pantheon-opencode 1.6.0-beta.6 → 1.6.0-beta.8

package/src/plugins/tui/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pantheon-tui",
-  "version": "1.6.0-beta.6",
+  "version": "1.6.0-beta.8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pantheon-tui",
-      "version": "1.6.0-beta.6",
+      "version": "1.6.0-beta.8",
       "license": "MIT",
       "dependencies": {
         "@opencode-ai/plugin": "1.18.33",
@@ -41,19 +41,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/@ampproject/remapping": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.3.0.tgz",
-      "integrity": "sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@jridgewell/gen-mapping": "^0.3.5",
-        "@jridgewell/trace-mapping": "^0.3.24"
-      },
-      "engines": {
-        "node": ">=6.0.0"
-      }
-    },
     "node_modules/@babel/code-frame": {
       "version": "7.29.7",
       "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.7.tgz",
@@ -78,21 +65,21 @@
       }
     },
     "node_modules/@babel/core": {
-      "version": "7.28.0",
-      "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.28.0.tgz",
-      "integrity": "sha512-UlLAnTPrFdNGoFtbSXwcGFQBtQZJCNjaN6hQNP3UPvuNXT1i82N26KL3dZeIpNalWywr9IuQuncaAfUaS1g6sQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@ampproject/remapping": "^2.2.0",
-        "@babel/code-frame": "^7.27.1",
-        "@babel/generator": "^7.28.0",
-        "@babel/helper-compilation-targets": "^7.27.2",
-        "@babel/helper-module-transforms": "^7.27.3",
-        "@babel/helpers": "^7.27.6",
-        "@babel/parser": "^7.28.0",
-        "@babel/template": "^7.27.2",
-        "@babel/traverse": "^7.28.0",
-        "@babel/types": "^7.28.0",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.29.7.tgz",
+      "integrity": "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/code-frame": "^7.29.7",
+        "@babel/generator": "^7.29.7",
+        "@babel/helper-compilation-targets": "^7.29.7",
+        "@babel/helper-module-transforms": "^7.29.7",
+        "@babel/helpers": "^7.29.7",
+        "@babel/parser": "^7.29.7",
+        "@babel/template": "^7.29.7",
+        "@babel/traverse": "^7.29.7",
+        "@babel/types": "^7.29.7",
+        "@jridgewell/remapping": "^2.3.5",
         "convert-source-map": "^2.0.0",
         "debug": "^4.1.0",
         "gensync": "^1.0.0-beta.2",
@@ -469,6 +456,16 @@
         "@jridgewell/trace-mapping": "^0.3.24"
       }
     },
+    "node_modules/@jridgewell/remapping": {
+      "version": "2.3.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz",
+      "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.5",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
     "node_modules/@jridgewell/resolve-uri": {
       "version": "3.1.2",
       "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
@@ -2537,9 +2534,9 @@
       }
     },
     "node_modules/seroval": {
-      "version": "1.5.6",
-      "resolved": "https://registry.npmjs.org/seroval/-/seroval-1.5.6.tgz",
-      "integrity": "sha512-rVQVWjjSvlINzaQPZH5JFqsqEsIWdTxY3iJZCnTL/5gQbXIRooVZKI60tVCkOVfzcRPejboxO2t0P89dg5mQaA==",
+      "version": "1.6.8",
+      "resolved": "https://registry.npmjs.org/seroval/-/seroval-1.6.8.tgz",
+      "integrity": "sha512-HlSgSAkTk4EqHcje1ptJjfZi1YDv5KbhVJ/d3P7T/nAXua2VmDu+AKDX5VTdFfZf48nDkWB2TKYt0DrCSa+3wg==",
       "license": "MIT",
       "engines": {
         "node": ">=10"

package/src/plugins/tui/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pantheon-tui",
   "type": "module",
-  "version": "1.6.0-beta.6",
+  "version": "1.6.0-beta.8",
   "description": "Pantheon TUI plugin — sidebar (version, preset, sessions, real-time delegations) + AI subscription usage gauges incl. OpenCode Go/Zen dollar limits (vendored, MIT)",
   "license": "MIT",
   "engines": {
@@ -31,8 +31,12 @@
     "tsdown": "0.23.0"
   },
   "overrides": {
+    "@babel/core": "7.29.7",
+    "seroval": "1.6.8",
+    "solid-js": "1.9.12",
     "rolldown": "1.2.7"
   },
+  "//overrides": "TUI production advisory fixes: Babel >=7.29.6 and Seroval >=1.6.3; Solid stays at 1.9.12 to satisfy OpenTUI's exact peer. Remove only after upstream ranges include fixed versions; Seroval compatibility is covered by the Solid serializer regression test.",
   "dependencies": {
     "@opencode-ai/plugin": "1.18.33",
     "@opentui/core": "0.5.10",

package/src/plugins/tui/src/index.tsx

@@ -53,16 +53,7 @@ import { homedir } from 'node:os'
 import { dirname, join } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import type { TuiPlugin, TuiPluginApi, TuiPluginModule } from '@opencode-ai/plugin/tui'
-import {
-  createEffect,
-  createMemo,
-  createResource,
-  createSignal,
-  For,
-  onCleanup,
-  onMount,
-  Show,
-} from 'solid-js'
+import { createMemo, createResource, createSignal, For, onCleanup, onMount, Show } from 'solid-js'
 
 // ─── Double-load guard (mirrors src/pantheon/plugin-once.ts) ───────────────
 // Opencode merges global + project plugin paths, so this module can load twice
@@ -919,9 +910,9 @@ async function setupUsageBar(api: TuiPluginApi) {
  *      (filterDelegationsToSession) drops every non-focused report — the panel
  *      lists only the focused session.
  *
- *   3. REFRESH — session.created/updated/deleted/status events and
- *      message.part.updated/removed (via liveStore.version bumps) re-fetch
- *      children; a 1s safety poll (oh-my-opencode-slim pattern) re-fetches
+ *   3. REFRESH — session.created/updated/deleted/status events and live-store
+ *      subscription notifications re-fetch children; a 1s safety poll
+ *      (oh-my-opencode-slim pattern) re-fetches
  *      children + re-reads the md so the panel updates EVEN without events.
  *
  *   4. DIAGNOSTICS — every re-fetch logs
@@ -947,8 +938,8 @@ async function setupUsageBar(api: TuiPluginApi) {
  *      panel renders EMPTY — zero rows, zero errors.
  *
  * The live tool-part lifecycle helpers below remain (tested, exported) but
- * are no longer the source of truth: they feed a version signal that merely
- * re-triggers the children fetch. Everything is fail-open: a missing
+ * are no longer the source of truth: they update the shared live store, whose
+ * subscribers re-trigger the children fetch. Everything is fail-open: a missing
  * children API or directory yields [], and any unreadable input is skipped —
  * never crash. */
 
@@ -2631,18 +2622,88 @@ function DelegationRow(props: {
 
 /* ─── Main Sidebar View ──────────────────────────────────── */
 
-/** Plugin-level live delegation store shared with the event subscriptions
- *  in `tui()`: the map of live entries + a version signal bumped on every
- *  mutation. The View subscribes to the version (in an effect) to refresh the
- *  durable child list and also reads the map as an optimistic live source. */
+/** Plugin-level live delegation store shared by event subscriptions and View.
+ *  Mutations notify subscribers so the View can refresh its durable child
+ *  list while also reading the map as an optimistic live source. */
 export type LiveDelegationStore = {
   map: Map<string, LiveDelegationEntry>
-  /** Reactive version getter — View reads it inside an effect to re-fetch. */
-  version: () => number
-  /** Bump the version after a live mutation. */
+  /** Subscribe to invalidations consumed by the sidebar's refresh path. */
+  subscribe: (listener: () => void) => () => void
+  /** Notify sidebar subscribers after a live mutation. */
   bump: () => void
 }
 
+/** Create the observable live store shared by task events and the sidebar. */
+export function createLiveDelegationStore(): LiveDelegationStore {
+  const listeners = new Set<() => void>()
+  return {
+    map: new Map<string, LiveDelegationEntry>(),
+    subscribe(listener) {
+      listeners.add(listener)
+      return () => listeners.delete(listener)
+    },
+    bump() {
+      for (const listener of listeners) listener()
+    },
+  }
+}
+
+/** Register the live task-part events that invalidate the sidebar store. */
+export function registerLiveDelegationEvents(
+  api: TuiPluginApi,
+  liveStore: LiveDelegationStore,
+): () => void {
+  const unsubLive: (() => void)[] = []
+
+  try {
+    unsubLive.push(
+      api.event.on('message.part.updated', (event: unknown) => {
+        // SDK v2 shape: properties.part (v1 drift: properties.info.part).
+        const props = ((event as { properties?: unknown } | null)?.properties ?? {}) as {
+          part?: unknown
+          info?: { part?: unknown }
+        }
+        const part = (props.part ?? props.info?.part) as DelegationToolPart | undefined
+        if (part === undefined) return
+        // beta.6: track the live tool call per child session (panel's
+        // activity line). Fire-and-forget — display-only state.
+        const sample = extractToolActivity(part as Parameters<typeof extractToolActivity>[0])
+        if (sample !== null)
+          trackToolActivity(latestToolActivity, sample.sessionID, sample.activity)
+        if (reduceDelegationToolPart(liveStore.map, part)) liveStore.bump()
+      }),
+    )
+  } catch {
+    /* events API unavailable — children API + 1s poll cover the panel */
+  }
+
+  try {
+    unsubLive.push(
+      api.event.on('message.part.removed', (event: unknown) => {
+        // SDK v2 shape: properties.partID (v1 drift: properties.part.id).
+        const props = ((event as { properties?: unknown } | null)?.properties ?? {}) as {
+          partID?: string
+          part?: { id?: string }
+        }
+        const partID = props.partID ?? props.part?.id
+        if (partID !== undefined && removeDelegationEntry(liveStore.map, partID)) liveStore.bump()
+      }),
+    )
+  } catch {
+    /* events API unavailable — children API + 1s poll cover the panel */
+  }
+
+  return () => {
+    for (const unsub of unsubLive) {
+      try {
+        unsub()
+      } catch {
+        /* ignore */
+      }
+    }
+  }
+}
+
 function View(props: {
   api: TuiPluginApi
   sessionID: string | undefined
@@ -2758,7 +2819,7 @@ function View(props: {
   // means the event bus isn't delivering, and the 1s poll is what keeps
   // the panel honest.
   let eventRefreshCount = 0
-  // In-flight guard: overlap between the poll, events and the version effect
+  // In-flight guard: overlap between the poll, events and store subscribers
   // collapses into one fetch — no duplicate work, no duplicate entries.
   let delegationsInflight: Promise<void> | null = null
   const refreshDelegations = () => {
@@ -2910,14 +2971,17 @@ function View(props: {
       /* events API not available — the 1s poll still covers it */
     }
 
-    // message.part.updated/removed → liveStore.version() bumps (tui()):
-    // subscribe here so the panel ALSO re-fetches children when tool-part
-    // events DO arrive and the updated live row is rendered immediately.
-    createEffect(() => {
-      props.liveStore.version() // subscribe to live mutations
-      eventRefreshCount += 1
-      void refreshDelegations()
-    })
+    // Task-part events invalidate the same store the panel reads, refreshing
+    // children when those events arrive and making optimistic live rows visible.
+    cleanup.push(
+      props.liveStore.subscribe(() => {
+        eventRefreshCount += 1
+        void refreshDelegations()
+      }),
+    )
+    // Fetch the initial state; future updates use the store subscription above.
+    eventRefreshCount += 1
+    void refreshDelegations()
 
     // Safety poll (OMO-slim pattern): 1s re-fetch children + md + tick the
     // elapsed counter. Guarantees the panel updates even with zero events.
@@ -2935,8 +2999,8 @@ function View(props: {
     // compacting, so after a compaction/attach the live map would start
     // empty even though the session still holds the delegation tool parts.
     // Re-seed the live map from the session's existing parts (in message
-    // order) right after the subscriptions are registered — the version
-    // bump re-triggers the children fetch. Fail-open: if the SDK access is
+    // order) right after the subscriptions are registered — the store
+    // notification re-triggers the children fetch. Fail-open: if the SDK access is
     // unavailable we skip — the children API + the 1s poll keep the panel
     // working.
     try {
@@ -3072,61 +3136,18 @@ const tui: TuiPlugin = (api, _options, _meta) => {
   // Vendored feature (MIT): AI subscription usage gauges.
   void setupUsageBar(api) // async init — never blocks sidebar registration
 
-  // ── Live delegation store (tool-part tracker, kept as a REFRESH
-  // TRIGGER) ──
+  // ── Live delegation store (tool-part tracker + sidebar invalidation) ──
   // The Delegations panel's PRIMARY source is `api.client.session.children`
   // (delegations-sidebar pattern) — `message.part.updated` may not fire for
   // the native task tool on runtime 1.18.13 (the "(0)" symptom). The
-  // tool-part lifecycle below still tracks `task` parts and bumps a version
-  // signal the View subscribes to: when part events DO arrive, the panel
+  // tool-part lifecycle below still tracks `task` parts and invalidates the
+  // store subscription consumed by the View: when part events DO arrive, the panel
   // re-fetches children. Fail-open: if the events API is unavailable nothing
   // subscribes and the 1s safety poll keeps the panel working (never crash).
-  const [liveVersion, setLiveVersion] = createSignal(0)
-  const liveStore: LiveDelegationStore = {
-    map: new Map<string, LiveDelegationEntry>(),
-    version: liveVersion,
-    bump: () => setLiveVersion((v) => v + 1),
-  }
-  const unsubLive: (() => void)[] = []
-
-  try {
-    unsubLive.push(
-      api.event.on('message.part.updated', (event: any) => {
-        // SDK v2 shape: properties.part (v1 drift: properties.info.part).
-        const props = (event?.properties ?? {}) as { part?: unknown; info?: { part?: unknown } }
-        const part = (props.part ?? props.info?.part) as DelegationToolPart | undefined
-        if (part === undefined) return
-        // beta.6: track the live tool call per child session (panel's
-        // activity line). Fire-and-forget — display-only state.
-        const sample = extractToolActivity(part as any)
-        if (sample !== null)
-          trackToolActivity(latestToolActivity, sample.sessionID, sample.activity)
-        if (reduceDelegationToolPart(liveStore.map, part)) liveStore.bump()
-      }),
-    )
-  } catch {
-    /* events API unavailable — children API + 1s poll cover the panel */
-  }
-  try {
-    unsubLive.push(
-      api.event.on('message.part.removed', (event: any) => {
-        // SDK v2 shape: properties.partID (v1 drift: properties.part.id).
-        const props = (event?.properties ?? {}) as { partID?: string; part?: { id?: string } }
-        const partID = props.partID ?? props.part?.id
-        if (partID !== undefined && removeDelegationEntry(liveStore.map, partID)) liveStore.bump()
-      }),
-    )
-  } catch {
-    /* events API unavailable — children API + 1s poll cover the panel */
-  }
+  const liveStore = createLiveDelegationStore()
+  const unsubscribeLive = registerLiveDelegationEvents(api, liveStore)
   api.lifecycle.onDispose(() => {
-    for (const unsub of unsubLive) {
-      try {
-        unsub()
-      } catch {
-        /* ignore */
-      }
-    }
+    unsubscribeLive()
     liveStore.map.clear()
   })
 

package/src/plugins/tui/tsdown.config.ts

@@ -1,4 +1,5 @@
 import { readFileSync } from 'node:fs'
+import { appendFile, readdir, readFile } from 'node:fs/promises'
 import { join } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import solid from 'rolldown-plugin-solid'
@@ -9,6 +10,21 @@ const pkg = JSON.parse(readFileSync(join(__dirname, 'package.json'), 'utf8')) as
   version: string
 }
 
+async function ensureDistArtifactsEndWithNewline(): Promise<void> {
+  const dist = join(__dirname, 'dist')
+  const entries = await readdir(dist, { withFileTypes: true })
+
+  await Promise.all(
+    entries
+      .filter((entry) => entry.isFile())
+      .map(async ({ name }) => {
+        const path = join(dist, name)
+        const contents = await readFile(path, 'utf8')
+        if (!contents.endsWith('\n')) await appendFile(path, '\n')
+      }),
+  )
+}
+
 export default defineConfig({
   entry: { tui: 'src/index.tsx', server: 'src/server.ts' },
   format: ['esm'],
@@ -33,4 +49,5 @@ export default defineConfig({
   deps: {
     neverBundle: [/^@opencode-ai\//, /^@opentui\//, /^solid-js/],
   },
+  onSuccess: ensureDistArtifactsEndWithNewline,
 })

package/src/routing.yml

@@ -459,6 +459,8 @@ handoffs:
         (priority-aware, budget-allocated), archive IMPL/REVIEW to 02-progress-log.md,
         update _xref/index.md cross-references.'
 
+# Canonical explicit fallback map for Zeus timeout/retry policy. Evaluate
+# left-to-right; an absent agent entry means escalate (never guess a fallback).
 fallback_chains:
   apollo:
     - athena
@@ -518,7 +520,7 @@ background_delegation:
   prune_ttl_ms: 86400000    # 24h
   read_only_agents: [apollo, gaia]
   session_max: 3
-  retry_count: 1
+  retry_count: 1              # one retry after an initial transient failure; no retry loops
 # ── O5: permission.task — glob rules for which subagents an agent may
 # invoke (last matching rule wins; deny removes the agent from the delegate
 # tool description entirely — prevents circular delegation at the
@@ -551,7 +553,10 @@ hashline:
 full_auto:
   enabled: false                 # opt-in: goal continuations are OFF by default
   max_continuations: 25          # hard cap on goal continuations per session
-  # Wave 3 (PR #46): full-auto goal loop. One active goal per session
-  # (pending → in_progress → done); while active, idle sessions are
-  # continued automatically toward the objective. Documentation mirror —
-  # the plugin resolves behavior in code (GOAL_LOOP_DEFAULTS).
+  # Full-auto only continues a task/scope explicitly authorized by the user.
+  # It never authorizes auth/security gates, risky data/schema or destructive
+  # operations, global config, broad permissions, production deploy, push, or merge.
+  # Low-risk execution is proportional: no forced plan/discovery/council/artifact
+  # for a bounded fix; use focused verification. Documentation mirror — runtime
+  # behavior is implemented in the plugin (GOAL_LOOP_DEFAULTS).
+  # Wave 3 (PR #46): one active goal per session (pending → in_progress → done).

