commandmate 0.3.3 → 0.3.5

package/dist/server/src/lib/claude-executor.js

@@ -1,13 +1,17 @@
 "use strict";
 /**
- * Claude CLI Executor
- * Issue #294: Executes claude -p commands for scheduled executions
+ * CLI Command Executor (non-interactive mode)
+ * Issue #294: Executes CLI tool commands for scheduled executions
+ * Issue #379: Added OpenCode support (opencode run)
+ *
+ * Supported tools: claude, codex, gemini, vibe-local, opencode
  *
  * Security:
  * - Uses execFile (not exec) to prevent shell injection
  * - Sanitizes environment variables via env-sanitizer.ts
  * - Limits output size to prevent memory exhaustion
  * - Enforces execution timeout
+ * - Validates cliToolId against ALLOWED_CLI_TOOLS whitelist [SEC-001]
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ALLOWED_CLI_TOOLS = exports.MAX_MESSAGE_LENGTH = exports.EXECUTION_TIMEOUT_MS = exports.MAX_STORED_OUTPUT_SIZE = exports.MAX_OUTPUT_SIZE = void 0;
@@ -30,7 +34,7 @@ exports.EXECUTION_TIMEOUT_MS = 5 * 60 * 1000;
 /** Maximum message length sent to claude -p */
 exports.MAX_MESSAGE_LENGTH = 10000;
 /** Allowed CLI tool identifiers for scheduled execution */
-exports.ALLOWED_CLI_TOOLS = new Set(['claude', 'codex', 'gemini', 'vibe-local']);
+exports.ALLOWED_CLI_TOOLS = new Set(['claude', 'codex', 'gemini', 'vibe-local', 'opencode']);
 // =============================================================================
 // Executor
 // =============================================================================
@@ -57,6 +61,7 @@ function truncateOutput(output) {
  * - codex: exec <message> --sandbox <permission>
  * - gemini: -p <message>
  * - vibe-local: [-p <message> -y] or [--model <model> -p <message> -y]
+ * - opencode: [run <message>] or [run -m ollama/<model> <message>]
  * - others: -p <message> (fallback)
  *
  * @param message - Prompt message
@@ -76,6 +81,12 @@ function buildCliArgs(message, cliToolId, permission, options) {
                 return ['--model', options.model, '-p', message, '-y'];
             }
             return ['-p', message, '-y'];
+        case 'opencode':
+            // [D2-007] When model is not specified, OpenCode uses opencode.json default model
+            if (options?.model) {
+                return ['run', '-m', `ollama/${options.model}`, message];
+            }
+            return ['run', message];
         case 'claude':
         default:
             return ['-p', message, '--output-format', 'text', '--permission-mode', permission ?? 'acceptEdits'];

package/dist/server/src/lib/cli-patterns.js

@@ -4,7 +4,7 @@
  * Shared between response-poller.ts and API routes
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CLAUDE_SESSION_ERROR_REGEX_PATTERNS = exports.CLAUDE_SESSION_ERROR_PATTERNS = exports.VIBE_LOCAL_THINKING_PATTERN = exports.VIBE_LOCAL_PROMPT_PATTERN = exports.GEMINI_THINKING_PATTERN = exports.GEMINI_PROMPT_PATTERN = exports.MAX_PASTED_TEXT_RETRIES = exports.PASTED_TEXT_DETECT_DELAY = exports.PASTED_TEXT_PATTERN = exports.CODEX_SEPARATOR_PATTERN = exports.CODEX_PROMPT_PATTERN = exports.CLAUDE_TRUST_DIALOG_PATTERN = exports.CLAUDE_SEPARATOR_PATTERN = exports.CLAUDE_PROMPT_PATTERN = exports.CODEX_THINKING_PATTERN = exports.CLAUDE_THINKING_PATTERN = exports.CLAUDE_SPINNER_CHARS = void 0;
