Dashboard › opencode › Session 0QFZoxrfG577
0QFZoxrfG577Lqh0aPerform a substantive independent read-only security review of the frozen OpenCode V2 pilot implementation. Do not edit files, start/stop services, install anything, or expose secrets. Review exact current files, not memory.
Repository: /home/byk/Code/opencode-v2-pilot Base HEAD: 2ac698d65aa4690a694307e9cbdf44537ea9a4fb Expected tracked binary diff SHA-256: e3d14c2a661025b56eb941304df6c5d217d0dd95c8d01497e78011d3e990a34a Tracked modified files exactly:
External pilot files/hashes:
Chosen trust model is deliberate: match current production. OpenCode, PTYs, and child commands run unprivileged as account byk, under systemd User=byk and NoNewPrivileges=yes. There is no root helper/supervisor/readiness marker. Dormant source under /home/byk/.local/share/opencode-v2-pilot/supervisor is excluded ...
<path>/home/byk/Code/opencode-v2-pilot</path> <type>directory</type> <entries> .changeset/ .dockerignore .editorconfig .git .gitattributes .github/ .gitignore .gitleaksignore .husky/ .opencode/ .oxlintrc.json .prettierignore .vscode/ .zed/ AGENTS.md artifacts/ bun.lock bunfig.toml CONTRIBUTING.md flake.lock flake.nix github/ infra/ install LICENSE nix/ node_modules/ package.json packages/ patches/ perf/ README.ar.md README.bn.md README.br.md README.bs.md README.da.md README.de.md README.es.md README.fr.md README.gr.md README.it.md README.ja.md README.ko.md README.md README.no.md README.pl.md README.ru.md README.th.md README.tr.md README.uk.md README.vi.md README.zh.md README.zht.md screenshot-uk.png script/ sdks/ SECURITY.md services/ specs/ sst-env.d.ts sst.config.ts STATS.md tsconfig.json turbo.json (64 entries) </entries>
<path>/home/byk/Code/opencode-v2-pilot/AGENTS.md</path> <type>file</type> <content> 1: - After changing the public Protocol or Server `HttpApi`, run `bun run generate` from `packages/client`. Do not edit generated client files directly. 2: - Keep runtime dependencies directed from Schema to Core and Protocol, then from Core and Protocol to Server. Client runtime code may depend on Schema and Protocol but never Core or Server; `sdk` composes Client, Core, and Server. 3: - Current implementation changes belong in `packages/core`, `packages/cli`, `packages/server`, `packages/protocol`, `packages/schema`, and related generated client surfaces when required. 4: - This repository does not use Changesets. Do not add `.changeset` files; follow the existing release workflow instead. 5: - The default branch in this repo is `v2`. 6: - Default new branches and worktrees to `v2`, or `origin/v2` when the local `v2` ref is unavailable, and default pull requests to target `v2`. ...
I’ll first freeze the review inputs: repository HEAD, tracked diff hash and file set, external file hashes, and final SEA hash. I’ll then trace authorization and PTY lifecycle paths, audit active config/service/cutover files, and run only package-scoped read-only validation.
2ac698d65aa4690a694307e9cbdf44537ea9a4fb M packages/core/src/plugin/host.ts M packages/core/test/plugin.test.ts M packages/core/test/plugin/fixture.ts M packages/core/test/plugin/host.ts M packages/plugin/src/effect/permission.ts M packages/plugin/src/promise/adapter.ts M packages/plugin/src/promise/permission.ts ?? packages/cli/dist-v2-pilot-byk/cli-node-linux-x64/bin/opencode2-node ?? packages/cli/dist-v2-pilot-byk/cli-node-linux-x64/package.json ?? packages/cli/dist-v2-pilot-final/cli-node-linux-x64/bin/opencode2-node ?? packages/cli/dist-v2-pilot-final/cli-node-linux-x64/package.json ?? packages/cli/dist-v2-pilot-next/cli-node-linux-x64/bin/opencode2-node ?? packages/cli/dist-v2-pilot-next/cli-node-linux-x64/package.json ?? packages/cli/dist-v2-pilot/cli-node-linux-x64/bin/opencode2-node ?? packages/cli/dist-v2-pilot/cli-node-linux-x64/package.json e3d14c2a661025b56eb941304df6c5d217d0dd95c8d01497e78011d3e990a34a ...
