {
+        await services.body(req);
+        json(res, 400, errorBody("UnsupportedError", "Credential management is not available; configure providers in OmO"));
         return;
     }
-    const credentialMatch = path.match(/^\/api\/credential\/([^/]+)$/);
-    if (credentialMatch && method === "DELETE") {
-        credentials(directory).delete(decodeURIComponent(credentialMatch[1]));
+    if (credentialMatch && !credentialMatch[2] && method === "DELETE") {
         res.writeHead(204).end();
         return;
     }
@@ -225,6 +196,36 @@ export async function handleV2(services, req, res, url, path, method, directory)
         json(res, 200, withLocation([]));
         return;
     }
+    const integrationMatch = path.match(/^\/api\/integration\/([^/]+)$/);
+    if (integrationMatch && method === "GET") {
+        json(res, 404, errorBody("NotFoundError", `integration not found: ${decodeURIComponent(integrationMatch[1])}`));
+        return;
+    }
+    if ((method === "POST" && /^\/api\/integration\/[^/]+\/connect\/(key|external|oauth|command)$/.test(path)) ||
+        ((method === "GET" || method === "DELETE") &&
+            /^\/api\/integration\/[^/]+\/connect\/(oauth|command)\/[^/]+$/.test(path)) ||
+        (method === "POST" && /^\/api\/integration\/[^/]+\/connect\/oauth\/[^/]+\/complete$/.test(path))) {
+        json(res, 400, errorBody("UnsupportedError", "Integration connections are not available; configure providers in OmO"));
+        return;
+    }
+    if ((path === "/api/plugin" && method === "GET") || (path === "/api/plugin/check" && method === "POST")) {
+        if (method === "POST")
+            await services.body(req);
+        json(res, 200, withLocation([]));
+        return;
+    }
+    if (path === "/api/plugin/update" && method === "POST") {
+        json(res, 400, errorBody("UnsupportedError", "Plugin updates are not available with OmO"));
+        return;
+    }
+    if (path === "/api/experimental/generate" && method === "POST") {
+        json(res, 503, {
+            _tag: "ServiceUnavailableError",
+            message: "No generation model is available through antechamber/OmO",
+            service: "opencode",
+        });
+        return;
+    }
     // Read-only inventories OpenChamber loads at bootstrap: OmO has no background shells,
     // web-search providers or MCP servers, so each is an honest empty list (mutations stay 400).
     if ((path === "/api/shell" || path === "/api/websearch/provider" || path === "/api/mcp") && method === "GET") {
@@ -263,14 +264,8 @@ export async function handleV2(services, req, res, url, path, method, directory)
     }
     const projectMatch = path.match(/^\/api\/project\/([^/]+)$/);
     if (projectMatch && method === "PATCH") {
-        const projectId = decodeURIComponent(projectMatch[1]);
-        const body = (await services.body(req));
-        json(res, 200, {
-            id: projectId,
-            canonical: body.canonical ?? projectId,
-            time: { created: 0, updated: Date.now() },
-            sandboxes: [],
-        });
+        await services.body(req);
+        json(res, 400, errorBody("UnsupportedError", "Project updates are not available with OmO"));
         return;
     }
     if (path === "/api/permission/request" && method === "GET") {
@@ -309,20 +304,15 @@ export async function handleV2(services, req, res, url, path, method, directory)
         json(res, 200, withLocation({ provider: "git", branch: current === undefined ? {} : { current } }));
         return;
     }
-    if (path === "/api/vcs/base" && method === "GET") {
-        json(res, 200, withLocation(null));
-        return;
-    }
-    if (path === "/api/vcs/status" && method === "GET") {
-        json(res, 200, withLocation([]));
-        return;
-    }
-    if (path === "/api/vcs/branch" && method === "GET") {
-        json(res, 200, withLocation([]));
-        return;
-    }
-    if (path === "/api/vcs/diff" && method === "GET") {
-        json(res, 200, withLocation(""));
+    if (method === "GET" && ["/api/vcs/base", "/api/vcs/status", "/api/vcs/branch", "/api/vcs/diff"].includes(path)) {
+        try {
+            json(res, 200, withLocation(await vcsRead(directory, path.slice("/api/vcs/".length), url)));
+        }
+        catch (error) {
+            if (!(error instanceof VcsError))
+                throw error;
+            json(res, 400, errorBody(error.name, error.message));
+        }
         return;
     }
     // --- sessions ---
@@ -494,6 +484,11 @@ export async function handleV2(services, req, res, url, path, method, directory)
             }
         }
         switch (`${method} ${sub}`) {
+            case "POST /generate":
+            case "POST /background":
+            case "POST /move":
+                json(res, 400, errorBody("UnsupportedError", `Session ${sub.slice(1)} is not available with OmO`));
+                return;
             case "GET /todo":
                 json(res, 200, { data: services.sessions.todos(sessionId) });
                 return;
@@ -586,12 +581,22 @@ export async function handleV2(services, req, res, url, path, method, directory)
                 return;
             case "POST /prompt": {
                 const body = (await services.body(req));
+                if (typeof body.text !== "string") {
+                    json(res, 400, { _tag: "InvalidRequestError", message: "text must be a string" });
+                    return;
+                }
                 const explicit = parsePromptParts(body.parts);
-                const firstText = explicit.find((part) => part.type === "text");
-                const text = typeof body.text === "string" ? body.text : firstText?.type === "text" ? firstText.text : "";
+                const text = body.text;
                 const parts = explicit.length > 0
                     ? [...explicit, ...v2PromptParts("", body.files, body.agents)]
                     : v2PromptParts(text, body.files, body.agents);
+                if (text.trim() === "" && !parts.some((part) => part.type === "file" || part.type === "agent")) {
+                    json(res, 400, {
+                        _tag: "InvalidRequestError",
+                        message: "prompt requires non-whitespace text, files, or agents",
+                    });
+                    return;
+                }
                 const metadata = sessionMetadata(body.metadata);
                 if (body.skills !== undefined) {
                     if (!Array.isArray(body.skills))
@@ -633,13 +638,17 @@ export async function handleV2(services, req, res, url, path, method, directory)
             case "POST /synthetic":
             case "POST /context": {
                 const body = (await services.body(req));
+                if (typeof body.text !== "string" || body.text.trim() === "") {
+                    json(res, 400, { _tag: "InvalidRequestError", message: "text must be a non-whitespace string" });
+                    return;
+                }
                 if (body.delivery !== undefined && body.delivery !== "steer" && body.delivery !== "queue") {
                     json(res, 400, errorBody("BadRequestError", 'delivery must be "steer" or "queue"'));
                     return;
                 }
                 const metadata = sessionMetadata(body.metadata);
                 const messageID = typeof body.id === "string" && body.id !== "" ? body.id : `msg_${randomUUID().replaceAll("-", "")}`;
-                const text = typeof body.text === "string" ? body.text : "";
+                const text = body.text;
                 promptAsync(services, managed, text, undefined, true, messageID, body.delivery ?? "steer", undefined, metadata);
                 // OpenChamber 2.3.2 treats anything but 200 + the admitted record as a failed send (captured OpenCode shape).
                 json(res, 200, {

