opencode-polkit 0.2.0 → 0.3.1

package/CHANGELOG.md

@@ -0,0 +1,88 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.3.1] - 2026-11-04
+
+### Added
+
+- `src/shims.ts`: `su` stand-in. `su -c COMMAND [USER]` (also `-cCOMMAND`,
+  `--command COMMAND`, `--command=COMMAND`) becomes
+  `pkexec --keep-cwd --user USER sh -c COMMAND`, because a non-login `su` keeps
+  the working directory and runs its command through a shell. Every other form
+  is refused with status `64` and one line naming the alternative: `su`,
+  `su -`, `su -l` (login shell → `pkexec bash`), `-m`/`-p`/`-w` (pkexec
+  sanitizes the environment), `-s` (name the shell in the command), `-g`/`-G`
+  (pkexec cannot switch groups), `--pty` (no terminal), `-f` and
+  `--session-command`.
+- README scope statement: the plugin covers elevation → polkit only; ssh,
+  gpg/pinentry, keyrings, database clients, `kinit` and disk encryption are
+  explicitly out of scope and need an askpass helper or a PTY.
+
+### Changed
+
+- README authorisation note: a desktop agent may reuse the password it already
+  holds, so a second command can run without a dialog; that cache belongs to
+  the agent and must not be relied on. `su -c … USER` authenticates an
+  administrator rather than `USER`, and runs the command with `sh -c`.
+
+## [0.3.0] - 2026-11-01
+
+0.3.0 replaces how the plugin decides anything. It used to parse the command
+string to find `sudo`, then parse the output to guess whether authentication
+failed; both are gone. The plugin now only prepends a directory of shims to
+`PATH`, letting the shell's own name resolution pick them, and reads the
+outcome from exit status alone. Everything that existed to support guessing —
+the lexical scanner, the output matchers, the denial cache, the translations —
+is deleted with it. The plugin no longer changes the command the agent wrote.
+
+### Added
+
+- `src/shims.ts`: `sudo`, `doas`, `sudoedit` and `visudo` scripts written to a
+  private `0700` temporary directory at setup and removed when the plugin is
+  disposed. `sudo` and `doas` forward to `pkexec`; `sudoedit` and `visudo`
+  refuse, because polkit has no equivalent flow.
+- Deterministic option contract in the shims: `-u USER`, `-uUSER`, `--user USER`
+  and `--user=USER` become `pkexec --user USER`, `--` ends option parsing, and
+  every other option is refused with exit status `64` and a message naming the
+  alternative (`-n` → polkit decides, `-i`/`-s` → `pkexec bash`, `-E`/`-H`/`-P`
+  → pkexec sanitizes the environment, `-b` → append `&`). `pkexec` would
+  otherwise reject them with `Cannot run program`, which says nothing about what
+  to do next.
+- A one-line explanation on exit status `126`: it is the only pkexec failure
+  path that prints nothing of its own, so the shim says the dialog was
+  dismissed. Every `127` path already prints its reason.
+- `SHIM_USAGE_EXIT` (64) documents that the refusal status is the shim's own and
+  cannot be confused with pkexec's `126`/`127`.
+
+### Changed
+
+- **Breaking:** commands are no longer rewritten. The `shell` tool's
+  `execute.before`/`execute.after` hooks are replaced by a single
+  `shell.create.before` hook that only sets `event.env.PATH`, so the agent's
+  command reaches the shell exactly as written, and `sudo` inside quotes,
+  comments or heredocs needs no special case.
+- **Breaking:** authentication failures are reported from exit status
+  (`126` dismissed, `127` not authorized, `64` refused invocation), never from
+  output. The locale-dependent matchers for `Not authorized`,
+  `Error executing command as another user` and
+  `Error creating textual authentication agent` are gone.
+- **Breaking:** messages are English only. The `Messages` table, the ten
+  translations and `detectLocale` are removed; the consumer is the coding agent.
+- **Breaking:** a refused command is no longer remembered. Retrying after a
+  dismissed dialog prompts again instead of being rejected by the plugin.
+- PATH interception is idempotent: prepending happens once, so stacked hooks do
+  not grow `PATH`.
+
+### Removed
+
+- `scanPrivileged` (the quote-, escape- and heredoc-aware lexical scanner) and
+  `findBadOption`.
+- The `deniedCommands` and `originalCommands` maps, along with the
+  `execute.after` result rewriting they supported.
+- The `translations` table for en, zh, ja, ko, de, fr, es, pt, ru, tr and uk.
+- The i18n section of the README, which now documents the exit-status contract
+  and the PATH shim's limits instead.

package/README.md

@@ -1,28 +1,31 @@
 # opencode-polkit
 
-Redirect `sudo`/`doas` to `pkexec` in [OpenCode](https://opencode.ai).
-Triggers the system's native polkit authentication dialog (KDE, GNOME, etc.)
-instead of requiring a terminal for password input.
+Redirects `sudo`, `doas` and `su -c` to `pkexec` inside OpenCode, so
+authorisation goes through the desktop's polkit agent (KDE, GNOME, …) instead of
+a terminal the shell tool does not have. Applies to commands run by the shell
+tool; `sudo` in other terminals is unchanged.
 
-Like CachyOS Hello, the plugin does not check for a polkit agent up front:
-`sudo` is always redirected to `pkexec` at execution time, and polkitd routes
-the request to whatever agent is currently registered. Without an agent,
-`pkexec` fails fast with `Error creating textual authentication agent`
-(no TTY); the plugin reports that as a clear denial. A hang (dialog never
-appears) is bounded by the shell tool's own timeout (default 2 min,
-configurable per call) and left untranslated — it cannot be told
-apart from a long-running command.
+## Scope
 
-Requires OpenCode >= 2.0 (the plugin uses the `@opencode/plugin` v2 API and
-is skipped by older versions).
+This plugin covers one category: **elevation → polkit**. It exists because the
+shell tool has no terminal, so any program that reads a password from `/dev/tty`
+fails there. `sudo`, `doas` and `su -c` are that category, and they are routed
+to `pkexec`, which asks the desktop's polkit agent instead.
 
-## Install
+Password prompts that are not polkit's business are out of scope: `ssh`,
+`ssh-add`, `gpg`/pinentry, keyrings (`secret-tool`, KWallet), database clients
+(`psql`, `mysql -p`, `redis-cli`), `kinit`, and disk encryption (`cryptsetup`,
+`fscrypt`, `gocryptfs`). They read the process's own terminal, so they need an
+askpass helper or a pseudo-terminal, not polkit; mixing them in would make this
+plugin's boundary meaningless.