+exports.CLAUDE_SESSION_ERROR_REGEX_PATTERNS = exports.CLAUDE_SESSION_ERROR_PATTERNS = exports.VIBE_LOCAL_THINKING_PATTERN = exports.VIBE_LOCAL_PROMPT_PATTERN = exports.OPENCODE_SKIP_PATTERNS = exports.OPENCODE_SEPARATOR_PATTERN = exports.OPENCODE_PROCESSING_INDICATOR = exports.OPENCODE_RESPONSE_COMPLETE = exports.OPENCODE_LOADING_PATTERN = exports.OPENCODE_THINKING_PATTERN = exports.OPENCODE_PROMPT_AFTER_RESPONSE = exports.OPENCODE_PROMPT_PATTERN = exports.GEMINI_THINKING_PATTERN = exports.GEMINI_PROMPT_PATTERN = exports.MAX_PASTED_TEXT_RETRIES = exports.PASTED_TEXT_DETECT_DELAY = exports.PASTED_TEXT_PATTERN = exports.CODEX_SEPARATOR_PATTERN = exports.CODEX_PROMPT_PATTERN = exports.CLAUDE_TRUST_DIALOG_PATTERN = exports.CLAUDE_SEPARATOR_PATTERN = exports.CLAUDE_PROMPT_PATTERN = exports.CODEX_THINKING_PATTERN = exports.CLAUDE_THINKING_PATTERN = exports.CLAUDE_SPINNER_CHARS = void 0;
 exports.detectThinking = detectThinking;
 exports.getCliToolPatterns = getCliToolPatterns;
 exports.stripAnsi = stripAnsi;
@@ -124,6 +124,66 @@ exports.GEMINI_PROMPT_PATTERN = /^[>❯]\s*$/m;
  * Gemini CLI shows braille spinner characters and status text while processing.
  */
 exports.GEMINI_THINKING_PATTERN = /[\u2800-\u28FF]|Thinking\.\.\./;
+/**
+ * OpenCode prompt pattern (Issue #379)
+ * OpenCode TUI shows "Ask anything..." in the input area when waiting for user input.
+ * Unlike Claude/Codex (which use > or ❯), OpenCode uses a text-based prompt indicator.
+ */
+exports.OPENCODE_PROMPT_PATTERN = /Ask anything\.\.\./;
+/**
+ * OpenCode prompt pattern after response completion (Issue #379)
+ * Shows "tab agents  ctrl+p commands" in the TUI status bar after a response finishes.
+ * Used as extraction stop condition in response-poller.ts [D2-003].
+ */
+exports.OPENCODE_PROMPT_AFTER_RESPONSE = /tab agents\s+ctrl\+p commands/;
+/**
+ * OpenCode thinking/processing pattern (Issue #379)
+ * OpenCode TUI shows "Thinking:" prefix while the Ollama model is generating a response.
+ * Used by detectThinking() to determine if the tool is actively processing.
+ */
+exports.OPENCODE_THINKING_PATTERN = /Thinking:/;
+/**
+ * OpenCode loading indicator pattern (Issue #379)
+ * Shows a series of 4+ filled square characters (U+2B1D) during initial loading/model warm-up.
+ * Filtered from response extraction via OPENCODE_SKIP_PATTERNS.
+ */
+exports.OPENCODE_LOADING_PATTERN = /\u2B1D{4,}/;
+/**
+ * OpenCode response completion pattern (Issue #379)
+ * Matches the action summary line: "▣ {Action} · model" with optional timing "· Ns".
+ * (U+25A3 square + action word + middle dot + model name [+ middle dot + timing]).
+ * Action can be "Build", "Compaction", or other OpenCode action names.
+ * Short responses may omit the timing portion (e.g., "▣ Build · qwen3.5:27b").
+ * This is the primary completion signal for OpenCode [D2-002].
+ */
+exports.OPENCODE_RESPONSE_COMPLETE = /\u25A3\s+\w+\s+\u00b7\s+\S+(?:\s+\u00b7\s+(?:[\d]+h\s*)?(?:[\d]+m\s*)?[\d.]+s)?/;
+/**
+ * OpenCode processing indicator pattern (Issue #379)
+ * Shows "esc interrupt" in the TUI status bar during active model processing.
+ * Filtered from response extraction via OPENCODE_SKIP_PATTERNS.
+ */
+exports.OPENCODE_PROCESSING_INDICATOR = /esc interrupt/;
+/**
+ * OpenCode TUI separator pattern (Issue #379)
+ * Matches lines composed entirely of box-drawing / TUI decoration characters.
