pantheon-opencode 1.6.0-beta.5 → 1.6.0-beta.7

package/src/plugins/pantheon-hooks.ts

@@ -4,14 +4,13 @@
  * Re-created per Council Synthesis 2026-08-05 (P0): the previous hook plugin
  * was removed on 24-25/07 because it used the Bun Shell `$` from the plugin
  * API, whose interface has NO `.timeout()` method — every hook crashed with
- * `TypeError: $.quiet().nothrow().timeout is not a function`. The 10 functional
+ * `TypeError: $.quiet().nothrow().timeout is not a function`. The remaining
  * scripts in scripts/hooks/ (gitleaks covers only staged files, NOT tool
  * calls) were left orphaned. This plugin wires them back into the opencode
  * runtime via `node:child_process` (version-proof — see hook-runner.ts).
  *
- * Hook mapping (Claude Code protocol payload {tool_name, tool_input,
- * agent_id, session_id} delivered on the script stdin):
- *   - tool.execute.before → validate-talos-scope.sh, scan-secrets.sh,
+ * Hook mapping:
+ *   - tool.execute.before → in-process secret scan, validate-talos-scope.sh,
  *     validate-tool-safety.sh + on-subagent-delegation-start.sh (only when the
  *     tool is a delegation tool such as `task`, to keep the audit log honest)
  *   - tool.execute.after  → format-multi-language.sh, log-session-start.sh +
@@ -23,7 +22,7 @@
  *     ({tool, sessionID, callID}). P0-4 (2026-08-06): a `chat.params` hook
  *     records the active agent per session (sessionAgent map), so payloadFor()
  *     now resolves the real agent_id — validate-talos-scope.sh enforces the
- *     Talos file-count boundary; the agent-agnostic scan-secrets and
+ *     Talos file-count boundary; the agent-agnostic secret scanner and
  *     validate-tool-safety protections remain fully active.
  *   - tool.execute.before CAN hard-deny — the old "cannot hard-deny" claim
  *     below this line is OUTDATED for 1.18.x (verified 2026-08-06 on the
@@ -34,15 +33,15 @@
  *     the tool body runs (the docs' .env-protection example relies on this).
  *     The permission system remains the primary deny path, but a thrown
  *     hook error is now a supported hard block (hybrid blocking, Fix 2
- *     2026-08-06): scan-secrets.sh exits 2 on high-confidence token matches
- *     → the plugin logs via reportFailure (non-TUI channels) and THEN throws
+ *     2026-08-06): high-confidence token matches → the plugin logs via
+ *     reportFailure (non-TUI channels) and THEN throws
  *     the DELIBERATE block error — the ONLY throw in this plugin. Exit 1
  *     (low-confidence header/KEY names) stays advisory: toast + logs, no
  *     block.
  *   - Logging policy (P0 fix 2026-08-06): NON-ZERO exit → NEVER console.
  *     `console.error` in a plugin writes to the process stderr, which the
  *     opencode TUI renders directly into the terminal — that polluted the
- *     chat with `[pantheon-hooks:scan-secrets.sh] exit 1: [SECRET SCAN]...`
+ *     chat with noisy nonzero hook output
  *     spam on every tool call. Non-zero exits now go to THREE non-TUI channels:
  *       1. client.tui.showToast() — one short, deduped TUI toast (per
  *          (script, exit code, masked match) per session) so the user gets a
@@ -60,8 +59,8 @@
  *   - Hooks NEVER throw: every body is try/catch'd and only logs. All three
  *     reporting channels (toast, app.log, file append) are individually
  *     try/catch'd so a failure in one can never take down the session.
- *     EXCEPTION (Fix 2, 2026-08-06): the deliberate scan-secrets high-
- *     confidence block — when scan-secrets.sh exits 2, the hook awaits
+ *     EXCEPTION (Fix 2, 2026-08-06): the deliberate high-confidence secret
+ *     block — when the in-process scanner finds a token, the hook awaits
  *     reportFailure FIRST (app.log + hooks.log) and only then throws. The
  *     throw is deliberately NOT swallowed by the surrounding try/catch
  *     (handled via a blockError variable thrown after it), because that
@@ -177,6 +176,7 @@ import { appendFile, mkdir } from 'node:fs/promises'
 import { join } from 'node:path'
 import type { Plugin, PluginInput } from '@opencode-ai/plugin'
 import { pantheonPluginOnce } from '../pantheon/plugin-once.ts'
+import { scanSecretPayload } from '../pantheon/secret-scanner.ts'
 import { getSharedBoard } from '../pantheon/shared-board.ts'
 import { type HookPayload, type HookResult, runHook } from './hook-runner.ts'
 
@@ -320,8 +320,7 @@ const sessionAgent = new Map<string, { agent: string; at: number }>()
 const RISKY_PATH_RE = /migration|schema\.sql|alembic|models\/|auth|password|token|secret/i
 
 /**
- * Fix 1 (2026-08-06): high-confidence secret token formats — mirrors
- * scripts/hooks/scan-secrets.sh HIGH_CONFIDENCE_PATTERNS. Used by maskSecret()
+ * Fix 1 (2026-08-06): high-confidence secret token formats. Used by maskSecret()
  * to REDACT secret VALUES from any plugin log line: the talos-guard must
  * never write a raw credential to hooks.log (a real `sk-bf-...` token leaked
  * in plain text there on 2026-08-06). Header/KEY names (the Bifrost header alone,
@@ -341,8 +340,8 @@ function maskSecret(text: string): string {
 }
 
