opencode-talk-bridge 0.2.7__tar.gz

opencode_talk_bridge-0.2.7/.env.example

@@ -0,0 +1,79 @@
+# opencode-talk-bridge configuration.
+# Copy to `.env` and fill in. NEVER commit the real `.env`.
+
+# --- Nextcloud Talk (consumed by nextcloud-talk-core) ----------------------
+# Base URL of your Nextcloud instance.
+NC_URL=https://cloud.example.com
+# Your Nextcloud username (the bot/control account).
+NC_USER=your-username
+# An APP PASSWORD (Settings -> Security -> App passwords), NOT your login password.
+NC_APP_PASSWORD=xxxxx-xxxxx-xxxxx-xxxxx-xxxxx
+
+# --- Which conversations to watch ------------------------------------------
+# Comma-separated Talk conversation tokens, or "all" to watch every conversation
+# the account participates in. A single dedicated control conversation is the
+# recommended setup.
+TALK_CONVERSATIONS=abcdef12
+
+# --- Security: command allowlist (MANDATORY) -------------------------------
+# Comma-separated Talk user IDs (the stable login id, e.g. "jdoe", NOT the
+# display name) allowed to issue commands. Messages from anyone else are
+# ignored. The bridge REFUSES TO START if this is empty.
+ALLOWED_USERS=jdoe
+
+# --- OpenCode server -------------------------------------------------------
+# Base URL of a running `opencode serve` (or `opencode web`). Default 4096.
+OPENCODE_URL=http://127.0.0.1:4096
+# Optional HTTP Basic-Auth for the OpenCode server. Leave blank if unsecured.
+# (`opencode serve`/`web` reads OPENCODE_SERVER_USERNAME/PASSWORD on its side.)
+OPENCODE_USERNAME=
+OPENCODE_PASSWORD=
+# Workspace directory OpenCode sessions operate in. Defaults to the bridge CWD.
+OPENCODE_DIRECTORY=
+# Optional default model as "providerID/modelID" (e.g. anthropic/claude-sonnet-4-6).
+# Leave blank to use the OpenCode server's configured default.
+OPENCODE_MODEL=
+
+# --- Local storage & interface ---------------------------------------------
+# SQLite file mapping Talk conversations to OpenCode sessions.
+DB_PATH=bridge.sqlite3
+# JSON status file the menubar app polls.
+STATUS_FILE=status.json
+# WebDAV folder (relative to your Nextcloud user root) the bridge uploads code /
+# long-output attachments into before sharing them, e.g. "/opencode-talk-bridge".
+# The folder is created on demand. Leave blank to disable attachments (long
+# output is then posted as text). No desktop sync client required.
+SHARE_WEBDAV_DIR=
+
+# --- Interaction / streaming ------------------------------------------------
+# Stream the assistant reply by editing one Talk message as it is generated.
+RESPONSE_STREAMING=true
+# Minimum delay between streamed edits (ms). Each edit is a full REST call.
+STREAM_THROTTLE_MS=1500
+# Post "💻 tool" / "💭 thinking" service messages while the agent works.
+HIDE_TOOL_MESSAGES=false
+HIDE_THINKING=true
+# Notify on activity of detached/non-current sessions.
+TRACK_BACKGROUND_SESSIONS=true
+# Max entries shown in pickers (/sessions, /model, …).
+LIST_LIMIT=10
+# UI language for bridge messages: de or en.
+BOT_LOCALE=de
+
+# --- Voice (optional, Phase 3) ----------------------------------------------
+# Speech-to-text for incoming voice notes (Whisper-compatible endpoint).
+STT_API_URL=
+STT_API_KEY=
+STT_MODEL=whisper-large-v3-turbo
+STT_LANGUAGE=
+# Text-to-speech for spoken replies (per-conversation /tts toggle).
+# Requires SHARE_WEBDAV_DIR to upload the audio before sharing.
+TTS_API_URL=
+TTS_API_KEY=
+TTS_MODEL=gpt-4o-mini-tts
+TTS_VOICE=alloy
+# Max concurrent scheduled tasks (/task).
+TASK_LIMIT=10
+
+# --- Logging ----------------------------------------------------------------
+LOG_LEVEL=INFO

