offhands 0.1.3 → 0.1.5

package/dist/daemon.mjs

@@ -5299,6 +5299,7 @@ stderr: ${stderrTail}` : ""}`
 
 // ../daemon/src/runners/opencode-cli.ts
 import { spawn as spawn4 } from "node:child_process";
+import { createServer } from "node:net";
 import { existsSync as existsSync3 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { delimiter as delimiter2, join as join3 } from "node:path";
@@ -5307,102 +5308,71 @@ import { delimiter as delimiter2, join as join3 } from "node:path";
 function mapOpenCodeEvent(value) {
   if (typeof value !== "object" || value === null) return [];
   const v2 = value;
-  const type = typeof v2.type === "string" ? v2.type : "";
-  const data = v2.data ?? {};
-  if (type === "text_delta" || type === "message.delta" && data.type === "text") {
-    const chunk = typeof data.text === "string" ? data.text : "";
-    return chunk ? [{ type: "text", chunk }] : [];
-  }
-  if (type === "thinking_delta" || type === "message.delta" && data.type === "thinking") {
-    const chunk = typeof data.thinking === "string" ? data.thinking : "";
-    return chunk ? [{ type: "thinking", chunk }] : [];
-  }
-  if (type === "tool_call_start" || type === "message.delta" && data.type === "tool_use") {
-    const name = firstString2(data, "toolName", "name", "tool") ?? "tool";
-    const summary = firstString2(data, "command", "path", "file", "summary", "description", "query") ?? "";
+  const part = v2.part ?? {};
+  const partType = typeof part.type === "string" ? part.type : typeof v2.type === "string" ? v2.type : "";
+  if (partType === "text") {
+    const text = typeof part.text === "string" ? part.text : "";
+    return text ? [{ type: "text", chunk: text }] : [];
+  }
+  if (partType === "reasoning") {
+    const thinking = typeof part.text === "string" ? part.text : "";
+    return thinking ? [{ type: "thinking", chunk: thinking }] : [];
+  }
+  if (partType === "tool") {
+    const name = typeof part.tool === "string" ? part.tool : "tool";
+    const state = part.state ?? {};
+    const input = state.input;
+    const summary = input ? firstString2(input, "command", "filePath", "path", "file", "pattern", "query", "url") ?? "" : "";
+    const status = typeof state.status === "string" ? state.status : void 0;
+    if (status === "error") {
+      const errMsg = typeof state.error === "string" ? state.error : "tool call failed";
+      return [{ type: "tool", name, summary: `${name}: ${truncate3(errMsg, 120)}` }];
+    }
     return [{ type: "tool", name, summary: summary ? `${name}: ${truncate3(summary, 120)}` : name }];
   }
-  if (type === "tool_call_end" || type === "tool_call_result") {
-    return [];
-  }
-  if (type === "permission.request" || type === "permission_request") {
-    const id = firstString2(data, "id", "permissionId") ?? crypto.randomUUID();
-    const action = firstString2(data, "toolName", "action", "command") ?? "action";
-    const detail = firstString2(data, "detail", "description", "message") ?? "";
-    const risk = firstString2(data, "risk") === "high" ? "high" : "low";
-    const preview = firstString2(data, "preview", "diff", "command") ?? void 0;
-    const question = data.question ? mapQuestion(data.question) : void 0;
-    return [{
-      type: "approval",
-      id,
-      action,
-      detail,
-      risk,
-      preview,
-      question
-    }];
-  }
-  if (type === "result" || type === "completed" || type === "done") {
-    const isError = v2.is_error === true || v2.error === true || typeof data.exitCode === "number" && data.exitCode !== 0;
-    const text = firstString2(v2, "result", "text", "summary", "message") ?? "";
-    if (isError) {
-      return [{ type: "error", message: text || `run failed (${String(v2.subtype ?? v2.type ?? "unknown")})` }];
+  if (partType === "step-start") return [];
+  if (partType === "step-finish") {
+    const reason = typeof part.reason === "string" ? part.reason : "stop";
+    const usage = extractUsageFromPart(part);
+    if (reason === "error") {
+      const message = firstString2(part, "error", "message") ?? "run failed";