+ * Covers: vertical lines (U+2503), box corners, horizontal lines, and other TUI elements.
+ */
+exports.OPENCODE_SEPARATOR_PATTERN = /^[\u2503\u2579\u25A3\u2580\u2500\u250C\u2510\u2514\u2518\u251C\u2524\u252C\u2534\u253C]+$/;
+/**
+ * OpenCode skip patterns for response cleaning (Issue #379)
+ * Lines matching any of these patterns are filtered from extracted responses.
+ * Includes: TUI separators, loading indicators, Build summary prefix,
+ * status bar prompts, processing indicators, input prompt, and pasted text markers.
+ */
+exports.OPENCODE_SKIP_PATTERNS = [
+    exports.OPENCODE_SEPARATOR_PATTERN,
+    exports.OPENCODE_LOADING_PATTERN,
+    /^Build\s+/,
+    exports.OPENCODE_PROMPT_AFTER_RESPONSE,
+    exports.OPENCODE_PROCESSING_INDICATOR,
+    exports.OPENCODE_PROMPT_PATTERN,
+    exports.PASTED_TEXT_PATTERN,
+];
 /**
  * Vibe Local prompt pattern
  * vibe-local (vibe-coder) shows `ctx:N% ❯` prompt when waiting for user input.
@@ -157,6 +217,9 @@ function detectThinking(cliToolId, content) {
         case 'vibe-local':
             result = exports.VIBE_LOCAL_THINKING_PATTERN.test(content);
             break;
+        case 'opencode':
+            result = exports.OPENCODE_THINKING_PATTERN.test(content);
+            break;
         default:
             result = exports.CLAUDE_THINKING_PATTERN.test(content);
     }
@@ -241,6 +304,13 @@ function getCliToolPatterns(cliToolId) {
                     exports.PASTED_TEXT_PATTERN, // [Pasted text #N +XX lines]
                 ],
             };
+        case 'opencode':
+            return {
+                promptPattern: exports.OPENCODE_PROMPT_PATTERN,
+                separatorPattern: exports.OPENCODE_SEPARATOR_PATTERN,
+                thinkingPattern: exports.OPENCODE_THINKING_PATTERN,
+                skipPatterns: [...exports.OPENCODE_SKIP_PATTERNS],
+            };
         default:
             // Default to Claude patterns
             return getCliToolPatterns('claude');
@@ -279,28 +349,16 @@ function stripAnsi(str) {
  */
 function stripBoxDrawing(str) {
     return str.split('\n').map(line => {
-        // Remove border-only lines (╭──╮, ╰──╯, │ only, etc.)
-        if (/^[\u2502\u256D\u256E\u256F\u2570\u2500\s]+$/.test(line))
+        // Remove border-only lines (╭──╮, ╰──╯, │ only, ┃ only, ╹▀▀▀, etc.)
+        // U+2502 │ (light vertical), U+2503 ┃ (heavy vertical - OpenCode TUI)
+        // U+2579 ╹ (heavy up), U+2580 ▀ (upper half block - OpenCode separator)
+        if (/^[\u2502\u2503\u256D\u256E\u256F\u2570\u2500\u2579\u2580\s]+$/.test(line))
             return '';
-        // Strip leading │ + optional space, trailing space + │
-        return line.replace(/^\u2502\s?/, '').replace(/\s*\u2502$/, '');
+        // Strip leading whitespace + │/┃ + optional space, trailing space + │/┃
+        // OpenCode TUI adds 2-space padding before ┃ borders (e.g., "  ┃  content")
+        return line.replace(/^\s*[\u2502\u2503]\s?/, '').replace(/\s*[\u2502\u2503]$/, '');
     }).join('\n');
 }
-/**
- * Build DetectPromptOptions for a given CLI tool.
- * Centralizes cliToolId-to-options mapping logic (DRY - MF-001).
- *
- * prompt-detector.ts remains CLI tool independent (Issue #161 principle);
- * this function lives in cli-patterns.ts which already depends on CLIToolType.
- *
- * [Future extension memo (C-002)]
- * If CLI tool count grows significantly (currently 3), consider migrating
- * to a CLIToolConfig registry pattern where tool-specific settings
- * (including promptDetectionOptions) are managed in a Record<CLIToolType, CLIToolConfig>.
