opencode-secrets-obfuscation 0.1.0 → 0.1.1

package/docs/spec/plan.md

@@ -1,78 +0,0 @@
-# Implementation plan: transparent OpenCode V2 substitution
-
-Status: authoritative backlog, revised 2026-10-16.
-
-## Delivery rule
-
-Implement and test the transparent substitution boundary first. Do not add
-credential tools, capability brokers, owned HTTP operations, endpoint
-connectors, DNS pinning, or authorization flows: they are outside this MVP.
-
-A case is not complete because the pure sanitizer passes. It needs a sink-level
-or real-host test for the exact bytes the host publishes.
-
-## Current status
-
-- [x] Native V2 Effect entrypoint loads from a configured plugin directory.
-- [x] Pinned development dependencies: `@opencode/plugin` 2.0.28 and Effect 4.0.1.
-- [x] Relative dotenv source parsing with explicit key allowlist.
-- [x] Private value-to-opaque-handle map with bounded lifetime.
-- [x] Bounded recursive redaction/substitution primitives.
-- [x] Existing session/model/http/tool hooks wired without tool registration.
-- [x] `P5-TRANSPARENT-ROUNDTRIP` real-host E2E passes on OpenCode 2.0.28.
-- [x] `P5-SINKS` proves request substitution and structurally valid SSE response substitution on the real host.
-- [x] Direct integration coverage exercises all declared session/model/http/tool hook adapters with synthetic values.
-- [ ] Complete sink matrix and release qualification.
-
-## MVP backlog
-
-### M1 — Source and admission integrity
-
-- [ ] Replace path-only source opening with the intended validated opened-handle
-  loader for each advertised filesystem, or explicitly limit the MVP to the
-  filesystem proven safe.
-- [ ] Test malformed dotenv, duplicate keys, unsafe values, representation
-  collisions and all-or-nothing admission.
-- [ ] Test activation close, source rotation and stale map disposal.
-
-### M2 — Existing OpenCode sink coverage
-
-- [x] Prompt/user messages and metadata on the initial provider path.
-- [x] Context/system messages, compaction and generate.
-- [x] Title requests and title results.
-- [x] Model request headers/options/base URL and final serialized provider body.
-- [x] Tool input before-hooks and completed/error after-hooks.
-- [ ] Structured output, scalar values, metadata, newline joins and cross-part
-  reconstruction.
-- [ ] Logs, progress, persistence, snapshots, queue/overflow files and other
-  durable sinks that the selected host actually exposes.
-
-### M3 — Bounds and failure behavior
-
-- [ ] Expansion and traversal limits with no partial publication.
-- [ ] Oversized bodies, malformed/opaque payloads and cancellation.
-- [ ] Concurrent sessions/activations and aggregate accounting.
-- [ ] Plugin failure/unload behavior documented as uncovered unless a host gate
-  independently blocks publication.
-
-### M4 — Packaging and claims
-
-- [ ] Publish an active-plugin-only compatibility matrix and explicit gaps for
-  the one supported active-hook/provider boundary.
-- [ ] Verify packed-artifact installation, restart and clean-environment upgrade.
-
-## Explicitly not part of this MVP
-
-These are not backlog items for this product: host-owned required-plugin
-readiness, mandatory route blocking after unload, host-mediated permission
-enforcement, sandboxed credential execution, vault leases, durable policy
-revisions, egress policy, DNS pinning, proxy policy, credential transports and
-any plugin-owned authenticated network request.
-
-## Exit gate
-
-The transparent MVP is complete only when the declared active-plugin envelope
-has exact sink evidence, source-opening evidence for every advertised platform,
-bounded failure tests, a clean packed-artifact E2E run, and documentation that
-names every uncovered route. It must not be called universally protective or
-enforced.

