opencode-agent-skill 13.0.0-beta.0 → 13.0.0-beta.1

package/CHANGELOG.md

@@ -12,6 +12,17 @@ The project follows Semantic Versioning.
 - Fixed OpenCode V2 local router loading on clean global configs by removing the unnecessary bare `@opencode/plugin` runtime import; `ues-router` now exports the plain `{ id, setup }` definition accepted by the V2 loader.
 - Prevented OpenCode V2 UES router subprocesses (`where`, `ocskill`, Node shim execution and Git probes) from flashing transient CMD windows on Windows by routing them through a hidden-window spawn wrapper.
 
+## [13.0.0-beta.1] - 2026-09-23
+
+### Fixed
+- Hardened V2 prompt aliases for ChatGPT-style pasted prompts: BOM/zero-width prefixes and whole-prompt markdown fences are normalized before alias detection.
+- Bounded the text sent to `ocskill task-policy` so very large pasted prompts no longer risk Windows command-line length failures; the full user prompt still goes to the model while only a bounded head/tail classification view goes through the CLI.
+- Routed skill classification from the actual user request instead of the expanded command template, reducing template-induced over-routing on long prompts.
+- Kept installer result shape stable with `promptAliases: []` on foreign-state refusal.
+
+### Regression coverage
+- Added fenced-paste, BOM, 70k-character policy-input and oversized multiline `/ues-run` regression tests.
+
 ## [13.0.0-beta.0] - 2026-09-22
 
 ### Added

package/README.md

@@ -1,7 +1,7 @@
 # OpenCode Universal Engineering System (UES)
 
-> **V13 beta: 13.0.0-beta.0** — parallel weak-model runtime với same-model worker pool, event-driven DAG, transactional worktree integration và hardened CLI/Windows runtime.
-> **Stable latest vẫn là V11: 11.0.0.** V13 được đóng gói dưới prerelease `13.0.0-beta.0`; npm prerelease dùng dist-tag `next`, còn `latest` tiếp tục giữ V11 cho đến khi V13 được promote stable.
+> **V13 beta: 13.0.0-beta.1** — parallel weak-model runtime với same-model worker pool, event-driven DAG, transactional worktree integration và hardened CLI/Windows runtime.
+> **Stable latest vẫn là V11: 11.0.0.** V13 được đóng gói dưới prerelease `13.0.0-beta.1`; npm prerelease dùng dist-tag `next`, còn `latest` tiếp tục giữ V11 cho đến khi V13 được promote stable.
 
 [![npm version](https://img.shields.io/npm/v/opencode-agent-skill.svg)](https://www.npmjs.com/package/opencode-agent-skill)
 [![license](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
@@ -49,9 +49,9 @@ Parallel resume không còn yêu cầu root phải sạch tuyệt đối. Nếu
 
 > **Compatibility:** V13 CLI/durable-state/verification hardening vẫn dùng được trên OpenCode 1.x. Native `ues.dispatch_task` / `ues.dispatch_parallel` cần router plugin và fresh-session APIs của OpenCode V2; nếu capability không đủ, runtime fail closed thay vì giả vờ chạy song song.
 
-### V13 beta validation hiện tại
+### V13 beta validation baseline
 
-Bản đóng gói hiện tại đã được kiểm tra local trên Windows 10 với OpenCode V2.0.15:
+Baseline beta.0 đã được kiểm tra local trên Windows 10 với OpenCode V2.0.15; beta.1 phải chạy lại full gate trước khi publish:
 
 - `npm run evals:v13`: **36/36 PASS**;
 - `npm test`: **298 tests**, **296 pass**, **0 fail**, **2 platform-specific skip**;
@@ -819,7 +819,7 @@ npm install -g opencode-agent-skill
 Phiên bản hiện tại:
 
 ```text
-13.0.0-beta.0
+13.0.0-beta.1
 ```
 
 V13 beta dùng npm dist-tag `next`; `latest` tiếp tục trỏ tới V11 stable cho đến khi các release gate V13 hoàn tất.
@@ -835,7 +835,7 @@ npm pack
 Trước khi publish, kiểm tra version chưa tồn tại trên registry:
 
 ```cmd
-npm view opencode-agent-skill@13.0.0-beta.0 version --registry=https://registry.npmjs.org/
+npm view opencode-agent-skill@13.0.0-beta.1 version --registry=https://registry.npmjs.org/
 ```
 
