opencode-raven 2.1.5 → 2.1.6

package/CHANGELOG.md

@@ -0,0 +1,214 @@
+# Changelog
+
+## 2.1.6
+
+### Added
+- Bun-based TypeScript verification and reproducible development dependencies.
+
+### Changed
+- On-demand MCP requests now propagate cancellation and SDK-native timeouts, reuse one in-flight connection per session/server, and close idle or deleted-session connections.
+- README structure and wording now focus on installation, usage, configuration, routing, security, and troubleshooting.
+- Removed legacy root-config and embedded MCP-metadata migration support.
+
+### Fixed
+- Quoted `cmd`, PowerShell, and Unix shell search commands can no longer bypass Raven routing.
+- Session event handling now follows the OpenCode SDK event shape.
+- Raven receives configured on-demand MCP guidance while startup health checks are pending.
+- Invalid timeout and stats values are normalized safely.
+
+## 2.1.5
+
+### Changed
+- **On-demand MCP guidance** — autogenerated guidance now preserves existing MCP order and appends newly loaded MCPs at the end.
+- **Guidance descriptions** — full-mode on-demand MCP guidance now keeps generated metadata intact while rendering only first-sentence descriptions to reduce main-model context.
+
+## 2.1.4
+
+### Changed
+- **Subagent prompts** — Raven no longer injects routing guidance into subagent prompts; global instructions and tool enforcement handle routing.
+
+## 2.1.3
+
+### Changed
+- **Default timeout** — Raven's default timeout is now 600s.
+- **Provider errors** — `raven_seek` now reports Raven provider/API retry failures and no-initial-response startup failures quickly instead of waiting for the full timeout.
+- **Raven recovery** — after a Raven provider failure, routed tools stop redirecting to `raven_seek` and tell the user how to switch Raven's model.
+
+## 2.1.2
+
+### Fixed
+- **Local MCP TUI output** — local on-demand MCP stderr is now piped and drained so server logs do not overlay the OpenCode TUI during startup checks or Raven MCP calls.
+
+### Changed
+- **OpenCode-style MCP config** — on-demand MCPs now accept OpenCode-style `local` and `remote` entries, including local `command` arrays, `environment`, per-server `timeout`, and `enabled` flags.
+
+## 2.1.1
+
+### Changed
+- **Context unit formatting** — context estimates now switch from `K` to `M` after one million tokens for easier reading.
+- **Loaded-only MCP guidance** — autogenerated on-demand MCP guidance now includes only successfully loaded MCPs, keeping failed or pending servers out of main-agent instructions.
+- **Startup guidance refresh** — Raven now preserves existing autogenerated on-demand MCP guidance during startup and rewrites it only after MCP health checks update.
+
+## 2.1.0
+
+### Added
+- **On-Demand MCPs** — Raven can now connect to MCP servers from `onDemandMcpServers` internally through Raven-only `raven_mcp`, keeping full MCP schemas out of the main OpenCode session.
+- **Remote and stdio MCP support** — on-demand MCPs support remote HTTP/SSE servers and local stdio servers.
+- **On-demand MCP metadata** — Raven fills missing `autoGeneratedDescription` and `autoGeneratedTools`, with `/raven mcp refresh [server]` and `/raven mcp detail full|minimized` commands.
+- **Avoided MCP schema stats** — `/raven stats` now shows `Avoided MCP schema load` separately from delegated session and all-time savings.
+- **MCP failure notifications** — Raven shows a warning toast after startup or manual refresh when on-demand MCPs fail to load.
+- **Duplicate MCP warnings** — Raven warns when the same MCP server name is configured globally in OpenCode and in `onDemandMcpServers`.
+- **Help command** — `/raven help` now lists all Raven commands.
+
+### Changed
+- **Bundled MCP defaults** — Context7, Exa, and Grep.app now default to on-demand MCP entries instead of global OpenCode MCP injection.
+- **Global MCP routing** — global MCPs configured in OpenCode are now auto-routed by detected server name, so `routeMcpServers` is no longer user-facing config.
+- **Raven prompt/guidance** — guidance now distinguishes globally configured MCPs from on-demand MCPs and teaches Raven to use `raven_mcp` internally.
+- **Global Raven files** — Raven now stores global files under `~/.config/opencode/opencode-raven/`, with generated on-demand MCP metadata split out of `raven-config.json` into `autogenerated-on-demand-mcp-metadata.json`.
+- **Loaded-only schema stats** — failed or pending on-demand MCPs no longer count toward `Avoided MCP schema load`.
+- **On-demand MCP health** — `/raven` and `/raven mcp` now show loaded, failed, and pending MCPs based on current-run connection checks instead of stale generated metadata.
+- **Shorter status output** — `/raven` now points to `/raven help` instead of printing the full command list inline.
