opencode-goal-plugin 0.6.0 → 0.6.1

package/src/native-agent-config.js

@@ -1,6 +1,6 @@
 const GOAL_AGENT_PROMPT = `Execute explicit goals persistently. Use goal tools to track state and checkpoints. Make concrete progress; claim completion only with verification evidence. Report only genuine blockers.`
 
-const VERIFIER_AGENT_PROMPT = `Independently verify the claim against the goal, constraints, evidence, and workspace. Use read-only checks; never edit or mutate goal state. Approve only when proven; otherwise give one actionable reason.`
+const VERIFIER_AGENT_PROMPT = `Independently verify the claim against the goal, constraints, evidence, and workspace. Use only the read, glob, and grep tools; never edit, execute commands, call other tools, or mutate goal state. Approve only when proven; otherwise give one actionable reason.`
 
 export function applyNativeGoalConfig(config, options = {}) {
   if (!config || typeof config !== "object" || Array.isArray(config)) {
@@ -40,6 +40,10 @@ export function applyNativeGoalConfig(config, options = {}) {
     hidden: true,
     prompt: VERIFIER_AGENT_PROMPT,
     permission: {
+      "*": "deny",
+      read: "allow",
+      glob: "allow",
+      grep: "allow",
       edit: "deny",
       bash: "deny",
     },

package/src/opencode-session-api.js

@@ -5,6 +5,11 @@ const SHAPE_ERROR_PATTERNS = [
   /(?:validation|schema|invalid input|invalid argument)/i,
 ]
 
+// Only read-only operations may be retried with another argument shape. A
+// TypeError can be raised after a mutating SDK call has already reached the
+// host, so replaying create/prompt/update/delete/abort could duplicate side effects.
+const REPLAY_SAFE_OPERATIONS = new Set(["messages", "get"])
+
 function isArgumentShapeError(error) {
   if (!(error instanceof TypeError)) return false
   const message = String(error.message || "")
@@ -46,7 +51,9 @@ export function createOpenCodeSessionApi(client, options = {}) {
       shapes.set(operation, firstShape)
       return unwrapData(response)
     } catch (error) {
-      if (knownShape || !isArgumentShapeError(error)) throw error
+      if (knownShape || !REPLAY_SAFE_OPERATIONS.has(operation) || !isArgumentShapeError(error)) {
+        throw error
+      }
       const fallbackShape = firstShape === "flat" ? "legacy" : "flat"
       const fallbackInput = fallbackShape === "flat" ? flatInput : legacyInput
       const response = await method.call(client.session, fallbackInput)
@@ -91,6 +98,9 @@ export function createOpenCodeSessionApi(client, options = {}) {
     get(sessionID) {
       return invoke("get", { sessionID }, { path: { id: sessionID } })
     },
+    delete(sessionID) {
+      return invoke("delete", { sessionID }, { path: { id: sessionID } })
+    },
     abort(sessionID) {
       return invoke("abort", { sessionID }, { path: { id: sessionID } })
     },

package/src/persistence-lease.js

@@ -27,7 +27,10 @@ async function readOwner(lockPath) {
  * deliberately rejects a second writer instead of allowing stale full-state
  * snapshots to overwrite each other.
  */
-export async function acquirePersistenceLease(stateFilePath) {
+export async function acquirePersistenceLease(
+  stateFilePath,
+  { malformedGraceMs = 30_000, now = () => Date.now() } = {},
+) {
   const lockPath = `${stateFilePath}.lock`
   await fs.mkdir(dirname(stateFilePath), { recursive: true, mode: 0o700 })
   const owner = {
@@ -58,7 +61,16 @@ export async function acquirePersistenceLease(stateFilePath) {
       }
       const existing = await readOwner(lockPath)
       const sameHost = existing?.hostname === owner.hostname
-      if (sameHost && processIsAlive(existing?.pid) === false) {
+      let reclaimableMalformed = false
+      if (!existing) {
+        try {
+          const info = await fs.lstat(lockPath)
+          reclaimableMalformed = now() - info.mtimeMs >= malformedGraceMs
+        } catch (statError) {
+          if (statError?.code === "ENOENT") continue
+        }
+      }
+      if ((sameHost && processIsAlive(existing?.pid) === false) || reclaimableMalformed) {
         const stalePath = `${lockPath}.stale.${randomUUID()}`
         try {
           await fs.rename(lockPath, stalePath)