pantheon-opencode 1.5.0-beta.1 → 1.5.0-beta.11

package/scripts/dev-tui.sh

@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+# dev-tui.sh — load the Pantheon TUI from the repo (src/plugins/tui) WITHOUT publishing.
+#
+# Flow: build the bundle → register the repo's absolute path in
+# .opencode/tui.json (read by the OpenCode TUI loader) → restart hint.
+# It deliberately does NOT touch opencode.json: that file is packaged and
+# merged into user configs by the installer, so a repo-relative path would
+# leak into third-party installs and break the CI package gates.
+#
+# Usage: scripts/dev-tui.sh [--test]
+#   --test   also run the full repo test suite (npm run test:all) after build.
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+TUI_DIR="$ROOT/src/plugins/tui"
+TUI_JSON="$ROOT/.opencode/tui.json"
+
+command -v npm >/dev/null 2>&1 || { echo "error: npm not found in PATH" >&2; exit 1; }
+[ -d "$TUI_DIR" ] || { echo "error: TUI source not found: $TUI_DIR" >&2; exit 1; }
+
+echo "==> TUI dev source: $TUI_DIR"
+
+# 1. Install pinned deps + build dist/tui.js (dist/tui.tsx is copied by build).
+echo "==> Installing TUI dev dependencies (npm ci)"
+npm ci --prefix "$TUI_DIR" --ignore-scripts --no-audit --no-fund
+
+echo "==> Building TUI plugin"
+npm run build --prefix "$TUI_DIR"
+
+# 2. Optional: full suite to match the CI gate before opening a PR.
+if [[ "${1:-}" == "--test" ]]; then
+  echo "==> Running full test suite (npm run test:all)"
+  npm run test:all
+fi
+
+# 3. Register the repo path in the project tui.json (absolute, gitignored).
+#    Reuses the installer's registerPlugin so the array is merged, not clobbered.
+echo "==> Registering repo TUI path in $TUI_JSON"
+ROOT="$ROOT" TUI_JSON="$TUI_JSON" TUI_DIR="$TUI_DIR" node --input-type=module <<'NODE'
+const { registerPlugin } = await import(`${process.env.ROOT}/scripts/install/plugin.mjs`)
+const result = registerPlugin(process.env.TUI_JSON, process.env.TUI_DIR)
+console.log(`${result}: ${process.env.TUI_DIR}`)
+NODE
+
+# 4. Restart hint + dev-mode caveat.
+echo "==> Done. Restart OpenCode to load the rebuilt TUI plugin."
+echo "    Dev mode caveat: do NOT run 'init' in this repo while iterating — it"
+echo "    removes repo path refs as stale. If you do, re-run scripts/dev-tui.sh."

package/scripts/doctor.mjs

@@ -22,7 +22,8 @@
  */
 
 import { spawn as spawnAsync, spawnSync } from 'node:child_process'
-import { existsSync, mkdirSync, readdirSync, readFileSync } from 'node:fs'
+import { createHash } from 'node:crypto'
+import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, statSync } from 'node:fs'
 import { homedir } from 'node:os'
 import { basename, dirname, join, resolve } from 'node:path'
 import { fileURLToPath } from 'node:url'
@@ -389,7 +390,7 @@ function checkMcpConfig(args) {
     // ENOENT-on-spawn failure class (dead hardcoded path, ambiguous relative
     // path) before opencode tries to spawn the server.
     for (const [name, mcpEntry] of Object.entries(mcp)) {
-      if (!mcpEntry || mcpEntry.type !== 'local') continue
+      if (mcpEntry?.type !== 'local') continue
       const cmd = mcpEntry.command
       if (!Array.isArray(cmd) || cmd.length === 0) {
         warn(`${cfg.label}: MCP "${name}" has no command array`)
@@ -530,7 +531,7 @@ async function checkMcpRuntimeSmoke(args) {
   const local = []
   for (const cfg of collectMcpConfigs(args)) {
     for (const [name, entry] of Object.entries(cfg.data.mcp ?? {})) {
-      if (!entry || entry.type !== 'local') continue
+      if (entry?.type !== 'local') continue
       if (!Array.isArray(entry.command) || entry.command.length === 0) continue
       const cwd = resolveMcpCwd(entry, cfg.path)
       const command = entry.command.map((part, index) =>
@@ -958,6 +959,35 @@ function checkVenvLayer(args) {
 // Check F.2: Code-Mode Scripts Directory
 // ---------------------------------------------------------------------------
 