opencode_talk_bridge-0.2.7/.github/workflows/ci.yml

@@ -0,0 +1,37 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev]"   # nextcloud-talk-core comes from PyPI
+
+      - name: Ruff lint
+        run: ruff check src tests
+
+      - name: Ruff format check
+        run: ruff format --check src tests
+
+      - name: Pytest
+        run: pytest

opencode_talk_bridge-0.2.7/.github/workflows/publish.yml

@@ -0,0 +1,61 @@
+name: Publish to PyPI
+
+# Publishes the package to PyPI on every version tag (vX.Y.Z), using PyPI
+# Trusted Publishing (OIDC) — no API token is stored in the repo.
+#
+# One-time PyPI setup (see docs/publishing.md): add a Trusted Publisher for the
+# project pointing at this repo, workflow `publish.yml`, and environment `pypi`.
+
+on:
+  push:
+    tags: ["v*"]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Guard — tag must match the package version
+        run: |
+          TAG="${GITHUB_REF_NAME#v}"
+          PKG="$(python -c 'import tomllib;print(tomllib.load(open("pyproject.toml","rb"))["project"]["version"])')"
+          echo "tag=$TAG  pyproject=$PKG"
+          test "$TAG" = "$PKG" || { echo "::error::tag v$TAG != pyproject version $PKG"; exit 1; }
+
+      - name: Build sdist + wheel
+        run: |
+          python -m pip install --upgrade build
+          python -m build
+
+      - name: Check metadata
+        run: |
+          python -m pip install --upgrade twine
+          python -m twine check dist/*
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write # required for Trusted Publishing (OIDC)
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

opencode_talk_bridge-0.2.7/.gitignore

@@ -0,0 +1,35 @@
+# Secrets — never commit a real environment file.
+.env
+
+# Runtime artifacts
+*.sqlite
+*.sqlite3
+*.db
+status.json
+*.log
+
+# Python
+__pycache__/
+*.py[cod]
+.venv/
+venv/
+*.egg-info/
+build/
+dist/
+.eggs/
+
+# Tooling caches
+.pytest_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+.coverage.*
+
+# macOS
+.DS_Store
+
+# Local editor / agent settings
+.claude/
+
+# Internal design brief — not published
+BRIEFING-bridge.md