+      const events2 = [{ type: "error", message }];
+      if (usage) events2.push(usage);
+      return events2;
     }
-    const events = [{ type: "done", summary: text }];
-    const usage = extractUsage(v2, data);
+    if (reason !== "stop") return usage ? [usage] : [];
+    const events = [{ type: "done", summary: "" }];
     if (usage) events.push(usage);
     return events;
   }
-  if (type === "error" || type === "failed") {
+  if (!part.type && typeof v2.type === "string" && v2.type === "error") {
     const message = firstString2(v2, "message", "error", "detail", "result") ?? "unknown error";
     return [{ type: "error", message }];
   }
-  if (type === "rate_limit" || type === "usage") {
-    const usage = extractUsage(v2, data);
-    return usage ? [usage] : [];
-  }
-  if (type === "session.created" || type === "session.updated") {
-    return [];
-  }
   return [];
 }
 function extractOpenCodeSessionId(value) {
   if (typeof value !== "object" || value === null) return null;
   const v2 = value;
-  const data = v2.data ?? {};
-  return firstString2(v2, "sessionId", "session_id", "id") ?? firstString2(data, "sessionId", "session_id", "id") ?? null;
-}
-function mapQuestion(q2) {
-  if (typeof q2 !== "object" || q2 === null) return void 0;
-  const qq = q2;
-  const text = typeof qq.text === "string" ? qq.text : "";
-  const options = Array.isArray(qq.options) ? qq.options.filter((o2) => typeof o2 === "object" && o2 !== null).map((o2) => ({
-    label: typeof o2.label === "string" ? o2.label : "",
-    description: typeof o2.description === "string" ? o2.description : void 0
-  })) : [];
-  const multiSelect = typeof qq.multiSelect === "boolean" ? qq.multiSelect : void 0;
-  if (!text && options.length === 0) return void 0;
-  return { text, options, multiSelect };
-}
-function extractUsage(v2, data) {
-  const usage = v2.usage ?? data.usage;
-  const costUsd = typeof v2.costUsd === "number" ? v2.costUsd : typeof data.costUsd === "number" ? data.costUsd : typeof v2.total_cost_usd === "number" ? v2.total_cost_usd : void 0;
-  if (!usage && costUsd === void 0) return null;
-  const n2 = (k2) => {
-    const val = usage?.[k2] ?? data[k2];
-    return typeof val === "number" ? val : 0;
-  };
-  const contextTokens = n2("inputTokens") + n2("input_tokens") + n2("cacheReadInputTokens") + n2("cache_read_input_tokens") + n2("cacheCreationInputTokens") + n2("cache_creation_input_tokens") + n2("outputTokens") + n2("output_tokens") + n2("reasoningTokens") + n2("reasoning_tokens");
+  const part = v2.part ?? {};
+  return firstString2(v2, "sessionID", "sessionId", "session_id") ?? firstString2(part, "sessionID", "sessionId", "session_id") ?? null;
+}
+function extractUsageFromPart(part) {
+  const tokens = part.tokens;
+  const costUsd = typeof part.cost === "number" ? part.cost : void 0;
+  if (!tokens && costUsd === void 0) return null;
+  const n2 = (k2) => typeof tokens?.[k2] === "number" ? tokens[k2] : 0;
+  const contextTokens = tokens && typeof tokens.total === "number" ? tokens.total : n2("input") + n2("output") + n2("reasoning");
   if (contextTokens <= 0 && costUsd === void 0) return null;
   return {
     type: "usage",
     contextTokens,
     contextWindow: 2e5,
-    // OpenCode doesn't expose window; use reasonable default
     ...costUsd !== void 0 ? { costUsd } : {}
   };
 }
 function firstString2(obj, ...keys) {
+  if (!obj) return void 0;
   for (const k2 of keys) {
     const val = obj[k2];
     if (typeof val === "string" && val !== "") return val;
@@ -5414,7 +5384,11 @@ function truncate3(s2, max) {
 }
 
 // ../daemon/src/runners/opencode-cli.ts
+var POLL_INTERVAL_MS = 500;
 var OpenCodeRunner = class {
+  constructor(broker2) {
+    this.broker = broker2;
+  }
   id = "opencode";
   name = "OpenCode";
   supportsApprovals = true;
@@ -5423,6 +5397,10 @@ var OpenCodeRunner = class {
   /** [command, ...prefixArgs] resolved once. */
   resolved = null;
   modelsCache = [];
+  // Lazily-started, shared `opencode serve` instance backing startViaHttpApi.
