pi-opencode-cli-bridge 0.2.16 → 0.2.18

package/README.md

@@ -33,7 +33,7 @@ The original MIT copyright notice is preserved in [LICENSE](LICENSE). The new pa
 
 - Node.js **22.19.0 or newer**.
 - Pi Coding Agent **1.2.0 or newer**; the development SDK is pinned to 1.2.0.
-- OpenCode installed on the same machine and available on `PATH`, or selected with `OPENCODE_PI_BIN`. Supports OpenCode up to **2.2.5**. Real-CLI integration tests cover **1.19.0** and **2.2.5**; intermediate releases are not individually verified.
+- OpenCode installed on the same machine and available on `PATH`, or selected with `OPENCODE_PI_BIN`. Supports OpenCode up to **2.2.6**. Real-CLI integration tests cover **1.19.0** and **2.2.6**; intermediate releases are not individually verified.
 
 Check OpenCode before starting Pi:
 
@@ -88,16 +88,16 @@ For an isolated text smoke test:
 pi -p --no-session --provider opencode-cli --model opencode/deepseek-v4.1-flash-free --thinking off "Reply with exactly OK"
 ```
 
-Model availability changes. Refresh the list with `/opencode-pi update` if the example model is no longer listed. Bundled free models do not require an OpenCode login; availability and server-side acceptance are controlled by OpenCode.
+Model availability changes. Refresh the list with `/pi-opencode-cli-bridge update` if the example model is no longer listed. Bundled free models do not require an OpenCode login; availability and server-side acceptance are controlled by OpenCode.
 
-The provider ID `opencode-cli` and the command `/opencode-pi` retain their upstream names for compatibility:
+The command is `/pi-opencode-cli-bridge`; it replaces `/opencode-pi`, which is no longer registered. The provider ID `opencode-cli` and the `OPENCODE_PI_*` environment variables remain unchanged for compatibility:
 