 /**
- * Fix 2 (2026-08-06): message thrown when scan-secrets.sh exits 2
- * (HIGH_CONFIDENCE token match). This is the ONLY deliberate throw in the
+ * Fix 2 (2026-08-06): message thrown on a high-confidence token match.
+ * This is the ONLY deliberate throw in the
  * plugin — it is thrown AFTER reportFailure so the log channels always write
  * first, and it is NOT swallowed by the hook's try/catch: opencode's
  * Plugin.trigger has no catch around hook invocations, so the rejection
@@ -1093,9 +1092,8 @@ function flushIdleReminders(ctx: HookContext): void {
  *               (echo routed to structured log + hooks.log, never the TUI).
  * No console.error / console.log anywhere in this path — the TUI stays clean.
  *
- * Returns the underlying HookResult (or null on unexpected failure) so the
- * tool.execute.before handler can inspect scan-secrets.sh's exit code for the
- * Fix-2 hybrid block (code 2 = high-confidence token → throw after logging).
+ * Returns the underlying HookResult (or null on unexpected failure) for the
+ * non-scanner script hooks.
  */
 async function safeRun(
   ctx: HookContext,
@@ -1177,15 +1175,26 @@ const plugin: Plugin = async ({ client, directory }) => {
       // catch: opencode propagates the rejection to fail the tool call.
       let blockError: Error | null = null
       try {
-        const hooks = ['validate-talos-scope.sh', 'scan-secrets.sh', 'validate-tool-safety.sh']
+        const hooks = ['validate-talos-scope.sh', 'validate-tool-safety.sh']
         // P0-2: the delegation record must exist BEFORE the payload is built
         // so the start hook receives the delegation_id the stop hook joins on.
-        let payload = payloadFor(input, output?.args ?? {})
-        if (DELEGATION_TOOL_RE.test(input.tool)) {
+        const args = output?.args ?? (input as { args?: unknown }).args
+        let payload = payloadFor(input, args)
+        // Validate and scan before touching delegation args or launching any
+        // hook subprocess. The shared scanner catches malformed serialization
+        // and returns a fixed fail-closed result.
+        const scan = scanSecretPayload({ ...payload, tool_input: args })
+        if (scan.status === 'invalid') {
+          blockError = new Error(
+            '[pantheon-hooks] Bloqueado: o scanner de segredos não validou a entrada da ferramenta (fail-closed)',
+          )
+        } else if (scan.status === 'block') {
+          blockError = new Error(SECRET_BLOCK_MESSAGE)
+        }
+        if (blockError === null && DELEGATION_TOOL_RE.test(input.tool)) {
           hooks.push('on-subagent-delegation-start.sh')
           // tool.execute.before carries args on `output` (typed); `input.args`
           // also exists at runtime — read from whichever is present.
-          const args = output?.args ?? (input as { args?: unknown }).args
           const start: DelegationStart = {
             delegation_id: crypto.randomUUID(),
             agent: delegationAgent(input.tool, args),
@@ -1222,7 +1231,7 @@ const plugin: Plugin = async ({ client, directory }) => {
         const isWriteIntent =
           WRITE_INTENT_TOOLS.has(input.tool) ||
           (input.tool === 'bash' && BASH_WRITE_INTENT_RE.test(bashCommand))
-        if (isWriteIntent) {
+        if (blockError === null && isWriteIntent) {
           try {
             const values: string[] = []
             const scan = (v: unknown): void => {
@@ -1273,25 +1282,63 @@ const plugin: Plugin = async ({ client, directory }) => {
             // Advisory only — a failure here must never take down the hook.
           }
         }
-        // Fix 2 hybrid blocking: safeRun returns each script's HookResult;
-        // scan-secrets.sh exits 2 on HIGH_CONFIDENCE token matches
-        // (sk-bf-*, AKIA..., ghp_..., glpat-..., JWT, bearer...) → BLOCK the
-        // tool call. Exit 1 (low-confidence header/KEY names) stays advisory
-        // — safeRun already logged + toasted it, no block. The toast for
-        // code 1/2 fires inside safeRun BEFORE we reach the throw, and the
-        // reportFailure below is awaited first — log channels always write.
-        const results = await Promise.all(
-          hooks.map(async (script) => ({ script, result: await safeRun(ctx, script, payload) })),
-        )
-        const scan = results.find((r) => r.script === 'scan-secrets.sh')
-        if (scan?.result?.code === 2) {
+        // Scan the same serialized hook payload the removed stdin protocol
+        // delivered, but in-process and without logging untrusted input.
+        if (scan.status === 'invalid') {
+          const message =
+            '[pantheon-hooks] Bloqueado: o scanner de segredos não validou a entrada da ferramenta (fail-closed)'
+          await reportFailure(
+            ctx,
+            message,
+            { script: 'secret-scan', tool: input.tool, blocked: true, reason: 'invalid-input' },
+            'error',
+          )
+          blockError = new Error(message)
+        } else if (scan.status === 'block') {
+          for (const finding of scan.findings) {
+            await reportFailure(
+              ctx,
+              `[SECRET SCAN] High-confidence secret detected: ${finding.masked} (pattern: ${finding.pattern})`,
+              { script: 'secret-scan', tool: input.tool, pattern: finding.pattern },
+              'error',
+            )
+          }
           await reportFailure(
             ctx,
             SECRET_BLOCK_MESSAGE,
-            { script: 'scan-secrets', tool: input.tool, blocked: true, code: 2 },
+            { script: 'secret-scan', tool: input.tool, blocked: true },
             'error',
           )
+          void notifyToast(ctx, {
+            title: 'Pantheon Hook',
+            message: '⚠️ High-confidence secret detected — tool call blocked',
+            variant: 'error',
+            duration: 4000,
+            category: 'errors',
+            dedupeKey: `secret-scan|block|${input.sessionID}`,
+          })
           blockError = new Error(SECRET_BLOCK_MESSAGE)
+        } else if (scan.status === 'advisory') {
+          for (const finding of scan.findings) {
+            await reportFailure(
+              ctx,
+              `[SECRET SCAN] Potential secret detected (low confidence): ${finding.masked} (pattern: ${finding.pattern})`,
+              { script: 'secret-scan', tool: input.tool, pattern: finding.pattern },
+              'warn',
+            )
+          }
+          void notifyToast(ctx, {
+            title: 'Pantheon Hook',
+            message: '⚠️ Possible secret detected — see log',
+            variant: 'warning',
+            duration: 4000,
+            category: 'errors',
+            dedupeKey: `secret-scan|advisory|${input.sessionID}`,
+          })
+        }
+
+        if (blockError === null) {
+          await Promise.all(hooks.map(async (script) => safeRun(ctx, script, payload)))
         }
       } catch {
         // Never let a hook take down the opencode session — except the

