pantheon-opencode 1.2.1 → 1.2.2

package/scripts/hooks/audit-imports.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# audit-imports.sh — Pantheon PostToolUse Import Audit Hook
+# Blocks wildcard imports and flags suspicious patterns.
+set -euo pipefail
+
+FILE_PATH="${FILE_PATH:-${1:-}}"
+
+if [[ -z "$FILE_PATH" ]] || [[ ! -f "$FILE_PATH" ]]; then
+    # Scan all Python/JS files in recent changes if no file specified
+    FILES=$(git diff --name-only HEAD 2>/dev/null | grep -E '\.(py|js|ts|jsx|tsx)$' || true)
+    if [[ -z "$FILES" ]]; then
+        exit 0
+    fi
+else
+    FILES="$FILE_PATH"
+fi
+
+FOUND=0
+for f in $FILES; do
+    [[ -f "$f" ]] || continue
+    EXT="${f##*.}"
+    case "$EXT" in
+        py)
+            if grep -qE '^from\s+\S+\s+import\s+\*' "$f"; then
+                echo "[IMPORT AUDIT] Wildcard import found in $f" >&2
+                FOUND=1
+            fi
+            ;;
+        js|jsx|ts|tsx)
+            # Flag require() without destructuring as suspicious
+            if grep -qE 'require\([^)]+\)' "$f"; then
+                echo "[IMPORT AUDIT] CommonJS require() found in $f — consider ES modules" >&2
+            fi
+            ;;
+    esac
+done
+
+if [[ $FOUND -eq 1 ]]; then
+    echo "[IMPORT AUDIT] Fix wildcard imports before committing." >&2
+    exit 1
+fi
+
+exit 0

package/scripts/hooks/format-multi-language.sh

@@ -0,0 +1,96 @@
+#!/usr/bin/env bash
+# format-multi-language.sh — Pantheon PostToolUse Formatting Hook
+# Runs appropriate formatter on the modified file.
+# Supports both Claude Code stdin protocol and legacy env-var input.
+set -euo pipefail
+SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd -- "$SCRIPT_DIR/../.." && pwd)"
+
+# ── Claude Code stdin protocol ──────────────────────────────────────────
+# Parse JSON from stdin when piped (PostToolUse hook format).
+# Extracts file_path from Edit/Write or file paths from Bash commands.
+if [ -p /dev/stdin ]; then
+  STDIN_JSON=$(cat)
+  TOOL_NAME=$(echo "$STDIN_JSON" | python3 -c "
+import sys, json
+d = json.load(sys.stdin)
+print(d.get('tool_name', ''))
+" 2>/dev/null || echo "")
+
+  case "$TOOL_NAME" in
+    Edit|Write)
+      JSON_PATH=$(echo "$STDIN_JSON" | python3 -c "
+import sys, json
+d = json.load(sys.stdin)
+print(d.get('tool_input', {}).get('file_path', ''))
+" 2>/dev/null || echo "")
+      if [ -n "$JSON_PATH" ]; then
+        FILE_PATH="$JSON_PATH"
+      fi
+      ;;
+    Bash)
+      COMMAND=$(echo "$STDIN_JSON" | python3 -c "
+import sys, json
+d = json.load(sys.stdin)
+print(d.get('tool_input', {}).get('command', ''))
+" 2>/dev/null || echo "")
+      if [ -n "$COMMAND" ]; then
+        # Extract first file-like path from bash command (supports relative and quoted paths)
+        CANDIDATE=$(python3 -c "
+import re, shlex, sys
+command = sys.argv[1]
+try:
+    tokens = shlex.split(command)
+except ValueError:
+    tokens = command.split()
+path_re = re.compile(r'^([^\\n]+\\.[A-Za-z0-9]+)$')
+for token in tokens:
+    if token.startswith('-'):
+        continue
+    if path_re.match(token):
+        print(token)
+        break
+" "$COMMAND" 2>/dev/null || echo "")
+        if [ -n "$CANDIDATE" ]; then
+          FILE_PATH="$CANDIDATE"
+        fi
+      fi
+      ;;
+  esac
+fi
+
+FILE_PATH="${FILE_PATH:-${1:-}}"
+if [[ -n "$FILE_PATH" ]] && [[ "$FILE_PATH" != /* ]]; then
+    if [[ -f "$REPO_ROOT/$FILE_PATH" ]]; then
+        FILE_PATH="$REPO_ROOT/$FILE_PATH"
+    fi
+fi
+
+if [[ -z "$FILE_PATH" ]] || [[ ! -f "$FILE_PATH" ]]; then
+    exit 0
+fi
+
+EXT="${FILE_PATH##*.}"
+EXIT_CODE=0
+
+case "$EXT" in
+    py)
+        if command -v ruff >/dev/null 2>&1; then
+            ruff format "$FILE_PATH" || true
+        elif command -v black >/dev/null 2>&1; then
+            black -q "$FILE_PATH" || true
+        fi
+        ;;
+    js|jsx|ts|tsx|json|jsonc|md|yaml|yml|css|html)
+        if command -v prettier >/dev/null 2>&1; then
+            prettier --write "$FILE_PATH" || true
+        fi
+        ;;
+    sh|bash)
+        if command -v shfmt >/dev/null 2>&1; then
+            shfmt -w "$FILE_PATH" || true
+        fi
+        ;;
+esac
+
+exit 0