+/**
+ * Return whether *dir* contains an executable code-mode target.
+ *
+ * Mirrors `_has_usable_scripts` in `scripts/code_mode_server.py`: a directory
+ * is only a valid resolver candidate when it is a real (non-symlink) directory
+ * containing a regular `.py`/`.sh` direct child. This prevents an empty project
+ * overlay from masking a lower-priority installation that actually ships
+ * scripts. Keep both implementations in sync (see tests/test_doctor_layers.mjs).
+ */
+function hasUsableScripts(dir) {
+  try {
+    if (!existsSync(dir)) return false
+    const stat = lstatSync(dir)
+    if (stat.isSymbolicLink() || !stat.isDirectory()) return false
+    return readdirSync(dir).some((name) => {
+      if (name.startsWith('.')) return false
+      const lower = name.toLowerCase()
+      if (!lower.endsWith('.py') && !lower.endsWith('.sh')) return false
+      try {
+        return statSync(join(dir, name)).isFile()
+      } catch {
+        return false
+      }
+    })
+  } catch {
+    return false
+  }
+}
+
 /**
  * Verify the code-mode scripts directory exists for the resolved runtime
  * root (project → <target>/.opencode, otherwise the global config dir).
@@ -966,12 +996,20 @@ function checkVenvLayer(args) {
  */
 export function checkCodeModeDir(args) {
   section('F.2 Code-Mode Scripts')
-  const target = resolve(args.target)
-  const isProject = existsSync(join(target, '.opencode'))
-  const runtimeRoot = isProject ? target : resolveOpenCodeConfigDir(args.env ?? process.env)
-  const codeModeDir = isProject
-    ? join(runtimeRoot, '.opencode', '.pantheon', 'code-mode')
-    : join(runtimeRoot, '.pantheon', 'code-mode')
+  const env = args.env ?? process.env
+  const target = resolve(env.PANTHEON_PROJECT ?? args.target)
+  const projectCandidates = [
+    join(target, '.opencode', '.pantheon', 'code-mode'),
+    join(target, '.pantheon', 'code-mode'),
+  ]
+  // Seeding semantics: an existing project candidate wins; a project
+  // install (.opencode present) gets its runtime dir created when missing.
+  // Only targets with no project layout fall back to the global config dir.
+  const codeModeDir =
+    projectCandidates.find(hasUsableScripts) ??
+    (existsSync(join(target, '.opencode'))
+      ? projectCandidates[0]
+      : join(resolveOpenCodeConfigDir(env), '.pantheon', 'code-mode'))
   if (existsSync(codeModeDir)) {
     pass(`Code-mode scripts directory exists: ${codeModeDir}`)
     return codeModeDir
@@ -986,6 +1024,83 @@ export function checkCodeModeDir(args) {
   return codeModeDir
 }
 
+/** Resolve code-mode using the same project-first rule as the MCP server. */
+export function resolveCodeModeDir(args) {
+  const env = args.env ?? process.env
+  const target = resolve(env.PANTHEON_PROJECT ?? args.target)
+  const projectCandidates = [
+    join(target, '.opencode', '.pantheon', 'code-mode'),
+    join(target, '.pantheon', 'code-mode'),
+  ]
+  const projectDir = projectCandidates.find(hasUsableScripts)
+  if (projectDir) return projectDir
+  return join(resolveOpenCodeConfigDir(env), '.pantheon', 'code-mode')
+}
+
+/** Validate a code-mode manifest without modifying it. */
+export function validateCodeModeManifest(codeModeDir) {
+  const manifestPath = join(codeModeDir, 'manifest.json')
+  if (!existsSync(manifestPath)) {
+    return { ok: false, message: `Code-mode manifest missing: ${manifestPath}` }
+  }
+
+  let data
+  try {
+    data = JSON.parse(readFileSync(manifestPath, 'utf8'))
+  } catch {
+    return { ok: false, message: `Code-mode manifest malformed: ${manifestPath}` }
+  }
+  if (!data || typeof data !== 'object' || Array.isArray(data)) {
+    return { ok: false, message: 'Code-mode manifest malformed: root must be an object' }
+  }
+  if (data.version !== 1) {
+    return { ok: false, message: 'Code-mode manifest malformed: version must be 1' }
+  }
+  if (!data.scripts || typeof data.scripts !== 'object' || Array.isArray(data.scripts)) {
+    return { ok: false, message: 'Code-mode manifest malformed: scripts must be an object' }
+  }
+
+  const listed = Object.keys(data.scripts)
+  const invalid = listed.filter(
+    (name) => typeof data.scripts[name] !== 'string' || !/^[a-f0-9]{64}$/i.test(data.scripts[name]),
+  )
+  if (invalid.length) {
+    return { ok: false, message: `Code-mode manifest invalid digest: ${invalid.join(', ')}` }
+  }
+
+  const actualScripts = readdirSync(codeModeDir).filter(
+    (name) =>
+      (name.endsWith('.py') || name.endsWith('.sh')) && statSync(join(codeModeDir, name)).isFile(),
+  )
+  const missing = listed.filter((name) => !existsSync(join(codeModeDir, name)))
+  const extra = actualScripts.filter((name) => !Object.hasOwn(data.scripts, name))
+  const differing = listed.filter((name) => {
+    const path = join(codeModeDir, name)
+    if (!existsSync(path)) return false
+    const digest = createHash('sha256').update(readFileSync(path)).digest('hex')
+    return digest !== data.scripts[name].toLowerCase()
+  })
+  if (missing.length || extra.length || differing.length) {
+    const names = [...new Set([...missing, ...extra, ...differing])]
+    return {
+      ok: false,
+      message: `Code-mode manifest mismatch: ${differing.length + missing.length + extra.length}/${listed.length} scripts differ — ${names.join(', ')}`,
+    }
+  }
+  return { ok: true, count: listed.length, total: actualScripts.length }
+}
+
+/** Run the diagnostic manifest check after directory validation. */
+export function checkCodeModeManifest(args) {
+  const codeModeDir = resolveCodeModeDir(args)
+  const result = validateCodeModeManifest(codeModeDir)
+  if (!result.ok) {
+    error(result.message)
+    return
+  }
+  pass(`✅ Code-mode manifest valid: ${result.count}/${result.total} scripts verified`)
+}
+
 /** Resolve the venv created by init for either a project or global install. */
 export function resolveRuntimePython(args) {
   const target = resolve(args.target)
@@ -1018,6 +1133,87 @@ export function resolveMcpCwd(entry, configPath = '') {
   return dirname(configPath)
 }
 
