opencode-branch-guard 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Hugo Batista
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,244 @@
+# opencode-branch-guard
+
+[![GitHub Tag](https://img.shields.io/github/v/tag/hugobatista/opencode-branch-guard?logo=github&label=latest)](https://go.hugobatista.com/gh/opencode-branch-guard/releases)
+[![Lint](https://img.shields.io/github/actions/workflow/status/hugobatista/opencode-branch-guard/lint.yml?label=Lint)](https://go.hugobatista.com/gh/opencode-branch-guard/actions/workflows/lint.yml)
+[![Test](https://img.shields.io/github/actions/workflow/status/hugobatista/opencode-branch-guard/test.yml?label=Test)](https://go.hugobatista.com/gh/opencode-branch-guard/actions/workflows/test.yml)
+[![npm](https://img.shields.io/npm/v/opencode-branch-guard.svg)](https://www.npmjs.com/package/opencode-branch-guard)
+
+OpenCode plugin. Blocks git mutations (`commit`, `push`, `merge`, `rebase`,
+`reset`, …) based on the current branch or repository, so protected branches stay
+clean. Deny a whole branch, allow a different policy per repository, and keep
+read-only commands untouched.
+
+> **Requires OpenCode V2.** OpenCode V2 changed the plugin API; V1 plugin
+> implementations do not run in V2. This plugin is built against
+> `@opencode/plugin` V2 only.
+
+## What it does
+
+- Intercepts the `shell` permission via `ctx.permission.hook("evaluate")` and
+  returns `effect: "deny"` when a git mutation violates the resolved policy.
+- Resolves the branch with `git -C <directory> branch --show-current`; the
+  directory comes from the session (`ctx.session.get().location.directory`), not
+  the plugin instance.
+- Resolves the policy hierarchically: `repos[<directory>]` overrides
+  `branches[<branch>]`, which overrides `default`.
+- Applies the same decision to every resource of a compound command, so
+  `cd /tmp && git commit` is caught.
+- Passes read-only commands (`status`, `log`, `diff`, `fetch`, …) and anything
+  that is not a known git mutation.
+- Fails closed: with no options, every git mutation is denied.
+
+## Requirements
+
+- **OpenCode V2.** The V2 release changed the plugin API; V1 plugin
+  implementations do not run in V2.
+- [Bun](https://bun.sh) to install dependencies (dev only).
+
+## Install
+
+```sh
+opencode plugin add opencode-branch-guard
+```
+
+Or add the package to `opencode.jsonc` (project or
+`~/.config/opencode/opencode.jsonc`):
+
+```jsonc
+{
+  "$schema": "https://opencode.ai/config.json",
+  "plugins": ["opencode-branch-guard"]
+}
+```
+
+With no options the plugin is **fail-closed**: it denies every git mutation.
+Pass [options](#configuration) to allow the operations you want.
+
+> This is a **server** plugin. Configure it in `opencode.json(c)`. The
+> `cli.json` file is for terminal (TUI) plugins only.
+
+### Install from source (local dev)
+
+1. Clone the repository and install dependencies:
+
+   ```sh
+   git clone https://github.com/hugobatista/opencode-branch-guard.git ~/code/projects/opencode-branch-guard
+   cd ~/code/projects/opencode-branch-guard
+   bun install
+   ```
+
+2. Register the plugin in your `opencode.jsonc` with an absolute path to the
+   `src` directory (a local plugin directory must contain `index.ts` at its
+   root):
+
+   ```jsonc
+   {
+     "$schema": "https://opencode.ai/config.json",
+     "plugins": ["/home/your-user/code/projects/opencode-branch-guard/src"]
+   }
+   ```
+
+3. Restart OpenCode.