package/dist/session-commands.js

@@ -24,7 +24,7 @@ function assistantMessage(session) {
     const messages = session.messages ?? [];
     const boundary = messages.findIndex((message) => message.info.id === session.tree.revert?.messageID);
     const visible = boundary < 0 ? messages : messages.slice(0, boundary);
-    const parentID = [...visible].reverse().find((message) => message.info.role === "user")?.info.id ?? "";
+    const parentID = visible.findLast((message) => message.info.role === "user")?.info.id ?? "";
     return {
         id: id("msg"),
         sessionID: session.info.id,
@@ -141,7 +141,7 @@ export async function runSlashCommand(sessions, sessionId, input) {
     await sessions.prompt(sessionId, text, undefined, false, input.messageID, "steer", input.parts ? [{ type: "text", text }, ...input.parts] : undefined);
     await sessions.reloadMessages(sessionId);
     const messages = sessions.messages(sessionId) ?? [];
-    return [...messages].reverse().find((message) => message.info.role === "assistant") ?? messages[messages.length - 1];
+    return messages.findLast((message) => message.info.role === "assistant") ?? messages[messages.length - 1];
 }
 export function parseShellCommand(value) {
     if (!isRecord(value) || typeof value.command !== "string" || value.command.trim() === "")

package/dist/session-history.d.ts

@@ -5,7 +5,7 @@ import { type PiUsage } from "./pi-event-translation.js";
 export interface PiFileMessage {
     clientMessageId?: string;
     role?: string;
-    content?: Array<Record<string, unknown>>;
+    content?: string | Array<Record<string, unknown>>;
     usage?: PiUsage;
     provider?: string;
     model?: string;