 ```text
-/opencode-pi status
-/opencode-pi models
-/opencode-pi test
-/opencode-pi update
-/opencode-pi help
+/pi-opencode-cli-bridge status
+/pi-opencode-cli-bridge models
+/pi-opencode-cli-bridge test
+/pi-opencode-cli-bridge update
+/pi-opencode-cli-bridge help
 ```
 
 The `test` command prints diagnostic commands; it does not send a model request itself.
@@ -109,7 +109,7 @@ The `test` command prints diagnostic commands; it does not send a model request
 | `OPENCODE_PI_BIN` | Path to the OpenCode executable. Defaults to `opencode`. |
 | `OPENCODE_PI_MODELS` | Comma- or space-separated model IDs. IDs without a provider prefix receive `opencode/`. |
 
-An explicit model list skips startup discovery and starts with conservative fallback capabilities. Run `/opencode-pi update` to discover image input, reasoning variants, token limits and costs.
+An explicit model list skips startup discovery and starts with conservative fallback capabilities. Run `/pi-opencode-cli-bridge update` to discover image input, reasoning variants, token limits and costs.
 
 Without an override, discovery selects active `opencode/` models whose reported input and output costs are zero. OpenCode 2.x discovery uses the local `/api/model` endpoint, excludes disabled models, and checks every pricing tier before selecting a free model. For explicitly configured tiered models, displayed costs conservatively use the highest reported rate for each cost field. When cost metadata is missing, selection falls back to the upstream free-model naming rules. Review costs before explicitly selecting a paid model.
 
@@ -140,11 +140,11 @@ Reasoning variants, image support and token limits follow CLI discovery. Token u
 
 - Prompts, system instructions, tool declarations, conversation text and attached images pass to OpenCode and its model provider. Do not send confidential data unless that provider's policies are suitable.
 - The extension does not directly extract credentials or call model HTTP endpoints. The OpenCode subprocess still runs as your user and can use its own configuration, credentials and inherited environment.
-- The native-tool guard is a guard rail, **not a sandbox**. Integration tests run the real OpenCode 1.19.0 and 2.2.5 CLIs against a local model fixture that requests native `write` and `bash`/`shell` calls, and check that neither runs with the legacy plugin intact, missing, or failing at startup. Other OpenCode versions, tools contributed by your own global OpenCode configuration (for example MCP servers), and a hostile local process are not covered.
+- The native-tool guard is a guard rail, **not a sandbox**. Integration tests run the real OpenCode 1.19.0 and 2.2.6 CLIs against a local model fixture that requests native `write` and `bash`/`shell` calls, and check that neither runs with the legacy plugin intact, missing, or failing at startup. Other OpenCode versions, tools contributed by your own global OpenCode configuration (for example MCP servers), and a hostile local process are not covered.
 - Pi and OpenCode can both retain local conversation data. Best-effort cleanup is not a guarantee of secure deletion.
 - Free-tier model availability and accepted request shapes can change. This fork makes no guarantee of continued access or compliance with a hosted provider's terms; review the applicable terms yourself.
-- Live tests on OpenCode 2.2.5 with DeepSeek v4.1 Flash Free verified text replies, a Pi `read` call and tool-result continuation with thinking off. High thinking was not reverified on 2.2.5; an earlier test timed out. No default thinking setting is changed by this package.
-- At startup Pi warns when your OpenCode version exceeds the supported maximum, **2.2.5**, or its version cannot be determined.
+- Live tests on OpenCode 2.2.6 with DeepSeek v4.1 Flash Free verified text replies, a Pi `read` call and tool-result continuation with thinking off. High thinking was not reverified on 2.2.6; an earlier test timed out. No default thinking setting is changed by this package.
+- At startup Pi warns when your OpenCode version exceeds the supported maximum, **2.2.6**, or its version cannot be determined.
 - Timeouts and cancellation escalate from `SIGTERM` to `SIGKILL` on the CLI's process group after 250 ms; on Windows the whole process tree is ended with `taskkill /T /F` (not tested on Windows). If OpenCode quits before reading the prompt, the turn shows OpenCode's own error rather than a broken-pipe error. Malformed or unexpected CLI events end the turn with an error instead of crashing Pi. Shutdown waits for session cleanup.
 
 See [SECURITY.md](SECURITY.md) for the trust boundaries and [docs/code-review.md](https://github.com/Gybra/pi-opencode-cli-bridge/blob/main/docs/code-review.md) for what was fixed and what remains. This is an experimental, unaudited fork.
@@ -159,7 +159,7 @@ OPENCODE_PI_INTEGRATION_BIN="$(which opencode)" npm run test:integration
 npm pack --dry-run
 ```
 
-`npm test` uses a fake OpenCode executable. `npm run test:integration` needs the real OpenCode CLI at version 1.19.0 or 2.2.5 (on `PATH` or in `OPENCODE_PI_INTEGRATION_BIN`), runs it with isolated home and data directories against a local model fixture, and makes no network request. Neither suite needs API credentials. Development SDKs are pinned; Pi supplies those packages at runtime. The npm archive includes the extension source, README, security policy and license, not tests or installed dependencies.
+`npm test` uses a fake OpenCode executable. `npm run test:integration` needs the real OpenCode CLI at version 1.19.0 or 2.2.6 (on `PATH` or in `OPENCODE_PI_INTEGRATION_BIN`), runs it with isolated home and data directories against a local model fixture, and makes no network request. Neither suite needs API credentials. Development SDKs are pinned; Pi supplies those packages at runtime. The npm archive includes the extension source, README, security policy and license, not tests or installed dependencies.
 
 ## License
 

package/SECURITY.md

@@ -10,7 +10,7 @@ Never include prompts, conversation history, images, API keys, auth files or ses
 - Requests are delegated to the real OpenCode CLI. The extension does not directly read credentials, but the subprocess inherits the environment and uses OpenCode's own configuration and authentication.
 - System instructions, tool declarations, transcript text and image attachments can reach the selected model provider. Provider retention and training policies apply.
 - The current Pi tool list is checked before marker responses become Pi tool calls. Pi remains responsible for argument validation and tool permission checks.
-- Native OpenCode tools are guarded by an agent permission of `ask` for everything, which non-interactive `opencode run` rejects. On 1.19.0 a generated `tool.execute.before` plugin provides a second guard; on 2.2.5 the bridge relies on permissions, not that legacy plugin. Native declarations remain visible to the model. Real-CLI integration tests on both releases request `write` and `bash`/`shell` side effects and verify that neither executes with the legacy plugin intact, missing, or failing. These guards are not a security boundary against a hostile local process, your own OpenCode configuration (it is loaded and may add tools or agent overrides), or other OpenCode versions.
+- Native OpenCode tools are guarded by an agent permission of `ask` for everything, which non-interactive `opencode run` rejects. On 1.19.0 a generated `tool.execute.before` plugin provides a second guard; on 2.2.6 the bridge relies on permissions, not that legacy plugin. Native declarations remain visible to the model. Real-CLI integration tests on both releases request `write` and `bash`/`shell` side effects and verify that neither executes with the legacy plugin intact, missing, or failing. These guards are not a security boundary against a hostile local process, your own OpenCode configuration (it is loaded and may add tools or agent overrides), or other OpenCode versions.
 - Temporary project directories and OpenCode session records are removed best-effort. Pi's own conversation history is not deleted by the extension.
 
 ## Known gaps

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-opencode-cli-bridge",
-  "version": "0.2.16",
+  "version": "0.2.18",
   "description": "Bridge the OpenCode CLI into Pi Coding Agent",
   "type": "module",
   "main": "./src/index.ts",

package/src/cli.ts

@@ -55,7 +55,7 @@ export function runCapture(
 /** Build the install/setup instructions shown when the opencode CLI is unusable. */
 export function setupGuidance(error: string): string {
   return [
-    "opencode-pi could not use the local OpenCode CLI.",
+    "pi-opencode-cli-bridge could not use the local OpenCode CLI.",
     `Reason: ${error}`,
     "Install OpenCode (https://opencode.ai), ensure `opencode --version` works on PATH, then reload Pi.",
     "Set OPENCODE_PI_BIN to override the executable path.",

package/src/index.ts

@@ -9,7 +9,7 @@ import type { OpenCodeModelInfo } from "./types/models.js";
 
 const PROVIDER_ID = "opencode-cli";
 const API_ID = "opencode-cli-runner";
-const MAX_SUPPORTED_OPENCODE_VERSION = "2.2.5";
+const MAX_SUPPORTED_OPENCODE_VERSION = "2.2.6";
 let registeredModels: OpenCodeModelInfo[] = [];
 let lastDiscoveryTime: number | undefined;
 let lastDiscoveryError: string | undefined;
@@ -45,7 +45,7 @@ async function refreshModels(
 
   const newModels = models.filter((model) => !previousModels.has(model.id));
 