+
+## Configuration
+
+Pass options with the object form:
+
+```jsonc
+{
+  "$schema": "https://opencode.ai/config.json",
+  "plugins": [
+    {
+      "package": "opencode-branch-guard",
+      "options": {
+        "default": {
+          "allow": ["add", "branch", "checkout", "commit", "push", "fetch", "merge", "pull", "rebase", "reset", "restore", "stash", "switch", "tag"],
+          "deny": []
+        },
+        "branches": {
+          "main": { "allow": [] },
+          "master": { "allow": [] }
+        }
+      }
+    }
+  ]
+}
+```
+
+### Options
+
+| Option | Default | Description |
+|---|---|---|
+| `default` | none (fail-closed) | Baseline policy applied when no more specific rule matches. `allow` lists the permitted git operations; `deny` lists blocked ones. With no `default.allow`, every mutation is blocked. |
+| `branches` | none | Policy keyed by exact branch name, resolved at command time from the VCS. A matching entry replaces the baseline `allow` and unions its `deny` with the baseline. |
+| `repos` | none | Policy keyed by absolute location directory. Takes precedence over `branches` and `default`. |
+
+A policy is `{ "allow": string[], "deny": string[] }`. Both fields are optional.
+
+Recognized git operations: `add`, `branch`, `checkout`, `cherry-pick`, `clean`,
+`commit`, `merge`, `mv`, `push`, `rebase`, `reset`, `restore`, `revert`, `rm`,
+`stash`, `switch`, `tag`.
+
+### Semantics
+
+- **Fail-closed.** No config, or an empty resolved `allow`, blocks every git
+  mutation.
+- **Hierarchical.** `default` is the baseline. A `branches.<name>` entry
+  overrides `allow` (replaces the baseline) and `deny` (unions with the
+  baseline). A `repos.<directory>` entry overrides both.
+- **`deny` wins.** An operation is allowed only if it is in the resolved `allow`
+  and not in the resolved `deny`.
+- **Exact branch match.** The branch is resolved at call time with
+  `git branch --show-current`. No globs.
+- **Read-only commands pass.** `status`, `log`, `diff`, `fetch` and anything not
+  in the mutation list are never blocked.
+
+The example above gives `main`/`master` an empty `allow` (no mutations), while
+every other branch inherits the permissive default.
+
+### Per-repository override
+
+Allow work in a single checkout even on a protected branch by keying it on the
+location directory:
+
+```jsonc
+{
+  "plugins": [
+    {
+      "package": "opencode-branch-guard",
+      "options": {
+        "default": { "allow": ["commit", "push"] },
+        "branches": { "main": { "allow": [] } },
+        "repos": {
+          "/home/you/code/projects/scratch": {
+            "allow": ["add", "commit", "push", "reset", "stash", "switch"]
+          }
+        }
+      }
+    }
+  ]
+}
+```
+
+### Blocklist instead of allowlist
+
+Use `deny` when you want a permissive baseline with a few hard blocks:
+
+```jsonc
+{
+  "default": { "allow": ["commit", "push", "add", "checkout", "merge"], "deny": ["push"] }
+}
+```
+
+`deny` wins over `allow`, so `push` is blocked even though it is listed.
+
+## Limitations
+
+The plugin inspects the shell command string, so it can be bypassed by:
+
+- Git hidden behind a wrapper the scanner does not unwrap (`sudo git commit`,
+  shell aliases, scripts that call git).
+- Git invoked through a tool other than the shell tool (for example a
+  subprocess started by a program the agent runs).
+- Compound commands the scanner cannot split.
+
+Also note that `branch` is treated as a mutation, so `git branch` and
+`git branch --show-current` are blocked on a protected branch. Use
+`git rev-parse --abbrev-ref HEAD` if you need a read-only branch check there.
+
+It is a guardrail against accidental mutations, not a security boundary.
+
+## Verify
+
+After configuring, restart OpenCode and try:
+
+1. On `main`: ask the agent to run `git commit` — the command is denied with
+   `Blocked: git commit is not allowed by config`.
+2. On a feature branch: the same command is allowed.
+3. `git status` and `git log` are always allowed.
+4. On a directory listed in `repos`, the repository policy applies.
+
+## Uninstall
+
+```sh
+opencode plugin remove opencode-branch-guard
+```
+
+Or remove the entry from `plugins` in your `opencode.jsonc` and restart
+OpenCode.