package/docs/testing.md

@@ -1,157 +0,0 @@
-# Test-first development
-
-Status: P0 test infrastructure in progress; the product plugin MVP now exists and
-`P5-TRANSPARENT-ROUNDTRIP` executes against the pinned real host (opencode 2.0.28) inside a
-private sandbox (`tests/support/smoke-cases.ts`). Test support includes a
-scripted loopback recorder (resolver, dynamic bodies, header captures), a
-validated sandbox config channel, and evidence bookkeeping; the native
-source-opening spike is explicitly unqualified and no runtime is qualified for
-release. See [runtime prerequisites](history/2-p0-runtime-prerequisites.md),
-[source-opening status](history/4-p0-source-opening.md), and the fresh-eye reviews
-under `docs/history/`. Helpers and source probes are not P0 gate completion.
-
-## Local commands
-
-Use Node **24.14.1** (`.node-version`) and npm. This is the development test runtime,
-not a selection of OpenCode's host/Effect versions.
-
-```sh
-npm ci
-npm run check
-npm run test:smoke:list
-```
-
-On PowerShell, use `npm.cmd` if script execution policy blocks `npm.ps1`.
-
-| Command | What it establishes today |
-| --- | --- |
-| `npm run typecheck` | Product sources and tests typecheck. |
-| `npm test` | Scaffold, unit, contract and integration suites plus the smoke runner contract execute. Passing suites are not release qualification. |
-| `npm run test:unit` | Product algorithm/policy suites plus test-helper tests. |
-| `npm run test:contract` | Pinned host data/lifecycle contracts that do not need a live host. |
-| `npm run test:integration` | Controlled-service tests: transport behavior and the runtime factory against loopback verifiers. |
-| `npm run test:smoke:list` | Lists stable smoke case IDs without executing anything. |
-| `npm run test:smoke -- --run P5-TRANSPARENT-ROUNDTRIP` | Executes the bound real-host case against the pinned host in a private sandbox; unimplemented selections still exit 2. |
-| `npm run test:qualification` | Fails nonzero: nothing is qualified (underlying runner exits 2). |
-
-Do not turn missing prerequisites into successful skips in the future smoke gate.
-A developer can run a platform subset, but its report must name excluded cases
-and cannot qualify the full platform matrix.
-
-## First implementation sequence
-
-1. **P0 fixtures before host qualification.** Pin published OpenCode, plugin API, Effect,
-   provider protocol and per-platform binary checksums in
-   `tests/smoke/qualification.json`. Keep `status: unqualified` until evidence
-   actually satisfies the selected qualification profile. Do not infer pins from
-   the operator's current installation.
-   - On Linux/ext4, the source-opening spike validates file/ancestor traversal,
-     reparse/symlink/hard-link rejection, and ACL/owner rights using the
-     `linux-job.sh` containment test (`tests/p0-host/linux-job.sh`). Qualify
-     aggregate quota sharing or explicitly choose the dedicated-service restriction.
-2. **Write the isolated service harness.** Add explicit-path process launch,
-   private config/data/home, readiness probes, safe evidence, timeouts and
-   owned-process cleanup in `tests/support/`. First real test: `P0-BOOT` calls the
-   real service API and verifies artifact identity. Its assertions must fail for
-   an absent/wrong binary, bad version, timeout and accidental shared-service use.
-3. **Add test-only V2 probe plugins.** Populate `tests/fixtures/plugins/` to measure
-   hook execution, typed errors, unload/fallback and serialization before the
-   product exists. Drive `P0-HOOKS` and `P0-ABORT` using a recording provider. Keep
-   response/transport observations distinct from assumptions in mock contracts.
-4. **Prove source-opening and quota feasibility.** Real Windows/NTFS and
-   Linux/ext4 tests come before choosing native dependencies. Qualify aggregate
-   quota sharing or explicitly choose the dedicated-service restriction.
-5. **Write red tests and independent oracles.** Replace named TODOs in
-   `tests/unit/`, `tests/contract/` and `tests/integration/` with concrete failures.
-   Cover all [R1–R8 remediation gates](spec/plan.md#review-remediation-gates).
-   Only then implement the matching `src/` module.
-6. **Reuse the harness for host qualification.** When a real entrypoint exists, pack and
-   install the actual artifact into the isolated host. `P5-TRANSPARENT-ROUNDTRIP`
-   verifies that existing provider traffic contains an opaque replacement, that
-   no plugin-owned tool or network request exists, and that the raw source value
-   stays out of provider bytes and public output. Follow with sink/spill, body
-   withholding and resource cases.
-
-The plugin MVP builds from `src/` against pinned `@opencode/plugin`/`effect`
-devDependencies and executes inside the real host via `P5-TRANSPARENT-ROUNDTRIP`. The
