opencode-rehydar 0.14.1 → 0.14.3

package/dist/opencode-plugin/v2/options.d.ts

@@ -0,0 +1,63 @@
+/**
+ * OpenCode plugin option normalization.
+ *
+ * OpenCode passes plugin options as untrusted, untyped data. These helpers
+ * validate the shape against {@link RehydraPluginOptions}, drop unknown or
+ * malformed fields, apply the plugin's documented defaults, and never throw.
+ *
+ * The resolved helpers mirror the behaviour of the original plugin:
+ * - {@link anonymizerConfigFromOptions} defaults `secrets.envBaseDirectory` to
+ *   the project directory.
+ * - {@link policyFromOptions} keeps URL/IP_ADDRESS disabled by default while
+ *   re-adding the opt-in secret types the anonymizer enables internally.
+ */
+import type { AnonymizerConfig } from "../../core/anonymizer.js";
+import type { AnonymizationPolicy } from "../../types/index.js";
+import type { RehydraPluginOptions } from "../types.js";
+/**
+ * Resolves the canonical OpenCode config directory (`$XDG_CONFIG_HOME/opencode`
+ * or `$HOME/.config/opencode`). Returns `undefined` when no usable path can be
+ * derived. Honours `XDG_CONFIG_HOME` on every platform so distros overriding
+ * the spec keep working, and falls back to `~/.config/opencode` per the
+ * OpenCode XDG spec.
+ */
+export declare function opencodeConfigDirectory(env?: NodeJS.ProcessEnv, homedirFn?: () => string): string | undefined;
+/**
+ * Heuristic: returns `true` when `projectDir` is somewhere underneath (or equal
+ * to) `opencodeConfigDir`. Mirrors a directory-equality check rather than
+ * relying on a separator-suffix workaround.
+ */
+export declare function shouldUseOpencodeConfigDir(projectDir: string, opencodeConfigDir: string): boolean;
+/**
+ * Validates and normalizes raw OpenCode plugin options.
+ *
+ * Unknown or malformed fields are ignored and missing fields fall back to the
+ * plugin defaults. When no `anonymizer` is supplied, one is derived from the
+ * top-level secrets fields.
+ *
+ * @param raw - Untrusted options from OpenCode configuration.
+ * @param ctxDirectory - Project directory, used as `secrets.envBaseDirectory`.
+ */
+export declare function normalizePluginOptions(raw: unknown, ctxDirectory: string): RehydraPluginOptions;
+/**
+ * Resolves the anonymizer configuration.
+ *
+ * The base directory for `envFiles` paths is picked in this order:
+ * 1. `anonymizer.secrets.envBaseDirectory` if the user configured it.
+ * 2. The OpenCode config directory (`~/.config/opencode` on every supported
+ *    platform) — when the user has not configured their own `anonymizer`
+ *    block. This means a single `~/.config/opencode/.env` shared across all
+ *    projects works without per-project paths, while project-local discovery
+ *    stays opt-in by setting `secrets.envBaseDirectory` explicitly.
+ *
+ * 3. The project directory (final fallback).
+ */
+export declare function anonymizerConfigFromOptions(options: RehydraPluginOptions, ctxDirectory: string, env?: NodeJS.ProcessEnv, homedirFn?: () => string): AnonymizerConfig;
+/**
+ * Builds the policy override implied by `disableTypes`.
+ *
+ * Returns `options.policy` unchanged when nothing is disabled (or the caller
+ * explicitly disabled nothing), matching the original plugin behaviour.
+ */
+export declare function policyFromOptions(options: RehydraPluginOptions): Partial<AnonymizationPolicy> | undefined;
+//# sourceMappingURL=options.d.ts.map

package/dist/opencode-plugin/v2/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAMjE,OAAO,KAAK,EAAE,mBAAmB,EAA4B,MAAM,sBAAsB,CAAC;AAC1F,OAAO,KAAK,EAAe,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAMrE;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,SAAS,GAAE,MAAM,MAAgB,GAChC,MAAM,GAAG,SAAS,CAYpB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAKT;AA8CD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,YAAY,EAAE,MAAM,GACnB,oBAAoB,CA2BtB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,oBAAoB,EAC7B,YAAY,EAAE,MAAM,EACpB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,SAAS,GAAE,MAAM,MAAgB,GAChC,gBAAgB,CAuBlB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAuB1C"}

package/dist/opencode-plugin/v2/options.js

@@ -0,0 +1,183 @@
+/**
+ * OpenCode plugin option normalization.
