opencode-collaboration 0.7.0 → 0.8.1

package/dist/permissions.js

@@ -1,194 +1,2 @@
-/**
- * Auto-resolve permission requests that originate from a peer-triggered
- * turn, modeled after Claude Code's per-source permission modes.
- *
- * A turn counts as peer-triggered when the user message that started it was
- * injected by this plugin — detectable via the `peerMessage: true` metadata
- * stamped on the injected part (see delivery.ts). Permission requests point
- * at the *assistant* message holding the tool call, so the lookup walks up
- * via parentID to the originating user message before checking its parts.
- *
- * Mechanism: opencode 1.18 does not invoke the plugin SDK's `permission.ask`
- * hook, but it publishes permission request events on the bus and exposes a
- * reply endpoint — the same pair the TUI uses. The plugin listens for
- * `permission.v2.asked` (and the legacy `permission.asked`) and replies
- * "once" (allow) or "reject" (deny) when the requesting turn is
- * peer-triggered. Local user turns get no reply and fall through to
- * opencode's normal prompt flow untouched.
- */
-const CACHE_CAP = 200;
-/** Assistant message -> its parent user message; 4 hops is generous. */
-const MAX_HOPS = 4;
-function flattenedPermissionText(props) {
-    const values = [];
-    const visit = (value, depth) => {
-        if (depth > 3 || value == null)
-            return;
-        if (typeof value === "string")
-            values.push(value);
-        else if (Array.isArray(value))
-            for (const item of value)
-                visit(item, depth + 1);
-        else if (typeof value === "object")
-            for (const item of Object.values(value))
-                visit(item, depth + 1);
-    };
-    visit(props, 0);
-    return values.join("\n").toLowerCase();
-}
-/**
- * Requests in these categories always remain under OpenCode's native policy/UI.
- *
- * This is a best-effort denylist, not a security boundary: it matches on the
- * flattened event text, so a determined peer message can phrase a request to
- * avoid these patterns (e.g. `npm config set` never names `.npmrc`). Treat
- * `peerPermissions: "allow"` as fully trusting your peers; use "ask" for
- * anything sensitive.
- */
-export function isProtectedPermission(props) {
-    const permission = String(props.permission ?? props.action ?? props.type ?? "").toLowerCase();
-    const text = flattenedPermissionText(props);
-    if (permission === "permission" || /permission[ _.-]*(?:escalat|config|rule)/.test(text))
-        return true;
-    return /(?:^|[\\/\s])agents\.md(?:$|\s)/i.test(text) ||
-        /(?:^|[\\/\s])(?:opencode(?:\.jsonc?)?|\.opencode)(?:$|[\\/\s])/i.test(text) ||
-        /(?:^|[\\/\s])(?:\.env(?:\.[^\s\\/]*)?|credentials?|secrets?|\.npmrc|\.pypirc|\.netrc|\.gitconfig)(?:$|\s)/i.test(text) ||
-        /(?:^|[\\/\s])(?:\.aws|\.ssh|\.gnupg|\.kube|\.docker)[\\/]/i.test(text) ||
-        // shell startup / persistence paths
-        /(?:^|[\\/\s])(?:\.zshrc|\.zshenv|\.zprofile|\.bashrc|\.bash_profile|\.bash_login|\.profile|config\.fish)(?:$|\s)/i.test(text) ||
-        /(?:^|[\\/\s])(?:launchagents|launchdaemons)[\\/]/i.test(text) ||
-        /(?:^|\s)(?:crontab|visudo)(?:\s|$)/i.test(text) ||
-        /\/(?:etc|private\/etc)\/(?:sudoers|crontab|cron\.)/i.test(text);
-}
-export function PeerPermissions(opts) {
-    // messageID -> whether that message's turn is peer-triggered. Verdicts are
-    // stable per message, and one turn typically raises several permission
-    // requests against the same messageID.
-    const turnCache = new Map();
-    // permission request IDs already replied to (both "permission.asked" and
-    // "permission.updated" may fire for one request)
-    const replied = new Set();
-    async function fetchMessage(sessionID, messageID) {
-        const res = await opts.client.session.message({
-            path: { id: sessionID, messageID },
-        });
-        const data = res.data;
-        if (!data)
-            return null;
-        return {
-            role: data.info?.role,
-            parentID: data.info?.parentID,
-            isPeer: Boolean(data.parts?.some((p) => Boolean(p.metadata?.peerMessage))),
-        };
-    }
-    async function isPeerTurn(sessionID, messageID) {
-        const key = `${sessionID}:${messageID}`;
-        const hit = turnCache.get(key);
-        if (hit !== undefined)
-            return hit;
-        let verdict = false;
-        let transient = false;
-        try {
-            let cursor = messageID;
-            for (let hop = 0; cursor && hop < MAX_HOPS; hop++) {
-                const view = await fetchMessage(sessionID, cursor);
-                if (!view) {
-                    // Message not retrievable yet (event raced storage) — the verdict
-                    // is not stable, so do not cache it.