-plugin-only MVP and production profiles remain unqualified until their
-applicable real-host gates pass; `tests/smoke/qualification.json` still carries
-null pins on purpose.
-
-## Transparent substitution boundary
-
-The plugin is deliberately not a credential broker. It loads configured source
-values into a private in-memory map, assigns opaque `secret-<uuid>` replacements,
-and applies those replacements through existing OpenCode session/model/http/tool
-hooks. It does not add model-visible tools and does not initiate HTTP requests.
-
-`P5-TRANSPARENT-ROUNDTRIP` proves the first boundary only: an existing provider
-request is captured with the opaque replacement and without the raw source value.
-Additional sink and route cases are required before making broad "everything"
-protection claims.
-
-## Test layers and proof quality
-
-- **Unit:** pure input/output and lifecycle state machines with independent
-  expected results. Use analytical rejected values for algorithm tests separately
-  from accepted-snapshot end-to-end cases.
-- **Contract:** pin the host schemas and transformation graph. Replay captured
-  synthetic shapes, but do not substitute these tests for real host behavior.
-- **Integration:** use the actual selected filesystem/network/native libraries,
-  bounded controlled HTTPS services, real cancellation and allocation behavior.
-- **Real smoke:** real pinned OpenCode subprocess + API + test-only providers and
-  endpoints. This is a real host smoke test even without paid/live model calls.
-  Merely constructing a fake `ctx` does not qualify.
-- **Qualification:** require implemented, executed, non-skipped cases for a
-  declared profile/platform/artifact set, with actual sink/network evidence.
-  `expected-gap` observations never satisfy enforced-profile requirements.
-
-Smoke case IDs in `tests/smoke/cases.json` are stable review references. They are
-not a claim of exhaustive coverage: expand the inventory as P0 exposes more
-paths. The future runner must bind IDs to real test executables and reject unknown
-or empty selections, missing implementations and stale evidence.
-
-The current tests under `tests/scaffold/` intentionally enforce the placeholder
-state. Evolve those assertions when a real harness replaces it; replace them with
-negative tests proving the new harness still rejects missing pins and cases.
-Never simply delete the fail-closed checks to make CI green.
-
-## Isolation and evidence rules
-
-Before launching any real host, prove its config/home/data/cache and service
-discovery are isolated on the pinned release. Environment variable names and CLI
-flags must come from that release's API/docs, not guesses. Until proven, fail
-before launch. Do not reuse `~/.config/opencode`, user sessions, inherited API
-keys, credential agents, or the default background service. Pass an explicit
-allowlist of essential child environment values and synthetic fixture settings.
-
-The future harness creates `.artifacts/<run-id>/` with private ACL/mode and an
-ownership marker before writing any fixture or capture. The root is ignored by
-Git, but that does not prevent backups/sync or grant confidentiality. Raw output,
-provider payloads, DBs, source files and failure captures stay there, never in
-ordinary CI logs/uploads. Print only validated case IDs, counts, status and safe
-error codes. Validate a capture before promoting anything to a public report.
-
-Generate TLS private keys and synthetic canaries per run. Do not commit them.
-Cleanup must use exact validated owned paths/PIDs, without broad recursive deletes
-or `killall` behavior. Preserve failed evidence only with explicit private
-retention; do not include it in a published package or automatic artifact upload.
-
-Each future result records: case ID, expectation, profile, implementation status,
-actual host/plugin/provider/checksum identities, OS/filesystem, request kind,
-observed pass/fail/gap, and restricted evidence references. Denial tests assert
-zero resolutions and zero outbound attempts; absence of token text alone is not
-enough. Resource tests measure real peak allocation; overlap tests use a separate
-interval oracle; reload tests reacquire **new** handles after failed replacement.
-
-## CI policy
-
-The initial `scaffold` workflow runs install, typecheck and scaffold/TODO suites on
-Windows and Linux. It deliberately does not launch OpenCode, upload artifacts,
-receive credentials, or label its outcome a smoke/security pass.
-
-Add the real smoke workflow only when isolation/cleanup and exact artifacts are
-implemented. Run it with no production secrets or inherited credentials; use
-ephemeral workers for OS/network adversarial cases. Never expose repository
-secrets to untrusted pull-request code. Enforced-profile CI remains separate from
-the active-only MVP matrix.