package/scripts/hooks/log-session-start.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# log-session-start.sh — Pantheon SessionStart Logging Hook
+# Logs session start with structured JSON.
+set -euo pipefail
+
+# Project-local by default; set XDG_STATE_HOME for system-wide logging
+if [ -n "${LOG_DIR:-}" ]; then
+    LOG_DIR="$LOG_DIR"
+elif [ -n "${XDG_STATE_HOME:-}" ]; then
+    LOG_DIR="$XDG_STATE_HOME/pantheon/hooks"
+else
+    LOG_DIR="logs/agent-sessions"
+fi
+mkdir -p "$LOG_DIR"
+
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+SESSION_ID="${SESSION_ID:-$(date +%s)}"
+
+cat >> "$LOG_DIR/sessions.log" << JSON
+{"event":"SessionStart","timestamp":"$TIMESTAMP","session_id":"$SESSION_ID","platform":"${PLATFORM:-unknown}"}
+JSON
+
+echo "[LOG] Session start logged → $LOG_DIR/sessions.log" >&2
+exit 0

package/scripts/hooks/on-subagent-delegation-start.sh

@@ -0,0 +1,91 @@
+#!/usr/bin/env bash
+# on-subagent-delegation-start.sh — Pantheon SubagentStart Audit Hook
+# Logs when Zeus delegates to a subagent.
+set -euo pipefail
+
+# Project-local by default; set XDG_STATE_HOME for system-wide logging
+if [ -n "${LOG_DIR:-}" ]; then
+    LOG_DIR="$LOG_DIR"
+elif [ -n "${XDG_STATE_HOME:-}" ]; then
+    LOG_DIR="$XDG_STATE_HOME/pantheon/hooks"
+else
+    LOG_DIR="logs/agent-sessions"
+fi
+mkdir -p "$LOG_DIR"
+
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+AGENT_NAME="${AGENT_NAME:-unknown}"
+TASK_DESC="${TASK_DESC:-${1:-}}"
+
+cat >> "$LOG_DIR/delegations.log" << JSON
+{"event":"SubagentStart","timestamp":"$TIMESTAMP","agent":"$AGENT_NAME","task":"$TASK_DESC"}
+JSON
+
+echo "[DELEGATION] $AGENT_NAME started → $LOG_DIR/delegations.log" >&2
+
+# --- Dispatch-time validation: check target against routing.yml ---
+SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd -- "$SCRIPT_DIR/../.." && pwd)"
+ROUTING_FILE="$REPO_ROOT/routing.yml"
+if [ -f "$ROUTING_FILE" ] && [ -n "$AGENT_NAME" ]; then
+    ESCAPED_AGENT_NAME=$(printf '%s\n' "$AGENT_NAME" | sed 's/[][(){}.^$*+?|\/\\-]/\\&/g')
+    if grep -qE "^[[:space:]]*-[[:space:]]+target:[[:space:]]+$ESCAPED_AGENT_NAME[[:space:]]*$" "$ROUTING_FILE" 2>/dev/null; then
+        echo "[VALIDATION] ✅ Target '$AGENT_NAME' found in routing.yml" >&2
+    else
+        echo "[VALIDATION] ⚠️ Target '$AGENT_NAME' NOT in routing.yml delegation rules" >&2
+    fi
+elif [ ! -f "$ROUTING_FILE" ]; then
+    echo "[VALIDATION] ⚠️ Could not read routing.yml for validation" >&2
+fi
+
+# --- Cost estimation for delegation ---
+declare -A TIER_MAP
