opencode-permission-notify 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mingpei Wang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,71 @@
-# Temporary Holding Version
+# opencode-permission-notify
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+把 OpenCode 的授权请求变成 macOS 屏幕右上角的原生浮窗，带 **允许一次 / 总是允许 / 拒绝** 三个按钮——
+不用切回 OpenCode 窗口就能批复。
+
+- **非抢焦**：浮窗是 `NSWindowStyleMaskNonactivatingPanel`，点按钮不会把 OpenCode 顶到前台，也不会打断你正在读的东西
+- **该静就静**：OpenCode 已经在前台时直接不弹（窗口里的提示本来就看得见）
+- **不丢请求**：浮窗点完即时回写；超时 5 分钟自动收起，交还给窗口内的原提示
+- **零依赖**：不装 terminal-notifier，不需要通知权限，二进制随包分发
+
+## 安装
+
+```jsonc
+// ~/.config/opencode/opencode.jsonc
+{
+  "plugins": ["opencode-permission-notify"]
+}
+```
+
+或者在本地开发时指向目录：
+
+```jsonc
+{
+  "plugins": ["/absolute/path/to/permission-notify"]
+}
+```
+
+首次加载时会把内置的通用二进制（arm64 + x86_64）释放到
+`~/Library/Application Support/opencode/permission-notify/bin/notify-request`。
+
+**要求**：macOS、OpenCode V2（桌面版或 TUI 均可，插件跑在服务端）。
+
+## 工作方式
+
+```
+OpenCode 服务端发出 permission.asked
+   ↓  插件按 location 过滤（只有会话所属目录的实例处理）
+执行 notify-request：
+   前台是 OpenCode → 直接退出，不打扰
+   否则在右上角画浮窗，等你点按钮
+   ↓  stdout 返回按钮序号
+ctx.permission.reply({ sessionID, requestID, decision })
+```
+
+按钮对应 `once` / `always` / `reject` 三种 decision。
+
+## 配置
+
+| 环境变量 | 说明 |
+| --- | --- |
+| `PERMISSION_NOTIFY_HELPER` | 覆盖助手路径（一般不用） |
+
+日志：`~/Library/Application Support/opencode/permission-notify/notify.log`
+
+## 从源码构建
+
+需要 Xcode Command Line Tools：
+
+```sh
+./build.sh          # 编译通用二进制到 bin/notify-request
+```
+
+## 已知限制
+
+- 仅 macOS
+- 浮窗按请求堆叠（最多 5 个槽位）；同一时刻大量请求会略微重叠
+- 拒绝时不会附带理由文本（OpenCode 支持带反馈的拒绝，这里暂时只回 `reject`）
+
+## 许可
+
+MIT

package/package.json

@@ -1,6 +1,27 @@
 {
   "name": "opencode-permission-notify",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "macOS 原生浮窗，把 OpenCode 的授权请求变成右上角带按钮的通知：允许一次 / 总是允许 / 拒绝，不用切回窗口。",
+  "type": "module",
+  "license": "MIT",
+  "author": "Mingpei Wang",
+  "exports": {
+    ".": "./src/index.ts"
+  },
+  "files": [
+    "src",
+    "bin",
+    "README.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "opencode",
+    "opencode-plugin",
+    "macos",
+    "notification",
+    "permission"
+  ],
+  "os": [
+    "darwin"
+  ]
+}

