borgmcp 3.11.0 → 3.11.1

package/dist/opencode-launch-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-launch-trust.d.ts","sourceRoot":"","sources":["../src/opencode-launch-trust.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,wBAAwB,aAAa,CAAC;AACnD,eAAO,MAAM,4BAA4B,6BAA6B,CAAC;AACvE,eAAO,MAAM,4BAA4B,6BAA6B,CAAC;AACvE,eAAO,MAAM,oCAAoC,qCAAqC,CAAC;AACvF,eAAO,MAAM,kCAAkC,mCAA0C,CAAC;AAE1F,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAMD,wBAAgB,yBAAyB,CAAC,SAAS,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAAG,mBAAmB,CAY3G;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAQxE;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,IAAI,CAIhF"}

package/dist/opencode-launch-trust.js

@@ -0,0 +1,40 @@
+import { randomBytes } from 'node:crypto';
+export const OPENCODE_SERVER_USERNAME = 'opencode';
+export const OPENCODE_SERVER_USERNAME_ENV = 'OPENCODE_SERVER_USERNAME';
+export const OPENCODE_SERVER_PASSWORD_ENV = 'OPENCODE_SERVER_PASSWORD';
+export const BORG_OPENCODE_LAUNCH_CORRELATION_ENV = 'BORG_OPENCODE_LAUNCH_CORRELATION';
+export const OPENCODE_SERVER_PASSWORD_REFERENCE = `{env:${OPENCODE_SERVER_PASSWORD_ENV}}`;
+function random256BitIdentity() {
+    return randomBytes(32).toString('base64url');
+}
+export function createOpenCodeLaunchTrust(overrides = {}) {
+    const trust = {
+        apiPassword: overrides.apiPassword ?? random256BitIdentity(),
+        correlationIdentity: overrides.correlationIdentity ?? random256BitIdentity(),
+    };
+    if (!isOpenCode256BitIdentity(trust.apiPassword) || !isOpenCode256BitIdentity(trust.correlationIdentity)) {
+        throw new Error('OpenCode launch trust must contain independent 256-bit identities');
+    }
+    if (trust.apiPassword === trust.correlationIdentity) {
+        throw new Error('OpenCode API password and correlation identity must be independent');
+    }
+    return trust;
+}
+export function isOpenCode256BitIdentity(value) {
+    if (typeof value !== 'string' || value.length === 0)
+        return false;
+    try {
+        const decoded = Buffer.from(value, 'base64url');
+        return decoded.length === 32 && decoded.toString('base64url') === value;
+    }
+    catch {
+        return false;
+    }
+}
+export function openCodeApiPasswordFromEnv(env) {
+    if (env[OPENCODE_SERVER_USERNAME_ENV] !== OPENCODE_SERVER_USERNAME)
+        return null;
+    const password = env[OPENCODE_SERVER_PASSWORD_ENV];
+    return isOpenCode256BitIdentity(password) ? password : null;
+}
+//# sourceMappingURL=opencode-launch-trust.js.map

package/dist/opencode-launch-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-launch-trust.js","sourceRoot":"","sources":["../src/opencode-launch-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,wBAAwB,GAAG,UAAU,CAAC;AACnD,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AACvE,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AACvE,MAAM,CAAC,MAAM,oCAAoC,GAAG,kCAAkC,CAAC;AACvF,MAAM,CAAC,MAAM,kCAAkC,GAAG,QAAQ,4BAA4B,GAAG,CAAC;AAO1F,SAAS,oBAAoB;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,YAA0C,EAAE;IACpF,MAAM,KAAK,GAAG;QACZ,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,oBAAoB,EAAE;QAC5D,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,IAAI,oBAAoB,EAAE;KAC7E,CAAC;IACF,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,mBAAmB,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAsB;IAC/D,IAAI,GAAG,CAAC,4BAA4B,CAAC,KAAK,wBAAwB;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,QAAQ,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACnD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC"}

package/dist/opencode-plugin.d.ts

@@ -5,6 +5,7 @@ export declare const OPENCODE_COMPATIBILITY: {
 export declare const OPENCODE_INJECTED_ENTRY_METADATA_KEY = "borgOpenCodeInjectedEntry";
 export declare const OPENCODE_WAKE_IDENTITY_METADATA_KEY = "borgOpenCodeWakeIdentity";
 export declare const OPENCODE_RECOVERY_METADATA_KEY = "borgOpenCodeSessionOrientation";
+export declare const OPENCODE_LAUNCH_CORRELATION_METADATA_KEY = "borgOpenCodeLaunchCorrelation";
 export interface OpenCodePluginCoreDeps {
     defer(task: () => Promise<void>): void;
     wait(milliseconds: number): Promise<void>;
@@ -22,6 +23,8 @@ export interface OpenCodePluginCoreOptions {
     confirmationPollAttempts: number;
     pollDelayMs: number;
     compactFallback: string;
+    launchCorrelationMetadataKey: string;
+    launchCorrelationIdentity: string;
 }
 /** Pure, dependency-injected behavior core. Its emitted JavaScript function
  * body is also embedded in the installed self-contained plugin. */