opencode_talk_bridge-0.2.7/CHANGELOG.md

@@ -0,0 +1,176 @@
+# Changelog
+
+All notable changes to this project are documented here. The format is based on
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
+adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.2.7] - 2026-06-01
+
+First release published to **PyPI** — `uv tool install opencode-talk-bridge`
+(or `pipx install …`) now works without a git URL.
+
+### Added
+- PyPI Trusted-Publishing workflow (`.github/workflows/publish.yml`): on each
+  `vX.Y.Z` tag it guards the tag↔version match, builds, `twine check`s, and
+  publishes to PyPI via OIDC (no token). Package classifiers + a
+  `docs/publishing.md` setup guide.
+
+## [0.2.6] - 2026-06-01
+
+### Changed
+- `nextcloud-talk-core` is now a normal **PyPI dependency** (`>=1.0.2,<2`)
+  instead of a pinned git URL — it has been published to PyPI. Simpler installs
+  and resolution; dropped `allow-direct-references` and the git-dep notes in the
+  README/CI. Verified our used API (TalkClient/OCSClient methods) is unchanged in
+  1.0.2 and the full suite passes against it.
+
+## [0.2.5] - 2026-06-01
+
+### Fixed
+- **No server text leaks into chat.** The prompt worker caught generic
+  exceptions and posted `Fehler: {exc}`; an `OpenCodeError` carries up to ~300
+  chars of the OpenCode HTTP response body, which could reach Talk. The worker
+  (both session-setup and prompt paths) now catches `OpenCodeError` and posts a
+  generic `oc_error` message, logging the details only — matching the command
+  handlers. Remaining `error: {exc}` paths only fire for local validation errors
+  (e.g. a bad model string), which carry no server body.
+
+## [0.2.4] - 2026-05-31
+
+Hardening pass from a code review.
+
+### Fixed
+- **Error isolation.** Command handlers run inline on the poll thread and only
+  caught `OpenCodeDownError`; an OpenCode HTTP 4xx/5xx (`OpenCodeError`) could
+  escape and kill a conversation's poll thread. The poll loop now isolates every
+  message (logs + notifies + keeps polling), and command dispatch catches
+  `OpenCodeError` with a clean message.
+- **`/task` validation.** Reject `0`-minute schedules and empty prompts
+  (`minutes >= 1` and a non-empty prompt are now required).
+
+### Internal
+- Added tests for `__main__` (CLI wiring: `--check`/`--init`/run, 0→90%) and the
+  Talk gateway / message parsing (57→95%); overall coverage 76→82%.
+
+## [0.2.3] - 2026-05-31
+
+### Fixed
+- `/sessions`, `/commands`, and `/skills` are **project-scoped** in OpenCode, but
+  the bridge listed them against the global `OPENCODE_DIRECTORY` and ignored the
+  per-conversation project chosen via `/projects`. They now use the
+  conversation's directory, so `/sessions` shows the same sessions as the
+  OpenCode desktop/TUI for that project (and follows `/projects` switches).
+  `/projects` itself is global (all known projects), matching desktop.
+
+## [0.2.2] - 2026-05-31
+
+### Added
+- `opencode-talk-bridge --init` — interactive `.env` wizard. Prompts for the
+  essentials (Talk credentials, allowlist, OpenCode URL), hides the app password,
+  refuses to overwrite without confirmation, and writes the file `chmod 600`.
+
+## [0.2.1] - 2026-05-31
+
+### Added
+- `/skills` — browse & run OpenCode skills (via `GET /skill`).
+
+### Fixed
+- `run_command` now always sends the required `arguments` field — without it the
+  command endpoint returned HTTP 400, so `/commands` (and any command run) was
+  broken.
+- `/commands` no longer lists skills (entries with `source == "skill"`); those
+  live under `/skills`.
+
+## [0.2.0] - 2026-05-31
+
+Feature-parity push toward `grinev/opencode-telegram-bot`, adapted to Talk.
+
+### Added
+- **Live response streaming**: the assistant reply is streamed into a single
+  Talk message via editing (`PUT`, throttled by `STREAM_THROTTLE_MS`), instead
+  of one post at the end. Toggle with `RESPONSE_STREAMING`.
+- **Tool & thinking notices** from the SSE stream (`💻 bash`, `💭 …`), each tool
+  announced once per turn; toggle with `HIDE_TOOL_MESSAGES` / `HIDE_THINKING`.
+- **Agent questions** (`question.asked`) are surfaced into Talk and answered by
+  a numbered option or free text.
+- **Numbered-text pickers** (Talk has no buttons): `/sessions` (switch),
+  `/model` (pick), `/agent` (pick plan/build/…); `/agent <name>` sets directly.
+- OpenCode client wrappers for sessions (rename/revert/unrevert/fork), projects,