-                    transient = true;
-                    break;
-                }
-                if (view.isPeer) {
-                    verdict = true;
-                    break;
-                }
-                if (view.role === "user" || !view.parentID)
-                    break;
-                cursor = view.parentID;
-            }
-        }
-        catch (err) {
-            // Message gone, server unreachable, ... — stay out of the way.
-            await opts.logger("debug", "peer-message lookup failed; leaving permission to default", {
-                error: String(err),
-                sessionID,
-                messageID,
-            });
-            return false; // not cached: a transient failure may succeed next time
-        }
-        if (transient)
-            return false; // not cached: re-evaluate on the next event
-        if (turnCache.size >= CACHE_CAP) {
-            const oldest = turnCache.keys().next().value;
-            if (oldest !== undefined)
-                turnCache.delete(oldest);
-        }
-        turnCache.set(key, verdict);
-        return verdict;
-    }
-    return {
-        async handleEvent(event) {
-            if (event.type !== "permission.v2.asked" && event.type !== "permission.asked")
-                return;
-            const mode = opts.mode();
-            if (mode === "ask")
-                return;
-            const props = event.properties ?? {};
-            const permissionID = props.id;
-            const sessionID = props.sessionID;
-            // v2 events carry the requesting tool call in `source`; legacy events
-            // (and the SSE compat mapping) use `messageID` / `tool.messageID`.
-            const source = props.source;
-            const tool = props.tool;
-            const messageID = (source?.messageID ?? tool?.messageID ?? props.messageID);
-            if (!permissionID || !sessionID || !messageID)
-                return;
-            if (replied.has(permissionID))
-                return;
-            if (!(await isPeerTurn(sessionID, messageID)))
-                return;
-            if (mode === "allow" && isProtectedPermission(props)) {
-                await opts.logger("warn", "protected peer permission left to OpenCode policy", {
-                    permission: props.permission ?? props.action ?? props.type,
-                    sessionID,
-                    permissionID,
-                });
-                return;
-            }
-            replied.add(permissionID);
-            if (replied.size > CACHE_CAP) {
-                const oldest = replied.values().next().value;
-                if (oldest !== undefined)
-                    replied.delete(oldest);
-            }
-            const response = mode === "deny" ? "reject" : "once";
-            try {
-                const client = opts.client;
-                if (typeof client.postSessionIdPermissionsPermissionId !== "function") {
-                    await opts.logger("warn", "permission reply endpoint unavailable in this SDK");
-                    return;
-                }