package/scripts/build-plugin.mjs

@@ -1,84 +0,0 @@
-#!/usr/bin/env node
-
-import { build } from "esbuild"
-import { copyFile, mkdir, rm, writeFile } from "node:fs/promises"
-import { join, dirname } from "node:path"
-import { fileURLToPath } from "node:url"
-
-const __filename = fileURLToPath(import.meta.url)
-const ROOT = dirname(dirname(__filename))
-const DIST = join(ROOT, "dist")
-const ENTRY = join(ROOT, "src", "opencode", "v2", "index.ts")
-
-async function buildPlugin() {
-  console.log("Building plugin...")
-  
-  await rm(DIST, { recursive: true, force: true })
-  await mkdir(DIST, { recursive: true })
-
-  const result = await build({
-    entryPoints: [ENTRY],
-    bundle: true,
-    platform: "node",
-    format: "esm",
-    target: "node24",
-    outfile: join(DIST, "plugin.mjs"),
-    external: [
-      "effect"
-    ],
-    sourcemap: process.env.PLUGIN_SOURCEMAP === "true",
-    minify: false,
-    logLevel: "info"
-  })
-
-  if (result.errors.length > 0) {
-    console.error("Build failed:", result.errors)
-    process.exit(1)
-  }
-
-  const version = process.env.PLUGIN_VERSION ?? "0.0.0-dev"
-  if (!/^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?$/.test(version)) {
-    throw new Error("PLUGIN_VERSION_INVALID")
-  }
-
-  // Create a publication-only package. The private repository root is never published.
-  const pkg = {
-    name: "opencode-secrets-obfuscation",
-    version,
-    description: "Transparent OpenCode V2 secret substitution plugin",
-    license: "MIT",
-    repository: "github:jfomhover/opencode-secrets-obfuscation",
-    homepage: "https://github.com/jfomhover/opencode-secrets-obfuscation",
-    bugs: "https://github.com/jfomhover/opencode-secrets-obfuscation/issues",
-    keywords: ["opencode", "opencode-plugin", "secrets", "redaction", "privacy"],
-    type: "module",
-    engines: { node: ">=24.14.0 <25" },
-    main: "plugin.mjs",
-    exports: {
-      ".": "./plugin.mjs"
-    },
-    files: ["plugin.mjs", "README.md", "LICENSE"],
-    peerDependencies: { effect: "4.0.1" },
-  }
-  await writeFile(join(DIST, "package.json"), JSON.stringify(pkg, null, 2))
-  await copyFile(join(ROOT, "LICENSE"), join(DIST, "LICENSE"))
-  const readme = [
-    "# opencode-secrets-obfuscation",
-    "",
-    "Transparent OpenCode V2 secret substitution. The plugin loads explicitly configured dotenv values privately and substitutes opaque secret-<uuid> handles through existing OpenCode hooks. It does not register model-visible tools or make plugin-owned network requests.",
-    "",
-    `Install with: opencode plugin add opencode-secrets-obfuscation@${version}`,
-    "Configure the published package in opencode.jsonc with the options documented at https://github.com/jfomhover/opencode-secrets-obfuscation/blob/main/INSTALL.md.",
-    "",
-  ].join("\\n")
-  await writeFile(join(DIST, "README.md"), readme)
-
-  console.log("\n✓ Plugin built successfully")
-  console.log(`  Output: ${join(DIST, "plugin.mjs")}`)
-  console.log(`  Package: ${join(DIST, "package.json")}`)
-}
-
-buildPlugin().catch(error => {
-  console.error(error)
-  process.exit(1)
-})