+  worktrees, models, agents, commands, MCP, and question reply/reject.
+
+- **Breadth commands** (Phase 2): `/rename`, `/detach`, `/projects`,
+  `/worktree`, `/commands` (run with streaming), `/mcps` (toggle), and
+  `/messages` → revert/fork. Projects/worktrees bind a per-conversation
+  directory for new sessions.
+- **Background-session notifications** when a non-foreground session goes idle
+  (`TRACK_BACKGROUND_SESSIONS`).
+- **i18n**: user-facing strings localised via `messages.py` (German + English),
+  selected by `BOT_LOCALE`.
+- **Voice & files** (Phase 3): incoming file/image attachments are inlined into
+  the prompt as OpenCode file parts; voice notes are transcribed (STT,
+  Whisper-compatible) into the prompt; optional spoken replies (TTS) shared as
+  audio, toggled per-conversation with `/tts`. Config: `STT_*`, `TTS_*`.
+- **Scheduled tasks** (Phase 3): `/task <min> <prompt>` (or `/task every <min>
+  …`) and `/tasklist`; a daemon scheduler fires due tasks, persisted in SQLite.
+
+### Changed
+- Internal refactor: unified pending-interaction registry (`pending.py`),
+  streaming substrate (`streaming.py`), and typed SSE dispatch (`events.py`).
+- `TalkGateway.send` now returns the message id; added `edit`/`download`.
+
+## [0.1.1] - 2026-05-30
+
+### Changed
+- File attachments now upload to Nextcloud directly via **WebDAV** (`PUT`,
+  creating the target folder on demand) before sharing into the conversation.
+  This removes the previous dependency on a desktop sync client having already
+  uploaded the file, which could make `share_file` fail with "not found".
+- Attachment config simplified to a single `SHARE_WEBDAV_DIR` (the server-side
+  folder), replacing `SHARE_DIR` + `SHARE_WEBDAV_ROOT`.
+
+### Added
+- `webdav.py`: minimal WebDAV client (reuses the app-password credentials).
+
+## [0.1.0] - 2026-05-30
+
+Initial release.
+
+### Added
+- Polling bridge between Nextcloud Talk and a local OpenCode instance — no
+  webhooks, works on institutional Talk instances without admin access.
+- OpenCode HTTP + SSE client (`opencode.py`), verified against the
+  `opencode serve` 1.15 OpenAPI: health, session create/list, blocking prompt,
+  abort, global permission reply, and the `/global/event` stream.
+- Mandatory user allowlist enforced on the stable OCS `actorId` with
+  `actorType == "users"`; the bridge refuses to start with an empty allowlist.
+- Permission prompts for dangerous agent actions surfaced into Talk, answered
+  with `ja`/`immer`/`nein` and replied via `POST /permission/{id}/reply`.
+- SQLite session store mapping each Talk conversation to an OpenCode session,
+  model, and last-known-message cursor; persists across restarts.
+- Slash-commands: `/new`, `/session`, `/model`, `/stop`, `/status`, `/help`.
+- File attachments for long output / code, written to a Nextcloud share folder
+  and shared into the conversation instead of posting a large text block.
+- Atomic JSON status file as a stable contract for a supervising menubar app.
+- CLI entrypoint with `--check` and graceful SIGINT/SIGTERM shutdown.
+- launchd user-agent example (`deploy/`), README threat model, and the
+  `.env.example` template.
+- Test suite (mocked Talk + OpenCode, no live calls) and CI matrix on
+  Python 3.10–3.13 with ruff lint + format checks.
+
+### Dependencies
+- `nextcloud-talk-core`, pinned to the `core-v1.0.0` git tag.
+- `httpx >= 0.27`.
+
+[Unreleased]: https://github.com/leiverkus/opencode-talk-bridge/compare/v0.2.7...HEAD
+[0.2.7]: https://github.com/leiverkus/opencode-talk-bridge/compare/v0.2.6...v0.2.7
+[0.2.6]: https://github.com/leiverkus/opencode-talk-bridge/compare/v0.2.5...v0.2.6
+[0.2.5]: https://github.com/leiverkus/opencode-talk-bridge/compare/v0.2.4...v0.2.5
+[0.2.4]: https://github.com/leiverkus/opencode-talk-bridge/compare/v0.2.3...v0.2.4
+[0.2.3]: https://github.com/leiverkus/opencode-talk-bridge/compare/v0.2.2...v0.2.3
+[0.2.2]: https://github.com/leiverkus/opencode-talk-bridge/compare/v0.2.1...v0.2.2
+[0.2.1]: https://github.com/leiverkus/opencode-talk-bridge/compare/v0.2.0...v0.2.1
+[0.2.0]: https://github.com/leiverkus/opencode-talk-bridge/compare/v0.1.1...v0.2.0
+[0.1.1]: https://github.com/leiverkus/opencode-talk-bridge/compare/v0.1.0...v0.1.1
+[0.1.0]: https://github.com/leiverkus/opencode-talk-bridge/releases/tag/v0.1.0

opencode_talk_bridge-0.2.7/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Patrick Leiverkus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.