<path>/home/byk/.local/share/opencode-v2-pilot</path> <type>directory</type> <entries> cache/ config/ CUTOVER.md data/ opencode-v2.service state/ supervisor/ (7 entries) </entries>
<path>/home/byk/.local/share/opencode-v2-pilot/config</path> <type>directory</type> <entries> opencode/ (1 entries) </entries>
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode</path> <type>directory</type> <entries> bun.lock node_modules/ opencode.json package.json plugins/ service-v2-pilot.json test/ tsconfig.json types/ (9 entries) </entries>
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode/plugins</path> <type>directory</type> <entries> followup.ts pty.ts (2 entries) </entries>
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode/test</path> <type>directory</type> <entries> followup.test.ts pty.test.ts (2 entries) </entries>
8d51037989aa2cbfa10de82b56ef9512218a07544a5308a74890d59252f43bad config/opencode/plugins/followup.ts b90315811f1ff67cd93d48676dda2fa02d9be0694bf154a049c8746a8ed11aa5 config/opencode/plugins/pty.ts 507a152473809a95363a3758ab39fb6e8f5c82f32c23a9f11d7655607951f7ec config/opencode/test/followup.test.ts c2bed5de452d64198e20cb4255e276e7b37be4b9fd60ee0f4bd98ccac14288b3 config/opencode/test/pty.test.ts 571a0730c86bde522edf63516b7fa69cb9cbf2ff8730e15e2a8ce064c33ad905 config/opencode/opencode.json 0dbe0518ab13584c3a4ae465fb552d79572460766910ff9f7ea4271280d66bb0 config/opencode/service-v2-pilot.json 38fc8a7f4b25acf611557c32380365f3f7d0422f8a31d0f5eb7ffba48e916045 opencode-v2.service 31ce6b09b9448660dfed2ebd9f4a44e6e033cc0753ef978253db02884fc68b2b CUTOVER.md c67985bbc31f99e040ed58abf2aa37fc7c9a197a46c269eafaec468d99658937 /home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot-byk/cli-node-linux-x64/bin/opencode2-node
diff --git a/packages/core/src/plugin/host.ts b/packages/core/src/plugin/host.ts
index 44beadcc6c..6abb955508 100644
--- a/packages/core/src/plugin/host.ts
+++ b/packages/core/src/plugin/host.ts
@@ -383,6 +383,7 @@ export const make = Effect.fn("PluginHost.make")(function* (
},
permission: {
hook: (name, callback) => hooks.register("permission", name, callback),
+ assert: permission.assert,
list: (input) => permission.forSession(input.sessionID),
get: (input) =>
permission
diff --git a/packages/core/test/plugin.test.ts b/packages/core/test/plugin.test.ts
index 1b71e18978..18a6966a62 100644
--- a/packages/core/test/plugin.test.ts
+++ b/packages/core/test/plugin.test.ts
@@ -1,20 +1,33 @@
import { expect } from "bun:test"
import path from "path"
-import { Clock, Deferred, Effect } from "effect"
+import { Cause, Clock, Deferred, Effect, Exit, Schema } from "effect"
import { TestClock } from "effect/testing"
+import { Agent } from ...
/home/byk/Code/opencode-v2-pilot/packages/core/src/permission/sql.ts /home/byk/Code/opencode-v2-pilot/packages/core/src/permission/saved.ts
/home/byk/Code/opencode-v2-pilot/packages/core/src/permission.ts
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/permission.ts</path>
<type>file</type>
<content>
1: export * as Permission from "./permission.js"
2:
3: import { makeLocationNode } from "@opencode/util/effect/app-node"
4: import { Context, Deferred, Effect, Layer, Schema } from "effect"
5: import { Permission } from "@opencode/schema/permission"
6: import { Bus } from "./bus.js"
7: import { Location } from "./location.js"
8: import { Agent } from "./agent.js"
9: import { SessionErrors } from "./session/error.js"
10: import { SessionSchema } from "./session/schema.js"
11: import { SessionStore } from "./session/store.js"
12: import { Wildcard } from "./util/wildcard.js"
13: import { PermissionSaved } from "./permission/saved.js"
14: import { PluginHooks } from "./plugin/hooks.js"
15:
16: const PermissionEffect = Permission.Effect
17: export { PermissionEffect as Effect }
18: export { Rule, Ruleset } from "@opencode/schema/permission"
19: const missingAgentPermissions: ...
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode/plugins/pty.ts</path>
<type>file</type>
<content>
1: import { Plugin } from "@opencode/plugin"
2: import type { Context } from "@opencode/plugin/plugin"
3: import type { ToolContext } from "@opencode/plugin/tool"
4: import { Schema } from "effect"
5: import { spawn } from "node:child_process"
6: import { open, realpath } from "node:fs/promises"
7: import type { FileHandle } from "node:fs/promises"
8: import { constants } from "node:fs"
9: import { Readable } from "node:stream"
10: import { StringDecoder } from "node:string_decoder"
11:
12: type PtyPluginOptions = {
13: openProcess?: typeof openPtyProcess
14: spawnTimeoutMs?: number
15: }
16:
17: const MAX_SESSIONS = 16
18: const MAX_SESSIONS_PER_OWNER = 5
19: const DEFAULT_READ_LIMIT = 500
20: const MAX_READ_LIMIT = 2_000
21: const MAX_READ_OFFSET = 10_000
22: const MAX_LINE_LENGTH = 2_000
23: const MAX_PATTERN_LENGTH = 500
24: const MAX_WRITE_SIZE = 65_536
25: const ...
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode/test/pty.test.ts</path>
<type>file</type>
<content>
1: import { afterEach, describe, expect, setDefaultTimeout, test } from "bun:test"
2: import { createPtyPlugin } from "../plugins/pty.ts"
3:
4: const cleanups: Array<() => Promise<void> | void> = []
5: setDefaultTimeout(15_000)
6:
7: afterEach(async () => {
8: await Promise.allSettled(cleanups.splice(0).map((cleanup) => cleanup()))
9: })
10:
11: describe("pty", () => {
12: test("registers the five direct PTY tools in order", async () => {
13: const harness = await setup()
14: expect(harness.toolNames).toEqual(["pty_spawn", "pty_write", "pty_read", "pty_list", "pty_kill"])
15: })
16:
17: test("bounds a stalled PTY startup", async () => {
18: const harness = await setup({
19: openProcess: async () => {
20: await Bun.sleep(100)
21: throw new Error("fixture startup remained pending")
22: },
23: spawnTimeoutMs: 20,
24: })
25: const started = ...
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode/plugins/followup.ts</path>
<type>file</type>
<content>
1: import { Plugin } from "@opencode/plugin"
2: import { Schema } from "effect"
3:
4: const SUBAGENT_REFUSAL =
5: "Error: scheduled follow-ups are disabled in subagents. A subagent must finish its task and return a result synchronously."