+  serverPort = null;
+  serverProcess = null;
+  serverStarting = null;
   resolveCommand() {
     if (this.resolved) return this.resolved;
     if (process.platform === "win32") {
@@ -5493,7 +5471,7 @@ var OpenCodeRunner = class {
         if (code === 0) {
           try {
             const lines = output.trim().split("\n");
-            const models = lines.map((l2) => l2.trim()).filter((l2) => l2 && !l2.startsWith("opencode/"));
+            const models = lines.map((l2) => l2.trim()).filter((l2) => l2.length > 0);
             this.modelsCache = models;
             Object.defineProperty(this, "models", {
               value: models,
@@ -5515,6 +5493,13 @@ var OpenCodeRunner = class {
     return existsSync3(join3(homedir3(), ".local", "share", "opencode", "auth.json"));
   }
   start(run, callbacks) {
+    const mode = run.permissionMode ?? "guarded";
+    if (this.broker && (mode === "guarded" || mode === "acceptEdits")) {
+      return this.startViaHttpApi(run, mode, callbacks);
+    }
+    return this.startViaCli(run, mode, callbacks);
+  }
+  startViaCli(run, mode, callbacks) {
     const queue = new AsyncEventQueue();
     const parser = new NdjsonParser();
     let child;
@@ -5538,10 +5523,8 @@ var OpenCodeRunner = class {
     const args2 = [
       ...cmd.slice(1),
       "run",
-      run.prompt,
       "--format",
-      "json",
-      "--no-color"
+      "json"
     ];
     if (run.model) {
       args2.push("--model", run.model);
@@ -5549,12 +5532,10 @@ var OpenCodeRunner = class {
     if (run.resumeConversationId) {
       args2.push("--session", run.resumeConversationId);
     }
-    const mode = run.permissionMode ?? "guarded";
-    if (mode === "bypass") {
-      args2.push("--auto");
-    } else if (mode === "plan") {
+    if (mode === "plan") {
       args2.push("--agent", "plan");
     } else {
+      args2.push("--auto");
     }
     if (run.effort) {
       const variantMap = { low: "minimal", medium: "high", high: "max", max: "max" };
@@ -5570,6 +5551,8 @@ var OpenCodeRunner = class {
       }
     }
     args2.push("--dir", run.workspace);
+    const promptArg = process.platform === "win32" ? `"${run.prompt.replace(/"/g, '\\"')}"` : run.prompt;
+    args2.push(promptArg);
     try {
       child = spawn4(cmd[0], args2, {
         cwd: run.workspace,
@@ -5623,12 +5606,283 @@ stderr: ${stderrTail}` : ""}`
     });
     return {
       events: queue,
-      respond: (approvalId, ok, answer) => {
+      // No broker (or bypass/plan, which never ask) — nothing to answer.