+- **Clearer routing labels** — `/raven` now distinguishes routed global MCPs from on-demand MCPs, which are always behind Raven.
+- **Default routed tools** — `websearch` is routed by default because it is a built-in OpenCode search tool.
+
+## 2.0.1
+
+### Added
+- **Keyword tool routing** — `routeToolKeywords` and `/raven route keyword ...` route tools whose names contain a configured keyword, catching suffix-style MCP names like `web_search_exa`.
+
+### Changed
+- **Stats formula** — context saved now uses a balanced estimate: final Raven session tokens minus the first assistant turn's input/cache baseline, then minus the compact answer returned. This counts tool/web/MCP result context while avoiding Raven prompt/tool-schema overhead.
+
+## 2.0.0
+
+### Added
+- **Configurable tool/MCP routing** — Raven can now route arbitrary tools or MCP server prefixes through `raven_seek` using `routeTools`, `routeMcpServers`, or `/raven route ...` commands.
+- **Bundled MCP toggle** — `raven-config.json` now includes `allowBundledMCPServers` to enable or disable Raven's bundled Context7, Exa, and Grep.app MCP defaults while preserving any existing `opencode.jsonc` MCP settings.
+- **Custom Raven instructions** — `ravenInstructions` lets users append extra Raven-only prompt guidance for custom MCPs without editing package files.
+
+### Changed
+- **Hard rerouting, not soft guidance** — Raven is now documented and configured as a hard tool/MCP blocker-rerouter. Configured tools are blocked for non-Raven agents and must go through `raven_seek`.
+- **Generalized beyond search** — Raven still defaults to search/fetch/docs/GitHub routing, but can route any MCP whose opencode tool names share a prefix.
+- **Config migration** — default routed tools/MCP server prefixes are added to `raven-config.json` only when those fields are missing, so user removals stay removed.
+- **Bash routing visibility** — search-like bash command routing is now controlled by `bash` in `routeTools`. Remove `bash` to allow commands like `rg`, `Get-ChildItem -Recurse`, and `dir /s` directly.
+- **Default routing cleanup** — removed `websearch` from default routed tools/MCP prefixes. Users who need it can add it manually with `/raven route tool add websearch` or `/raven route mcp add websearch`.
+- **Compact reroute errors** — blocked MCP/tool calls now strip null and empty args before showing the `raven_seek` retry hint, reducing failed-call context noise.
+
+## 1.2.8
+
+### Fixed
+- **Accurate context saved stats** — `/raven stats` now reflects actual model token usage from `session.messages()` (last assistant message tokens × 4), not string output length. Both `raven_seek` and direct `@Raven` use the same formula: `totalSessionTokens × 4 − prompt − output`.
+
+### Changed
+- **`/raven` output** — now includes `Raven context saved` section with session and all-time totals.
+- **`/raven stats` output** — renamed from "context processed" to "context saved" with clearer labeling.
+
+## 1.2.7
+
+### Changed
+- **More reliable update notifications** — startup update toasts are now shown from the event hook after the TUI event stream is active instead of during config loading.
+- **`/raven` default output** — now shows the loaded Raven package version and npm update availability.
+
+## 1.2.6
+
+### Fixed
+- **Piped bash output filters** — commands like `command | grep ...`, `command | rg ...`, `command | findstr ...`, and `command | head ...` are now allowed as bounded output filters instead of being rerouted to Raven.
+- **Raven recursion prevention** — `raven_seek` is denied inside the Raven agent so Raven cannot recursively call its own wrapper tool.
+- **Model recovery after blocked tools** — blocked tool errors now provide a short direct `raven_seek(query="...")` next-call hint using the attempted query/args.
+- **Bash false positives** — narrowed recursive/listing detection (`ls -r`, plain `cmd /c dir`, simple `Get-ChildItem`, comments, and bash descriptions no longer trigger blocking).
+
+### Changed
+- **Bash search detection** — Raven still blocks primary discovery commands like `rg "foo" .`, `grep -R`, `find . -name`, `dir /s`, and `Get-ChildItem -Recurse`, but no longer treats simple pipeline filtering as a Raven-worthy search.
+- **Raven guidance** — `raven_seek` is described as the primary search/fetch/inspection tool, with explicit URL and command-output inspection support.
+- **MCP defaults** — Context7/Exa/Grep.app defaults now merge with existing user MCP config instead of overwriting custom headers, URLs, or disabled state.
+
+## 1.2.5
+
+### Added
+- **`/raven update`** — checks npm for a newer Raven version, clears opencode's cached Raven plugin package when needed, and prompts the user to restart.
+- **Startup update notification** — Raven checks npm at startup and shows a TUI toast when an update is available.
+- **Config auto-migration** — existing `raven-config.json` files are normalized on startup so newly-added default fields are populated automatically.