package/src/index.ts

@@ -0,0 +1,206 @@
+import { Plugin } from "@opencode/plugin"
+import { execFile } from "node:child_process"
+import { chmodSync, copyFileSync, existsSync, mkdirSync, readdirSync, unlinkSync, writeFileSync, statSync } from "node:fs"
+import { homedir, tmpdir } from "node:os"
+import { dirname, join } from "node:path"
+import { fileURLToPath } from "node:url"
+
+/**
+ * permission-notify — 把 OpenCode 的授权请求变成 macOS 原生弹窗（带按钮），
+ * 在弹窗里直接选「允许一次 / 总是允许 / 拒绝」，不用切回 OpenCode 窗口。
+ *
+ * 依赖同目录安装的 notify-request 助手（CFUserNotification）。
+ */
+
+const HOME = process.env.HOME ?? homedir()
+const INSTALL_DIR = `${HOME}/Library/Application Support/opencode/permission-notify`
+const HELPER = process.env.PERMISSION_NOTIFY_HELPER ?? `${INSTALL_DIR}/bin/notify-request`
+
+/** npm 包里自带通用二进制；首次加载时释放到 Application Support */
+function ensureHelper(): string | undefined {
+  if (process.env.PERMISSION_NOTIFY_HELPER) return HELPER
+  if (existsSync(HELPER)) return HELPER
+  try {
+    const bundled = fileURLToPath(new URL("../bin/notify-request", import.meta.url))
+    if (!existsSync(bundled)) return undefined
+    mkdirSync(dirname(HELPER), { recursive: true })
+    copyFileSync(bundled, HELPER)
+    chmodSync(HELPER, 0o755)
+    return HELPER
+  } catch {
+    return undefined
+  }
+}
+
+const DECISIONS = ["once", "always", "reject"] as const
+
+const LOCK_DIR = join(tmpdir(), "opencode-permission-notify")
+const LOG_FILE = join(HOME, "Library/Application Support/opencode/permission-notify/notify.log")
+
+/** 轻量文件日志：排查「点了没反应」时不用去翻服务器日志 */
+function log(line: string) {
+  try {
+    writeFileSync(LOG_FILE, `${new Date().toISOString()} ${line}\n`, { flag: "a" })
+  } catch {}
+}
+
+type Reply = (typeof DECISIONS)[number]
+
+/**
+ * 插件按 location 会加载多份实例，同一授权请求会同时到达每一份。
+ * 用临时文件做原子认领，保证一个请求只弹一个窗；顺带用它算出堆叠位置。
+ */
+function claim(requestID: string): { lock: string; slot: number } | undefined {
+  mkdirSync(LOCK_DIR, { recursive: true })
+  const lock = join(LOCK_DIR, `${requestID}.lock`)
+
+  // 清理一小时前的残留
+  try {
+    const now = Date.now()
+    for (const name of readdirSync(LOCK_DIR)) {
+      const path = join(LOCK_DIR, name)
+      try {
+        if (now - statSync(path).mtimeMs > 3600_000) unlinkSync(path)
+      } catch {}
+    }
+  } catch {}
+
+  try {
+    writeFileSync(lock, String(process.pid), { flag: "wx" })
+  } catch {
+    return undefined // 另一份实例已经在处理
+  }
+
+  let slot = 0
+  try {
+    slot = readdirSync(LOCK_DIR).filter((n) => n.endsWith(".lock")).length - 1
+  } catch {}
+  return { lock, slot: Math.max(0, Math.min(slot, 4)) }
+}
+
+function summarize(data: any): string {
+  const action: string = data?.action ?? "操作"
+  const resources: string[] = Array.isArray(data?.resources) ? data.resources : []
+  const lines: string[] = []
+
+  if (data?.message) lines.push(String(data.message), "")
+  lines.push(`动作：${action}`)
+
+  if (resources.length) {
+    const shown = resources.slice(0, 6)
+    lines.push(`资源：`)
+    for (const item of shown) {
+      // 过长的路径中段省略，保证弹窗不炸开
+      lines.push(item.length > 90 ? `${item.slice(0, 42)}…${item.slice(-42)}` : item)
+    }
+    if (resources.length > shown.length) lines.push(`…另有 ${resources.length - shown.length} 项`)
+  }
+
+  return lines.join("\n")
+}
+
+function ask(message: string, slot = 0, timeoutSeconds = 300): Promise<number> {
+  return new Promise((resolve) => {
+    execFile(
+      HELPER,
+      [
+        "--title",
+        "OpenCode 需要授权",
+        "--message",
+        message,
+        "--buttons",
+        "允许一次|总是允许|拒绝",
+        "--skip-if-frontmost",
+        "ai.opencode.desktop",
+        "--slot",
+        String(slot),
+        "--timeout",
+        String(timeoutSeconds),
+      ],
+      { timeout: (timeoutSeconds + 10) * 1000 },
+      (error, stdout) => {
+        if (error && !stdout) return resolve(-1)
+        const index = Number.parseInt(String(stdout).trim(), 10)
+        resolve(Number.isNaN(index) ? -1 : index)
+      },
+    )
+  })
+}
+
+export default Plugin.define({
+  id: "permission-notify",
+
+  async setup(ctx) {
+    if (!ensureHelper()) {
+      log(`找不到助手：${HELPER}`)
+      return
+    }
+
+    const controller = new AbortController()
+
+    void (async () => {
+      try {
+        for await (const event of ctx.event.subscribe({
+          types: ["permission.asked"],
+          signal: controller.signal,
+        })) {
+          const data: any = (event as any).data
+          if (!data?.id || !data?.sessionID) continue
+
+          const myDir: string | undefined = (ctx as any).location?.directory
+          const eventDir: string | undefined = (event as any).location?.directory
+          log(`ctx.location=${myDir} event.location=${eventDir}`)
+          // 权限请求按 location 归属；不是本实例的目录就不处理，否则 reply 会报 not found
+          if (myDir && eventDir && myDir !== eventDir) continue
+
+          log(`event ${data.id} action=${data.action} at=${Date.now()}`)
+          const askedAt = Date.now()
+
+          const claimed = claim(String(data.id))
+
+          try {
+            const index = await ask(summarize(data), claimed.slot)
+            log(`clicked ${data.id} index=${index} after ${Date.now() - askedAt}ms`)
+
+            // -2：当前前台就是 OpenCode，弹窗里已经能看见，不打扰
+            if (index < 0) continue
+
+            const reply: Reply | undefined = DECISIONS[index]
+            if (!reply) continue
+
+            try {
+              await ctx.permission.reply({
+                sessionID: data.sessionID,
+                requestID: data.id,
+                decision: reply,
+              })
+              log(`replied ${data.id} -> ${reply}`)
+            } catch (error) {
+              // 用户在窗口里抢先点了，或请求已失效：忽略
+              log(`reply failed ${data.id}: ${error}`)
+            }
+
+            // 自检：回复后请求是否真的从待处理列表消失
+            try {
+              const pending: any[] = await ctx.permission.list({ sessionID: data.sessionID })
+              const still = (pending || []).some((p) => p.id === data.id)
+              log(`pending after reply: ${(pending || []).length}, still has ${data.id}: ${still}`)
+            } catch (error) {
+              log(`list failed: ${error}`)
+            }
+          } finally {
+            try {
+              unlinkSync(claimed.lock)
+            } catch {}
+          }
+        }
+      } catch (error) {
+        if (!controller.signal.aborted) {
+          console.error("[permission-notify] 事件流异常", error)
+        }
+      }
+    })()
+
+    return () => controller.abort()
+  },
+})