package/src/plugins/tui/README.md

@@ -0,0 +1,14 @@
+# Pantheon TUI compatibility
+
+- **OpenCode V1:** supported by the existing `@opencode-ai/plugin@1.18.33`
+  TUI API and its `sidebar_content` / `app_bottom` slots.
+- **OpenCode V2 TUI:** unsupported. This package still exports the V1
+  `TuiPlugin` factory; it has no verified V2 TUI adapter. Do not infer the V2
+  TUI registration or slot contract from the V2 plugin `setup` contract. The
+  installed OpenCode host could not be analyzed with REA in this environment
+  because no native analysis provider was available, so a V2 contract must be
+  verified against a suitable shipped host artifact before adding an adapter.
+
+The V1 UI and its slot registrations remain unchanged. Keep this package on its
+existing V1 pins until a separately verified V2 migration can preserve the
+legacy UI behavior or explicitly replace it.

package/src/plugins/tui/dist/tui.d.ts

@@ -1,4 +1,4 @@
-import { TuiPluginModule } from "@opencode-ai/plugin/tui";
+import { TuiPluginApi, TuiPluginModule } from "@opencode-ai/plugin/tui";
 //#region src/index.d.ts
 export type DelegationEntry = {
   /** Job alias, e.g. "apo-1" (from the H1 title, falling back to filename). */
@@ -487,17 +487,20 @@ export declare function navigateToDelegationSession(route: {
 export declare function createDelegationRowOpenHandler(route: {
   navigate?: (name: string, params?: Record<string, unknown>) => void | PromiseLike<void>;
 } | undefined, taskID: string | undefined): () => void;
-/** Plugin-level live delegation store shared with the event subscriptions
- *  in `tui()`: the map of live entries + a version signal bumped on every
- *  mutation. The View subscribes to the version (in an effect) to refresh the
- *  durable child list and also reads the map as an optimistic live source. */
+/** Plugin-level live delegation store shared by event subscriptions and View.
+ *  Mutations notify subscribers so the View can refresh its durable child
+ *  list while also reading the map as an optimistic live source. */
 export type LiveDelegationStore = {
   map: Map<string, LiveDelegationEntry>;
-  /** Reactive version getter — View reads it inside an effect to re-fetch. */
-  version: () => number;
-  /** Bump the version after a live mutation. */
+  /** Subscribe to invalidations consumed by the sidebar's refresh path. */
+  subscribe: (listener: () => void) => () => void;
+  /** Notify sidebar subscribers after a live mutation. */
   bump: () => void;
 };
+/** Create the observable live store shared by task events and the sidebar. */
+export declare function createLiveDelegationStore(): LiveDelegationStore;
+/** Register the live task-part events that invalidate the sidebar store. */
+export declare function registerLiveDelegationEvents(api: TuiPluginApi, liveStore: LiveDelegationStore): () => void;
 declare const plugin: TuiPluginModule & {
   id: string;
   setup: () => Promise<void>;