package/scripts/install-opencode-ci.ps1

@@ -1,39 +0,0 @@
-[CmdletBinding()]
-param(
-  [Parameter(Mandatory = $true)]
-  [string] $Destination
-)
-
-$ErrorActionPreference = "Stop"
-$version = "2.0.28"
-$tarball = "https://registry.npmjs.org/@opencode/cli-windows-x64/-/cli-windows-x64-$version.tgz"
-$archiveSha256 = "A5A212125E497726A95D6F9C3CDCFE6F1FA35CA61F3F263E6575D557747FEAE2"
-$memberSha256 = "9C59FCD39AA9C611AEDA04711BAB9D668CE3145FA5CDE9868F69C31ADCCFD3E3"
-$downloadRoot = if ([string]::IsNullOrWhiteSpace($env:RUNNER_TEMP)) { [IO.Path]::GetTempPath() } else { $env:RUNNER_TEMP }
-$archive = Join-Path $downloadRoot "opencode-cli-windows-x64-$version.tgz"
-
-New-Item -ItemType Directory -Force -Path $Destination | Out-Null
-Invoke-WebRequest -Uri $tarball -OutFile $archive
-$actualArchive = (Get-FileHash -Algorithm SHA256 -Path $archive).Hash
-if ($actualArchive -ne $archiveSha256) {
-  throw "OPENCODE_ARCHIVE_HASH_MISMATCH"
-}
-
-tar -xzf $archive -C $Destination
-$binary = Join-Path $Destination "package\bin\opencode.exe"
-if (-not (Test-Path -LiteralPath $binary -PathType Leaf)) {
-  throw "OPENCODE_BINARY_MISSING"
-}
-$actualMember = (Get-FileHash -Algorithm SHA256 -Path $binary).Hash
-if ($actualMember -ne $memberSha256) {
-  throw "OPENCODE_BINARY_HASH_MISMATCH"
-}
-$reported = (& $binary --version 2>&1 | Out-String).Trim()
-if ($reported -notmatch [regex]::Escape($version)) {
-  throw "OPENCODE_VERSION_MISMATCH"
-}
-
-if ($env:GITHUB_ENV) {
-  "OPENCODE_SMOKE_BINARY=$binary" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append
-}
-Write-Output "Verified OpenCode $version Windows x64 host: $binary"