+
+## Installation
 
 ```sh
 opencode plugin add opencode-polkit
 ```
 
-Or add to `opencode.json` / `~/.config/opencode/opencode.jsonc`:
+Or add it to `opencode.json` / `~/.config/opencode/opencode.jsonc`:
 
 ```json
 {
@@ -30,8 +33,7 @@ Or add to `opencode.json` / `~/.config/opencode/opencode.jsonc`:
 }
 ```
 
-For local development, build once (`npm run build` — the local entrypoint
-re-exports `dist/`) and point opencode at the project directory instead:
+For a local checkout, run `npm run build` once, then reference the directory:
 
 ```json
 {
@@ -41,51 +43,68 @@ re-exports `dist/`) and point opencode at the project directory instead:
 
 ## Behavior
 
-| Command               | result                                                |
-|-----------------------|-------------------------------------------------------|
-| `sudo xxx`            | redirects to `pkexec xxx`                             |
-| `doas xxx`            | redirects to `pkexec xxx`                             |
-| `sudo -n xxx`         | blocked: pkexec has no short options (unclear failure)|
-| `cat x \| sudo tee y` | redirects to `cat x \| pkexec tee y` (mid-command)    |
-| `pkexec xxx`          | passes through                                        |
-| `sudoedit` / `visudo` | blocked                                               |
-
-### Minimal intervention
-
-The command is rewritten **only** by replacing `sudo`/`doas` with
-`pkexec` — its shape is otherwise untouched, so the agent always sees a
-command that behaves like the one it wrote. Privilege keywords are found
-by a lexical scanner (quote/escape/heredoc aware): `sudo` inside string
-literals, comments or heredocs is ignored; `sudo` in any executable
-position (leading, after `&&`/`||`/`|`, in `$(...)` or subshells, after
-an env assignment like `FOO=1 sudo x`) is rewritten, while the same word
-in argument position (`--name sudo bash`) is left alone. `sudo a && sudo b`
-rewrites both.
-
-### Failures
-
-Unambiguous authentication failures are reported as clear errors and the
-command is remembered so a retry is rejected without prompting again
-(cleared when opencode restarts): `Not authorized`, `Error executing
-command as another user`, `Error creating textual authentication agent`
-(no polkit agent + no TTY). A hang (dialog never appears) is bounded by
-the shell tool's own timeout (default 2 min, configurable per call)
-and is left untranslated — it cannot be told apart from a long-running
-command.
-
-Options pkexec does not accept (all short options, plus any long option
-outside `--user`, `--keep-cwd`, `--disable-internal-agent`, `--help`,
-`--version`) are rejected before execution with a clear message, since
-the rewrite would otherwise surface pkexec's own confusing
-`Cannot run program -n` error. `sudo --` and options after the program
-name are left alone.
-
-## i18n
-
-Messages adapt to `$LC_MESSAGES` / `$LANG`. Currently supports:
-en, zh, ja, ko, de, fr, es, pt, ru, tr, uk.
-
-PRs welcome for additional translations.
+| Command                | Result                                      |
+|------------------------|---------------------------------------------|
+| `sudo apt install x`   | polkit dialog, then runs as root            |
+| `sudo -u bob …`        | as above, as `bob`                          |
+| `cat x \| sudo tee y`  | dialog for `tee`                            |
+| `sudo -n …`            | refused: pkexec has no non-interactive mode |
+| `sudo -i`, `-s`, `-b`  | refused, with the equivalent command        |
+| `sudoedit`, `visudo`   | refused, with the alternative               |
+| `su -c 'id'`           | dialog, then runs as root                   |
+| `su -c 'id' bob`       | as above, as `bob` (administrator password) |
+| `su`, `su -`, `su -l`  | refused: no interactive shell, no terminal  |
+| `su -m`, `-s`, `-g`, `-w`, `--pty` | refused, with the alternative   |
+| `pkexec …`             | passed through                              |
+
+Refused invocations exit with status 64 and one line naming the alternative.
+
+## How it works
+
+`sudo`, `doas` and `su` stand-ins are placed first on `PATH`, so the shell
+resolves those instead of the system binaries, and they forward the command to
+`pkexec`. Command text is never rewritten, so quoting, pipes and subshells need
+no special handling.
+
+## Authorisation
+
+`polkitd` decides whether a password is required. These commands always require
+one; other actions may not, according to policy. The plugin takes no part in
+that decision.
+
+`org.freedesktop.policykit.exec` asks for administrator authentication on every
+call, but the desktop agent may keep the password it just received and answer
+the next challenge itself (KDE's agent does). A second command in the same
+session then runs without a dialog. That cache belongs to the agent: another
+agent, a restarted agent or a dismissed dialog means the next command prompts
+again, so do not rely on it.
+
+## Limitations
+
+- Absolute paths (`/usr/bin/sudo`) and relative ones (`./sudo`) bypass `PATH`.
+- Commands that reset `PATH` (`env -i`, `PATH=/usr/bin …`) bypass it as well.
+- Programs that invoke `sudo` with a scrubbed environment bypass it.
+- `su -c … USER` authenticates an administrator (polkit), not `USER`, so an
+  account that real `su` would allow can be refused here.
+- `su -c` runs the command with `sh -c`, not with the target user's login shell.
+
+These bypass the redirect, not polkit, which still decides whether the command
+runs.
+
+## Requirements
+
+`polkit` and a registered authentication agent. Desktop environments start one;
+without one, `pkexec` fails instead of prompting.
+
+## Exit status
+
+| Status | Meaning                                      |
+|--------|----------------------------------------------|
+| 126    | the polkit dialog was dismissed              |
+| 127    | not authorised, or the program could not run |
+| 64     | the plugin refused the invocation            |
+
+Messages are in English.
 
 ## License
 

package/dist/index.d.ts

@@ -1,11 +1,10 @@
 import type { Plugin } from "@opencode/plugin";
 /**
- * OpenCode 2.0 requires a default export shaped `{ id, setup }` (the loader
- * rejects anything else). Deliberately a plain object with type-only imports:
- * the built plugin has zero runtime dependencies.
+ * OpenCode 2.0 requires a default export shaped `{ id, setup }`. Type-only
+ * imports keep the built plugin free of runtime dependencies.
  */
 declare const _default: {
     id: string;
-    setup: (ctx: Plugin.Context) => Promise<void>;
+    setup: (ctx: Plugin.Context) => Promise<Plugin.Cleanup>;
 };
 export default _default;

package/dist/index.js

@@ -1,334 +1,36 @@
-/** Long options pkexec accepts (all of them; pkexec has no short options). */
-const PKEXEC_OPTIONS = new Set([
-    "--version",
-    "--help",
-    "--disable-internal-agent",
-    "--keep-cwd",
-    "--user",
-]);
+import { installPolkitShims, removePolkitShims } from "./shims.js";
 /**
- * Lexical scan for privilege-escalation keywords OUTSIDE quotes.