+
+## Development
+
+```sh
+bun install
+bun run typecheck   # tsc --noEmit, strict
+bun test            # unit (core logic) + functional (mocked plugin context)
+bun run build       # dist/index.js + dist/index.d.ts (npm entrypoint)
+```
+
+- `src/core.ts` — pure logic: git operation parsing and policy resolution. No
+  OpenCode imports. Fully unit-tested.
+- `src/index.ts` — the plugin (`id: "branch-guard"`), a
+  `Plugin.define({ id, setup })` from `@opencode/plugin`. It registers a
+  `ctx.permission.hook("evaluate")`, resolves the session directory, and reads
+  the branch with `git branch --show-current`.
+- `scripts/build.ts` — bundles `src/index.ts` to `dist/index.js` with
+  `@opencode/plugin` external, then emits declarations with `tsc`.
+
+## Pre-release checklist
+
+```sh
+bun install
+bun run typecheck
+bun test
+bun run build
+npm pack --dry-run
+```
+
+Inspect the pack list (`dist/`, `README.md`, `LICENSE` only). Scan for secrets
+before `npm publish`.
+
+## License
+
+MIT — see [LICENSE](./LICENSE). Author: Hugo Batista
+(<https://github.com/hugobatista>).

package/dist/core.d.ts

@@ -0,0 +1,23 @@
+export declare const OPS: readonly ["add", "branch", "checkout", "cherry-pick", "clean", "commit", "merge", "mv", "push", "rebase", "reset", "restore", "revert", "rm", "stash", "switch", "tag"];
+export type GitOp = (typeof OPS)[number];
+export type BranchPolicy = {
+    allow?: string[];
+    deny?: string[];
+};
+export type Config = {
+    default?: BranchPolicy;
+    branches?: Record<string, BranchPolicy>;
+    repos?: Record<string, BranchPolicy>;
+};
+export type ResolvedPolicy = {
+    allow: string[];
+    deny: string[];
+};
+export type Decision = {
+    allowed: boolean;
+    message?: string;
+};
+export declare function isGitOp(value: string): value is GitOp;
+export declare function gitOp(cmd: string): GitOp | null;
+export declare function resolvePolicy(config: Config, branch: string | undefined, directory: string | undefined): ResolvedPolicy;
+export declare function decide(op: string, policy: ResolvedPolicy): Decision;

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+import { Plugin } from "@opencode/plugin";
+declare const _default: Plugin.Plugin;
+export default _default;

package/dist/index.js

@@ -0,0 +1,137 @@
+// @bun
+// src/index.ts
+import { execFile } from "child_process";
+import { promisify } from "util";
+import { Plugin } from "@opencode/plugin";
+
+// src/core.ts
+var OPS = [
+  "add",
+  "branch",
+  "checkout",
+  "cherry-pick",
+  "clean",
+  "commit",
+  "merge",
+  "mv",
+  "push",
+  "rebase",
+  "reset",
+  "restore",
+  "revert",
+  "rm",
+  "stash",
+  "switch",
+  "tag"
+];
+var FLAG_WITH_VALUE = new Set([
+  "-C",
+  "-c",
+  "--git-dir",
+  "--work-tree",
+  "--exec-path",
+  "--namespace",
+  "--separate-git-dir",
+  "--config-env"
+]);
+function isGitOp(value) {
+  return OPS.includes(value);
+}
+function gitOp(cmd) {
+  const tokens = cmd.trim().split(/\s+/).filter(Boolean);
+  if (tokens[0] !== "git")
+    return null;
+  let i = 1;
+  while (i < tokens.length) {
+    const token = tokens[i];
+    if (token === undefined)