6:
7: const DelayInput = Schema.Struct({
8: delay: Schema.String.annotate({
9: description: "How long to wait, such as 30s, 2m, or 1h. A bare number means seconds.",
10: }),
11: message: Schema.String.annotate({
12: description: "The instruction to deliver when the delay expires.",
13: }),
14: })
15:
16: const EmptyInput = Schema.Struct({})
17:
18: const CancelInput = Schema.Struct({
19: id: Schema.String.annotate({ description: "The follow-up ID to cancel, or all." }),
20: })
21:
22: export default Plugin.define({
23: id: "followup",
24: async setup(ctx) {
25: const pending = new Map<
26: string,
27: ...
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode/test/followup.test.ts</path>
<type>file</type>
<content>
1: import { describe, expect, test } from "bun:test"
2: import followup from "../plugins/followup.ts"
3:
4: describe("followup", () => {
5: test("schedules, lists, cancels, delivers, and rejects subagents", async () => {
6: const tools = new Map<string, Tool>()
7: const prompts: Array<{ sessionID: string; text: string; delivery?: string }> = []
8: const controller = new AbortController()
9: const context = {
10: session: {
11: get: async ({ sessionID }: { sessionID: string }) =>
12: sessionID === "subagent" ? { id: sessionID, parentID: "parent" } : { id: sessionID },
13: prompt: async (input: { sessionID: string; text: string; delivery?: string }) => {
14: prompts.push(input)
15: return {}
16: },
17: },
18: tool: {
19: transform: async (callback: (editor: { add(tool: Tool): void }) => void) => {
20: callback({ ...
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode/opencode.json</path>
<type>file</type>
<content>
1: {
2: "$schema": "https://opencode.ai/config.json"
3: }
(End of file - total 3 lines)
</content>
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode/service-v2-pilot.json</path>
<type>file</type>
<content>
1: {
2: "hostname": "127.0.0.1",
3: "port": 14104,
4: "password": "0ZEDypl6r2V8gYMw+bfbOvabqO7NvvaG6+m/NvAHxJg="
5: }
(End of file - total 5 lines)
</content>
<path>/home/byk/.local/share/opencode-v2-pilot/opencode-v2.service</path> <type>file</type> <content> 1: [Unit] 2: Description=OpenCode V2 Server 3: After=network.target 4: 5: [Service] 6: Type=simple 7: EnvironmentFile=/home/byk/.opencode/env 8: EnvironmentFile=/home/byk/.local/share/opencode-v2-pilot/server.env 9: Environment=OPENCODE_CONFIG_DIR=/home/byk/.local/share/opencode-v2-pilot/config/opencode 10: Environment=OPENCODE_DB=/home/byk/.local/share/opencode-v2-pilot/data/opencode/opencode.db 11: Environment=XDG_DATA_HOME=/home/byk/.local/share/opencode-v2-pilot/data 12: Environment=XDG_CACHE_HOME=/home/byk/.local/share/opencode-v2-pilot/cache 13: Environment=XDG_CONFIG_HOME=/home/byk/.local/share/opencode-v2-pilot/config 14: Environment=XDG_STATE_HOME=/home/byk/.local/share/opencode-v2-pilot/state 15: User=byk 16: WorkingDirectory=/home/byk 17: ExecStart=/home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot-byk/cli-node-linux-x64/bin/opencode2-node serve --hostname=0.0.0.0 ...
<path>/home/byk/.local/share/opencode-v2-pilot/CUTOVER.md</path> <type>file</type> <content> 1: # OpenCode V2 cutover 2: 3: The V2 executable serves the API and web UI from one origin. Do not add nginx. 4: 5: ## Preflight 6: 7: 1. Confirm production is still healthy on port 4096. 8: 2. Confirm the candidate revision and smoke build: 9: `git -C /home/byk/Code/opencode-v2-pilot rev-parse HEAD` 10: `/home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot-byk/cli-node-linux-x64/bin/opencode2-node --version` 11: 3. Confirm the isolated candidate on port 14104: 12: `curl --fail --user opencode:$OPENCODE_PASSWORD http://127.0.0.1:14104/api/health` 13: `curl --fail --user opencode:$OPENCODE_PASSWORD http://127.0.0.1:14104/ >/dev/null` 14: 4. Confirm both local plugins are active after calling `POST /api/plugin/await-activation`. 15: 5. Create `/home/byk/.local/share/opencode-v2-pilot/server.env` with mode `0600` and one line: `OPENCODE_PASSWORD=<password>`. 16: 6. ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/plugin/host.ts</path>
<type>file</type>
<content>
1: export * as PluginHost from "./host.js"
2:
3: import { Plugin } from "@opencode/plugin/effect"
4: import type { IntegrationMethodRegistration } from "@opencode/plugin/effect/integration"
5: import { EventManifest } from "@opencode/schema/event-manifest"
6: import type { Event } from "@opencode/schema/event"
7: import { ServerConfig } from "@opencode/schema/mcp"
8: import { App } from "../app.js"
9: import { Effect, Schema, Stream } from "effect"
10: import { Agent } from "../agent.js"
11: import { AISDK } from "../aisdk.js"
12: import { Catalog } from "../catalog.js"
13: import { Command } from "../command.js"
14: import { Credential } from "../credential.js"
15: import { Bus } from "../bus.js"
16: import { Integration } from "../integration.js"
17: import { KV } from "../kv.js"
18: import { Location } from "../location.js"
19: import { LocationServiceMap } from ...
