pantheon-opencode 1.4.3 → 1.5.0-beta.10

package/package.json

@@ -1,11 +1,17 @@
 {
   "name": "pantheon-opencode",
-  "version": "1.4.3",
+  "version": "1.5.0-beta.10",
   "description": "Multi-agent orchestration for OpenCode — 14 specialized agents, TDD, Themis review gates.",
+  "type": "module",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
+  "exports": {
+    "./plugin": "./src/plugin.ts",
+    "./plugin-v2": "./src/plugin-v2.ts",
+    "./v2-bridge": "./src/pantheon/v2-bridge.ts"
+  },
   "scripts": {
     "postinstall": "node scripts/postinstall.mjs && node scripts/sync-tui.mjs",
     "prepare": "husky",
@@ -22,28 +28,37 @@
     "version:status": "node scripts/versioning.mjs status",
     "version:apply": "node scripts/versioning.mjs apply",
     "version:check": "node scripts/version-check.mjs",
-    "release:dry-run": "node scripts/versioning.mjs status && node scripts/release-notes.mjs && npm pack --dry-run",
+    "release:dry-run": "node scripts/versioning.mjs status && node scripts/release-notes.mjs && node scripts/package-evidence.mjs",
+    "package:evidence": "node scripts/package-evidence.mjs",
+    "package:validate": "node scripts/validate-package.mjs",
     "publish:next": "npm publish --tag next --access public",
-    "lint": "npx biome ci .",
-    "typecheck": "npx tsc --noEmit",
+    "lint": "biome ci .",
+    "typecheck": "tsc --noEmit",
     "audit": "npm audit --audit-level=high",
     "secret-scan": "node scripts/secret-scan.mjs",
     "hooks:install": "pre-commit install",
     "hooks:update": "pre-commit autoupdate",
-    "test:security": "npm run secret-scan && node tests/test_install_mcp_vision.mjs && node tests/test_doctor_layers.mjs",
+    "test:security": "npm run secret-scan",
     "test:node": "node --test tests/*.mjs tests/pantheon/*.mjs",
-    "test:ts": "for f in tests/pantheon/*.test.ts; do npx tsx \"$f\" || exit 1; done",
-    "test": "python3 -m pytest tests/ -q 2>&1; status=$?; if [ \"$status\" -eq 5 ]; then echo \"No tests found\"; fi; exit \"$status\"",
-    "test:ci": "python3 -m pytest tests/ -q --tb=short 2>&1"
+    "test:ts": "for f in tests/pantheon/*.test.ts; do if [ \"$f\" = tests/pantheon/plugin-v2-contract.test.ts ]; then NODE_OPTIONS=--conditions=import tsx \"$f\"; else tsx \"$f\"; fi || exit 1; done",
+    "test:all": "npm run test:ci && npm run test:node && npm run test:ts",
+    "test": "npm run test:all",
+    "test:ci": "python3 -m pytest -q --tb=short 2>&1"
   },
   "bin": {
     "pantheon-opencode": "bin/pantheon-init.mjs"
   },
   "files": [
     "LICENSE",
+    "package-lock.json",
+    "plugin.json",
+    "pyproject.toml",
     "scripts/install/*.mjs",
     "scripts/*.py",
     "src/plugin.ts",
+    "src/plugin-v2.ts",
+    "src/plugin-v2",
+    "src/pantheon/v2-bridge.ts",
     "README.md",
     "src/mcp/*.txt",
     "commands/*.md",
@@ -54,6 +69,7 @@
     "!src/agents/README.md",
     "bin/*.mjs",
     "AGENTS.md",
+    "CHANGELOG.md",
     "opencode.json",
     "src/mcp/*.py",
     "src/instructions/*.instructions.md",
@@ -62,6 +78,7 @@
     "src/mcp/*.sh",
     "src/routing.yml",
     "src/pantheon/**",
+    ".pantheon/code-mode/**",
     "src/plugins/**",
     "scripts/hooks/**",
     "src/mcp/requirements*",
@@ -72,14 +89,17 @@
     "!**/*.pyc"
   ],
   "dependencies": {
-    "js-yaml": "^4.3.0",
+    "@opencode-ai/plugin": "1.18.30",
+    "js-yaml": "^4.3.2",
     "zod": "4.1.8"
   },
   "devDependencies": {
-    "@commitlint/cli": "^19.8.0",
-    "@commitlint/config-conventional": "^19.8.0",
-    "@opencode-ai/plugin": "1.18.11",
-    "husky": "^9.1.7"
+    "@biomejs/biome": "2.5.13",
+    "@commitlint/cli": "21.2.2",
+    "@commitlint/config-conventional": "21.2.2",
+    "husky": "^9.1.7",
+    "tsx": "4.23.13",
+    "typescript": "6.0.3"
   },
   "repository": {
     "type": "git",
@@ -100,7 +120,7 @@
   "author": "ils15",
   "license": "MIT",
   "engines": {
-    "node": ">=18"
+    "node": ">=22"
   },
   "preferGlobal": true
 }