+      return null;
+    if (!token.startsWith("-")) {
+      return isGitOp(token) ? token : null;
+    }
+    if (token.startsWith("--") && token.includes("=")) {
+      i += 1;
+    } else if (FLAG_WITH_VALUE.has(token)) {
+      i += 2;
+    } else {
+      i += 1;
+    }
+  }
+  return null;
+}
+function resolvePolicy(config, branch, directory) {
+  const base = config.default ?? {};
+  const branchRule = branch !== undefined ? config.branches?.[branch] : undefined;
+  const repoRule = directory !== undefined ? config.repos?.[directory] : undefined;
+  const rule = repoRule ?? branchRule;
+  const allow = rule?.allow ?? base.allow ?? [];
+  const deny = [...base.deny ?? [], ...rule?.deny ?? []];
+  return { allow, deny };
+}
+function decide(op, policy) {
+  if (policy.deny.includes(op)) {
+    return { allowed: false, message: `Blocked: git ${op} is denied by config` };
+  }
+  if (!policy.allow.includes(op)) {
+    return { allowed: false, message: `Blocked: git ${op} is not allowed by config` };
+  }
+  return { allowed: true };
+}
+
+// src/index.ts
+var execFileAsync = promisify(execFile);
+async function currentBranch(directory) {
+  try {
+    const { stdout } = await execFileAsync("git", ["-C", directory, "branch", "--show-current"], { timeout: 3000, windowsHide: true });
+    const branch = stdout.trim();
+    return branch.length > 0 ? branch : undefined;
+  } catch {
+    return;
+  }
+}
+async function sessionDirectory(ctx, sessionID) {
+  try {
+    return (await ctx.session.get({ sessionID })).location.directory;
+  } catch {
+    return;
+  }
+}
+var src_default = Plugin.define({
+  id: "branch-guard",
+  async setup(ctx) {
+    const config = ctx.options ?? {};
+    const directories = new Map;
+    await ctx.permission.hook("evaluate", async (event) => {
+      if (event.action !== "shell")
+        return;
+      let directory;
+      if (config.branches || config.repos) {
+        const cached = directories.get(event.sessionID);
+        if (cached !== undefined) {
+          directory = cached ?? undefined;
+        } else {
+          directory = await sessionDirectory(ctx, event.sessionID);
+          directories.set(event.sessionID, directory ?? null);
+        }
+      }
+      const branch = config.branches ? await currentBranch(directory ?? ctx.location.directory) : undefined;
+      const policy = resolvePolicy(config, branch, directory);
+      for (const resource of event.resources) {
+        const op = gitOp(resource);
+        if (op === null)
+          continue;
+        const decision = decide(op, policy);
+        if (!decision.allowed) {
+          event.effect = "deny";
+          event.message = decision.message;
+          return;
+        }
+      }
+    });
+  }
+});
+export {
+  src_default as default
+};
+
+//# debugId=4EB1771F16AB9A6E64756E2164756E21

package/dist/index.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/index.ts", "../src/core.ts"],
+  "sourcesContent": [