+TIER_MAP[athena]="premium"
+TIER_MAP[themis]="premium"
+TIER_MAP[hermes]="default"
+TIER_MAP[aphrodite]="default"
+TIER_MAP[demeter]="default"
+TIER_MAP[prometheus]="default"
+TIER_MAP[hephaestus]="default"
+TIER_MAP[gaia]="default"
+TIER_MAP[zeus]="default"
+TIER_MAP[apollo]="fast"
+TIER_MAP[nyx]="fast"
+TIER_MAP[iris]="fast"
+TIER_MAP[mnemosyne]="fast"
+TIER_MAP[talos]="fast"
+
+TIER="${TIER_MAP[$AGENT_NAME]:-default}"
+
+case "$TIER" in
+    premium)
+        COST_MIN=0.50
+        COST_MAX=2.00
+        COST_EST=1.25
+        ;;
+    fast)
+        COST_MIN=0.02
+        COST_MAX=0.10
+        COST_EST=0.06
+        ;;
+    *)
+        COST_MIN=0.10
+        COST_MAX=0.50
+        COST_EST=0.30
+        ;;
+esac
+
+# Format cost with 2 decimal places
+COST_EST_FMT=$(printf "%.2f" "$COST_EST")
+
+if [ "$TIER" = "premium" ]; then
+    echo "[COST_WARN] High-cost delegation to $AGENT_NAME — estimated \$$COST_EST_FMT" >&2
+fi
+
+if (( $(echo "$COST_EST > 5.00" | bc -l 2>/dev/null) )); then
+    echo "[COST_ALERT] Expensive delegation to $AGENT_NAME — consider if subtask is possible" >&2
+fi
+
+echo "[COST] Delegation to $AGENT_NAME — tier: $TIER — estimated: \$$COST_EST_FMT" >&2
+
+exit 0

package/scripts/hooks/on-subagent-delegation-stop.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+# on-subagent-delegation-stop.sh — Pantheon SubagentStop Audit Hook
+# Logs completion or failure of subagent tasks.
+set -euo pipefail
+
+# Project-local by default; set XDG_STATE_HOME for system-wide logging
+if [ -n "${LOG_DIR:-}" ]; then
+    LOG_DIR="$LOG_DIR"
+elif [ -n "${XDG_STATE_HOME:-}" ]; then
+    LOG_DIR="$XDG_STATE_HOME/pantheon/hooks"
+else
+    LOG_DIR="logs/agent-sessions"
+fi
+mkdir -p "$LOG_DIR"
+
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+AGENT_NAME="${AGENT_NAME:-unknown}"
+STATUS="${STATUS:-success}"
+REASON="${REASON:-${1:-}}"
+
+LOG_FILE="$LOG_DIR/delegations.log"
+if [[ "$STATUS" == "failure" ]]; then
+    LOG_FILE="$LOG_DIR/delegation-failures.log"
+fi
+
+cat >> "$LOG_FILE" << JSON
+{"event":"SubagentStop","timestamp":"$TIMESTAMP","agent":"$AGENT_NAME","status":"$STATUS","reason":"$REASON"}
+JSON
+
+echo "[DELEGATION] $AGENT_NAME stopped ($STATUS) → $LOG_FILE" >&2
+
+# --- Post-condition validation: remind about Themis review ---
+if echo "hermes aphrodite demeter prometheus" | grep -wq "$AGENT_NAME" 2>/dev/null; then
+    echo "[POST-CONDITION] 🔔 Reminder: '$AGENT_NAME' should call Themis for review after implementation" >&2
+fi
+
+exit 0