package/plugin.json

@@ -0,0 +1,15 @@
+{
+  "name": "pantheon",
+  "publisher": "ils15",
+  "version": "1.5.0-beta.10",
+  "displayName": "Pantheon",
+  "description": "Conductor-Delegate orchestration platform with 14 specialized agents, 21 skills, and OpenCode support.",
+  "agents": "./src/agents",
+  "skills": "./src/skills",
+  "instructions": "./src/instructions",
+  "prompts": "./prompts",
+  "repository": "https://github.com/ils15/pantheon-opencode",
+  "exports": {
+    ".": "./src/routing.yml"
+  }
+}

package/pyproject.toml

@@ -0,0 +1,65 @@
+[build-system]
+requires = ["setuptools>=64"]
+build-backend = "setuptools.backends._legacy:_Backend"
+
+[project]
+name = "pantheon"
+version = "1.5.0-beta.10"
+description = "Multi-agent orchestration framework"
+requires-python = ">=3.11"
+dependencies = []
+
+[tool.pytest.ini_options]
+# `tests/` holds the main suite; the two entries below are orphaned test
+# modules that live next to the code they cover and are collected here so
+# pytest (and therefore `npm test`) exercises them instead of letting them
+# rot as dead code.
+testpaths = [
+    "tests",
+    "scripts/vector_memory/test_memory.py",
+    "benchmarks/beta2/test_beta2.py",
+]
+asyncio_mode = "auto"
+addopts = "-v --tb=short"
+
+[tool.ruff]
+line-length = 88
+target-version = "py311"
+
+[tool.ruff.lint]
+select = ["E", "F", "W", "I", "N", "UP", "B", "SIM", "PL", "RUF", "C901"]
+ignore = ["E501"]
+
+[tool.ruff.lint.per-file-ignores]
+"__init__.py" = ["F401"]
+# Legacy command-line scripts intentionally use hyphenated filenames.
+"scripts/ci-validate-yaml.py" = ["N999"]
+"scripts/scrub-secrets.py" = ["N999"]
+# These modules defer optional/heavy imports until the corresponding command is used.
+"scripts/vector_memory/*.py" = ["PLC0415"]
+"tests/test_code_mode_args.py" = ["PLC0415"]
+"tests/test_code_mode_sandbox.py" = ["PLC0415", "N806"]
+"tests/test_code_mode_server.py" = ["PLC0415"]
+"tests/test_eval_store.py" = ["PLC0415", "PLR2004"]
+"tests/test_memory_mcp_server.py" = ["PLC0415", "PLR2004"]
+# Existing public APIs and test fixtures are intentionally broad/simple; refactoring
+# them would be behavior-affecting rather than a mechanical lint correction.
+"scripts/code_mode_server.py" = ["PLR0913"]
+"src/mcp/code_mode_server.py" = ["PLR0913"]
+"scripts/mcp_persistence_server.py" = ["PLR0913"]
+"src/mcp/mcp_persistence_server.py" = ["PLR0913"]
+"scripts/memory_mcp_server.py" = ["C901"]
+"scripts/vector_memory/index.py" = ["C901", "PLR0913", "PLR2004", "PLW0603", "PLW2901"]
+"scripts/vector_memory/cli.py" = ["PLR2004"]
+"scripts/vector_memory/query.py" = ["PLR0913"]
+"src/mcp/eval_store.py" = ["PLR2004"]
+"tests/test_code_mode_frontmatter.py" = ["PLR2004"]
+"tests/test_eval_judge.py" = ["PLR2004"]
+"tests/test_eval_static.py" = ["PLR2004"]
+"tests/test_mcp_persistence_server.py" = ["PLR2004"]
+
+[tool.mypy]
+python_version = "3.11"
+strict = true
+ignore_missing_imports = true
+disallow_untyped_defs = true