+ *
+ * OpenCode passes plugin options as untrusted, untyped data. These helpers
+ * validate the shape against {@link RehydraPluginOptions}, drop unknown or
+ * malformed fields, apply the plugin's documented defaults, and never throw.
+ *
+ * The resolved helpers mirror the behaviour of the original plugin:
+ * - {@link anonymizerConfigFromOptions} defaults `secrets.envBaseDirectory` to
+ *   the project directory.
+ * - {@link policyFromOptions} keeps URL/IP_ADDRESS disabled by default while
+ *   re-adding the opt-in secret types the anonymizer enables internally.
+ */
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { PIIType, SECRET_PII_TYPES, createDefaultPolicy, } from "../../types/index.js";
+const DEFAULT_DISABLE_TYPES = ["URL", "IP_ADDRESS"];
+const DEFAULT_ENV_FILES = ["**/.env*"];
+const DEFAULT_MIN_VALUE_LENGTH = 4;
+/**
+ * Resolves the canonical OpenCode config directory (`$XDG_CONFIG_HOME/opencode`
+ * or `$HOME/.config/opencode`). Returns `undefined` when no usable path can be
+ * derived. Honours `XDG_CONFIG_HOME` on every platform so distros overriding
+ * the spec keep working, and falls back to `~/.config/opencode` per the
+ * OpenCode XDG spec.
+ */
+export function opencodeConfigDirectory(env = process.env, homedirFn = homedir) {
+    const xdg = env.XDG_CONFIG_HOME;
+    if (typeof xdg === "string" && xdg.trim().length > 0) {
+        return join(xdg, "opencode");
+    }
+    const candidates = [env.HOME, env.USERPROFILE, homedirFn()];
+    for (const candidate of candidates) {
+        if (typeof candidate === "string" && candidate.trim().length > 0) {
+            return join(candidate, ".config", "opencode");
+        }
+    }
+    return undefined;
+}
+/**
+ * Heuristic: returns `true` when `projectDir` is somewhere underneath (or equal
+ * to) `opencodeConfigDir`. Mirrors a directory-equality check rather than
+ * relying on a separator-suffix workaround.
+ */
+export function shouldUseOpencodeConfigDir(projectDir, opencodeConfigDir) {
+    if (projectDir === opencodeConfigDir)
+        return false;
+    const withSep = opencodeConfigDir.replace(/[\/\\]+$/, "") + "/";
+    const candidate = projectDir.replace(/[\/\\]+$/, "");
+    return candidate.startsWith(withSep);
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function asStringArray(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    return value.filter((item) => typeof item === "string");
+}
+function asPIITypeNames(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    const known = new Set(Object.values(PIIType));
+    return value.filter((item) => typeof item === "string" && known.has(item));
+}
+function asPositiveInteger(value) {
+    if (typeof value !== "number" || !Number.isInteger(value) || value <= 0) {
+        return undefined;
+    }
+    return value;
+}
+function asTagFormat(value) {
+    if (!isRecord(value))
+        return undefined;
+    if (typeof value.open !== "string" || typeof value.close !== "string") {
+        return undefined;
+    }
+    const keyword = typeof value.keyword === "string" ? value.keyword : undefined;
+    return { open: value.open, close: value.close, keyword };
+}
+function defaultSecretsConfig(options) {
+    return {
+        enabled: true,
+        envFiles: options.envFiles ?? DEFAULT_ENV_FILES,
+        redactValues: options.redactValues,
+        minValueLength: options.minValueLength ?? DEFAULT_MIN_VALUE_LENGTH,
+    };
+}
+/**
+ * Validates and normalizes raw OpenCode plugin options.
+ *
+ * Unknown or malformed fields are ignored and missing fields fall back to the
+ * plugin defaults. When no `anonymizer` is supplied, one is derived from the
+ * top-level secrets fields.
+ *
+ * @param raw - Untrusted options from OpenCode configuration.
+ * @param ctxDirectory - Project directory, used as `secrets.envBaseDirectory`.