+      respond: () => {
       },
       cancel: () => child.kill()
     };
   }
+  startViaHttpApi(run, mode, callbacks) {
+    const queue = new AsyncEventQueue();
+    const emit = (events) => {
+      for (const e of events) queue.push(e);
+    };
+    const broker2 = this.broker;
+    const directory = run.workspace;
+    const encDir = encodeURIComponent(directory);
+    let cancelled = false;
+    let sessionId = run.resumeConversationId ?? null;
+    let port2 = null;
+    let detachBroker;
+    const pendingQuestions = /* @__PURE__ */ new Map();
+    const cleanup = () => {
+      detachBroker?.();
+      queue.close();
+    };
+    void (async () => {
+      try {
+        port2 = await this.ensureServer();
+      } catch (e) {
+        emit([{ type: "error", message: `failed to start opencode server: ${String(e)}` }]);
+        cleanup();
+        return;
+      }
+      if (cancelled) {
+        cleanup();
+        return;
+      }
+      const base = `http://127.0.0.1:${port2}`;
+      detachBroker = broker2.attach((ev) => queue.push(ev));
+      try {
+        if (!sessionId) {
+          const modelRef2 = parseModelRef(run.model);
+          const body = { permission: buildPermissionRuleset(mode) };
+          if (modelRef2) body.model = { id: modelRef2.modelId, providerID: modelRef2.providerId };
+          const session = await httpJson(`${base}/session?directory=${encDir}`, "POST", body);
+          sessionId = session.id;
+        }
+        callbacks?.onConversationId?.(sessionId);
+        const parts = [{ type: "text", text: run.prompt }];
+        for (const file of run.attachments ?? []) {
+          parts.push({ type: "file", mime: "application/octet-stream", url: fileUrl(file) });
+        }
+        const promptBody = { parts };
+        const modelRef = parseModelRef(run.model);
+        if (modelRef) promptBody.model = { providerID: modelRef.providerId, modelID: modelRef.modelId };
+        await httpJson(`${base}/session/${sessionId}/prompt_async?directory=${encDir}`, "POST", promptBody, true);
+        await this.pollUntilDone(base, sessionId, encDir, broker2, emit, pendingQuestions, () => cancelled);
+      } catch (e) {
+        if (!cancelled) emit([{ type: "error", message: `opencode HTTP API error: ${String(e)}` }]);
+      } finally {
+        cleanup();
+      }
+    })();
+    return {
+      events: queue,
+      respond: (approvalId, ok, answer) => {
+        const settleQuestion = pendingQuestions.get(approvalId);
+        if (settleQuestion) {
+          pendingQuestions.delete(approvalId);
+          settleQuestion(ok, answer);
+          return;
+        }
+        broker2.resolve(approvalId, ok, answer);
+      },
+      cancel: () => {
+        cancelled = true;
+        if (port2 && sessionId) {
+          const abortUrl = `http://127.0.0.1:${port2}/session/${sessionId}/abort?directory=${encDir}`;
+          void httpJson(abortUrl, "POST", {}, true).catch(() => {
+          });
+        }
+      }
+    };
+  }
+  /** Poll session messages + pending permissions/questions until the turn finishes. */
+  async pollUntilDone(base, sessionId, encDir, broker2, emit, pendingQuestions, isCancelled) {
+    const seenPermissions = /* @__PURE__ */ new Set();
+    const seenQuestions = /* @__PURE__ */ new Set();
+    const emittedParts = /* @__PURE__ */ new Set();
+    let sawTerminal = false;
+    while (!isCancelled() && !sawTerminal) {
+      await sleep(POLL_INTERVAL_MS);
+      if (isCancelled()) break;
+      try {
+        const pending = await httpJson(`${base}/permission?directory=${encDir}`, "GET");
+        for (const p2 of pending) {
+          if (p2.sessionID !== sessionId || seenPermissions.has(p2.id)) continue;