 Nếu version chưa tồn tại, prerelease được publish với dist-tag `next`.

package/docs/NPM-PUBLISH.md

@@ -27,7 +27,7 @@ Use:
 
 ```cmd
 npm pack
-npm install -g .\opencode-agent-skill-13.0.0-beta.0.tgz --allow-scripts=opencode-agent-skill
+npm install -g .\opencode-agent-skill-13.0.0-beta.1.tgz --allow-scripts=opencode-agent-skill
 ocskill install
 ocskill status
 ocskill doctor
@@ -42,7 +42,7 @@ For routine development, the automated `smoke:pack` test uses an isolated npm pr
 Before publishing, verify the exact prerelease version is not already present:
 
 ```cmd
-npm view opencode-agent-skill@13.0.0-beta.0 version --registry=https://registry.npmjs.org/
+npm view opencode-agent-skill@13.0.0-beta.1 version --registry=https://registry.npmjs.org/
 ```
 
 If it is not present, a manual prerelease publish uses `next`, not `latest`:
@@ -58,7 +58,7 @@ After publication verify:
 
 ```cmd
 npm view opencode-agent-skill versions --json
-npm view opencode-agent-skill@13.0.0-beta.0 version
+npm view opencode-agent-skill@13.0.0-beta.1 version
 npm dist-tag ls opencode-agent-skill
 ```
 
@@ -66,7 +66,7 @@ For V13 beta the expected dist-tags are:
 
