diff --git a/docs/architecture/opencode-plugin-surface-audit.md b/docs/architecture/opencode-plugin-surface-audit.md index abdb08bdd5..aab2697aff 100644 --- a/docs/architecture/opencode-plugin-surface-audit.md +++ b/docs/architecture/opencode-plugin-surface-audit.md @@ -56,7 +56,7 @@ |---|---|---| | `runtime-ports` plugin contract | 已有主机 ABI、读模型、候选效果、权限提示、诊断和隔离类型；公开符号较多但已受脚本预算约束 | 不继续新增泛描述符；公开符号必须声明接口切面、消费方和验证目标 | | `plugin-runtime-host` | 已有受控 host 边界、deadline、幂等、隔离和 restart 清理路径 | 继续保持窄方法集；来源发现和激活属于 P0-C | -| `opencode-adapter` | 当前是 fixture contract 范围，只做配置导入、来源发现和候选来源视图测试 | 不得实现 `PluginRuntimeClient`，不得声明可执行可用性 | +| `opencode-adapter` | 当前提供 projection-only 来源发现适配器，只做配置导入、来源发现和诊断读模型 | 不得实现 `PluginRuntimeClient`，不得声明可执行可用性 | | `events` | 已有产品事件清单 | 需要在真实插件事件消费前定义可订阅子集，不新增插件专用事件模型 | | `tool-contracts` | 已有动态工具提供方和工具快照 | custom tool 映射必须复用它，不新增插件专用工具 ABI | diff --git a/docs/architecture/plugin-runtime-host-design.md b/docs/architecture/plugin-runtime-host-design.md index cebf35e3a6..017cc07423 100644 --- a/docs/architecture/plugin-runtime-host-design.md +++ b/docs/architecture/plugin-runtime-host-design.md @@ -157,7 +157,8 @@ sequenceDiagram - `cargo test -p bitfun-runtime-ports --test plugin_runtime_contracts` - `cargo test -p bitfun-runtime-ports --test plugin_runtime_host_contracts` - `cargo test -p bitfun-plugin-runtime-host` -- `cargo test -p bitfun-opencode-adapter opencode_fixture_contracts`，仅证明 OpenCode 输入可被诊断并转换为 BitFun 来源视图，不等同于 P0-C 产品体验完成。 +- `cargo test -p bitfun-opencode-adapter --test opencode_source_adapter`，证明 OpenCode 输入可通过 projection-only Host adapter 转换为 BitFun 来源视图和诊断读模型，不等同于 P0-C 产品体验完成。 +- `cargo test -p bitfun-opencode-adapter p0_c2_fixture` 只保护后续 custom tool 候选映射的私有兼容 fixture，不属于 P0-C.1 host-path 验收。 - `node scripts/check-core-boundaries.mjs` PR 审查重点： diff --git a/docs/plans/core-decomposition-plan.md b/docs/plans/core-decomposition-plan.md index 7f1ba9b34e..11af68d3ec 100644 --- a/docs/plans/core-decomposition-plan.md +++ b/docs/plans/core-decomposition-plan.md @@ -22,7 +22,7 @@ - Desktop、CLI、ACP 仍有路径通过 `bitfun-core/product-full` 获取完整产品能力；后续插件主线不能把该状态固化为新入口依赖。 - 工具 ABI、事件清单、运行时服务、智能体运行时、产品能力和插件 `disabled` / `projection-only` 基础边界已存在。 - `runtime-ports` 的插件主机 ABI 已有公开接口预算脚本；后续不能绕过预算新增插件、hook、event、UI 或生态兼容对象。 -- `opencode-adapter` 当前只可视为 fixture 兼容用例和来源视图验证，不是生产插件运行时。 +- `opencode-adapter` 当前只提供 projection-only 来源发现适配器，不是生产插件运行时。 ## 3. 当前差距 @@ -83,7 +83,7 @@ 验收： -- `cargo test -p bitfun-opencode-adapter opencode_fixture_contracts` +- `cargo test -p bitfun-opencode-adapter --test opencode_source_adapter` - 不要求用户安装 OpenCode CLI。 - 不继承 OpenCode 启用顺序、权限语义或运行时状态。 @@ -108,7 +108,7 @@ | 优先级 | 问题 | 方向 | |---|---|---| | P0 | 插件公开接口容易继续膨胀 | 公开接口预算必须声明接口切面、消费方、P0 场景、wire impact、退场条件 | -| P0 | OpenCode 适配可能成为内部模型 | 保持 `opencode-adapter` fixture-only，生产消费必须通过插件主机和扩展贡献接口 | +| P0 | OpenCode 适配可能成为内部模型 | 保持 `opencode-adapter` projection-only，生产消费必须通过插件主机和扩展贡献接口 | | P1 | `runtime-ports` 单文件仍宽 | 先按模块分组和预算护栏收口；只有真实迁移收益明确时再拆 crate | | P1 | `bitfun-core` 门面仍是事实大入口 | 新调用方不得依赖 `bitfun_core::agentic::*` / `service::*` 作为主路径 | | P1 | Product capability 与 tool provider group 存在双重建模 | 短期以 provider group id 作为组装边界；长期收敛到单一能力事实 | @@ -131,7 +131,8 @@ | docs / boundary / layout | `pnpm run check:repo-hygiene`，`node --test scripts/check-core-boundaries.test.mjs`，`node scripts/check-core-boundaries.mjs` | | 插件公开接口预算 | `node --test scripts/check-core-boundaries.test.mjs`，`node scripts/check-core-boundaries.mjs` | | 插件运行时主机 ABI | `cargo test -p bitfun-runtime-ports --test plugin_runtime_contracts`，`cargo test -p bitfun-runtime-ports --test plugin_runtime_host_contracts`，`cargo test -p bitfun-plugin-runtime-host` | -| OpenCode fixture 兼容用例 | `cargo test -p bitfun-opencode-adapter opencode_fixture_contracts` | +| OpenCode P0-C.1 host-path 来源发现 | `cargo test -p bitfun-opencode-adapter --test opencode_source_adapter` | +| OpenCode P0-C.2 私有 fixture 兼容保护 | `cargo test -p bitfun-opencode-adapter p0_c2_fixture` | | 产品形态 / SDK 最小可用性 | `cargo test -p bitfun-product-capabilities --test plugin_product_shape`，`cargo test -p bitfun-product-capabilities --test product_sdk_assembly`，`cargo metadata --no-deps --format-version 1` | | 大范围归属迁移 | `cargo check --workspace`，必要时补 focused test | diff --git a/scripts/core-boundaries/rules/crate-rules.mjs b/scripts/core-boundaries/rules/crate-rules.mjs index 7d269b276f..53c7a799d8 100644 --- a/scripts/core-boundaries/rules/crate-rules.mjs +++ b/scripts/core-boundaries/rules/crate-rules.mjs @@ -31,7 +31,7 @@ export const forbiddenManifestDependencyRules = [ workspaceManifestPath: 'Cargo.toml', allowManifestPaths: ['src/crates/adapters/opencode-adapter/Cargo.toml'], reason: - 'OpenCode adapter fixture must not become a production dependency before reviewed Plugin Runtime Host wiring', + 'OpenCode adapter must not become a production dependency before reviewed product source wiring', message: 'production manifests must not depend on bitfun-opencode-adapter; integrate OpenCode through the Plugin Runtime Host boundary', }, diff --git a/scripts/core-boundaries/rules/source/forbidden-rules.mjs b/scripts/core-boundaries/rules/source/forbidden-rules.mjs index a94efb8d89..cb016c2c19 100644 --- a/scripts/core-boundaries/rules/source/forbidden-rules.mjs +++ b/scripts/core-boundaries/rules/source/forbidden-rules.mjs @@ -4086,11 +4086,12 @@ export const forbiddenContentUnderRules = [ { path: 'src', reason: - 'OpenCode adapter fixture must not become a production dependency before reviewed Plugin Runtime Host wiring', + 'OpenCode adapter must not become a production dependency before reviewed product source wiring', patterns: [ { regex: /\b(?:use\s+bitfun_opencode_adapter\b|extern\s+crate\s+bitfun_opencode_adapter\b|bitfun_opencode_adapter::)/, + allowPaths: ['src/crates/adapters/opencode-adapter/tests/opencode_source_adapter.rs'], message: 'production crates must not import bitfun-opencode-adapter directly; integrate OpenCode through the Plugin Runtime Host boundary', }, @@ -4099,7 +4100,7 @@ export const forbiddenContentUnderRules = [ { path: 'BitFun-Installer/src-tauri', reason: - 'OpenCode adapter fixture must not become a production dependency before reviewed Plugin Runtime Host wiring', + 'OpenCode adapter must not become a production dependency before reviewed product source wiring', patterns: [ { regex: diff --git a/scripts/core-boundaries/rules/source/public-api-rules.mjs b/scripts/core-boundaries/rules/source/public-api-rules.mjs index dd99340732..ac69f6e7be 100644 --- a/scripts/core-boundaries/rules/source/public-api-rules.mjs +++ b/scripts/core-boundaries/rules/source/public-api-rules.mjs @@ -150,6 +150,30 @@ export const pluginRuntimeHostPublicApiEntries = [ ), ]; +function opencodeAdapterEntry(symbol, consumer) { + return { + symbol, + owner: 'opencode-adapter owner', + consumer, + verification: + 'opencode-adapter source adapter tests, PluginRuntimeHost integration path, and core-boundary public API budget checks', + p0: 'OpenCode-compatible P0-C.1 source discovery and diagnostics read model', + contractSlice: contractSlices.opencodeAdapterBoundary, + wireImpact: false, + rationale: + 'P0-C.1 needs one projection-only adapter factory for host-readable OpenCode-compatible sources without exposing ecosystem DTOs', + exit: + 'remove only if source discovery moves behind a reviewed product source registry with equivalent host tests', + }; +} + +export const opencodeAdapterPublicApiEntries = [ + opencodeAdapterEntry( + 'load_opencode_workspace_adapter', + 'PluginRuntimeHost::new integration tests and future product source loader host binding', + ), +]; + export const publicApiAllowlistRules = [ { path: 'src/crates/contracts/runtime-ports/src/plugin.rs', @@ -166,8 +190,8 @@ export const publicApiAllowlistRules = [ { path: 'src/crates/adapters/opencode-adapter/src/lib.rs', reason: - 'OpenCode adapter fixture contract must not expose public API before reviewed Plugin Runtime Host integration', - allowedSymbolEntries: [], + 'OpenCode adapter public API must stay limited to projection-only source loading through the Plugin Runtime Host adapter boundary', + allowedSymbolEntries: opencodeAdapterPublicApiEntries, }, { path: 'src/crates/execution/plugin-runtime-host/src/lib.rs', diff --git a/scripts/core-boundaries/self-test.mjs b/scripts/core-boundaries/self-test.mjs index 709bd57c32..624385456d 100644 --- a/scripts/core-boundaries/self-test.mjs +++ b/scripts/core-boundaries/self-test.mjs @@ -928,10 +928,29 @@ export function runManifestParserSelfTest({ throw new Error('plugin root re-export allowlist must match plugin module public budget'); } if (!opencodeAdapterPublicApiRule) { - throw new Error('OpenCode adapter fixture must have a public API budget rule'); + throw new Error('OpenCode adapter must have a public API budget rule'); } - if ((opencodeAdapterPublicApiRule.allowedSymbolEntries || []).length !== 0) { - throw new Error('OpenCode adapter fixture public API budget must stay empty'); + const opencodeAdapterPublicApiSymbols = ( + opencodeAdapterPublicApiRule.allowedSymbolEntries || [] + ).map((entry) => entry.symbol); + if ( + opencodeAdapterPublicApiSymbols.join(',') !== + 'load_opencode_workspace_adapter' + ) { + throw new Error('OpenCode adapter public API budget must stay limited to source adapter loading'); + } + for (const entry of opencodeAdapterPublicApiRule.allowedSymbolEntries) { + for (const field of ['owner', 'consumer', 'verification', 'p0', 'contractSlice', 'rationale', 'exit']) { + if (!entry[field]) { + throw new Error(`OpenCode adapter public API entry must declare ${field}: ${entry.symbol}`); + } + } + if (entry.contractSlice !== 'opencode-adapter-boundary') { + throw new Error(`OpenCode adapter public API entry uses wrong contractSlice: ${entry.symbol}`); + } + if (entry.wireImpact !