- *
- * @param cliToolId - CLI tool identifier
- * @returns DetectPromptOptions for the tool, or undefined for default behavior
- */
 /**
  * Error patterns that indicate a Claude session failed to start properly
  * Used by isSessionHealthy() to detect broken sessions (MF-001: SRP)
@@ -334,9 +392,30 @@ exports.CLAUDE_SESSION_ERROR_PATTERNS = [
 exports.CLAUDE_SESSION_ERROR_REGEX_PATTERNS = [
     /^Error:.*Claude Code/,
 ];
+/**
+ * Build DetectPromptOptions for a given CLI tool.
+ * Centralizes cliToolId-to-options mapping logic (DRY - MF-001).
+ *
+ * prompt-detector.ts remains CLI tool independent (Issue #161 principle);
+ * this function lives in cli-patterns.ts which already depends on CLIToolType.
+ *
+ * [Future extension memo (C-002)]
+ * If CLI tool count grows significantly (currently 5), consider migrating
+ * to a CLIToolConfig registry pattern where tool-specific settings
+ * (including promptDetectionOptions) are managed in a Record<CLIToolType, CLIToolConfig>.
+ * Migration threshold: 6th tool addition triggers registry pattern migration [D1-003].
+ *
+ * @param cliToolId - CLI tool identifier
+ * @returns DetectPromptOptions for the tool, or undefined for default behavior
+ */
 function buildDetectPromptOptions(cliToolId) {
     if (cliToolId === 'claude') {
         return { requireDefaultIndicator: false };
     }
+    // [D2-006] OpenCode prompt "Ask anything..." does not use standard indicators (> / ❯),
+    // so requireDefaultIndicator must be false to avoid missing prompt detection.
+    if (cliToolId === 'opencode') {
+        return { requireDefaultIndicator: false };
+    }
     return undefined; // Default behavior (requireDefaultIndicator = true)
 }

package/dist/server/src/lib/cli-tools/manager.js

@@ -1,7 +1,7 @@
 "use strict";
 /**
  * CLI Tool Manager
- * Singleton class to manage multiple CLI tools (Claude, Codex, Gemini, Vibe Local)
+ * Singleton class to manage multiple CLI tools (Claude, Codex, Gemini, Vibe Local, OpenCode)
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CLIToolManager = void 0;
@@ -9,10 +9,11 @@ const claude_1 = require("./claude");
 const codex_1 = require("./codex");
 const gemini_1 = require("./gemini");
 const vibe_local_1 = require("./vibe-local");
+const opencode_1 = require("./opencode");
 const response_poller_1 = require("../response-poller");
 /**
  * CLI Tool Manager (Singleton)
- * Provides centralized access to all CLI tools (Issue #368: includes Vibe Local)
+ * Provides centralized access to all CLI tools (Issue #368: includes Vibe Local, Issue #379: includes OpenCode)
  */
 class CLIToolManager {
     static instance;
@@ -27,6 +28,7 @@ class CLIToolManager {
         this.tools.set('codex', new codex_1.CodexTool());
         this.tools.set('gemini', new gemini_1.GeminiTool());
         this.tools.set('vibe-local', new vibe_local_1.VibeLocalTool());
+        this.tools.set('opencode', new opencode_1.OpenCodeTool());
     }
     /**
      * Get singleton instance
@@ -68,7 +70,7 @@ class CLIToolManager {
      * ```typescript
      * const manager = CLIToolManager.getInstance();
      * const allTools = manager.getAllTools();
-     * console.log(allTools.map(t => t.name)); // ['Claude Code', 'Codex CLI', 'Gemini CLI']
+     * console.log(allTools.map(t => t.name)); // ['Claude Code', 'Codex CLI', 'Gemini CLI', 'Vibe Local', 'OpenCode']
      * ```
      */
     getAllTools() {

package/dist/server/src/lib/cli-tools/opencode-config.js

@@ -0,0 +1,236 @@
+"use strict";
+/**
+ * OpenCode configuration file generator
+ * Issue #379: Generates opencode.json with Ollama provider configuration
+ *
+ * @remarks [D1-001 SRP] Separated from opencode.ts to maintain single responsibility.