+          seenPermissions.add(p2.id);
+          void this.answerPermission(base, encDir, p2, broker2);
+        }
+      } catch {
+      }
+      try {
+        const pendingQ = await httpJson(`${base}/question?directory=${encDir}`, "GET");
+        for (const q2 of pendingQ) {
+          if (q2.sessionID !== sessionId || seenQuestions.has(q2.id)) continue;
+          seenQuestions.add(q2.id);
+          void this.answerQuestion(base, encDir, q2, emit, pendingQuestions);
+        }
+      } catch {
+      }
+      let messages;
+      try {
+        messages = await httpJson(`${base}/session/${sessionId}/message?directory=${encDir}`, "GET");
+      } catch {
+        continue;
+      }
+      for (const row of messages) {
+        if (row.info.role !== "assistant") continue;
+        for (const part of row.parts) {
+          if (!part.id || emittedParts.has(part.id)) continue;
+          if ((part.type === "text" || part.type === "reasoning") && !part.time?.end) continue;
+          emittedParts.add(part.id);
+          const events = mapOpenCodeEvent({ part });
+          emit(events);
+          if (events.some((e) => e.type === "done" || e.type === "error")) sawTerminal = true;
+        }
+        if (!sawTerminal && row.info.error) {
+          sawTerminal = true;
+          emit([{ type: "error", message: row.info.error.data?.message ?? "run failed" }]);
+        }
+      }
+    }
+  }
+  /** Route one pending permission through the shared broker, then reply. */
+  async answerPermission(base, encDir, p2, broker2) {
+    const input = { ...p2.metadata };
+    const verdict = await broker2.submit(p2.permission, input);
+    try {
+      await httpJson(`${base}/permission/${p2.id}/reply?directory=${encDir}`, "POST", {
+        reply: verdict.approve ? "once" : "reject",
+        ...verdict.message ? { message: verdict.message } : {}
+      }, true);
+    } catch {
+    }
+  }
+  /** Surface an OpenCode "question" (its AskUserQuestion equivalent) as a
+   * real approval-with-options card, wait for the phone's pick, then answer
+   * through the question API's own reply/reject endpoints. */
+  async answerQuestion(base, encDir, q2, emit, pendingQuestions) {
+    const first = q2.questions[0];
+    if (!first) return;
+    const options = first.options.map((o2) => ({ label: o2.label, description: o2.description }));
+    const preview = [first.question, ...options.map((o2, n2) => `${n2 + 1}. ${o2.label}${o2.description ? ` \u2014 ${o2.description}` : ""}`)].join("\n");
+    emit([{
+      type: "approval",
+      id: q2.id,
+      action: "question",
+      detail: truncate4(first.question, 200),
+      risk: "low",
+      preview: truncate4(preview, 600),
+      question: { text: first.question, options, multiSelect: first.multiple }
+    }]);
+    const verdict = await new Promise((resolve6) => {
+      pendingQuestions.set(q2.id, (ok, answer) => resolve6({ ok, answer }));
+    });
+    emit([{
+      type: "approval-result",
+      id: q2.id,
+      approve: verdict.ok,
+      ...verdict.answer ? { answer: verdict.answer } : {}
+    }]);
+    try {
+      if (verdict.ok && verdict.answer) {
+        await httpJson(`${base}/question/${q2.id}/reply?directory=${encDir}`, "POST", { answers: [[verdict.answer]] }, true);
+      } else {
+        await httpJson(`${base}/question/${q2.id}/reject?directory=${encDir}`, "POST", {}, true);
+      }
+    } catch {
+    }
+  }
+  /** Lazily start (once) the shared `opencode serve` instance used for
+   * broker-driven runs, and wait for it to accept connections. */
+  async ensureServer() {
+    if (this.serverPort) return this.serverPort;
+    if (this.serverStarting) return this.serverStarting;