package/dist/session-history.js

@@ -90,7 +90,7 @@ function activeChain(s, entries) {
     for (const entry of entries)
         if (typeof entry.id === "string")
             byId.set(entry.id, entry);
-    let leaf = [...entries].reverse().find((entry) => entry.type !== "session" && typeof entry.id === "string");
+    let leaf = entries.findLast((entry) => entry.type !== "session" && typeof entry.id === "string");
     let selectedLeaf = s.tree.revert ? s.tree.revert.previousLeafId : s.tree.leafId;
     if (!s.tree.revert && s.tree.localShellTurns?.length) {
         // Follow a newly recorded descendant, never a sibling of the selected native branch.
@@ -411,7 +411,7 @@ export function parsePiSessionText(s, agentName, raw) {
         }
         // system / custom entries are not rendered
     }
-    const lastAssistant = [...chain].reverse().find((entry) => entry.message?.role === "assistant");
+    const lastAssistant = chain.findLast((entry) => entry.message?.role === "assistant");
     const stopReason = lastAssistant?.message?.stopReason;
     if (lastAssistant !== undefined && ["stop", "length", "error", "aborted"].includes(stopReason ?? "")) {
         finishProviderToolParts([...toolParts.values()].flat(), entryTime(lastAssistant), stopReason === "aborted" ? "Cancelled" : "No result");

package/dist/session-store.js

@@ -71,11 +71,14 @@ function titleFromHead(head, piSessionId) {
         }
         if (entry.type !== "message" || entry.message?.role !== "user")
             continue;
-        const text = (entry.message.content ?? [])
-            .filter((b) => b?.type === "text" && typeof b.text === "string")
-            .map((b) => b.text)
-            .join("\n")
-            .trim();
+        const content = entry.message.content ?? [];
+        // pi allows plain-string message content (extensions, append_user_message).
+        const text = (typeof content === "string"
+            ? content
+            : content
+                .filter((b) => b?.type === "text" && typeof b.text === "string")
+                .map((b) => b.text)
+                .join("\n")).trim();
         if (text !== "")
             return text.slice(0, TITLE_MAX_CHARS);
     }

package/dist/session-tree.d.ts

@@ -33,7 +33,7 @@ export interface TreeEntry {
     message?: {
         role: string;
         clientMessageId?: string;
-        content?: Array<{
+        content?: string | Array<{
             type: string;
             text?: string;
         }>;

package/dist/session-tree.js

@@ -86,10 +86,14 @@ function pruneStaleShellTurns(s, positions) {
     });
 }
 function bindOrdinaryEntry(s, entry, messages, cursor) {
-    const text = entry.message?.content
-        ?.filter((part) => part.type === "text")
-        .map((part) => part.text ?? "")
-        .join("");
+    const content = entry.message?.content;
+    // pi allows plain-string message content (extensions, append_user_message).
+    const text = typeof content === "string"
+        ? content
+        : content
+            ?.filter((part) => part.type === "text")
+            .map((part) => part.text ?? "")
+            .join("");
     const index = messages.findIndex((message, position) => position >= cursor &&
         !s.localMessageIds?.has(message.info.id) &&
         s.tree.messageEntries[message.info.id] === undefined &&

package/dist/sessions.js

@@ -711,7 +711,7 @@ export class SessionManager {
     }
     approvalsFor(s) {
         s.hasPendingInteraction = () => s.approvals?.hasPending(s.info.id) ?? false;
-        return new ApprovalBridge(s.info.id, (event) => this.emit(s.info.directory, event), (response) => s.pi?.respondExtensionUI(response), () => s.streaming?.message.id ?? [...(s.messages ?? [])].reverse().find((m) => m.info.role === "assistant")?.info.id, async (response) => {
+        return new ApprovalBridge(s.info.id, (event) => this.emit(s.info.directory, event), (response) => s.pi?.respondExtensionUI(response), () => s.streaming?.message.id ?? s.messages?.findLast((m) => m.info.role === "assistant")?.info.id, async (response) => {
             if (!s.pi)
                 return false;
             const reply = await s.pi.command({ ...response, type: "extension_ui_response" });

package/dist/vcs.d.ts

@@ -0,0 +1,5 @@
+export declare class VcsError extends Error {
+    name: string;
+}
+/** Read-only VCS operations; the router supplies the same directory as vcs.get. */
+export declare function vcsRead(directory: string, operation: string, url: URL): Promise<unknown>;