package/dist/opencode-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"opencode-plugin.d.ts","sourceRoot":"","sources":["../src/opencode-plugin.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,sBAAsB;;;CAQzB,CAAC;AAKX,eAAO,MAAM,oCAAoC,8BAA8B,CAAC;AAChF,eAAO,MAAM,mCAAmC,6BAA6B,CAAC;AAC9E,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAG/E,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvC,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,MAAM,OAAO,GAC1B,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,KAAK,CAAC,QAAQ,EAAE,SAAS,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC;CAChD;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;mEACmE;AACnE,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,yBAAyB;uBAsDP,GAAG,KAAG,OAAO,CAAC,IAAI,CAAC;gDAQlC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,UACrB;QAAE,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,KAC5B,OAAO,CAAC,IAAI,CAAC;4BAUP;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,UACpB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,GAAG,EAAE,CAAA;KAAE,KACzC,OAAO,CAAC,IAAI,CAAC;EA6BnB;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAmD7D;AAED,eAAO,MAAM,kBAAkB,QAA6C,CAAC;AAE7E,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,MAAuB,GAAG,MAAM,CAE3E;AAED,wBAAgB,iBAAiB,CAAC,OAAO,GAAE;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CACb,GAAG,IAAI,CAsBZ"}
+{"version":3,"file":"opencode-plugin.d.ts","sourceRoot":"","sources":["../src/opencode-plugin.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,sBAAsB;;;CAQzB,CAAC;AAKX,eAAO,MAAM,oCAAoC,8BAA8B,CAAC;AAChF,eAAO,MAAM,mCAAmC,6BAA6B,CAAC;AAC9E,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAC/E,eAAO,MAAM,wCAAwC,kCAAkC,CAAC;AAGxF,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvC,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,MAAM,OAAO,GAC1B,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,KAAK,CAAC,QAAQ,EAAE,SAAS,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC;CAChD;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,4BAA4B,EAAE,MAAM,CAAC;IACrC,yBAAyB,EAAE,MAAM,CAAC;CACnC;AAED;mEACmE;AACnE,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,yBAAyB;uBAuDP,GAAG,KAAG,OAAO,CAAC,IAAI,CAAC;gDAQlC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,UACrB;QAAE,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,KAC5B,OAAO,CAAC,IAAI,CAAC;4BAUP;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,UACpB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,GAAG,EAAE,CAAA;KAAE,KACzC,OAAO,CAAC,IAAI,CAAC;EAkDnB;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAwD7D;AAED,eAAO,MAAM,kBAAkB,QAA6C,CAAC;AAE7E,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,MAAuB,GAAG,MAAM,CAE3E;AAED,wBAAgB,iBAAiB,CAAC,OAAO,GAAE;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CACb,GAAG,IAAI,CAsBZ"}

package/dist/opencode-plugin.js

@@ -17,12 +17,14 @@ const COMPACT_FALLBACK = '## Borg Cube\nYou are in a Borg MCP multi-agent coordi
 export const OPENCODE_INJECTED_ENTRY_METADATA_KEY = 'borgOpenCodeInjectedEntry';
 export const OPENCODE_WAKE_IDENTITY_METADATA_KEY = 'borgOpenCodeWakeIdentity';
 export const OPENCODE_RECOVERY_METADATA_KEY = 'borgOpenCodeSessionOrientation';
+export const OPENCODE_LAUNCH_CORRELATION_METADATA_KEY = 'borgOpenCodeLaunchCorrelation';
 const PLUGIN_REL_PATH = path.join('.config', 'opencode', 'plugins', 'borg-orient.js');
 /** Pure, dependency-injected behavior core. Its emitted JavaScript function
  * body is also embedded in the installed self-contained plugin. */
 export function createOpenCodePluginCore(deps, options) {
     const claimedSessions = new Set();
     const humanPromptSessions = new Set();
+    let launchCorrelationAttached = false;
     const textParts = (message) => Array.isArray(message?.parts)
         ? message.parts.filter((part) => part?.type === 'text' && typeof part.text === 'string')
         : [];
@@ -93,7 +95,25 @@ export function createOpenCodePluginCore(deps, options) {
         'chat.message': async (input, output) => {
             if (!options.enabled)
                 return;
-            const current = { info: { role: 'user' }, parts: [...output.parts] };
+            let current = { info: { role: 'user' }, parts: [...output.parts] };
+            if (!launchCorrelationAttached &&
+                options.launchCorrelationIdentity &&
+                !isInjectedEntry(current) &&
+                !isOwnedRecovery(current)) {
+                const index = output.parts.findIndex((part) => part?.type === 'text' && typeof part.text === 'string');
+                if (index >= 0) {
+                    const part = output.parts[index];
+                    output.parts[index] = {
+                        ...part,
+                        metadata: {
+                            ...(part.metadata && typeof part.metadata === 'object' ? part.metadata : {}),
+                            [options.launchCorrelationMetadataKey]: options.launchCorrelationIdentity,
+                        },
+                    };
+                    launchCorrelationAttached = true;
+                    current = { info: { role: 'user' }, parts: [...output.parts] };
+                }
+            }
             if (!isInjectedEntry(current) && !isOwnedRecovery(current)) {
                 // chat.message fires before the user message is persisted. Record the
                 // human turn synchronously so recovery cannot race that short gap.
@@ -128,6 +148,7 @@ export function buildBorgPluginSource(version) {
 const createCore = ${createOpenCodePluginCore.toString()};
 const evaluateAudit = ${evaluateLogAudit.toString()};
 export default async function (ctx) {
+  const launchCorrelationIdentity = process.env.BORG_OPENCODE_LAUNCH_CORRELATION || '';
   const runRegen = async (source) => {
     const input = JSON.stringify({ source });
     const result = await ctx.$\`printf '%s' \${input} | borg-regen\`.quiet().nothrow();
@@ -167,8 +188,12 @@ export default async function (ctx) {
         confirmationPollAttempts: 6,
         pollDelayMs: 200,
         compactFallback: COMPACT_FALLBACK,
+        launchCorrelationMetadataKey: OPENCODE_LAUNCH_CORRELATION_METADATA_KEY,
     })},
     enabled: process.env.BORG_SESSION === '1',
+    launchCorrelationIdentity: /^[A-Za-z0-9_-]{43}$/.test(launchCorrelationIdentity)
+      ? launchCorrelationIdentity
+      : '',
   });
 }
 `;

