opencode-workflow-guard 1.8.6 → 1.8.7

package/README.md

@@ -23,7 +23,7 @@ opencode plugin "opencode-workflow-guard@$VERSION" --global --force
 
 *Requires OpenCode >= 1.18.* OpenCode detects the package's server and TUI targets and updates both global configs. Use the same command after a release to upgrade; the explicit version gives OpenCode a fresh package-cache key. Restart OpenCode after installation. See [docs/installation.md](docs/installation.md) for details and links to the OpenCode plugin documentation.
 
-For the optional TUI badge, configure `"opencode-workflow-guard"` in `tui.json`. OpenCode resolves the package's exported `./tui` entrypoint automatically for TUI plugins. The companion shows a `Workflow Guard` shield in the prompt bar and reflects blocked state without changing agent behavior. Do not place the TUI module under the server `plugins/` directory.
+For the optional TUI badge, configure `"opencode-workflow-guard"` in `tui.json`. OpenCode resolves the package's exported `./tui` entrypoint automatically for TUI plugins. The companion keeps a static `Workflow Guard` shield in the prompt bar; warning toasts provide block details without changing agent behavior. Do not place the TUI module under the server `plugins/` directory.
 
 ![Workflow Guard status badge in the OpenCode TUI](docs/assets/workflow-guard-tui-badge.png)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-workflow-guard",
-  "version": "1.8.6",
+  "version": "1.8.7",
   "description": "Deterministic workflow and safety policy enforcement for OpenCode",
   "license": "MIT",
   "type": "module",

package/src/lib/custom-tools.ts

@@ -24,6 +24,7 @@ import {
 	isReviewRequired,
 	recordMutation,
 	recordReviewResult,
+	runWithRuntimeState,
 } from "./state.ts";
 import { loadProjectConfig } from "./project-config.ts";
 import { detectVerifyCommand, getCurrentGitCommitHash } from "./verify.ts";
@@ -53,8 +54,9 @@ export function createCustomTools(options: {
 	followupStore: ProjectMemoryStore | undefined;
 	portableMemoryPath: string;
 	learningInterventions: Map<string, number>;
+	client: unknown;
 }) {
-	const { effectiveRoot, projectMemoryEnabled, learningEnabled, projectMemory, followupStore, portableMemoryPath, learningInterventions } = options;
+	const { effectiveRoot, projectMemoryEnabled, learningEnabled, projectMemory, followupStore, portableMemoryPath, learningInterventions, client } = options;
 	return {
 		...(getProjectConfig(effectiveRoot).recoveryCheckpoints === true ? {
 			guard_recovery_restore: tool({
@@ -155,7 +157,7 @@ export function createCustomTools(options: {
 			args: { reviewer: tool.schema.string().describe("Identifier/name of the reviewer subagent"), summary: tool.schema.string().describe("Review findings summary across the 5 core review axes"), passed: tool.schema.boolean().describe("True if change is approved, false if changes requested") },
 			execute: async (args, toolContext) => {
 				const auditVerdict = (verdict: "approved" | "changes_requested" | "rejected", reason: string) => audit({ ts: new Date().toISOString(), sessionID: toolContext.sessionID, tool: "record_review.verdict", decision: verdict === "rejected" ? "block" : "allow", phase: "event", reason, evidence: { reviewVerdict: verdict } });
-				const parentSessionID = await fetchParentSessionID(toolContext.sessionID);
+				const parentSessionID = await runWithRuntimeState(effectiveRoot, client, () => fetchParentSessionID(toolContext.sessionID));
 				if (!parentSessionID) { auditVerdict("rejected", "missing_parent_session"); return "[workflow-guard] Review rejected: record_review must be called from a secondary/subagent session."; }
 				const axesRefs = ["test integrity", "task completeness", "cleanliness", "security", "platform"];
 				const referenced = axesRefs.filter((axis) => args.summary.toLowerCase().includes(axis));

package/src/workflow-guard-ui.ts

@@ -1,5 +1,4 @@
 import type { TuiPlugin, TuiPluginModule } from "@opencode-ai/plugin/tui";
-import type { BaseRenderable } from "@opentui/core";
 import type { JSX } from "@opentui/solid";
 import { createElement, insert, setProp } from "@opentui/solid";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
@@ -31,9 +30,6 @@ function text(props: Record<string, unknown>, children: Child[]) {
 }
 
 const BADGE_ACTIVE = "Workflow Guard 🛡️";
-const BLOCKED_BADGE_DURATION_MS = 5_000;
-let lastBlockedReason: string | undefined;
-const sessionBlockedReasons = new Map<string, string>();
 
 type ProjectToggle = "recoveryCheckpoints" | "projectMemory" | "learning" | "titleSettleWorkaround";
 
@@ -74,29 +70,11 @@ export function writeRecoveryCheckpointsOption(root: string, enabled: boolean):
 	return writeProjectOption(root, "recoveryCheckpoints", enabled);
 }
 