+ */
+export function normalizePluginOptions(raw, ctxDirectory) {
+    const source = isRecord(raw) ? raw : {};
+    const normalized = {
+        envFiles: asStringArray(source.envFiles) ?? DEFAULT_ENV_FILES,
+        redactValues: asStringArray(source.redactValues),
+        minValueLength: asPositiveInteger(source.minValueLength) ?? DEFAULT_MIN_VALUE_LENGTH,
+        disableTypes: asPIITypeNames(source.disableTypes) ?? DEFAULT_DISABLE_TYPES,
+        vcsIdentities: typeof source.vcsIdentities === "boolean" ? source.vcsIdentities : false,
+        locale: typeof source.locale === "string" ? source.locale : undefined,
+        tagFormat: asTagFormat(source.tagFormat),
+    };
+    if (isRecord(source.policy)) {
+        normalized.policy = source.policy;
+    }
+    // Only forward `anonymizer` when the user actually configured one.
+    // Leaving it `undefined` lets {@link anonymizerConfigFromOptions} distinguish
+    // "user did not configure" from "user configured an empty block", which is
+    // required to honour the global `~/.config/opencode` default for
+    // `secrets.envBaseDirectory`.
+    normalized.anonymizer = isRecord(source.anonymizer)
+        ? source.anonymizer
+        : undefined;
+    return normalized;
+}
+/**
+ * Resolves the anonymizer configuration.
+ *
+ * The base directory for `envFiles` paths is picked in this order:
+ * 1. `anonymizer.secrets.envBaseDirectory` if the user configured it.
+ * 2. The OpenCode config directory (`~/.config/opencode` on every supported
+ *    platform) — when the user has not configured their own `anonymizer`
+ *    block. This means a single `~/.config/opencode/.env` shared across all
+ *    projects works without per-project paths, while project-local discovery
+ *    stays opt-in by setting `secrets.envBaseDirectory` explicitly.
+ *
+ * 3. The project directory (final fallback).
+ */
+export function anonymizerConfigFromOptions(options, ctxDirectory, env = process.env, homedirFn = homedir) {
+    const userProvided = options.anonymizer !== undefined;
+    const base = userProvided
+        ? options.anonymizer
+        : { secrets: defaultSecretsConfig(options) };
+    if (base.secrets === undefined) {
+        return base;
+    }
+    const envBaseDirectory = base.secrets.envBaseDirectory ?? (userProvided
+        ? ctxDirectory
+        : (opencodeConfigDirectory(env, homedirFn) ?? ctxDirectory));
+    return {
+        ...base,
+        secrets: {
+            ...base.secrets,
+            envBaseDirectory,
+        },
+    };
+}
+/**
+ * Builds the policy override implied by `disableTypes`.
+ *
+ * Returns `options.policy` unchanged when nothing is disabled (or the caller
+ * explicitly disabled nothing), matching the original plugin behaviour.
+ */
+export function policyFromOptions(options) {
+    const disableTypes = options.disableTypes ?? DEFAULT_DISABLE_TYPES;
+    if (disableTypes.length === 0) {
+        return options.policy;
+    }
+    const base = createDefaultPolicy();
+    const disableSet = new Set(disableTypes);
+    const regexEnabledTypes = new Set(base.regexEnabledTypes);
+    const nerEnabledTypes = new Set(base.nerEnabledTypes);
+    // createDefaultPolicy() excludes secret types (opt-in via AnonymizerConfig
+    // .secrets); add them back so this partial policy does not drop the secret
+    // types the anonymizer registers internally.