- *
- * Shell commands may contain `sudo` anywhere a command starts (pipes,
- * `&&`/`||`, subshells, command substitution), and string literals /
- * comments may contain the same words spuriously. A plain regex cannot
- * tell those apart; this scanner tracks quote state (' " and backslash
- * escapes) and only reports keywords in executable position.
- *
- * - `node -e "…sudo…"`        → no hit (inside quotes)
- * - `cat x | sudo tee y`       → hit at index 8 (command boundary)
- * - `cd /tmp && sudo ./x`      → hit (after `&&`)
- * - `--name sudo bash`         → no hit (argument position)
- * - `echo x; # sudo y`         → no hit (comment)
+ * PATH used when the shell tool supplies none, mirroring a normal Linux host.
+ * Only the prepend matters; the rest is a last-resort fallback.
  */
-function scanPrivileged(command) {
-    const hits = [];
-    let inSingle = false;
-    let inDouble = false;
-    let escaped = false;
-    // True right after a command boundary (`;`, `&&`, `||`, `|`, `(`, start).
-    let atCommandStart = true;
-    // Heredoc delimiters waiting to close (stack; multiple << are legal).
-    const heredocs = [];
-    for (let i = 0; i < command.length; i++) {
-        const ch = command[i];
-        // Inside a heredoc body: only a line consisting of the delimiter ends
-        // it. Content there is a string literal, never a command. Pop the
-        // matching delimiter (nested heredocs close in any order).
-        if (heredocs.length > 0) {
-            const lineEnd = command.indexOf("\n", i);
-            const line = lineEnd === -1 ? command.slice(i) : command.slice(i, lineEnd);
-            const idx = heredocs.lastIndexOf(line);
-            if (idx !== -1) {
-                heredocs.splice(idx);
-                // The line after the delimiter starts a new command position.
-                atCommandStart = true;
-            }
-            i = lineEnd === -1 ? command.length : lineEnd;
-            continue;
-        }
-        if (escaped) {
-            escaped = false;
-            continue;
-        }
-        if (ch === "\\" && !inSingle) {
-            escaped = true;
-            continue;
-        }
-        if (ch === "'" && !inDouble) {
-            inSingle = !inSingle;
-            continue;
-        }
-        if (ch === '"' && !inDouble) {
-            inDouble = !inDouble;
-            continue;
-        }
-        if (inSingle || inDouble)
-            continue;
-        // Heredoc start: `<<[-]DELIM` (delim may be quoted or unquoted).
-        if (ch === "<" && command[i + 1] === "<") {
-            let j = i + 2;
-            if (command[j] === "-")
-                j++;
-            while (j < command.length && /\s/.test(command[j]))
-                j++;
-            if (j < command.length && (command[j] === "'" || command[j] === '"')) {
-                const q = command[j];
-                const end = command.indexOf(q, j + 1);
-                if (end !== -1) {
-                    heredocs.push(command.slice(j + 1, end));
-                    i = end;
-                    continue;
-                }
-            }
-            else {
-                const m = /^[^\s|;&<>()]+/.exec(command.slice(j));
-                if (m) {
-                    heredocs.push(m[0]);
-                    i = j + m[0].length - 1;
-                    continue;
-                }
-            }
-        }
-        // Command boundaries open a new executable position.
-        if (ch === ";" || ch === "|" || ch === "&" || ch === "(" || ch === "\n") {
-            atCommandStart = true;
-            continue;
-        }
-        // `#` at a word start begins a comment that runs to end of line.
-        if (ch === "#") {
-            const prev = command[i - 1] ?? "";
-            if (i === 0 || /\s/.test(prev) || /[;|&(]/.test(prev)) {
-                const nl = command.indexOf("\n", i);
-                i = nl === -1 ? command.length : nl;
-                continue;
-            }
-        }
-        if (/\s/.test(ch))
-            continue;
-        // An env assignment (`FOO=1 sudo x`) still starts a command; any other
-        // word in argument position (`--name sudo`) does not.
-        let isCommandPos = atCommandStart;
-        if (!isCommandPos) {
-            let j = i - 1;
-            while (j >= 0 && /\s/.test(command[j]))
-                j--;
-            while (j >= 0 && !/[\s;|&()]/.test(command[j]))
-                j--;
-            const token = command.slice(j + 1, i);
-            if (token.includes("="))
-                isCommandPos = true;
-        }
-        atCommandStart = false;
-        if (!isCommandPos)
-            continue;
-        for (const kw of ["sudoedit", "visudo", "sudo", "doas", "pkexec"]) {
-            if (command.startsWith(kw, i)) {
-                const next = command[i + kw.length] ?? "";
-                if (!/[-\/.\w]/.test(next)) {
-                    hits.push({ index: i, kw });
-                    i += kw.length - 1;
-                    break;
-                }
-            }
-        }
-    }
-    return hits;
-}
+const FALLBACK_PATH = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
 /**
- * First option token after a privilege keyword that pkexec does not
- * accept, or null when the command's options are pkexec-compatible.
- * Scanning stops at the program name (`--` also terminates options, as
- * in sudo); tokens after it belong to the program, not to pkexec.
+ * Redirects sudo/doas/su -c to pkexec without touching the command text.
+ *
+ * The shell tool spawns `$SHELL -c 'command'` with the environment built here,
+ * so putting the shims first on PATH lets the shell's own name resolution pick
+ * them up — `sudo`, `$(sudo …)`, `xargs sudo`, `FOO=1 sudo`, nested scripts.
+ * Nothing parses the command string, and nothing parses pkexec's output: the
+ * shims hand pkexec's exit status (126 dismissed, 127 not authorized) back to
+ * the caller unchanged.
  *
- * - `sudo -n true`             → `-n` (pkexec has no short options)
- * - `sudo --non-interactive x` → `--non-interactive`
- * - `sudo --user root x`       → null (compatible)
- * - `sudo -- x -n`             → null (`--` ends sudo options)
+ * The shell is non-interactive and non-login, so no profile rewrites PATH and
+ * no alias can shadow the shims.