+// ---------------------------------------------------------------------------
+// Check H2: installed-version drift (beta.5)
+// ---------------------------------------------------------------------------
+
+/**
+ * Prerelease-aware comparison for pantheon versions (X.Y.Z or X.Y.Z-beta.N).
+ * A stable release outranks any beta of the same core version. Returns
+ * <0, 0, >0 (a - b). The shared compareVersions/parseVersion above ignores
+ * the `-beta.N` suffix (it only reads 4 numeric groups), which would make
+ * every beta pair compare equal.
+ */
+function comparePantheonVersions(a, b) {
+  const parse = (v) => {
+    const m = String(v)
+      .trim()
+      .match(/^(\d+)\.(\d+)\.(\d+)(?:-beta\.(\d+))?$/)
+    if (!m) return null
+    return {
+      core: [+m[1], +m[2], +m[3]],
+      beta: m[4] === undefined ? Number.POSITIVE_INFINITY : +m[4],
+    }
+  }
+  const pa = parse(a)
+  const pb = parse(b)
+  if (!pa || !pb) return 0
+  for (let i = 0; i < 3; i++) {
+    if (pa.core[i] !== pb.core[i]) return pa.core[i] - pb.core[i]
+  }
+  return pa.beta - pb.beta
+}
+
+/**
+ * Compare the version recorded in the installation marker
+ * (<config>/.pantheon/install-state.json, written by the postinstall sync)
+ * against this package's version. When the package is newer, the config
+ * merge/venv/MCP wiring may be stale — point the user at `update`.
+ * Advisory only: a missing marker (pre-beta.5 install) is not an error.
+ */
+export function checkInstallVersionDrift(args) {
+  section('H2 Installed Version')
+  const env = args.env ?? process.env
+  let pkgVersion = null
+  try {
+    pkgVersion = JSON.parse(readFileSync(join(ROOT, 'package.json'), 'utf8')).version
+  } catch {
+    return 'no-marker'
+  }
+  if (!pkgVersion) return 'no-marker'
+
+  const statePath = join(resolveOpenCodeConfigDir(env), '.pantheon', 'install-state.json')
+  let installed = null
+  if (existsSync(statePath)) {
+    try {
+      installed = JSON.parse(readFileSync(statePath, 'utf8')).pantheon_version ?? null
+    } catch {
+      installed = null
+    }
+  }
+  if (!installed) {
+    info('No installation version marker found (pre-beta.5 install) — skipping drift check')
+    return 'no-marker'
+  }
+  const drift = comparePantheonVersions(pkgVersion, installed)
+  if (drift > 0) {
+    warn(
+      `Package v${pkgVersion} is newer than the last-synced installation (v${installed}) — ` +
+        'run `npx pantheon-opencode update` (or re-run init) to refresh config, venv and MCP entries',
+    )
+    return 'package-newer'
+  }
+  if (drift < 0) {
+    warn(
+      `Installation marker (v${installed}) is newer than this package (v${pkgVersion}) — ` +
+        'the doctor is running from a different install than the last sync',
+    )
+    return 'install-newer'
+  }
+  pass(`Installation in sync with package v${pkgVersion}`)
+  return 'sync'
+}
+
 // ---------------------------------------------------------------------------
 // Check G: AGENTS.md freshness
 // ---------------------------------------------------------------------------
@@ -1314,6 +1510,8 @@ async function main() {
   checkMcpConfig(args)
   checkVenvLayer(args)
   checkCodeModeDir(args)
+  checkCodeModeManifest(args)
+  checkInstallVersionDrift(args)
   await checkMcpRuntimeSmoke(args)
   checkPermissionMismatches(args)
   checkSyncStatus(args)