+
+### Changed
+- **Update docs** — README now includes `/raven update`, manual `bun`/`npm` update commands, and opencode cache-clearing instructions.
+
+## 1.2.4
+
+### Added
+- **Session tree visibility** — Raven sessions created by `raven_seek` now appear in the session tree (`Ctrl+X Down`) via `parentID` linking.
+
+### Changed
+- **`tool.execute.after`** — no longer a stub; now counts output bytes from direct `@Raven` task calls for accurate stats.
+
+## 1.2.3
+
+### Added
+- **`raven_seek` timeout** — configurable timeout (default 600s). Session kept alive on timeout for inspection. `/raven timeout <seconds>` command.
+- **Session debugger** — `scripts/debug-raven.ts` auto-detects the latest session and shows tool calls, timing, status, and errors.
+
+### Changed
+- **`raven_seek` timing** — every response includes elapsed time and token count.
+
+### Fixed
+- **`cmd /c` bypass** — `cmd /c dir`, `cmd /c findstr`, `cmd /c find`, `cmd /c where`, `cmd /c tree` now blocked.
+- **`raven_seek` wording** — tool description, reroute messages, and guidance clarify Raven handles ALL search types (local codebase, web, docs, GitHub).
+- **Case-insensitive bash blocking** — `SEARCH_BASH_RE` now case-insensitive.
+- **Unrestricted bash for Raven** — `bash: allow` instead of restrictive whitelist. Raven can now use `dir`, `ls`, `Get-ChildItem` for fast filesystem searches instead of slow `glob`.
+- **External directory access** — `external_directory: allow` prevents silent permission-prompt hangs in `raven_seek` sessions.
+
+## 1.2.2
+
+### Added
+- **`websearch`** — built-in web search tool now intercepted.
+- **Session + global stats** — session counter (resets on restart) and all-time counter (persists).
+
+### Changed
+- **Stats refactored** — tracks `raven_seek` context processed (actual output size) instead of blocked tool counts and estimates. Cleaner, more meaningful.
+- **No more error throttling** — full `REROUTE_MSG` on every blocked tool call.
+- **Bytes from real measurements only** — dropped static estimates, numbers reflect actual Raven output.
+
+## 1.2.1
+
+### Added
+- **`/raven stats`** — per-session and global tracking of blocked calls, bytes saved, and token estimates. Global stats persist across restarts.
+- **`excludeTools`** — per-tool allowlist in config. Tools listed in `excludeTools` never get blocked, even for non-excluded agents.
+
+## 1.2.0
+
+### Added
+- **Agent allowlist** — `excludeAgents` in config lets specific agents bypass search tool blocking and prompt injection (case-insensitive).
+- **WebFetch/fetch blocking** — `webfetch` and `fetch` tools are now intercepted, routing all web page fetches through Raven.
+- **Reasoning effort config** — `reasoning_effort` in config overrides Raven.md default. `/raven effort <value>` command.
+- **Error recovery in raven_seek** — rate limits, quota exhaustion, token overflow, model unavailable, and timeouts return actionable recovery guidance instead of raw errors.
+- **Parallel search in Raven** — Raven.md instructs Raven to run independent tool calls in parallel within a single session.
+- **Global config** — config moved to `~/.config/opencode/raven-config.json`, shared across all projects. Auto-creates on first run.
+
+### Changed
+- **raven_seek is primary path** — all guidance now points to `raven_seek` only. `task(subagent_type="raven")` delegation path removed from instructions.
+- **Subagent prompt injection** — `<raven_guidance>` injected into every non-Raven, non-excluded subagent prompt at spawn time via `task`/`subtask` hooks.
+- **Throttled error messages** — full error shown once per session, silent on repeats. Prevents context flooding.
+- **Improved error message** — clean `REROUTE_MSG` with actionable `raven_seek` path.
+
+### Fixed
+- **Bash false positives** — quoted content stripped before regex matching. `echo "use grep here"` no longer triggers blocking.
+- **Allowlist reliability** — `sessionAgents` map tracks session→agent for reliable allowlist lookups (vs `input.agent` which isn't populated on `tool.execute.before`).
+
+### Removed
+- **Dead `tool.execute.after` nullify code** — replaced with stub for future analytics.
+
+## 1.1.1
+
+### Added
+- `raven_seek` tool — fallback for agents that can't use `task` delegation.
+- MCP API key configuration instructions in README.
+
+### Changed
+- README restructured with image-left, text-right header.
+
+### Fixed
+- Exa MCP works without API key.
+- MCP table shows Context7 and Exa offer higher limits with free keys.
+
+## 1.0.0
+
+- Initial release. Search tool interception, Raven subagent, Context7/Exa/Grep.app MCPs.