  */
-function findBadOption(command, hit) {
-    let i = hit.index + hit.kw.length;
-    while (i < command.length && /\s/.test(command[i]))
-        i++;
-    while (i < command.length && command[i] === "-") {
-        let end = i + 1;
-        while (end < command.length && !/\s/.test(command[end]) && !/[;|&()]/.test(command[end]))
-            end++;
-        const token = command.slice(i, end);
-        if (token === "--")
-            break;
-        if (!token.startsWith("--"))
-            return token;
-        if (!PKEXEC_OPTIONS.has(token.split("=")[0]))
-            return token;
-        i = end;
-        while (i < command.length && /\s/.test(command[i]))
-            i++;
-    }
-    return null;
-}
-const translations = {
-    en: {
-        blocked: "Privilege escalation command blocked by plugin",
-        polkitDenied: "Polkit authentication denied by user",
-        badOption: 'Option "{opt}" is not supported by pkexec. Remove it or use a pkexec-compatible one (--user, --keep-cwd, --disable-internal-agent).',
-    },
-    zh: {
-        blocked: "权限提升命令已被插件拦截",
-        polkitDenied: "Polkit 认证已被用户拒绝",
-        badOption: '选项 "{opt}" 不被 pkexec 支持,请移除或改用 pkexec 兼容选项(--user、--keep-cwd、--disable-internal-agent)。',
-    },
-    ja: {
-        blocked: "特権昇格コマンドはプラグインによりブロックされました",
-        polkitDenied: "Polkit 認証がユーザーによって拒否されました",
-        badOption: 'オプション "{opt}" は pkexec ではサポートされていません。削除するか、pkexec 互換オプション(--user、--keep-cwd、--disable-internal-agent)を使用してください。',
-    },
-    ko: {
-        blocked: "권한 상승 명령이 플러그인에 의해 차단되었습니다",
-        polkitDenied: "Polkit 인증이 사용자에 의해 거부되었습니다",
-        badOption: '옵션 "{opt}"은(는) pkexec에서 지원되지 않습니다. 제거하거나 pkexec 호환 옵션(--user, --keep-cwd, --disable-internal-agent)을 사용하세요.',
-    },
-    de: {
-        blocked: "Berechtigungseskalation vom Plugin blockiert",
-        polkitDenied: "Polkit-Authentifizierung vom Benutzer abgelehnt",
-        badOption: 'Option "{opt}" wird von pkexec nicht unterstützt. Entfernen Sie sie oder verwenden Sie eine pkexec-kompatible Option (--user, --keep-cwd, --disable-internal-agent).',
-    },
-    fr: {
-        blocked: "Commande d'élévation de privilèges bloquée par le plugin",
-        polkitDenied: "Authentification polkit refusée par l'utilisateur",
-        badOption: 'Option "{opt}" non prise en charge par pkexec. Supprimez-la ou utilisez une option compatible pkexec (--user, --keep-cwd, --disable-internal-agent).',
-    },
-    es: {
-        blocked: "Comando de elevación de privilegios bloqueado por el plugin",
-        polkitDenied: "Autenticación polkit denegada por el usuario",
-        badOption: 'Opción "{opt}" no admitida por pkexec. Elimínela o use una opción compatible con pkexec (--user, --keep-cwd, --disable-internal-agent).',
-    },
-    pt: {
-        blocked: "Comando de elevação de privilégios bloqueado pelo plugin",
-        polkitDenied: "Autenticação polkit negada pelo usuário",
-        badOption: 'Opção "{opt}" não suportada pelo pkexec. Remova-a ou use uma opção compatível com pkexec (--user, --keep-cwd, --disable-internal-agent).',
-    },
-    ru: {
-        blocked: "Команда повышения привилегий заблокирована плагином",
-        polkitDenied: "Аутентификация polkit отклонена пользователем",
-        badOption: 'Параметр "{opt}" не поддерживается pkexec. Удалите его или используйте совместимый параметр (--user, --keep-cwd, --disable-internal-agent).',
-    },
-    tr: {
-        blocked: "Yetki yükseltme komutu eklenti tarafından engellendi",
-        polkitDenied: "Polkit kimlik doğrulaması kullanıcı tarafından reddedildi",
-        badOption: '"{opt}" seçeneği pkexec tarafından desteklenmiyor. Kaldırın veya pkexec uyumlu bir seçenek kullanın (--user, --keep-cwd, --disable-internal-agent).',
-    },
-    uk: {
-        blocked: "Команду підвищення привілеїв заблоковано плагіном",
-        polkitDenied: "Автентифікацію polkit відхилено користувачем",
-        badOption: 'Параметр "{opt}" не підтримується pkexec. Видаліть його або використайте сумісний параметр (--user, --keep-cwd, --disable-internal-agent).',
-    },
-};
-function detectLocale() {
-    const raw = process.env.LC_MESSAGES || process.env.LANG || "en";
-    const tag = raw.split(".")[0].replace(/_/g, "-").toLowerCase();
-    for (const prefix of ["zh", "ja", "ko", "de", "fr", "es", "pt", "ru", "tr", "uk"]) {
-        if (tag.startsWith(prefix))
-            return prefix;
-    }
-    return "en";
-}
-const MSG = translations[detectLocale()] ?? translations.en;
-/** The command string of a shell tool call, or "" for anything else. */
-function shellCommand(input) {
-    if (typeof input !== "object" || input === null)
-        return "";
-    const command = input.command;
-    return typeof command === "string" ? command : "";
-}
-/** Plain text of a tool result, whether content is a string or Content[]. */
-function resultText(result) {
-    const content = result.content;
-    if (typeof content === "string")
-        return content;
-    if (!Array.isArray(content))
-        return "";
-    return content
-        .map((part) => typeof part === "object" && part !== null && "type" in part && part.type === "text" && "text" in part
-        ? String(part.text)
-        : "")
-        .join("\n");
-}
 const setup = async (ctx) => {
-    const deniedCommands = new Set();
-    await ctx.tool.hook("execute.before", (event) => {
-        if (event.tool !== "shell")
-            return;
-        // Mutating the input object in place rewrites the executed command;
-        // core uses `event.input` after every hook has run.
-        const args = event.input;
-        const command = shellCommand(args);
-        const hits = scanPrivileged(command);
-        if (hits.length === 0)
-            return;
-        if (deniedCommands.has(command)) {
-            throw new Error(MSG.polkitDenied);
-        }
-        if (hits.some((h) => h.kw === "sudoedit" || h.kw === "visudo")) {
-            throw new Error(MSG.blocked);
-        }
-        // Rewrite would produce `pkexec <bad option>`: fail with a clear
-        // message instead of a confusing `Cannot run program` error.
-        for (const h of hits) {
-            if (h.kw === "sudo" || h.kw === "doas" || h.kw === "pkexec") {
-                const bad = findBadOption(command, h);
-                if (bad)
-                    throw new Error(MSG.badOption.replace("{opt}", bad));
-            }
-        }
-        // Already pkexec (leading or mid-command): pass through untouched.
-        if (hits.every((h) => h.kw === "pkexec"))
-            return;
-        // Rewrite every in-command sudo/doas to pkexec (back to front so
-        // indices stay valid): `cat x | sudo tee y` -> `cat x | pkexec tee y`.