+    for (const secretType of SECRET_PII_TYPES) {
+        regexEnabledTypes.add(secretType);
+    }
+    for (const type of disableSet) {
+        const piiType = type;
+        regexEnabledTypes.delete(piiType);
+        nerEnabledTypes.delete(piiType);
+    }
+    return { ...options.policy, regexEnabledTypes, nerEnabledTypes };
+}
+//# sourceMappingURL=options.js.map

package/dist/opencode-plugin/v2/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAI9B,MAAM,qBAAqB,GAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AACnE,MAAM,iBAAiB,GAAa,CAAC,UAAU,CAAC,CAAC;AACjD,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAyB,OAAO,CAAC,GAAG,EACpC,YAA0B,OAAO;IAEjC,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,UAAkB,EAClB,iBAAyB;IAEzB,IAAI,UAAU,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;IAChE,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,IAAI,EAAuB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA6B;IAE7B,OAAO;QACL,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,iBAAiB;QAC/C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,wBAAwB;KACnE,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,YAAoB;IAEpB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,MAAM,UAAU,GAAyB;QACvC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,iBAAiB;QAC7D,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC;QAChD,cAAc,EACZ,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,wBAAwB;QACtE,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,qBAAqB;QAC1E,aAAa,EACX,OAAO,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK;QAC1E,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACrE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC;KACzC,CAAC;IAEF,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,MAAsC,CAAC;IACpE,CAAC;IACD,mEAAmE;IACnE,8EAA8E;IAC9E,2EAA2E;IAC3E,iEAAiE;IACjE,8BAA8B;IAC9B,UAAU,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;QACjD,CAAC,CAAE,MAAM,CAAC,UAA+B;QACzC,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAA6B,EAC7B,YAAoB,EACpB,MAAyB,OAAO,CAAC,GAAG,EACpC,YAA0B,OAAO;IAEjC,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC;IACtD,MAAM,IAAI,GAAqB,YAAY;QACzC,CAAC,CAAC,OAAO,CAAC,UAAW;QACrB,CAAC,CAAC,EAAE,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;IAE/C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CACxD,YAAY;QACV,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,YAAY,CAAC,CAC9D,CAAC;IAEF,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE;YACP,GAAG,IAAI,CAAC,OAAO;YACf,gBAAgB;SACjB;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA6B;IAE7B,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACnE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,YAAY,CAAC,CAAC;IACjD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtD,2EAA2E;IAC3E,2EAA2E;IAC3E,6CAA6C;IAC7C,KAAK,MAAM,UAAU,IAAI,gBAAgB,EAAE,CAAC;QAC1C,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAe,CAAC;QAChC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC;AACnE,CAAC"}

package/dist/opencode-plugin/v2/register-hooks.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Plugin V2 hook registration.
+ *
+ * Every hook is defensive: a tool rehydrate failure is logged and swallowed so
+ * OpenCode keeps running. Scrub failures are the exception — they are logged
+ * and rethrown so OpenCode aborts the request instead of forwarding raw PII.
+ *
+ * Each hook is registered independently: a single rejected registration is
+ * logged and skipped without blocking the others.
+ */
+import type { ScrubMessagesOptions } from "./scrub-messages.js";
+import type { AnonymizationState } from "./anon-state.js";
+import type { HookRegistration, RehydraPluginContext, SessionResolver, V2Logger } from "./types.js";
+export interface RegisterHooksDeps {
+    readonly logger: V2Logger;
+    readonly resolveSession: SessionResolver;
+    readonly state: AnonymizationState;
+    readonly rehydraInstruction: string;
+    readonly tagPrefix: string;
+    readonly scrubOptions: ScrubMessagesOptions;
+}
+/**
+ * Registers the `context`, `compaction`, and `generate` session hooks. Each
+ * scrubs the request messages in place and, once anything was anonymized,
+ * appends the rehydra instruction to the system prompt.
+ */
+export declare function registerSessionContextHook(ctx: RehydraPluginContext, deps: RegisterHooksDeps): Promise<HookRegistration[]>;
+/**
+ * Registers the `title` hook. Only the messages are scrubbed; no system
+ * instruction is injected so title generation is unaffected.
+ */
+export declare function registerSessionTitleHook(ctx: RehydraPluginContext, deps: RegisterHooksDeps): Promise<HookRegistration[]>;
+/**
+ * Registers `tool.hook("execute.before")`, restoring PII tags in tool
+ * arguments in place before the tool runs locally.
+ */
+export declare function registerToolBeforeHook(ctx: RehydraPluginContext, deps: RegisterHooksDeps): Promise<HookRegistration[]>;
+/**
+ * Registers `tool.hook("execute.after")`, restoring PII tags in a completed
+ * tool result. Failed executions are skipped.
+ */
+export declare function registerToolAfterHook(ctx: RehydraPluginContext, deps: RegisterHooksDeps): Promise<HookRegistration[]>;
+//# sourceMappingURL=register-hooks.d.ts.map

package/dist/opencode-plugin/v2/register-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-hooks.d.ts","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/register-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,QAAQ,EACT,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,eAAe,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;CAC7C;AAkBD;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,oBAAoB,EACzB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAoC7B;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,oBAAoB,EACzB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA0B7B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,oBAAoB,EACzB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA0B7B;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,oBAAoB,EACzB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA2B7B"}

package/dist/opencode-plugin/v2/register-hooks.js

@@ -0,0 +1,160 @@
+/**
+ * Plugin V2 hook registration.
+ *
+ * Every hook is defensive: a tool rehydrate failure is logged and swallowed so
+ * OpenCode keeps running. Scrub failures are the exception — they are logged
+ * and rethrown so OpenCode aborts the request instead of forwarding raw PII.
+ *
+ * Each hook is registered independently: a single rejected registration is
+ * logged and skipped without blocking the others.
+ */
+import { deepRehydrate } from "./deep-rehydrate.js";
+import { scrubMessages } from "./scrub-messages.js";
+const CONTEXT_HOOK_NAMES = ["context", "compaction", "generate"];
+/** Normalizes an unknown thrown value into a loggable message. */
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/** Serializes a value for change detection without throwing on cycles. */
+function stringify(value) {
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Registers the `context`, `compaction`, and `generate` session hooks. Each
+ * scrubs the request messages in place and, once anything was anonymized,
+ * appends the rehydra instruction to the system prompt.
+ */
+export async function registerSessionContextHook(ctx, deps) {
+    const registrations = [];
+    for (const name of CONTEXT_HOOK_NAMES) {
+        try {
+            const registration = await ctx.session.hook(name, async (event) => {
+                try {
+                    await scrubMessages(event.messages, { sessionID: event.sessionID, logger: deps.logger }, deps.resolveSession, deps.state, deps.scrubOptions);
+                    if (deps.state.hasAnonymized) {
+                        event.system.push({
+                            type: "text",
+                            text: deps.rehydraInstruction,
+                        });
+                    }
+                }
+                catch (error) {
+                    deps.logger.error(`rehydra session ${name} hook failed`, {
+                        error: errorMessage(error),
+                    });
+                    // Fail closed: surface the scrub failure so OpenCode aborts the
+                    // request instead of sending unscrubbed messages to the model.
+                    throw error;
+                }
+            });
+            registrations.push(registration);
+        }
+        catch (error) {
+            deps.logger.error(`failed to register rehydra session ${name} hook`, {
+                error: errorMessage(error),
+            });
+        }
+    }
+    return registrations;
+}
+/**
+ * Registers the `title` hook. Only the messages are scrubbed; no system
+ * instruction is injected so title generation is unaffected.
+ */
+export async function registerSessionTitleHook(ctx, deps) {
+    try {
+        const registration = await ctx.session.hook("title", async (event) => {
+            try {
+                await scrubMessages(event.messages, { sessionID: event.sessionID, logger: deps.logger }, deps.resolveSession, deps.state, deps.scrubOptions);
+            }
+            catch (error) {
+                deps.logger.error("rehydra session title hook failed", {
+                    error: errorMessage(error),
+                });
+                // Fail closed, as above.
+                throw error;
+            }
+        });
+        return [registration];
+    }
+    catch (error) {
+        deps.logger.error("failed to register rehydra session title hook", {
+            error: errorMessage(error),
+        });
+        return [];
+    }
+}
+/**
+ * Registers `tool.hook("execute.before")`, restoring PII tags in tool
+ * arguments in place before the tool runs locally.
+ */
+export async function registerToolBeforeHook(ctx, deps) {
+    try {
+        const registration = await ctx.tool.hook("execute.before", async (event) => {
+            try {
+                const session = deps.resolveSession(event.sessionID);
+                const before = stringify(event.input);
+                event.input = await deepRehydrate(event.input, session, deps.tagPrefix);
+                if (stringify(event.input) !== before) {
+                    deps.logger.info("rehydrated PII tags in tool args", {
+                        tool: event.tool,
+                    });
+                }
+            }
+            catch (error) {
+                deps.logger.error("rehydra tool execute.before hook failed", {
+                    tool: event.tool,
+                    error: errorMessage(error),
+                });
+            }
+        });
+        return [registration];
+    }
+    catch (error) {
+        deps.logger.error("failed to register rehydra tool execute.before hook", {
+            error: errorMessage(error),
+        });
+        return [];
+    }
+}
+/**
+ * Registers `tool.hook("execute.after")`, restoring PII tags in a completed
+ * tool result. Failed executions are skipped.
+ */
+export async function registerToolAfterHook(ctx, deps) {
+    try {
+        const registration = await ctx.tool.hook("execute.after", async (event) => {
+            try {
+                if (event.status !== "completed")
+                    return;
+                const session = deps.resolveSession(event.sessionID);
+                const before = stringify(event.result);
+                event.result = await deepRehydrate(event.result, session, deps.tagPrefix);
+                if (stringify(event.result) !== before) {
+                    deps.logger.info("rehydrated PII tags in tool result", {
+                        tool: event.tool,
+                    });
+                }
+            }
+            catch (error) {
+                deps.logger.error("rehydra tool execute.after hook failed", {
+                    tool: event.tool,
+                    error: errorMessage(error),
+                });
+            }
+        });
+        return [registration];
+    }
+    catch (error) {
+        deps.logger.error("failed to register rehydra tool execute.after hook", {
+            error: errorMessage(error),
+        });
+        return [];
+    }
+}
+//# sourceMappingURL=register-hooks.js.map

package/dist/opencode-plugin/v2/register-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-hooks.js","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/register-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAmBpD,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAU,CAAC;AAE1E,kEAAkE;AAClE,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAyB,EACzB,IAAuB;IAEvB,MAAM,aAAa,GAAuB,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAChE,IAAI,CAAC;oBACH,MAAM,aAAa,CACjB,KAAK,CAAC,QAAQ,EACd,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EACnD,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,YAAY,CAClB,CAAC;oBACF,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;wBAC7B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;4BAChB,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,IAAI,CAAC,kBAAkB;yBAC9B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAI,cAAc,EAAE;wBACvD,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;qBAC3B,CAAC,CAAC;oBACH,gEAAgE;oBAChE,+DAA+D;oBAC/D,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,IAAI,OAAO,EAAE;gBACnE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAyB,EACzB,IAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACnE,IAAI,CAAC;gBACH,MAAM,aAAa,CACjB,KAAK,CAAC,QAAQ,EACd,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EACnD,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,YAAY,CAClB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;oBACrD,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;iBAC3B,CAAC,CAAC;gBACH,yBAAyB;gBACzB,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,YAAY,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE;YACjE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;SAC3B,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAyB,EACzB,IAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACzE,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACrD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtC,KAAK,CAAC,KAAK,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxE,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;oBACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;wBACnD,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;oBAC3D,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,YAAY,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,EAAE;YACvE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;SAC3B,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAyB,EACzB,IAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACxE,IAAI,CAAC;gBACH,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;oBAAE,OAAO;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACrD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACvC,KAAK,CAAC,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1E,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;oBACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;wBACrD,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;oBAC1D,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,YAAY,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;YACtE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;SAC3B,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/opencode-plugin/v2/rehydrate-tail.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Shared tail buffering for streamed PII-tag rehydration.
+ *
+ * Model output arrives in fragments: a single `<PII .../>` tag can be split
+ * across SSE events, WebSocket byte chunks, or JSON delta frames. Rehydrating
+ * a fragment in isolation would emit an unterminated tag (or worse, drop the
+ * real value), so incomplete fragments are held back and prepended to the next
+ * fragment of the same stream.
+ *
+ * Two buffers are maintained per session:
+ * - a byte/text tail for raw text payloads (SSE `data:` bodies, non-JSON WS
+ *   frames),
+ * - a JSON pointer tail so each string field of a JSON delta frame continues
+ *   from the fragment left by the previous frame.
+ */
+/** Longest PII tag fragment we hold back while awaiting its closing delimiter. */
+export declare const MAX_TAG_TAIL_LENGTH = 256;
+/** Default tag prefix, matching `DEFAULT_TAG_FORMAT`. */
+export declare const DEFAULT_TAG_PREFIX = "<PII";
+/** Default tag close delimiter. */
+export declare const DEFAULT_TAG_CLOSE = "/>";
+/**
+ * Per-session storage for fragments held back between streamed payloads.
+ *
+ * Text tails are keyed by session; JSON tails are keyed by session and a JSON
+ * pointer so a tag split inside a delta field is reassembled on the matching
+ * field of the next frame.
+ */
+export interface RehydrateTailStore {
+    /** Returns the held text fragment for a session (empty when none). */
+    get(sessionID: string): string;
+    /** Replaces the held text fragment; an empty string clears it. */
+    set(sessionID: string, tail: string): void;
+    /** Returns the held fragment for a JSON pointer (empty when none). */
+    getJsonTail(sessionID: string, pointer: string): string;
+    /** Replaces a JSON-pointer fragment; an empty string clears it. */
+    setJsonTail(sessionID: string, pointer: string, tail: string): void;
+    /** Clears every fragment (text and JSON) for a session. */
+    delete(sessionID: string): void;
+    /** Clears every fragment for every session. */
+    clear(): void;
+}
+/** Default in-memory tail store. */
+export declare class InMemoryRehydrateTailStore implements RehydrateTailStore {
+    private readonly textTails;
+    private readonly jsonTails;
+    get(sessionID: string): string;
+    set(sessionID: string, tail: string): void;
+    getJsonTail(sessionID: string, pointer: string): string;
+    setJsonTail(sessionID: string, pointer: string, tail: string): void;
+    delete(sessionID: string): void;
+    clear(): void;
+}
+/**
+ * Finds the start of a trailing, unterminated PII tag fragment.
+ *
+ * Returns `-1` when the text has no incomplete tag, so a caller can safely
+ * emit it. When a fragment is found, the caller must hold it back (prepending
+ * it to the next fragment) instead of emitting a truncated tag.
+ */
+export declare function incompleteTagStart(text: string, tagPrefix: string, tagClose: string): number;
+/** Result of splitting a restored string into emit-safe text and a held tail. */
+export interface TagTailSplit {
+    /** Text safe to emit now. */
+    emitted: string;
+    /** Unterminated tag fragment to carry to the next payload. */
+    tail: string;
+}
+/**
+ * Splits a restored string at its trailing unterminated tag fragment.
+ *
+ * When the fragment is longer than {@link MAX_TAG_TAIL_LENGTH} the whole string
+ * is emitted: holding an unbounded fragment risks stalling the stream, so the
+ * cap forces a flush.
+ */
+export declare function splitTrailingTag(text: string, tagPrefix: string, tagClose: string): TagTailSplit;
+/** Context shared by every string leaf of one JSON frame. */
+export interface JsonTailContext {
+    readonly store: RehydrateTailStore;
+    readonly sessionID: string;
+    /** Namespace preventing different surfaces from sharing pointer keys. */
+    readonly pointerPrefix: string;
+    readonly tagPrefix: string;
+    readonly tagClose: string;
+}
+/** Outcome of walking a JSON value with per-pointer tail handling. */
+export interface WalkJsonTailResult<T> {
+    value: T;
+    changed: boolean;
+}
+/**
+ * Walks a JSON value, restoring every string leaf.
+ *
+ * Each leaf is prefixed with the fragment previously held for its JSON pointer
+ * (so a tag split across delta frames is reassembled), then any trailing
+ * unterminated fragment is held back for the next frame. `changed` reports
+ * whether any leaf differs from the original, letting callers keep the frame
+ * byte-for-byte when nothing needed rewriting.
+ */
+export declare function walkJsonWithTail<T>(value: T, rehydrate: (input: string) => Promise<string>, ctx: JsonTailContext, pointer?: string): Promise<WalkJsonTailResult<T>>;
+//# sourceMappingURL=rehydrate-tail.d.ts.map

package/dist/opencode-plugin/v2/rehydrate-tail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehydrate-tail.d.ts","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/rehydrate-tail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,SAAS,CAAC;AAEzC,mCAAmC;AACnC,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,kEAAkE;IAClE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,sEAAsE;IACtE,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACxD,mEAAmE;IACnE,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpE,2DAA2D;IAC3D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,+CAA+C;IAC/C,KAAK,IAAI,IAAI,CAAC;CACf;AAED,oCAAoC;AACpC,qBAAa,0BAA2B,YAAW,kBAAkB;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IAEpE,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAI9B,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAQ1C,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAIvD,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAenE,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAK/B,KAAK,IAAI,IAAI;CAId;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,MAAM,CAeR;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,YAAY,CAUd;AAED,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,sEAAsE;AACtE,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC;IACT,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,KAAK,EAAE,CAAC,EACR,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EAC7C,GAAG,EAAE,eAAe,EACpB,OAAO,SAAK,GACX,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAiDhC"}