== false) { + throw new Error(`OpenCode adapter public API entry must not claim wire impact: ${entry.symbol}`); + } } const appHostAbiRule = forbiddenContentUnderRules.find((rule) => rule.path === 'src/apps'); if (!appHostAbiRule) { @@ -954,7 +973,7 @@ export function runManifestParserSelfTest({ rule.dependencyNames?.includes('bitfun-opencode-adapter'), ); if (!opencodeManifestRule) { - throw new Error('OpenCode adapter fixture must have a forbidden manifest dependency rule'); + throw new Error('OpenCode adapter must have a forbidden manifest dependency rule'); } for (const scanRoot of ['src/apps', 'src/crates', 'BitFun-Installer/src-tauri']) { if (!opencodeManifestRule.scanRoots?.includes(scanRoot)) { @@ -972,7 +991,7 @@ export function runManifestParserSelfTest({ throw new Error('OpenCode adapter manifest guard must allow its own manifest'); } const opencodeSourceRules = forbiddenContentUnderRules.filter((rule) => - rule.reason.includes('OpenCode adapter fixture'), + rule.reason.includes('OpenCode adapter must not become a production dependency'), ); for (const scanRoot of ['src', 'BitFun-Installer/src-tauri']) { if (!opencodeSourceRules.some((rule) => rule.path === scanRoot)) { diff --git a/src/crates/adapters/AGENTS.md b/src/crates/adapters/AGENTS.md index b9c3d64f8f..07b83aad8d 100644 --- a/src/crates/adapters/AGENTS.md +++ b/src/crates/adapters/AGENTS.md @@ -13,7 +13,7 @@ services. |---|---|---| | `ai-adapters` | AI provider request/response adapters and stream protocol glue | [AGENTS.md](ai-adapters/AGENTS.md) | | `api-layer` | Backend API adapter surface shared by product hosts | [AGENTS.md](api-layer/AGENTS.md) | -| `opencode-adapter` | Fixture-only OpenCode config and local plugin source projection contracts | [AGENTS.md](opencode-adapter/AGENTS.md) | +| `opencode-adapter` | Projection-only OpenCode config and local plugin source adapter | [AGENTS.md](opencode-adapter/AGENTS.md) | | `transport` | Event transport emitters and host transport adapters | [AGENTS.md](transport/AGENTS.md) | | `webdriver` | Embedded WebDriver protocol and browser automation adapter | [AGENTS.md](webdriver/AGENTS.md) | diff --git a/src/crates/adapters/opencode-adapter/AGENTS-CN.md b/src/crates/adapters/opencode-adapter/AGENTS-CN.md index eca76d2d66..34c0f5a840 100644 --- a/src/crates/adapters/opencode-adapter/AGENTS-CN.md +++ b/src/crates/adapters/opencode-adapter/AGENTS-CN.md @@ -2,39 +2,39 @@ # OpenCode Adapter -本 crate 只拥有 fixture-only 的 OpenCode-compatible import projection 合同。它验证 -`opencode.json`、`.opencode/plugins/*.js|ts` 和 OpenCode 全局插件目录等导入形态， -并将其投影为测试使用的 BitFun plugin runtime 合同。它不得拥有产品策略、Host 生命周期、 -sandbox、UI implementation 或 effect materialization。 +本 crate 只拥有 projection-only 的 OpenCode-compatible 来源发现能力。它验证 +`opencode.json` 和 `.opencode/plugins/*.js|ts` 等导入形态，并通过窄 Plugin Runtime Host +adapter 暴露来源事实。它不得拥有产品策略、Host 生命周期、sandbox、UI implementation +或 effect materialization。 ## 产品来源边界 - BitFun plugin package/install sources 是生产插件加载入口。OpenCode config 是可选兼容导入源， 不是主插件注册表或运行时状态。 -- 导入 `opencode.json`、`.opencode/plugins/*.js|ts` 或 OpenCode 全局插件目录时，必须先生成 typed +- 导入 `opencode.json`、`.opencode/plugins/*.js|ts` 或未来 OpenCode 全局插件目录时，必须先生成 typed import facts、候选 BitFun plugin source records、manifest、hash、diagnostics 和 trust state， - 生产 consumer 才能使用。 + 产品来源加载路径才能启用或执行任何内容。 - 用户本机是否安装 `opencode` CLI 与加载 OpenCode-compatible 插件无关。与已安装 OpenCode binary 的 CLI/server 互操作属于 ACP/external-client 工作，不属于本 adapter 边界。 ## 边界规则 -- 依赖 `bitfun-runtime-ports` 等稳定合同，不依赖 `bitfun-core`、app crate、Tauri API、产品 UI - 或 concrete service manager。 -- OpenCode config JSON import、workspace plugin import 和 global plugin import parsing 只能停留在本 - crate 的 fixture 测试中。一旦引入评审后的生产 consumer，跨 crate 输出必须是 typed - `PluginRuntimeReadResponse`、`PluginResponseEnvelope`、diagnostics、permission prompts - 和 effect candidates。 +- 依赖 `bitfun-runtime-ports` 等稳定合同和 `PluginHostAdapter` 边界 trait，不依赖 + `bitfun-core`、app crate、Tauri API、产品 UI 或 concrete service manager。 +- OpenCode config JSON import 和 workspace plugin import parsing 保留在本 crate 内。跨 crate + 输出必须通过 `load_opencode_workspace_adapter` 和 Plugin Runtime Host DTO，不得把 OpenCode 原始 JSON + 或源码语法暴露为产品合同。 - 未支持的 OpenCode 能力必须显式返回 diagnostic 或 typed unsupported candidate，不得静默忽略。 -- 当前 public API budget 为空。在评审后的 Plugin Runtime Host integration 引入真实 consumer 前， - 本 crate 只拥有 fixture-scoped projection 测试。 +- 当前 public API budget 只允许 `load_opencode_workspace_adapter`。新增公开符号必须同步预算、 + 当前消费方和聚焦 host-path 测试。 - 本 crate 可以提供私有 OpenCode compatibility import projectors 和 contract fixtures 用于 adapter 验证， 但不得实现 `PluginRuntimeClient`，不得声明 executable availability，也不得成为 runtime host。 Product Assembly 只能通过评审后的 Plugin Runtime Host 路径决定 host binding。 -- 在 host integration PR 通过评审并移除临时边界规则前，生产 crate 不得直接导入 +- 在评审后的产品来源加载路径通过 Plugin Runtime Host 边界接入前，生产 crate 不得直接导入 `bitfun_opencode_adapter`。 ## 验证 -- `cargo test -p bitfun-opencode-adapter opencode_fixture_contracts` +- `cargo test -p bitfun-opencode-adapter --test opencode_source_adapter` +- `cargo test -p bitfun-opencode-adapter p0_c2_fixture` - `node scripts/check-core-boundaries.mjs` diff --git a/src/crates/adapters/opencode-adapter/AGENTS.md b/src/crates/adapters/opencode-adapter/AGENTS.md index ae399b25df..44f4c3d086 100644 --- a/src/crates/adapters/opencode-adapter/AGENTS.md +++ b/src/crates/adapters/opencode-adapter/AGENTS.md @@ -2,50 +2,50 @@ # OpenCode Adapter -This crate owns fixture-only OpenCode-compatible import projection contracts. -It validates OpenCode import shapes such as `opencode.json`, -`.opencode/plugins/*.js|ts`, and OpenCode global plugin directories, then -projects them into BitFun plugin runtime contracts for tests. It must not own -product policy, host lifecycle, sandboxing, UI implementation, or effect -materialization. +This crate owns projection-only OpenCode-compatible source discovery. It +validates OpenCode import shapes such as `opencode.json` and +`.opencode/plugins/*.js|ts`, then exposes the resulting source facts through a +narrow Plugin Runtime Host adapter. It must not own product policy, host +lifecycle, sandboxing, UI implementation, or effect materialization. Product-source boundary: - BitFun plugin package/install sources are the production entry point for plugin loading. OpenCode config is an optional compatibility import source, not the primary plugin registry or runtime state. -- Importing `opencode.json`, `.opencode/plugins/*.js|ts`, or OpenCode global - plugin directories must produce typed import facts, candidate BitFun plugin - source records, manifests, hashes, diagnostics, and trust state before a - production consumer can use them. +- Importing `opencode.json`, `.opencode/plugins/*.js|ts`, or future OpenCode + global plugin directories must produce typed import facts, candidate BitFun + plugin source records, manifests, hashes, diagnostics, and trust state before + a product source loader can enable or execute anything. - The user's local `opencode` CLI installation is unrelated to loading OpenCode-compatible plugins. CLI/server interop with an installed OpenCode binary belongs to ACP/external-client work, not this adapter boundary. ## Boundary Rules -- Depend on stable contracts such as `bitfun-runtime-ports`, not `bitfun-core`, - app crates, Tauri APIs, product UI, or concrete service managers. -- Keep OpenCode config JSON import, workspace plugin import, and global plugin - import parsing inside fixture tests in this crate. Cross-crate outputs must be typed - `PluginRuntimeReadResponse`, `PluginResponseEnvelope`, diagnostics, - permission prompts, and effect candidates once a reviewed production consumer - exists. +- Depend on stable contracts such as `bitfun-runtime-ports` and the + `PluginHostAdapter` boundary trait, not `bitfun-core`, app crates, Tauri + APIs, product UI, or concrete service managers. +- Keep OpenCode config JSON import and workspace plugin import parsing inside + this crate. Cross-crate outputs must go through `load_opencode_workspace_adapter` + and Plugin Runtime Host DTOs; do not expose raw OpenCode JSON or source + syntax as product contracts. - Unsupported OpenCode capabilities must be explicit diagnostics or typed unsupported candidates. Do not silently ignore them. -- Current public API budget is empty. This crate owns fixture-scoped projection - tests only until a reviewed Plugin Runtime Host integration introduces a real - consumer. +- The public API budget is limited to `load_opencode_workspace_adapter`. New + public symbols require an updated public API budget, current consumer, and + focused host-path tests. - This crate may provide private OpenCode compatibility import projectors and contract fixtures for adapter validation, but it must not implement `PluginRuntimeClient`, declare executable availability, or become the runtime host. Product Assembly decides host binding through the reviewed Plugin Runtime Host path. -- Production crates must not import `bitfun_opencode_adapter` directly until the - host integration PR removes the temporary boundary guard with a reviewed - consumer path. +- Production crates must not import `bitfun_opencode_adapter` directly until a + reviewed product source loader wires it through the Plugin Runtime Host + boundary. ## Verification -- `cargo test -p bitfun-opencode-adapter opencode_fixture_contracts` +- `cargo test -p bitfun-opencode-adapter --test opencode_source_adapter` +- `cargo test -p bitfun-opencode-adapter p0_c2_fixture` - `node scripts/check-core-boundaries.mjs` diff --git a/src/crates/adapters/opencode-adapter/Cargo.toml b/src/crates/adapters/opencode-adapter/Cargo.toml index c12d0de761..6e55e29ad3 100644 --- a/src/crates/adapters/opencode-adapter/Cargo.toml +++ b/src/crates/adapters/opencode-adapter/Cargo.toml @@ -3,16 +3,21 @@ name = "bitfun-opencode-adapter" version.workspace = true authors.workspace = true edition.workspace = true -description = "Fixture-only OpenCode source projection contracts for BitFun" +description = "Projection-only OpenCode-compatible source adapter for BitFun" [lib] name = "bitfun_opencode_adapter" crate-type = ["rlib"] -[dev-dependencies] +[dependencies] +async-trait = { workspace = true } +bitfun-plugin-runtime-host = { path = "../../execution/plugin-runtime-host" } bitfun-runtime-ports = { path = "../../contracts/runtime-ports" } hex = { workspace = true } serde = { workspace = true } serde_json = { workspace = true } sha2 = { workspace = true } thiserror = { workspace = true } + +[dev-dependencies] +tokio = { workspace = true } diff --git a/src/crates/adapters/opencode-adapter/src/fixture_contracts.rs b/src/crates/adapters/opencode-adapter/src/fixture_contracts.rs deleted file mode 100644 index cac975bdff..0000000000 --- a/src/crates/adapters/opencode-adapter/src/fixture_contracts.rs +++ /dev/null @@ -1,943 +0,0 @@ -//! OpenCode-compatible source fixture projection. -//! -//! The fixture covers real OpenCode input shapes: `opencode.json` npm plugin -//! entries and project-local `.opencode/plugins/*.ts` source files. It does not -//! execute JavaScript or implement a Plugin Runtime Host. - -use bitfun_runtime_ports::{ - PermissionPromptDenyState, PermissionPromptDescriptor, PermissionPromptEffectKind, - PluginArtifactRef, PluginAuditRef, PluginCapabilityRef, PluginConfigValidationState, - PluginConfigValidationStatus, PluginDataClassification, PluginDiagnostic, - PluginDiagnosticDetail, PluginDiagnosticSeverity, PluginDispatchEnvelope, - PluginEffectCandidate, PluginEffectCandidatePayload, PluginManifestRef, PluginOwnerKind, - PluginOwnerRef, PluginPermissionGate, PluginResponseEnvelope, PluginRiskLevel, - PluginRollbackMode, PluginRollbackPolicy, PluginRuntimeAvailability, PluginRuntimeReadRequest, - PluginRuntimeReadResponse, PluginRuntimeUnavailableReason, PluginSourceKind, PluginSourceRef, - PluginStatusKind, PluginStatusSnapshot, PluginTargetRef, PluginTrustLevel, PortError, - PortErrorKind, PortResult, -}; -use serde::Deserialize; -use sha2::{Digest, Sha256}; - -const OPENCODE_ADAPTER_ID: &str = "opencode-compatible"; -const OPENCODE_CONFIG_SCHEMA: &str = "https://opencode.ai/config.json"; -const OPENCODE_LOCAL_PLUGIN_SCHEMA_VERSION: &str = "opencode.plugin.module.ts"; -const PLUGIN_EFFECT_SCHEMA_VERSION: &str = "plugin.effect.v1"; -const CUSTOM_TOOL_CONTRACT_ID: &str = "opencode.custom-tool.v1"; -const CUSTOM_TOOL_EXTENSION_POINT: &str = "tool"; - -const UNSUPPORTED_HOOK_EVENTS: &[&str] = &[ - "command.executed", - "permission.asked", - "permission.replied", - "session.compacted", - "shell.env", - "tool.execute.after", - "tool.execute.before", - "tui.toast.show", -]; - -#[derive(Debug, thiserror::Error)] -enum OpenCodeAdapterError { - #[error("invalid OpenCode config JSON: {0}")] - Json(#[from] serde_json::Error), - #[error("invalid OpenCode config field {field}: {message}")] - InvalidConfig { - field: &'static str, - message: String, - }, - #[error("invalid OpenCode plugin source field {field}: {message}")] - InvalidPluginSource { - field: &'static str, - message: String, - }, -} - -#[derive(Debug, Clone, PartialEq, Eq)] -struct OpenCodeAdapterSource { - config_uri: String, - local_plugin_path: String, - trust_level: PluginTrustLevel, - observed_at_ms: u64, -} - -impl OpenCodeAdapterSource { - fn project_local( - config_uri: impl Into, - local_plugin_path: impl Into, - trust_level: PluginTrustLevel, - observed_at_ms: u64, - ) -> Self { - Self { - config_uri: config_uri.into(), - local_plugin_path: local_plugin_path.into(), - trust_level, - observed_at_ms, - } - } -} - -#[derive(Debug, Clone)] -struct OpenCodeSourceProjection { - config: OpenCodeConfig, - local_plugin: OpenCodeLocalPlugin, - source: PluginSourceRef, - observed_at_ms: u64, -} - -impl OpenCodeSourceProjection { - fn from_opencode_sources( - config_json: &str, - local_plugin_source: &str, - source: OpenCodeAdapterSource, - ) -> Result { - let config_doc: OpenCodeConfigDoc = serde_json::from_str(config_json)?; - let mut config = OpenCodeConfig::try_from_doc(config_doc)?; - config.config_uri = source.config_uri.clone(); - let local_plugin = - OpenCodeLocalPlugin::from_source(&source.local_plugin_path, local_plugin_source)?; - let source_ref = PluginSourceRef { - plugin_id: local_plugin.plugin_id.clone(), - source_kind: PluginSourceKind::OpenCodeCompatible, - source: format!("file://{}", source.local_plugin_path), - version: None, - content_hash: sha256_content_hash(local_plugin_source), - trust_level: source.trust_level, - manifest: Some(PluginManifestRef { - manifest_id: format!( - "{}:{}", - local_plugin.plugin_id, OPENCODE_LOCAL_PLUGIN_SCHEMA_VERSION - ), - schema_version: OPENCODE_LOCAL_PLUGIN_SCHEMA_VERSION.to_string(), - path: Some(source.local_plugin_path.clone()), - }), - }; - - Ok(Self { - config, - local_plugin, - source: source_ref, - observed_at_ms: source.observed_at_ms, - }) - } - - fn source_ref(&self) -> &PluginSourceRef { - &self.source - } - - fn project_read_model( - &self, - request: PluginRuntimeReadRequest, - ) -> PortResult { - if !request.plugin_ids.is_empty() - && !request - .plugin_ids - .iter() - .any(|plugin_id| plugin_id == &self.source.plugin_id) - { - return Ok(PluginRuntimeReadResponse { - request_id: request.request_id, - project_domain_id: request.project_domain_id, - workspace_id: request.workspace_id, - sources: Vec::new(), - plugin_statuses: Vec::new(), - diagnostics: Vec::new(), - observed_epochs: request.epochs, - }); - } - - let diagnostics = self.read_diagnostics(); - let diagnostic_ids = diagnostics - .iter() - .map(|diagnostic| diagnostic.diagnostic_id.clone()) - .collect(); - let (availability, status) = self.trust_status(); - - Ok(PluginRuntimeReadResponse { - request_id: request.request_id, - project_domain_id: request.project_domain_id, - workspace_id: request.workspace_id, - sources: vec![self.source.clone()], - plugin_statuses: vec![self.status_snapshot( - availability, - request.include_config_validation, - status, - diagnostic_ids, - )], - diagnostics, - observed_epochs: request.epochs, - }) - } - - fn project_dispatch_response( - &self, - envelope: PluginDispatchEnvelope, - ) -> PortResult { - if envelope.source.plugin_id != self.source.plugin_id { - return Err(PortError::new( - PortErrorKind::NotFound, - format!( - "OpenCode source {} is not loaded by this fixture", - envelope.source.plugin_id - ), - )); - } - - if self.source.trust_level != PluginTrustLevel::Trusted { - return Ok(self.response( - &envelope, - Vec::new(), - vec![self.trust_diagnostic()], - self.trust_status().1, - )); - } - - let (effects, diagnostics) = if envelope.extension_point_id == CUSTOM_TOOL_EXTENSION_POINT { - ( - self.local_plugin - .custom_tools - .iter() - .map(|tool| self.provider_candidate_effect(&envelope, tool)) - .collect(), - Vec::new(), - ) - } else { - ( - Vec::new(), - vec![self.unsupported_hook_diagnostic(&envelope.extension_point_id)], - ) - }; - - let status = PluginStatusKind::ProjectionOnly; - Ok(self.response(&envelope, effects, diagnostics, status)) - } - - fn read_diagnostics(&self) -> Vec { - let mut diagnostics = Vec::new(); - if self.source.trust_level != PluginTrustLevel::Trusted { - diagnostics.push(self.trust_diagnostic()); - } - diagnostics.extend( - self.config - .npm_plugins - .iter() - .map(|package| self.npm_package_diagnostic(package)), - ); - diagnostics.extend( - self.local_plugin - .unsupported_hooks - .iter() - .map(|hook| self.unsupported_hook_diagnostic(hook)), - ); - diagnostics - } - - fn trust_status(&self) -> (PluginRuntimeAvailability, PluginStatusKind) { - match self.source.trust_level { - PluginTrustLevel::Trusted => ( - PluginRuntimeAvailability::projection_only( - PluginRuntimeUnavailableReason::HostUnavailable, - ), - PluginStatusKind::ProjectionOnly, - ), - PluginTrustLevel::Unknown => ( - PluginRuntimeAvailability::projection_only( - PluginRuntimeUnavailableReason::DisabledByPolicy, - ), - PluginStatusKind::TrustRequired, - ), - PluginTrustLevel::Denied | PluginTrustLevel::Revoked => ( - PluginRuntimeAvailability::disabled( - PluginRuntimeUnavailableReason::DisabledByPolicy, - ), - PluginStatusKind::Disabled, - ), - _ => ( - PluginRuntimeAvailability::projection_only( - PluginRuntimeUnavailableReason::DisabledByPolicy, - ), - PluginStatusKind::TrustRequired, - ), - } - } - - fn status_snapshot( - &self, - availability: PluginRuntimeAvailability, - include_config_validation: bool, - status: PluginStatusKind, - diagnostic_ids: Vec, - ) -> PluginStatusSnapshot { - PluginStatusSnapshot { - source: self.source.clone(), - status, - availability, - config_validation: include_config_validation.then(|| PluginConfigValidationState { - status: PluginConfigValidationStatus::Valid, - issues: Vec::new(), - }), - quarantine: None, - diagnostic_ids, - updated_at_ms: self.observed_at_ms, - } - } - - fn response( - &self, - envelope: &PluginDispatchEnvelope, - effects: Vec, - diagnostics: Vec, - status: PluginStatusKind, - ) -> PluginResponseEnvelope { - let diagnostic_ids = diagnostics - .iter() - .map(|diagnostic| diagnostic.diagnostic_id.clone()) - .collect(); - - let availability = self.trust_status().0; - - PluginResponseEnvelope { - envelope_version: envelope.envelope_version, - request_event_id: envelope.event_id.clone(), - project_domain_id: envelope.project_domain_id.clone(), - workspace_id: envelope.workspace_id.clone(), - adapter_id: OPENCODE_ADAPTER_ID.to_string(), - plugin_id: Some(self.source.plugin_id.clone()), - completed_at_ms: self.observed_at_ms, - effects, - diagnostics, - quarantine: None, - plugin_statuses: vec![self.status_snapshot( - availability, - false, - status, - diagnostic_ids, - )], - observed_epochs: envelope.epochs, - } - } - - fn provider_candidate_effect( - &self, - envelope: &PluginDispatchEnvelope, - tool: &OpenCodeCustomTool, - ) -> PluginEffectCandidate { - let audit = audit_ref(envelope); - let target = tool.target_ref(&self.source.plugin_id); - let permission = PluginPermissionGate::PermissionRequired { - prompt: self.permission_prompt(envelope, tool, target.clone(), audit.clone()), - }; - - PluginEffectCandidate { - effect_id: format!