package/src/plugins/tui/dist/tui.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tui.d.ts","names":[],"sources":["../src/index.tsx"],"mappings":";;YA07BY;;EAEV;;EAEA;;;;EAIA;;EAEA;EACA;;EAUA;;EAEA;EACA;EACA;;;;;;EAUA;;;;;;;;;;;wBAsBc,wBACd,aACA,oBACA,qBACC;;;;;;wBAkHmB,sBAAsB,cAAc,QAAQ;;;;;;;;;wBAyC5C,yBAAyB,eAAe,QAAQ;;;;;;;wBAUtD,oBACd;EAAS;EAAoB;eAC7B;;;;wBAUc,sBACd;EAAS;EAAoB;eAC7B;;;;;;wBAUc,YAAY;;;wBAMZ,WAAW;;;;wBAOX,yBAAyB,GAAG,iBAAiB,GAAG;;;;;wBAahD,oBACd,cAAc,mBACd,oBACA,cACA;EACG,QAAQ;EAAmB,QAAQ;;;;;wBAmCxB,sBACd,cAAc,mBACd,sBACA,cACA,4BACC;;qBAMU;;;;qBAKA;;;qBAIA;qBACA;;;;;;;;;;qBAWA;;;;;;;;qBASA;;;;;qBAMA;;;;;;;;;wBAUG,mBACd,OAAO,iBACP,aACA,uBACC;;;wBAWa,WAAW;;;;wBAeX,kBAAkB,OAAO,iBAAiB;;;YAQ9C;wBAEI,mBAAmB,OAAO,kBAAkB;wBAa5C,wBAAwB,OAAO;;;;wBAqB/B,uBAAuB;;;;;;;YAW3B,yBAAyB;;;;;YAMzB;;;;wBAKI,oBAAoB,OAAO,yBAAyB;YAuBxD;EACV;EACA;EACA;;;;;wBAsBc,oBACd;EACE;EACA;EACA;EACA;IAAU;IAAiB,QAAQ;;GAErC;EACG;EAAmB,UAAU;;;wBAYlB,kBACd,KAAK,YAAY,eACjB,mBACA,UAAU;;wBAWI,sBACd,KAAK,YAAY,eACjB,+BACA,cACA,iBACC;;;;;;;wBAca,4BACd,mBAAmB,mBACnB,eAAe,wBACd;;YAiGS;EACV;EACA;EACA;EACA;EACA;EACA;IACE;IACA,QAAQ;IACR;IACA;IACA;MAAS;MAAgB;;;;;YAKjB;;EAEV;;EAEA;;EAEA;EACA;;EAEA;EACA;;EAEA;;EAEA;EACA;EACA;EACA;;;YAIU;EACV;EACA;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;;;;;;wBAYc,wBACd,MAAM,oBACN,eACC;;;wBAsDa,yBACd,KAAK,YAAY,sBACjB,MAAM,oBACN;;;wBAwEc,sBACd,KAAK,YAAY,sBACjB;;;;;;;;;wBAoBc,2BACd;EAAqB;EAAa;iBAClC,YAAY,uDACX;;;;;wBAwBa,sBACd,KAAK,YAAY,sBACjB,gBAAgB,sBAChB;;;wBAWc,kBAAkB,MAAM,sBAAsB;;;;;;wBAoB9C,uBACd,eAAe,uBACf,aAAa,oBACZ;;;;;;;;;;;;;;;;;wBA0Ca,2BACd,kBAAkB,mBAClB,6CACC;;;;;;;;;wBAyCa,iBAAiB,cAAc;;;;YAOnC;;EAEV;EACA;;IAEE;MAAU;;;IAEV;MAAU;QAAY;QAAe,SAAS;;;;;;;;;;wBASlC,wBAAwB,SAAS;;;;;;;;;;;;wBAuBjC,gBAAgB;EAAgB;;;;;;;wBAUhC,kBAAkB;EAAkC;;;YAKxD;;EAEV;;EAEA;;;EAGA;;;EAGA;EACA;IACE;IACA;;;;;;;;;;;;;;;;;;;;wBAqBY,mBACd,4BACA;EAAS;EAAkB;GAC3B,cACA;;;;;;;YA6BU;;;;;wBAMI,oBAAoB,OAAO,yBAAyB;;;qBAmBvD,uBAAuB,SAAS,OAAO;wBAOpC,mBAAmB,QAAQ;;;;wBAO3B,oBAAoB,OAAO,wBAAwB;;;;;wBAUnD,sBAAsB,OAAO;;;qBAShC;wBAEG,sBAAsB,kBAAkB;;;qBAO3C;;;;wBAoBG,8BACd,cACA;;;;qBAUW;wBAEG,wBACd,OAAO,iBACP,aACA;;;;wBAUc,wBAAwB,OAAO,iBAAiB;;;;qBAYnD;;;;;wBAMG,uBAAuB,kBAAkB;;;;wBAyBzC,sBACd,cAAc,mBACd,qBACA;EACG,SAAS;EAAmB;EAAgB;EAAsB;;;;;wBAevD,uBAAuB,kBAAkB;EACvD;EACA;EACA;;;;;wBAUc,mBACd,kBACA,kBACA,gBACA,YACA;wBA8Cc,4BACd,mBAAmB,mCACnB,aAAa,mBACb,cACA,2BACC;;;;;;wBA4Da,4BACd;EAEM,YAAY,cAAc,SAAS,mCAAmC;eAG5E;;wBAmBc,+BACd;EAEM,YAAY,cAAc,SAAS,mCAAmC;eAG5E;;;;;YAwLU;EACV,KAAK,YAAY;;EAEjB;;EAEA;;cAsfI,QAAQ;EAAoB;EAAY,aAAa"}