+ * This module handles Ollama HTTP API calls and config file I/O,
+ * while opencode.ts handles tmux session management.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OLLAMA_MODEL_PATTERN = exports.MAX_OLLAMA_MODELS = exports.OLLAMA_BASE_URL = exports.OLLAMA_API_URL = void 0;
+exports.ensureOpencodeConfig = ensureOpencodeConfig;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+// =============================================================================
+// Constants
+// =============================================================================
+/**
+ * [SEC-001] SSRF Prevention: Ollama API URL is hardcoded.
+ * This value MUST NOT be derived from environment variables, config files,
+ * or user input. OWASP A10:2021
+ */
+exports.OLLAMA_API_URL = 'http://localhost:11434/api/tags';
+/**
+ * [SEC-001] SSRF Prevention: Ollama base URL for opencode.json config.
+ * Same policy as OLLAMA_API_URL.
+ */
+exports.OLLAMA_BASE_URL = 'http://localhost:11434/v1';
+/** Maximum number of Ollama models to include in config (DoS prevention) */
+exports.MAX_OLLAMA_MODELS = 100;
+/**
+ * Ollama model name validation pattern (with length limit).
+ * Allows: alphanumeric, dots, underscores, colons, slashes, hyphens.
+ * Max 100 characters (length encoded in regex). [D4-003]
+ *
+ * [SEC-001] Defense-in-depth validation at point of use.
+ *
+ * Note: This pattern differs from OLLAMA_MODEL_PATTERN in types.ts.
+ * - types.ts: `^[a-zA-Z0-9][a-zA-Z0-9._:/-]*$` (no length limit, requires alphanumeric start)
+ *   Used for API/DB validation where the first character constraint matters.
+ * - This file: `^[a-zA-Z0-9._:/-]{1,100}$` (length-limited, used for Ollama API response validation)
+ *   Length limit provides DoS protection against excessively long model names from Ollama API.
+ */
+exports.OLLAMA_MODEL_PATTERN = /^[a-zA-Z0-9._:/-]{1,100}$/;
+/** Ollama API request timeout in milliseconds */
+const OLLAMA_API_TIMEOUT_MS = 3000;
+/** Maximum Ollama API response size (1MB) [D4-007] */
+const MAX_OLLAMA_RESPONSE_SIZE = 1 * 1024 * 1024;
+/** Config file name */
+const CONFIG_FILE_NAME = 'opencode.json';
+// =============================================================================
+// Helpers
+// =============================================================================
+/**
+ * Format model display name with size and quantization info
+ */
+function formatModelDisplayName(model) {
+    const name = String(model.name);
+    const details = model.details;
+    if (!details)
+        return name;
+    const parts = [name];
+    // Sanitize and extract parameter_size (e.g., "7.6B", "27.8B")
+    if (typeof details.parameter_size === 'string' && /^[\d.]+[BKMGT]?B?$/i.test(details.parameter_size)) {
+        parts.push(details.parameter_size);
+    }
+    // Sanitize and extract quantization_level (e.g., "Q4_K_M", "Q8_0")
+    if (typeof details.quantization_level === 'string' && /^[A-Z0-9_]{1,20}$/i.test(details.quantization_level)) {
+        parts.push(details.quantization_level);
+    }
+    return parts.length > 1 ? `${name} (${parts.slice(1).join(', ')})` : name;
+}
+/**
+ * Validate worktree path for path traversal prevention [D4-004].
+ *
+ * Trust chain: API layer -> DB (worktrees.path) -> startSession -> ensureOpencodeConfig.
+ * Although the DB stores validated paths, this function provides defense-in-depth
+ * by re-validating at the point of filesystem access.
+ *
+ * Steps:
+ * 1. path.resolve() - Normalize path (remove .., ., etc.)