-export function setLastBlockedReasonForTesting(reason: string | undefined): void {
-	lastBlockedReason = reason;
-	if (reason === undefined) sessionBlockedReasons.clear();
-}
-
-export function getLastBlockedReason(): string | undefined {
-	return lastBlockedReason;
-}
-
-export function formatBadge(sessionID?: string): { text: string; isBlocked: boolean } {
-	const reason = sessionID ? sessionBlockedReasons.get(sessionID) : lastBlockedReason;
-	if (!reason) {
-		return { text: BADGE_ACTIVE, isBlocked: false };
-	}
-	const cleanReason = reason.replace(/^\[workflow-guard\]\s*/i, "").replace(/^Blocked(?::|\s+)\s*/i, "");
-	const shortReason = cleanReason.length > 30 ? cleanReason.slice(0, 27) + "..." : cleanReason;
-	return { text: `[Workflow Guard: Blocked: ${shortReason}]`, isBlocked: true };
+export function formatBadge(): { text: string; isBlocked: boolean } {
+	return { text: BADGE_ACTIVE, isBlocked: false };
 }
 
 export const WorkflowGuardTui: TuiPlugin = async (api) => {
-	const badgeNodes = new Map<string, BaseRenderable>();
-	const blockedBadgeTimers = new Map<string, ReturnType<typeof setTimeout>>();
-
 	api.keymap.registerLayer({
 		commands: [{
 			name: "workflow-guard.project-options",
@@ -132,67 +110,18 @@ export const WorkflowGuardTui: TuiPlugin = async (api) => {
 		bindings: [],
 	});
 
-	function scheduleBadgeReset(sessionID?: string): void {
-		const key = sessionID ?? "home";
-		const existing = blockedBadgeTimers.get(key);
-		if (existing) clearTimeout(existing);
-		blockedBadgeTimers.set(key, setTimeout(() => {
-			blockedBadgeTimers.delete(key);
-			if (sessionID) sessionBlockedReasons.delete(sessionID);
-			else lastBlockedReason = undefined;
-			const node = badgeNodes.get(key);
-			if (node) {
-				setProp(node, "content", BADGE_ACTIVE);
-				setProp(node, "fg", api.theme.current.success);
-			}
-		}, BLOCKED_BADGE_DURATION_MS));
-	}
-
-	try {
-		api.event.on("tui.toast.show", (e) => {
-			const title = e.properties.title;
-			const msg = e.properties.message;
-			if (title === "Workflow Guard Blocked" && typeof msg === "string") {
-				const route = api.route.current;
-				const sessionID =
-					route.name === "session" && typeof route.params?.sessionID === "string"
-						? route.params.sessionID
-						: undefined;
-				if (sessionID) sessionBlockedReasons.set(sessionID, msg);
-				else lastBlockedReason = msg;
-				const key = sessionID ?? "home";
-				const node = badgeNodes.get(key);
-				if (node) {
-					const badge = formatBadge(sessionID);
-					setProp(node, "content", badge.text);
-					setProp(node, "fg", badge.isBlocked ? api.theme.current.warning : api.theme.current.success);
-				}
-				scheduleBadgeReset(sessionID);
-			}
-		});
-	} catch {}
-
 	api.slots.register({
 		order: 1,
 		slots: {
 			home_prompt_right() {
 				const theme = api.theme.current;
 				const badge = formatBadge();
-				const node = text({ fg: badge.isBlocked ? theme.warning : theme.success }, [badge.text]);
-				badgeNodes.set("home", node as unknown as BaseRenderable);
-				return node;
+				return text({ fg: theme.success }, [badge.text]);
 			},
 			session_prompt_right() {
 				const theme = api.theme.current;
-				const route = api.route.current;
-				const sessionID =
-					route.name === "session" && typeof route.params?.sessionID === "string"
-						? route.params.sessionID
-						: undefined;
-				const badge = formatBadge(sessionID);
-				const node = text({ fg: badge.isBlocked ? theme.warning : theme.success }, [badge.text]);
-				if (sessionID) badgeNodes.set(sessionID, node as unknown as BaseRenderable);
-				return node;
+				const badge = formatBadge();
+				return text({ fg: theme.success }, [badge.text]);
 			},
 		},
 	});

package/src/workflow-guard.ts

@@ -371,7 +371,7 @@ export const WorkflowGuard: Plugin = async (ctx) => {
 	const toolOutcomes = new ToolOutcomeTracker();
 
 	return {
-		tool: createCustomTools({ effectiveRoot, projectMemoryEnabled, learningEnabled, projectMemory, followupStore, portableMemoryPath, learningInterventions }),
+		tool: createCustomTools({ effectiveRoot, projectMemoryEnabled, learningEnabled, projectMemory, followupStore, portableMemoryPath, learningInterventions, client: ctx.client }),
 
 		"tool.execute.before": async (input, output) => {
 			const toolWorktree =