+{"version":3,"file":"tui.d.ts","names":[],"sources":["../src/index.tsx"],"mappings":";;YAk9BY;;EAEV;;EAEA;;;;EAIA;;EAEA;EACA;;EAUA;;EAEA;EACA;EACA;;;;;;EAUA;;;;;;;;;;;wBAsBc,wBACd,aACA,oBACA,qBACC;;;;;;wBAkHmB,sBAAsB,cAAc,QAAQ;;;;;;;;;wBAyC5C,yBAAyB,eAAe,QAAQ;;;;;;;wBAUtD,oBACd;EAAS;EAAoB;eAC7B;;;;wBAUc,sBACd;EAAS;EAAoB;eAC7B;;;;;;wBAUc,YAAY;;;wBAMZ,WAAW;;;;wBAOX,yBAAyB,GAAG,iBAAiB,GAAG;;;;;wBAahD,oBACd,cAAc,mBACd,oBACA,cACA;EACG,QAAQ;EAAmB,QAAQ;;;;;wBAmCxB,sBACd,cAAc,mBACd,sBACA,cACA,4BACC;;qBAMU;;;;qBAKA;;;qBAIA;qBACA;;;;;;;;;;qBAWA;;;;;;;;qBASA;;;;;qBAMA;;;;;;;;;wBAUG,mBACd,OAAO,iBACP,aACA,uBACC;;;wBAWa,WAAW;;;;wBAeX,kBAAkB,OAAO,iBAAiB;;;YAQ9C;wBAEI,mBAAmB,OAAO,kBAAkB;wBAa5C,wBAAwB,OAAO;;;;wBAqB/B,uBAAuB;;;;;;;YAW3B,yBAAyB;;;;;YAMzB;;;;wBAKI,oBAAoB,OAAO,yBAAyB;YAuBxD;EACV;EACA;EACA;;;;;wBAsBc,oBACd;EACE;EACA;EACA;EACA;IAAU;IAAiB,QAAQ;;GAErC;EACG;EAAmB,UAAU;;;wBAYlB,kBACd,KAAK,YAAY,eACjB,mBACA,UAAU;;wBAWI,sBACd,KAAK,YAAY,eACjB,+BACA,cACA,iBACC;;;;;;;wBAca,4BACd,mBAAmB,mBACnB,eAAe,wBACd;;YAiGS;EACV;EACA;EACA;EACA;EACA;EACA;IACE;IACA,QAAQ;IACR;IACA;IACA;MAAS;MAAgB;;;;;YAKjB;;EAEV;;EAEA;;EAEA;EACA;;EAEA;EACA;;EAEA;;EAEA;EACA;EACA;EACA;;;YAIU;EACV;EACA;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;;;;;;wBAYc,wBACd,MAAM,oBACN,eACC;;;wBAsDa,yBACd,KAAK,YAAY,sBACjB,MAAM,oBACN;;;wBAwEc,sBACd,KAAK,YAAY,sBACjB;;;;;;;;;wBAoBc,2BACd;EAAqB;EAAa;iBAClC,YAAY,uDACX;;;;;wBAwBa,sBACd,KAAK,YAAY,sBACjB,gBAAgB,sBAChB;;;wBAWc,kBAAkB,MAAM,sBAAsB;;;;;;wBAoB9C,uBACd,eAAe,uBACf,aAAa,oBACZ;;;;;;;;;;;;;;;;;wBA0Ca,2BACd,kBAAkB,mBAClB,6CACC;;;;;;;;;wBAyCa,iBAAiB,cAAc;;;;YAOnC;;EAEV;EACA;;IAEE;MAAU;;;IAEV;MAAU;QAAY;QAAe,SAAS;;;;;;;;;;wBASlC,wBAAwB,SAAS;;;;;;;;;;;;wBAuBjC,gBAAgB;EAAgB;;;;;;;wBAUhC,kBAAkB;EAAkC;;;YAKxD;;EAEV;;EAEA;;;EAGA;;;EAGA;EACA;IACE;IACA;;;;;;;;;;;;;;;;;;;;wBAqBY,mBACd,4BACA;EAAS;EAAkB;GAC3B,cACA;;;;;;;YA6BU;;;;;wBAMI,oBAAoB,OAAO,yBAAyB;;;qBAmBvD,uBAAuB,SAAS,OAAO;wBAOpC,mBAAmB,QAAQ;;;;wBAO3B,oBAAoB,OAAO,wBAAwB;;;;;wBAUnD,sBAAsB,OAAO;;;qBAShC;wBAEG,sBAAsB,kBAAkB;;;qBAO3C;;;;wBAoBG,8BACd,cACA;;;;qBAUW;wBAEG,wBACd,OAAO,iBACP,aACA;;;;wBAUc,wBAAwB,OAAO,iBAAiB;;;;qBAYnD;;;;;wBAMG,uBAAuB,kBAAkB;;;;wBAyBzC,sBACd,cAAc,mBACd,qBACA;EACG,SAAS;EAAmB;EAAgB;EAAsB;;;;;wBAevD,uBAAuB,kBAAkB;EACvD;EACA;EACA;;;;;wBAUc,mBACd,kBACA,kBACA,gBACA,YACA;wBA8Cc,4BACd,mBAAmB,mCACnB,aAAa,mBACb,cACA,2BACC;;;;;;wBA4Da,4BACd;EAEM,YAAY,cAAc,SAAS,mCAAmC;eAG5E;;wBAmBc,+BACd;EAEM,YAAY,cAAc,SAAS,mCAAmC;eAG5E;;;;YAuLU;EACV,KAAK,YAAY;;EAEjB,YAAY;;EAEZ;;;wBAIc,6BAA6B;;wBAe7B,6BACd,KAAK,cACL,WAAW;cAkgBP,QAAQ;EAAoB;EAAY,aAAa"}

