Dashboard › opencode › Session 19i5oiItHKil
19i5oiItHKilWXYUWPerform an independent read-only security review of exact current repository changes in /home/byk/Code/opencode-v2-pilot plus /home/byk/.local/share/opencode-v2-pilot/config/opencode/plugins/pty.ts. Inspect all changed files and every PTY line. Threat-model malicious model input, another Session in same Location, symlink swaps, command/environment injection, permission asks/denials/hooks/saved grants, stream EPIPE, regex DoS, memory/process exhaustion, stubborn descendants, unload/session deletion, and synthetic output injection. Verify fixes against current core implementation, not prior cached reviews. Cite current file:line evidence, classify PASS/CONCERN/MUST-FIX, and end exactly MERGE or DO-NOT-MERGE. Do not edit or start services.
<path>/home/byk/Code/opencode-v2-pilot</path> <type>directory</type> <entries> .changeset/ .dockerignore .editorconfig .git .gitattributes .github/ .gitignore .gitleaksignore .husky/ .opencode/ .oxlintrc.json .prettierignore .vscode/ .zed/ AGENTS.md artifacts/ bun.lock bunfig.toml CONTRIBUTING.md flake.lock flake.nix github/ infra/ install LICENSE nix/ node_modules/ package.json packages/ patches/ perf/ README.ar.md README.bn.md README.br.md README.bs.md README.da.md README.de.md README.es.md README.fr.md README.gr.md README.it.md README.ja.md README.ko.md README.md README.no.md README.pl.md README.ru.md README.th.md README.tr.md README.uk.md README.vi.md README.zh.md README.zht.md screenshot-uk.png script/ sdks/ SECURITY.md services/ specs/ sst-env.d.ts sst.config.ts STATS.md tsconfig.json turbo.json (64 entries) </entries>
<path>/home/byk/Code/opencode-v2-pilot/AGENTS.md</path> <type>file</type> <content> 1: - After changing the public Protocol or Server `HttpApi`, run `bun run generate` from `packages/client`. Do not edit generated client files directly. 2: - Keep runtime dependencies directed from Schema to Core and Protocol, then from Core and Protocol to Server. Client runtime code may depend on Schema and Protocol but never Core or Server; `sdk` composes Client, Core, and Server. 3: - Current implementation changes belong in `packages/core`, `packages/cli`, `packages/server`, `packages/protocol`, `packages/schema`, and related generated client surfaces when required. 4: - This repository does not use Changesets. Do not add `.changeset` files; follow the existing release workflow instead. 5: - The default branch in this repo is `v2`. 6: - Default new branches and worktrees to `v2`, or `origin/v2` when the local `v2` ref is unavailable, and default pull requests to target `v2`. ...
<skill_content name="effect">
# Skill: effect
# Effect
This codebase uses Effect for typed, composable TypeScript services, schemas, and workflows.
## Source Of Truth
Use the current Effect v4 / effect-smol source, not memory or older Effect v2/v3 examples.
1. If `.opencode/references/effect-smol` is missing, clone `https://github.com/Effect-TS/effect-smol` there. Do this in the project, not in the skill folder.
2. Search `.opencode/references/effect-smol` for exact APIs, examples, tests, and naming patterns before answering or implementing Effect-specific code.
3. Also inspect existing repo code for local house style before introducing new patterns.
4. Prefer answers and implementations backed by specific source files or nearby repo examples.
## Guidelines
- Prefer current Effect v4 APIs and project-local patterns over old blog posts, examples, or package-memory guesses.
- Use `Effect.gen(function* () { ... })` for multi-step workflows.
- Use `Effect.fn("Name")` or ...
M packages/core/src/plugin/host.ts M packages/core/test/plugin.test.ts M packages/core/test/plugin/host.ts M packages/plugin/src/effect/permission.ts M packages/plugin/src/promise/adapter.ts M packages/plugin/src/promise/permission.ts ?? packages/cli/dist-v2-pilot-final/ ?? packages/cli/dist-v2-pilot-next/ ?? packages/cli/dist-v2-pilot/ 2ac698d65aa4690a694307e9cbdf44537ea9a4fb 2ac698d65aa4690a694307e9cbdf44537ea9a4fb M packages/core/src/plugin/host.ts M packages/core/test/plugin.test.ts M packages/core/test/plugin/host.ts M packages/plugin/src/effect/permission.ts M packages/plugin/src/promise/adapter.ts M packages/plugin/src/promise/permission.ts packages/core/src/plugin/host.ts | 1 + packages/core/test/plugin.test.ts | 27 +++++++++++++++++++++++++++ packages/core/test/plugin/host.ts | 1 + packages/plugin/src/effect/permission.ts | 12 ++++++++++++ packages/plugin/src/promise/adapter.ts | 1 + packages/plugin/src/promise/permission.ts | 11 ...
/home/byk/Code/opencode-v2-pilot/packages/plugin/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/desktop/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/stats/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/session-ui/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/schema/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/ui/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/codemode/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/cli/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/app/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/tui/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/app/e2e/performance/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/app/e2e/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/ai/AGENTS.md /home/byk/Code/opencode-v2-pilot/packages/core/src/tool/AGENTS.md
<path>/home/byk/Code/opencode-v2-pilot/packages/plugin/AGENTS.md</path> <type>file</type> <content> 1: # Plugin Package Guide 2: 3: - The plugin package has two versions: Effect and Promise. 4: - In the Effect version, every domain must extend the corresponding Effect API client interface from `@opencode/client/effect/api`. 5: - Do not redefine functions that already exist on the Effect API client interface. 6: - Plugin domains add only the additional functions that make sense in the plugin context. (End of file - total 6 lines) </content> <system-reminder> Instructions from: /home/byk/Code/opencode-v2-pilot/AGENTS.md - After changing the public Protocol or Server `HttpApi`, run `bun run generate` from `packages/client`. Do not edit generated client files directly. - Keep runtime dependencies directed from Schema to Core and Protocol, then from Core and Protocol to Server. ...