+ * 2. fs.lstatSync() - Verify path exists and is a directory (symlink-aware)
+ * 3. fs.realpathSync() - Resolve symlinks to get the canonical path
+ *
+ * @param worktreePath - Path to validate
+ * @returns Resolved real path (after symlink resolution)
+ * @throws Error if path does not exist or is not a directory
+ * @internal
+ */
+function validateWorktreePath(worktreePath) {
+    // 1. path.resolve() for normalization
+    const resolvedPath = path.resolve(worktreePath);
+    // 2. Verify the path exists and is a directory (lstatSync for symlink detection)
+    try {
+        const stat = fs.lstatSync(resolvedPath);
+        if (!stat.isDirectory()) {
+            throw new Error(`Path is not a directory: ${resolvedPath}`);
+        }
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            throw new Error(`Path does not exist: ${resolvedPath}`);
+        }
+        throw error;
+    }
+    // 3. Resolve symlinks to get real path
+    const realPath = fs.realpathSync(resolvedPath);
+    return realPath;
+}
+// =============================================================================
+// Main function
+// =============================================================================
+/**
+ * Ensure opencode.json exists in the worktree directory.
+ * If the file already exists, it is NOT overwritten (respects user configuration).
+ * If Ollama is not running, the function logs a warning and returns without error.
+ *
+ * @param worktreePath - Worktree directory path (from DB)
+ * @internal
+ */
+async function ensureOpencodeConfig(worktreePath) {
+    // Validate path [D4-004]
+    const validatedPath = validateWorktreePath(worktreePath);
+    const configPath = path.join(validatedPath, CONFIG_FILE_NAME);
+    // Skip if config already exists (respect user configuration)
+    if (fs.existsSync(configPath)) {
+        return;
+    }
+    // Fetch models from Ollama API
+    const models = {};
+    try {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), OLLAMA_API_TIMEOUT_MS);
+        const response = await fetch(exports.OLLAMA_API_URL, {
+            signal: controller.signal,
+        }).finally(() => {
+            clearTimeout(timeoutId);
+        });
+        if (!response.ok) {
+            console.warn(`Ollama API returned status ${response.status}, skipping opencode.json generation`);
+            return;
+        }
+        // [D4-007] Response size check
+        const text = await response.text();
+        if (text.length > MAX_OLLAMA_RESPONSE_SIZE) {
+            console.warn('Ollama API response too large, skipping opencode.json generation');
+            return;
+        }
+        // Parse and validate response structure [D4-007]
+        const data = JSON.parse(text);
+        if (!data || !Array.isArray(data.models)) {
+            console.warn('Invalid Ollama API response structure, skipping opencode.json generation');
+            return;
+        }
+        // Limit model count (DoS prevention)
+        const modelList = data.models.slice(0, exports.MAX_OLLAMA_MODELS);
+        // Validate each model (whitelist approach) [D4-007]
+        for (const model of modelList) {
+            if (typeof model?.name !== 'string')
+                continue;
+            if (!exports.OLLAMA_MODEL_PATTERN.test(model.name))
+                continue;
+            models[model.name] = { name: formatModelDisplayName(model) };
+        }
+    }
+    catch (error) {
+        // Non-fatal: Ollama may not be running [D4-002]
+        if (error instanceof Error && error.name === 'AbortError') {
+            console.warn('Ollama API timeout, skipping opencode.json generation');
+        }
+        else {
+            console.warn('Failed to fetch Ollama models, skipping opencode.json generation');
+        }
+        return;
+    }
+    // [D4-005] Generate config using JSON.stringify (not template literals).
+    // JSON.stringify ensures proper escaping of model names and other values,
+    // preventing JSON injection via maliciously crafted Ollama model metadata.
+    const config = {
+        $schema: 'https://opencode.ai/config.json',
+        provider: {
+            ollama: {
+                npm: '@ai-sdk/openai-compatible',
+                name: 'Ollama (local)',
+                options: { baseURL: exports.OLLAMA_BASE_URL },
+                models,
+            },
+        },
+    };
+    try {
+        fs.writeFileSync(configPath, JSON.stringify(config, null, 2), {
+            encoding: 'utf-8',
+            flag: 'wx',
+        });
+    }
+    catch (error) {
+        if (error.code === 'EEXIST') {
+            return;
+        }
+        // Non-fatal: write failure should not prevent session start
+        console.warn(`Failed to write opencode.json: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}

package/dist/server/src/lib/cli-tools/opencode.js

@@ -0,0 +1,188 @@
+"use strict";
+/**
+ * OpenCode CLI tool implementation
+ * Issue #379: Provides integration with OpenCode TUI in interactive mode
+ *
+ * @remarks Follows the same tmux-based pattern as Claude/Codex/Gemini/VibeLocal tools.
