bros-harness 0.1.2 → 0.1.4

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.1.4 - 2026-06-03
+
+- Fixed packaged command config to use OpenCode's `template` field.
+- Fixed frontmatter parsing for quoted permission keys containing `:`.
+
+## 0.1.3 - 2026-06-03
+
+- Fixed OpenCode 1.15 plugin loading by exporting the V1 plugin module shape with `id` and `server`.
+
 ## 0.1.2 - 2026-06-03
 
 - Added package plugin agent registration so raw OpenCode installs can load BROS agents from `plugin: ["bros-harness"]`.

package/README.md

@@ -116,6 +116,7 @@ The package plugin is intentionally narrow.
 On load, it verifies packaged asset directories and uses OpenCode’s in-memory `config(cfg)` hook to add only:
 
 - the package-relative BROS skills directory to `skills.paths`, when the existing field has the expected safe shape; and
+- packaged BROS agent entries to `agent`, without overwriting existing agent keys; and
 - packaged command prompt entries to `command`, without overwriting existing command keys.
 
 It does **not**:
@@ -125,11 +126,11 @@ It does **not**:
 - publish packages;
 - register providers;
 - add MCP servers;
-- change permissions;
+- change top-level permissions;
 - configure telemetry;
 - read, validate, or write secrets.
 
-Packaged agent files are included as reviewed assets, but they are not auto-registered by the default plugin hook because permission-bearing agent registration should remain an explicit, reviewed configuration decision.
+Packaged agent files are registered from reviewed assets so a package-only OpenCode install can expose BROS agents without copying local files.
 
 Three skipped raw skills remain excluded pending separate sanitized review. They are not imported by this package.
 

package/docs/integrations/opencode.md

@@ -24,9 +24,9 @@ This is the preferred path for users and agents. Local path examples are contrib
 
 ## Runtime behavior
 
-The package plugin resolves assets relative to its own package root. It validates key asset directories, then uses OpenCode's in-memory `config(cfg)` hook only to add the package-relative skills directory to `skills.paths` when safe and add packaged command prompt entries without overwriting existing commands.
+The package plugin resolves assets relative to its own package root. It validates key asset directories, then uses OpenCode's in-memory `config(cfg)` hook to add the package-relative skills directory to `skills.paths` when safe, register packaged agent entries without overwriting existing agents, and add packaged command prompt entries without overwriting existing commands.
 
-This runtime hook changes only the merged config object OpenCode passes to the plugin at startup. It is distinct from live user config file mutation: the plugin does not write `opencode.json`, `.opencode/`, global config files, or other filesystem config. The plugin does not register providers, MCP servers, permissions, telemetry, or secrets. Agent files are packaged as reviewed assets, but permission-bearing agent registration is intentionally not performed by the default plugin hook.
+This runtime hook changes only the merged config object OpenCode passes to the plugin at startup. It is distinct from live user config file mutation: the plugin does not write `opencode.json`, `.opencode/`, global OpenCode config files, or other filesystem config. The plugin does not register providers, MCP servers, top-level permissions, telemetry, or secrets.
 
 ## Safe agent workflow
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bros-harness",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Package-first OpenCode plugin for disciplined BROS agent harness assets.",
   "license": "MIT",
   "type": "module",

package/src/plugin.mjs

@@ -32,14 +32,14 @@ export async function verifyBrosHarnessAssets() {
 function parseCommandMarkdown(markdown) {
   const match = markdown.match(/^---\n([\s\S]*?)\n---\n?([\s\S]*)$/);
   if (!match) {
-    return { description: "BROS Harness command.", prompt: markdown.trim() };
+    return { description: "BROS Harness command.", template: markdown.trim() };
   }
 
   const descriptionMatch = match[1].match(/^description:\s*(.+)$/m);
   const description = descriptionMatch?.[1]?.replace(/^['\"]|['\"]$/g, "").trim();
   return {
     description: description || "BROS Harness command.",
-    prompt: match[2].trim()
+    template: match[2].trim()
   };
 }
 
@@ -54,6 +54,22 @@ function parseYamlScalar(value) {
   return trimmed;
 }
 
+function parseYamlKeyValue(line) {
+  let quote = "";
+  for (let index = 0; index < line.length; index += 1) {
+    const char = line[index];
+    if ((char === '"' || char === "'") && line[index - 1] !== "\\") {
+      quote = quote === char ? "" : quote || char;
+      continue;
+    }
+
+    if (char === ":" && !quote) {
+      return [line.slice(0, index), line.slice(index + 1)];
+    }
+  }
+  return null;
+}
+
 function parseSimpleYamlObject(yaml) {
   const root = {};
   const stack = [{ indent: -1, value: root }];
@@ -63,11 +79,11 @@ function parseSimpleYamlObject(yaml) {
 
     const indent = rawLine.match(/^ */)?.[0].length ?? 0;
     const line = rawLine.trim();
-    const match = line.match(/^(.+?):(?:\s*(.*))?$/);
-    if (!match) continue;
+    const parsedLine = parseYamlKeyValue(line);
+    if (!parsedLine) continue;
 
-    const key = match[1].trim().replace(/^['"]|['"]$/g, "");
-    const rawValue = match[2] ?? "";
+    const key = parsedLine[0].trim().replace(/^['"]|['"]$/g, "");
+    const rawValue = parsedLine[1]?.trimStart() ?? "";
 
     while (stack.length > 1 && indent <= stack[stack.length - 1].indent) {
       stack.pop();
@@ -170,7 +186,7 @@ function mergeAgents(cfg, agents) {
   }
 }
 
-export default async function brosHarnessPlugin(_input = {}, _options = {}) {
+export async function brosHarnessServer(_input = {}, _options = {}) {
   await verifyBrosHarnessAssets();
   const agents = await loadPackagedAgents();
   const commands = await loadPackagedCommands();
@@ -183,3 +199,8 @@ export default async function brosHarnessPlugin(_input = {}, _options = {}) {
     }
   };
 }
+
+export default {
+  id: "bros-harness",
+  server: brosHarnessServer
+};