/home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot-final/cli-node-linux-x64/package.json /home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot-final/cli-node-linux-x64/bin/opencode2-node /home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot-next/cli-node-linux-x64/package.json /home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot-next/cli-node-linux-x64/bin/opencode2-node /home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot/cli-node-linux-x64/package.json /home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot/cli-node-linux-x64/bin/opencode2-node
diff --git a/packages/core/src/plugin/host.ts b/packages/core/src/plugin/host.ts
index 44beadcc6c..6abb955508 100644
--- a/packages/core/src/plugin/host.ts
+++ b/packages/core/src/plugin/host.ts
@@ -383,6 +383,7 @@ export const make = Effect.fn("PluginHost.make")(function* (
},
permission: {
hook: (name, callback) => hooks.register("permission", name, callback),
+ assert: permission.assert,
list: (input) => permission.forSession(input.sessionID),
get: (input) =>
permission
diff --git a/packages/core/test/plugin.test.ts b/packages/core/test/plugin.test.ts
index 1b71e18978..efdbe973c1 100644
--- a/packages/core/test/plugin.test.ts
+++ b/packages/core/test/plugin.test.ts
@@ -449,6 +449,33 @@ it.live("retains Promise plugin groups for later registrations and ignores a dis
}),
)
+it.effect("exposes canonical permission assertions to Promise plugins", () =>
+ Effect.gen(function* () {
+ const plugins = yield* Plugin.Service
+ const ...
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode/plugins/pty.ts</path>
<type>file</type>
<content>
1: import { Plugin } from "@opencode/plugin"
2: import type { Context } from "@opencode/plugin/plugin"
3: import type { ToolContext } from "@opencode/plugin/tool"
4: import { Schema } from "effect"
5: import { spawn } from "node:child_process"
6: import type { ChildProcessWithoutNullStreams } from "node:child_process"
7: import { realpath, stat } from "node:fs/promises"
8:
9: const MAX_BUFFER_SIZE = 1_000_000
10: const MAX_SESSIONS = 25
11: const MAX_SESSIONS_PER_OWNER = 5
12: const DEFAULT_READ_LIMIT = 500
13: const MAX_READ_LIMIT = 2_000
14: const MAX_READ_OFFSET = 10_000
15: const MAX_LINE_LENGTH = 2_000
16: const MAX_PATTERN_LENGTH = 500
17: const MAX_WRITE_SIZE = 65_536
18: const MAX_TIMEOUT_SECONDS = 2_147_483
19: const KILL_GRACE_MS = 1_000
20: const FIXED_ENV = {
21: HOME: process.env.HOME ?? "/home/byk",
22: LANG: process.env.LANG ?? "C.UTF-8",
23: PATH: ...
Found 4 matches
/home/byk/Code/opencode-v2-pilot/packages/core/src/permission.ts:
Line 105: readonly assert: (input: AssertInput) => Effect.Effect<void, Error | SessionErrors.NotFoundError>
Line 221: const assert = Effect.fn("Permission.assert")((input: AssertInput) =>
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/plugin/webfetch.ts:
Line 70: const assertHttpUrl = (url: URL) => {
/home/byk/Code/opencode-v2-pilot/packages/core/src/plugin/host.ts:
Line 386: assert: permission.assert,
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/permission.ts</path>
<type>file</type>
<content>
1: export * as Permission from "./permission.js"
2:
3: import { makeLocationNode } from "@opencode/util/effect/app-node"
4: import { Context, Deferred, Effect, Layer, Schema } from "effect"
5: import { Permission } from "@opencode/schema/permission"
6: import { Bus } from "./bus.js"
7: import { Location } from "./location.js"
8: import { Agent } from "./agent.js"
9: import { SessionErrors } from "./session/error.js"
10: import { SessionSchema } from "./session/schema.js"
11: import { SessionStore } from "./session/store.js"
12: import { Wildcard } from "./util/wildcard.js"
13: import { PermissionSaved } from "./permission/saved.js"
14: import { PluginHooks } from "./plugin/hooks.js"
15:
16: const PermissionEffect = Permission.Effect
17: export { PermissionEffect as Effect }
18: export { Rule, Ruleset } from "@opencode/schema/permission"
19: const missingAgentPermissions: ...