<path>/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/adapter.ts</path>
<type>file</type>
<content>
1: import { Tool } from "@opencode/schema/tool"
2: import type { Rpc } from "@opencode/schema/rpc"
3: import type { RpcCallOptions, RpcEventPayload } from "@opencode/client/promise/api"
4: import { Effect, Schema, SchemaAST, Stream } from "effect"
5: import type { Scope } from "effect"
6: import { HttpApiEndpoint, HttpApiSchema } from "effect/unstable/httpapi"
7: import { define } from "../effect/plugin.js"
8: import type { Plugin } from "./plugin.js"
9: import type { Info } from "./tool.js"
10: import type { RpcDomain, RpcHandlers } from "./rpc.js"
11:
12: type HostRegistration = { readonly dispose: Effect.Effect<void> }
13: type Registration = { readonly dispose: () => Promise<void> }
14: type PromiseContext = Parameters<Plugin["setup"]>[0]
15: type PromiseEvent = ReturnType<PromiseContext["event"]["subscribe"]> extends AsyncIterable<infer Event> ? ...
<path>/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/adapter.ts</path>
<type>file</type>
<content>
218: export function fromPromise(plugin: Plugin) {
219: return define({
220: id: plugin.id,
221: effect: (host) =>
222: Effect.gen(function* () {
223: const [{ ClientApi }, { OpenCodeEvent }] = yield* Effect.promise(() =>
224: Promise.all([import("@opencode/protocol/client"), import("@opencode/protocol/groups/event")]),
225: )
226: const AgentEndpoints = ClientApi.groups["server.agent"].endpoints
227: const CommandEndpoints = ClientApi.groups["server.command"].endpoints
228: const ExperimentalEndpoints = ClientApi.groups["server.experimental"].endpoints
229: const GenerateEndpoints = ClientApi.groups["server.generate"].endpoints
230: const IntegrationEndpoints = ClientApi.groups["server.integration"].endpoints
231: const McpEndpoints = ClientApi.groups["server.mcp"].endpoints
232: ...
Found 44 matches
/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/adapter.ts:
Line 34: class TypedFailure {
Line 439: host.permission.assert(input).pipe(
Line 440: Effect.catch((error) => Effect.die(new TypedFailure(error))),
Line 622: error instanceof TypedFailure
/home/byk/Code/opencode-v2-pilot/packages/core/test/tool-shell.test.ts:
Line 330: (reason) => Cause.isDieReason(reason) && reason.defect instanceof Permission.DeclinedError,
Line 427: (reason) => Cause.isDieReason(reason) && reason.defect instanceof Permission.DeclinedError,
Line 508: (reason) => Cause.isDieReason(reason) && reason.defect instanceof Permission.DeclinedError,
/home/byk/Code/opencode-v2-pilot/packages/core/test/session-runner.test.ts:
Line 4459: execute: () => Effect.die(new Permission.DeclinedError()),
Line 4501: Effect.fail(new ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/session/model-request.ts</path>
<type>file</type>
<content>
1: export * as SessionModelRequest from "./model-request.js"
2:
3: import { HttpOptions, LanguageModel, LLM, LLMRequest, Message, SystemPart } from "@opencode/ai"
4: import type { StreamOptions } from "@opencode/ai/route"
5: import type { SessionRequestKind } from "@opencode/plugin/effect/session"
6: import type { Agent } from "@opencode/schema/agent"
7: import type { Model } from "@opencode/schema/model"
8: import type { Content } from "@opencode/schema/tool"
9: import { Cause, Config, Context, Effect, Layer, Result, Stream } from "effect"
10: import { HttpClientRequest, HttpClientResponse } from "effect/unstable/http"
11: import { makeLocationNode } from "@opencode/util/effect/app-node"
12: import { App } from "../app.js"
13: import { Permission } from "../permission.js"
14: import { PluginHooks } from "../plugin/hooks.js"
15: import { QuestionTool } from ...
Found 5 matches
/home/byk/Code/opencode-v2-pilot/packages/core/src/session/model-request.ts:
Line 40: const declineDefect = (cause: Cause.Cause<Tool.Error>) => {
Line 58: readonly executeTool: (
Line 388: const executeTool: Prepared["executeTool"] = (input) =>
Line 391: .pipe(Effect.catchCauseFilter(declineDefect, (decline) => Effect.fail(decline)))
Line 397: executeTool,
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/session/model-request.ts</path>
<type>file</type>
<content>
360: )
361: return yield* Effect.die(
362: new Error("Provider context is incompatible with the route selected by model request hooks"),
363: )
364: const hasHttpHooks =
365: (yield* hooks.has("session", "http.request", resolved.ref.providerID)) ||
366: (yield* hooks.has("session", "http.response", resolved.ref.providerID))
367: const webSocket =
368: resolved.capabilities.responsesWebsockets === true
369: ? yield* Config.boolean(responsesWebSocketFlag(resolved.ref.providerID)).pipe(
370: Config.withDefault(false),
371: Effect.orDie,
372: )
373: : false
374: const http = hasHttpHooks
375: ? httpMiddleware(hooks, {
376: sessionID: session.id,
377: agent: input.scope.agentID,
378: model: ...
<path>/home/byk/Code/opencode-v2-pilot/packages/plugin/src/effect/permission.ts</path>
<type>file</type>
<content>
1: import type { PermissionApi } from "@opencode/client/effect/api"
2: import type { Agent } from "@opencode/schema/agent"
3: import type { Permission } from "@opencode/schema/permission"
4: import type { Session } from "@opencode/schema/session"
5: import type { Effect } from "effect"
6: import type { Hooks } from "./registration.js"
7:
8: export interface PermissionEvaluation {
9: readonly sessionID: Session.ID
10: readonly agent?: Agent.ID
11: readonly action: string
12: readonly resources: ReadonlyArray<string>
13: readonly metadata?: Record<string, unknown>
14: readonly source?: Permission.Source
15: effect: Permission.Effect
16: message?: string
17: }
18:
19: export interface PermissionHooks {
20: readonly evaluate: PermissionEvaluation
21: }
22:
23: export interface PermissionAssertInput {
24: readonly sessionID: Session.ID
25: readonly ...