package/dist/opencode-plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"opencode-plugin.js","sourceRoot":"","sources":["../src/opencode-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,uEAAuE;IACvE,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,+EAA+E;IAC/E,QAAQ,EAAE,SAAS;IACnB,GAAG,EAAE,SAAS;CACN,CAAC;AAEX,MAAM,gBAAgB,GACpB,qEAAqE;IACrE,kEAAkE,CAAC;AACrE,MAAM,CAAC,MAAM,oCAAoC,GAAG,2BAA2B,CAAC;AAChF,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC;AAC9E,MAAM,CAAC,MAAM,8BAA8B,GAAG,gCAAgC,CAAC;AAC/E,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;AA2BtF;mEACmE;AACnE,MAAM,UAAU,wBAAwB,CACtC,IAA4B,EAC5B,OAAkC;IAElC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,MAAM,SAAS,GAAG,CAAC,OAAY,EAAS,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC;QACtE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;QAC7F,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,eAAe,GAAG,CAAC,OAAY,EAAW,EAAE;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,MAAM;YACnC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,IAAI,CAAC;IACpE,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,CAAC,OAAY,EAAW,EAAE;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,MAAM;YACnC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC;IAChF,CAAC,CAAC;IACF,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAE,QAAwB,EAAW,EAAE,CAClF,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC9D,eAAe,CAAC,OAAO,CAAC;QACxB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAEnE,MAAM,iBAAiB,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;QACnE,IAAI,CAAC;YACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC;gBACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBACpD,IAAI,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC;oBAAE,OAAO;gBACpD,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,mBAAmB;oBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACtF,CAAC;YAED,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnE,IAAI,CAAC,WAAW;gBAAE,OAAO;YACzB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC;gBAAE,OAAO;YAExD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CACvC,SAAS,EACT,WAAW,EACX,OAAO,CAAC,aAAa,EACrB,GAAG,EAAE,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,CACzC,CAAC;YACF,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,6EAA6E;YAC7E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBACpD,IAAI,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC;oBAAE,OAAO;gBAC3C,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,wBAAwB;oBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAiB,EAAE;YAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,EAAE,IAAI,KAAK,iBAAiB;gBAAE,OAAO;YAClE,MAAM,SAAS,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO;YAC5E,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,iCAAiC,EAAE,KAAK,EACtC,MAA6B,EAC7B,MAA6B,EACd,EAAE;YACjB,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO;YAC7B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,cAAc,EAAE,KAAK,EACnB,KAA4B,EAC5B,MAA0C,EAC3B,EAAE;YACjB,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO;YAC7B,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3D,sEAAsE;gBACtE,mEAAmE;gBACnE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBAChD,IAAI,KAAK,EAAE,CAAC;oBACV,mEAAmE;oBACnE,mEAAmE;oBACnE,+DAA+D;oBAC/D,qEAAqE;oBACrE,kEAAkE;oBAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5C,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;oBAC1D,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;wBACf,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBACjC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;oBACtE,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,MAAM,GAAG,2BAA2B,OAAO,aAAa,sBAAsB,CAAC,QAAQ,QAAQ,sBAAsB,CAAC,GAAG,iFAAiF,mCAAmC,EAAE,CAAC;IACtP,OAAO,MAAM,MAAM;;qBAEA,wBAAwB,CAAC,QAAQ,EAAE;wBAChC,gBAAgB,CAAC,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;yBA0B1B,IAAI,CAAC,SAAS,CAAC,8BAA8B,CAAC;;;;;;;SAO9D,IAAI,CAAC,SAAS,CAAC;QACpB,aAAa,EAAE,OAAO;QACtB,mBAAmB,EAAE,8BAA8B;QACnD,wBAAwB,EAAE,oCAAoC;QAC9D,mBAAmB,EAAE,CAAC;QACtB,wBAAwB,EAAE,CAAC;QAC3B,WAAW,EAAE,GAAG;QAChB,eAAe,EAAE,gBAAgB;KAClC,CAAC;;;;CAIH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAE7E,MAAM,UAAU,kBAAkB,CAAC,UAAkB,YAAY,EAAE;IACjE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAG9B,EAAE;IACJ,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;YAAE,OAAO;QACzC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE;gBAAE,OAAO;YACtD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,MAAM;gBAAE,OAAO;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAAE,OAAO;QACtF,CAAC;QACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;YAAE,OAAO;QACzC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE;gBAAE,OAAO;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAAE,OAAO;QACtF,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC"}
+{"version":3,"file":"opencode-plugin.js","sourceRoot":"","sources":["../src/opencode-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,uEAAuE;IACvE,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,+EAA+E;IAC/E,QAAQ,EAAE,SAAS;IACnB,GAAG,EAAE,SAAS;CACN,CAAC;AAEX,MAAM,gBAAgB,GACpB,qEAAqE;IACrE,kEAAkE,CAAC;AACrE,MAAM,CAAC,MAAM,oCAAoC,GAAG,2BAA2B,CAAC;AAChF,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC;AAC9E,MAAM,CAAC,MAAM,8BAA8B,GAAG,gCAAgC,CAAC;AAC/E,MAAM,CAAC,MAAM,wCAAwC,GAAG,+BAA+B,CAAC;AACxF,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;AA6BtF;mEACmE;AACnE,MAAM,UAAU,wBAAwB,CACtC,IAA4B,EAC5B,OAAkC;IAElC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,IAAI,yBAAyB,GAAG,KAAK,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,OAAY,EAAS,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC;QACtE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;QAC7F,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,eAAe,GAAG,CAAC,OAAY,EAAW,EAAE;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,MAAM;YACnC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,IAAI,CAAC;IACpE,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,CAAC,OAAY,EAAW,EAAE;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,MAAM;YACnC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC;IAChF,CAAC,CAAC;IACF,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAE,QAAwB,EAAW,EAAE,CAClF,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC9D,eAAe,CAAC,OAAO,CAAC;QACxB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAEnE,MAAM,iBAAiB,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;QACnE,IAAI,CAAC;YACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC;gBACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBACpD,IAAI,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC;oBAAE,OAAO;gBACpD,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,mBAAmB;oBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACtF,CAAC;YAED,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnE,IAAI,CAAC,WAAW;gBAAE,OAAO;YACzB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC;gBAAE,OAAO;YAExD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CACvC,SAAS,EACT,WAAW,EACX,OAAO,CAAC,aAAa,EACrB,GAAG,EAAE,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,CACzC,CAAC;YACF,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,6EAA6E;YAC7E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBACpD,IAAI,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC;oBAAE,OAAO;gBAC3C,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,wBAAwB;oBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAiB,EAAE;YAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,EAAE,IAAI,KAAK,iBAAiB;gBAAE,OAAO;YAClE,MAAM,SAAS,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO;YAC5E,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,iCAAiC,EAAE,KAAK,EACtC,MAA6B,EAC7B,MAA6B,EACd,EAAE;YACjB,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO;YAC7B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,cAAc,EAAE,KAAK,EACnB,KAA4B,EAC5B,MAA0C,EAC3B,EAAE;YACjB,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO;YAC7B,IAAI,OAAO,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnE,IACE,CAAC,yBAAyB;gBAC1B,OAAO,CAAC,yBAAyB;gBACjC,CAAC,eAAe,CAAC,OAAO,CAAC;gBACzB,CAAC,eAAe,CAAC,OAAO,CAAC,EACzB,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5C,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;gBAC1D,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBACf,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACjC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;wBACpB,GAAG,IAAI;wBACP,QAAQ,EAAE;4BACR,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC5E,CAAC,OAAO,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAC,yBAAyB;yBAC1E;qBACF,CAAC;oBACF,yBAAyB,GAAG,IAAI,CAAC;oBACjC,OAAO,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjE,CAAC;YACH,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3D,sEAAsE;gBACtE,mEAAmE;gBACnE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBAChD,IAAI,KAAK,EAAE,CAAC;oBACV,mEAAmE;oBACnE,mEAAmE;oBACnE,+DAA+D;oBAC/D,qEAAqE;oBACrE,kEAAkE;oBAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5C,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;oBAC1D,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;wBACf,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBACjC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;oBACtE,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,MAAM,GAAG,2BAA2B,OAAO,aAAa,sBAAsB,CAAC,QAAQ,QAAQ,sBAAsB,CAAC,GAAG,iFAAiF,mCAAmC,EAAE,CAAC;IACtP,OAAO,MAAM,MAAM;;qBAEA,wBAAwB,CAAC,QAAQ,EAAE;wBAChC,gBAAgB,CAAC,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA2B1B,IAAI,CAAC,SAAS,CAAC,8BAA8B,CAAC;;;;;;;SAO9D,IAAI,CAAC,SAAS,CAAC;QACpB,aAAa,EAAE,OAAO;QACtB,mBAAmB,EAAE,8BAA8B;QACnD,wBAAwB,EAAE,oCAAoC;QAC9D,mBAAmB,EAAE,CAAC;QACtB,wBAAwB,EAAE,CAAC;QAC3B,WAAW,EAAE,GAAG;QAChB,eAAe,EAAE,gBAAgB;QACjC,4BAA4B,EAAE,wCAAwC;KACvE,CAAC;;;;;;;CAOH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAE7E,MAAM,UAAU,kBAAkB,CAAC,UAAkB,YAAY,EAAE;IACjE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAG9B,EAAE;IACJ,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;YAAE,OAAO;QACzC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE;gBAAE,OAAO;YACtD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,MAAM;gBAAE,OAAO;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAAE,OAAO;QACtF,CAAC;QACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;YAAE,OAAO;QACzC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE;gBAAE,OAAO;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAAE,OAAO;QACtF,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC"}

package/dist/setup-confirm.d.ts

@@ -26,7 +26,7 @@ export interface ConfigMutationTarget {
  * agent CLIs. Paths mirror `config-utils.ts`:
  *   Claude Code: ~/.claude.json (MCP server) + ~/.claude/settings.json (hook)
  *   Codex:       ~/.codex/config.toml (MCP server) + ~/.codex/hooks.json (hooks)
- *   OpenCode:    ~/.config/opencode/opencode.json (MCP server)
+ *   OpenCode:    effective global config under ~/.config/opencode/ (MCP server)
  */
 export declare function configMutationTargets(deps: {
     claude: boolean;

package/dist/setup-confirm.js

@@ -20,7 +20,7 @@
  * agent CLIs. Paths mirror `config-utils.ts`:
  *   Claude Code: ~/.claude.json (MCP server) + ~/.claude/settings.json (hook)
  *   Codex:       ~/.codex/config.toml (MCP server) + ~/.codex/hooks.json (hooks)
- *   OpenCode:    ~/.config/opencode/opencode.json (MCP server)
+ *   OpenCode:    effective global config under ~/.config/opencode/ (MCP server)
  */
 export function configMutationTargets(deps) {
     const targets = [];
@@ -46,8 +46,8 @@ export function configMutationTargets(deps) {
     }
     if (deps.opencode) {
         targets.push({
-            file: '~/.config/opencode/opencode.json',
-            change: 'registers the borg MCP server (with BORG_SESSION activation)',
+            file: '~/.config/opencode/',
+            change: 'updates the effective global OpenCode configuration to register the borg MCP server (with BORG_SESSION activation)',
         });
     }
     return targets;

package/dist/setup-confirm.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-confirm.js","sourceRoot":"","sources":["../src/setup-confirm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAIrC;IACC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,+BAA+B;SACxC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,8BAA8B;SACvC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE,+BAA+B;SACxC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,4CAA4C;SACrD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,kCAAkC;YACxC,MAAM,EAAE,8DAA8D;SACvE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAA+B;IAE/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IACjF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK,CAAC,IAAI,CACR,gFAAgF,CACjF,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAiBD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA+B;IAE/B,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC,CAAC,gCAAgC;IACnE,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC,CAAC,2BAA2B;IAC3D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,+BAA+B;IAChE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,IASpC;IACC,OAAO,CACL,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnE,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAC/C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"setup-confirm.js","sourceRoot":"","sources":["../src/setup-confirm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAIrC;IACC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,+BAA+B;SACxC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,8BAA8B;SACvC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE,+BAA+B;SACxC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,4CAA4C;SACrD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,oHAAoH;SAC7H,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAA+B;IAE/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IACjF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK,CAAC,IAAI,CACR,gFAAgF,CACjF,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAiBD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA+B;IAE/B,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC,CAAC,gCAAgC;IACnE,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC,CAAC,2BAA2B;IAC3D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,+BAA+B;IAChE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,IASpC;IACC,OAAO,CACL,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnE,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAC/C,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "borgmcp",
-  "version": "3.11.0",
+  "version": "3.11.1",
   "description": "Coordinate AI coding agents in shared cubes. Works with Claude Code, Codex, and OpenCode.",
   "type": "module",
   "main": "./dist/index.js",

package/src/assimilate-cmd.ts

@@ -45,6 +45,12 @@ import {
 } from './gc-orphan-inboxes.js';
 import { installBorgPlugin } from './opencode-plugin.js';
 import { allocateOpenCodePort, connectOpenCodeDrone, createOpenCodeLaunchKickoff, injectInitialKickoff } from './opencode-drone.js';
+import {
+  BORG_OPENCODE_LAUNCH_CORRELATION_ENV,
+  OPENCODE_SERVER_PASSWORD_ENV,
+  OPENCODE_SERVER_USERNAME,
+  OPENCODE_SERVER_USERNAME_ENV,
+} from './opencode-launch-trust.js';
 import { ensureCliMcpConfigured } from './ensure-mcp-config.js';
 import { normalizeServerEndpoint } from './server-endpoint.js';
 import { DEFAULT_LOCAL_SERVER_ORIGIN } from './server-handshake.js';
@@ -2170,9 +2176,9 @@ export async function runAssimilate(
     monitorClause,
     codexWakePathClause,
   });
-  // Keep Claude and Codex on the unmodified shared kickoff. Only OpenCode
-  // receives a nonce-bearing copy so the later MCP connection can identify
-  // this exact launch among same-text sessions.
+  // Keep launch trust separate from the shared kickoff. OpenCode receives the
+  // same prompt text; its plugin adds the correlation identity to hidden
+  // TextPart metadata instead of argv or prompt content.
   let openCodeKickoff: ReturnType<typeof createOpenCodeLaunchKickoff> | null = null;
   let dronePort: number | undefined;
   launchArgs = [kickoff];
@@ -2202,6 +2208,9 @@ export async function runAssimilate(
     installBorgPlugin();
     const cwd = agentCwd;
     openCodeKickoff = createOpenCodeLaunchKickoff(kickoff);
+    childEnv[OPENCODE_SERVER_USERNAME_ENV] = OPENCODE_SERVER_USERNAME;
+    childEnv[OPENCODE_SERVER_PASSWORD_ENV] = openCodeKickoff.apiPassword;
+    childEnv[BORG_OPENCODE_LAUNCH_CORRELATION_ENV] = openCodeKickoff.correlationIdentity;
     launchArgs = buildOpenCodeLaunchArgs(cwd, dronePort, openCodeKickoff.prompt);
   }
   // gh#673 P1: mark the launched agent session as borg-launched so the
@@ -2231,6 +2240,7 @@ export async function runAssimilate(
     const serverUrl = `http://127.0.0.1:${dronePort}`;
     connectOpenCodeDrone({
       serverUrl,
+      apiPassword: launchKickoff.apiPassword,
       directory: agentCwd,
       droneLabel: result.drone_label,
       cubeName: cubeDetail.name,