package/scripts/hooks/run-type-check.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# run-type-check.sh — Pantheon PostToolUse Type Check Hook
+# Runs mypy (Python) or tsc (TypeScript) if config exists.
+set -euo pipefail
+
+# Only run if relevant config files exist
+if [[ -f "pyproject.toml" ]] || [[ -f "setup.cfg" ]] || [[ -f ".mypy.ini" ]]; then
+    if command -v mypy >/dev/null 2>&1; then
+        echo "[TYPE CHECK] Running mypy..." >&2
+        mypy . --ignore-missing-imports || true
+    fi
+fi
+
+if [[ -f "tsconfig.json" ]]; then
+    if command -v tsc >/dev/null 2>&1; then
+        echo "[TYPE CHECK] Running tsc --noEmit..." >&2
+        tsc --noEmit || true
+    fi
+fi
+
+exit 0

package/scripts/hooks/scan-secrets.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# scan-secrets.sh — Pantheon PreToolUse Secret Scanning Hook
+# Detects hardcoded secrets in tool input.
+set -euo pipefail
+
+SECRET_PATTERNS=(
+    "AKIA[0-9A-Z]{16}"
+    "gh[pousr]_[A-Za-z0-9_]{36,}"
+    "glpat-[A-Za-z0-9_\\-]{20}"
+    "sk-[a-zA-Z0-9]{20,}"
+    "sk_live_[a-zA-Z0-9]{20,}"
+    "sk_test_[a-zA-Z0-9]{20,}"
+    "xox[baprs]-[0-9]{10,13}-[0-9]{10,13}-[a-zA-Z0-9]{24}"
+    "[a-zA-Z0-9_-]*api[_-]?key[a-zA-Z0-9_-]*\s*[:=]\s*[\"']?[a-zA-Z0-9_\\-]{16,}[\"']?"
+    "[a-zA-Z0-9_-]*password[a-zA-Z0-9_-]*\s*[:=]\s*[\"'][^\"']{8,}[\"']"
+    "[a-zA-Z0-9_-]*secret[a-zA-Z0-9_-]*\s*[:=]\s*[\"'][^\"']{8,}[\"']"
+    "bearer\s+[a-zA-Z0-9_\\-\\.]{20,}"
+    "eyJ[A-Za-z0-9_-]*\.eyJ[A-Za-z0-9_-]*\.[A-Za-z0-9_-]*"
+)
+
+# Keep provider-specific markers assembled so this scanner is not self-matched
+# by the repository secret test.
+BIFROST_HEADER="x""-bf-""vk"
+BIFROST_TOKEN_PREFIX="sk""-bf-"
+SECRET_PATTERNS+=(
+    "$BIFROST_HEADER"
+    "${BIFROST_TOKEN_PREFIX}[A-Za-z0-9_-]{8,}"
+)
+
+INPUT="${1:-${TOOL_INPUT:-}}"
+if [[ -z "$INPUT" ]] && [[ ! -t 0 ]]; then
+    INPUT=$(cat)
+fi
+
+if [[ -z "$INPUT" ]]; then
+    exit 0
+fi
+
+FOUND=0
+for pattern in "${SECRET_PATTERNS[@]}"; do
+    if echo "$INPUT" | grep -iqE "$pattern"; then
+        MATCH=$(echo "$INPUT" | grep -ioE "$pattern" | head -1)
+        # Mask the match for safe logging
+        MASKED="${MATCH:0:4}****${MATCH: -4}"
+        echo "[SECRET SCAN] Potential secret detected: $MASKED (pattern: $pattern)" >&2
+        FOUND=1
+    fi
+done
+
+if [[ $FOUND -eq 1 ]]; then
+    echo "[SECRET SCAN] Hardcoded secret detected. Remove it and use environment variables or a vault." >&2
+    exit 1
+fi
+
+exit 0

package/scripts/hooks/validate-post-conditions.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# validate-post-conditions.sh — Stop hook
+# Checks that Themis review was called after implementation
+set -euo pipefail
+
+# Read JSON input from stdin
+INPUT=$(cat)
+SESSION_ID=$(echo "$INPUT" | python3 -c "import sys,json; print(json.load(sys.stdin).get('session_id',''))" 2>/dev/null || echo "")
+
+REVIEW_DIR=".pantheon/memory-bank/.tmp"
+if [ -d "$REVIEW_DIR" ]; then
+    REVIEW_COUNT=$(ls "$REVIEW_DIR"/REVIEW-* 2>/dev/null | wc -l)
+    if [ "$REVIEW_COUNT" -eq 0 ]; then
+        echo "[POST-CONDITION] ⚠️ No REVIEW artifact found in $REVIEW_DIR/" >&2
+        echo "[POST-CONDITION] 💡 Remember: implementation agents MUST call @themis for review" >&2
+    else
+        echo "[POST-CONDITION] ✅ $REVIEW_COUNT REVIEW artifact(s) found" >&2
+    fi
+fi
+
+exit 0