package/scripts/_pantheon_paths.py

@@ -34,11 +34,11 @@ def pantheon_home() -> Path:
     """
     env = os.environ.get("PANTHEON_HOME")
     if env:
-        return Path(env).expanduser().resolve()
+        return Path(env).expanduser().absolute()
 
     xdg = os.environ.get("XDG_CONFIG_HOME")
     if xdg:
-        return Path(xdg).expanduser().resolve() / "opencode"
+        return Path(xdg).expanduser().absolute() / "opencode"
 
     return Path.home() / ".config" / "opencode"
 
@@ -48,7 +48,8 @@ def pantheon_project() -> Path | None:
 
     Resolution priority:
     1. $PANTHEON_PROJECT env var (explicit override)
-    2. Current working directory (set by MCP client's cwd in opencode.json)
+    2. The validated logical ``$PWD`` supplied by the launcher
+    3. Current working directory (set by MCP client's cwd in opencode.json)
 
     Returns:
         Absolute Path to the project root, or None if neither is available
@@ -56,10 +57,50 @@ def pantheon_project() -> Path | None:
     """
     env = os.environ.get("PANTHEON_PROJECT")
     if env:
-        return Path(env).expanduser().resolve()
-
-    cwd = os.getcwd()
+        return Path(env).expanduser().absolute()
+
+    logical_cwd = os.environ.get("PWD")
+    try:
+        cwd = os.getcwd()
+    except OSError:
+        cwd = ""
+    if logical_cwd and _is_valid_logical_cwd(logical_cwd, cwd):
+        return Path(logical_cwd).expanduser().absolute()
     if cwd:
-        return Path(cwd).resolve()
+        return Path(cwd).absolute()
 
     return None
+
+
+def _is_valid_logical_cwd(logical_cwd: str, physical_cwd: str) -> bool:
+    """Validate a launcher-provided logical cwd without resolving its result.
+
+    ``PWD`` is trusted only when it is an existing directory naming the same
+    inode as the process cwd.  This preserves symlink spelling while rejecting
+    forged or stale environment values.
+    """
+    logical = Path(logical_cwd).expanduser()
+    if not logical.is_absolute() or not logical.is_dir():
+        return False
+    try:
+        return os.path.samefile(logical, physical_cwd)
+    except (OSError, ValueError):
+        return False
+
+
+def has_symlink_component(path: Path) -> bool:
+    """Return whether any existing lexical component of ``path`` is a symlink.
+
+    The lexical path is intentionally inspected before ``resolve()`` so a
+    symlink cannot be hidden by resolving to an otherwise trusted directory.
+    Missing trailing components are allowed; this keeps normal project paths
+    usable while still checking every existing ancestor.
+    """
+    current = Path(path.anchor) if path.is_absolute() else Path.cwd()
+    for component in path.parts[1:] if path.is_absolute() else path.parts:
+        if component in {"", "."}:
+            continue
+        current /= component
+        if current.is_symlink():
+            return True
+    return False

package/scripts/ci-validate-yaml.py

@@ -1,12 +1,17 @@
 #!/usr/bin/env python3
 """Validate agent YAML frontmatter in CI."""
-import os, re, yaml, sys
+import os
+import re
+import sys
+
+import yaml
 
 errors = 0
 for f in sorted(os.listdir('src/agents')):
     if not f.endswith('.md'):
         continue
-    content = open(f'src/agents/{f}').read()
+    with open(f"src/agents/{f}", encoding="utf-8") as agent_file:
+        content = agent_file.read()
     match = re.match(r'^---\n(.*?)\n---', content, re.DOTALL)
     if match:
         try: