opencode-immune 1.0.76 → 1.0.78

package/dist/plugin/server.js

@@ -3777,7 +3777,7 @@ import { fileURLToPath } from "url";
 import { createHash } from "crypto";
 import { tmpdir } from "os";
 import { execFile } from "child_process";
-var PLUGIN_VERSION = "1.0.76";
+var PLUGIN_VERSION = "1.0.78";
 var PLUGIN_PACKAGE_NAME = "opencode-immune";
 var PLUGIN_DIRNAME = dirname(fileURLToPath(import.meta.url));
 function getServerAuthHeaders() {
@@ -3852,7 +3852,6 @@ function createState(input) {
     providerRetryWatchdogs: /* @__PURE__ */ new Map(),
     childFallbackRequests: /* @__PURE__ */ new Map(),
     sessionErrorRetryCount: /* @__PURE__ */ new Map(),
-    ultraworkPermissionSessions: /* @__PURE__ */ new Set(),
     fallbackAgentByAgent: /* @__PURE__ */ new Map(),
     baseAgentByFallbackAgent: /* @__PURE__ */ new Map(),
     fallbackModelCandidates: [],
@@ -3889,23 +3888,6 @@ function createState(input) {
   };
 }
 var ULTRAWORK_AGENT = "0-ultrawork";
-var ULTRAWORK_SESSION_PERMISSION = [
-  { permission: "read", pattern: "*", action: "allow" },
-  { permission: "edit", pattern: "*", action: "allow" },
-  { permission: "glob", pattern: "*", action: "allow" },
-  { permission: "grep", pattern: "*", action: "allow" },
-  { permission: "list", pattern: "*", action: "allow" },
-  { permission: "bash", pattern: "*", action: "allow" },
-  { permission: "task", pattern: "*", action: "allow" },
-  { permission: "external_directory", pattern: "*", action: "allow" },
-  { permission: "todowrite", pattern: "*", action: "allow" },
-  { permission: "question", pattern: "*", action: "allow" },
-  { permission: "webfetch", pattern: "*", action: "allow" },
-  { permission: "websearch", pattern: "*", action: "allow" },
-  { permission: "codesearch", pattern: "*", action: "allow" },
-  { permission: "lsp", pattern: "*", action: "allow" },
-  { permission: "skill", pattern: "*", action: "allow" }
-];
 var DIAGNOSTIC_LOG_MAX_BYTES = 5 * 1024 * 1024;
 var activeLogDirectory = null;
 var MANAGED_SESSION_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
@@ -3935,8 +3917,7 @@ function isManagedRootUltraworkSession(state, sessionID) {
 async function createManagedUltraworkSession(state, title) {
   const result = await state.client.session.create({
     directory: state.input.directory,
-    title,
-    permission: ULTRAWORK_SESSION_PERMISSION
+    title
   });
   if (result.error || !result.response.ok) {
     throw new Error(
@@ -3984,31 +3965,7 @@ async function startAutoCycleInNewSession(state, options) {
     state.autoResumeInFlight = false;
   }
 }
-async function applyUltraworkSessionPermissions(state, sessionID) {
-  if (state.ultraworkPermissionSessions.has(sessionID)) return;
-  try {
-    const result = await state.client.session.update({
-      directory: state.input.directory,
-      sessionID,
-      permission: ULTRAWORK_SESSION_PERMISSION
-    });
-    if (result.error || !result.response.ok) {
-      pluginLog.warn(
-        `[opencode-immune] Failed to apply ultrawork permissions to session ${sessionID}:`,
-        result.error ?? result.response.status
-      );
-      return;
-    }
-    state.ultraworkPermissionSessions.add(sessionID);
-  } catch (err) {
-    pluginLog.warn(
-      `[opencode-immune] Failed to apply ultrawork permissions to session ${sessionID}:`,
-      err
-    );
-  }
-}
 async function promptManagedSession(state, sessionID, text, options = {}) {
-  await applyUltraworkSessionPermissions(state, sessionID);
   const result = await state.client.session.promptAsync({
     directory: state.input.directory,
     sessionID,
@@ -4149,7 +4106,6 @@ async function addManagedUltraworkSession(state, sessionID, timestamp = Date.now
     return;
   }
   state.managedUltraworkSessions.set(sessionID, nextRecord);
-  await applyUltraworkSessionPermissions(state, sessionID);
 }
 async function addManagedChildSession(state, sessionID, parentSessionID, timestamp = Date.now()) {
   const parent = state.managedUltraworkSessions.get(parentSessionID);
@@ -4202,7 +4158,6 @@ async function removeManagedUltraworkSession(state, sessionID, reason) {
   cancelPendingSessionRetry(state, sessionID, reason);
   cancelProviderRetryWatchdog(state, sessionID, reason);
   state.sessionErrorRetryCount.delete(sessionID);
-  state.ultraworkPermissionSessions.delete(sessionID);
   const existed = state.managedUltraworkSessions.delete(sessionID);
   if (!existed) return;
   writePluginLog(
@@ -5835,6 +5790,18 @@ var PRE_COMMIT_MARKER = "0-ULTRAWORK: PRE_COMMIT";
 var CYCLE_COMPLETE_MARKER = "0-ULTRAWORK: CYCLE_COMPLETE";
 var NEXT_TASK_PATTERN = /Next task:\s*(.+)/;
 var ALL_CYCLES_COMPLETE_MARKER = "0-ULTRAWORK: ALL_CYCLES_COMPLETE";
+async function commitCycleChanges(state, reason) {
+  if (state.commitPending) return;
+  state.commitPending = true;
+  pluginLog.info(`[opencode-immune] Multi-Cycle: ${reason}, running git commit...`);
+  try {
+    await runGitCommit(state.input.directory);
+  } catch (err) {
+    pluginLog.error(`[opencode-immune] Multi-Cycle: git commit failed (${reason}):`, err);
+  } finally {
+    state.commitPending = false;
+  }
+}
 async function archiveProgress(directory) {
   const progressPath = join(directory, "memory-bank", "progress.md");
   try {
@@ -5942,17 +5909,7 @@ function createTextCompleteHandler(state) {
       return;
     }
     if (text.includes(PRE_COMMIT_MARKER) && !text.includes(CYCLE_COMPLETE_MARKER)) {
-      if (!state.commitPending) {
-        state.commitPending = true;
-        pluginLog.info("[opencode-immune] Multi-Cycle: PRE_COMMIT detected (standalone), running git commit...");
-        try {
-          await runGitCommit(state.input.directory);
-        } catch (err) {
-          pluginLog.error("[opencode-immune] Multi-Cycle: git commit failed (standalone):", err);
-        } finally {
-          state.commitPending = false;
-        }
-      }
+      await commitCycleChanges(state, "PRE_COMMIT detected (standalone)");
       return;
     }
     if (text.includes(CYCLE_COMPLETE_MARKER)) {
@@ -5961,18 +5918,7 @@ function createTextCompleteHandler(state) {
       } catch (err) {
         pluginLog.warn("[opencode-immune] Multi-Cycle: archive progress failed:", err);
       }
-      if (!state.commitPending) {
-        state.commitPending = true;
-        pluginLog.info("[opencode-immune] Multi-Cycle: CYCLE_COMPLETE detected, running git commit first...");
-        try {
-          await runGitCommit(state.input.directory);
-          pluginLog.info("[opencode-immune] Multi-Cycle: git commit completed before new cycle.");
-        } catch (err) {
-          pluginLog.error("[opencode-immune] Multi-Cycle: git commit failed (continuing anyway):", err);
-        } finally {
-          state.commitPending = false;
-        }
-      }
+      await commitCycleChanges(state, "CYCLE_COMPLETE detected");
       state.cycleCount++;
       if (state.cycleCount >= MAX_CYCLES) {
         pluginLog.info(
@@ -6019,6 +5965,7 @@ function createTextCompleteHandler(state) {
       `[opencode-immune] Multi-Cycle fallback: no CYCLE_COMPLETE marker detected for ${sessionID}, but tasks.md has no active task and backlog has pending items. Starting AUTO-CYCLE.`
     );
     try {
+      await commitCycleChanges(state, "fallback AUTO-CYCLE before new session");
       await refreshAutoCycleLock(state, sessionID);
       await startAutoCycleInNewSession(
         state,
@@ -6083,17 +6030,29 @@ function createPermissionAskHandler(state) {
       state.recoveryContext = recovery;
       await addManagedUltraworkSession(state, sessionID);
       pluginLog.info(
-        `[opencode-immune] Permission request recovered AUTO-RESUME session ${sessionID}; applying managed ultrawork auto-allow.`
+        `[opencode-immune] Permission request recovered AUTO-RESUME session ${sessionID}; tracking as managed ultrawork session.`
       );
     }
-    output.status = "allow";
-    await writeDiagnosticLog(state, "permission:auto-allow", {
+    await writeDiagnosticLog(state, "permission:ask", {
       sessionID,
-      permission: input.permission,
-      patterns: input.patterns
+      status: output.status,
+      permission: getPermissionType(input),
+      patterns: getPermissionPatterns(input)
     });
   };
 }
+function getPermissionType(input) {
+  if (!input || typeof input !== "object") return void 0;
+  const value = input;
+  return typeof value.type === "string" ? value.type : typeof value.permission === "string" ? value.permission : void 0;
+}
+function getPermissionPatterns(input) {
+  if (!input || typeof input !== "object") return [];
+  const value = input;
+  const source = value.pattern ?? value.patterns;
+  if (Array.isArray(source)) return source.filter((item) => typeof item === "string");
+  return typeof source === "string" ? [source] : [];
+}
 async function server(input) {
   const state = createState(input);
   checkPluginUpdate(state).catch(() => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-immune",
-  "version": "1.0.76",
+  "version": "1.0.78",
   "type": "module",
   "description": "OpenCode plugin: session recovery, auto-retry, multi-cycle automation, context monitoring",
   "exports": {
@@ -12,7 +12,7 @@
     "dist/plugin/server.js"
   ],
   "scripts": {
-    "build": "esbuild plugin.ts --bundle --platform=node --format=esm --target=node22 --outfile=dist/plugin/server.js",
+    "build": "esbuild plugin.ts --bundle --platform=node --format=esm --target=node22 --outfile=dist/plugin/server.js && esbuild plugin.ts --bundle --platform=node --format=esm --target=node22 --outfile=dist/plugin.js",
     "dev": "node ./node_modules/typescript/bin/tsc --project tsconfig.json --watch",
     "prepublishOnly": "npm run build"
   },