package/src/claude.ts

@@ -108,6 +108,12 @@ import { ensureCliMcpConfigured } from './ensure-mcp-config.js';
 import { configureResolvedCli } from './resolved-cli-config.js';
 import { installBorgPlugin } from './opencode-plugin.js';
 import { allocateOpenCodePort, connectOpenCodeDrone, createOpenCodeLaunchKickoff, injectInitialKickoff, openCodeLaunchBinding } from './opencode-drone.js';
+import {
+  BORG_OPENCODE_LAUNCH_CORRELATION_ENV,
+  OPENCODE_SERVER_PASSWORD_ENV,
+  OPENCODE_SERVER_USERNAME,
+  OPENCODE_SERVER_USERNAME_ENV,
+} from './opencode-launch-trust.js';
 import { buildOpenCodeLaunchArgs, defaultApprovalIo, resolveLaunchBorgApprovals } from './cli-tool-approval.js';
 import { isClientOwnedCubeInitArgv, runEarlyServerFacade } from './server-facade.js';
 import { runEarlyUpdate } from './update-cmd.js';
@@ -159,7 +165,13 @@ export function launchOpenCodeProcess(options: {
   process: ReturnType<typeof spawn>;
 } {
   const plan = createOpenCodeLaunchPlan(options.cwd, options.port, options.prompt, options.passthroughArgs);
-  const launchEnv = { ...options.env, BORG_OPENCODE_PORT: plan.envPort };
+  const launchEnv = {
+    ...options.env,
+    BORG_OPENCODE_PORT: plan.envPort,
+    [OPENCODE_SERVER_USERNAME_ENV]: OPENCODE_SERVER_USERNAME,
+    [OPENCODE_SERVER_PASSWORD_ENV]: options.kickoff.apiPassword,
+    [BORG_OPENCODE_LAUNCH_CORRELATION_ENV]: options.kickoff.correlationIdentity,
+  };
   // OpenCode's bind can still race this allocation; client#298 tracks the
   // residual pre-bind window outside this slice.
   const child = (options.spawnProcess ?? spawn)('opencode', plan.launchArgs, {
@@ -169,6 +181,7 @@ export function launchOpenCodeProcess(options: {
   });
   (options.connect ?? connectOpenCodeDrone)({
     serverUrl: plan.serverUrl,
+    apiPassword: options.kickoff.apiPassword,
     directory: options.cwd,
     droneLabel: options.droneLabel,
     cubeName: options.cubeName,
@@ -626,9 +639,8 @@ async function main() {
     monitorClause,
     codexWakePathClause,
   });
-  // This stays separate from the shared kickoff so Claude and Codex preserve
-  // their existing launch prompts. OpenCode records this nonce-bearing copy
-  // and later uses the nonce to bind its separately spawned MCP child.
+  // This stays separate from the shared kickoff so OpenCode can carry
+  // launch-only API and correlation identities outside argv and prompt text.
   let openCodeKickoff: ReturnType<typeof createOpenCodeLaunchKickoff> | null = null;
   let openCodePort: number | undefined;
   let launchArgs: string[];

package/src/config-utils.ts

@@ -24,6 +24,10 @@ import { shellEscape } from './shell-escape.js';
 import { BORG_STATE_ROOT_ENV, borgAgentConfigEnv, borgHomeRoot } from './private-root.js';
 import type { LaunchAccessPaths } from './launch-access.js';
 import { BORG_LAUNCH_EXPECTED_SEAT_ENV } from './cubes.js';
+import {
+  OPENCODE_SERVER_PASSWORD_ENV,
+  OPENCODE_SERVER_PASSWORD_REFERENCE,
+} from './opencode-launch-trust.js';
 
 // Get __dirname equivalent in ESM
 const __filename = fileURLToPath(import.meta.url);
@@ -53,6 +57,7 @@ const CLAUDE_CONFIG_PATH = path.join(CONFIG_HOME, '.claude.json');
 const CODEX_CONFIG_PATH = path.join(CONFIG_HOME, '.codex', 'config.toml');
 const CODEX_HOOKS_PATH = path.join(CONFIG_HOME, '.codex', 'hooks.json');
 const OPENCODE_CONFIG_PATH = path.join(CONFIG_HOME, '.config', 'opencode', 'opencode.json');
+const OPENCODE_GLOBAL_CONFIG_FILENAMES = ['config.json', 'opencode.json', 'opencode.jsonc'] as const;
 const MCP_SERVER_NAME = 'borg';
 
 function settingsPath(): string {
@@ -80,6 +85,125 @@ function readJsonFile(p: string): any {
   return JSON.parse(text);
 }
 