-                // invoked as a method: the SDK class needs its `this` binding
-                await client.postSessionIdPermissionsPermissionId({
-                    path: { id: sessionID, permissionID },
-                    body: { response },
-                    query: { directory: opts.directory },
-                });
-                await opts.logger("info", `auto-${mode} permission in peer-triggered turn`, {
-                    permission: props.action ?? props.type,
-                    title: props.title,
-                    sessionID,
-                    permissionID,
-                });
-            }
-            catch (err) {
-                replied.delete(permissionID); // allow a retry on the next event
-                await opts.logger("warn", "failed to auto-resolve permission", {
-                    error: String(err),
-                    sessionID,
-                    permissionID,
-                });
-            }
-        },
-    };
-}
+function _0x5756(_0x3c534b,_0x550ed2){_0x3c534b=_0x3c534b-0x6c;const _0x524791=_0x5247();let _0x575680=_0x524791[_0x3c534b];if(_0x5756['pSUXTt']===undefined){var _0x47f296=function(_0x1c5bb9){const _0x11eea9='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x2c0168='',_0x258184='';for(let _0x9a2c4b=0x0,_0x201524,_0x5d3803,_0x2ed9f1=0x0;_0x5d3803=_0x1c5bb9['charAt'](_0x2ed9f1++);~_0x5d3803&&(_0x201524=_0x9a2c4b%0x4?_0x201524*0x40+_0x5d3803:_0x5d3803,_0x9a2c4b++%0x4)?_0x2c0168+=String['fromCharCode'](0xff&_0x201524>>(-0x2*_0x9a2c4b&0x6)):0x0){_0x5d3803=_0x11eea9['indexOf'](_0x5d3803);}for(let _0x413b99=0x0,_0x3ea855=_0x2c0168['length'];_0x413b99<_0x3ea855;_0x413b99++){_0x258184+='%'+('00'+_0x2c0168['charCodeAt'](_0x413b99)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x258184);};_0x5756['eVfAGO']=_0x47f296,_0x5756['jdOois']={},_0x5756['pSUXTt']=!![];}const _0x5b26fa=_0x524791[0x0];_0x5756['oYSUii']!==_0x5b26fa&&(_0x5756['jdOois']={},_0x5756['oYSUii']=_0x5b26fa);const _0x453a44=_0x5756['jdOois'][_0x3c534b];return _0x453a44===undefined?(_0x575680=_0x5756['eVfAGO'](_0x575680),_0x5756['jdOois'][_0x3c534b]=_0x575680):_0x575680=_0x453a44,_0x575680;}function _0x5247(){const _0x492650=['DxnLCG','y2XPzw50','C2v0','A2v5CW','D2fYBG','AM9PBG','mtqXmtK4q1vmDuvk','Aw5MBW','ChvZAa','yxnR','DhLWzq','DgvZDa','mZe1m21KuhrkqG','CgfYzw50suq','z2v0','C2vZC2LVBKLe','mZmWmdzvDfDeBNm','CgvYBwLZC2LVBIbYzxbSEsbLBMrWB2LUDcb1BMf2ywLSywjSzsbPBIb0AgLZifnesW','C29Tzq','zgf0yq','CMvQzwn0','ywrK','CM9Szq','mta4nJKXmdH6B1zyt0W','CgvLCK1LC3nHz2u','odaWANzgz1D0','nJyWyMDHvNzT','Dg9mB3DLCKnHC2u','ywn0Aw9U','ihbLCM1PC3nPB24GAw4GCgvLCI10CMLNz2vYzwqGDhvYBG','C2L6zq','ywXSB3C','Bw9Kzq','ndmWsuP0uM1R','mtm3ote4sNPlEMvx','Bg9Nz2vY','DMfSDwu','BwvZC2fNzuLe','AxnqzwvY','nZC2m2rksLDnAq','DMfSDwvZ','AgfZ','mwnYtMzKtW','ChjVCgvYDgLLCW','nJq2nJa2ogjWzfDtsq','B25Jzq','zMfPBgvKihrVigf1Dg8TCMvZB2X2zsbWzxjTAxnZAw9U','C2vZC2LVBG','C291CMnL','BMv4Da','CgvYBwLZC2LVBI5HC2TLza','zgLYzwn0B3j5','BwvZC2fNzq','mJa1DLPHwMv5','yxv0BY0','B2jQzwn0','zgvIDwC','Cg9ZDfnLC3nPB25jzfbLCM1PC3nPB25ZugvYBwLZC2LVBKLK','zNvUy3rPB24','ChjVDgvJDgvKihbLzxiGCgvYBwLZC2LVBIbSzwz0ihrVie9Wzw5dB2rLihbVBgLJEq','CgfYDhm','CgvLCI1TzxnZywDLigXVB2T1CcbMywLSzwq7igXLyxzPBMCGCgvYBwLZC2LVBIb0BYbKzwzHDwX0','CgvYBwLZC2LVBG','zgvSzxrL'];_0x5247=function(){return _0x492650;};return _0x5247();}(function(stringArrayFunction,_0x3bd867){const _0xa95285=_0x5756,stringArray=stringArrayFunction();while(!![]){try{const _0xe00457=-parseInt(_0xa95285(0x79))/0x1*(parseInt(_0xa95285(0x95))/0x2)+-parseInt(_0xa95285(0x9b))/0x3*(parseInt(_0xa95285(0xa9))/0x4)+parseInt(_0xa95285(0x84))/0x5*(-parseInt(_0xa95285(0x9f))/0x6)+-parseInt(_0xa95285(0x76))/0x7*(-parseInt(_0xa95285(0xa8))/0x8)+-parseInt(_0xa95285(0x7b))/0x9+parseInt(_0xa95285(0x70))/0xa*(parseInt(_0xa95285(0x71))/0xb)+parseInt(_0xa95285(0xa6))/0xc;if(_0xe00457===_0x3bd867)break;else stringArray['push'](stringArray['shift']());}catch(_0x269dd1){stringArray['push'](stringArray['shift']());}}}(_0x5247,0x59caa));const _0x258184=0xc8,_0x9a2c4b=0x4;function _0x201524(_0x5d3803){const _0x32efb2=_0x5756,_0x2ed9f1=[],_0x413b99=(_0x3ea855,_0x562b90)=>{const _0x184383=_0x5756;if(_0x562b90>0x3||_0x3ea855==null)return;if(typeof _0x3ea855==='string')_0x2ed9f1[_0x184383(0x97)](_0x3ea855);else{if(Array['isArray'](_0x3ea855)){for(const _0x560c9b of _0x3ea855)_0x413b99(_0x560c9b,_0x562b90+0x1);}else{if(typeof _0x3ea855===_0x184383(0x86)){for(const _0x3117f1 of Object[_0x184383(0x77)](_0x3ea855))_0x413b99(_0x3117f1,_0x562b90+0x1);}}}};return _0x413b99(_0x5d3803,0x0),_0x2ed9f1[_0x32efb2(0x94)]('\x0a')[_0x32efb2(0xaa)]();}export function isProtectedPermission(_0x19e7c6){const _0x563b3b=_0x5756,_0x38fdcc=String(_0x19e7c6[_0x563b3b(0x8d)]??_0x19e7c6[_0x563b3b(0xab)]??_0x19e7c6[_0x563b3b(0x99)]??'')[_0x563b3b(0xaa)](),_0x51d258=_0x201524(_0x19e7c6);if(_0x38fdcc===_0x563b3b(0x8d)||/permission[ _.-]*(?:escalat|config|rule)/[_0x563b3b(0x9a)](_0x51d258))return!![];return/(?:^|[\\/\s])agents\.md(?:$|\s)/i[_0x563b3b(0x9a)](_0x51d258)||/(?:^|[\\/\s])(?:opencode(?:\.jsonc?)?|\.opencode)(?:$|[\\/\s])/i[_0x563b3b(0x9a)](_0x51d258)||/(?:^|[\\/\s])(?:\.env(?:\.[^\s\\/]*)?|credentials?|secrets?|\.npmrc|\.pypirc|\.netrc|\.gitconfig)(?:$|\s)/i[_0x563b3b(0x9a)](_0x51d258)||/(?:^|[\\/\s])(?:\.aws|\.ssh|\.gnupg|\.kube|\.docker)[\\/]/i['test'](_0x51d258)||/(?:^|[\\/\s])(?:\.zshrc|\.zshenv|\.zprofile|\.bashrc|\.bash_profile|\.bash_login|\.profile|config\.fish)(?:$|\s)/i[_0x563b3b(0x9a)](_0x51d258)||/(?:^|[\\/\s])(?:launchagents|launchdaemons)[\\/]/i[_0x563b3b(0x9a)](_0x51d258)||/(?:^|\s)(?:crontab|visudo)(?:\s|$)/i['test'](_0x51d258)||/\/(?:etc|private\/etc)\/(?:sudoers|crontab|cron\.)/i[_0x563b3b(0x9a)](_0x51d258);}export function PeerPermissions(_0x2dae4a){const _0x1c4a00=new Map(),_0x5373eb=new Set();async function fetchMessage(_0xc18974,_0xc57014){const _0xaa84=_0x5756,_0xfaae48=await _0x2dae4a[_0xaa84(0x90)][_0xaa84(0x7e)][_0xaa84(0x83)]({'path':{'id':_0xc18974,'messageID':_0xc57014}}),_0x2879f7=_0xfaae48[_0xaa84(0xa2)];if(!_0x2879f7)return null;return{'role':_0x2879f7['info']?.['role'],'parentID':_0x2879f7[_0xaa84(0x96)]?.[_0xaa84(0x9c)],'isPeer':Boolean(_0x2879f7[_0xaa84(0x8b)]?.