( - "{}:{}:{}", - envelope.event_id, self.source.plugin_id, tool.id - ), - schema_version: PLUGIN_EFFECT_SCHEMA_VERSION.to_string(), - declared_capability: tool.capability_ref(), - target_ref: target, - data_classification: PluginDataClassification::Workspace, - risk_level: PluginRiskLevel::Medium, - permission, - source_ref: self.source.clone(), - payload: PluginEffectCandidatePayload::ProviderCandidate { - provider_id: tool.provider_id(&self.source.plugin_id), - tool_contract_id: tool.tool_contract_id.clone(), - }, - } - } - - fn permission_prompt( - &self, - envelope: &PluginDispatchEnvelope, - tool: &OpenCodeCustomTool, - target: PluginTargetRef, - audit: PluginAuditRef, - ) -> PermissionPromptDescriptor { - PermissionPromptDescriptor { - descriptor_version: 1, - prompt_id: format!( - "prompt:{}:{}:{}", - self.source.plugin_id, tool.id, envelope.event_id - ), - plugin: self.source.clone(), - requested_capability: tool.capability_ref(), - requested_effect: PermissionPromptEffectKind::ProviderCandidate, - target, - risk_level: PluginRiskLevel::Medium, - owner: tool.capability_ref().owner, - rollback: PluginRollbackPolicy { - mode: PluginRollbackMode::DisablePlugin, - reason_ref: Some(format!("audit:{}", envelope.event_id)), - }, - deny_state: PermissionPromptDenyState::CandidateDiscarded, - audit, - } - } - - fn npm_package_diagnostic(&self, package: &str) -> PluginDiagnostic { - PluginDiagnostic { - diagnostic_id: format!("diag:{}:npm:{package}", self.source.plugin_id), - severity: PluginDiagnosticSeverity::Info, - source: self.source.clone(), - code: "opencode.npm_plugin_projection_only".to_string(), - message: format!( - "OpenCode npm plugin is present in opencode.json but is not installed or executed by this fixture: {package}" - ), - detail: PluginDiagnosticDetail::Manifest { - manifest: PluginManifestRef { - manifest_id: "opencode.config".to_string(), - schema_version: OPENCODE_CONFIG_SCHEMA.to_string(), - path: Some(self.config.config_uri.clone()), - }, - }, - audit: PluginAuditRef { - correlation_id: format!("config:{}", self.source.plugin_id), - event_id: None, - }, - retryable: false, - } - } - - fn unsupported_hook_diagnostic(&self, hook: &str) -> PluginDiagnostic { - PluginDiagnostic { - diagnostic_id: format!("diag:{}:hook:{hook}", self.source.plugin_id), - severity: PluginDiagnosticSeverity::Warning, - source: self.source.clone(), - code: "opencode.hook_projection_only".to_string(), - message: format!( - "OpenCode hook is discovered but cannot run before Plugin Runtime Host integration: {hook}" - ), - detail: PluginDiagnosticDetail::Adapter { - adapter_id: OPENCODE_ADAPTER_ID.to_string(), - }, - audit: PluginAuditRef { - correlation_id: format!("plugin-source:{}", self.source.plugin_id), - event_id: None, - }, - retryable: false, - } - } - - fn trust_diagnostic(&self) -> PluginDiagnostic { - PluginDiagnostic { - diagnostic_id: format!("diag:{}:trust", self.source.plugin_id), - severity: if self.source.trust_level == PluginTrustLevel::Unknown { - PluginDiagnosticSeverity::Warning - } else { - PluginDiagnosticSeverity::Error - }, - source: self.source.clone(), - code: "opencode.trust_required".to_string(), - message: "OpenCode plugin source is not trusted for projection".to_string(), - detail: PluginDiagnosticDetail::Trust { - trust_level: self.source.trust_level, - }, - audit: PluginAuditRef { - correlation_id: format!("trust:{}", self.source.plugin_id), - event_id: None, - }, - retryable: false, - } - } -} - -#[derive(Debug, Clone, PartialEq, Eq)] -struct OpenCodeConfig { - config_uri: String, - npm_plugins: Vec, -} - -impl OpenCodeConfig { - fn try_from_doc(doc: OpenCodeConfigDoc) -> Result { - if doc.schema.as_deref() != Some(OPENCODE_CONFIG_SCHEMA) { - return Err(OpenCodeAdapterError::InvalidConfig { - field: "$schema", - message: format!("expected {OPENCODE_CONFIG_SCHEMA}"), - }); - } - - let mut npm_plugins = Vec::new(); - for package in doc.plugin { - let package = package.trim().to_string(); - if package.is_empty() { - return Err(OpenCodeAdapterError::InvalidConfig { - field: "plugin", - message: "package names must not be empty".to_string(), - }); - } - npm_plugins.push(package); - } - - Ok(Self { - config_uri: "opencode.json".to_string(), - npm_plugins, - }) - } -} - -#[derive(Debug, Deserialize)] -struct OpenCodeConfigDoc { - #[serde(rename = "$schema")] - schema: Option, - #[serde(default)] - plugin: Vec, -} - -#[derive(Debug, Clone, PartialEq, Eq)] -struct OpenCodeLocalPlugin { - plugin_id: String, - export_name: String, - custom_tools: Vec, - unsupported_hooks: Vec, -} - -impl OpenCodeLocalPlugin { - fn from_source(path: &str, source: &str) -> Result { - let export_name = - exported_plugin_name(source).ok_or(OpenCodeAdapterError::InvalidPluginSource { - field: "plugin.export", - message: "expected an exported OpenCode plugin function".to_string(), - })?; - let custom_tools = discover_custom_tools(source); - let unsupported_hooks = discover_unsupported_hooks(source); - if custom_tools.is_empty() && unsupported_hooks.is_empty() { - return Err(OpenCodeAdapterError::InvalidPluginSource { - field: "plugin.contributions", - message: "expected a custom tool or hook contribution".to_string(), - }); - } - - Ok(Self { - plugin_id: format!("opencode.local.{}", path_stem(path)), - export_name, - custom_tools, - unsupported_hooks, - }) - } -} - -#[derive(Debug, Clone, PartialEq, Eq)] -struct OpenCodeCustomTool { - id: String, - tool_contract_id: String, -} - -impl OpenCodeCustomTool { - fn provider_id(&self, plugin_id: &str) -> String { - format!("{plugin_id}.{}", self.id) - } - - fn target_ref(&self, plugin_id: &str) -> PluginTargetRef { - let target_id = self.provider_id(plugin_id); - PluginTargetRef { - target_kind: "opencode_custom_tool".to_string(), - target_id: target_id.clone(), - display_name: self.id.clone(), - artifact: Some(PluginArtifactRef { - artifact_id: format!("{plugin_id}:{}:source", self.id), - artifact_kind: "opencode_plugin_source".to_string(), - display_name: self.id.clone(), - uri: Some(format!("bitfun://plugins/{plugin_id}/tools/{target_id}")), - }), - } - } - - fn capability_ref(&self) -> PluginCapabilityRef { - PluginCapabilityRef { - capability_id: "opencode.custom_tool".to_string(), - owner: PluginOwnerRef { - kind: PluginOwnerKind::ExtensionContract, - id: "opencode.custom-tools".to_string(), - }, - } - } -} - -fn exported_plugin_name(source: &str) -> Option { - source.lines().find_map(|line| { - let rest = line.trim().strip_prefix("export const ")?; - let name = rest - .split(|ch: char| ch == ':' || ch == '=' || ch.is_whitespace()) - .next()?; - is_identifier(name).then(|| name.to_string()) - }) -} - -fn discover_custom_tools(source: &str) -> Vec { - source - .lines() - .filter_map(|line| { - let (name, rest) = line.trim().split_once(':')?; - rest.trim_start() - .starts_with("tool({") - .then(|| name.trim()) - .filter(|candidate| is_identifier(candidate)) - .map(|id| OpenCodeCustomTool { - id: id.to_string(), - tool_contract_id: CUSTOM_TOOL_CONTRACT_ID.to_string(), - }) - }) - .collect() -} - -fn discover_unsupported_hooks(source: &str) -> Vec { - UNSUPPORTED_HOOK_EVENTS - .iter() - .filter(|event| { - source.contains(&format!("\"{event}\"")) || source.contains(&format!("'{event}'")) - }) - .map(|event| (*event).to_string()) - .collect() -} - -fn is_identifier(value: &str) -> bool { - let mut chars = value.chars(); - matches!(chars.next(), Some(first) if first == '_' || first.is_ascii_alphabetic()) - && chars.all(|ch| ch == '_' || ch.is_ascii_alphanumeric()) -} - -fn path_stem(path: &str) -> String { - path.rsplit(['/', '\\']) - .next() - .and_then(|file| file.split('.').next()) - .unwrap_or("plugin") - .replace('-', "_") -} - -fn sha256_content_hash(value: &str) -> String { - let mut hasher = Sha256::new(); - hasher.update(value.as_bytes()); - format!("sha256:{}", hex::encode(hasher.finalize())) -} - -fn audit_ref(envelope: &PluginDispatchEnvelope) -> PluginAuditRef { - PluginAuditRef { - correlation_id: envelope.correlation_id.clone(), - event_id: Some(envelope.event_id.clone()), - } -} - -#[cfg(test)] -mod opencode_fixture_contracts { - use super::*; - use bitfun_runtime_ports::{ - PermissionPromptDenyState, PermissionPromptEffectKind, PluginPayloadRedaction, - PluginPayloadRef, PluginRuntimeEpochs, - }; - - const CONFIG: &str = include_str!("../tests/fixtures/opencode-example/opencode.json"); - const LOCAL_PLUGIN_PATH: &str = ".opencode/plugins/workspace-tools.ts"; - const LOCAL_PLUGIN_SOURCE: &str = - include_str!("../tests/fixtures/opencode-example/.opencode/plugins/workspace-tools.ts"); - - fn adapter(trust_level: PluginTrustLevel) -> OpenCodeSourceProjection { - OpenCodeSourceProjection::from_opencode_sources( - CONFIG, - LOCAL_PLUGIN_SOURCE, - OpenCodeAdapterSource::project_local( - "file:///project/opencode.json", - LOCAL_PLUGIN_PATH, - trust_level, - 1_720_000_001, - ), - ) - .expect("OpenCode fixture sources should parse") - } - - fn epochs() -> PluginRuntimeEpochs { - PluginRuntimeEpochs { - project_epoch: 7, - trust_epoch: 3, - policy_epoch: 5, - tool_registry_epoch: Some(11), - } - } - - fn capability_ref() -> PluginCapabilityRef { - PluginCapabilityRef { - capability_id: "opencode.custom_tool".to_string(), - owner: PluginOwnerRef { - kind: PluginOwnerKind::ExtensionContract, - id: "opencode.custom-tools".to_string(), - }, - } - } - - fn envelope( - adapter: &OpenCodeSourceProjection, - extension_point_id: &str, - ) -> PluginDispatchEnvelope { - PluginDispatchEnvelope { - envelope_version: 1, - event_id: format!("event-{extension_point_id}"), - event_type: "agent.turn.completed".to_string(), - event_version: "2026-07-07".to_string(), - project_domain_id: "project-1".to_string(), - workspace_id: "workspace-1".to_string(), - extension_point_id: extension_point_id.to_string(), - source: adapter.source_ref().clone(), - declared_capability: capability_ref(), - correlation_id: "corr-1".to_string(), - causation_id: None, - idempotency_key: format!("event-{extension_point_id}:{extension_point_id}"), - deadline_ms: 30_000, - epochs: epochs(), - payload_ref: Some(PluginPayloadRef { - payload_id: "payload-1".to_string(), - schema_version: "agent.turn.completed.v1".to_string(), - data_classification: PluginDataClassification::Workspace, - redaction: PluginPayloadRedaction::Partial, - uri: Some("bitfun://payloads/payload-1".to_string()), - }), - } - } - - #[test] - fn projects_real_opencode_config_and_local_plugin_source() { - let adapter = adapter(PluginTrustLevel::Trusted); - - assert_eq!( - adapter.config.npm_plugins, - ["opencode-wakatime", "@my-org/custom-plugin"] - ); - assert_eq!(adapter.local_plugin.export_name, "WorkspaceToolsPlugin"); - assert_eq!(adapter.local_plugin.custom_tools[0].id, "workspaceSummary"); - assert_eq!( - adapter.local_plugin.unsupported_hooks, - ["tool.execute.before"] - ); - - let response = adapter - .project_read_model(PluginRuntimeReadRequest { - request_id: "read-1".to_string(), - project_domain_id: "project-1".to_string(), - workspace_id: "workspace-1".to_string(), - plugin_ids: vec!["opencode.local.workspace_tools".to_string()], - include_config_validation: true, - epochs: epochs(), - }) - .expect("project read model"); - - assert_eq!(response.sources.len(), 1); - assert_eq!( - response.sources[0].plugin_id, - "opencode.local.workspace_tools" - ); - assert_eq!( - response.sources[0].source_kind, - PluginSourceKind::OpenCodeCompatible - ); - assert!(response.sources[0].content_hash.starts_with("sha256:")); - assert_eq!( - response.plugin_statuses[0].status, - PluginStatusKind::ProjectionOnly - ); - assert_eq!( - response.plugin_statuses[0].availability, - PluginRuntimeAvailability::ProjectionOnly { - reason: PluginRuntimeUnavailableReason::HostUnavailable - } - ); - assert!(response.plugin_statuses[0] - .config_validation - .as_ref() - .expect("config validation") - .issues - .is_empty()); - assert_eq!(response.diagnostics.len(), 3); - assert!(response - .diagnostics - .iter() - .any(|diagnostic| diagnostic.code == "opencode.npm_plugin_projection_only")); - assert!(response - .diagnostics - .iter() - .any(|diagnostic| diagnostic.code == "opencode.hook_projection_only")); - } - - #[test] - fn projects_custom_tool_candidate_with_permission_prompt() { - let adapter = adapter(PluginTrustLevel::Trusted); - let response = adapter - .project_dispatch_response(envelope(&adapter, CUSTOM_TOOL_EXTENSION_POINT)) - .expect("project dispatch response"); - - assert_eq!(response.adapter_id, OPENCODE_ADAPTER_ID); - assert_eq!( - response.plugin_id.as_deref(), - Some("opencode.local.workspace_tools") - ); - assert_eq!(response.effects.len(), 1); - assert!(response.diagnostics.is_empty()); - assert_eq!( - response.plugin_statuses[0].status, - PluginStatusKind::ProjectionOnly - ); - assert_eq!( - response.plugin_statuses[0].availability, - PluginRuntimeAvailability::ProjectionOnly { - reason: PluginRuntimeUnavailableReason::HostUnavailable - } - ); - - let effect = &response.effects[0]; - assert_eq!( - effect.declared_capability.capability_id, - "opencode.custom_tool" - ); - assert_eq!( - effect.target_ref.target_id, - "opencode.local.workspace_tools.workspaceSummary" - ); - assert_eq!( - effect.source_ref.plugin_id, - "opencode.local.workspace_tools" - ); - assert!(effect.source_ref.content_hash.starts_with("sha256:")); - assert_eq!( - effect.data_classification, - PluginDataClassification::Workspace - ); - assert_eq!(response.observed_epochs.tool_registry_epoch, Some(11)); - - match &effect.payload { - PluginEffectCandidatePayload::ProviderCandidate { - provider_id, - tool_contract_id, - } => { - assert_eq!( - provider_id, - "opencode.local.workspace_tools.workspaceSummary" - ); - assert_eq!(tool_contract_id, "opencode.custom-tool.v1"); - } - other => panic!("expected provider candidate, got {other:?}"), - } - - match &effect.permission { - PluginPermissionGate::PermissionRequired { prompt } => { - assert_eq!(prompt.plugin.plugin_id, "opencode.local.workspace_tools"); - assert_eq!( - prompt.requested_effect, - PermissionPromptEffectKind::ProviderCandidate - ); - assert_eq!( - prompt.target.target_id, - "opencode.local.workspace_tools.workspaceSummary" - ); - assert_eq!(prompt.owner.kind, PluginOwnerKind::ExtensionContract); - assert_eq!( - prompt.deny_state, - PermissionPromptDenyState::CandidateDiscarded - ); - assert_eq!(prompt.audit.event_id.as_deref(), Some("event-tool")); - } - other => panic!("expected permission prompt, got {other:?}"), - } - } - - #[test] - fn untrusted_source_stays_readable_but_projects_no_effects() { - let adapter = adapter(PluginTrustLevel::Unknown); - - let read = adapter - .project_read_model(PluginRuntimeReadRequest { - request_id: "read-trust".to_string(), - project_domain_id: "project-1".to_string(), - workspace_id: "workspace-1".to_string(), - plugin_ids: vec!["opencode.local.workspace_tools".to_string()], - include_config_validation: true, - epochs: epochs(), - }) - .expect("project read model"); - - assert_eq!( - read.plugin_statuses[0].status, - PluginStatusKind::TrustRequired - ); - assert!(read - .diagnostics - .iter() - .any(|diagnostic| diagnostic.code == "opencode.trust_required")); - - let response = adapter - .project_dispatch_response(envelope(&adapter, CUSTOM_TOOL_EXTENSION_POINT)) - .expect("project dispatch response"); - - assert!(response.effects.is_empty()); - assert_eq!( - response.plugin_statuses[0].status, - PluginStatusKind::TrustRequired - ); - assert_eq!(response.diagnostics[0].code, "opencode.trust_required"); - } - - #[test] - fn unsupported_opencode_hook_projects_typed_diagnostic_without_effect() { - let adapter = adapter(PluginTrustLevel::Trusted); - let response = adapter - .project_dispatch_response(envelope(&adapter, "tool.execute.before")) - .expect("project dispatch response"); - - assert!(response.effects.is_empty()); - assert_eq!( - response.diagnostics[0].code, - "opencode.hook_projection_only" - ); - assert_eq!( - response.diagnostics[0].source.plugin_id, - "opencode.local.workspace_tools" - ); - assert_eq!( - response.plugin_statuses[0].status, - PluginStatusKind::ProjectionOnly - ); - } - - #[test] - fn invalid_opencode_config_fails_before_projection() { - let error = OpenCodeSourceProjection::from_opencode_sources( - r#"{"$schema":"https://example.invalid/config.json","plugin":[]}"#, - LOCAL_PLUGIN_SOURCE, - OpenCodeAdapterSource::project_local( - "file:///project/opencode.json", - LOCAL_PLUGIN_PATH, - PluginTrustLevel::Trusted, - 1, - ), - ) - .expect_err("schema mismatch should fail"); - - assert!(matches!( - error, - OpenCodeAdapterError::InvalidConfig { - field: "$schema", - .. - } - )); - } - - #[test] - fn plugin_source_without_module_export_fails_before_projection() { - let error = OpenCodeSourceProjection::from_opencode_sources( - CONFIG, - "const WorkspaceToolsPlugin = async () => ({ tool: {} })", - OpenCodeAdapterSource::project_local( - "file:///project/opencode.json", - LOCAL_PLUGIN_PATH, - PluginTrustLevel::Trusted, - 1, - ), - ) - .expect_err("non-exported plugin source should fail"); - - assert!(matches!( - error, - OpenCodeAdapterError::InvalidPluginSource { - field: "plugin.export", - .. - } - )); - } -} diff --git a/src/crates/adapters/opencode-adapter/src/lib.rs b/src/crates/adapters/opencode-adapter/src/lib.rs index 7bab4d21a2..f973b5cf59 100644 --- a/src/crates/adapters/opencode-adapter/src/lib.rs +++ b/src/crates/adapters/opencode-adapter/src/lib.rs @@ -1,7 +1,10 @@ -//! OpenCode-compatible plugin adapter fixture contracts. +//! OpenCode-compatible plugin adapter. //! -//! This crate intentionally exposes no public API until a reviewed Plugin -//! Runtime Host integration introduces a production consumer. +//! The production surface is intentionally small: load OpenCode-compatible +//! workspace sources as a projection-only Plugin Runtime Host adapter. It does +//! not execute JavaScript, install npm packages, or depend on a user-local +//! `opencode` CLI. -#[cfg(test)] -mod fixture_contracts; +mod source_adapter; + +pub use source_adapter::load_opencode_workspace_adapter; diff --git a/src/crates/adapters/opencode-adapter/src/source_adapter.rs b/src/crates/adapters/opencode-adapter/src/source_adapter.rs new file mode 100644 index 0000000000..df884be45f --- /dev/null +++ b/src/crates/adapters/opencode-adapter/src/source_adapter.rs @@ -0,0 +1,1896 @@ +//! OpenCode-compatible source projection. +//! +//! The adapter covers real OpenCode input shapes: `opencode.json` npm plugin +//! entries and project-local `.opencode/plugins/*.ts` source files. It does not +//! execute JavaScript, install packages, or become the runtime host. + +use async_trait::async_trait; +use bitfun_plugin_runtime_host::PluginHostAdapter; +#[cfg(test)] +use bitfun_runtime_ports::{ + PermissionPromptDenyState, PermissionPromptDescriptor, PermissionPromptEffectKind, + PluginArtifactRef, PluginCapabilityRef, PluginDataClassification, PluginEffectCandidatePayload, + PluginOwnerKind, PluginOwnerRef, PluginPermissionGate, PluginRiskLevel, PluginRollbackMode, + PluginRollbackPolicy, PluginTargetRef, +}; +use bitfun_runtime_ports::{ + PluginAuditRef, PluginConfigValidationIssue, PluginConfigValidationState, + PluginConfigValidationStatus, PluginDiagnostic, PluginDiagnosticDetail, + PluginDiagnosticSeverity, PluginDispatchEnvelope, PluginEffectCandidate, PluginManifestRef, + PluginResponseEnvelope, PluginRuntimeAvailability, PluginRuntimeReadRequest, + PluginRuntimeReadResponse, PluginRuntimeUnavailableReason, PluginSourceKind, PluginSourceRef, + PluginStatusKind, PluginStatusSnapshot, PluginTrustLevel, PortError, PortErrorKind, PortResult, +}; +use serde::Deserialize; +use sha2::{Digest, Sha256}; +use std::{ + fs, + path::{Path, PathBuf}, + sync::Arc, +}; + +const OPENCODE_ADAPTER_ID: &str = "opencode-compatible"; +const OPENCODE_CONFIG_SCHEMA: &str = "https://opencode.ai/config.json"; +const OPENCODE_LOCAL_PLUGIN_SCHEMA_VERSION: &str = "opencode.plugin.module.ts"; +#[cfg(test)] +const PLUGIN_EFFECT_SCHEMA_VERSION: &str = "plugin.effect.v1"; +const CUSTOM_TOOL_CONTRACT_ID: &str = "opencode.custom-tool.v1"; +#[cfg(test)] +const CUSTOM_TOOL_EXTENSION_POINT: &str = "tool"; +const OPENCODE_WORKSPACE_PLUGIN_DIR: &str = ".opencode/plugins"; +const MAX_OPENCODE_PLUGIN_SOURCE_BYTES: u64 = 1_048_576; + +const UNSUPPORTED_HOOK_EVENTS: &[&str] = &[ + "command.executed", + "permission.asked", + "permission.replied", + "session.compacted", + "shell.env", + "tool.execute.after", + "tool.execute.before", + "tui.toast.show", +]; + +#[derive(Debug, thiserror::Error)] +enum OpenCodeAdapterError { + #[error("invalid OpenCode config JSON: {0}")] + Json(#[from] serde_json::Error), + #[error("invalid OpenCode config field {field}: {message}")] + InvalidConfig { + field: &'static str, + message: String, + }, + #[error("invalid OpenCode plugin source field {field}: {message}")] + InvalidPluginSource { + field: &'static str, + message: String, + }, +} + +impl OpenCodeAdapterError { + fn field(&self) -> &'static str { + match self { + Self::Json(_) => "json", + Self::InvalidConfig { field, .. } | Self::InvalidPluginSource { field, .. } => field, + } + } +} + +struct OpenCodePluginHostAdapter { + projections: Vec, +} + +impl OpenCodePluginHostAdapter { + fn from_workspace(project_root: impl AsRef, observed_at_ms: u64) -> PortResult { + let project_root = project_root.as_ref(); + let config_path = project_root.join("opencode.json"); + let (config_json, config_uri) = read_opencode_config(&config_path)?; + let mut projections = Vec::new(); + let config = match parse_opencode_config(&config_json, &config_uri) { + Ok(config) => config, + Err(error) => { + projections.push(OpenCodeProjection::Invalid( + OpenCodeInvalidProjection::config( + &config_uri, + &config_json, + "opencode.config_invalid", + "opencode.json", + error.to_string(), + observed_at_ms, + ), + )); + OpenCodeConfig::empty(config_uri.clone()) + } + }; + + for plugin_path in workspace_plugin_paths(project_root, observed_at_ms)? { + let plugin_path = match plugin_path { + Ok(plugin_path) => plugin_path, + Err(projection) => { + projections.push(OpenCodeProjection::Invalid(projection)); + continue; + } + }; + let plugin_source = fs::read_to_string(&plugin_path).map_err(|error| { + OpenCodeProjection::Invalid(OpenCodeInvalidProjection::local_path( + &plugin_path, + "opencode.local_plugin_unreadable", + "source", + format!( + "failed to read OpenCode plugin source {}: {error}", + plugin_path.display() + ), + observed_at_ms, + )) + }); + let plugin_source = match plugin_source { + Ok(plugin_source) => plugin_source, + Err(projection) => { + projections.push(projection); + continue; + } + }; + match OpenCodeSourceProjection::from_local_plugin_source( + &plugin_source, + OpenCodeAdapterSource::project_local( + config_uri.clone(), + plugin_path.to_string_lossy().into_owned(), + PluginTrustLevel::Unknown, + observed_at_ms, + ), + config.clone(), + ) + .map(|projection| projection.without_config_package_diagnostics()) + { + Ok(projection) => projections.push(OpenCodeProjection::Local(projection)), + Err(error) => projections.push(OpenCodeProjection::Invalid( + OpenCodeInvalidProjection::local_source( + &plugin_path, + &plugin_source, + "opencode.local_plugin_invalid", + error.field(), + error.to_string(), + observed_at_ms, + ), + )), + } + } + + projections.extend(config.npm_plugins.iter().map(|package| { + OpenCodeProjection::Package(OpenCodePackageProjection::new( + package, + &config_uri, + observed_at_ms, + )) + })); + + Ok(Self { projections }) + } + + fn projection_for(&self, plugin_id: &str) -> Option<&OpenCodeProjection> { + self.projections + .iter() + .find(|projection| projection.source_ref().plugin_id == plugin_id) + } +} + +#[async_trait] +impl PluginHostAdapter for OpenCodePluginHostAdapter { + fn adapter_id(&self) -> &str { + OPENCODE_ADAPTER_ID + } + + async fn read_plugins( + &self, + request: PluginRuntimeReadRequest, + ) -> PortResult { + let mut sources = Vec::new(); + let mut plugin_statuses = Vec::new(); + let mut diagnostics = Vec::new(); + + for projection in self.projections.iter().filter(|projection| { + request.plugin_ids.is_empty() + || request + .plugin_ids + .iter() + .any(|plugin_id| plugin_id == &projection.source_ref().plugin_id) + }) { + let projection_diagnostics = projection.read_diagnostics(); + let diagnostic_ids = projection_diagnostics + .iter() + .map(|diagnostic| diagnostic.diagnostic_id.clone()) + .collect(); + sources.push(projection.source_ref().clone()); + plugin_statuses.push( + projection.status_snapshot(request.include_config_validation, diagnostic_ids), + ); + diagnostics.extend(projection_diagnostics); + } + + Ok(PluginRuntimeReadResponse { + request_id: request.request_id, + project_domain_id: request.project_domain_id, + workspace_id: request.workspace_id, + sources, + plugin_statuses, + diagnostics, + observed_epochs: request.epochs, + }) + } + + async fn dispatch( + &self, + envelope: PluginDispatchEnvelope, + ) -> PortResult { + self.projection_for(&envelope.source.plugin_id) + .ok_or_else(|| { + PortError::new( + PortErrorKind::NotFound, + format!( + "OpenCode source {} is not loaded by this adapter", + envelope.source.plugin_id + ), + ) + })? + .project_projection_only_dispatch_response(envelope) + } +} + +pub fn load_opencode_workspace_adapter( + project_root: impl AsRef, + observed_at_ms: u64, +) -> PortResult> { + Ok(Arc::new(OpenCodePluginHostAdapter::from_workspace( + project_root, + observed_at_ms, + )?)) +} + +enum OpenCodeProjection { + Local(OpenCodeSourceProjection), + Package(OpenCodePackageProjection), + Invalid(OpenCodeInvalidProjection), +} + +impl OpenCodeProjection { + fn source_ref(&self) -> &PluginSourceRef { + match self { + Self::Local(projection) => projection.source_ref(), + Self::Package(projection) => projection.source_ref(), + Self::Invalid(projection) => projection.source_ref(), + } + } + + fn read_diagnostics(&self) -> Vec { + match self { + Self::Local(projection) => projection.read_diagnostics(), + Self::Package(projection) => projection.read_diagnostics(), + Self::Invalid(projection) => projection.read_diagnostics(), + } + } + + fn status_snapshot( + &self, + include_config_validation: bool, + diagnostic_ids: Vec, + ) -> PluginStatusSnapshot { + match self { + Self::Local(projection) => { + let (availability, status) = projection.trust_status(); + projection.status_snapshot( + availability, + include_config_validation, + status, + diagnostic_ids, + ) + } + Self::Package(projection) => { + projection.status_snapshot(include_config_validation, diagnostic_ids) + } + Self::Invalid(projection) => { + projection.status_snapshot(include_config_validation, diagnostic_ids) + } + } + } + + fn project_projection_only_dispatch_response( + &self, + envelope: PluginDispatchEnvelope, + ) -> PortResult { + match self { + Self::Local(projection) => { + projection.project_projection_only_dispatch_response(envelope) + } + Self::Package(projection) => projection.project_dispatch_response(envelope), + Self::Invalid(projection) => projection.project_dispatch_response(envelope), + } + } +} + +#[derive(Debug, Clone)] +struct OpenCodePackageProjection { + config_uri: String, + package: String, + source: PluginSourceRef, + observed_at_ms: u64, +} + +impl OpenCodePackageProjection { + fn new(package: &str, config_uri: &str, observed_at_ms: u64) -> Self { + let plugin_id = format!("opencode.npm.{}", sanitize_plugin_id_component(package)); + Self { + config_uri: config_uri.to_string(), + package: package.to_string(), + source: PluginSourceRef { + plugin_id: plugin_id.clone(), + source_kind: PluginSourceKind::OpenCodeCompatible, + source: format!("npm:{package}"), + version: None, + content_hash: sha256_content_hash(&format!("npm:{package}")), + trust_level: PluginTrustLevel::Unknown, + manifest: Some(PluginManifestRef { + manifest_id: format!("{plugin_id}:opencode.config"), + schema_version: OPENCODE_CONFIG_SCHEMA.to_string(), + path: Some(config_uri.to_string()), + }), + }, + observed_at_ms, + } + } + + fn source_ref(&self) -> &PluginSourceRef { + &self.source + } + + fn read_diagnostics(&self) -> Vec { + vec![self.trust_diagnostic(), self.package_diagnostic()] + } + + fn status_snapshot( + &self, + include_config_validation: bool, + diagnostic_ids: Vec, + ) -> PluginStatusSnapshot { + PluginStatusSnapshot { + source: self.source.clone(), + status: PluginStatusKind::TrustRequired, + availability: PluginRuntimeAvailability::projection_only( + PluginRuntimeUnavailableReason::DisabledByPolicy, + ), + config_validation: include_config_validation.then(|| PluginConfigValidationState { + status: PluginConfigValidationStatus::Valid, + issues: Vec::new(), + }), + quarantine: None, + diagnostic_ids, + updated_at_ms: self.observed_at_ms, + } + } + + fn project_dispatch_response( + &self, + envelope: PluginDispatchEnvelope, + ) -> PortResult { + if envelope.source.plugin_id != self.source.plugin_id { + return Err(PortError::new( + PortErrorKind::NotFound, + format!( + "OpenCode package source {} is not loaded by this adapter", + envelope.source.plugin_id + ), + )); + } + let diagnostics = self.dispatch_diagnostics(&envelope); + let diagnostic_ids = diagnostics + .iter() + .map(|diagnostic| diagnostic.diagnostic_id.clone()) + .collect(); + + Ok(PluginResponseEnvelope { + envelope_version: envelope.envelope_version, + request_event_id: envelope.event_id, + project_domain_id: envelope.project_domain_id, + workspace_id: envelope.workspace_id, + adapter_id: OPENCODE_ADAPTER_ID.to_string(), + plugin_id: Some(self.source.plugin_id.clone()), + completed_at_ms: self.observed_at_ms, + effects: Vec::new(), + diagnostics, + quarantine: None, + plugin_statuses: vec![self.status_snapshot(false, diagnostic_ids)], + observed_epochs: envelope.epochs, + }) + } + + fn dispatch_diagnostics(&self, envelope: &PluginDispatchEnvelope) -> Vec { + let mut trust = self.trust_diagnostic(); + trust.diagnostic_id = format!( + "diag:{}:dispatch:{}:trust", + self.source.plugin_id, envelope.event_id + ); + trust.audit = audit_ref(envelope); + + let mut package = self.package_diagnostic(); + package.diagnostic_id = format!( + "diag:{}:dispatch:{}:npm:{}", + self.source.plugin_id, envelope.event_id, self.package + ); + package.audit = audit_ref(envelope); + + vec![trust, package] + } + + fn package_diagnostic(&self) -> PluginDiagnostic { + PluginDiagnostic { + diagnostic_id: format!("diag:{}:npm:{}", self.source.plugin_id, self.package), + severity: PluginDiagnosticSeverity::Info, + source: self.source.clone(), + code: "opencode.npm_plugin_projection_only".to_string(), + message: format!( + "OpenCode npm plugin is discovered from opencode.json but is not installed or executed by BitFun: {}", + self.package + ), + detail: PluginDiagnosticDetail::Manifest { + manifest: PluginManifestRef { + manifest_id: "opencode.config".to_string(), + schema_version: OPENCODE_CONFIG_SCHEMA.to_string(), + path: Some(self.config_uri.clone()), + }, + }, + audit: PluginAuditRef { + correlation_id: format!("config:{}", self.source.plugin_id), + event_id: None, + }, + retryable: false, + } + } + + fn trust_diagnostic(&self) -> PluginDiagnostic { + PluginDiagnostic { + diagnostic_id: format!("diag:{}:trust", self.source.plugin_id), + severity: PluginDiagnosticSeverity::Warning, + source: self.source.clone(), + code: "opencode.trust_required".to_string(), + message: "OpenCode package source is not trusted for projection".to_string(), + detail: PluginDiagnosticDetail::Trust { + trust_level: self.source.trust_level, + }, + audit: PluginAuditRef { + correlation_id: format!("trust:{}", self.source.plugin_id), + event_id: None, + }, + retryable: false, + } + } +} + +struct OpenCodeInvalidProjection { + source: PluginSourceRef, + validation: PluginConfigValidationState, + diagnostic_code: String, + diagnostic_message: String, + diagnostic_detail_manifest: PluginManifestRef, + observed_at_ms: u64, +} + +impl OpenCodeInvalidProjection { + fn config( + config_uri: &str, + config_json: &str, + code: &str, + field: &str, + message: String, + observed_at_ms: u64, + ) -> Self { + let manifest = PluginManifestRef { + manifest_id: "opencode.config".to_string(), + schema_version: OPENCODE_CONFIG_SCHEMA.to_string(), + path: Some(config_uri.to_string()), + }; + Self { + source: PluginSourceRef { + plugin_id: "opencode.config".to_string(), + source_kind: PluginSourceKind::OpenCodeCompatible, + source: config_uri.to_string(), + version: None, + content_hash: sha256_content_hash(config_json), + trust_level: PluginTrustLevel::Unknown, + manifest: Some(manifest.clone()), + }, + validation: invalid_validation(field, code, &message), + diagnostic_code: code.to_string(), + diagnostic_message: message, + diagnostic_detail_manifest: manifest, + observed_at_ms, + } + } + + fn local_path( + path: &Path, + code: &str, + field: &str, + message: String, + observed_at_ms: u64, + ) -> Self { + Self::local( + path, + sha256_content_hash(&format!("{}:{message}", path.to_string_lossy())), + code, + field, + message, + observed_at_ms, + ) + } + + fn local_source( + path: &Path, + source: &str, + code: &str, + field: &str, + message: String, + observed_at_ms: u64, + ) -> Self { + Self::local( + path, + sha256_content_hash(source), + code, + field, + message, + observed_at_ms, + ) + } + + fn local( + path: &Path, + content_hash: String, + code: &str, + field: &str, + message: String, + observed_at_ms: u64, + ) -> Self { + let plugin_id = format!("opencode.local.{}", path_stem_path(path)); + let path_string = path.to_string_lossy().into_owned(); + let manifest = PluginManifestRef { + manifest_id: format!("{plugin_id}:{OPENCODE_LOCAL_PLUGIN_SCHEMA_VERSION}"), + schema_version: OPENCODE_LOCAL_PLUGIN_SCHEMA_VERSION.to_string(), + path: Some(path_string.clone()), + }; + Self { + source: PluginSourceRef { + plugin_id, + source_kind: PluginSourceKind::OpenCodeCompatible, + source: source_file_uri(&path_string), + version: None, + content_hash, + trust_level: PluginTrustLevel::Unknown, + manifest: Some(manifest.clone()), + }, + validation: invalid_validation(field, code, &message), + diagnostic_code: code.to_string(), + diagnostic_message: message, + diagnostic_detail_manifest: manifest, + observed_at_ms, + } + } + + fn source_ref(&self) -> &PluginSourceRef { + &self.source + } + + fn read_diagnostics(&self) -> Vec { + vec![self.diagnostic(None)] + } + + fn status_snapshot( + &self, + include_config_validation: bool, + diagnostic_ids: Vec, + ) -> PluginStatusSnapshot { + PluginStatusSnapshot { + source: self.source.clone(), + status: PluginStatusKind::InvalidConfig, + availability: PluginRuntimeAvailability::projection_only( + PluginRuntimeUnavailableReason::DisabledByPolicy, + ), + config_validation: include_config_validation.then(|| self.validation.clone()), + quarantine: None, + diagnostic_ids, + updated_at_ms: self.observed_at_ms, + } + } + + fn project_dispatch_response( + &self, + envelope: PluginDispatchEnvelope, + ) -> PortResult { + if envelope.source.plugin_id != self.source.plugin_id { + return Err(PortError::new( + PortErrorKind::NotFound, + format!( + "OpenCode source {} is not loaded by this adapter", + envelope.source.plugin_id + ), + )); + } + let diagnostics = vec![self.diagnostic(Some(&envelope))]; + let diagnostic_ids = diagnostics + .iter() + .map(|diagnostic| diagnostic.diagnostic_id.clone()) + .collect(); + Ok(PluginResponseEnvelope { + envelope_version: envelope.envelope_version, + request_event_id: envelope.event_id, + project_domain_id: envelope.project_domain_id, + workspace_id: envelope.workspace_id, + adapter_id: OPENCODE_ADAPTER_ID.to_string(), + plugin_id: Some(self.source.plugin_id.clone()), + completed_at_ms: self.observed_at_ms, + effects: Vec::new(), + diagnostics, + quarantine: None, + plugin_statuses: vec![self.status_snapshot(false, diagnostic_ids)], + observed_epochs: envelope.epochs, + }) + } + + fn diagnostic(&self, envelope: Option<&PluginDispatchEnvelope>) -> PluginDiagnostic { + let diagnostic_id = match envelope { + Some(envelope) => format!( + "diag:{}:dispatch:{}:{}", + self.source.plugin_id, envelope.event_id, self.diagnostic_code + ), + None => format!("diag:{}:{}", self.source.plugin_id, self.diagnostic_code), + }; + PluginDiagnostic { + diagnostic_id, + severity: PluginDiagnosticSeverity::Error, + source: self.source.clone(), + code: self.diagnostic_code.clone(), + message: self.diagnostic_message.clone(), + detail: PluginDiagnosticDetail::ConfigValidation { + manifest: self.diagnostic_detail_manifest.clone(), + validation: self.validation.clone(), + }, + audit: envelope.map_or_else( + || PluginAuditRef { + correlation_id: format!("invalid:{}", self.source.plugin_id), + event_id: None, + }, + audit_ref, + ), + retryable: false, + } + } +} + +#[derive(Debug, Clone, PartialEq, Eq)] +struct OpenCodeAdapterSource { + config_uri: String, + local_plugin_path: String, + trust_level: PluginTrustLevel, + observed_at_ms: u64, +} + +impl OpenCodeAdapterSource { + fn project_local( + config_uri: impl Into, + local_plugin_path: impl Into, + trust_level: PluginTrustLevel, + observed_at_ms: u64, + ) -> Self { + Self { + config_uri: config_uri.into(), + local_plugin_path: local_plugin_path.into(), + trust_level, + observed_at_ms, + } + } +} + +#[derive(Debug, Clone)] +struct OpenCodeSourceProjection { + config: OpenCodeConfig, + local_plugin: OpenCodeLocalPlugin, + source: PluginSourceRef, + observed_at_ms: u64, +} + +impl OpenCodeSourceProjection { + fn from_local_plugin_source( + local_plugin_source: &str, + source: OpenCodeAdapterSource, + mut config: OpenCodeConfig, + ) -> Result { + config.config_uri = source.config_uri.clone(); + let local_plugin = + OpenCodeLocalPlugin::from_source(&source.local_plugin_path, local_plugin_source)?; + let source_ref = PluginSourceRef { + plugin_id: local_plugin.plugin_id.clone(), + source_kind: PluginSourceKind::OpenCodeCompatible, + source: source_file_uri(&source.local_plugin_path), + version: None, + content_hash: sha256_content_hash(local_plugin_source), + trust_level: source.trust_level, + manifest: Some(PluginManifestRef { + manifest_id: format!