-  let msg = `opencode-pi: refreshed ${models.length} model(s).`;
+  let msg = `pi-opencode-cli-bridge: refreshed ${models.length} model(s).`;
   if (newModels.length > 0) {
     msg += ` ${newModels.length} new: ${newModels
       .slice(0, 5)
@@ -77,7 +77,7 @@ function statusLines(): string[] {
   const lines = [
     `Provider: ${PROVIDER_ID}`,
     `OpenCode binary: ${opencodeBin()}`,
-    `OpenCode installed: ${existsSync(opencodeBin()) || opencodeBin() === "opencode" ? "check PATH with /opencode-pi test" : "no"}`,
+    `OpenCode installed: ${existsSync(opencodeBin()) || opencodeBin() === "opencode" ? "check PATH with /pi-opencode-cli-bridge test" : "no"}`,
     `Registered models: ${registeredModels.length}`,
     `Last discovery: ${lastDiscoveryTime ? new Date(lastDiscoveryTime).toLocaleString() : "never"}`,
   ];
@@ -101,7 +101,7 @@ function statusLines(): string[] {
     "OpenCode tools are disabled; Pi tool use is bridged with prompt-level tool-call markers.",
   );
   lines.push(
-    "Run /opencode-pi update to refresh the model list from opencode.",
+    "Run /pi-opencode-cli-bridge update to refresh the model list from opencode.",
   );
   return lines;
 }
@@ -146,31 +146,31 @@ export default async function opencodePiExtension(pi: ExtensionAPI) {
         ? "OPENCODE_PI_MODELS skipped discovery, so this was not detected at startup. "
         : "";
       ctx.ui.notify(
-        `opencode-pi: ${fastPathNote}${setupGuidance(cliStatus.detail ?? cliStatus.summary)}`,
+        `pi-opencode-cli-bridge: ${fastPathNote}${setupGuidance(cliStatus.detail ?? cliStatus.summary)}`,
         "warning",
       );
       return;
     }
     ctx.ui.notify(
-      `opencode-pi: registered ${registeredModels.length} OpenCode CLI model(s). Use /model and pick ${PROVIDER_ID}.`,
+      `pi-opencode-cli-bridge: registered ${registeredModels.length} OpenCode CLI model(s). Use /model and pick ${PROVIDER_ID}.`,
       "info",
     );
     const version = /\d+\.\d+\.\d+/.exec(cliStatus.summary)?.[0];
     if (!version || version.localeCompare(MAX_SUPPORTED_OPENCODE_VERSION, undefined, { numeric: true }) > 0) {
       ctx.ui.notify(
-        `opencode-pi: detected OpenCode ${version ?? cliStatus.summary}. This bridge supports OpenCode up to ${MAX_SUPPORTED_OPENCODE_VERSION}. Please install a supported version.`,
+        `pi-opencode-cli-bridge: detected OpenCode ${version ?? cliStatus.summary}. This bridge supports OpenCode up to ${MAX_SUPPORTED_OPENCODE_VERSION}. Please install a supported version.`,
         "warning",
       );
     }
     if (lastDiscoveryError) {
       ctx.ui.notify(
-        `opencode-pi: model discovery used fallback (${lastDiscoveryError})`,
+        `pi-opencode-cli-bridge: model discovery used fallback (${lastDiscoveryError})`,
         "warning",
       );
     }
   });
 
-  pi.registerCommand("opencode-pi", {
+  pi.registerCommand("pi-opencode-cli-bridge", {
     description: "OpenCode CLI bridge status and setup help",
     handler: async (args: string, ctx: any) => {
       const sub = args.trim().split(/\s+/).filter(Boolean)[0] ?? "status";
@@ -205,7 +205,7 @@ export default async function opencodePiExtension(pi: ExtensionAPI) {
       }
       if (sub === "help") {
         ctx.ui.notify(
-          "Usage: /opencode-pi [status|models|test|update|help]",
+          "Usage: /pi-opencode-cli-bridge [status|models|test|update|help]",
           "info",
         );
         ctx.ui.notify(
@@ -219,7 +219,7 @@ export default async function opencodePiExtension(pi: ExtensionAPI) {
         return;
       }
       ctx.ui.notify(
-        `Unknown /opencode-pi subcommand: ${sub}. Try /opencode-pi help`,
+        `Unknown /pi-opencode-cli-bridge subcommand: ${sub}. Try /pi-opencode-cli-bridge help`,
         "warning",
       );
     },

package/src/models.ts

@@ -299,7 +299,7 @@ export async function discoverModels(opts?: {
   // models to register, so the fast (non-forced) path skips spawning
   // opencode entirely rather than making explicitly configured users pay a
   // discovery timeout on every startup when the binary is missing or slow.
-  // `forceDiscovery` (used by the user-initiated /opencode-pi update
+  // `forceDiscovery` (used by the user-initiated /pi-opencode-cli-bridge update
   // command) still runs discovery so configured models can be enriched with
   // real capability metadata (reasoning/image/limits) on request.
   if (configured?.length && !opts?.forceDiscovery) {

package/src/sessions.ts

@@ -136,7 +136,7 @@ export function continuationDelta(
 }
 
 export async function createTempAgentDir(): Promise<string> {
-  const dir = await mkdtemp(join(tmpdir(), "opencode-pi-"));
+  const dir = await mkdtemp(join(tmpdir(), "pi-opencode-cli-bridge-"));
   const configDir = join(dir, ".opencode");
   const agentsDir = join(configDir, "agents");
   const pluginsDir = join(configDir, "plugins");