<path>/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/permission.ts</path>
<type>file</type>
<content>
1: import type { PermissionApi } from "@opencode/client/promise/api"
2: import type { Agent } from "@opencode/schema/agent"
3: import type { Permission } from "@opencode/schema/permission"
4: import type { Session } from "@opencode/schema/session"
5: import type { Hooks } from "./registration.js"
6:
7: export interface PermissionEvaluation {
8: readonly sessionID: Session.ID
9: readonly agent?: Agent.ID
10: readonly action: string
11: readonly resources: ReadonlyArray<string>
12: readonly metadata?: Record<string, unknown>
13: readonly source?: Permission.Source
14: effect: Permission.Effect
15: message?: string
16: }
17:
18: export interface PermissionHooks {
19: readonly evaluate: PermissionEvaluation
20: }
21:
22: export interface PermissionAssertInput {
23: readonly sessionID: Session.ID
24: readonly action: string
25: readonly resources: ...
No files found
Found 20 matches
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/runtime.ts:
Line 20: export const definition = (tool: Tool.Info<any, any>): ToolDefinition => ({
Line 28: export const execute = (tool: Tool.Info<any, any>, input: unknown, context: Tool.Context) =>
Line 62: const decodeInput = (tool: Tool.Info<any, any>, value: unknown) =>
Line 274: export const normalizedName = (tool: Tool.Info) => tool.name.replace(/[^a-zA-Z0-9_-]/g, "_")
Line 276: export const effectiveName = (tool: Tool.Info) =>
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/mcp.ts:
Line 46: options: { namespace: namespace(tool.server), codemode: tool.codemode !== false },
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/plugin/write.ts:
Line 59: options: { codemode: false, permission: "edit" },
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/plugin/websearch.ts:
Line 42: options: { codemode: false ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/runtime.ts</path>
<type>file</type>
<content>
1: import type { ToolDefinition } from "@opencode/ai"
2: import { Tool } from "@opencode/schema/tool"
3: import type { StandardJSONSchemaV1, StandardSchemaV1 } from "@standard-schema/spec"
4: import { Cache, Effect, JsonSchema, Schema, SchemaIssue, SchemaRepresentation } from "effect"
5: import { $ZodType, toJSONSchema } from "zod/v4/core"
6:
7: const formatEffectIssues = SchemaIssue.makeFormatterStandardSchemaV1()
8:
9: const jsonSchemas = Effect.runSync(
10: Cache.make<JsonSchema.JsonSchema, Schema.Codec<unknown> | undefined>({
11: capacity: 100,
12: lookup: (schema) =>
13: Effect.try({
14: try: () => jsonSchema(schema),
15: catch: () => undefined,
16: }).pipe(Effect.orElseSucceed(() => undefined)),
17: }),
18: )
19:
20: export const definition = (tool: Tool.Info<any, any>): ToolDefinition => ({
21: type: "tool",
22: name: ...
Found 5 matches
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool.ts:
Line 13: import { Permission } from "./permission.js"
Line 42: readonly snapshot: (permissions?: Permission.Ruleset) => Effect.Effect<Snapshot>
Line 220: snapshot: Effect.fn("Tool.snapshot")((permissions) =>
Line 223: const rules = permissions ?? []
Line 225: if (whollyDisabled(tool.options?.permission ?? name, rules)) continue
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/tool.ts</path>
<type>file</type>
<content>
190: tool.id = id
191: if (tool.options?.namespace !== current.options?.namespace)
192: tool.options = { ...tool.options, namespace: current.options?.namespace }
193: const error = registrationError(tool)
194: if (error) {
195: editor.errors.push({ kind: "tool", name: tool.name, namespace: tool.options?.namespace, error })
196: return
197: }
198: editor.tools.set(id, tool)
199: },
200: remove: (id) => {
201: editor.tools.delete(id)
202: },
203: }),
204: notify: (value) =>
205: Effect.forEach(
206: value.errors,
207: ({ kind, name, namespace, error }) =>
208: Effect.logError(`Skipping invalid ${kind} registration`, {
209: name,
210: namespace,
211: error: ...
Found 5 matches
/home/byk/Code/opencode-v2-pilot/packages/plugin/src/tui/context.ts:
Line 89: readonly permission: {
Line 107: readonly permission: {
/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/plugin.ts:
Line 40: readonly permission: PermissionDomain
/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/adapter.ts:
Line 434: permission: {
/home/byk/Code/opencode-v2-pilot/packages/plugin/src/effect/plugin.ts:
Line 40: readonly permission: PermissionDomain
<path>/home/byk/Code/opencode-v2-pilot/packages/plugin/src/effect/plugin.ts</path>
<type>file</type>
<content>
1: import type { ExperimentalApi, GenerateApi, PluginApi } from "@opencode/client/effect/api"
2: import type { Location } from "@opencode/schema/location"
3: import type { Effect, Scope } from "effect"
4: import type { PluginOptions } from "../options.js"
5: import type { App } from "../app.js"
6: import type { AgentDomain } from "./agent.js"
7: import type { AISDKDomain } from "./aisdk.js"
8: import type { CatalogDomain } from "./catalog.js"
9: import type { CommandDomain } from "./command.js"
10: import type { EventDomain } from "./event.js"
11: import type { IntegrationDomain } from "./integration.js"
12: import type { MCPDomain } from "./mcp.js"
13: import type { PermissionDomain } from "./permission.js"
14: import type { ReferenceDomain } from "./reference.js"
15: import type { RpcDomain } from "./rpc.js"
16: import type { SessionDomain } from "./session.js"
17: import ...