No files found
Found 52 matches
/home/byk/Code/opencode-v2-pilot/packages/core/src/tool.ts:
Line 5: import { ToolDefinition, type ToolCall } from "@opencode/ai"
Line 10: import { CodeModeCatalog } from "./codemode/catalog.js"
Line 11: import { CodeModeTool } from "./codemode/tool.js"
Line 51: readonly definitions: ReadonlyArray<ToolDefinition>
Line 60: readonly definitions?: ReadonlyMap<string, ToolDefinition>
Line 228: const direct = new Map(Array.from(active).filter(([, tool]) => tool.options?.codemode === false))
Line 229: const codeModeTools = new Map(Array.from(active).filter(([, tool]) => tool.options?.codemode !== false))
Line 297: if (tool.options?.codemode === false && id === "execute")
Line 300: try: () => ToolDefinition.make(definition(tool)),
/home/byk/Code/opencode-v2-pilot/packages/core/src/aisdk.ts:
Line 30: type ToolDefinition,
Line 599: function tool(input: ToolDefinition): LanguageModelV3FunctionTool ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/tool.ts</path>
<type>file</type>
<content>
1: export * as Tool from "./tool.js"
2: export { CallID, Content, Error, FileContent, TextContent } from "@opencode/schema/tool"
3: export type { Context, Metadata, Namespace, Options, Result } from "@opencode/schema/tool"
4:
5: import { ToolDefinition, type ToolCall } from "@opencode/ai"
6: import { Tool } from "@opencode/schema/tool"
7: import { Context, Effect, Layer, Result, Schema, SchemaIssue, Types } from "effect"
8: import { makeLocationNode } from "@opencode/util/effect/app-node"
9: import type { Agent } from "./agent.js"
10: import { CodeModeCatalog } from "./codemode/catalog.js"
11: import { CodeModeTool } from "./codemode/tool.js"
12: import { Image } from "./image.js"
13: import { Permission } from "./permission.js"
14: import { PluginHooks } from "./plugin/hooks.js"
15: import { SessionMessage } from "./session/message.js"
16: import { SessionSchema } from ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/plugin/shell.ts</path>
<type>file</type>
<content>
1: export * as ShellTool from "./shell.js"
2:
3: import { ToolFailure } from "@opencode/ai"
4: import type { Context } from "@opencode/plugin/effect/plugin"
5: import type { ShellCreateBefore } from "@opencode/plugin/effect/shell"
6: import type { Tool } from "@opencode/schema/tool"
7: import { Deferred, Effect, Schema, Scope } from "effect"
8: import { Config } from "../../config.js"
9: import { Environment } from "../../environment/index.js"
10: import { Job } from "../../job.js"
11: import { FileAccess } from "../../file-access.js"
12: import { Permission } from "../../permission.js"
13: import { NonNegativeInt } from "../../schema.js"
14: import { Session } from "../../session.js"
15: import { SessionSchema } from "../../session/schema.js"
16: import { Shell } from "../../shell.js"
17: import { ShellParse } from "../../shell/parse.js"
18: import { ShellSelect } from ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/plugin/host.ts</path>
<type>file</type>
<content>
1: export * as PluginHost from "./host.js"
2:
3: import { Plugin } from "@opencode/plugin/effect"
4: import type { IntegrationMethodRegistration } from "@opencode/plugin/effect/integration"
5: import { EventManifest } from "@opencode/schema/event-manifest"
6: import type { Event } from "@opencode/schema/event"
7: import { ServerConfig } from "@opencode/schema/mcp"
8: import { App } from "../app.js"
9: import { Effect, Schema, Stream } from "effect"
10: import { Agent } from "../agent.js"
11: import { AISDK } from "../aisdk.js"
12: import { Catalog } from "../catalog.js"
13: import { Command } from "../command.js"
14: import { Credential } from "../credential.js"
15: import { Bus } from "../bus.js"
16: import { Integration } from "../integration.js"
17: import { KV } from "../kv.js"
18: import { Location } from "../location.js"
19: import { LocationServiceMap } from ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/plugin/host.ts</path>
<type>file</type>
<content>
521: command: sessions.command,
522: rename: sessions.rename,
523: move: sessions.move,
524: synthetic: sessions.synthetic,
525: interrupt: (input) =>
526: sessions
527: .interrupt(input.sessionID, { continue: input.continue })
528: .pipe(Effect.map((interrupted) => ({ interrupted }))),
529: wait: (input) => sessions.wait(input.sessionID),
530: context: (input) => sessions.context(input.sessionID),
531: },
532: }
533: return context
534: })
535:
536: export const requirements = LayerNode.group([
537: App.node,
538: Agent.node,
539: AISDK.node,
540: Catalog.node,
541: Command.node,
542: Bus.node,
543: Integration.node,
544: KV.node,
545: Mcp.node,
546: Location.node,
547: Reference.node,
548: Rpc.node,
549: Skill.node,
550: Tool.node,
551: Vcs.node,
552: ...
<path>/home/byk/Code/opencode-v2-pilot/packages/plugin/src/effect/permission.ts</path>
<type>file</type>
<content>
1: import type { PermissionApi } from "@opencode/client/effect/api"
2: import type { Agent } from "@opencode/schema/agent"
3: import type { Permission } from "@opencode/schema/permission"
4: import type { Session } from "@opencode/schema/session"
5: import type { Effect } from "effect"
6: import type { Hooks } from "./registration.js"
7:
8: export interface PermissionEvaluation {
9: readonly sessionID: Session.ID
10: readonly agent?: Agent.ID
11: readonly action: string
12: readonly resources: ReadonlyArray<string>
13: readonly metadata?: Record<string, unknown>
14: readonly source?: Permission.Source
15: effect: Permission.Effect
16: message?: string
17: }
18:
19: export interface PermissionHooks {
20: readonly evaluate: PermissionEvaluation
21: }
22:
23: export interface PermissionAssertInput {
24: readonly sessionID: Session.ID
25: readonly ...