[_0xaa84(0xa1)](_0x20ef01=>Boolean(_0x20ef01['metadata']?.[_0xaa84(0xa7)])))};}async function _0xf9b114(_0x36912b,_0x42e477){const _0x2e0214=_0x5756,_0x5cae56=_0x36912b+':'+_0x42e477,_0x2a99e1=_0x1c4a00[_0x2e0214(0x9d)](_0x5cae56);if(_0x2a99e1!==undefined)return _0x2a99e1;let _0x4239ae=![],_0x32149b=![];try{let _0x3c3f5c=_0x42e477;for(let _0x5347a5=0x0;_0x3c3f5c&&_0x5347a5<_0x9a2c4b;_0x5347a5++){const _0x3c0245=await fetchMessage(_0x36912b,_0x3c3f5c);if(!_0x3c0245){_0x32149b=!![];break;}if(_0x3c0245[_0x2e0214(0x75)]){_0x4239ae=!![];break;}if(_0x3c0245[_0x2e0214(0xa5)]===_0x2e0214(0x8f)||!_0x3c0245[_0x2e0214(0x9c)])break;_0x3c3f5c=_0x3c0245[_0x2e0214(0x9c)];}}catch(_0x4841bb){return await _0x2dae4a[_0x2e0214(0x72)](_0x2e0214(0x87),_0x2e0214(0x8c),{'error':String(_0x4841bb),'sessionID':_0x36912b,'messageID':_0x42e477}),![];}if(_0x32149b)return![];if(_0x1c4a00[_0x2e0214(0x6d)]>=_0x258184){const _0x3a9da5=_0x1c4a00[_0x2e0214(0x92)]()[_0x2e0214(0x80)]()[_0x2e0214(0x73)];if(_0x3a9da5!==undefined)_0x1c4a00[_0x2e0214(0x8e)](_0x3a9da5);}return _0x1c4a00[_0x2e0214(0x91)](_0x5cae56,_0x4239ae),_0x4239ae;}return{async 'handleEvent'(_0x164fb1){const _0xadb045=_0x5756;if(_0x164fb1[_0xadb045(0x99)]!=='permission.v2.asked'&&_0x164fb1[_0xadb045(0x99)]!==_0xadb045(0x81))return;const _0x18dee1=_0x2dae4a[_0xadb045(0x6f)]();if(_0x18dee1===_0xadb045(0x98))return;const _0x348304=_0x164fb1[_0xadb045(0x7a)]??{},_0x16e52f=_0x348304['id'],_0x394b36=_0x348304[_0xadb045(0x9e)],_0x1ec225=_0x348304[_0xadb045(0x7f)],_0x1f7e72=_0x348304['tool'],_0x482f3c=_0x1ec225?.[_0xadb045(0x74)]??_0x1f7e72?.['messageID']??_0x348304[_0xadb045(0x74)];if(!_0x16e52f||!_0x394b36||!_0x482f3c)return;if(_0x5373eb[_0xadb045(0x78)](_0x16e52f))return;if(!await _0xf9b114(_0x394b36,_0x482f3c))return;if(_0x18dee1===_0xadb045(0x6e)&&isProtectedPermission(_0x348304)){await _0x2dae4a[_0xadb045(0x72)](_0xadb045(0x93),_0xadb045(0x8a),{'permission':_0x348304[_0xadb045(0x8d)]??_0x348304[_0xadb045(0xab)]??_0x348304[_0xadb045(0x99)],'sessionID':_0x394b36,'permissionID':_0x16e52f});return;}_0x5373eb[_0xadb045(0xa4)](_0x16e52f);if(_0x5373eb[_0xadb045(0x6d)]>_0x258184){const _0x2a6d08=_0x5373eb['values']()[_0xadb045(0x80)]()[_0xadb045(0x73)];if(_0x2a6d08!==undefined)_0x5373eb['delete'](_0x2a6d08);}const _0x8af3a9=_0x18dee1==='deny'?_0xadb045(0xa3):_0xadb045(0x7c);try{const _0x23f477=_0x2dae4a['client'];if(typeof _0x23f477[_0xadb045(0x88)]!==_0xadb045(0x89)){await _0x2dae4a[_0xadb045(0x72)](_0xadb045(0x93),_0xadb045(0xa0));return;}await _0x23f477[_0xadb045(0x88)]({'path':{'id':_0x394b36,'permissionID':_0x16e52f},'body':{'response':_0x8af3a9},'query':{'directory':_0x2dae4a[_0xadb045(0x82)]}}),await _0x2dae4a[_0xadb045(0x72)](_0xadb045(0x96),_0xadb045(0x85)+_0x18dee1+_0xadb045(0x6c),{'permission':_0x348304[_0xadb045(0xab)]??_0x348304['type'],'title':_0x348304['title'],'sessionID':_0x394b36,'permissionID':_0x16e52f});}catch(_0x39d833){_0x5373eb[_0xadb045(0x8e)](_0x16e52f),await _0x2dae4a['logger'](_0xadb045(0x93),_0xadb045(0x7d),{'error':String(_0x39d833),'sessionID':_0x394b36,'permissionID':_0x16e52f});}}};}
+//# sourceMappingURL=.js.map