package/src/plugins/tui/dist/tui.js

@@ -4,7 +4,7 @@ import { appendFile, mkdir, readFile, readdir, writeFile } from "node:fs/promise
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { For, Show, createEffect, createMemo, createResource, createSignal, onCleanup, onMount } from "solid-js";
+import { For, Show, createMemo, createResource, createSignal, onCleanup, onMount } from "solid-js";
 //#region src/index.tsx
 /** @jsxImportSource @opentui/solid */
 /**
@@ -167,7 +167,7 @@ async function detectVersion(api) {
 			if (ver) return ver;
 		}
 	} catch {}
-	return "1.6.0-beta.5";
+	return "1.6.0-beta.7";
 }
 /**
 * usage-bar — AI subscription usage gauge for the opencode TUI.
@@ -509,12 +509,22 @@ async function loadConfig(configPath) {
 		return defaultConfig();
 	}
 }
-/** Vendored usage-bar plugin init: reads config, seeds the kv cache, starts
-*  the poll loop and registers the `app_bottom` slot. Skips everything (and
+/** Vendored usage-bar plugin init: reads config, seeds the kv cache, registers
+*  the `app_bottom` slot, then starts the poll loop. Skips everything (and
 *  registers nothing) when no provider is enabled — mirrors the standalone
 *  plugin's early return. */
 async function setupUsageBar(api) {
+	let disposed = false;
+	let clockInterval;
+	const pollTimeouts = /* @__PURE__ */ new Set();
+	api.lifecycle.onDispose(() => {
+		disposed = true;
+		if (clockInterval !== void 0) clearInterval(clockInterval);
+		for (const timeout of pollTimeouts) clearTimeout(timeout);
+		pollTimeouts.clear();
+	});
 	const config = await loadConfig(api.state.path?.config);
+	if (disposed) return;
 	if (api.state.path?.state) opencodeAuthFile = join(api.state.path.state, "auth.json");
 	const enabled = providers.filter((p) => config.providers[p.id].enabled);
 	if (enabled.length === 0) return;
@@ -526,28 +536,6 @@ async function setupUsageBar(api) {
 	const [byProvider, setByProvider] = createSignal(seed);
 	const [byStatus, setByStatus] = createSignal({});
 	const [now, setNow] = createSignal(Date.now());
-	setInterval(() => setNow(Date.now()), 1e3);
-	for (const p of enabled) {
-		const cfg = config.providers[p.id];
-		const poll = async () => {
-			const statusP = config.showStatus && p.statusUrl ? fetchStatus(p.statusUrl) : null;
-			const [all, status] = await Promise.all([p.fetchUsage(cfg), statusP]);
-			if (all) {
-				const windows = all.filter((w) => cfg.show[w.category] && w.resetsAt > Date.now());
-				setByProvider((prev) => ({
-					...prev,
-					[p.id]: windows
-				}));
-				api.kv.set(`usage-bar.${p.id}.windows`, windows);
-			}
-			if (status !== null) setByStatus((prev) => ({
-				...prev,
-				[p.id]: status
-			}));
-			setTimeout(poll, all ? POLL_MS : POLL_MS * 3);
-		};
-		poll();
-	}
 	api.slots.register({
 		order: 60,
 		slots: { app_bottom() {
@@ -696,6 +684,42 @@ async function setupUsageBar(api) {
 			});
 		} }
 	});
+	clockInterval = setInterval(() => setNow(Date.now()), 1e3);
+	const schedulePoll = (run, delay) => {
+		if (disposed) return;
+		const timeout = setTimeout(() => {
+			pollTimeouts.delete(timeout);
+			if (!disposed) run();
+		}, delay);
+		pollTimeouts.add(timeout);
+	};
+	for (const p of enabled) {
+		const cfg = config.providers[p.id];
+		const poll = async () => {
+			if (disposed) return;
+			const statusP = config.showStatus && p.statusUrl ? fetchStatus(p.statusUrl) : null;
+			const [all, status] = await Promise.all([p.fetchUsage(cfg), statusP]);
+			if (disposed) return;
+			if (all) {
+				const windows = all.filter((w) => cfg.show[w.category] && w.resetsAt > Date.now());
+				setByProvider((prev) => ({
+					...prev,
+					[p.id]: windows
+				}));
+				api.kv.set(`usage-bar.${p.id}.windows`, windows);
+			}
+			if (status !== null) setByStatus((prev) => ({
+				...prev,
+				[p.id]: status
+			}));
+			schedulePoll(runPoll, all ? POLL_MS : POLL_MS * 3);
+		};
+		const runPoll = () => {
+			if (disposed) return;
+			poll().catch(() => schedulePoll(runPoll, POLL_MS * 3));
+		};
+		runPoll();
+	}
 }
 /** True for `\s` characters (space, tab, newline, CR) — plain char checks so
 *  the parser stays regex-free (CodeQL flagged the old `\s*`/`\s+` + `(.+)`
@@ -1805,10 +1829,49 @@ function DelegationRow(props) {
 		return _el$13;
 	})();
 }
-/** Plugin-level live delegation store shared with the event subscriptions
-*  in `tui()`: the map of live entries + a version signal bumped on every
-*  mutation. The View subscribes to the version (in an effect) to refresh the
-*  durable child list and also reads the map as an optimistic live source. */
+/** Plugin-level live delegation store shared by event subscriptions and View.
+*  Mutations notify subscribers so the View can refresh its durable child
+*  list while also reading the map as an optimistic live source. */
+/** Create the observable live store shared by task events and the sidebar. */
+function createLiveDelegationStore() {
+	const listeners = /* @__PURE__ */ new Set();
+	return {
+		map: /* @__PURE__ */ new Map(),
+		subscribe(listener) {
+			listeners.add(listener);
+			return () => listeners.delete(listener);
+		},
+		bump() {
+			for (const listener of listeners) listener();
+		}
+	};
+}
+/** Register the live task-part events that invalidate the sidebar store. */
+function registerLiveDelegationEvents(api, liveStore) {
+	const unsubLive = [];
+	try {
+		unsubLive.push(api.event.on("message.part.updated", (event) => {
+			const props = event?.properties ?? {};
+			const part = props.part ?? props.info?.part;
+			if (part === void 0) return;
+			const sample = extractToolActivity(part);
+			if (sample !== null) trackToolActivity(latestToolActivity, sample.sessionID, sample.activity);
+			if (reduceDelegationToolPart(liveStore.map, part)) liveStore.bump();
+		}));
+	} catch {}
+	try {
+		unsubLive.push(api.event.on("message.part.removed", (event) => {
+			const props = event?.properties ?? {};
+			const partID = props.partID ?? props.part?.id;
+			if (partID !== void 0 && removeDelegationEntry(liveStore.map, partID)) liveStore.bump();
+		}));
+	} catch {}
+	return () => {
+		for (const unsub of unsubLive) try {
+			unsub();
+		} catch {}
+	};
+}
 function View(props) {
 	const [showSessions, setShowSessions] = createSignal(false);
 	const [showDelegations, setShowDelegations] = createSignal(true);
@@ -1938,11 +2001,12 @@ function View(props) {
 			cleanup.push(props.api.event.on("session.deleted", eventRefresh));
 			cleanup.push(props.api.event.on("session.status", eventRefresh));
 		} catch {}
-		createEffect(() => {
-			props.liveStore.version();
+		cleanup.push(props.liveStore.subscribe(() => {
 			eventRefreshCount += 1;
 			refreshDelegations();
-		});
+		}));
+		eventRefreshCount += 1;
+		refreshDelegations();
 		const poll = setInterval(() => {
 			setNow(Date.now());
 			refreshDelegations();
@@ -2168,35 +2232,11 @@ const tui = (api, _options, _meta) => {
 	if (pantheonPluginOnce("pantheon:tui")) return;
 	const [version, setVersion] = createSignal(null);
 	detectVersion(api).then((detected) => setVersion(detected)).catch(() => setVersion(null));
-	setupUsageBar(api);
-	const [liveVersion, setLiveVersion] = createSignal(0);
-	const liveStore = {
-		map: /* @__PURE__ */ new Map(),
-		version: liveVersion,
-		bump: () => setLiveVersion((v) => v + 1)
-	};
-	const unsubLive = [];
-	try {
-		unsubLive.push(api.event.on("message.part.updated", (event) => {
-			const props = event?.properties ?? {};
-			const part = props.part ?? props.info?.part;
-			if (part === void 0) return;
-			const sample = extractToolActivity(part);
-			if (sample !== null) trackToolActivity(latestToolActivity, sample.sessionID, sample.activity);
-			if (reduceDelegationToolPart(liveStore.map, part)) liveStore.bump();
-		}));
-	} catch {}
-	try {
-		unsubLive.push(api.event.on("message.part.removed", (event) => {
-			const props = event?.properties ?? {};
-			const partID = props.partID ?? props.part?.id;
-			if (partID !== void 0 && removeDelegationEntry(liveStore.map, partID)) liveStore.bump();
-		}));
-	} catch {}
+	setupUsageBar(api).catch(() => void 0);
+	const liveStore = createLiveDelegationStore();
+	const unsubscribeLive = registerLiveDelegationEvents(api, liveStore);
 	api.lifecycle.onDispose(() => {
-		for (const unsub of unsubLive) try {
-			unsub();
-		} catch {}
+		unsubscribeLive();
 		liveStore.map.clear();
 	});
 	api.slots.register({
@@ -2221,6 +2261,6 @@ const plugin = {
 	setup: async () => {}
 };
 //#endregion
-export { DELEGATION_ALIAS_WIDTH, DELEGATION_CHILDREN_RECENCY_MS, DELEGATION_CHILD_STATUS_GRACE_MS, DELEGATION_DESCRIPTION_MAX, DELEGATION_DONE_RETENTION_MS, DELEGATION_ELAPSED_WIDTH, DELEGATION_FAILED_RETENTION_MS, DELEGATION_ROW_GLYPHS, DELEGATION_VISIBLE_CEILING, IDLE_SILENCE_MS, NATIVE_LIVE_ALIASLESS_TTL_MS, STALE_RUNNING_THRESHOLD_MS, buildChildrenPath, ceilingDelegationList, childStatusToState, childrenToDelegationEntries, collectDelegationToolParts, compareDelegationEntries, countDelegationSources, createDelegationRowOpenHandler, plugin as default, delegationActivity, delegationActivityLabel, delegationElapsed, delegationRowGlyph, delegationRowIdentity, delegationRowMarker, delegationRowStatus, delegationSpinnerFrame, delegationStateTone, extractToolActivity, filterDelegationsToSession, fmtElapsed, formatDelegationAlias, formatDelegationElapsed, formatDelegationHeader, formatDelegationRowLead, formatPanelLogLine, isValidSessionId, latestToolActivityFor, markStaleIfRunning, mergeChildDelegationSources, mergeDelegationSources, navigateToDelegationSession, panelLogDir, parseDelegationMarkdown, parseDelegationToolPart, readAllDelegationEntries, readDelegationEntries, reduceDelegationToolPart, removeDelegationEntry, resolveCurrentSessionID, resolveDelegationsDir, resolvePantheonRoot, safeSessionPath, seedLiveDelegationMap, splitDelegationList, toDelegationEntry, trackToolActivity, truncateDelegationDescription, tuiLogPath, visibleDelegationList };
+export { DELEGATION_ALIAS_WIDTH, DELEGATION_CHILDREN_RECENCY_MS, DELEGATION_CHILD_STATUS_GRACE_MS, DELEGATION_DESCRIPTION_MAX, DELEGATION_DONE_RETENTION_MS, DELEGATION_ELAPSED_WIDTH, DELEGATION_FAILED_RETENTION_MS, DELEGATION_ROW_GLYPHS, DELEGATION_VISIBLE_CEILING, IDLE_SILENCE_MS, NATIVE_LIVE_ALIASLESS_TTL_MS, STALE_RUNNING_THRESHOLD_MS, buildChildrenPath, ceilingDelegationList, childStatusToState, childrenToDelegationEntries, collectDelegationToolParts, compareDelegationEntries, countDelegationSources, createDelegationRowOpenHandler, createLiveDelegationStore, plugin as default, delegationActivity, delegationActivityLabel, delegationElapsed, delegationRowGlyph, delegationRowIdentity, delegationRowMarker, delegationRowStatus, delegationSpinnerFrame, delegationStateTone, extractToolActivity, filterDelegationsToSession, fmtElapsed, formatDelegationAlias, formatDelegationElapsed, formatDelegationHeader, formatDelegationRowLead, formatPanelLogLine, isValidSessionId, latestToolActivityFor, markStaleIfRunning, mergeChildDelegationSources, mergeDelegationSources, navigateToDelegationSession, panelLogDir, parseDelegationMarkdown, parseDelegationToolPart, readAllDelegationEntries, readDelegationEntries, reduceDelegationToolPart, registerLiveDelegationEvents, removeDelegationEntry, resolveCurrentSessionID, resolveDelegationsDir, resolvePantheonRoot, safeSessionPath, seedLiveDelegationMap, splitDelegationList, toDelegationEntry, trackToolActivity, truncateDelegationDescription, tuiLogPath, visibleDelegationList };
 