Found 1 matches
/home/byk/Code/opencode-v2-pilot/packages/schema/src/tool.ts:
Line 61: export class Error extends Schema.TaggedError<Error>()("Tool.Error", {
<path>/home/byk/Code/opencode-v2-pilot/packages/schema/src/tool.ts</path>
<type>file</type>
<content>
45:
46: type InputValue<S> = 0 extends 1 & S
47: ? any
48: : S extends Schema.Codec<infer A, any>
49: ? A
50: : S extends StandardSchemaV1<any, infer A>
51: ? A
52: : unknown
53: type OutputValue<S> = S extends undefined
54: ? never
55: : S extends Schema.Codec<infer A, any>
56: ? A
57: : S extends StandardSchemaV1<infer A, any>
58: ? A
59: : any
60:
61: export class Error extends Schema.TaggedError<Error>()("Tool.Error", {
62: message: Schema.String,
63: error: Schema.optional(Schema.Defect()),
64: metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
65: }) {}
66:
67: export interface TextContent extends Schema.Schema.Type<typeof TextContent> {}
68: export const TextContent = Schema.Struct({
69: type: Schema.Literal("text"),
70: text: Schema.String,
71: }).annotate({ identifier: "Tool.TextContent" })
72: ...
Found 2 matches /home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/adapter.ts: Line 440: Effect.catch((error) => Effect.die(new TypedFailure(error))), Line 621: Effect.catch((error) =>
No files found
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/plugin/shell.ts</path>
<type>file</type>
<content>
100: export const Plugin = {
101: id: "opencode.tool.shell",
102: effect: Effect.fn("ShellTool.Plugin")(function* (ctx: Context) {
103: const sessions = yield* Session.Service
104: const jobs = yield* Job.Service
105: const scope = yield* Scope.Scope
106: const environment = yield* Environment.Service
107: const access = yield* FileAccess.Service
108: const shell = yield* Shell.Service
109: const shellSelect = yield* ShellSelect.Service
110: const compatibleShell = shellSelect.resolve({ priority: "compat" })
111: const permission = yield* Permission.Service
112: const config = yield* Config.Service
113:
114: const prepare = Effect.fn("ShellTool.prepare")(function* (invocation: ShellCreateBefore, context: Tool.Context) {
115: const source = {
116: type: "tool" as const,
117: messageID: ...
Found 1 matches /home/byk/Code/opencode-v2-pilot/packages/core/src/tool/plugin/shell.ts: Line 266: Effect.mapError(
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/plugin/shell.ts</path>
<type>file</type>
<content>
245: if (input.background === true) {
246: yield* jobs.background(job.id)
247: yield* notifyWhenDone(context.sessionID, job.id, info.id, info.command, settled)
248: return backgroundResult(info.id, info.file)
249: }
250:
251: const result = yield* jobs
252: .block({ id: job.id, sessionID: context.sessionID })
253: .pipe(Effect.onInterrupt(() => jobs.cancel(job.id).pipe(Effect.ignore)))
254: if (result?.type === "backgrounded") {
255: yield* shell.timeout(info.id, 0)
256: yield* notifyWhenDone(context.sessionID, job.id, info.id, info.command, settled)
257: return backgroundResult(info.id, info.file)
258: }
259: if (result?.info.status === "error")
260: ...
Found 74 matches
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/mcp.ts:
Line 3: import { ToolFailure } from "@opencode/ai"
Line 80: new ToolFailure({ message: `MCP server "${error.server}" is not available` }),
Line 81: "MCP.ToolCallError": (error) => new ToolFailure({ message: error.message }),
Line 85: return yield* new ToolFailure({
Line 108: error instanceof ToolFailure
Line 110: : new ToolFailure({ message: `Unable to execute ${name(tool.server, tool.name)}` }),
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/plugin/write.ts:
Line 10: import { ToolFailure } from "@opencode/ai"
Line 95: Effect.mapError((error) => new ToolFailure({ message: `Unable to write ${input.path}`, error })),
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/plugin/websearch.ts:
Line 4: import { ToolFailure } from ...
No files found
Found 100 matches (more matches available)
/home/byk/Code/opencode-v2-pilot/packages/plugin/src/effect/tool.ts:
Line 49: export interface ToolFailures extends Record<keyof ToolHooks, unknown> {
Line 57: readonly hook: Hooks<ToolHooks, ToolFailures>
/home/byk/Code/opencode-v2-pilot/packages/core/test/tool-webfetch.test.ts:
Line 462: // toSessionError unwraps the "Unable to fetch <url>" ToolFailure to its cause message.
/home/byk/Code/opencode-v2-pilot/packages/core/test/session-runner.test.ts:
Line 12: ToolFailure,
Line 254: new ToolFailure({
/home/byk/Code/opencode-v2-pilot/packages/core/test/session-error.test.ts:
Line 17: ToolFailure,
Line 80: expect(toSessionError(new ToolFailure({ message: blocked.message, error: blocked }))).toEqual({
/home/byk/Code/opencode-v2-pilot/packages/core/test/plugin/plan.test.ts:
Line 2: import { Message, ToolFailure } from "@opencode/ai"
Line 286: new ToolFailure({
Line 305: const ...
