opencode-immune 1.0.46 → 1.0.47

package/dist/plugin.js

@@ -3,6 +3,7 @@
 // Hybrid single-file architecture with factory functions, explicit state, error boundaries
 // See: memory-bank/creative/creative-plugin-architecture.md (Option C)
 Object.defineProperty(exports, "__esModule", { value: true });
+const client_1 = require("@opencode-ai/sdk/v2/client");
 const promises_1 = require("fs/promises");
 const path_1 = require("path");
 const crypto_1 = require("crypto");
@@ -71,8 +72,13 @@ async function checkPluginUpdate(state) {
 }
 function createState(input) {
     activeLogDirectory = input.directory;
+    const { client: _client, ...runtimeInput } = input;
     return {
-        input,
+        input: runtimeInput,
+        client: (0, client_1.createOpencodeClient)({
+            baseUrl: input.serverUrl.toString(),
+            directory: input.directory,
+        }),
         recoveryContext: null,
         managedUltraworkSessions: new Map(),
         sessionRetryTimers: new Map(),
@@ -93,6 +99,23 @@ function createState(input) {
     };
 }
 const ULTRAWORK_AGENT = "0-ultrawork";
+const ULTRAWORK_SESSION_PERMISSION = [
+    { permission: "read", pattern: "*", action: "allow" },
+    { permission: "edit", pattern: "*", action: "allow" },
+    { permission: "glob", pattern: "*", action: "allow" },
+    { permission: "grep", pattern: "*", action: "allow" },
+    { permission: "list", pattern: "*", action: "allow" },
+    { permission: "bash", pattern: "*", action: "allow" },
+    { permission: "task", pattern: "*", action: "allow" },
+    { permission: "external_directory", pattern: "*", action: "allow" },
+    { permission: "todowrite", pattern: "*", action: "allow" },
+    { permission: "question", pattern: "*", action: "allow" },
+    { permission: "webfetch", pattern: "*", action: "allow" },
+    { permission: "websearch", pattern: "*", action: "allow" },
+    { permission: "codesearch", pattern: "*", action: "allow" },
+    { permission: "lsp", pattern: "*", action: "allow" },
+    { permission: "skill", pattern: "*", action: "allow" },
+];
 const DIAGNOSTIC_LOG_MAX_BYTES = 5 * 1024 * 1024;
 let activeLogDirectory = null;
 const MANAGED_SESSION_TTL_MS = 7 * 24 * 60 * 60 * 1000;
@@ -116,6 +139,38 @@ function isManagedRootUltraworkSession(state, sessionID) {
     const record = getManagedSession(state, sessionID);
     return !!record && record.kind === "root";
 }
+async function createManagedUltraworkSession(state, title) {
+    const result = await state.client.session.create({
+        directory: state.input.directory,
+        title,
+        permission: ULTRAWORK_SESSION_PERMISSION,
+    });
+    const sessionID = result?.data?.id;
+    if (!sessionID)
+        return null;
+    await addManagedUltraworkSession(state, sessionID);
+    return sessionID;
+}
+async function promptManagedSession(state, sessionID, text, options = {}) {
+    await state.client.session.promptAsync({
+        directory: state.input.directory,
+        sessionID,
+        ...(options.model ? { model: options.model } : {}),
+        agent: options.agent ?? ULTRAWORK_AGENT,
+        parts: [
+            {
+                type: "text",
+                text,
+            },
+        ],
+    });
+}
+async function abortManagedSession(state, sessionID) {
+    await state.client.session.abort({
+        directory: state.input.directory,
+        sessionID,
+    });
+}
 function pruneExpiredManagedSessions(state, now = Date.now()) {
     let removed = 0;
     for (const [sessionID, record] of state.managedUltraworkSessions.entries()) {
@@ -534,9 +589,7 @@ async function sendManagedSessionRetryPrompt(state, sessionID, reason, options =
     });
     if (options.abortBeforePrompt) {
         try {
-            await state.input.client.session.abort({
-                path: { id: sessionID },
-            });
+            await abortManagedSession(state, sessionID);
             await writeDiagnosticLog(state, "session-retry:abort-success", { sessionID });
         }
         catch (err) {
@@ -546,18 +599,9 @@ async function sendManagedSessionRetryPrompt(state, sessionID, reason, options =
             });
         }
     }
-    await state.input.client.session.promptAsync({
-        body: {
-            ...(fallbackModel ? { model: fallbackModel } : {}),
-            agent: retryAgent,
-            parts: [
-                {
-                    type: "text",
-                    text: retryText,
-                },
-            ],
-        },
-        path: { id: sessionID },
+    await promptManagedSession(state, sessionID, retryText, {
+        agent: retryAgent,
+        model: fallbackModel,
     });
     writePluginLog(state, "info", `[opencode-immune] Retry prompt sent to session ${sessionID} (${reason})` +
         (fallbackModel
@@ -1096,18 +1140,7 @@ function createSessionRecoveryEvent(state) {
                     }
                     setTimeout(async () => {
                         try {
-                            await state.input.client.session.promptAsync({
-                                body: {
-                                    agent: ULTRAWORK_AGENT,
-                                    parts: [
-                                        {
-                                            type: "text",
-                                            text: `[AUTO-RESUME] Previous session was interrupted. Read memory-bank/tasks.md, check the Phase Status block, and continue the pipeline. Use ONLY the Phase Status block to determine the next phase. Do NOT analyze or evaluate the content of tasks.md. Call the appropriate router with the exact neutral prompt from your Step 5 table.`,