<path>/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/permission.ts</path>
<type>file</type>
<content>
1: import type { PermissionApi } from "@opencode/client/promise/api"
2: import type { Agent } from "@opencode/schema/agent"
3: import type { Permission } from "@opencode/schema/permission"
4: import type { Session } from "@opencode/schema/session"
5: import type { Hooks } from "./registration.js"
6:
7: export interface PermissionEvaluation {
8: readonly sessionID: Session.ID
9: readonly agent?: Agent.ID
10: readonly action: string
11: readonly resources: ReadonlyArray<string>
12: readonly metadata?: Record<string, unknown>
13: readonly source?: Permission.Source
14: effect: Permission.Effect
15: message?: string
16: }
17:
18: export interface PermissionHooks {
19: readonly evaluate: PermissionEvaluation
20: }
21:
22: export interface PermissionAssertInput {
23: readonly sessionID: Session.ID
24: readonly action: string
25: readonly resources: ...
<path>/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/adapter.ts</path>
<type>file</type>
<content>
1: import { Tool } from "@opencode/schema/tool"
2: import type { Rpc } from "@opencode/schema/rpc"
3: import type { RpcCallOptions, RpcEventPayload } from "@opencode/client/promise/api"
4: import { Effect, Schema, SchemaAST, Stream } from "effect"
5: import type { Scope } from "effect"
6: import { HttpApiEndpoint, HttpApiSchema } from "effect/unstable/httpapi"
7: import { define } from "../effect/plugin.js"
8: import type { Plugin } from "./plugin.js"
9: import type { Info } from "./tool.js"
10: import type { RpcDomain, RpcHandlers } from "./rpc.js"
11:
12: type HostRegistration = { readonly dispose: Effect.Effect<void> }
13: type Registration = { readonly dispose: () => Promise<void> }
14: type PromiseContext = Parameters<Plugin["setup"]>[0]
15: type PromiseEvent = ReturnType<PromiseContext["event"]["subscribe"]> extends AsyncIterable<infer Event> ? ...
<path>/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/adapter.ts</path>
<type>file</type>
<content>
521: }),
522: ),
523: },
524: websearch: {
525: providers: adaptApiMethod(WebSearchEndpoints["websearch.providers"], host.websearch.providers),
526: query: adaptApiMethod(WebSearchEndpoints["websearch.query"], host.websearch.query),
527: reload: () => run(host.websearch.reload()),
528: transform: (callback) =>
529: register(
530: host.websearch.transform((editor) => {
531: callback({
532: add: (definition) =>
533: editor.add({
534: id: definition.id,
535: name: definition.name,
536: execute: (input) => attempt((signal) => definition.execute(input, { signal })),
537: }),
538: ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/test/plugin/host.ts</path>
<type>file</type>
<content>
1: import { Plugin } from "@opencode/plugin/effect"
2: import type { IntegrationMethod } from "@opencode/plugin/effect/integration"
3: import { Agent } from "@opencode/core/agent"
4: import { Catalog } from "@opencode/core/catalog"
5: import { Credential } from "@opencode/core/credential"
6: import { Integration } from "@opencode/core/integration"
7: import { Location } from "@opencode/core/location"
8: import { Model } from "@opencode/core/model"
9: import { Project } from "@opencode/core/project"
10: import { Provider } from "@opencode/core/provider"
11: import { AbsolutePath } from "@opencode/core/schema"
12: import { WebSearch } from "@opencode/core/websearch"
13: import { Effect, Stream } from "effect"
14:
15: type Overrides = Partial<Omit<Plugin.Context, "options" | "session">> & {
16: readonly session?: Partial<Plugin.Context["session"]>
17: }
18: export function ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/test/plugin/host.ts</path>
<type>file</type>
<content>
301: editor.model.default.set(Provider.ID.make(providerID), Model.ID.make(modelID)),
302: },
303: },
304: }),
305: ),
306: }
307: }
308:
309: export function integrationHost(integration: Integration.Interface): Plugin.Context["integration"] {
310: return {
311: list: () => Effect.die("unused integration.list"),
312: get: () => Effect.die("unused integration.get"),
313: connect: {
314: key: () => Effect.die("unused integration.connect.key"),
315: },
316: oauth: {
317: connect: () => Effect.die("unused integration.oauth.connect"),
318: status: () => Effect.die("unused integration.oauth.status"),
319: complete: () => Effect.die("unused integration.oauth.complete"),
320: cancel: () => Effect.die("unused integration.oauth.cancel"),
321: },
322: command: {
323: ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/test/plugin.test.ts</path>
<type>file</type>
<content>
1: import { expect } from "bun:test"
2: import path from "path"
3: import { Clock, Deferred, Effect } from "effect"
4: import { TestClock } from "effect/testing"
5: import { Command } from "@opencode/core/command"
6: import { Bus } from "@opencode/core/bus"
7: import { Credential } from "@opencode/core/credential"
8: import { Integration } from "@opencode/core/integration"
9: import { Plugin } from "@opencode/core/plugin"
10: import { PluginModule } from "@opencode/core/plugin/module"
11: import { Watcher } from "@opencode/core/filesystem/watcher"
12: import { fromPromise } from "@opencode/plugin/promise/adapter"
13: import { Session } from "@opencode/schema/session"
14: import { testEffect } from "./lib/effect"
15: import { PluginTestLayer } from "./plugin/fixture"
16:
17: const it = testEffect(PluginTestLayer)
18:
19: for (const scenario of [
20: {
21: name: "starts ...