Found 28 matches
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool.ts:
Line 61: }) => Effect.Effect<NormalizedResult, Tool.Error>
Line 120: Effect.catchTag("Tool.Error", (failure) => Effect.succeed({ failure })),
Line 261: return yield* new Tool.Error({ message: `Tool is not available for this request: ${event.tool}` })
Line 267: return yield* new Tool.Error({ message: `Unknown tool: ${name}` })
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/runtime.ts:
Line 31: // Tool implementations declare `Tool.Error` but plugins can fail with anything at
Line 32: // runtime. A foreign typed failure would slip past every `catchTag("Tool.Error")`
Line 38: error instanceof Tool.Error
Line 40: : new Tool.Error({
Line 53: if (!("output" in result)) return yield* new Tool.Error({ message: "Tool did not return its declared output" })
Line 66: return yield* new Tool.Error({ message: ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/tool.ts</path>
<type>file</type>
<content>
100: })
101:
102: const beforeExecute = (name: string, input: unknown, context: Tool.Context) =>
103: hooks.trigger("tool", "execute.before", {
104: tool: name,
105: sessionID: context.sessionID,
106: agent: context.agent,
107: messageID: context.messageID,
108: id: context.id,
109: input,
110: })
111:
112: const executeTool = Effect.fn("Tool.execute")(function* (
113: tool: Tool.Info,
114: name: string,
115: input: unknown,
116: context: Tool.Context,
117: ) {
118: const execution = yield* execute(tool, input, context).pipe(
119: Effect.map((value) => ({ value })),
120: Effect.catchTag("Tool.Error", (failure) => Effect.succeed({ failure })),
121: )
122: const base = {
123: tool: name,
124: sessionID: context.sessionID,
125: ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/tool.ts</path>
<type>file</type>
<content>
118: const execution = yield* execute(tool, input, context).pipe(
119: Effect.map((value) => ({ value })),
120: Effect.catchTag("Tool.Error", (failure) => Effect.succeed({ failure })),
121: )
122: const base = {
123: tool: name,
124: sessionID: context.sessionID,
125: agent: context.agent,
126: messageID: context.messageID,
127: id: context.id,
128: input,
129: }
130: if ("failure" in execution) {
131: const afterEvent: PluginHooks.Domains["tool"]["execute.after"] = {
132: ...base,
133: status: "error",
134: error: execution.failure,
135: }
136: yield* hooks.trigger("tool", "execute.after", afterEvent)
137: return yield* afterEvent.error
138: }
139: const afterEvent: PluginHooks.Domains["tool"]["execute.after"] = {
140: ...
Found 17 matches
/home/byk/Code/opencode-v2-pilot/packages/ai/test/tool-runtime.test.ts:
Line 19: import { Tool, ToolFailure, type ToolExecuteContext } from "../src/tool.js"
Line 68: return yield* new ToolFailure({ message: `Weather lookup failed for ${city}`, error: weatherFailureCause })
Line 745: it.effect("emits tool-error when the handler returns a ToolFailure", () =>
/home/byk/Code/opencode-v2-pilot/packages/ai/src/tool.ts:
Line 8: import { ToolDefinition, ToolFailure, ToolOutput } from "./schema/index.js"
Line 25: ) => Effect.Effect<Schema.Schema.Type<Success>, ToolFailure>
Line 43: * Errors must be expressed as `ToolFailure`. Unmapped errors and defects fail
Line 98: readonly execute?: (params: unknown, context?: ToolExecuteContext) => Effect.Effect<unknown, ToolFailure>
Line 154: readonly execute: (params: unknown, context?: ToolExecuteContext) => Effect.Effect<unknown, ToolFailure>
Line 251: export { ToolFailure ...
<path>/home/byk/Code/opencode-v2-pilot/packages/ai/src/schema/errors.ts</path>
<type>file</type>
<content>
140: }) {
141: override readonly cause = this.reason
142:
143: override get message(): string {
144: return this.reason.message
145: }
146: }
147:
148: /**
149: * Failure type for tool execute handlers. Handlers must map their internal
150: * errors to this shape; the runtime catches `ToolFailure`s and surfaces them
151: * as `tool-error` events plus a `tool-result` of `type: "error"` so the model
152: * can self-correct.
153: *
154: * Anything thrown or yielded by a handler that is not a `ToolFailure` is
155: * treated as a defect and fails the stream.
156: */
157: export class ToolFailure extends Tool.Error {}
(End of file - total 157 lines)
</content>
<system-reminder>
Instructions from: /home/byk/Code/opencode-v2-pilot/packages/ai/AGENTS.md
# AI Package Guide
## Effect
- Prefer `HttpClient.HttpClient` / `HttpClientResponse.HttpClientResponse` over web ...
$ tsgo --noEmit
$ tsgo -b tsconfig.json tsconfig.tests.json
bun test v1.3.14 (0d9b296a)
test/plugin.test.ts:
19 pass
0 fail
65 expect() calls
Ran 19 tests across 1 file. [3.93s]
[00:02:00.000] INFO (#7639): credential updated {
credentialID: "cred_082888e6b00158FANEnstZqAtU",
integrationID: "refresh-fixture",
valueChanged: true,
labelChanged: false,
}
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode/package.json</path>
<type>file</type>
<content>
1: {
2: "private": true,
3: "type": "module",
4: "dependencies": {
5: "effect": "file:/home/byk/Code/opencode-v2-pilot/node_modules/.bun/effect@4.0.0-rc.112/node_modules/effect"
6: },
7: "devDependencies": {
8: "@types/bun": "1.2.21"
9: }
10: }
(End of file - total 10 lines)
</content>
bun test v1.3.14 (0d9b296a) 14 pass 0 fail 34 expect() calls Ran 14 tests across 1 file. [15.66s] 1 pass 0 fail 7 expect() calls Ran 1 test across 1 file. [1382.00ms] bun test v1.3.14 (0d9b296a)
Your prior run returned an empty result. Complete the same read-only security review now against the exact unchanged frozen target from the previous prompt. You must return substantive current file:line evidence for the permission bridge, PTY authorization/isolation/lifecycle/resource controls, and active service/cutover paths. Verify the expected hashes before relying on the source. Classify evidence as PASS, CONCERN, or MUST-FIX. If any evidence cannot be obtained, name the exact command/tool and error as a blocker. End exactly MERGE if no MUST-FIX remains, otherwise DO-NOT-MERGE. Do not edit anything, start or stop services, inspect secrets, or review the dormant supervisor directory as active implementation.