package/scripts/hooks/validate-talos-scope.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# validate-talos-scope.sh — PreToolUse hook for Talos
+# Receives JSON on stdin, enforces Talos boundaries
+set -euo pipefail
+
+# Read JSON input from stdin (Claude Code hook protocol)
+INPUT=$(cat)
+
+# Extract tool info from JSON input
+TOOL_NAME=$(echo "$INPUT" | python3 -c "import sys,json; print(json.load(sys.stdin).get('tool_name',''))" 2>/dev/null || echo "")
+TOOL_INPUT=$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(json.dumps(d.get('tool_input',{})))" 2>/dev/null || echo "")
+
+# Only validate for Talos agent
+AGENT_NAME=$(echo "$INPUT" | python3 -c "import sys,json; print(json.load(sys.stdin).get('agent_id',''))" 2>/dev/null || echo "")
+if [ "$AGENT_NAME" != "talos" ]; then
+    # Not Talos — allow pass-through
+    echo "[TALOS SCOPE] Not Talos agent, skipping" >&2
+    exit 0
+fi
+
+# Get changed files from the tool input
+if echo "$TOOL_INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('command','') or d.get('filePath','') or d.get('file_path',''))" 2>/dev/null | grep -qE '(migration|schema\.sql|alembic|models/.*\.py|auth|security|password|token|secret)'; then
+    echo "[TALOS SCOPE] ❌ Blocked: Talos cannot modify schema/security files" >&2
+    exit 2
+fi
+
+# Count files in the edit/write operation
+FILE_COUNT=$(echo "$TOOL_INPUT" | python3 -c "
+import sys, json
+try:
+    d = json.load(sys.stdin)
+    # Count unique file paths in the input
+    files = set()
+    for key in ['filePath', 'file_path', 'command', 'content']:
+        if key in d and d[key]:
+            files.add(str(d[key]))
+    print(len(files))
+except:
+    print('0')
+" 2>/dev/null || echo "0")
+
+echo "[TALOS SCOPE] ✅ Scope check passed" >&2
+exit 0

package/scripts/hooks/validate-tool-safety.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+# validate-tool-safety.sh — Pantheon PreToolUse Security Hook
+# Blocks destructive commands: rm -rf, DROP TABLE, TRUNCATE, etc.
+set -euo pipefail
+
+BLOCKED_PATTERNS=(
+    # "rm -rf /" appears mid-JSON in the hook stdin protocol (e.g.
+    # {"tool_input":{"command":"rm -rf /"}}), so the old `/$` end-of-line
+    # anchor never matched. Match "/" followed by a JSON delimiter (", },
+    # comma), whitespace, or end of line — catches bare "rm -rf /" anywhere
+    # in the payload while keeping "rm -rf /some/path" (safe) unblocked.
+    "rm\s+-rf\s+/([\"},\t[:space:]]|$)"   # rm -rf / (root only)
+    "rm\s+-rf\s+/\*"         # rm -rf /*
+    "rm\s+-rf\s+~([\",[:space:]]|$)"      # rm -rf ~ (home only)
+    "rm\s+-rf\s+~/"          # rm -rf ~/...
+    "rm\s+-rf\s+\.\.?/"      # rm -rf ./ or rm -rf ../
+    "DROP\s+TABLE"
+    "DROP\s+DATABASE"
+    "TRUNCATE\s+TABLE"
+    "DELETE\s+FROM\s+.*;?\s*$"
+    "rm\s+.*\s+--no-preserve-root"
+    ":(){ :|:& };:"
+    ">\s*/dev/\(sd[a-z]\|hd[a-z]\|disk[0-9]*\)"
+    "dd\s+if=.*of=/dev/"
+    "mkfs\."
+    "fdisk\s+/dev/"
+)
+
+INPUT="${1:-${TOOL_INPUT:-}}"
+if [[ -z "$INPUT" ]] && [[ ! -t 0 ]]; then
+    INPUT=$(cat)
+fi
+
+if [[ -z "$INPUT" ]]; then
+    exit 0
+fi
+
+for pattern in "${BLOCKED_PATTERNS[@]}"; do
+    if echo "$INPUT" | grep -iqE "$pattern"; then
+        echo "[SECURITY BLOCKED] Pattern matched: $pattern" >&2
+        echo "[SECURITY BLOCKED] Destructive command detected and blocked by Pantheon hook." >&2
+        exit 1
+    fi
+done
+
+exit 0