package/scripts/install-opencode-ci.sh

@@ -1,27 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-destination="${1:?destination required}"
-version="2.0.28"
-url="https://registry.npmjs.org/@opencode/cli-linux-x64/-/cli-linux-x64-${version}.tgz"
-archive_sha256="76F8505BAAF56965ED28F305B74C526B54ECCD18FE78C81621A4090CC026C9F9"
-member_sha256="20D305D0140BFE04DF7264A4ECB014402B74B6AC0A0F6456EE07EF3325FB4A85"
-archive="${RUNNER_TEMP:-${TMPDIR:-/tmp}}/opencode-cli-linux-x64-${version}.tgz"
-
-mkdir -p "$destination"
-curl --fail --location --silent --show-error "$url" --output "$archive"
-actual_archive="$(sha256sum "$archive" | awk '{print toupper($1)}')"
-[[ "$actual_archive" == "$archive_sha256" ]] || { echo "OPENCODE_ARCHIVE_HASH_MISMATCH" >&2; exit 1; }
-
-tar -xzf "$archive" -C "$destination"
-binary="$destination/package/bin/opencode"
-[[ -f "$binary" ]] || { echo "OPENCODE_BINARY_MISSING" >&2; exit 1; }
-chmod 0755 "$binary"
-actual_member="$(sha256sum "$binary" | awk '{print toupper($1)}')"
-[[ "$actual_member" == "$member_sha256" ]] || { echo "OPENCODE_BINARY_HASH_MISMATCH" >&2; exit 1; }
-"$binary" --version | grep -F "$version" >/dev/null || { echo "OPENCODE_VERSION_MISMATCH" >&2; exit 1; }
-
-if [[ -n "${GITHUB_ENV:-}" ]]; then
-  printf 'OPENCODE_SMOKE_BINARY=%s\n' "$binary" >> "$GITHUB_ENV"
-fi
-echo "Verified OpenCode $version Linux x64 host: $binary"

package/scripts/smoke.mjs

@@ -1,105 +0,0 @@
-import { readFile } from "node:fs/promises"
-import { fileURLToPath } from "node:url"
-import { p5TransparentRoundtrip } from "../tests/support/smoke-cases.ts"
-
-// Fail-closed smoke runner. It never discovers or executes a user's OpenCode
-// service: only explicitly bound case handlers may launch the sandboxed host.
-//
-// Exit codes: 0 = every selected implemented case passed, 1 = a case failed,
-// 2 = refusal (invalid arguments, unqualified selection, unimplemented case).
-// Handlers return a public evidence summary string, throw on failure and are
-// responsible for keeping captures, canary scans and run paths private.
-
-const fail = (code, message) => {
-  console.error(`${code}: ${message}`)
-  process.exit(2)
-}
-
-const args = process.argv.slice(2)
-let list = false
-let qualification = false
-let run = null
-
-for (let index = 0; index < args.length; index += 1) {
-  const arg = args[index]
-  if (arg === "--list") {
-    list = true
-  } else if (arg === "--qualification") {
-    qualification = true
-  } else if (arg === "--run") {
-    const value = args[index + 1]
-    if (value === undefined || value.startsWith("--")) {
-      fail("SMOKE_INVALID_ARGUMENT", "--run requires a case id or 'all'.")
-    }
-    run = value
-    index += 1
-  } else {
-    fail("SMOKE_INVALID_ARGUMENT", `unknown argument '${arg}'; use --list, --qualification, or --run <case-id|all>.`)
-  }
-}
-
-if (args.length === 0) {
-  fail("SMOKE_INVALID_ARGUMENT", "select --run <case-id|all> to execute; --list shows the inventory.")
-}
-if (list && (qualification || run !== null)) {
-  fail("SMOKE_INVALID_ARGUMENT", "--list is inventory-only and cannot be combined with execution modes.")
-}
-
-const repoRoot = fileURLToPath(new URL("..", import.meta.url))
-const inventory = JSON.parse(await readFile(new URL("../tests/smoke/cases.json", import.meta.url), "utf8"))
-const cases = Array.isArray(inventory?.cases) ? inventory.cases : []
-
-if (list) {
-  for (const item of cases) {
-    console.log(`${item.id} [${item.status}] ${item.profile}/${item.expectation}: ${item.title}`)
-  }
-  console.log("No smoke tests executed. No runtime is qualified.")
-  process.exit(0)
-}
-
-if (qualification) {
-  fail("SMOKE_NOT_IMPLEMENTED", "qualification gates remain unmet; see tests/smoke/qualification.json.")
-}
-
-// Explicit handler registry: a case may only execute when its inventory entry
-// is marked implemented AND it is bound here. Nothing is discovered from the
-// filesystem or the environment.
-const handlers = new Map([
-  ["P5-TRANSPARENT-ROUNDTRIP", p5TransparentRoundtrip],
-  ["P5-SINKS", p5TransparentRoundtrip],
-  ["P5-BODIES", p5TransparentRoundtrip],
-])
-
-const select = (id) => {
-  const entry = cases.find((candidate) => candidate?.id === id)
-  if (!entry) {
-    fail("SMOKE_UNKNOWN_CASE", `no case '${id}' in tests/smoke/cases.json.`)
-  }
-  if (entry.status !== "implemented" || !handlers.has(id)) {
-    fail("SMOKE_CASE_NOT_IMPLEMENTED", `case '${id}' is [${entry.status}] with no bound handler.`)
-  }
-  return entry
-}
-
-let targets
-if (run === "all") {
-  targets = cases.filter((entry) => entry?.status === "implemented" && handlers.has(entry.id))
-  if (targets.length === 0) {
-    fail("SMOKE_NO_IMPLEMENTED_CASES", "no case in tests/smoke/cases.json is both implemented and bound to a handler.")
-  }
-} else {
-  targets = [select(run)]
-}
-
-let failed = 0
-for (const entry of targets) {
-  console.log(`== ${entry.id}: ${entry.title}`)
-  try {
-    const evidence = await handlers.get(entry.id)({ entry, repoRoot })
-    console.log(`PASS ${entry.id}: ${evidence}`)
-  } catch (error) {
-    failed += 1
-    console.error(`FAIL ${entry.id}: ${error instanceof Error ? error.message : String(error)}`)
-  }
-}
-process.exit(failed > 0 ? 1 : 0)