-        // No other rewriting: the command keeps its exact shape so the agent
-        // sees only the minimal change (sudo -> pkexec).
-        let rewritten = command;
-        for (const h of [...hits].reverse()) {
-            if (h.kw === "sudo" || h.kw === "doas") {
-                rewritten = rewritten.slice(0, h.index) + "pkexec" + rewritten.slice(h.index + h.kw.length);
-            }
-        }
-        ;
-        args.command = rewritten;
-    });
-    await ctx.tool.hook("execute.after", (event) => {
-        if (event.tool !== "shell")
-            return;
-        // `event.input` is the (possibly rewritten) command the shell ran:
-        // map pkexec back to sudo to reconstruct the original for the deny list.
-        const command = shellCommand(event.input);
-        const hits = scanPrivileged(command);
-        if (hits.length === 0)
-            return;
-        let original = command;
-        for (const h of [...hits].reverse()) {
-            if (h.kw === "pkexec") {
-                original = original.slice(0, h.index) + "sudo" + original.slice(h.index + 6);
-            }
-        }
-        const text = event.status === "completed" ? resultText(event.result) : event.status === "error" ? event.error.message : "";
-        // Only unambiguous authentication failures are reported and deny
-        // listed. A hang (dialog never appears) is bounded by the shell tool's
-        // own timeout (default 2 min) and is NOT translated here: it cannot
-        // be told apart from a long-running command.
-        if (/\bNot authorized\b/.test(text) ||
-            /\bError executing command as another user\b/.test(text) ||
-            /\bError creating textual authentication agent\b/.test(text)) {
-            deniedCommands.add(original);
-            throw new Error(MSG.polkitDenied);
-        }
+    const shimDir = installPolkitShims();
+    const prefix = `${shimDir}:`;
+    // Hooks stack across plugin loads; prepending once keeps PATH duplicate-free.
+    await ctx.shell.hook("create.before", (event) => {
+        const path = event.env.PATH || FALLBACK_PATH;
+        if (!path.startsWith(prefix))
+            event.env.PATH = prefix + path;
     });
+    return () => removePolkitShims(shimDir);
 };
 /**
- * OpenCode 2.0 requires a default export shaped `{ id, setup }` (the loader
- * rejects anything else). Deliberately a plain object with type-only imports:
- * the built plugin has zero runtime dependencies.
+ * OpenCode 2.0 requires a default export shaped `{ id, setup }`. Type-only
+ * imports keep the built plugin free of runtime dependencies.
  */
 export default { id: "opencode-polkit", setup };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,8EAA8E;AAC9E,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,QAAQ;IACR,0BAA0B;IAC1B,YAAY;IACZ,QAAQ;CACT,CAAC,CAAA;AAEF;;;;;;;;;;;;;;GAcG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,IAAI,GAAU,EAAE,CAAA;IACtB,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,0EAA0E;IAC1E,IAAI,cAAc,GAAG,IAAI,CAAA;IACzB,sEAAsE;IACtE,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QAErB,sEAAsE;QACtE,kEAAkE;QAClE,2DAA2D;QAC3D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YACxC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YAC1E,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;YACtC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACpB,8DAA8D;gBAC9D,cAAc,GAAG,IAAI,CAAA;YACvB,CAAC;YACD,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;YAC7C,SAAQ;QACV,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,GAAG,KAAK,CAAA;YACf,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAA;YACd,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,QAAQ,GAAG,CAAC,QAAQ,CAAA;YACpB,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,QAAQ,GAAG,CAAC,QAAQ,CAAA;YACpB,SAAQ;QACV,CAAC;QACD,IAAI,QAAQ,IAAI,QAAQ;YAAE,SAAQ;QAElC,iEAAiE;QACjE,IAAI,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACb,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAA;YAC3B,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAA;YACvD,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBACrE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;gBACpB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;gBACrC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;oBACf,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;oBACxC,CAAC,GAAG,GAAG,CAAA;oBACP,SAAQ;gBACV,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;gBACjD,IAAI,CAAC,EAAE,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;oBACnB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;oBACvB,SAAQ;gBACV,CAAC;YACH,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACxE,cAAc,GAAG,IAAI,CAAA;YACrB,SAAQ;QACV,CAAC;QAED,iEAAiE;QACjE,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YACjC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;gBACnC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;gBACnC,SAAQ;YACV,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,SAAQ;QAE3B,uEAAuE;QACvE,sDAAsD;QACtD,IAAI,YAAY,GAAG,cAAc,CAAA;QACjC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACb,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAA;YAC3C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAA;YACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,YAAY,GAAG,IAAI,CAAA;QAC9C,CAAC;QACD,cAAc,GAAG,KAAK,CAAA;QAEtB,IAAI,CAAC,YAAY;YAAE,SAAQ;QAE3B,KAAK,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE,CAAC;YAC3E,IAAI,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;gBACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3B,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;oBAC3B,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;oBAClB,MAAK;gBACP,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,GAAQ;IAC9C,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAAA;IACjC,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAE,CAAC,EAAE,CAAA;IACvD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAChD,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;QACf,OAAO,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAAE,GAAG,EAAE,CAAA;QAC/F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACnC,IAAI,KAAK,KAAK,IAAI;YAAE,MAAK;QACzB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACzC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QAC1D,CAAC,GAAG,GAAG,CAAA;QACP,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAAE,CAAC,EAAE,CAAA;IACzD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAQD,MAAM,YAAY,GAA6B;IAC7C,EAAE,EAAE;QACF,OAAO,EAAE,gDAAgD;QACzD,YAAY,EAAE,sCAAsC;QACpD,SAAS,EACP,qIAAqI;KACxI;IACD,EAAE,EAAE;QACF,OAAO,EAAE,cAAc;QACvB,YAAY,EAAE,iBAAiB;QAC/B,SAAS,EACP,yFAAyF;KAC5F;IACD,EAAE,EAAE;QACF,OAAO,EAAE,4BAA4B;QACrC,YAAY,EAAE,2BAA2B;QACzC,SAAS,EACP,iHAAiH;KACpH;IACD,EAAE,EAAE;QACF,OAAO,EAAE,4BAA4B;QACrC,YAAY,EAAE,4BAA4B;QAC1C,SAAS,EACP,6GAA6G;KAChH;IACD,EAAE,EAAE;QACF,OAAO,EAAE,8CAA8C;QACvD,YAAY,EAAE,iDAAiD;QAC/D,SAAS,EACP,sKAAsK;KACzK;IACD,EAAE,EAAE;QACF,OAAO,EAAE,0DAA0D;QACnE,YAAY,EAAE,mDAAmD;QACjE,SAAS,EACP,sJAAsJ;KACzJ;IACD,EAAE,EAAE;QACF,OAAO,EAAE,6DAA6D;QACtE,YAAY,EAAE,8CAA8C;QAC5D,SAAS,EACP,yIAAyI;KAC5I;IACD,EAAE,EAAE;QACF,OAAO,EAAE,0DAA0D;QACnE,YAAY,EAAE,yCAAyC;QACvD,SAAS,EACP,0IAA0I;KAC7I;IACD,EAAE,EAAE;QACF,OAAO,EAAE,qDAAqD;QAC9D,YAAY,EAAE,+CAA+C;QAC7D,SAAS,EACP,6IAA6I;KAChJ;IACD,EAAE,EAAE;QACF,OAAO,EAAE,sDAAsD;QAC/D,YAAY,EAAE,2DAA2D;QACzE,SAAS,EACP,qJAAqJ;KACxJ;IACD,EAAE,EAAE;QACF,OAAO,EAAE,mDAAmD;QAC5D,YAAY,EAAE,8CAA8C;QAC5D,SAAS,EACP,4IAA4I;KAC/I;CACF,CAAA;AAED,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAA;IAC/D,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC9D,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAClF,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAA;IAC3C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,GAAG,GAAa,YAAY,CAAC,YAAY,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,CAAA;AAKrE,wEAAwE;AACxE,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC1D,MAAM,OAAO,GAAI,KAAoB,CAAC,OAAO,CAAA;IAC7C,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;AACnD,CAAC;AAED,6EAA6E;AAC7E,SAAS,UAAU,CAAC,MAAsC;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAA;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAA;IACtC,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,IAAI,IAAI;QACnG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC,CAAC,EAAE,CACP;SACA,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,MAAM,KAAK,GAAG,KAAK,EAAE,GAAmB,EAAiB,EAAE;IACzD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAA;IAExC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE;QAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAM;QAClC,oEAAoE;QACpE,oDAAoD;QACpD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAA;QACxB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAE7B,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QACnC,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC9B,CAAC;QAED,iEAAiE;QACjE,6DAA6D;QAC7D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC5D,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;gBACrC,IAAI,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;YAC/D,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;YAAE,OAAM;QAEhD,iEAAiE;QACjE,uEAAuE;QACvE,qEAAqE;QACrE,iDAAiD;QACjD,IAAI,SAAS,GAAG,OAAO,CAAA;QACvB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;gBACvC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAA;YAC7F,CAAC;QACH,CAAC;QAED,CAAC;QAAC,IAA6B,CAAC,OAAO,GAAG,SAAS,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE;QAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAM;QAClC,mEAAmE;QACnE,yEAAyE;QACzE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAE7B,IAAI,QAAQ,GAAG,OAAO,CAAA;QACtB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACtB,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;QAE/G,iEAAiE;QACjE,uEAAuE;QACvE,oEAAoE;QACpE,6CAA6C;QAC7C,IACE,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC;YACxD,iDAAiD,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5D,CAAC;YACD,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QACnC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;;;GAIG;AACH,eAAe,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAA0B,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAElE;;;GAGG;AACH,MAAM,aAAa,GAAG,8DAA8D,CAAA;AAEpF;;;;;;;;;;;;GAYG;AACH,MAAM,KAAK,GAAG,KAAK,EAAE,GAAmB,EAA2B,EAAE;IACnE,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAA;IACpC,MAAM,MAAM,GAAG,GAAG,OAAO,GAAG,CAAA;IAE5B,8EAA8E;IAC9E,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,aAAa,CAAA;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;AACzC,CAAC,CAAA;AAED;;;GAGG;AACH,eAAe,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAA0B,CAAA"}

package/dist/shims.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Exit status every shim uses for an invocation pkexec cannot express
+ * (EX_USAGE). Distinct from pkexec's own 126 (dismissed) and 127 (not
+ * authorized or failed) so callers can tell the two apart without reading
+ * any output.
+ */
+export declare const SHIM_USAGE_EXIT = 64;
+/**
+ * Writes the shim scripts into a fresh private directory and returns it.
+ * The caller prepends this directory to PATH; the shell then resolves
+ * `sudo`/`doas`/`su` to these files instead of the system ones. The directory
+ * is 0700 so no other local user can rewrite the scripts.
+ */
+export declare function installPolkitShims(): string;
+/** Deletes a directory created by installPolkitShims. */
+export declare function removePolkitShims(directory: string): void;

package/dist/shims.js

@@ -0,0 +1,325 @@
+import { chmodSync, existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { isAbsolute, join } from "node:path";
+/**
+ * Exit status every shim uses for an invocation pkexec cannot express
+ * (EX_USAGE). Distinct from pkexec's own 126 (dismissed) and 127 (not
+ * authorized or failed) so callers can tell the two apart without reading
+ * any output.
+ */
+export const SHIM_USAGE_EXIT = 64;
+/**
+ * The sudo shim. Lives on PATH ahead of the real sudo, so the shell — not
+ * this plugin — decides that `sudo` means this file. It forwards to pkexec
+ * and never parses what pkexec prints: the exit status is the whole result.
+ *
+ * Only options with an exact pkexec equivalent are translated. Everything
+ * else is refused with an actionable message rather than forwarded, because
+ * pkexec would reject it with a message that does not say what to do instead.
+ */
+const SUDO_SHIM = `#!/bin/sh
+# opencode-polkit: sudo shim. Routes sudo to pkexec so polkit can authorize it.
+# Generated at plugin startup; do not edit.
+
+fail() {
+	printf 'opencode-polkit: %s\\n' "$1" >&2
+	exit ${SHIM_USAGE_EXIT}
+}
+
+command -v pkexec >/dev/null 2>&1 || fail 'pkexec is not installed; install polkit'
+
+user=
+while [ $# -gt 0 ]; do
+	case $1 in
+	--)
+		shift
+		break
+		;;
+	-u)
+		[ $# -ge 2 ] || fail 'sudo -u needs a username: -u USER PROGRAM'
+		user=$2
+		shift 2
+		;;
+	--user)
+		[ $# -ge 2 ] || fail 'sudo --user needs a username: --user USER PROGRAM'
+		user=$2
+		shift 2
+		;;
+	-u?*)
+		user=\${1#-u}
+		[ -n "$user" ] || fail 'sudo -u needs a username: -u USER PROGRAM'
+		shift
+		;;
+	--user=*)
+		user=\${1#--user=}
+		[ -n "$user" ] || fail 'sudo --user needs a username: --user USER PROGRAM'
+		shift
+		;;
+	-n | --non-interactive)
+		fail 'sudo -n is not supported: pkexec has no non-interactive mode, polkit decides whether authentication is needed. Drop -n.'