+    this.serverStarting = (async () => {
+      const cmd = this.resolveCommand();
+      if (!cmd) throw new Error("opencode CLI not found");
+      const port2 = await findFreePort();
+      const proc = spawn4(cmd[0], [...cmd.slice(1), "serve", "--port", String(port2), "--hostname", "127.0.0.1"], {
+        stdio: ["ignore", "pipe", "pipe"],
+        shell: process.platform === "win32"
+      });
+      proc.on("exit", () => {
+        if (this.serverProcess === proc) {
+          this.serverProcess = null;
+          this.serverPort = null;
+        }
+      });
+      await waitForServerReady(port2);
+      this.serverProcess = proc;
+      this.serverPort = port2;
+      return port2;
+    })();
+    try {
+      return await this.serverStarting;
+    } finally {
+      this.serverStarting = null;
+    }
+  }
 };
+function buildPermissionRuleset(mode) {
+  const base = [{ permission: "*", pattern: "*", action: "allow" }];
+  if (mode === "acceptEdits") {
+    return [
+      ...base,
+      { permission: "edit", pattern: "*", action: "allow" },
+      { permission: "bash", pattern: "*", action: "ask" },
+      { permission: "webfetch", pattern: "*", action: "ask" }
+    ];
+  }
+  return [
+    ...base,
+    { permission: "edit", pattern: "*", action: "ask" },
+    { permission: "bash", pattern: "*", action: "ask" },
+    { permission: "webfetch", pattern: "*", action: "ask" }
+  ];
+}
+function parseModelRef(model) {
+  if (!model) return null;
+  const idx = model.indexOf("/");
+  if (idx < 0) return null;
+  return { providerId: model.slice(0, idx), modelId: model.slice(idx + 1) };
+}
+function fileUrl(path) {
+  const normalised = path.replace(/\\/g, "/");
+  return `file://${normalised.startsWith("/") ? "" : "/"}${normalised}`;
+}
+function truncate4(s2, max) {
+  return s2.length <= max ? s2 : s2.slice(0, max - 1) + "\u2026";
+}
+async function httpJson(url, method, body, expectNoContent = false) {
+  const res = await fetch(url, {
+    method,
+    headers: body !== void 0 ? { "content-type": "application/json" } : void 0,
+    body: body !== void 0 ? JSON.stringify(body) : void 0
+  });
+  if (!res.ok) throw new Error(`opencode API ${method} ${url} -> ${res.status}`);
+  if (expectNoContent || res.status === 204) return void 0;
+  return res.json();
+}
+function findFreePort() {
+  return new Promise((resolve6, reject) => {
+    const srv = createServer();
+    srv.unref();
+    srv.on("error", reject);
+    srv.listen(0, "127.0.0.1", () => {
+      const address = srv.address();
+      const port2 = typeof address === "object" && address ? address.port : 0;
+      srv.close(() => resolve6(port2));
+    });
+  });
+}
+async function waitForServerReady(port2, timeoutMs = 2e4) {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    try {
+      const res = await fetch(`http://127.0.0.1:${port2}/doc`);
+      if (res.ok) return;
+    } catch {
+    }
+    await sleep(150);
+  }
+  throw new Error(`opencode serve did not become ready on port ${port2}`);
+}
+function sleep(ms) {
+  return new Promise((resolve6) => setTimeout(resolve6, ms));
+}
 
 // ../daemon/src/session-manager.ts
 import { randomUUID } from "node:crypto";
@@ -5749,7 +6003,7 @@ function summarizeConversation(path, workspace) {
   return {
     conversationId: basename(path, ".jsonl"),
     workspace,
-    firstPrompt: truncate4(firstPrompt || "(empty prompt)", 120),
+    firstPrompt: truncate5(firstPrompt || "(empty prompt)", 120),
     lastActiveMs: Math.floor(statSync(path).mtimeMs),
     messageCount
   };
@@ -5775,7 +6029,7 @@ function userMessageText(value) {
 function collapseText(text) {
   return text.replace(/\s+/g, " ").trim();
 }
-function truncate4(text, max) {
+function truncate5(text, max) {