package/src/skills/README.md

@@ -23,8 +23,8 @@ There are **20 skills** divided into **5 domains**.
    - Used by: Zeus, Apollo, Hephaestus, Nyx, Gaia
 
 4. **context-compression** — `context-compression/SKILL.md`
-   - Level 2 — Pantheon-native context compression with priority scoring, semantic summarization, budget allocation, and cross-references.
-   - Used by: Zeus, Mnemosyne, Themis
+   - Native compaction guidance and explicit checkpoint rules; no automatic compression MCP calls.
+   - Used by: Zeus, Mnemosyne
 
 5. **memory-bank** — `memory-bank/SKILL.md`
    - Memory bank rules, structure, and optimization — complete guide to Pantheon memory management.
@@ -124,7 +124,7 @@ The `SKILL.md` file contains YAML frontmatter with `name`, `description`, and pl
 | 1 | agent-coordination | Orchestration & Workflow | Zeus |
 | 2 | artifact-management | Orchestration & Workflow | Zeus, Mnemosyne, Iris |
 | 3 | auto-continue | Orchestration & Workflow | Zeus, Apollo, Hephaestus, Nyx, Gaia |
-| 4 | context-compression | Orchestration & Workflow | Zeus, Mnemosyne, Themis |
+| 4 | context-compression | Orchestration & Workflow | Zeus, Mnemosyne |
 | 5 | memory-bank | Orchestration & Workflow | Mnemosyne, Athena |
 | 6 | session-goal | Orchestration & Workflow | Zeus, Mnemosyne |
 | 7 | clonedeps | Development Tools | Hermes, Hephaestus |

package/src/skills/artifact-management/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: artifact-management
-description: "Structured artifact trail for feature implementations — plans, implementations, reviews, and decisions."
+description: "Structured artifacts for planned, multi-phase, or materially risky implementation work."
 context: fork
 globs: []
 alwaysApply: false
@@ -8,7 +8,7 @@ alwaysApply: false
 
 # Artifact Management
 
-Structured artifact trail system for documenting feature implementations. Defines what, where, and how agents produce phase outputs.
+Structured artifact trail for planned, multi-phase, or materially risky implementation work. Artifacts are not a prerequisite for simple fixes or read-only investigation.
 
 ---
 
@@ -55,6 +55,13 @@ All ephemeral artifacts live in `.pantheon/memory-bank/.tmp/` — gitignored and
 
 > **Zeus does NOT generate artifacts.** He orchestrates agents that generate them.
 
+## Proportional Use
+
+- Create PLAN/IMPL/REVIEW artifacts for planned multi-phase work or when risk, auditability, or an explicit request needs a durable phase trail.
+- A bounded, reversible fix should be investigated only as far as needed, implemented, verified with focused checks, and returned as a concise summary. Do not create PLAN, IMPL, or REVIEW artifacts for it.
+- Read-only lookup or trivial discovery needs no DISC artifact; use one only when findings are broad enough to be reused or drive a material decision.
+- The absence of an artifact never waives Themis review or human approval for auth/security, data/schema/migrations, production-impacting work, or sensitive actions.
+
 ---
 
 ## Templates
@@ -103,9 +110,9 @@ All ephemeral artifacts live in `.pantheon/memory-bank/.tmp/` — gitignored and
 
 ## Human Pause Points
 
-1. **After PLAN** → user reads `.tmp/PLAN-<feature>.md` and approves
-2. **After REVIEW** → user reads `.tmp/REVIEW-<feature>.md` and validates focus items
-3. **Before git commit** → user executes manually
+1. **After a required PLAN** → pause only when a material scope/risk decision needs approval.
+2. **After required REVIEW** → preserve auth/security/data/schema and other sensitive approval gates.
+3. **Before commit/push/merge/deploy or destructive/global action** → require explicit human approval.
 
 ---