 ```text
 latest: 11.0.0
-next: 13.0.0-beta.0
+next: 13.0.0-beta.1
 ```
 
 Do not move `latest` to V13 until the prerelease is intentionally promoted stable.
@@ -85,7 +85,7 @@ Workflow: publish.yml
 
 Then the GitHub-hosted workflow can authenticate through OIDC instead of a long-lived npm publish token. npm Trusted Publishing requires the corresponding publisher relationship to be configured on npm; repository code alone cannot create that account-side trust relationship.
 
-The current `publish.yml` is tag-only. A matching prerelease tag such as `v13.0.0-beta.0` runs the full package gate and publishes with npm dist-tag `next`; a stable version publishes to `latest`. The workflow first checks whether that exact version already exists and skips duplicate publication.
+The current `publish.yml` is tag-only. A matching prerelease tag such as `v13.0.0-beta.1` runs the full package gate and publishes with npm dist-tag `next`; a stable version publishes to `latest`. The workflow first checks whether that exact version already exists and skips duplicate publication.
 
 ## Release checklist
 

package/docs/V13-PARALLEL-WEAK-MODEL-RUNTIME.md

@@ -1,6 +1,6 @@
 # V13 Parallel Weak-Model Runtime
 
-Status: beta prerelease (`13.0.0-beta.0`).
+Status: beta prerelease (`13.0.0-beta.1`).
 
 ## Goal
 

package/global-config/plugins/ues-router/command-runtime.js

@@ -17,6 +17,38 @@ export const UES_PROMPT_ALIASES = Object.freeze([
 
 const ALIAS_SET = new Set(UES_PROMPT_ALIASES)
 
+export function normalizeUesPromptPaste(text) {
+  let value = String(text || "")
+    .replace(/^\uFEFF/, "")
+    .replace(/^[\u200B-\u200D]+/, "")
+
+  const trimmed = value.trim()
+  const fenced = trimmed.match(/^\`\`\`(?:text|txt|md|markdown|prompt|plaintext)?[ \t]*\r?\n([\s\S]*?)\r?\n\`\`\`\s*$/i)
+  if (fenced) value = fenced[1]
+
+  return value
+}
+
+export function policyPromptForCli(text, maxChars = 12_000) {
+  const raw = normalizeUesPromptPaste(text).trim()
+  const limit = Math.max(2_000, Number(maxChars) || 12_000)
+  if (raw.length <= limit) {
+    return { text: raw, truncated: false, originalChars: raw.length, cliChars: raw.length }
+  }
+
+  const marker = "\n\n[UES_POLICY_INPUT_TRUNCATED_FOR_CLI]\n\n"
+  const usable = Math.max(1, limit - marker.length)
+  const headChars = Math.floor(usable * 0.72)
+  const tailChars = usable - headChars
+  const bounded = raw.slice(0, headChars) + marker + raw.slice(-tailChars)
+  return {
+    text: bounded,
+    truncated: true,
+    originalChars: raw.length,
+    cliChars: bounded.length,
+  }
+}
+
 function parseFrontmatter(source) {
   const text = String(source || "")
   if (!text.startsWith("---")) return { metadata: {}, body: text }
@@ -44,7 +76,7 @@ function splitArgs(input) {
 }
 
 export function expandUesPromptAlias(text, templateDir) {
-  const raw = String(text || "")
+  const raw = normalizeUesPromptPaste(text)
   const match = raw.match(/^\s*\/(ues-[a-z0-9]+(?:-[a-z0-9]+)*)(?:\s+([\s\S]*?))?\s*$/i)
   if (!match) return null
 

package/global-config/plugins/ues-router/index.js

@@ -8,7 +8,7 @@ import { runtimeCapabilities } from "./capabilities.js"
 import { parallelRootBaseline, runEventDrivenDAG } from "./parallel-runtime.js"
 import { readProjectJson, readProjectText } from "./text-runtime.js"
 import { extractVerifierVerdict } from "./verifier-runtime.js"
-import { expandUesPromptAlias } from "./command-runtime.js"
+import { expandUesPromptAlias, policyPromptForCli } from "./command-runtime.js"
 import {
   budgetToolResult,
   classifyProviderFailure,
@@ -1553,17 +1553,29 @@ export default {
       }
 
       const promptText = String(event.prompt?.text || "")
+      const routingText = promptAlias
+        ? (promptAlias.arguments || `/${promptAlias.alias}`)
+        : promptText
+      const policySource = promptAlias
+        ? [
+            ["ues-run", "ues-resume"].includes(promptAlias.alias)
+              ? "Explicit long-horizon engineering request."
+              : `UES command /${promptAlias.alias}.`,
+            promptAlias.arguments,
+          ].filter(Boolean).join("\n")
+        : routingText
+      const policyInput = policyPromptForCli(policySource)
       let policy = null
       try {
-        policy = runOcskillJSON(["task-policy", promptText], projectRoot)
+        policy = runOcskillJSON(["task-policy", policyInput.text], projectRoot)
       } catch {}
-      const intent = classifyIntent(promptText, routingFacts)
+      const intent = classifyIntent(routingText, routingFacts)
       const effectiveMaxSkills = Math.max(
         1,
         Math.min(config.maxSkills, Number(policy?.maxSkills || config.maxSkills)),
       )
       const selected = []
-      for (const id of [...routeSkillsForPolicy(promptText, policy, effectiveMaxSkills, routingFacts), ...policySkills(policy)]) {
+      for (const id of [...routeSkillsForPolicy(routingText, policy, effectiveMaxSkills, routingFacts), ...policySkills(policy)]) {
         if (!selected.includes(id)) selected.push(id)
         if (selected.length >= effectiveMaxSkills) break
       }
@@ -1587,6 +1599,11 @@ export default {
             feedbackDomains: routingFacts.feedbackDomains,
             acceptedLearningCount: routingFacts.acceptedLearningCount,
           },
+          policyInput: {
+            originalChars: policyInput.originalChars,
+            cliChars: policyInput.cliChars,
+            truncated: policyInput.truncated,
+          },
           version: 13,
           effectiveMaxSkills,
         },

package/lib/installer.mjs

@@ -340,6 +340,7 @@ export async function installResources(options = {}) {
         stateError: `State belongs to another package: ${previous.package}`,
         skills: [],
         commands: [],
+        promptAliases: [],
         agents: [],
         plugins: [],
         warnings,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-agent-skill",
-  "version": "13.0.0-beta.0",
+  "version": "13.0.0-beta.1",
   "description": "Parallel weak-model engineering runtime with isolated same-model workers, event-driven DAG execution, transactional integration, adaptive context and evidence-gated verification for OpenCode",
   "type": "module",
   "bin": {