 //# sourceMappingURL=tui.js.map

package/src/plugins/tui/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pantheon-tui",
-  "version": "1.6.0-beta.5",
+  "version": "1.6.0-beta.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pantheon-tui",
-      "version": "1.6.0-beta.5",
+      "version": "1.6.0-beta.7",
       "license": "MIT",
       "dependencies": {
         "@opencode-ai/plugin": "1.18.33",
@@ -41,19 +41,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/@ampproject/remapping": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.3.0.tgz",
-      "integrity": "sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@jridgewell/gen-mapping": "^0.3.5",
-        "@jridgewell/trace-mapping": "^0.3.24"
-      },
-      "engines": {
-        "node": ">=6.0.0"
-      }
-    },
     "node_modules/@babel/code-frame": {
       "version": "7.29.7",
       "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.7.tgz",
@@ -78,21 +65,21 @@
       }
     },
     "node_modules/@babel/core": {
-      "version": "7.28.0",
-      "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.28.0.tgz",
-      "integrity": "sha512-UlLAnTPrFdNGoFtbSXwcGFQBtQZJCNjaN6hQNP3UPvuNXT1i82N26KL3dZeIpNalWywr9IuQuncaAfUaS1g6sQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@ampproject/remapping": "^2.2.0",
-        "@babel/code-frame": "^7.27.1",
-        "@babel/generator": "^7.28.0",
-        "@babel/helper-compilation-targets": "^7.27.2",
-        "@babel/helper-module-transforms": "^7.27.3",
-        "@babel/helpers": "^7.27.6",
-        "@babel/parser": "^7.28.0",
-        "@babel/template": "^7.27.2",
-        "@babel/traverse": "^7.28.0",
-        "@babel/types": "^7.28.0",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.29.7.tgz",
+      "integrity": "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/code-frame": "^7.29.7",
+        "@babel/generator": "^7.29.7",
+        "@babel/helper-compilation-targets": "^7.29.7",
+        "@babel/helper-module-transforms": "^7.29.7",
+        "@babel/helpers": "^7.29.7",
+        "@babel/parser": "^7.29.7",
+        "@babel/template": "^7.29.7",
+        "@babel/traverse": "^7.29.7",
+        "@babel/types": "^7.29.7",
+        "@jridgewell/remapping": "^2.3.5",
         "convert-source-map": "^2.0.0",
         "debug": "^4.1.0",
         "gensync": "^1.0.0-beta.2",
@@ -469,6 +456,16 @@
         "@jridgewell/trace-mapping": "^0.3.24"
       }
     },
+    "node_modules/@jridgewell/remapping": {
+      "version": "2.3.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz",
+      "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.5",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
     "node_modules/@jridgewell/resolve-uri": {
       "version": "3.1.2",
       "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
@@ -2537,9 +2534,9 @@
       }
     },
     "node_modules/seroval": {
-      "version": "1.5.6",
-      "resolved": "https://registry.npmjs.org/seroval/-/seroval-1.5.6.tgz",
-      "integrity": "sha512-rVQVWjjSvlINzaQPZH5JFqsqEsIWdTxY3iJZCnTL/5gQbXIRooVZKI60tVCkOVfzcRPejboxO2t0P89dg5mQaA==",
+      "version": "1.6.8",
+      "resolved": "https://registry.npmjs.org/seroval/-/seroval-1.6.8.tgz",
+      "integrity": "sha512-HlSgSAkTk4EqHcje1ptJjfZi1YDv5KbhVJ/d3P7T/nAXua2VmDu+AKDX5VTdFfZf48nDkWB2TKYt0DrCSa+3wg==",
       "license": "MIT",
       "engines": {
         "node": ">=10"

package/src/plugins/tui/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pantheon-tui",
   "type": "module",
-  "version": "1.6.0-beta.5",
+  "version": "1.6.0-beta.7",
   "description": "Pantheon TUI plugin — sidebar (version, preset, sessions, real-time delegations) + AI subscription usage gauges incl. OpenCode Go/Zen dollar limits (vendored, MIT)",
   "license": "MIT",
   "engines": {
@@ -31,8 +31,12 @@
     "tsdown": "0.23.0"
   },
   "overrides": {
+    "@babel/core": "7.29.7",
+    "seroval": "1.6.8",
+    "solid-js": "1.9.12",
     "rolldown": "1.2.7"
   },
+  "//overrides": "TUI production advisory fixes: Babel >=7.29.6 and Seroval >=1.6.3; Solid stays at 1.9.12 to satisfy OpenTUI's exact peer. Remove only after upstream ranges include fixed versions; Seroval compatibility is covered by the Solid serializer regression test.",
   "dependencies": {
     "@opencode-ai/plugin": "1.18.33",
     "@opentui/core": "0.5.10",