+ * - startSession: launches `opencode` TUI in tmux
+ * - sendMessage: sends text via tmux send-keys + Enter
+ * - killSession: sends `/exit` command then falls back to tmux kill-session
+ * - interrupt(): inherits BaseCLITool default (Escape key) [D2-008]
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenCodeTool = exports.OPENCODE_INIT_WAIT_MS = exports.OPENCODE_PANE_HEIGHT = exports.OPENCODE_EXIT_COMMAND = void 0;
+const base_1 = require("./base");
+const tmux_1 = require("../tmux");
+const pasted_text_helper_1 = require("../pasted-text-helper");
+const opencode_config_1 = require("./opencode-config");
+const child_process_1 = require("child_process");
+const util_1 = require("util");
+const execFileAsync = (0, util_1.promisify)(child_process_1.execFile);
+/**
+ * Extract error message from unknown error type (DRY)
+ * Same pattern as claude-session.ts / codex.ts / gemini.ts / vibe-local.ts.
+ * A shared version exists in src/lib/errors.ts (getErrorMessage), but CLI tool
+ * modules use local copies to avoid importing the server-side error module.
+ * [D1-002] Future refactoring candidate: extract to BaseCLITool or a shared util.
+ */
+function getErrorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/** OpenCode TUI graceful exit command [D1-006] */
+exports.OPENCODE_EXIT_COMMAND = '/exit';
+/**
+ * OpenCode tmux pane height (rows).
+ * Set to 200 to expand the TUI content area (~190 visible lines),
+ * allowing most responses to be captured in a single tmux capture-pane.
+ * OpenCode runs in alternate screen mode with no scrollback buffer,
+ * so only visible rows are capturable.
+ */
+exports.OPENCODE_PANE_HEIGHT = 200;
+/**
+ * Wait for OpenCode TUI to initialize after launch.
+ * Set to 15000ms to accommodate GPU model loading via Ollama.
+ */
+exports.OPENCODE_INIT_WAIT_MS = 15000;
+/**
+ * OpenCode CLI tool implementation
+ * Manages OpenCode interactive sessions using tmux
+ */
+class OpenCodeTool extends base_1.BaseCLITool {
+    id = 'opencode';
+    name = 'OpenCode';
+    command = 'opencode';
+    // interrupt() is inherited from BaseCLITool (Escape key) [D2-008]
+    // OpenCode TUI supports Escape for interruption ("esc interrupt" display)
+    /**
+     * Check if OpenCode session is running for a worktree
+     */
+    async isRunning(worktreeId) {
+        const sessionName = this.getSessionName(worktreeId);
+        return await (0, tmux_1.hasSession)(sessionName);
+    }
+    /**
+     * Start a new OpenCode session for a worktree
+     * Launches `opencode` TUI in interactive mode within tmux
+     *
+     * @param worktreeId - Worktree ID
+     * @param worktreePath - Worktree path
+     */
+    async startSession(worktreeId, worktreePath) {
+        const opencodeAvailable = await this.isInstalled();
+        if (!opencodeAvailable) {
+            throw new Error('OpenCode is not installed or not in PATH');
+        }
+        const sessionName = this.getSessionName(worktreeId);
+        const exists = await (0, tmux_1.hasSession)(sessionName);
+        if (exists) {
+            console.log(`OpenCode session ${sessionName} already exists`);
+            return;
+        }
+        try {
+            // Generate opencode.json if not present (non-fatal on failure)
+            await (0, opencode_config_1.ensureOpencodeConfig)(worktreePath);
+            // Create tmux session with large history buffer
+            await (0, tmux_1.createSession)({
+                sessionName,
+                workingDirectory: worktreePath,
+                historyLimit: 50000,
+            });
+            // Wait a moment for the session to be created
+            await new Promise((resolve) => setTimeout(resolve, 100));
+            // Resize tmux window to 80 columns (hide sidebar for clean capture-pane output)
+            // [SEC-001] Uses execFile (not exec) to prevent shell meta-character injection via sessionName
+            try {
+                await execFileAsync('tmux', [
+                    'resize-window', '-t', sessionName,
+                    '-x', '80', '-y', String(exports.OPENCODE_PANE_HEIGHT),
+                ]);
+            }