package/dist/vcs.js

@@ -0,0 +1,199 @@
+import { execFile } from "node:child_process";
+import { devNull } from "node:os";
+import { promisify } from "node:util";
+const exec = promisify(execFile);
+const GIT_EXEC_TIMEOUT_MS = 5_000;
+const GIT_EXEC_MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+export class VcsError extends Error {
+    name = "BadRequestError";
+}
+async function git(directory, args, difference = false) {
+    try {
+        const { stdout } = await exec("git", args, {
+            cwd: directory,
+            timeout: GIT_EXEC_TIMEOUT_MS,
+            maxBuffer: GIT_EXEC_MAX_BUFFER_BYTES,
+            env: { ...process.env, GIT_OPTIONAL_LOCKS: "0", GIT_LITERAL_PATHSPECS: "1", LC_ALL: "C" },
+        });
+        return stdout;
+    }
+    catch (error) {
+        // git diff --no-index exits 1 when it successfully finds a difference.
+        if (difference &&
+            error instanceof Error &&
+            "code" in error &&
+            error.code === 1 &&
+            "stdout" in error &&
+            typeof error.stdout === "string") {
+            return error.stdout;
+        }
+        throw error;
+    }
+}
+async function optionalRef(directory, args) {
+    try {
+        return (await git(directory, args)).trim() || undefined;
+    }
+    catch (error) {
+        if (error instanceof Error && "code" in error && error.code === 1)
+            return undefined;
+        throw error;
+    }
+}
+async function base(directory) {
+    if ((await optionalRef(directory, ["rev-parse", "--verify", "--quiet", "HEAD"])) === undefined)
+        return null;
+    const current = await optionalRef(directory, ["symbolic-ref", "--quiet", "--short", "HEAD"]);
+    if (current !== undefined) {
+        const reflog = await git(directory, ["reflog", "show", "--format=%gs", "--max-count=100", "HEAD"]);
+        for (const line of reflog.split("\n")) {
+            const checkout = line.match(/^checkout: moving from (.+) to (.+)$/);
+            if (!checkout || checkout[2] !== current || checkout[1] === current)
+                continue;
+            const name = checkout[1];
+            const ref = await optionalRef(directory, ["show-ref", "--verify", "--hash", `refs/heads/${name}`]);
+            if (ref !== undefined)
+                return { name, ref, source: "reflog" };
+        }
+    }
+    const remote = await optionalRef(directory, ["symbolic-ref", "--quiet", "--short", "refs/remotes/origin/HEAD"]);
+    for (const name of [...(remote === undefined ? [] : [remote]), "main", "master"]) {
+        const ref = await optionalRef(directory, ["rev-parse", "--verify", "--quiet", `${name}^{commit}`]);
+        if (ref !== undefined)
+            return { name, ref, source: "default" };
+    }
+    return null;
+}
+function nonNegativeInteger(url, key, fallback) {
+    const value = url.searchParams.get(key);
+    if (value === null)
+        return fallback;
+    if (!/^\d+$/.test(value) || !Number.isSafeInteger(Number(value))) {
+        throw new VcsError(`${key} must be a non-negative integer`);
+    }
+    return Number(value);
+}
+async function diffs(directory, revision, committed, context, patches) {
+    const args = ["diff", "--no-ext-diff", "--no-textconv", "--no-color", "--no-renames", revision];
+    if (committed)
+        args.push("HEAD");
+    const names = (await git(directory, [...args, "--name-status", "-z", "--"])).split("\0");
+    const statuses = new Map();
+    for (let i = 0; i + 1 < names.length; i += 2) {
+        const file = names[i + 1];
+        statuses.set(file, names[i] === "A" ? "added" : names[i] === "D" ? "deleted" : "modified");
+    }
+    const counts = (await git(directory, [...args, "--numstat", "-z", "--"])).split("\0").filter(Boolean);
+    const result = [];
+    let bytes = 0;
+    const append = (entry) => {
+        bytes += Buffer.byteLength(entry.patch);
+        if (bytes > GIT_EXEC_MAX_BUFFER_BYTES)
+            throw new VcsError("Git diff exceeds the output limit");
+        result.push(entry);
+    };
+    for (const entry of counts) {
+        const first = entry.indexOf("\t");
+        const second = entry.indexOf("\t", first + 1);
+        const file = entry.slice(second + 1);
+        append({
+            file,
+            additions: Number(entry.slice(0, first)) || 0,
+            deletions: Number(entry.slice(first + 1, second)) || 0,
+            status: statuses.get(file) ?? "modified",
+            patch: patches ? await git(directory, [...args, `--unified=${context}`, "--", file]) : "",
+        });
+    }
+    if (!committed) {
+        const untracked = (await git(directory, ["ls-files", "--others", "--exclude-standard", "-z"])).split("\0");