package/scripts/verify-package.mjs

@@ -1,18 +0,0 @@
-import { readFile } from "node:fs/promises"
-import { spawnSync } from "node:child_process"
-
-const npm = process.platform === "win32" ? "cmd.exe" : "npm"
-const npmArgs = process.platform === "win32"
-  ? ["/d", "/s", "/c", "npm pack ./dist --dry-run --json --ignore-scripts"]
-  : ["pack", "./dist", "--dry-run", "--json", "--ignore-scripts"]
-const packageJson = JSON.parse(await readFile("dist/package.json", "utf8"))
-const result = spawnSync(npm, npmArgs, {
-  encoding: "utf8",
-})
-if (result.status !== 0 || result.error) throw new Error("PACKAGE_PACK_FAILED")
-const report = JSON.parse(result.stdout)
-const files = new Set(report[0]?.files?.map((file) => file.path) ?? [])
-const expected = new Set(["LICENSE", "README.md", "package.json", "plugin.mjs"])
-if (packageJson.name !== "opencode-secrets-obfuscation" || !/^[0-9]+\.[0-9]+\.[0-9]+/.test(packageJson.version)) throw new Error("PACKAGE_METADATA_INVALID")
-if (files.size !== expected.size || [...files].some((file) => !expected.has(file))) throw new Error("PACKAGE_CONTENTS_INVALID")
-console.log(`Verified ${packageJson.name}@${packageJson.version}: ${[...files].join(", ")}`)

package/src/README.md

@@ -1,22 +0,0 @@
-# Implementation placeholders
-
-No plugin entrypoint or implementation exists yet. Do not add a no-op plugin that
-could appear active while providing no protection. This directory is not an
-auto-discovered `.opencode/plugins` directory.
-
-| Directory | Future responsibility | First tests |
-| --- | --- | --- |
-| `config/` | Strict options and admission policy | Unit authorization/config cases |
-| `sources/` | Dotenv parsing and opened-handle native adapters | P0 real OS fixtures, then unit parser cases |
-| `store/` | Activation/Location/session maps and handle lifecycle | Unit store and contract lifecycle cases |
-| `sanitize/` | Admissibility, overlap unions, exact sink projections | Unit oracles, then real-host spill smoke |
-| `policy/` | Enrollment and per-call authorization | Unit denials, then host-policy gap smoke |
-| `budgets/` | Reservations and aggregate ownership | Unit budget and multi-activation smoke |
-| `tools/` | Reviewed access check and sanitized source view | Integration fixture, then host round trip |
-| `opencode/v2/` | Effect entrypoint, hooks and lifecycle | P0 probe plugins and real-host contracts |
-| `diagnostics/` | Safe codes and coverage/readiness reporting | No-value diagnostics tests |
-
-Add runtime dependencies only after the P0 release/Effect compatibility spike.
-The development TypeScript/Node versions do not choose an OpenCode runtime.
-
-See [design](../docs/spec/design.md) and [test strategy](../docs/testing.md).