package/scripts/install/opencode.mjs

@@ -13,7 +13,7 @@ import {
   writeFileSync,
 } from 'node:fs'
 import { homedir } from 'node:os'
-import { join, resolve } from 'node:path'
+import { basename, join, resolve } from 'node:path'
 import {
   bullet,
   colors,
@@ -193,8 +193,9 @@ export async function installOpenCode(
     const srcRouting = join(ROOT, 'src', 'routing.yml')
     const dstRouting = join(target, 'routing.yml')
     if (existsSync(srcRouting)) {
-      writeIfChanged(dstRouting, readFileSync(srcRouting, 'utf8'), dryRun)
-      stats.created++
+      const routingStatus = writeIfChanged(dstRouting, readFileSync(srcRouting, 'utf8'), dryRun)
+      if (routingStatus === 'created') stats.created++
+      else stats.skipped++
     }
   }
 
@@ -280,27 +281,12 @@ export async function installOpenCode(
 
   // -----------------------------------------------------------------------
   // -----------------------------------------------------------------------
-  // 2.7 Ensure subagent_depth in opencode.json
+  // 2.7 subagent_depth is merged into opencode.json in the config section
+  // below (always runs) — see "Ensure critical top-level config sections".
+  // Previously this was a separate block gated on the config file already
+  // existing, so a FRESH install only gained subagent_depth on the SECOND
+  // init run (idempotence bug, issue #19).
   // -----------------------------------------------------------------------
-  if (componentSet.has('agents')) {
-    const cfgPath = join(target, 'opencode.json')
-    if (existsSync(cfgPath)) {
-      try {
-        const cfg = JSON.parse(readFileSync(cfgPath, 'utf8'))
-        let changed = false
-        if (cfg.subagent_depth === undefined) {
-          cfg.subagent_depth = 2
-          changed = true
-        }
-        if (changed && !dryRun) {
-          writeFileSync(cfgPath, `${JSON.stringify(cfg, null, 2)}\n`)
-          success('subagent_depth: 2 added to opencode.json')
-        }
-      } catch (e) {
-        warning(`Could not update opencode.json: ${e.message}`)
-      }
-    }
-  }
 
   // 2.8 Install TUI plugins (--components plugins)
   // -----------------------------------------------------------------------
@@ -322,9 +308,16 @@ export async function installOpenCode(
   const targetTuiConfigPath = isGlobal
     ? join(target, 'tui.json')
     : join(target, '.opencode', 'tui.json')
-  const pluginRef = 'plugins/pantheon-tui'
-  unregisterPlugin(targetTuiConfigPath, pluginRef, { dryRun })
-  const tuiStatus = registerPlugin(targetTuiConfigPath, pluginRef, { dryRun })
+  // Hermetic TUI plugin registration: opencode's tui loader treats relative
+  // entries ("plugins/pantheon-tui") as npm/github package specs and fails
+  // with NpmInstallFailedError ("Repository not found"). Register the plugin
+  // by the ABSOLUTE path of the built dist inside the installed package
+  // (derived from ROOT — never hardcoded), mirroring the loader's
+  // absolute-path support (same pattern as the hooks plugin fix).
+  const tuiPluginRef = join(ROOT, 'src', 'plugins', 'tui', 'dist', 'tui.tsx')
+  // Clean up the old broken relative ref (and stale dist refs) on upgrade.
+  unregisterPlugin(targetTuiConfigPath, 'plugins/pantheon-tui', { dryRun })
+  const tuiStatus = registerPlugin(targetTuiConfigPath, tuiPluginRef, { dryRun })
   if (tuiStatus === 'created') stats.created++
   else stats.skipped++
 
