pantheon-opencode 1.2.0 → 1.2.1

package/src/plugin.ts

@@ -1,6 +1,9 @@
+import type { Plugin, PluginInput } from '@opencode-ai/plugin'
 import type { PluginConfig } from 'opencode'
 import { BackgroundJobBoard } from './pantheon/background-job-board.ts'
 import { FilePersistenceAdapter } from './pantheon/file-persistence.ts'
+import { applyActivePresetToConfig } from './pantheon/presets.mjs'
+import { activePresetCandidates, createVisionHandler } from './pantheon/vision.ts'
 
 // ─── Background Job Board Singleton ────────────────────────────────────
 
@@ -8,17 +11,11 @@ const board = new BackgroundJobBoard({
   maxConcurrentPerAgent: 3,
   signalDir: '.pantheon/deepwork/board-signals',
 })
-
-// Wire up file-based persistence and recover orphaned jobs from crashes
 const persistence = new FilePersistenceAdapter('.pantheon/board/state.json')
 board.setPersistence(persistence)
-
-// Recover on startup — any jobs left in "running" state become "error"
-board.recoverRunningJobs().catch((err) =>
-  console.error('[Pantheon Plugin] Failed to recover running jobs:', err),
-)
-
-// Log board state changes to console for observability
+board
+  .recoverRunningJobs()
+  .catch((err) => console.error('[Pantheon Plugin] Failed to recover running jobs:', err))
 board.onTerminal((taskID: string) => {
   const job = board.get(taskID)
   if (job) {
@@ -29,29 +26,76 @@ board.onTerminal((taskID: string) => {
 })
 
 /**
- * Get the global BackgroundJobBoard singleton.
+ * Pantheon plugin for OpenCode. Pasted images are intercepted via the
+ * `chat.message` hook (proven to fire in opencode 1.18.11). When a provider
+ * key is available — env PANTHEON_OPENCODE_API_KEY / OPENCODE_API_KEY, or the
+ * opencode auth store for `opencode auth login` users — the image is
+ * described NATIVELY by the multimodal model via the opencode Zen
+ * OpenAI-compatible endpoint, and replaced with the text description — no MCP
+ * tool required. Without a key the legacy pattern applies: the image is
+ * replaced with a text instruction telling the model to call a vision MCP tool
+ * (default `pantheon_vision_vision_describe`). Either way the image never reaches
+ * the main provider, so text-only models cannot fail with an `image_url` error.
  *
- * All modules (Zeus, auto-wake, etc.) should access the board through this
- * function to ensure a single consistent state machine across the plugin.
+ * The canonical `pantheon-vision` MCP owns the standalone describe/OCR/analyze
+ * tools. The installed OpenCode plugin API exposes no stable pre-provider
+ * message hook (1.18.11 only exposes the experimental history transform), so
+ * that transform is retained as the runtime-compatible fallback. If a stable
+ * provider-bound hook is added, register the same sanitizer there instead of
+ * assuming this experimental hook is guaranteed to run.
+ *
+ * IMPORTANT (OpenCode 1.18.11 legacy loader): this module must export EXACTLY
+ * ONE function-valued export — the default plugin. The legacy loader does
+ * `Object.values(mod)` and invokes every function export as a plugin factory;
+ * any named function export (e.g. a re-exported helper like
+ * generateInjectionPrompt) is called with a PluginInput object and can throw.
+ * Helpers live in src/pantheon/vision.ts and are imported from there directly.
  */
-export function getBackgroundJobBoard(): BackgroundJobBoard {
-  return board
-}
+const plugin: Plugin = async (input: PluginInput) => {
+  const vision = createVisionHandler(input)
 
-export default {
-  name: 'pantheon',
-  version: '5.0.0',
-  description: 'Pantheon multi-agent orchestration platform',
-
-  hooks: {
+  return {
     config: async (config: PluginConfig) => {
       config.agentsPath = config.agentsPath ?? []
       config.agentsPath.push(new URL('./agents', import.meta.url).pathname)
-
       config.skillsPaths = config.skillsPaths ?? []
       config.skillsPaths.push(new URL('./skills', import.meta.url).pathname)
 
-      return config
+      // Apply the active model preset (`init --preset` / `set-tier` write
+      // .pantheon/active-preset.json): resolve it with the SAME candidate
+      // order the vision handler uses (project > XDG > HOME) and mutate the
+      // agent models / reasoning effort / fallback models + provider configs.
+      // Fail-safe: without an active preset the config is untouched; a missing
+      // provider key is logged and skipped — the hook must never break startup
+      // (set-tier already fail-fast validates keys at write time). Vision
+      // rotation stays in vision.ts, which resolves its model independently.
+      try {
+        const resolved = applyActivePresetToConfig(config, {
+          candidates: activePresetCandidates(),
+        })
+        if (resolved) {
+          console.log(
+            `[Pantheon Plugin] Applied model preset: ${resolved.name} (${resolved.source})`,
+          )
+        }
+      } catch {
+        // Fully STATIC warning — the thrown error object is tainted because
+        // presets.mjs constructs it with the provider's apiKeyEnv name (e.g.
+        // PANTHEON_OPENCODE_API_KEY), and CodeQL's clear-text logging dataflow
+        // flags ANY interpolation derived from it — including err.name and
+        // err.message. The env var name is not itself sensitive to log, but
+        // the scanner cannot distinguish it, so nothing derived from the error
+        // may appear here. Diagnostics (provider id + env var) are already
+        // emitted by applyActivePresetToConfig's own logger before it throws.
+        // The catch binding is intentionally omitted so no tainted value can
+        // ever reach this log line (CodeQL alert #11).
+        console.warn('[plugin] preset application failed (see logs for details)')
+      }
     },
-  },
-} satisfies PluginConfig
+    'chat.message': vision.chatMessage,
+    'experimental.chat.messages.transform': vision.messagesTransform,
+    event: vision.event,
+  }
+}
+
+export default plugin

package/src/plugins/tui/package.json

@@ -1,8 +1,8 @@
 {
   "name": "pantheon-tui",
   "type": "module",
-  "version": "1.0.0",
-  "description": "Pantheon TUI sidebar plugin \u2014 agent status, commands, and system info",
+  "version": "1.2.0",
+  "description": "Pantheon TUI plugin \u2014 sidebar (agents, sessions, commands, config, memory, active preset) + AI subscription usage gauges incl. OpenCode Go/Zen dollar limits (vendored, MIT)",
   "license": "MIT",
   "exports": {
     "./tui": "./dist/tui.tsx"
@@ -32,4 +32,4 @@
     "@opentui/solid": ">=0.4.5",
     "solid-js": ">=1.9.0"
   }
-}
+}