+            catch {
+                // Non-fatal: resize may fail in some environments
+            }
+            // Start OpenCode TUI
+            await (0, tmux_1.sendKeys)(sessionName, 'opencode', true);
+            // Wait for OpenCode to initialize (GPU model loading via Ollama)
+            await new Promise((resolve) => setTimeout(resolve, exports.OPENCODE_INIT_WAIT_MS));
+            console.log(`Started OpenCode session: ${sessionName}`);
+        }
+        catch (error) {
+            const errorMessage = getErrorMessage(error);
+            throw new Error(`Failed to start OpenCode session: ${errorMessage}`);
+        }
+    }
+    /**
+     * Send a message to OpenCode interactive session
+     * [D1-004] Same pattern as Codex/Gemini/VibeLocal (future Template Method candidate)
+     *
+     * @param worktreeId - Worktree ID
+     * @param message - Message to send
+     */
+    async sendMessage(worktreeId, message) {
+        const sessionName = this.getSessionName(worktreeId);
+        const exists = await (0, tmux_1.hasSession)(sessionName);
+        if (!exists) {
+            throw new Error(`OpenCode session ${sessionName} does not exist. Start the session first.`);
+        }
+        try {
+            // Send message to OpenCode (without Enter)
+            await (0, tmux_1.sendKeys)(sessionName, message, false);
+            // Wait a moment for the text to be typed
+            await new Promise((resolve) => setTimeout(resolve, 100));
+            // Send Enter key separately
+            await (0, tmux_1.sendSpecialKey)(sessionName, 'C-m');
+            // Wait a moment for the message to be processed
+            await new Promise((resolve) => setTimeout(resolve, 200));
+            // Detect [Pasted text] and resend Enter for multi-line messages
+            if (message.includes('\n')) {
+                await (0, pasted_text_helper_1.detectAndResendIfPastedText)(sessionName);
+            }
+            console.log(`Sent message to OpenCode session: ${sessionName}`);
+        }
+        catch (error) {
+            const errorMessage = getErrorMessage(error);
+            throw new Error(`Failed to send message to OpenCode: ${errorMessage}`);
+        }
+    }
+    /**
+     * Kill OpenCode session with graceful shutdown.
+     *
+     * Shutdown sequence [D1-006, D1-007]:
+     * 1. Check if session exists
+     * 2. If exists: send `/exit` TUI command for graceful shutdown
+     * 3. Wait 2s for OpenCode to process the exit command
+     * 4. Re-check session: if still running, force-kill via tmux kill-session
+     * 5. If session did not exist: attempt kill anyway (cleanup stale sessions)
+     *
+     * @param worktreeId - Worktree ID
+     */
+    async killSession(worktreeId) {
+        const sessionName = this.getSessionName(worktreeId);
+        try {
+            // Step 1: Check if the tmux session currently exists
+            const exists = await (0, tmux_1.hasSession)(sessionName);
+            if (exists) {
+                // Step 2: Send /exit command for graceful TUI shutdown [D1-006]
+                await (0, tmux_1.sendKeys)(sessionName, exports.OPENCODE_EXIT_COMMAND, true);
+                // Step 3: Wait for OpenCode to process the exit command
+                await new Promise((resolve) => setTimeout(resolve, 2000));
+                // Step 4: Check if session still exists; force-kill if needed [D1-007]
+                const stillExists = await (0, tmux_1.hasSession)(sessionName);
+                if (stillExists) {
+                    await (0, tmux_1.killSession)(sessionName);
+                }
+            }
+            else {
+                // Step 5: Session does not exist, attempt kill anyway (cleanup stale tmux sessions)
+                await (0, tmux_1.killSession)(sessionName);
+            }
+            console.log(`Stopped OpenCode session: ${sessionName}`);
+        }
+        catch (error) {
+            const errorMessage = getErrorMessage(error);
+            console.error(`Error stopping OpenCode session: ${errorMessage}`);
+            throw error;
+        }
+    }
+}
+exports.OpenCodeTool = OpenCodeTool;