+    "import { execFile } from \"node:child_process\"\nimport { promisify } from \"node:util\"\nimport { Plugin } from \"@opencode/plugin\"\nimport { decide, gitOp, resolvePolicy, type Config } from \"./core\"\n\nconst execFileAsync = promisify(execFile)\n\n// `ctx.vcs.get()` can return a stale or empty branch, so read it from git\n// directly. Returns undefined outside a repository.\nasync function currentBranch(directory: string): Promise<string | undefined> {\n  try {\n    const { stdout } = await execFileAsync(\n      \"git\",\n      [\"-C\", directory, \"branch\", \"--show-current\"],\n      { timeout: 3000, windowsHide: true },\n    )\n    const branch = stdout.trim()\n    return branch.length > 0 ? branch : undefined\n  } catch {\n    return undefined\n  }\n}\n\n// The plugin context's location is not necessarily the session's repository, and\n// the permission event does not carry a directory. Resolve it from the session.\nasync function sessionDirectory(ctx: Plugin.Context, sessionID: string): Promise<string | undefined> {\n  try {\n    return (await ctx.session.get({ sessionID })).location.directory\n  } catch {\n    return undefined\n  }\n}\n\nexport default Plugin.define({\n  id: \"branch-guard\",\n  async setup(ctx) {\n    const config = (ctx.options ?? {}) as Config\n    const directories = new Map<string, string | null>()\n\n    await ctx.permission.hook(\"evaluate\", async (event) => {\n      // V2 names the shell action \"shell\"; ignore every other action.\n      if (event.action !== \"shell\") return\n\n      let directory: string | undefined\n      if (config.branches || config.repos) {\n        const cached = directories.get(event.sessionID)\n        if (cached !== undefined) {\n          directory = cached ?? undefined\n        } else {\n          directory = await sessionDirectory(ctx, event.sessionID)\n          directories.set(event.sessionID, directory ?? null)\n        }\n      }\n\n      const branch = config.branches\n        ? await currentBranch(directory ?? ctx.location.directory)\n        : undefined\n      const policy = resolvePolicy(config, branch, directory)\n\n      for (const resource of event.resources) {\n        const op = gitOp(resource)\n        if (op === null) continue\n        const decision = decide(op, policy)\n        if (!decision.allowed) {\n          event.effect = \"deny\"\n          event.message = decision.message\n          return\n        }\n      }\n    })\n  },\n})\n",
+    "// Pure branch-guard logic. No OpenCode imports, so it is fully unit-testable.\n\nexport const OPS = [\n  \"add\",\n  \"branch\",\n  \"checkout\",\n  \"cherry-pick\",\n  \"clean\",\n  \"commit\",\n  \"merge\",\n  \"mv\",\n  \"push\",\n  \"rebase\",\n  \"reset\",\n  \"restore\",\n  \"revert\",\n  \"rm\",\n  \"stash\",\n  \"switch\",\n  \"tag\",\n] as const\n\nexport type GitOp = (typeof OPS)[number]\n\n// Git global flags that consume the following token as their value.