opencode-api-security-testing 5.4.1 → 5.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-api-security-testing",
-  "version": "5.4.1",
+  "version": "5.4.2",
   "description": "API Security Testing Plugin for OpenCode - Automated vulnerability scanning and penetration testing",
   "type": "module",
   "main": "src/index.ts",

package/src/index.ts

@@ -334,6 +334,9 @@ const CYBER_SUPERVISOR = DEFAULT_CONFIG.cyber_supervisor;
 const modelFailureCounts = new Map<string, Map<string, number>>();
 const sessionFailures = new Map<string, number>();
 
+// 追踪已注入 agents prompt 的 session (只注入一次)
+const injectedSessions = new Set<string>();
+
 function getConfigPath(ctx: { directory: string }): string {
   return join(ctx.directory, SKILL_DIR, "assets", CONFIG_FILE);
 }
@@ -1266,20 +1269,12 @@ print(json.dumps(result, ensure_ascii=False))
     },
 
     // 赛博监工 Hook - chat.message
+    // 注意：已禁用自动注入 agents prompt，避免重复注入问题
+    // 如需使用 agents，请在需要时手动调用相关工具
     "chat.message": async (input, output) => {
       const sessionID = input.sessionID;
       
-      // 注入 agents prompt（首次）
-      const agentsPrompt = getInjectedAgentsPrompt();
-      if (agentsPrompt) {
-        const parts = output.parts as Array<{ type: string; text?: string }>;
-        const textPart = parts.find(p => p.type === "text");
-        if (textPart && textPart.text) {
-          textPart.text += agentsPrompt;
-        }
-      }
-      
-      // 赛博监工压力注入
+      // 赛博监工压力注入（仅在失败时）
       if (config.cyber_supervisor.enabled && config.cyber_supervisor.auto_trigger) {
         const failures = getFailureCount(sessionID);
         if (failures > 0 && failures <= config.cyber_supervisor.max_retries) {