opencode-goal-mode 0.3.9 → 0.3.11

package/ARCHITECTURE.md

@@ -188,8 +188,9 @@ progress is visible even without the banner.
 The JSX renderer is verified headlessly with `@opentui/solid`'s `testRender` in
 `tools/visual-test/sidebar-visual.jsx` (`npm run test:visual`, needs Bun + the
 OpenTUI stack): it asserts the rendered text, the exact foreground colours, and
-the bold attribute for Goal todo / done / native-todo-preserved states. That tool is excluded from
-the npm package and from `node --test`/CI.
+the bold attribute for Goal todo / done / native-todo-preserved states. That tool
+is excluded from the npm package and from `node --test`; the GitHub CI workflow
+runs it in a separate Bun/OpenTUI job.
 
 ## Configuration
 

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## v0.3.11
+
+- Fixed Goal sidebar/status isolation so an explicit Build or other non-Goal
+  session never falls back to another active Goal session in the same worktree.
+- Blocked mutating `goal_*` tools from activating Goal Guard state in non-Goal
+  sessions; read-only tools remain strictly scoped to the current session.
+- Added regression coverage for mixed Goal/Build persisted snapshots, session-scoped
+  status/evidence/memory reads, and Build-mode tool calls.
+
+## v0.3.10
+
+- Clarified the recommended install command to use a persistent global npm install
+  before running the installer, so OpenCode can resolve the TUI package on future
+  starts. `npx` remains documented for temporary installs/server-side checks.
+- Added the missing historical `v0.3.8` changelog section. `v0.3.8` reached npm,
+  but its GitHub Release workflow failed while generating release notes, so it was
+  superseded by `v0.3.9`.
+
 ## v0.3.9
 
 - Installer docs and `--help` now put the one-command `npx opencode-goal-mode --global`
@@ -12,6 +30,12 @@
 - Destructive-command blocking no longer activates Goal enforcement for Build or
   other non-Goal sessions, preventing non-Goal tasks from being classified as goals.
 
+## v0.3.8
+
+- Superseded release: npm publish succeeded, but the GitHub Release workflow failed
+  because the changelog section was still named `Unreleased`. The same functional
+  changes shipped correctly in `v0.3.9` with matching npm and GitHub releases.
+
 ## v0.3.7
 
 - **FIX: the sidebar now actually loads.** OpenCode loads a TUI plugin via the

package/README.md

@@ -17,14 +17,15 @@ TUI sidebar.
 **One command** (recommended; needs [Node](https://nodejs.org) 20.11+ and a working [OpenCode](https://opencode.ai) install):
 
 ```bash
-npx opencode-goal-mode --global
+npm install -g opencode-goal-mode && opencode-goal-mode --global
 ```
 
 Then **restart OpenCode**. That's the whole install: it copies the Goal agent,
 review subagents, slash commands, and guard plugin into `~/.config/opencode`, and
 merge-safely registers the Goal todo sidebar in `~/.config/opencode/tui.json`.
 In the agent picker you'll see only the **`goal`** agent; reviewers are subagents
-it drives automatically. Goal Mode inherits your existing OpenCode model/provider.
+it drives automatically. The global install keeps the TUI package resolvable on
+future OpenCode starts; Goal Mode inherits your existing OpenCode model/provider.
 
 <details>
 <summary>Other ways to install</summary>
@@ -34,6 +35,10 @@ it drives automatically. Goal Mode inherits your existing OpenCode model/provide
 npm install -g opencode-goal-mode
 opencode-goal-mode --global          # alias of opencode-goal-mode-install
 
+# Temporary npx install (server-side components work; for the TUI sidebar,
+# prefer the global install above so OpenCode can resolve the package later)
+npx opencode-goal-mode --global
+
 # Into a single project (writes ./.opencode, including ./.opencode/tui.json)
 npx opencode-goal-mode
 
@@ -253,6 +258,7 @@ enforcement and writes its state to disk, and an experimental TUI plugin
 ## Installer options
 
 ```bash
+npm install -g opencode-goal-mode && opencode-goal-mode --global
 npx opencode-goal-mode --global --dry-run
 npx opencode-goal-mode --global
 opencode-goal-mode-install --global --uninstall

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-goal-mode",
-  "version": "0.3.9",
+  "version": "0.3.11",
   "description": "Strict Goal Mode agents, commands, and guard plugin for OpenCode.",
   "type": "module",
   "main": "plugins/goal-sidebar.tsx",

package/plugins/goal-guard/sidebar-data.js

@@ -30,8 +30,10 @@ function normalize(record) {
 }
 
 /**
- * Choose which session's goal to show: the most-recently-touched ACTIVE session
- * (optionally preferring an explicit sessionId when it is present and active).
+ * Choose which session's goal to show. When OpenCode gives us a concrete session
+ * id, never fall back to another session: Build/non-Goal sessions must not show a
+ * Goal from the same worktree. The most-recent active fallback is only for
+ * no-session contexts such as initial sidebar registration polling.
  */
 export function pickSession(snapshot, sessionId) {
   if (!snapshot || !Array.isArray(snapshot.sessions)) return null;
@@ -41,6 +43,7 @@ export function pickSession(snapshot, sessionId) {
   if (sessionId) {
     const direct = records.find(([key, st]) => key === sessionId && st.active);
     if (direct) return direct[1];
+    return null;
   }
   const active = records.filter(([, st]) => st.active);
   if (active.length === 0) return null;

package/plugins/goal-guard/tools.js

@@ -16,6 +16,7 @@ import { evidenceMapReport, reviewerMemoryReport, statusReport } from "./summary
 import { recordEvidence } from "./events.js";
 import { refreshStickyGates } from "./gates.js";
 import { createState } from "./state.js";
+import { isPrimaryAgent } from "./agents.js";
 
 const s = tool.schema;
 
@@ -28,6 +29,18 @@ const s = tool.schema;
 export function createGoalTools({ store, config, persist }) {
   const save = typeof persist === "function" ? persist : () => {};
 
+  function requireGoalMode(state) {
+    return Boolean(state?.active || isPrimaryAgent(state?.currentAgent));
+  }
+
+  function goalModeOnlyResult() {
+    return {
+      title: "Goal Mode required",
+      output: "This goal_* tool can only mutate Goal Guard state from an active Goal session. Switch to the `goal` agent or start with /goal.",
+      metadata: { blocked: true, reason: "not_goal_mode" },
+    };
+  }
+
   return {
     goal_status: tool({
       description:
@@ -109,6 +122,7 @@ export function createGoalTools({ store, config, persist }) {
       },
       async execute(args, ctx) {
         const state = store.stateFor(ctx.sessionID);
+        if (!requireGoalMode(state)) return goalModeOnlyResult();
         state.active = true;
         state.contract = {
           title: String(args.title || "").replace(/\s+/g, " ").trim(),
@@ -145,6 +159,7 @@ export function createGoalTools({ store, config, persist }) {
       },
       async execute(args, ctx) {
         const state = store.stateFor(ctx.sessionID);
+        if (!requireGoalMode(state)) return goalModeOnlyResult();
         state.active = true;
         recordEvidence(store, state, args.command, args.result, args.criteria);
         save();
@@ -164,6 +179,8 @@ export function createGoalTools({ store, config, persist }) {
         confirm: s.boolean().describe("Must be true to actually reset."),
       },
       async execute(args, ctx) {
+        const state = store.stateFor(ctx.sessionID);
+        if (!requireGoalMode(state)) return goalModeOnlyResult();
         if (!args.confirm) {
           return { title: "Reset not confirmed", output: "Pass confirm=true to reset Goal Guard state." };
         }