\nconst FLAG_WITH_VALUE = new Set([\n  \"-C\",\n  \"-c\",\n  \"--git-dir\",\n  \"--work-tree\",\n  \"--exec-path\",\n  \"--namespace\",\n  \"--separate-git-dir\",\n  \"--config-env\",\n])\n\nexport type BranchPolicy = {\n  allow?: string[]\n  deny?: string[]\n}\n\nexport type Config = {\n  default?: BranchPolicy\n  branches?: Record<string, BranchPolicy>\n  repos?: Record<string, BranchPolicy>\n}\n\nexport type ResolvedPolicy = {\n  allow: string[]\n  deny: string[]\n}\n\nexport type Decision = {\n  allowed: boolean\n  message?: string\n}\n\nexport function isGitOp(value: string): value is GitOp {\n  return (OPS as readonly string[]).includes(value)\n}\n\n// Extract the git mutation from a shell command string. Returns null for\n// non-git commands, git invocations without a known mutation, and read-only\n// commands (`status`, `log`, `diff`, ...).\nexport function gitOp(cmd: string): GitOp | null {\n  const tokens = cmd.trim().split(/\\s+/).filter(Boolean)\n  if (tokens[0] !== \"git\") return null\n\n  let i = 1\n  while (i < tokens.length) {\n    const token = tokens[i]\n    if (token === undefined) return null\n    if (!token.startsWith(\"-\")) {\n      return isGitOp(token) ? token : null\n    }\n    if (token.startsWith(\"--\") && token.includes(\"=\")) {\n      i += 1\n    } else if (FLAG_WITH_VALUE.has(token)) {\n      i += 2\n    } else {\n      i += 1\n    }\n  }\n  return null\n}\n\n// Resolve the effective policy for a command. `repos[directory]` overrides\n// `branches[branch]`, which overrides `default`. A rule's `allow` replaces the\n// baseline; its `deny` unions with the baseline. No resolved `allow` means no\n// mutation is permitted (fail-closed).\nexport function resolvePolicy(\n  config: Config,\n  branch: string | undefined,\n  directory: string | undefined,\n): ResolvedPolicy {\n  const base = config.default ?? {}\n  const branchRule = branch !== undefined ? config.branches?.[branch] : undefined\n  const repoRule = directory !== undefined ? config.repos?.[directory] : undefined\n  const rule = repoRule ?? branchRule\n  const allow = rule?.allow ?? base.allow ?? []\n  const deny = [...(base.deny ?? []), ...(rule?.deny ?? [])]\n  return { allow, deny }\n}\n\nexport function decide(op: string, policy: ResolvedPolicy): Decision {\n  if (policy.deny.includes(op)) {\n    return { allowed: false, message: `Blocked: git ${op} is denied by config` }\n  }\n  if (!policy.allow.includes(op)) {\n    return { allowed: false, message: `Blocked: git ${op} is not allowed by config` }\n  }\n  return { allowed: true }\n}\n"
+  ],
+  "mappings": ";;AAAA;AACA;AACA;;;ACAO,IAAM,MAAM;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,kBAAkB,IAAI,IAAI;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAuBM,SAAS,OAAO,CAAC,OAA+B;AAAA,EACrD,OAAQ,IAA0B,SAAS,KAAK;AAAA;AAM3C,SAAS,KAAK,CAAC,KAA2B;AAAA,EAC/C,MAAM,SAAS,IAAI,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO;AAAA,EACrD,IAAI,OAAO,OAAO;AAAA,IAAO,OAAO;AAAA,EAEhC,IAAI,IAAI;AAAA,EACR,OAAO,IAAI,OAAO,QAAQ;AAAA,IACxB,MAAM,QAAQ,OAAO;AAAA,IACrB,IAAI,UAAU;AAAA,MAAW,OAAO;AAAA,IAChC,IAAI,CAAC,MAAM,WAAW,GAAG,GAAG;AAAA,MAC1B,OAAO,QAAQ,KAAK,IAAI,QAAQ;AAAA,IAClC;AAAA,IACA,IAAI,MAAM,WAAW,IAAI,KAAK,MAAM,SAAS,GAAG,GAAG;AAAA,MACjD,KAAK;AAAA,IACP,EAAO,SAAI,gBAAgB,IAAI,KAAK,GAAG;AAAA,MACrC,KAAK;AAAA,IACP,EAAO;AAAA,MACL,KAAK;AAAA;AAAA,EAET;AAAA,EACA,OAAO;AAAA;AAOF,SAAS,aAAa,CAC3B,QACA,QACA,WACgB;AAAA,EAChB,MAAM,OAAO,OAAO,WAAW,CAAC;AAAA,EAChC,MAAM,aAAa,