+		;;
+	-v | --validate | -k | --reset-timestamp | -K | --remove-timestamp)
+		fail 'sudo credential caching does not exist under polkit; drop -v/-k.'
+		;;
+	-l | --list)
+		fail 'sudo -l is not available under polkit; inspect policy with pkaction --verbose.'
+		;;
+	-e | --edit)
+		fail 'sudoedit is not supported; write a temp file and run pkexec install or pkexec cp on it.'
+		;;
+	-i | --login | -s | --shell)
+		fail 'sudo -i/-s opens a login shell; run pkexec bash instead.'
+		;;
+	-S | --stdin)
+		fail 'sudo -S reads the password from stdin; pkexec authenticates through the polkit agent. Drop -S.'
+		;;
+	-A | --askpass)
+		fail 'SUDO_ASKPASS does not apply to pkexec; drop -A.'
+		;;
+	-b | --background)
+		fail 'sudo -b backgrounds the command; append & instead.'
+		;;
+	-E | --preserve-env | --preserve-env=* | -H | --set-home | -P | --preserve-groups | -N | --no-update)
+		fail 'pkexec deliberately sanitizes the environment; drop -E/-H/-P.'
+		;;
+	-?*)
+		fail "option has no pkexec equivalent: $1 (pkexec accepts --user, --keep-cwd, --disable-internal-agent)"
+		;;
+	*)
+		break
+		;;
+	esac
+done
+
+# pkexec is silent when the dialog is dismissed (status 126), so say what the
+# status means. Every other failure path already prints its own reason.
+run_pkexec() {
+	pkexec "$@"
+	status=$?
+	if [ $status -eq 126 ]; then
+		printf 'opencode-polkit: %s\n' 'the polkit authentication dialog was dismissed' >&2
+	fi
+	exit $status
+}
+
+if [ -n "$user" ]; then
+	run_pkexec --user "$user" "$@"
+fi
+run_pkexec "$@"
+`;
+/** The doas shim: same contract, doas option grammar. */
+const DOAS_SHIM = `#!/bin/sh
+# opencode-polkit: doas shim. Routes doas to pkexec so polkit can authorize it.
+# Generated at plugin startup; do not edit.
+
+fail() {
+	printf 'opencode-polkit: %s\\n' "$1" >&2
+	exit ${SHIM_USAGE_EXIT}
+}
+
+command -v pkexec >/dev/null 2>&1 || fail 'pkexec is not installed; install polkit'
+
+user=
+while [ $# -gt 0 ]; do
+	case $1 in
+	--)
+		shift
+		break
+		;;
+	-u)
+		[ $# -ge 2 ] || fail 'doas -u needs a username: -u USER PROGRAM'
+		user=$2
+		shift 2
+		;;
+	-u?*)
+		user=\${1#-u}
+		[ -n "$user" ] || fail 'doas -u needs a username: -u USER PROGRAM'
+		shift
+		;;
+	-n)
+		fail 'doas -n is not supported: pkexec has no non-interactive mode. Drop -n.'
+		;;
+	-s)
+		fail 'doas -s opens a shell; run pkexec bash instead.'
+		;;
+	-C | -a | -L)
+		fail "option has no pkexec equivalent: $1"
+		;;
+	-?*)
+		fail "unknown doas option: $1"
+		;;
+	*)
+		break
+		;;
+	esac
+done
+
+# pkexec is silent when the dialog is dismissed (status 126), so say what the
+# status means. Every other failure path already prints its own reason.
+run_pkexec() {
+	pkexec "$@"
+	status=$?
+	if [ $status -eq 126 ]; then
+		printf 'opencode-polkit: %s\n' 'the polkit authentication dialog was dismissed' >&2
+	fi
+	exit $status
+}
+
+if [ -n "$user" ]; then
+	run_pkexec --user "$user" "$@"
+fi
+run_pkexec "$@"
+`;
+/**
+ * The su shim. `su -c` is the only form pkexec can express exactly: a command
+ * run as the target user through a shell, in the current directory. Every
+ * other form asks for a login shell, an environment, a shell binary, a group
+ * or a terminal, none of which pkexec can honour, so it is refused instead.
+ */
+const SU_SHIM = `#!/bin/sh
+# opencode-polkit: su shim. Routes su -c to pkexec so polkit can authorize it.
+# Generated at plugin startup; do not edit.
+
+fail() {
+	printf 'opencode-polkit: %s\\n' "$1" >&2
+	exit ${SHIM_USAGE_EXIT}
+}
+
+command -v pkexec >/dev/null 2>&1 || fail 'pkexec is not installed; install polkit'
+
+user=
+cmd=
+has_cmd=
+while [ $# -gt 0 ]; do
+	case $1 in
+	--)
+		shift
+		break
+		;;
+	-c)
+		[ $# -ge 2 ] || fail 'su -c needs a command: su -c COMMAND [USER]'
+		cmd=$2
+		has_cmd=1
+		shift 2
+		;;
+	-c?*)
+		cmd=\${1#-c}
+		has_cmd=1
+		shift
+		;;
+	--command)
+		[ $# -ge 2 ] || fail 'su --command needs a command: su --command COMMAND [USER]'
+		cmd=$2
+		has_cmd=1
+		shift 2
+		;;
+	--command=*)
+		cmd=\${1#--command=}
+		has_cmd=1
+		shift
+		;;
+	- | -l | --login)
+		fail 'su starts a login shell; run pkexec bash instead.'
+		;;
+	-s | --shell | -s?* | --shell=*)
+		fail 'su -s picks the shell; name the shell in the command: pkexec sh -c ...'
+		;;
+	-m | -p | --preserve-environment)
+		fail 'pkexec deliberately sanitizes the environment; drop -m/-p.'
+		;;
+	-g | -G | --group | --supp-group | -g?* | -G?* | --group=* | --supp-group=*)
+		fail 'su -g/-G switches groups; pkexec can only switch users.'
+		;;
+	-w | --whitelist-environment | -w?* | --whitelist-environment=*)
+		fail 'su -w whitelists environment variables; pkexec sanitizes the environment.'
+		;;
+	-P | --pty)
+		fail 'su --pty asks for a terminal; the shell tool has none.'
+		;;
+	-f | --fast)
+		fail 'su -f is a shell flag; pass it to the shell in the command instead.'
+		;;
+	--session-command | --session-command=*)
+		fail 'su --session-command keeps the session; pkexec always starts a new process.'
+		;;
+	-h | --help | -V | --version)
+		fail "option has no pkexec equivalent: $1"
+		;;
+	-?*)
+		fail "unknown su option: $1"
+		;;
+	*)
+		[ -z "$user" ] || fail 'su passes arguments after the user name to the shell; use su -c COMMAND USER.'