package/src/budgets/index.ts

@@ -1,49 +0,0 @@
-export type BudgetDimension = "sourceCount" | "sourceBytes" | "totalSourceBytes" | "secretCount" | "secretBytes" | "indexBytes" | "inputBytes" | "outputBytes" | "traversalDepth" | "traversalNodes" | "activeSessions" | "handlesPerSession" | "activeCalls" | "workingBytes" | "calls" | "nodes" | "depth" | "sessions" | "handles"
-export type BudgetValues = Partial<Record<BudgetDimension, number>>
-export type BudgetResult = { readonly ok: true; readonly value: { dispose(): void } } | { readonly ok: false }
-
-const dimensions = new Set<string>(["sourceCount", "sourceBytes", "totalSourceBytes", "secretCount", "secretBytes", "indexBytes", "inputBytes", "outputBytes", "traversalDepth", "traversalNodes", "activeSessions", "handlesPerSession", "activeCalls", "workingBytes", "calls", "nodes", "depth", "sessions", "handles"])
-export class BudgetLedger {
-  private readonly used = new Map<string, number>()
-  private readonly limits: BudgetValues
-  constructor(limits: BudgetValues) {
-    const values = inspect(limits)
-    if (!values) throw new Error("invalid")
-    for (const [key, value] of values) if (!dimensions.has(key) || typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw new Error("invalid")
-    this.limits = Object.fromEntries(values) as BudgetValues
-  }
-  reserve(request: BudgetValues): BudgetResult {
-    try {
-      const values = inspect(request)
-      if (!values) return { ok: false }
-      for (const [key, value] of values) {
-        if (!dimensions.has(key) || typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) return { ok: false }
-        const limit = this.limits[key as BudgetDimension]
-        const current = this.used.get(key) ?? 0
-        if (value > Number.MAX_SAFE_INTEGER - current) return { ok: false }
-        if (limit !== undefined && current + value > limit) return { ok: false }
-      }
-      const committed = values as readonly (readonly [string, number])[]
-      for (const [key, value] of committed) this.used.set(key, (this.used.get(key) ?? 0) + value)
-      let disposed = false
-      return { ok: true, value: { dispose: () => { if (disposed) return; disposed = true; for (const [key, value] of committed) this.used.set(key, (this.used.get(key) ?? 0) - value) } } }
-    } catch { return { ok: false } }
-  }
-}
-
-function inspect(value: unknown): readonly (readonly [string, unknown])[] | undefined {
-  try {
-    if (!value || typeof value !== "object") return undefined
-    if (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) return undefined
-    const keys = Reflect.ownKeys(value)
-    if (keys.some(key => typeof key !== "string")) return undefined
-    const result: [string, unknown][] = []
-    for (const key of keys) {
-      if (typeof key !== "string") return undefined
-      const descriptor = Object.getOwnPropertyDescriptor(value, key)
-      if (!descriptor || !descriptor.enumerable || !("value" in descriptor)) return undefined
-      result.push([key, descriptor.value])
-    }
-    return result
-  } catch { return undefined }
-}

package/src/config/README.md

@@ -1,4 +0,0 @@
-# Placeholder: configuration
-
-Strict schema, required authorization mode, explicit enrollment, reviewed operation
-IDs and hard resource ceilings. No implementation yet.