WAAW,YAAY,OAAO,WAAW,UAAU;AAAA,EACtE,MAAM,WAAW,cAAc,YAAY,OAAO,QAAQ,aAAa;AAAA,EACvE,MAAM,OAAO,YAAY;AAAA,EACzB,MAAM,QAAQ,MAAM,SAAS,KAAK,SAAS,CAAC;AAAA,EAC5C,MAAM,OAAO,CAAC,GAAI,KAAK,QAAQ,CAAC,GAAI,GAAI,MAAM,QAAQ,CAAC,CAAE;AAAA,EACzD,OAAO,EAAE,OAAO,KAAK;AAAA;AAGhB,SAAS,MAAM,CAAC,IAAY,QAAkC;AAAA,EACnE,IAAI,OAAO,KAAK,SAAS,EAAE,GAAG;AAAA,IAC5B,OAAO,EAAE,SAAS,OAAO,SAAS,gBAAgB,yBAAyB;AAAA,EAC7E;AAAA,EACA,IAAI,CAAC,OAAO,MAAM,SAAS,EAAE,GAAG;AAAA,IAC9B,OAAO,EAAE,SAAS,OAAO,SAAS,gBAAgB,8BAA8B;AAAA,EAClF;AAAA,EACA,OAAO,EAAE,SAAS,KAAK;AAAA;;;AD1GzB,IAAM,gBAAgB,UAAU,QAAQ;AAIxC,eAAe,aAAa,CAAC,WAAgD;AAAA,EAC3E,IAAI;AAAA,IACF,QAAQ,WAAW,MAAM,cACvB,OACA,CAAC,MAAM,WAAW,UAAU,gBAAgB,GAC5C,EAAE,SAAS,MAAM,aAAa,KAAK,CACrC;AAAA,IACA,MAAM,SAAS,OAAO,KAAK;AAAA,IAC3B,OAAO,OAAO,SAAS,IAAI,SAAS;AAAA,IACpC,MAAM;AAAA,IACN;AAAA;AAAA;AAMJ,eAAe,gBAAgB,CAAC,KAAqB,WAAgD;AAAA,EACnG,IAAI;AAAA,IACF,QAAQ,MAAM,IAAI,QAAQ,IAAI,EAAE,UAAU,CAAC,GAAG,SAAS;AAAA,IACvD,MAAM;AAAA,IACN;AAAA;AAAA;AAIJ,IAAe,qBAAO,OAAO;AAAA,EAC3B,IAAI;AAAA,OACE,MAAK,CAAC,KAAK;AAAA,IACf,MAAM,SAAU,IAAI,WAAW,CAAC;AAAA,IAChC,MAAM,cAAc,IAAI;AAAA,IAExB,MAAM,IAAI,WAAW,KAAK,YAAY,OAAO,UAAU;AAAA,MAErD,IAAI,MAAM,WAAW;AAAA,QAAS;AAAA,MAE9B,IAAI;AAAA,MACJ,IAAI,OAAO,YAAY,OAAO,OAAO;AAAA,QACnC,MAAM,SAAS,YAAY,IAAI,MAAM,SAAS;AAAA,QAC9C,IAAI,WAAW,WAAW;AAAA,UACxB,YAAY,UAAU;AAAA,QACxB,EAAO;AAAA,UACL,YAAY,MAAM,iBAAiB,KAAK,MAAM,SAAS;AAAA,UACvD,YAAY,IAAI,MAAM,WAAW,aAAa,IAAI;AAAA;AAAA,MAEtD;AAAA,MAEA,MAAM,SAAS,OAAO,WAClB,MAAM,cAAc,aAAa,IAAI,SAAS,SAAS,IACvD;AAAA,MACJ,MAAM,SAAS,cAAc,QAAQ,QAAQ,SAAS;AAAA,MAEtD,WAAW,YAAY,MAAM,WAAW;AAAA,QACtC,MAAM,KAAK,MAAM,QAAQ;AAAA,QACzB,IAAI,OAAO;AAAA,UAAM;AAAA,QACjB,MAAM,WAAW,OAAO,IAAI,MAAM;AAAA,QAClC,IAAI,CAAC,SAAS,SAAS;AAAA,UACrB,MAAM,SAAS;AAAA,UACf,MAAM,UAAU,SAAS;AAAA,UACzB;AAAA,QACF;AAAA,MACF;AAAA,KACD;AAAA;AAEL,CAAC;",
+  "debugId": "4EB1771F16AB9A6E64756E2164756E21",
+  "names": []
+}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "opencode-branch-guard",
+  "version": "0.1.0",
+  "description": "OpenCode plugin: blocks git mutations (commit, push, merge, rebase, ...) based on the current branch or repository, so protected branches stay clean.",
+  "type": "module",
+  "license": "MIT",
+  "author": {
+    "name": "Hugo Batista",
+    "url": "https://github.com/hugobatista"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/hugobatista/opencode-branch-guard.git"
+  },
+  "homepage": "https://github.com/hugobatista/opencode-branch-guard#readme",
+  "bugs": {
+    "url": "https://github.com/hugobatista/opencode-branch-guard/issues"
+  },
+  "keywords": [
+    "opencode",
+    "opencode-plugin",
+    "git",
+    "branch",
+    "guard",
+    "permissions"
+  ],
+  "engines": {
+    "opencode": ">=2.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "test": "bun test",
+    "typecheck": "tsc --noEmit",
+    "build": "bun run scripts/build.ts",
+    "prepublishOnly": "bun run typecheck && bun test && bun run build"
+  },
+  "peerDependencies": {
+    "@opencode/plugin": ">=2.0.10"
+  },
+  "devDependencies": {
+    "@opencode/plugin": "2.0.10",
+    "@types/bun": "^1.4.1",
+    "@types/node": "^24.0.0",
+    "typescript": "^5.8.0"
+  }
+}