-                                        },
-                                    ],
-                                },
-                                path: { id: sessionID },
-                            });
+                            await promptManagedSession(state, sessionID, `[AUTO-RESUME] Previous session was interrupted. Read memory-bank/tasks.md, check the Phase Status block, and continue the pipeline. Use ONLY the Phase Status block to determine the next phase. Do NOT analyze or evaluate the content of tasks.md. Call the appropriate router with the exact neutral prompt from your Step 5 table.`);
                             pluginLog.info(`[opencode-immune] Auto-resume prompt sent to managed ultrawork session ${sessionID}`);
                         }
                         catch (err) {
@@ -1350,18 +1383,7 @@ function createFallbackModels(state) {
                         const sid = input.sessionID;
                         setTimeout(async () => {
                             try {
-                                await state.input.client.session.promptAsync({
-                                    body: {
-                                        agent: ULTRAWORK_AGENT,
-                                        parts: [
-                                            {
-                                                type: "text",
-                                                text: `[AUTO-RESUME] Previous session was interrupted. Read memory-bank/tasks.md, check the Phase Status block, and continue the pipeline. Use ONLY the Phase Status block to determine the next phase. Do NOT analyze or evaluate the content of tasks.md. Call the appropriate router with the exact neutral prompt from your Step 5 table.`,
-                                            },
-                                        ],
-                                    },
-                                    path: { id: sid },
-                                });
+                                await promptManagedSession(state, sid, `[AUTO-RESUME] Previous session was interrupted. Read memory-bank/tasks.md, check the Phase Status block, and continue the pipeline. Use ONLY the Phase Status block to determine the next phase. Do NOT analyze or evaluate the content of tasks.md. Call the appropriate router with the exact neutral prompt from your Step 5 table.`);
                                 pluginLog.info(`[opencode-immune] Auto-resume prompt sent to session ${sid}`);
                             }
                             catch (err) {
@@ -1714,31 +1736,13 @@ function createTextCompleteHandler(state) {
             const nextTask = taskMatch?.[1]?.trim() ?? "Continue processing task backlog";
             pluginLog.info(`[opencode-immune] Multi-Cycle: Creating new session (cycle ${state.cycleCount}/${MAX_CYCLES}) for: "${nextTask}"`);
             try {
-                const createResult = await state.input.client.session.create({
-                    body: {
-                        title: `Ultrawork Cycle ${state.cycleCount + 1}`,
-                    },
-                });
-                const newSessionData = createResult?.data;
-                const newSessionID = newSessionData?.id;
+                const newSessionID = await createManagedUltraworkSession(state, `Ultrawork Cycle ${state.cycleCount + 1}`);
                 if (!newSessionID) {
                     pluginLog.error("[opencode-immune] Multi-Cycle: Failed to create new session — no ID returned.");
                     return;
                 }
                 pluginLog.info(`[opencode-immune] Multi-Cycle: New session created: ${newSessionID}`);
-                await addManagedUltraworkSession(state, newSessionID);
-                await state.input.client.session.promptAsync({
-                    body: {
-                        agent: ULTRAWORK_AGENT,
-                        parts: [
-                            {
-                                type: "text",
-                                text: `[AUTO-CYCLE] Continue processing task backlog. Read memory-bank/tasks.md and memory-bank/backlog.md, pick the next pending task, and run the full pipeline.`,
-                            },
-                        ],
-                    },
-                    path: { id: newSessionID },
-                });
+                await promptManagedSession(state, newSessionID, `[AUTO-CYCLE] Continue processing task backlog. Read memory-bank/tasks.md and memory-bank/backlog.md, pick the next pending task, and run the full pipeline.`);
                 pluginLog.info(`[opencode-immune] Multi-Cycle: Bootstrap prompt sent to ${newSessionID}`);
             }
             catch (err) {
@@ -1789,6 +1793,19 @@ function createMultiCycleHandler(state) {
         }
     };
 }
+function createPermissionAskHandler(state) {
+    return async (input, output) => {
+        const sessionID = input.sessionID;
+        if (!isManagedUltraworkSession(state, sessionID))
+            return;
+        output.status = "allow";
+        await writeDiagnosticLog(state, "permission:auto-allow", {
+            sessionID,
+            permission: input.permission,
+            patterns: input.patterns,
+        });
+    };
+}
 // ═══════════════════════════════════════════════════════════════════════════════
 // PLUGIN MODULE EXPORT
 // ═══════════════════════════════════════════════════════════════════════════════
@@ -1818,31 +1835,13 @@ async function server(input) {
             // Delay to let opencode fully initialize.
             setTimeout(async () => {
                 try {
-                    const createResult = await state.input.client.session.create({
-                        body: {
-                            title: `AUTO-RESUME: ${recovery.task}`,
-                        },
-                    });
-                    const newSessionData = createResult?.data;
-                    const newSessionID = newSessionData?.id;
+                    const newSessionID = await createManagedUltraworkSession(state, `AUTO-RESUME: ${recovery.task}`);
                     if (!newSessionID) {
                         pluginLog.error("[opencode-immune] Auto-resume: Failed to create session — no session ID returned.");
                         return;
                     }
                     pluginLog.info(`[opencode-immune] Auto-resume: New session created: ${newSessionID}`);
-                    await addManagedUltraworkSession(state, newSessionID);
-                    await state.input.client.session.promptAsync({
-                        body: {
-                            agent: ULTRAWORK_AGENT,
-                            parts: [
-                                {
-                                    type: "text",
-                                    text: `[AUTO-RESUME] Previous session was interrupted. Read memory-bank/tasks.md, check the Phase Status block, and continue the pipeline. Use ONLY the Phase Status block to determine the next phase. Do NOT analyze or evaluate the content of tasks.md. Call the appropriate router with the exact neutral prompt from your Step 5 table.`,
-                                },
-                            ],
-                        },
-                        path: { id: newSessionID },
-                    });
+                    await promptManagedSession(state, newSessionID, `[AUTO-RESUME] Previous session was interrupted. Read memory-bank/tasks.md, check the Phase Status block, and continue the pipeline. Use ONLY the Phase Status block to determine the next phase. Do NOT analyze or evaluate the content of tasks.md. Call the appropriate router with the exact neutral prompt from your Step 5 table.`);
                     pluginLog.info(`[opencode-immune] Auto-resume prompt sent to new session ${newSessionID}`);
                 }
                 catch (err) {
@@ -1862,31 +1861,13 @@ async function server(input) {
                         `Will create new session to start next cycle.`);
                     setTimeout(async () => {
                         try {
-                            const createResult = await state.input.client.session.create({
-                                body: {
-                                    title: `AUTO-CYCLE: next backlog task`,
-                                },
-                            });
-                            const newSessionData = createResult?.data;
-                            const newSessionID = newSessionData?.id;
+                            const newSessionID = await createManagedUltraworkSession(state, `AUTO-CYCLE: next backlog task`);
                             if (!newSessionID) {
                                 pluginLog.error("[opencode-immune] Auto-cycle: Failed to create session — no session ID returned.");
                                 return;
                             }
                             pluginLog.info(`[opencode-immune] Auto-cycle: New session created: ${newSessionID}`);
-                            await addManagedUltraworkSession(state, newSessionID);
-                            await state.input.client.session.promptAsync({
-                                body: {
-                                    agent: ULTRAWORK_AGENT,
-                                    parts: [
-                                        {
-                                            type: "text",
-                                            text: `[AUTO-CYCLE] Continue processing task backlog. Read memory-bank/tasks.md and memory-bank/backlog.md, pick the next pending task, and run the full pipeline.`,
-                                        },
-                                    ],
-                                },
-                                path: { id: newSessionID },
-                            });
+                            await promptManagedSession(state, newSessionID, `[AUTO-CYCLE] Continue processing task backlog. Read memory-bank/tasks.md and memory-bank/backlog.md, pick the next pending task, and run the full pipeline.`);
                             pluginLog.info(`[opencode-immune] Auto-cycle prompt sent to new session ${newSessionID}`);
                         }
                         catch (err) {
@@ -1931,6 +1912,7 @@ async function server(input) {
         "experimental.chat.system.transform": withErrorBoundary(state, "experimental.chat.system.transform", createSystemTransform(state)),
         "experimental.session.compacting": withErrorBoundary(state, "experimental.session.compacting", createCompactionHandler(state)),
         "experimental.text.complete": withErrorBoundary(state, "experimental.text.complete", createTextCompleteHandler(state)),
+        "permission.ask": withErrorBoundary(state, "permission.ask", createPermissionAskHandler(state)),
     };
 }
 exports.default = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-immune",
-  "version": "1.0.46",
+  "version": "1.0.47",
   "description": "OpenCode plugin: session recovery, auto-retry, multi-cycle automation, context monitoring",
   "exports": {
     "./server": "./dist/plugin.js"
@@ -14,7 +14,8 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@opencode-ai/plugin": "1.4.7"
+    "@opencode-ai/plugin": "1.14.25",
+    "@opencode-ai/sdk": "1.14.25"
   },
   "devDependencies": {
     "@types/node": "^25.5.2",