+function parseJsonc(text: string): unknown {
+  let stripped = '';
+  let inString = false;
+  let escaped = false;
+  let lineComment = false;
+  let blockComment = false;
+
+  for (let index = 0; index < text.length; index++) {
+    const char = text[index];
+    const next = text[index + 1];
+    if (lineComment) {
+      if (char === '\n' || char === '\r') {
+        lineComment = false;
+        stripped += char;
+      } else {
+        stripped += ' ';
+      }
+      continue;
+    }
+    if (blockComment) {
+      if (char === '*' && next === '/') {
+        stripped += '  ';
+        index++;
+        blockComment = false;
+      } else {
+        stripped += char === '\n' || char === '\r' ? char : ' ';
+      }
+      continue;
+    }
+    if (inString) {
+      stripped += char;
+      if (escaped) escaped = false;
+      else if (char === '\\') escaped = true;
+      else if (char === '"') inString = false;
+      continue;
+    }
+    if (char === '"') {
+      inString = true;
+      stripped += char;
+      continue;
+    }
+    if (char === '/' && next === '/') {
+      stripped += '  ';
+      index++;
+      lineComment = true;
+      continue;
+    }
+    if (char === '/' && next === '*') {
+      stripped += '  ';
+      index++;
+      blockComment = true;
+      continue;
+    }
+    stripped += char;
+  }
+
+  if (inString || blockComment) throw new SyntaxError('unterminated JSONC token');
+
+  let withoutTrailingCommas = '';
+  inString = false;
+  escaped = false;
+  for (let index = 0; index < stripped.length; index++) {
+    const char = stripped[index];
+    if (inString) {
+      withoutTrailingCommas += char;
+      if (escaped) escaped = false;
+      else if (char === '\\') escaped = true;
+      else if (char === '"') inString = false;
+      continue;
+    }
+    if (char === '"') {
+      inString = true;
+      withoutTrailingCommas += char;
+      continue;
+    }
+    if (char === ',') {
+      let lookahead = index + 1;
+      while (/\s/.test(stripped[lookahead] ?? '')) lookahead++;
+      if (stripped[lookahead] === '}' || stripped[lookahead] === ']') continue;
+    }
+    withoutTrailingCommas += char;
+  }
+
+  return JSON.parse(withoutTrailingCommas.replace(/^\uFEFF/, ''));
+}
+
+function isPlainRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function mergeOpenCodeConfigValue(target: unknown, source: unknown): unknown {
+  if (!isPlainRecord(target) || !isPlainRecord(source)) return source;
+  const merged = Object.assign(Object.create(null) as Record<string, unknown>, target);
+  for (const [key, value] of Object.entries(source)) {
+    merged[key] = key in merged ? mergeOpenCodeConfigValue(merged[key], value) : value;
+  }
+  return merged;
+}
+
+function readOpenCodeGlobalConfig(configPath: string): Record<string, unknown> {
+  const basename = path.basename(configPath);
+  const paths = OPENCODE_GLOBAL_CONFIG_FILENAMES.includes(
+    basename as typeof OPENCODE_GLOBAL_CONFIG_FILENAMES[number],
+  )
+    ? OPENCODE_GLOBAL_CONFIG_FILENAMES.map((filename) => path.join(path.dirname(configPath), filename))
+    : [configPath];
+  let merged: unknown = {};
+  for (const candidate of paths) {
+    if (!fs.existsSync(candidate)) continue;
+    const text = fs.readFileSync(candidate, 'utf-8');
+    if (text.length === 0) continue;
+    const parsed = parseJsonc(text);
+    if (!isPlainRecord(parsed)) throw new TypeError(`OpenCode config is not an object: ${candidate}`);
+    merged = mergeOpenCodeConfigValue(merged, parsed);
+  }
+  if (!isPlainRecord(merged)) throw new TypeError('OpenCode global config is not an object');
+  return merged;
+}
+
 function writeJsonFile(p: string, data: any): void {
   fs.mkdirSync(path.dirname(p), { recursive: true });
   fs.writeFileSync(p, JSON.stringify(data, null, 2) + '\n', 'utf-8');
@@ -1162,22 +1286,18 @@ export function isCodexUserPromptSubmitHookRegistered(hooksPath: string = CODEX_
 // ─── OpenCode MCP integration ────────────────────────────────────────────
 
 /**
- * Detect whether the borg MCP server is already registered in the opencode
- * config (`~/.config/opencode/opencode.json` `mcp.borg`).
+ * Detect whether the borg MCP server is registered in OpenCode's effective
+ * global config. OpenCode 1.18.15 loads `config.json`, `opencode.json`, then
+ * `opencode.jsonc`, merging later files over earlier ones.
  *
- * Reads the config as JSON and checks for a `mcp.borg` entry with
+ * Reads JSON or JSONC and checks the effective `mcp.borg` entry for
  * `type: "local"`. Safe-default: any read error returns `false`.
  */
 export function isOpenCodeMcpServerConfigured(
   configPath: string = path.join(borgHomeRoot(), '.config', 'opencode', 'opencode.json')
 ): boolean {
   try {
-    if (!fs.existsSync(configPath)) return false;
-    const text = fs.readFileSync(configPath, 'utf-8');
-    if (!text.trim()) return false;
-    const parsed = JSON.parse(text);
-    if (!parsed || typeof parsed !== 'object') return false;
-    const borgServer = (parsed as any).mcp?.borg;
+    const borgServer = (readOpenCodeGlobalConfig(configPath) as any).mcp?.borg;
     if (!borgServer || typeof borgServer !== 'object') return false;
     return borgServer.type === 'local';
   } catch {
@@ -1186,22 +1306,24 @@ export function isOpenCodeMcpServerConfigured(
 }
 