+        for (const file of untracked.filter(Boolean)) {
+            const args = ["diff", "--no-index", "--no-ext-diff", "--no-textconv", "--no-color", `--unified=${context}`];
+            const counts = await git(directory, [...args, "--numstat", "--", devNull, file], true);
+            const [additions, deletions] = counts.split("\t");
+            append({
+                file,
+                additions: Number(additions) || 0,
+                deletions: Number(deletions) || 0,
+                status: "added",
+                patch: patches ? await git(directory, [...args, "--", devNull, file], true) : "",
+            });
+        }
+    }
+    return result.sort((left, right) => left.file.localeCompare(right.file));
+}
+/** Read-only VCS operations; the router supplies the same directory as vcs.get. */
+export async function vcsRead(directory, operation, url) {
+    const mode = url.searchParams.get("mode");
+    if (operation === "diff" && !["working", "branch", "committed"].includes(mode ?? "")) {
+        throw new VcsError("mode must be working, branch, or committed");
+    }
+    const context = operation === "diff" ? nonNegativeInteger(url, "context", 3) : 0;
+    const limit = operation === "branch" ? nonNegativeInteger(url, "limit", 100) : 0;
+    try {
+        let root;
+        try {
+            root = (await git(directory, ["rev-parse", "--show-toplevel"])).trim();
+        }
+        catch (error) {
+            if (error instanceof Error &&
+                "stderr" in error &&
+                typeof error.stderr === "string" &&
+                error.stderr.startsWith("fatal: not a git repository")) {
+                return operation === "base" ? null : [];
+            }
+            throw error;
+        }
+        if (operation === "base")
+            return await base(root);
+        if (operation === "branch") {
+            const search = url.searchParams.get("search") ?? "";
+            return (await git(root, ["for-each-ref", "--format=%(refname:short)", "refs/heads/"]))
+                .split("\n")
+                .filter((name) => name !== "" && name.includes(search))
+                .sort()
+                .slice(0, limit);
+        }
+        let revision = await optionalRef(root, ["rev-parse", "--verify", "--quiet", "HEAD"]);
+        if (operation === "diff" && mode !== "working") {
+            const requestedBase = url.searchParams.get("base") ?? (await base(root))?.name;
+            if (requestedBase === undefined)
+                throw new VcsError("No base branch is available");
+            const ref = await optionalRef(root, [
+                "rev-parse",
+                "--verify",
+                "--quiet",
+                "--end-of-options",
+                `${requestedBase}^{commit}`,
+            ]);
+            if (ref === undefined)
+                throw new VcsError("Base must identify an existing commit");
+            revision = (await git(root, ["merge-base", ref, "HEAD"])).trim();
+        }
+        // Without HEAD, git's empty tree is the baseline for staged and untracked files.
+        revision ??= (await git(root, ["hash-object", "-t", "tree", devNull])).trim();
+        const files = await diffs(root, revision, operation === "diff" && mode === "committed", context, operation === "diff");
+        if (operation !== "status")
+            return files;
+        const statuses = new Map(files.map(({ patch: _patch, ...status }) => [status.file, status]));
+        // Index and worktree changes can cancel in the HEAD diff while still dirty.
+        const porcelain = await git(root, ["status", "--porcelain=v1", "-z", "--untracked-files=all", "--no-renames"]);
+        for (const entry of porcelain.split("\0").filter(Boolean)) {
+            const file = entry.slice(3);
+            if (statuses.has(file))
+                continue;
+            const code = entry.slice(0, 2);
+            statuses.set(file, {
+                file,
+                additions: 0,
+                deletions: 0,
+                status: code.includes("D") ? "deleted" : code.includes("A") || code === "??" ? "added" : "modified",
+            });
+        }
+        return [...statuses.values()].sort((left, right) => left.file.localeCompare(right.file));
+    }
+    catch (error) {
+        if (error instanceof VcsError)
+            throw error;
+        throw new VcsError(`Git VCS operation failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "antechamber",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "OpenCode-compatible HTTP/SSE server that lets OpenChamber drive the pi coding agent (and OmO) over RPC",
   "type": "module",
   "license": "MIT",