@@ -347,7 +340,17 @@ export async function installOpenCode(
       'pantheon_vision_server.py',
     ]
     const srcScriptsDir = join(ROOT, 'scripts')
+    // Canonical MCP server sources live in src/mcp/. Map them explicitly so the
+    // sync always copies from the canonical source, never from the stale root
+    // scripts/ copies (which previously propagated bugs like the missing
+    // `import uuid` in mcp_persistence_server.py). scrub-secrets.py is not in
+    // src/mcp/ and intentionally falls back to join(ROOT, 'scripts').
     const canonicalMcpScripts = {
+      'mcp_resources_server.py': join(ROOT, 'src', 'mcp', 'mcp_resources_server.py'),
+      'code_mode_server.py': join(ROOT, 'src', 'mcp', 'code_mode_server.py'),
+      'memory_mcp_server.py': join(ROOT, 'src', 'mcp', 'memory_mcp_server.py'),
+      '_pantheon_paths.py': join(ROOT, 'src', 'mcp', '_pantheon_paths.py'),
+      'mcp_persistence_server.py': join(ROOT, 'src', 'mcp', 'mcp_persistence_server.py'),
       'pantheon_vision_server.py': join(ROOT, 'src', 'mcp', 'pantheon_vision_server.py'),
     }
     const dstScriptsDir = join(runtimeTarget, 'scripts')
@@ -565,15 +568,41 @@ export async function installOpenCode(
   if (!config.default_agent && pantheonConfig.default_agent) {
     config.default_agent = pantheonConfig.default_agent
   }
+  // Merge subagent_depth HERE (the config merge always runs, including on a
+  // fresh install) instead of a file-existence-gated block, so run #1 already
+  // produces the final config — run #2 must be a byte-identical no-op (#19).
+  if (config.subagent_depth === undefined) {
+    config.subagent_depth = 2
+  }
+
+  // --------------------------------------------------------------------
+  // B.5.1 Hermetic plugin resolution (packaging fix)
+  // --------------------------------------------------------------------
+  // The packaged opencode.json may reference the pantheon-hooks plugin via a
+  // developer-machine absolute path (e.g. /home/<dev>/pantheon/src/plugins/...).
+  // Copying that verbatim into the user's config would break every global
+  // install on any other machine. Option A: rewrite the entry to the plugin
+  // file inside the INSTALLED package (derived from ROOT — never hardcoded),
+  // so both dev and global installs resolve to a path that actually exists.
+  // The source opencode.json keeps its dev path for local development; the
+  // transform happens at install/sync time only.
+  function resolveInstalledPlugin(plugin) {
+    const file = basename(plugin)
+    const packaged = join(ROOT, 'src', 'plugins', file)
+    return existsSync(packaged) ? packaged : plugin
+  }
 
   if (!Array.isArray(config.plugin)) {
     config.plugin = []
   }
   if (Array.isArray(pantheonConfig.plugin)) {
     for (const plugin of pantheonConfig.plugin) {
-      if (!config.plugin.includes(plugin)) {
-        config.plugin.push(plugin)
-      }
+      const resolved = resolveInstalledPlugin(plugin)
+      const file = basename(resolved)
+      // Replace any pre-existing entry for the same plugin file (e.g. a stale
+      // dev-machine path from an earlier install) so upgrades stay hermetic.
+      config.plugin = config.plugin.filter((p) => basename(p) !== file)
+      config.plugin.push(resolved)
     }
   }
 

package/scripts/install/plugin.mjs

@@ -128,8 +128,10 @@ export function unregisterPlugin(tuiJsonPath, pluginId, { dryRun = false } = {})
   if (!Array.isArray(tuiConfig.plugin)) {
     tuiConfig.plugin = []
   }
-  // Remove stale plugin refs (old dist/tui.tsx path)
-  const staleRefs = [`${pluginId}/dist/tui.tsx`, `${pluginId}/dist/tui.js`]
+  // Remove stale refs: the bare relative id (openCode < 1.19 wrote
+  // "plugins/pantheon-tui", which its tui loader misreads as an npm/github
+  // spec → NpmInstallFailedError) and the old dist paths.
+  const staleRefs = [pluginId, `${pluginId}/dist/tui.tsx`, `${pluginId}/dist/tui.js`]
   for (const stale of staleRefs) {
     const idx = tuiConfig.plugin.indexOf(stale)
     if (idx !== -1) tuiConfig.plugin.splice(idx, 1)