opencode-varlock 0.0.1

package/dist/tools.js

@@ -0,0 +1,216 @@
+import { tool } from "@opencode-ai/plugin";
+import { readFileSync, existsSync } from "fs";
+import { resolve } from "path";
+export function createLoadEnvTool(envConfig) {
+    const allowedRoot = resolve(envConfig.allowedRoot);
+    return tool({
+        description: [
+            "Load environment variables from a .env file into the running process.",
+            "Returns the names of variables that were set - never the values.",
+            "The agent can then write code that references process.env.VAR_NAME",
+            "without ever seeing the actual secret.",
+        ].join(" "),
+        args: {
+            path: tool.schema
+                .string()
+                .optional()
+                .default(".env")
+                .describe("Relative or absolute path to the .env file"),
+            override: tool.schema
+                .boolean()
+                .optional()
+                .default(false)
+                .describe("Replace vars that already exist in the environment"),
+            prefix: tool.schema
+                .string()
+                .optional()
+                .describe("Only load vars whose name starts with this prefix"),
+        },
+        async execute(args) {
+            const envPath = resolve(args.path);
+            if (!envPath.startsWith(allowedRoot)) {
+                throw new Error(`[varlock] Path "${args.path}" resolves outside the allowed root. ` +
+                    `Only .env files under "${allowedRoot}" are permitted.`);
+            }
+            if (!existsSync(envPath)) {
+                throw new Error(`[varlock] File not found: ${envPath}`);
+            }
+            const content = readFileSync(envPath, "utf-8");
+            const loaded = [];
+            const skipped = [];
+            for (const line of content.split("\n")) {
+                const trimmed = line.trim();
+                if (!trimmed || trimmed.startsWith("#"))
+                    continue;
+                const eqIdx = trimmed.indexOf("=");
+                if (eqIdx === -1)
+                    continue;
+                let keyPart = trimmed.slice(0, eqIdx).trim();
+                if (keyPart.startsWith("export ")) {
+                    keyPart = keyPart.slice(7).trim();
+                }
+                if (args.prefix && !keyPart.startsWith(args.prefix))
+                    continue;
+                let value = trimmed.slice(eqIdx + 1).trim();
+                if ((value.startsWith('"') && value.endsWith('"')) ||
+                    (value.startsWith("'") && value.endsWith("'"))) {
+                    value = value.slice(1, -1);
+                }
+                if (process.env[keyPart] && !args.override) {
+                    skipped.push(keyPart);
+                    continue;
+                }
+                process.env[keyPart] = value;
+                loaded.push(keyPart);
+            }
+            return JSON.stringify({
+                status: "ok",
+                source: args.path,
+                loaded,
+                skipped,
+                message: `Loaded ${loaded.length} variable(s): ${loaded.join(", ") || "(none)"}` +
+                    (skipped.length
+                        ? `. Skipped ${skipped.length} existing: ${skipped.join(", ")}`
+                        : ""),
+            });
+        },
+    });
+}
+export function createLoadSecretsTool($, varlockConfig) {
+    const cmd = varlockConfig.command;
+    const defaultNs = varlockConfig.namespace;
+    return tool({
+        description: [
+            "Load secrets from Varlock into the running process environment.",
+            "Varlock retrieves secrets from the configured backend (pass, Azure Key Vault, etc.).",
+            "Returns only the names of loaded variables - never the values.",
+        ].join(" "),
+        args: {
+            namespace: tool.schema
+                .string()
+                .optional()
+                .default(defaultNs)
+                .describe("Varlock namespace / path prefix to load from"),
+            keys: tool.schema
+                .array(tool.schema.string())
+                .optional()
+                .describe("Specific secret keys to load. If omitted, loads all keys in the namespace."),
+            override: tool.schema
+                .boolean()
+                .optional()
+                .default(false)
+                .describe("Replace vars that already exist in the environment"),
+            envPrefix: tool.schema
+                .string()
+                .optional()
+                .describe("Prefix to add to env var names, e.g. 'APP_' turns 'db_url' into 'APP_DB_URL'"),
+        },
+        async execute(args) {
+            const ns = args.namespace;
+            let keyList;
+            if (args.keys && args.keys.length > 0) {
+                keyList = args.keys;
+            }
+            else {
+                try {
+                    const raw = await $ `${cmd} list ${ns}`.text();
+                    keyList = raw
+                        .trim()
+                        .split("\n")
+                        .filter((k) => k.length > 0);
+                }
+                catch (err) {
+                    throw new Error(`[varlock] Failed to list keys in namespace "${ns}": ${err.message}`);
+                }
+            }
+            const loaded = [];
+            const failed = [];
+            const skipped = [];
+            for (const key of keyList) {
+                const envName = args.envPrefix
+                    ? `${args.envPrefix}${key.toUpperCase()}`