 /**
- * Launch-time OpenCode registration check. Ordinary launches retain the
- * existing configured/not-configured behavior. A targeted `borg launch`,
- * identified by its non-empty expected-seat marker, additionally requires the
- * config substitution that carries that marker into OpenCode's MCP child.
+ * Launch-time OpenCode registration check. Every launch requires the exact
+ * password substitution that carries its ephemeral credential into OpenCode's
+ * MCP child. A targeted `borg launch`, identified by its non-empty expected-seat
+ * marker, additionally requires the substitution that carries that marker.
  */
 export function isOpenCodeMcpServerConfiguredForLaunch(
   configPath: string = path.join(borgHomeRoot(), '.config', 'opencode', 'opencode.json'),
   env: NodeJS.ProcessEnv = process.env,
 ): boolean {
   if (!isOpenCodeMcpServerConfigured(configPath)) return false;
-  if (!env[BORG_LAUNCH_EXPECTED_SEAT_ENV]) return true;
   try {
-    const borgServer = readJsonFile(configPath)?.mcp?.borg;
+    const borgServer = (readOpenCodeGlobalConfig(configPath) as any).mcp?.borg;
     const environment = borgServer?.environment ?? borgServer?.env;
-    return environment?.[BORG_LAUNCH_EXPECTED_SEAT_ENV] ===
-      OPENCODE_LAUNCH_EXPECTED_SEAT_REFERENCE;
+    if (environment?.[OPENCODE_SERVER_PASSWORD_ENV] !== OPENCODE_SERVER_PASSWORD_REFERENCE) {
+      return false;
+    }
+    if (!env[BORG_LAUNCH_EXPECTED_SEAT_ENV]) return true;
+    return environment?.[BORG_LAUNCH_EXPECTED_SEAT_ENV] === OPENCODE_LAUNCH_EXPECTED_SEAT_REFERENCE;
   } catch {
     return false;
   }
@@ -1278,11 +1400,11 @@ export function addOpenCodeLaunchAccess(
 
 /**
  * Add borg MCP server to OpenCode using `opencode mcp add` CLI.
- * Pins activation and agent-kind signals plus an OpenCode config substitution
- * for the launch-scoped expected seat. OpenCode resolves `{env:NAME}` from its
- * own launch environment before starting the MCP child, so `borg launch`
- * reaches the identity check without persisting one launch's value. Existing
- * configs with BORG_OPENCODE remain supported by the runtime fallback.
+ * Pins activation and agent-kind signals plus OpenCode config substitutions
+ * for the launch-scoped password and expected seat. OpenCode resolves
+ * `{env:NAME}` from its own launch environment before starting the MCP child,
+ * so no launch credential is persisted. Existing configs with BORG_OPENCODE
+ * remain supported by the runtime fallback after launch-time self-healing.
  */
 export function addOpenCodeMcpServer(): void {
   try {
@@ -1295,8 +1417,10 @@ export function addOpenCodeMcpServer(): void {
       : '';
     const launchExpectedSeatEnvArg =
       ` --env ${BORG_LAUNCH_EXPECTED_SEAT_ENV}=${shellQuote(OPENCODE_LAUNCH_EXPECTED_SEAT_REFERENCE)}`;
+    const apiPasswordEnvArg =
+      ` --env ${OPENCODE_SERVER_PASSWORD_ENV}=${shellQuote(OPENCODE_SERVER_PASSWORD_REFERENCE)}`;
     execSync(
-      `opencode mcp add borg --env BORG_SESSION=1 --env BORG_AGENT_KIND=opencode --env BORG_OPENCODE=1${apiUrlEnvArg}${stateRootEnvArg}${launchExpectedSeatEnvArg} -- ${shellQuote(MCP_COMMAND)}`,
+      `opencode mcp add borg --env BORG_SESSION=1 --env BORG_AGENT_KIND=opencode --env BORG_OPENCODE=1${apiUrlEnvArg}${stateRootEnvArg}${launchExpectedSeatEnvArg}${apiPasswordEnvArg} -- ${shellQuote(MCP_COMMAND)}`,
       { stdio: 'inherit', env: borgAgentConfigEnv(process.env) }
     );
   } catch (error: any) {

package/src/index.ts

@@ -139,6 +139,7 @@ import {
   openCodeLaunchBinding,
 } from './opencode-drone.js';
 import { installBorgPlugin } from './opencode-plugin.js';
+import { openCodeApiPasswordFromEnv } from './opencode-launch-trust.js';
 import { setModuleInjectOpenCode } from './log-stream.js';
 import {
   lifecycleSignalForMessage,
@@ -261,9 +262,15 @@ export async function connectOpenCodeRuntime(
     console.error(OPEN_CODE_PORT_MISSING_DIAGNOSTIC);
     return false;
   }
+  const apiPassword = openCodeApiPasswordFromEnv(env);
+  if (apiPassword === null) {
+    console.error('OpenCode API credential is missing or unverifiable; skipping OpenCode entry injection. Relaunch through borg.');
+    return false;
+  }
   const binding = openCodeLaunchBinding(configuredPort);
   await (deps.connect ?? connectOpenCodeDrone)({
     serverUrl: binding.serverUrl,
+    apiPassword,
     directory: active.worktree ?? findProjectRoot(),
     droneLabel: active.droneLabel,
     cubeName: active.name,