package/scripts/install/cli-ui.mjs

@@ -1,3 +1,5 @@
+import { strings } from './strings.mjs'
+
 export const icons = {
   success: '\u2705',
   warning: '\u26a0\ufe0f ',
@@ -8,9 +10,9 @@ export const icons = {
   arrow: '\u2192',
   bullet: '\u2022',
   star: '\u2b50',
-  wrench: '\U0001f527',
-  rocket: '\U0001f680',
-  package: '\U0001f4e6',
+  wrench: '\u{1F527}',
+  rocket: '\u{1F680}',
+  package: '\u{1F4E6}',
   gear: '\u2699\ufe0f',
 }
 
@@ -160,28 +162,32 @@ export function spinner(message) {
 export function printSummary(target, platforms, stats) {
   if (_quiet) return
 
+  const S = strings()
   const line = '\u2500'.repeat(Math.min(process.stdout.columns || 60, 60))
   const hasErrors = stats && stats.errors > 0
   console.log(
     tag(
       hasErrors
-        ? `${icons.warning} Instalação concluída com erros em ${target}`
-        : `${icons.rocket} OpenCode instalado em ${target}`,
+        ? `${icons.warning} ${S.summaryWithErrors(target)}`
+        : `${icons.rocket} ${S.summaryInstalled(target)}`,
     ),
   )
   console.log(tag(line))
   console.log('')
 
   if (stats) {
-    console.log(tag(`  Componentes:\t${stats.created} instalados, ${stats.skipped} pulados`))
+    console.log(tag(S.summaryComponents(stats.created, stats.skipped)))
     if (stats.errors > 0) {
-      console.warn(tag(`  ${icons.warning}${stats.errors} erro(s) encontrados`))
+      console.warn(tag(S.summaryErrors(stats.errors)))
+    }
+    if (stats.warnings > 0) {
+      console.warn(tag(S.summaryWarnings(stats.warnings)))
     }
     console.log('')
   }
 
-  console.log(tag(`  ${icons.star} Próximos passos:`))
-  console.log(tag(`    ${icons.bullet} Configure seus agentes em opencode.json`))
-  console.log(tag(`    ${icons.bullet} Adicione MCP servers em mcp.json`))
-  console.log(tag(`    ${icons.bullet} Rode 'opencode doctor' para verificar a instalação`))
+  console.log(tag(`  ${icons.star} ${S.summaryNext.trim()}`))
+  console.log(tag(S.summaryNextAgents))
+  console.log(tag(S.summaryNextMcp))
+  console.log(tag(S.summaryNextDoctor))
 }

package/scripts/install/config-migration.mjs

@@ -73,7 +73,7 @@ function convertPermissionsV2toV1(permArray) {
   const result = {}
   // Reverse action mapping: V2 action → V1 key
   const ACTION_TO_V1 = Object.fromEntries(
-    Object.entries(V1_PERMISSION_TO_ACTION).map(([k, v]) => [v, k])
+    Object.entries(V1_PERMISSION_TO_ACTION).map(([k, v]) => [v, k]),
   )
 
   for (const { action, resource, effect } of permArray) {
@@ -104,7 +104,7 @@ const PROVIDER_RENAME = {
 
 /** Reverse: V2 → V1 */
 const PROVIDER_RENAME_REVERSE = Object.fromEntries(
-  Object.entries(PROVIDER_RENAME).map(([k, v]) => [v, k])
+  Object.entries(PROVIDER_RENAME).map(([k, v]) => [v, k]),
 )
 
 /**
@@ -176,9 +176,7 @@ function convertProviderV2toV1(name, config) {
 
   // package → npm (strip aisdk: prefix)
   if (result.package !== undefined) {
-    result.npm = result.package.startsWith('aisdk:')
-      ? result.package.slice(6)
-      : result.package
+    result.npm = result.package.startsWith('aisdk:') ? result.package.slice(6) : result.package
     delete result.package
   }
 
@@ -303,7 +301,7 @@ const V1_TO_V2_RENAMES = {
 
 /** Build reverse map */
 const V2_TO_V1_RENAMES = Object.fromEntries(
-  Object.entries(V1_TO_V2_RENAMES).map(([k, v]) => [v, k])
+  Object.entries(V1_TO_V2_RENAMES).map(([k, v]) => [v, k]),
 )
 
 // ---------------------------------------------------------------------------