   return text.length <= max ? text : `${text.slice(0, max - 1)}\u2026`;
 }
 function safeReadDir(path) {
@@ -6558,7 +6812,7 @@ function searchableText(msg) {
 }
 
 // ../daemon/src/local-server.ts
-import { createServer } from "node:http";
+import { createServer as createServer2 } from "node:http";
 
 // ../node_modules/.pnpm/ws@8.21.3/node_modules/ws/wrapper.mjs
 var import_stream = __toESM(require_stream(), 1);
@@ -11015,9 +11269,9 @@ if (typeof Module.getRandomValue === "undefined") {
     Module.getRandomValue = randomValuesStandard;
   } catch (e) {
     try {
-      crypto2 = null;
+      crypto = null;
       randomValueNodeJS = function() {
-        var buf = crypto2["randomBytes"](4);
+        var buf = crypto["randomBytes"](4);
         return (buf[0] << 24 | buf[1] << 16 | buf[2] << 8 | buf[3]) >>> 0;
       };
       randomValueNodeJS();
@@ -11030,7 +11284,7 @@ if (typeof Module.getRandomValue === "undefined") {
 var window_;
 var crypto_;
 var randomValuesStandard;
-var crypto2;
+var crypto;
 var randomValueNodeJS;
 var _Module = Module;
 Module.ready = new Promise(function(resolve6, reject) {
@@ -37924,7 +38178,7 @@ Module.ready = new Promise(function(resolve6, reject) {
           try {
             var window_ = "object" === typeof window ? window : self;
             var crypto_ = typeof window_.crypto !== "undefined" ? window_.crypto : window_.msCrypto;
-            crypto_ = crypto_ === void 0 ? crypto2 : crypto_;
+            crypto_ = crypto_ === void 0 ? crypto : crypto_;
             var randomValuesStandard = function() {
               var buf = new Uint32Array(1);
               crypto_.getRandomValues(buf);
@@ -37934,9 +38188,9 @@ Module.ready = new Promise(function(resolve6, reject) {
             Module3.getRandomValue = randomValuesStandard;
           } catch (e) {
             try {
-              var crypto2 = null;
+              var crypto = null;
               var randomValueNodeJS = function() {
-                var buf = crypto2["randomBytes"](4);
+                var buf = crypto["randomBytes"](4);
                 return (buf[0] << 24 | buf[1] << 16 | buf[2] << 8 | buf[3]) >>> 0;
               };
               randomValueNodeJS();
@@ -38582,7 +38836,7 @@ Module.ready = new Promise(function(resolve6, reject) {
       try {
         var window_ = "object" === typeof window ? window : self;
         var crypto_ = typeof window_.crypto !== "undefined" ? window_.crypto : window_.msCrypto;
-        crypto_ = crypto_ === void 0 ? crypto2 : crypto_;
+        crypto_ = crypto_ === void 0 ? crypto : crypto_;
         var randomValuesStandard = function() {
           var buf = new Uint32Array(1);
           crypto_.getRandomValues(buf);
@@ -38592,9 +38846,9 @@ Module.ready = new Promise(function(resolve6, reject) {
         Module2.getRandomValue = randomValuesStandard;
       } catch (e) {
         try {
-          var crypto2 = null;
+          var crypto = null;
           var randomValueNodeJS = function() {
-            var buf = crypto2["randomBytes"](4);
+            var buf = crypto["randomBytes"](4);
             return (buf[0] << 24 | buf[1] << 16 | buf[2] << 8 | buf[3]) >>> 0;
           };
           randomValueNodeJS();
@@ -41516,7 +41770,7 @@ var LocalSessionServer = class {
   constructor(manager2, port2, broker2) {
     this.manager = manager2;
     this.broker = broker2;
-    const http = createServer((req, res) => void this.onRequest(req, res));
+    const http = createServer2((req, res) => void this.onRequest(req, res));
     this.wss = new import_websocket_server.default({ server: http });
     this.wss.on("connection", (ws) => this.onConnection(ws));
     http.on("error", (err) => {