+                    : key.toUpperCase();
+                if (process.env[envName] && !args.override) {
+                    skipped.push(envName);
+                    continue;
+                }
+                try {
+                    const value = (await $ `${cmd} get ${ns}/${key}`.text()).trim();
+                    if (value) {
+                        process.env[envName] = value;
+                        loaded.push(envName);
+                    }
+                }
+                catch {
+                    failed.push(key);
+                }
+            }
+            const parts = [
+                `Loaded ${loaded.length} secret(s): ${loaded.join(", ") || "(none)"}`,
+            ];
+            if (skipped.length) {
+                parts.push(`Skipped ${skipped.length} existing: ${skipped.join(", ")}`);
+            }
+            if (failed.length) {
+                parts.push(`Failed ${failed.length}: ${failed.join(", ")}`);
+            }
+            return JSON.stringify({
+                status: failed.length === keyList.length ? "error" : "ok",
+                source: `varlock/${ns}`,
+                loaded,
+                skipped,
+                failed,
+                message: parts.join(". "),
+            });
+        },
+    });
+}
+export function createSecretStatusTool($, varlockConfig) {
+    const cmd = varlockConfig.command;
+    const defaultNs = varlockConfig.namespace;
+    return tool({
+        description: [
+            "Check which secrets are available in Varlock and which are",
+            "currently loaded in the process environment.",
+            "Returns key names and loaded/unloaded status - never values.",
+        ].join(" "),
+        args: {
+            namespace: tool.schema
+                .string()
+                .optional()
+                .default(defaultNs)
+                .describe("Varlock namespace to inspect"),
+        },
+        async execute(args) {
+            const ns = args.namespace;
+            let available;
+            try {
+                const raw = await $ `${cmd} list ${ns}`.text();
+                available = raw
+                    .trim()
+                    .split("\n")
+                    .filter((k) => k.length > 0);
+            }
+            catch (err) {
+                throw new Error(`[varlock] Cannot list namespace "${ns}": ${err.message}`);
+            }
+            const status = available.map((key) => {
+                const envName = key.toUpperCase();
+                return {
+                    key,
+                    envName,
+                    loaded: envName in process.env,
+                };
+            });
+            const loadedCount = status.filter((s) => s.loaded).length;
+            return JSON.stringify({
+                namespace: ns,
+                total: available.length,
+                loaded: loadedCount,
+                unloaded: available.length - loadedCount,
+                keys: status,
+            });
+        },
+    });
+}
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAG9B,MAAM,UAAU,iBAAiB,CAAC,SAAoB;IACpD,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAElD,OAAO,IAAI,CAAC;QACV,WAAW,EAAE;YACX,uEAAuE;YACvE,kEAAkE;YAClE,oEAAoE;YACpE,wCAAwC;SACzC,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,IAAI,EAAE;YACJ,IAAI,EAAE,IAAI,CAAC,MAAM;iBACd,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,OAAO,CAAC,MAAM,CAAC;iBACf,QAAQ,CAAC,4CAA4C,CAAC;YACzD,QAAQ,EAAE,IAAI,CAAC,MAAM;iBAClB,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,OAAO,CAAC,KAAK,CAAC;iBACd,QAAQ,CAAC,oDAAoD,CAAC;YACjE,MAAM,EAAE,IAAI,CAAC,MAAM;iBAChB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,mDAAmD,CAAC;SACjE;QACD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAElC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,CAAC,IAAI,uCAAuC;oBACjE,0BAA0B,WAAW,kBAAkB,CAC1D,CAAA;YACH,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;YACzD,CAAC;YAED,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAa,EAAE,CAAA;YAC3B,MAAM,OAAO,GAAa,EAAE,CAAA;YAE5B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;gBAE3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAQ;gBAEjD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBAClC,IAAI,KAAK,KAAK,CAAC,CAAC;oBAAE,SAAQ;gBAE1B,IAAI,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC5C,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBACnC,CAAC;gBAED,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,SAAQ;gBAE7D,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC3C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;oBACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC5B,CAAC;gBAED,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC3C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBACrB,SAAQ;gBACV,CAAC;gBAED,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,CAAA;gBAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACtB,CAAC;YAED,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,MAAM;gBACN,OAAO;gBACP,OAAO,EACL,UAAU,MAAM,CAAC,MAAM,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;oBACvE,CAAC,OAAO,CAAC,MAAM;wBACb,CAAC,CAAC,aAAa,OAAO,CAAC,MAAM,cAAc,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC/D,CAAC,CAAC,EAAE,CAAC;aACV,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,CAAM,EACN,aAA4B;IAE5B,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAA;IACjC,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAA;IAEzC,OAAO,IAAI,CAAC;QACV,WAAW,EAAE;YACX,iEAAiE;YACjE,sFAAsF;YACtF,gEAAgE;SACjE,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,IAAI,EAAE;YACJ,SAAS,EAAE,IAAI,CAAC,MAAM;iBACnB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,OAAO,CAAC,SAAS,CAAC;iBAClB,QAAQ,CAAC,8CAA8C,CAAC;YAC3D,IAAI,EAAE,IAAI,CAAC,MAAM;iBACd,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;iBAC3B,QAAQ,EAAE;iBACV,QAAQ,CACP,4EAA4E,CAC7E;YACH,QAAQ,EAAE,IAAI,CAAC,MAAM;iBAClB,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,OAAO,CAAC,KAAK,CAAC;iBACd,QAAQ,CAAC,oDAAoD,CAAC;YACjE,SAAS,EAAE,IAAI,CAAC,MAAM;iBACnB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,8EAA8E,CAC/E;SACJ;QACD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAA;YAEzB,IAAI,OAAiB,CAAA;YACrB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAA;YACrB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAA,GAAG,GAAG,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAA;oBAC7C,OAAO,GAAG,GAAG;yBACV,IAAI,EAAE;yBACN,KAAK,CAAC,IAAI,CAAC;yBACX,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;gBACxC,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CACb,+CAA+C,EAAE,MAAM,GAAG,CAAC,OAAO,EAAE,CACrE,CAAA;gBACH,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAA;YAC3B,MAAM,MAAM,GAAa,EAAE,CAAA;YAC3B,MAAM,OAAO,GAAa,EAAE,CAAA;YAE5B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;oBAC5B,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,EAAE;oBACzC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAA;gBAErB,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC3C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBACrB,SAAQ;gBACV,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAA,GAAG,GAAG,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;oBAC9D,IAAI,KAAK,EAAE,CAAC;wBACV,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,CAAA;wBAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBACtB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAClB,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAG;gBACZ,UAAU,MAAM,CAAC,MAAM,eAAe,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;aACtE,CAAA;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,MAAM,cAAc,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACzE,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC7D,CAAC;YAED,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;gBACzD,MAAM,EAAE,WAAW,EAAE,EAAE;gBACvB,MAAM;gBACN,OAAO;gBACP,MAAM;gBACN,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;aAC1B,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,CAAM,EACN,aAA4B;IAE5B,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAA;IACjC,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAA;IAEzC,OAAO,IAAI,CAAC;QACV,WAAW,EAAE;YACX,4DAA4D;YAC5D,8CAA8C;YAC9C,8DAA8D;SAC/D,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,IAAI,EAAE;YACJ,SAAS,EAAE,IAAI,CAAC,MAAM;iBACnB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,OAAO,CAAC,SAAS,CAAC;iBAClB,QAAQ,CAAC,8BAA8B,CAAC;SAC5C;QACD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAA;YAEzB,IAAI,SAAmB,CAAA;YACvB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAA,GAAG,GAAG,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAA;gBAC7C,SAAS,GAAG,GAAG;qBACZ,IAAI,EAAE;qBACN,KAAK,CAAC,IAAI,CAAC;qBACX,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YACxC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CACb,oCAAoC,EAAE,MAAM,GAAG,CAAC,OAAO,EAAE,CAC1D,CAAA;YACH,CAAC;YAED,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACnC,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;gBACjC,OAAO;oBACL,GAAG;oBACH,OAAO;oBACP,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG;iBAC/B,CAAA;YACH,CAAC,CAAC,CAAA;YAEF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAA;YAEzD,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,SAAS,EAAE,EAAE;gBACb,KAAK,EAAE,SAAS,CAAC,MAAM;gBACvB,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,SAAS,CAAC,MAAM,GAAG,WAAW;gBACxC,IAAI,EAAE,MAAM;aACb,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "opencode-varlock",
+  "version": "0.0.1",
+  "type": "module",
+  "description": "OpenCode plugin for secret management via Varlock with configurable env guard protection",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./config": {
+      "types": "./dist/config.d.ts",
+      "default": "./dist/config.js"
+    },
+    "./guard": {
+      "types": "./dist/guard.d.ts",
+      "default": "./dist/guard.js"
+    },
+    "./tools": {
+      "types": "./dist/tools.d.ts",
+      "default": "./dist/tools.js"
+    },
+    "./plugin": {
+      "types": "./dist/plugin.d.ts",
+      "default": "./dist/plugin.js"
+    },
+    "./permissions": "./assets/permissions.json",
+    "./varlock.config.json": "./assets/varlock.config.json",
+    "./varlock.schema.json": "./assets/varlock.schema.json",
+    "./assets/permissions.json": "./assets/permissions.json",
+    "./assets/varlock.config.json": "./assets/varlock.config.json",
+    "./assets/varlock.schema.json": "./assets/varlock.schema.json"
+  },
+  "files": [
+    "dist/",
+    "assets/",
+    "README.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "opencode",
+    "opencode-ai",
+    "opencode-plugin",
+    "varlock",
+    "secrets",
+    "env",
+    "security",
+    "guard"
+  ],
+  "homepage": "https://github.com/itlackey/opencode-varlock#readme",
+  "bugs": {
+    "url": "https://github.com/itlackey/opencode-varlock/issues"
+  },
+  "scripts": {
+    "build": "tsc --project ./tsconfig.json",
+    "clean": "rm -rf ./dist",
+    "typecheck": "tsc --project ./tsconfig.json --noEmit",
+    "validate": "npm run typecheck && npm run build && npm pack --dry-run",
+    "prepublishOnly": "npm run clean && npm run validate"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@opencode-ai/plugin": "^1.2.20"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.10",
+    "typescript": "^5.9.3"
+  },
+  "license": "MPL-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/itlackey/opencode-varlock"
+  }
+}