<path>/home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot/cli-node-linux-x64/package.json</path>
<type>file</type>
<content>
1: {
2: "name": "@opencode-ai/cli-node-linux-x64",
3: "version": "0.0.0-v2-pilot-202608250932",
4: "license": "MIT",
5: "repository": {
6: "type": "git",
7: "url": "git+https://github.com/anomalyco/opencode.git"
8: },
9: "os": [
10: "linux"
11: ],
12: "cpu": [
13: "x64"
14: ]
15: }
(End of file - total 15 lines)
</content>
<system-reminder>
Instructions from: /home/byk/Code/opencode-v2-pilot/packages/cli/AGENTS.md
# CLI and TUI development guide
- Use `@opencode/client` and the location-scoped data in `packages/tui/src/context/data.tsx` instead of adding dependencies on legacy sync state.
- Preserve established TUI behavior unless the task intentionally changes it.
</system-reminder>
<path>/home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot-next/cli-node-linux-x64/package.json</path>
<type>file</type>
<content>
1: {
2: "name": "@opencode/cli-node-linux-x64",
3: "version": "0.0.0-v2-pilot-202609080105",
4: "license": "MIT",
5: "repository": {
6: "type": "git",
7: "url": "git+https://github.com/anomalyco/opencode.git"
8: },
9: "os": [
10: "linux"
11: ],
12: "cpu": [
13: "x64"
14: ]
15: }
(End of file - total 15 lines)
</content>
<path>/home/byk/Code/opencode-v2-pilot/packages/cli/dist-v2-pilot-final/cli-node-linux-x64/package.json</path>
<type>file</type>
<content>
1: {
2: "name": "@opencode/cli-node-linux-x64",
3: "version": "0.0.0-v2-pilot-202609080301",
4: "license": "MIT",
5: "repository": {
6: "type": "git",
7: "url": "git+https://github.com/anomalyco/opencode.git"
8: },
9: "os": [
10: "linux"
11: ],
12: "cpu": [
13: "x64"
14: ]
15: }
(End of file - total 15 lines)
</content>
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode</path> <type>directory</type> <entries> bun.lock node_modules/ opencode.json package.json plugins/ service-v2-pilot.json test/ tsconfig.json (8 entries) </entries>
<path>/home/byk/.local/share/opencode-v2-pilot/config/opencode/opencode.json</path>
<type>file</type>
<content>
1: {
2: "$schema": "https://opencode.ai/config.json"
3: }
(End of file - total 3 lines)
</content>
Found 36 matches
/home/byk/Code/opencode-v2-pilot/packages/core/src/session/subagent-completion.ts:
Line 36: yield* sessions.synthetic({
/home/byk/Code/opencode-v2-pilot/packages/core/src/session/sql.ts:
Line 15: import type { CompactionPayload, MovePayload, SyntheticPayload, UserPayload } from "@opencode/schema/session-inbox"
Line 109: data: text({ mode: "json" }).$type<UserPayload | SyntheticPayload | Record<string, never>>().notNull(),
Line 134: payload: text({ mode: "json" }).$type<UserPayload | SyntheticPayload | CompactionPayload | MovePayload>().notNull(),
/home/byk/Code/opencode-v2-pilot/packages/core/src/session/session.ts:
Line 23: SyntheticConflictError,
Line 198: synthetic(sessionID, {
Line 222: yield* synthetic(sessionID, {
Line 299: type: "synthetic",
Line 300: payload: SessionInbox.SyntheticPayload.make({
Line 316: () => new SyntheticConflictError({ sessionID, inputID ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/session/session.ts</path>
<type>file</type>
<content>
260: if (session.revert) yield* SessionRevert.commit(bus, session)
261: const inputID = input.id ?? SessionMessage.ID.create()
262: const admitted = yield* admission
263: .admitCompaction({
264: id: inputID,
265: sessionID,
266: delivery: input.delivery ?? "steer",
267: })
268: .pipe(
269: Effect.catchTag("SessionInbox.LifecycleConflict", () => new CompactionConflictError({ sessionID, inputID })),
270: )
271: yield* execution.wake(sessionID)
272: return admitted
273: })
274: const wait = Effect.fn("Session.wait")(function* (sessionID: SessionSchema.ID) {
275: yield* get(sessionID)
276: yield* execution.awaitIdle(sessionID)
277: })
278: const resume = Effect.fn("Session.resume")(function* (sessionID: SessionSchema.ID) {
279: yield* get(sessionID)
280: yield* ...
Found 1 matches /home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/adapter.ts: Line 576: synthetic: adaptApiMethod(SessionEndpoints["session.synthetic"], host.session.synthetic),
Found 1 matches /home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/adapter.ts: Line 576: synthetic: adaptApiMethod(SessionEndpoints["session.synthetic"], host.session.synthetic),
/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/session.ts /home/byk/Code/opencode-v2-pilot/packages/plugin/src/effect/session.ts
<path>/home/byk/Code/opencode-v2-pilot/packages/plugin/src/promise/session.ts</path>
<type>file</type>
<content>
1: import type { SessionApi } from "@opencode/client/promise/api"
2: import type { GenerationOptionsFields, Message, SystemPart } from "@opencode/ai"
3: import type { Agent } from "@opencode/schema/agent"
4: import type { Model } from "@opencode/schema/model"
5: import type { PromptInput } from "@opencode/schema/prompt-input"
6: import type { Session } from "@opencode/schema/session"
7: import type { SessionInbox } from "@opencode/schema/session-inbox"
8: import type { SessionError } from "@opencode/schema/session-error"
9: import type { SessionMessage } from "@opencode/schema/session-message"
10: import type { JsonSchema, Types } from "effect"
11: import type { ModelHooks } from "./registration.js"
12:
13: export interface SessionPrompt {
14: readonly sessionID: Session.ID
15: readonly messageID: SessionMessage.ID
16: prompt: ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/session/message-updater.ts</path>
<type>file</type>
<content>
110: location: event.data.location,
111: projectID: event.data.projectID,
112: subpath: event.data.subpath,
113: previous: yield* adapter.getLocation(),
114: time: { created },
115: }),
116: )
117: }),
118: "session.renamed": () => Effect.void,
119: "session.deleted": () => Effect.void,
120: "session.forked": () => Effect.void,
121: "session.inbox.delivered": () => Effect.void,
122: "session.inbox.enqueued": () => Effect.void,
123: "session.inbox.cancelled": () => Effect.void,
124: "session.inbox.delivery.changed": () => Effect.void,
125: "session.execution.started": () => Effect.void,
126: "session.execution.succeeded": () => clearCurrentRetry,
127: "session.execution.failed": () => clearCurrentRetry,
128: ...
Found 2 matches
/home/byk/Code/opencode-v2-pilot/packages/core/src/session/runner/to-llm-message.ts:
Line 257: case "synthetic":
/home/byk/Code/opencode-v2-pilot/packages/core/src/session/runner/llm.ts:
Line 280: yield* bus.publish(SessionEvent.Synthetic, { sessionID, text: CONTINUE_AFTER_INCOMPLETE_STREAM })
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/session/runner/to-llm-message.ts</path>
<type>file</type>
<content>
230: case "location-switched":
231: return [
232: Message.make({
233: id: message.id,
234: role: "user",
235: content: `The working directory has been changed to ${message.location.directory}.`,
236: metadata: message.metadata,
237: }),
238: ]
239: case "user":
240: const content = [
241: ...(message.skills ?? []).flatMap((skill) => (skill.text === undefined ? [] : [Message.text(skill.text)])),
242: ...(message.text === "" ? [] : [Message.text(message.text)]),
243: ...userAttachmentContent(message.files ?? []),
244: ]
245: if (content.length === 0) return []
246: return [
247: Message.make({
248: id: message.id,
249: role: "user",
250: content,
251: metadata: {
252: ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/util/wildcard.ts</path>
<type>file</type>
<content>
1: export * as Wildcard from "./wildcard.js"
2:
3: export function match(input: string, pattern: string) {
4: const normalized = input.replaceAll("\\", "/")
5: let escaped = pattern
6: .replaceAll("\\", "/")
7: .replace(/[.+^${}()|[\]\\]/g, "\\$&")
8: .replace(/\*/g, ".*")
9: .replace(/\?/g, ".")
10:
11: if (escaped.endsWith(" .*")) escaped = escaped.slice(0, -3) + "( .*)?"
12:
13: return new RegExp("^" + escaped + "$", process.platform === "win32" ? "si" : "s").test(normalized)
14: }
(End of file - total 14 lines)
</content>
Found 6 matches
/home/byk/Code/opencode-v2-pilot/packages/core/src/shell/scan.ts:
Line 15: resource: string
/home/byk/Code/opencode-v2-pilot/packages/core/src/shell/parse.ts:
Line 18: commands: Array<{ resource: string; save: string }>
Line 195: resource: (node.parent?.type === "redirected_statement" ? node.parent.text : node.text).trim(),
Line 196: save: `${prefix(tokens).join(" ")} *`,
Line 200: { commands: [] as Array<{ resource: string; save: string }>, directories: [] as string[] },
Line 260: resource: item.resource,
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/shell/parse.ts</path>
<type>file</type>
<content>
170: return yield* scanLegacy(command, shell, cwd)
171: })
172:
173: const scanLegacy = Effect.fnUntraced(function* (command: string, shell: string, cwd: string) {
174: const parsers = yield* Effect.promise(load)
175: const powershell = ShellSelect.ps(shell)
176: const tree = (powershell ? parsers.ps : parsers.bash).parse(command)
177: if (!tree) return yield* Effect.fail(new Error("Failed to parse shell command"))
178:
179: return yield* Effect.acquireUseRelease(
180: Effect.succeed(tree),
181: (tree) =>
182: Effect.sync(() =>
183: tree.rootNode.descendantsOfType("command").reduce(
184: (result, node) => {
185: if (!node) return result
186: const command = parts(node)
187: const tokens = command.map((part) => part.text)
188: if (tokens.length === 0) return result
189: const ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/tool/runtime.ts</path>
<type>file</type>
<content>
1: import type { ToolDefinition } from "@opencode/ai"
2: import { Tool } from "@opencode/schema/tool"
3: import type { StandardJSONSchemaV1, StandardSchemaV1 } from "@standard-schema/spec"
4: import { Cache, Effect, JsonSchema, Schema, SchemaIssue, SchemaRepresentation } from "effect"
5: import { $ZodType, toJSONSchema } from "zod/v4/core"
6:
7: const formatEffectIssues = SchemaIssue.makeFormatterStandardSchemaV1()
8:
9: const jsonSchemas = Effect.runSync(
10: Cache.make<JsonSchema.JsonSchema, Schema.Codec<unknown> | undefined>({
11: capacity: 100,
12: lookup: (schema) =>
13: Effect.try({
14: try: () => jsonSchema(schema),
15: catch: () => undefined,
16: }).pipe(Effect.orElseSucceed(() => undefined)),
17: }),
18: )
19:
20: export const definition = (tool: Tool.Info<any, any>): ToolDefinition => ({
21: type: "tool",
22: name: ...
7d6999a17d0eca17c8200c4d44679ff13dfa59dd873babb87d9ee9dfa99303b1 packages/cli/dist-v2-pilot/cli-node-linux-x64/bin/opencode2-node 6eb1f3d481674cbd8a8f466f2d0943b5cd9f66df993c0ffa8ae91d60b1f1e6e1 packages/cli/dist-v2-pilot-next/cli-node-linux-x64/bin/opencode2-node 67ecda49fa5be3ddb8f7fcb20a33f008a88dea093f0b8c8b10144afa0130f7cf packages/cli/dist-v2-pilot-final/cli-node-linux-x64/bin/opencode2-node 510293233a0ef70158dce90d88ca00fa0b6e8dfca2ddc8e0481f8a85962ceb03 /home/byk/.local/share/opencode-v2-pilot/config/opencode/plugins/pty.ts packages/cli/dist-v2-pilot/cli-node-linux-x64/bin/opencode2-node: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=01ed129fb51ffd798127b17978435ef452e72ad4, for GNU/Linux 3.2.0, with debug_info, not stripped packages/cli/dist-v2-pilot-next/cli-node-linux-x64/bin/opencode2-node: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter ...
Found 5 matches
/home/byk/Code/opencode-v2-pilot/packages/core/src/session/runner/to-llm-message.ts:
Line 109: const toolCall = (tool: SessionMessage.AssistantTool, providerMetadata: ProviderMetadata | undefined): ContentPart =>
Line 180: const call = toolCall(
/home/byk/Code/opencode-v2-pilot/packages/core/src/session/runner/step.ts:
Line 86: const executeTool = (call: ToolCall) => {
Line 89: return input.prepared.executeTool({
Line 119: restore(executeTool(event)).pipe(
<path>/home/byk/Code/opencode-v2-pilot/packages/core/src/session/runner/step.ts</path>
<type>file</type>
<content>
60: const TOOLS_INTERRUPTED = { type: "aborted", message: "Tool execution interrupted" } as const
61: const STEP_INTERRUPTED = { type: "aborted", message: "Step interrupted" } as const
62: const RESULT_MISSING = { type: "tool.result-missing", message: "Provider did not return a tool result" } as const
63:
64: /** Captures Location-scoped dependencies without introducing another service or execution loop. */
65: export const make = Effect.gen(function* () {
66: const bus = yield* Bus.Service
67: const llm = yield* LLMClient.Service
68: const snapshots = yield* Snapshot.Service
69: const toolOutput = yield* ToolOutput.Service
70:
71: const attempt = Effect.fn("SessionStep.attempt")(function* (input: Input) {
72: const startSnapshot = yield* snapshots.capture()
73: const publisher = createLLMEventPublisher(bus, {
74: sessionID: input.sessionID,
75: ...
Found 23 matches
/home/byk/Code/opencode-v2-pilot/packages/core/test/plugin/provider-vllm.test.ts:
Line 48: permission: [],
/home/byk/Code/opencode-v2-pilot/packages/core/test/plugin/host.ts:
Line 106: permission: overrides.permission ?? {
Line 107: hook: () => Effect.die("unused permission.hook"),
Line 108: assert: () => Effect.die("unused permission.assert"),
Line 109: list: () => Effect.die("unused permission.list"),
Line 110: get: () => Effect.die("unused permission.get"),
Line 111: reply: () => Effect.die("unused permission.reply"),
Line 483: permissions: value.permissions.map((permission) => ({ ...permission })),
/home/byk/Code/opencode-v2-pilot/packages/core/test/plugin/fixture.ts:
Line 26: import { Permission } from "@opencode/core/permission"
Line 53: const permissionLayer = Layer.succeed(
Line 54: Permission.Service,
Line 55: Permission.Service.of({
Line 106: ...
<path>/home/byk/Code/opencode-v2-pilot/packages/core/test/plugin/fixture.ts</path>
<type>file</type>
<content>
1: import { Agent } from "@opencode/core/agent"
2: import { AISDK } from "@opencode/core/aisdk"
3: import { Catalog } from "@opencode/core/catalog"
4: import { Command } from "@opencode/core/command"
5: import { Config } from "@opencode/core/config"
6: import { Credential } from "@opencode/core/credential"
7: import { LayerNodePlatform } from "@opencode/util/effect/app-node-platform"
8: import { AppProcess } from "@opencode/util/process"
9: import { LayerNode } from "@opencode/util/effect/layer-node"
10: import { Bus } from "@opencode/core/bus"
11: import { FileSystem } from "@opencode/core/filesystem"
12: import { FSUtil } from "@opencode/util/fs-util"
13: import { Form } from "@opencode/core/form"
14: import { Generate } from "@opencode/core/generate"
15: import { Integration } from "@opencode/core/integration"
16: import { KV } from "@opencode/core/kv"
17: import { ...
<path>/home/byk/Code/opencode-v2-pilot/packages/schema/src/permission.ts</path>
<type>file</type>
<content>
1: export * as Permission from "./permission.js"
2:
3: import { Schema } from "effect"
4: import { optional } from "./schema.js"
5: import { ephemeral, inventory } from "./event.js"
6: import { ascending } from "./identifier.js"
7: import { SessionID } from "./session-id.js"
8: import { statics } from "./schema.js"
9:
10: export const ID = Schema.String.check(Schema.isStartsWith("per")).pipe(
11: Schema.brand("Permission.ID"),
12: statics((schema) => ({ create: (id?: string) => schema.make(id ?? "per_" + ascending()) })),
13: )
14: export type ID = typeof ID.Type
15:
16: export const Source = Schema.Union([
17: Schema.Struct({
18: type: Schema.Literal("tool"),
19: messageID: Schema.String,
20: id: Schema.String,
21: }),
22: ]).annotate({ identifier: "Permission.Source" })
23: export type Source = typeof Source.Type
24:
25: const RequestFields = {
26: ...
Read-only review of:
origin/v2: 2ac698d65aa4690a694307e9cbdf44537ea9a4fbplugins/pty.tsI did not edit files, run tests, or start services.
pty_write bypasses execution authorizationoptions.permission only filters tool visibility; it never authorizes execution:
packages/core/src/tool.ts:220-232packages/core/src/tool/AGENTS.md explicitly states that the registry performs no execution authorization.The plugin performs canonical authorization for spawn at pty.ts:145 and pty.ts:443-473, but pty_write only checks ownership and writes arbitrary data:
pty.ts:266-272A model can obtain approval for an interactive /bin/sh, then send any later command through pty_write without another permission evaluation. Denials, permission hooks, saved grants, and invocation-source auditing never see that command.
This defeats the permission model. pty_write must make a canonical permission assertion for the input it sends, or the design must constrain write access to data that cannot initiate new commands.
The plugin saves the exact quoted command as a permission pattern:
pty.ts:415-417, pty.ts:461pty.ts:462-469Core persists that value directly:
packages/core/src/permission.ts:284-290Core then interprets * and ? as wildcards:
packages/core/src/permission.ts:87-96packages/core/src/util/wildcard.ts:3-13For example, approving “always” for a resource resembling 'sh' '-c' '*' grants every matching shell body rather than that literal command. The UI-facing request does not establish that widening. ...
* 🔴 (03:14) `packages/core/src/session/runner/to-llm-message.ts:257-258` converts a `"synthetic"` session message into exactly one `Message.make({ id: message.id, role: "user", content: message.text })`; unlike adjacent `"user"` and `"skill"` cases, it does not forward `message.metadata`. * 🔴 (03:14) `packages/core/src/session/runner/to-llm-message.ts:264-265` excludes shell messages from model…
* 🔴 (03:12) `/home/byk/.local/share/opencode-v2-pilot/config/opencode/opencode.json` contains exactly 3 lines and only configures `"$schema": "https://opencode.ai/config.json"`. * 🔴 (03:12) A repository search found exactly 36 `synthetic`-related matches across session code: `packages/core/src/session/subagent-completion.ts:36`; `packages/core/src/session/sql.ts:15,109,134`; `packages/core/src/…
* 🔴 (03:11) `packages/core/test/plugin.test.ts` contains 581 lines and defines plugin lifecycle/integration tests using `testEffect(PluginTestLayer)`; imports include `Clock`, `Deferred`, `Effect`, `TestClock`, `Command`, `Bus`, `Credential`, `Integration`, `Plugin`, `PluginModule`, `Watcher`, `fromPromise`, and `Session`. * 🔴 (03:11) `packages/core/test/plugin.test.ts:19-68` tests ordered acti…
Date: Sep 8, 2026 * 🔴 (03:10) `packages/plugin/src/promise/permission.ts` defines the Promise permission counterpart: `PermissionEvaluation` contains readonly `sessionID`, optional `agent`, `action`, `resources`, optional `metadata`, optional `source`, mutable `effect`, and optional mutable `message`; `PermissionHooks` exposes `evaluate: PermissionEvaluation`; `PermissionAssertInput` contains `s…
* 🔴 (03:09) Repository search found no files for the first query and 52 matches for the subsequent `ToolDefinition`/CodeMode-related query across `packages/core/src/tool.ts`, `packages/core/src/aisdk.ts`, `packages/core/src/mcp/instructions.ts`, `packages/core/src/mcp/index.ts`, `packages/core/src/mcp/client.ts`, `packages/core/src/tool/runtime.ts`, tool plugins, session context, internal plugin…
* 🔴 (03:09) Current `packages/core/src/permission.ts:19` defines `missingAgentPermissions: Permission.Ruleset = [{ action: "*", resource: "*", effect: "deny" }]`, making the fallback rule for a missing agent deny every action and resource. * 🔴 (03:09) Current `packages/core/src/permission.ts` imports `Permission` from `@opencode/schema/permission` and `Wildcard` from `./util/wildcard.js`. * 🔴 …
Date: Sep 8, 2026 * 🟡 [requested-security-review] (03:08) User requested an independent, read-only security review of the exact current changes in `/home/byk/Code/opencode-v2-pilot` and every line of `/home/byk/.local/share/opencode-v2-pilot/config/opencode/plugins/pty.ts`, verified against the current core implementation rather than cached reviews. * 🟡 (03:08) User requested threat modeling fo…