+		user=$1
+		shift
+		;;
+	esac
+done
+
+# Operands after -- are the same user-then-nothing sequence.
+while [ $# -gt 0 ]; do
+	[ -z "$user" ] || fail 'su passes arguments after the user name to the shell; use su -c COMMAND USER.'
+	user=$1
+	shift
+done
+
+[ -n "$user" ] || user=root
+[ -n "$has_cmd" ] || fail 'su without -c opens an interactive shell; run pkexec bash instead.'
+
+# su keeps the working directory unless it is a login shell, and --keep-cwd is
+# how pkexec does the same. pkexec is silent when the dialog is dismissed
+# (status 126), so say what the status means.
+pkexec --keep-cwd --user "$user" sh -c "$cmd"
+status=$?
+if [ $status -eq 126 ]; then
+	printf 'opencode-polkit: %s\\n' 'the polkit authentication dialog was dismissed' >&2
+fi
+exit $status
+`;
+/** sudoedit edits through sudo's own temporary-file flow; polkit has none. */
+const SUDOEDIT_SHIM = `#!/bin/sh
+printf 'opencode-polkit: sudoedit is not supported; write a temp file and run pkexec install or pkexec cp on it.\\n' >&2
+exit ${SHIM_USAGE_EXIT}
+`;
+/** visudo needs an interactive editor on a terminal the shell tool does not have. */
+const VISUDO_SHIM = `#!/bin/sh
+printf 'opencode-polkit: visudo needs an interactive terminal; validate a candidate file with pkexec visudo -c -f FILE instead.\\n' >&2
+exit ${SHIM_USAGE_EXIT}
+`;
+/** File name → script body. Names must match the commands being redirected. */
+const POLKIT_SHIM_SCRIPTS = {
+    sudo: SUDO_SHIM,
+    doas: DOAS_SHIM,
+    su: SU_SHIM,
+    sudoedit: SUDOEDIT_SHIM,
+    visudo: VISUDO_SHIM,
+};
+/**
+ * Writes the shim scripts into a fresh private directory and returns it.
+ * The caller prepends this directory to PATH; the shell then resolves
+ * `sudo`/`doas`/`su` to these files instead of the system ones. The directory
+ * is 0700 so no other local user can rewrite the scripts.
+ */
+export function installPolkitShims() {
+    const directory = mkdtempSync(join(shimBaseDirectory(), "opencode-polkit-"));
+    for (const [name, script] of Object.entries(POLKIT_SHIM_SCRIPTS)) {
+        const file = join(directory, name);
+        writeFileSync(file, script);
+        // writeFileSync's mode is filtered by umask, so set it explicitly.
+        chmodSync(file, 0o755);
+    }
+    return directory;
+}
+/**
+ * Where shim directories live. Prefers the login session's runtime directory,
+ * which the system clears on logout, over /tmp which keeps leftovers.
+ */
+function shimBaseDirectory() {
+    const runtime = process.env.XDG_RUNTIME_DIR;
+    return runtime && isAbsolute(runtime) && existsSync(runtime) ? runtime : tmpdir();
+}
+/** Deletes a directory created by installPolkitShims. */
+export function removePolkitShims(directory) {
+    rmSync(directory, { recursive: true, force: true });
+}
+//# sourceMappingURL=shims.js.map

package/dist/shims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shims.js","sourceRoot":"","sources":["../src/shims.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACnF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAA;AAEjC;;;;;;;;GAQG;AACH,MAAM,SAAS,GAAG;;;;;;QAMV,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmFtB,CAAA;AAED,yDAAyD;AACzD,MAAM,SAAS,GAAG;;;;;;QAMV,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDtB,CAAA;AAED;;;;;GAKG;AACH,MAAM,OAAO,GAAG;;;;;;QAMR,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6FtB,CAAA;AAED,8EAA8E;AAC9E,MAAM,aAAa,GAAG;;OAEf,eAAe;CACrB,CAAA;AAED,qFAAqF;AACrF,MAAM,WAAW,GAAG;;OAEb,eAAe;CACrB,CAAA;AAED,+EAA+E;AAC/E,MAAM,mBAAmB,GAA2B;IAClD,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,EAAE,EAAE,OAAO;IACX,QAAQ,EAAE,aAAa;IACvB,MAAM,EAAE,WAAW;CACpB,CAAA;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAC5E,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAClC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC3B,mEAAmE;QACnE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;IAC3C,OAAO,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AACnF,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AACrD,CAAC"}

package/index.js

@@ -1,6 +1,6 @@
-// Local-directory entrypoint for OpenCode 2.0: the loader resolves a plugin
-// directory by looking for `server`/`index` at its root (package.json "main"
-// and "exports" are only consulted for npm package names). npm installs reach
-// the real build through package.json "exports"; this shim covers
-// `"plugins": ["/path/to/opencode-polkit"]`.
+// Local-directory entrypoint for OpenCode: OpenCode 2.2 also resolves a
+// directory through a named package.json and its "exports", but older 2.0
+// releases only look for `server`/`index` at the root. npm installs reach the
+// real build through package.json "exports"; this shim keeps
+// `"plugins": ["/path/to/opencode-polkit"]` working on both.
 export { default } from "./dist/index.js"

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "opencode-polkit",
-  "version": "0.2.0",
-  "description": "Redirect sudo/doas to pkexec in OpenCode — uses system polkit agent for native auth dialogs",
+  "version": "0.3.1",
+  "description": "Redirect sudo, doas and su to pkexec in OpenCode via PATH shims, so the system polkit agent handles authentication",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -15,6 +15,7 @@
     "dist",
     "index.js",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "scripts": {
@@ -22,10 +23,10 @@
     "check": "tsc -p tsconfig.json --noEmit"
   },
   "engines": {
-    "opencode": ">=2.0.0"
+    "opencode": ">=2.0.29"
   },
   "peerDependencies": {
-    "@opencode/plugin": ">=2.0.0"
+    "@opencode/plugin": ">=2.0.29"
   },
   "peerDependenciesMeta": {
     "@opencode/plugin": {
@@ -33,11 +34,11 @@
     }
   },
   "devDependencies": {
-    "@opencode/plugin": "^2.0.12",
+    "@opencode/plugin": "^2.2.5",
     "@types/node": "^24.0.0",
     "typescript": "^5.5.0"
   },
-  "keywords": ["opencode-plugin", "sudo", "pkexec", "polkit", "security"],
+  "keywords": ["opencode-plugin", "sudo", "doas", "su", "pkexec", "polkit", "security"],
   "license": "MIT",
   "repository": {
     "type": "git",