I’m rechecking the frozen revision, diff, external sources, unit, cutover guide, and SEA artifact before issuing the verdict. I’ll treat the failed ten-run PTY gate as current evidence, not discard it as noise.
2ac698d65aa4690a694307e9cbdf44537ea9a4fb e3d14c2a661025b56eb941304df6c5d217d0dd95c8d01497e78011d3e990a34a - M packages/core/src/plugin/host.ts M packages/core/test/plugin.test.ts M packages/core/test/plugin/fixture.ts M packages/core/test/plugin/host.ts M packages/plugin/src/effect/permission.ts M packages/plugin/src/promise/adapter.ts M packages/plugin/src/promise/permission.ts ?? packages/cli/dist-v2-pilot-byk/ ?? packages/cli/dist-v2-pilot-final/ ?? packages/cli/dist-v2-pilot-next/ ?? packages/cli/dist-v2-pilot/
8d51037989aa2cbfa10de82b56ef9512218a07544a5308a74890d59252f43bad config/opencode/plugins/followup.ts b90315811f1ff67cd93d48676dda2fa02d9be0694bf154a049c8746a8ed11aa5 config/opencode/plugins/pty.ts 507a152473809a95363a3758ab39fb6e8f5c82f32c23a9f11d7655607951f7ec config/opencode/test/followup.test.ts c2bed5de452d64198e20cb4255e276e7b37be4b9fd60ee0f4bd98ccac14288b3 config/opencode/test/pty.test.ts 571a0730c86bde522edf63516b7fa69cb9cbf2ff8730e15e2a8ce064c33ad905 config/opencode/opencode.json 0dbe0518ab13584c3a4ae465fb552d79572460766910ff9f7ea4271280d66bb0 config/opencode/service-v2-pilot.json 38fc8a7f4b25acf611557c32380365f3f7d0422f8a31d0f5eb7ffba48e916045 opencode-v2.service 31ce6b09b9448660dfed2ebd9f4a44e6e033cc0753ef978253db02884fc68b2b CUTOVER.md c67985bbc31f99e040ed58abf2aa37fc7c9a197a46c269eafaec468d99658937 /home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot-byk/cli-node-linux-x64/bin/opencode2-node
(no output)
🔴 (19:38) `/home/byk/Code/opencode-v2-pilot/packages/ai/AGENTS.md` error policy: `reason.body` is the sole original-response or triggering-event payload field; preserve original text before Schema decoding removes fields and never replace the complete event with only its nested error. 🔴 (19:38) `/home/byk/Code/opencode-v2-pilot/packages/ai/AGENTS.md` error policy: `reason.http` must describe an…
🔴 (19:33) Core Tool Architecture directive: permission sources are “always constructed from the canonical invocation context” as `{ type: "tool" as const, messageID: context.messageID, id: context.id }`. 🔴 (19:33) Core Tool Architecture directive: leaves own resolution, permission, and side-effect ordering; translate only expected typed errors into `ToolFailure` and do not use `catchCause`, bec…
🔴 (19:22) `/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/adapter.ts` is 639 lines and adapts a Promise plugin into the existing Effect-only Core plugin runtime through `fromPromise(plugin: Plugin)`. 🔴 (19:22) `adapter.ts` defines `CompiledEndpoint`, cached by endpoint object in `compiledEndpoints: WeakMap<object, CompiledEndpoint>`; compiled data consists of input decoders, an ou…
🔴 (19:18) `/home/byk/.local/share/opencode-v2-pilot/config/opencode/test/pty.test.ts` is 401 lines, imports `createPtyPlugin` from `../plugins/pty.ts`, uses `bun:test`, sets `setDefaultTimeout(15_000)`, and runs registered cleanup callbacks via `Promise.allSettled(...)` after each test. 🔴 (19:18) `pty.test.ts` contains 13 ordered PTY tests: 1. registers `["pty_spawn", "pty_write", "pty_read", "…
🔴 (19:18) External plugin file `/home/byk/.local/share/opencode-v2-pilot/config/opencode/plugins/pty.ts` is 852 lines and exports `createPtyPlugin(options: PtyPluginOptions = {})`, with default export `createPtyPlugin()` and plugin ID `"local-pty"`. 🔴 (19:18) `PtyPluginOptions` supports `openProcess?: typeof openPtyProcess` and `spawnTimeoutMs?: number`; the plugin registers 5 tools through `ct…
🔴 (19:13) Repository workspace is `/home/byk/Code/opencode-v2-pilot`; root listing contained 64 entries, including `AGENTS.md`, `packages/`, `services/`, `sdks/`, `specs/`, `package.json`, `bun.lock`, `tsconfig.json`, and `turbo.json`. 🔴 (19:14) User-provided repository policy: after changing the public Protocol or Server `HttpApi`, run `bun run generate` from `packages/client`; never edit gene…