@@ -41865,7 +42119,7 @@ var ApprovalBroker = class {
 };
 function classifyRisk(toolName, input) {
   const i2 = input ?? {};
-  const text = [toolName, i2.command, i2.file_path, i2.path].filter((x2) => typeof x2 === "string").join(" ");
+  const text = [toolName, i2.command, i2.file_path, i2.path, i2.filepath].filter((x2) => typeof x2 === "string").join(" ");
   return /\b(rm|del|rmdir|rd|format|mkfs|shutdown|reboot|kill|drop\s+table|truncate|git\s+push\s+--force|--hard)\b/i.test(
     text
   ) ? "high" : "low";
@@ -41874,11 +42128,11 @@ function summariseInput(input) {
   if (typeof input !== "object" || input === null) return String(input ?? "");
   const i2 = input;
   const q2 = firstQuestion(i2);
-  if (q2) return truncate5(q2.text, 200);
-  for (const key of ["command", "file_path", "path", "url", "pattern", "description"]) {
-    if (typeof i2[key] === "string" && i2[key] !== "") return truncate5(`${key}: ${i2[key]}`, 200);
+  if (q2) return truncate6(q2.text, 200);
+  for (const key of ["command", "file_path", "filepath", "path", "url", "pattern", "description"]) {
+    if (typeof i2[key] === "string" && i2[key] !== "") return truncate6(`${key}: ${i2[key]}`, 200);
   }
-  return truncate5(JSON.stringify(input), 200);
+  return truncate6(JSON.stringify(input), 200);
 }
 function firstQuestion(i2) {
   if (!Array.isArray(i2.questions) || i2.questions.length === 0) return void 0;
@@ -41896,7 +42150,7 @@ function buildPreview(toolName, input) {
   const q2 = firstQuestion(i2);
   if (q2) {
     const lines = [q2.text, ...q2.options.map((o2, n2) => `${n2 + 1}. ${o2.label}${o2.description ? ` \u2014 ${o2.description}` : ""}`)];
-    return truncate5(lines.join("\n"), 600);
+    return truncate6(lines.join("\n"), 600);
   }
   if (/^(Edit|MultiEdit)/.test(toolName) && typeof i2.new_string === "string") {
     const oldS = typeof i2.old_string === "string" ? i2.old_string : "";
@@ -41904,15 +42158,24 @@ function buildPreview(toolName, input) {
       ...oldS.split("\n").map((l2) => `- ${l2}`),
       ...i2.new_string.split("\n").map((l2) => `+ ${l2}`)
     ];
-    return truncate5(lines.join("\n"), 600);
+    return truncate6(lines.join("\n"), 600);
   }
   if (/^Write/.test(toolName) && typeof i2.content === "string") {
-    return truncate5(i2.content.split("\n").map((l2) => `+ ${l2}`).join("\n"), 600);
+    return truncate6(i2.content.split("\n").map((l2) => `+ ${l2}`).join("\n"), 600);
+  }
+  if (typeof i2.diff === "string" && i2.diff.trim()) {
+    return truncate6(formatUnifiedDiff(i2.diff), 600);
   }
-  if (typeof i2.command === "string") return truncate5(`$ ${i2.command}`, 600);
+  if (typeof i2.url === "string") return truncate6(`\u2192 ${i2.url}`, 600);
+  if (typeof i2.command === "string") return truncate6(`$ ${i2.command}`, 600);
   return void 0;
 }
-function truncate5(s2, max) {
+function formatUnifiedDiff(diff) {
+  const lines = diff.split("\n");
+  const hunkStart = lines.findIndex((l2) => l2.startsWith("@@"));
+  return (hunkStart >= 0 ? lines.slice(hunkStart) : lines).join("\n").trimEnd();
+}
+function truncate6(s2, max) {
   return s2.length <= max ? s2 : s2.slice(0, max - 1) + "\u2026";
 }
 
@@ -42103,7 +42366,7 @@ var approvalUrl = `http://127.0.0.1:${port}/approval`;
 var runners = [
   new ClaudeCodeRunner(broker, approvalUrl),
   new CopilotCliRunner(),
-  new OpenCodeRunner(),
+  new OpenCodeRunner(broker),
   new CodexCliRunner(),
   new CursorAgentRunner(),
   new GeminiCliRunner()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "offhands",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Phone → coding-agent relay. Daemon runs on your laptop, PWA on your phone. E2E encrypted.",
   "license": "UNLICENSED",
   "type": "module",