( + "{}:{}", + local_plugin.plugin_id, OPENCODE_LOCAL_PLUGIN_SCHEMA_VERSION + ), + schema_version: OPENCODE_LOCAL_PLUGIN_SCHEMA_VERSION.to_string(), + path: Some(source.local_plugin_path.clone()), + }), + }; + + Ok(Self { + config, + local_plugin, + source: source_ref, + observed_at_ms: source.observed_at_ms, + }) + } + + #[cfg(test)] + fn from_opencode_sources( + config_json: &str, + local_plugin_source: &str, + source: OpenCodeAdapterSource, + ) -> Result { + let config_doc: OpenCodeConfigDoc = serde_json::from_str(config_json)?; + let config = OpenCodeConfig::try_from_doc(config_doc)?; + Self::from_local_plugin_source(local_plugin_source, source, config) + } + + fn source_ref(&self) -> &PluginSourceRef { + &self.source + } + + fn without_config_package_diagnostics(mut self) -> Self { + self.config.npm_plugins.clear(); + self + } + + #[cfg(test)] + fn project_read_model( + &self, + request: PluginRuntimeReadRequest, + ) -> PortResult { + if !request.plugin_ids.is_empty() + && !request + .plugin_ids + .iter() + .any(|plugin_id| plugin_id == &self.source.plugin_id) + { + return Ok(PluginRuntimeReadResponse { + request_id: request.request_id, + project_domain_id: request.project_domain_id, + workspace_id: request.workspace_id, + sources: Vec::new(), + plugin_statuses: Vec::new(), + diagnostics: Vec::new(), + observed_epochs: request.epochs, + }); + } + + let diagnostics = self.read_diagnostics(); + let diagnostic_ids = diagnostics + .iter() + .map(|diagnostic| diagnostic.diagnostic_id.clone()) + .collect(); + let (availability, status) = self.trust_status(); + + Ok(PluginRuntimeReadResponse { + request_id: request.request_id, + project_domain_id: request.project_domain_id, + workspace_id: request.workspace_id, + sources: vec![self.source.clone()], + plugin_statuses: vec![self.status_snapshot( + availability, + request.include_config_validation, + status, + diagnostic_ids, + )], + diagnostics, + observed_epochs: request.epochs, + }) + } + + #[cfg(test)] + fn project_dispatch_response( + &self, + envelope: PluginDispatchEnvelope, + ) -> PortResult { + if envelope.source.plugin_id != self.source.plugin_id { + return Err(PortError::new( + PortErrorKind::NotFound, + format!( + "OpenCode source {} is not loaded by this adapter", + envelope.source.plugin_id + ), + )); + } + + if self.source.trust_level != PluginTrustLevel::Trusted { + return Ok(self.response( + &envelope, + Vec::new(), + vec![self.trust_diagnostic()], + self.trust_status().1, + )); + } + + let (effects, diagnostics) = if envelope.extension_point_id == CUSTOM_TOOL_EXTENSION_POINT { + ( + self.local_plugin + .custom_tools + .iter() + .map(|tool| self.provider_candidate_effect(&envelope, tool)) + .collect(), + Vec::new(), + ) + } else { + ( + Vec::new(), + vec![self.unsupported_hook_diagnostic(&envelope.extension_point_id)], + ) + }; + + let status = PluginStatusKind::ProjectionOnly; + Ok(self.response(&envelope, effects, diagnostics, status)) + } + + fn project_projection_only_dispatch_response( + &self, + envelope: PluginDispatchEnvelope, + ) -> PortResult { + if envelope.source.plugin_id != self.source.plugin_id { + return Err(PortError::new( + PortErrorKind::NotFound, + format!( + "OpenCode source {} is not loaded by this adapter", + envelope.source.plugin_id + ), + )); + } + + let diagnostics = if self.source.trust_level == PluginTrustLevel::Unknown { + vec![self.trust_dispatch_diagnostic(&envelope)] + } else { + vec![self.projection_only_dispatch_diagnostic(&envelope)] + }; + let status = self.trust_status().1; + Ok(self.response(&envelope, Vec::new(), diagnostics, status)) + } + + fn read_diagnostics(&self) -> Vec { + let mut diagnostics = Vec::new(); + if self.source.trust_level != PluginTrustLevel::Trusted { + diagnostics.push(self.trust_diagnostic()); + } + diagnostics.extend( + self.config + .npm_plugins + .iter() + .map(|package| self.npm_package_diagnostic(package)), + ); + diagnostics.extend( + self.local_plugin + .unsupported_hooks + .iter() + .map(|hook| self.unsupported_hook_diagnostic(hook)), + ); + diagnostics + } + + fn trust_status(&self) -> (PluginRuntimeAvailability, PluginStatusKind) { + match self.source.trust_level { + PluginTrustLevel::Trusted => ( + PluginRuntimeAvailability::projection_only( + PluginRuntimeUnavailableReason::HostUnavailable, + ), + PluginStatusKind::ProjectionOnly, + ), + PluginTrustLevel::Unknown => ( + PluginRuntimeAvailability::projection_only( + PluginRuntimeUnavailableReason::DisabledByPolicy, + ), + PluginStatusKind::TrustRequired, + ), + PluginTrustLevel::Denied | PluginTrustLevel::Revoked => ( + PluginRuntimeAvailability::disabled( + PluginRuntimeUnavailableReason::DisabledByPolicy, + ), + PluginStatusKind::Disabled, + ), + _ => ( + PluginRuntimeAvailability::projection_only( + PluginRuntimeUnavailableReason::DisabledByPolicy, + ), + PluginStatusKind::TrustRequired, + ), + } + } + + fn status_snapshot( + &self, + availability: PluginRuntimeAvailability, + include_config_validation: bool, + status: PluginStatusKind, + diagnostic_ids: Vec, + ) -> PluginStatusSnapshot { + PluginStatusSnapshot { + source: self.source.clone(), + status, + availability, + config_validation: include_config_validation.then(|| PluginConfigValidationState { + status: PluginConfigValidationStatus::Valid, + issues: Vec::new(), + }), + quarantine: None, + diagnostic_ids, + updated_at_ms: self.observed_at_ms, + } + } + + fn response( + &self, + envelope: &PluginDispatchEnvelope, + effects: Vec, + diagnostics: Vec, + status: PluginStatusKind, + ) -> PluginResponseEnvelope { + let diagnostic_ids = diagnostics + .iter() + .map(|diagnostic| diagnostic.diagnostic_id.clone()) + .collect(); + + let availability = self.trust_status().0; + + PluginResponseEnvelope { + envelope_version: envelope.envelope_version, + request_event_id: envelope.event_id.clone(), + project_domain_id: envelope.project_domain_id.clone(), + workspace_id: envelope.workspace_id.clone(), + adapter_id: OPENCODE_ADAPTER_ID.to_string(), + plugin_id: Some(self.source.plugin_id.clone()), + completed_at_ms: self.observed_at_ms, + effects, + diagnostics, + quarantine: None, + plugin_statuses: vec![self.status_snapshot( + availability, + false, + status, + diagnostic_ids, + )], + observed_epochs: envelope.epochs, + } + } + + #[cfg(test)] + fn provider_candidate_effect( + &self, + envelope: &PluginDispatchEnvelope, + tool: &OpenCodeCustomTool, + ) -> PluginEffectCandidate { + let audit = audit_ref(envelope); + let target = tool.target_ref(&self.source.plugin_id); + let permission = PluginPermissionGate::PermissionRequired { + prompt: self.permission_prompt(envelope, tool, target.clone(), audit.clone()), + }; + + PluginEffectCandidate { + effect_id: format!( + "{}:{}:{}", + envelope.event_id, self.source.plugin_id, tool.id + ), + schema_version: PLUGIN_EFFECT_SCHEMA_VERSION.to_string(), + declared_capability: tool.capability_ref(), + target_ref: target, + data_classification: PluginDataClassification::Workspace, + risk_level: PluginRiskLevel::Medium, + permission, + source_ref: self.source.clone(), + payload: PluginEffectCandidatePayload::ProviderCandidate { + provider_id: tool.provider_id(&self.source.plugin_id), + tool_contract_id: tool.tool_contract_id.clone(), + }, + } + } + + #[cfg(test)] + fn permission_prompt( + &self, + envelope: &PluginDispatchEnvelope, + tool: &OpenCodeCustomTool, + target: PluginTargetRef, + audit: PluginAuditRef, + ) -> PermissionPromptDescriptor { + PermissionPromptDescriptor { + descriptor_version: 1, + prompt_id: format!( + "prompt:{}:{}:{}", + self.source.plugin_id, tool.id, envelope.event_id + ), + plugin: self.source.clone(), + requested_capability: tool.capability_ref(), + requested_effect: PermissionPromptEffectKind::ProviderCandidate, + target, + risk_level: PluginRiskLevel::Medium, + owner: tool.capability_ref().owner, + rollback: PluginRollbackPolicy { + mode: PluginRollbackMode::DisablePlugin, + reason_ref: Some(format!("audit:{}", envelope.event_id)), + }, + deny_state: PermissionPromptDenyState::CandidateDiscarded, + audit, + } + } + + fn npm_package_diagnostic(&self, package: &str) -> PluginDiagnostic { + PluginDiagnostic { + diagnostic_id: format!("diag:{}:npm:{package}", self.source.plugin_id), + severity: PluginDiagnosticSeverity::Info, + source: self.source.clone(), + code: "opencode.npm_plugin_projection_only".to_string(), + message: format!( + "OpenCode npm plugin is present in opencode.json but is not installed or executed by this projection-only adapter: {package}" + ), + detail: PluginDiagnosticDetail::Manifest { + manifest: PluginManifestRef { + manifest_id: "opencode.config".to_string(), + schema_version: OPENCODE_CONFIG_SCHEMA.to_string(), + path: Some(self.config.config_uri.clone()), + }, + }, + audit: PluginAuditRef { + correlation_id: format!("config:{}", self.source.plugin_id), + event_id: None, + }, + retryable: false, + } + } + + fn unsupported_hook_diagnostic(&self, hook: &str) -> PluginDiagnostic { + PluginDiagnostic { + diagnostic_id: format!("diag:{}:hook:{hook}", self.source.plugin_id), + severity: PluginDiagnosticSeverity::Warning, + source: self.source.clone(), + code: "opencode.hook_projection_only".to_string(), + message: format!( + "OpenCode hook is discovered but cannot run in the P0-C.1 projection-only adapter: {hook}" + ), + detail: PluginDiagnosticDetail::Adapter { + adapter_id: OPENCODE_ADAPTER_ID.to_string(), + }, + audit: PluginAuditRef { + correlation_id: format!("plugin-source:{}", self.source.plugin_id), + event_id: None, + }, + retryable: false, + } + } + + fn trust_diagnostic(&self) -> PluginDiagnostic { + PluginDiagnostic { + diagnostic_id: format!("diag:{}:trust", self.source.plugin_id), + severity: if self.source.trust_level == PluginTrustLevel::Unknown { + PluginDiagnosticSeverity::Warning + } else { + PluginDiagnosticSeverity::Error + }, + source: self.source.clone(), + code: "opencode.trust_required".to_string(), + message: "OpenCode plugin source is not trusted for projection".to_string(), + detail: PluginDiagnosticDetail::Trust { + trust_level: self.source.trust_level, + }, + audit: PluginAuditRef { + correlation_id: format!("trust:{}", self.source.plugin_id), + event_id: None, + }, + retryable: false, + } + } + + fn trust_dispatch_diagnostic(&self, envelope: &PluginDispatchEnvelope) -> PluginDiagnostic { + let mut diagnostic = self.trust_diagnostic(); + diagnostic.diagnostic_id = format!( + "diag:{}:dispatch:{}:trust", + self.source.plugin_id, envelope.event_id + ); + diagnostic.audit = audit_ref(envelope); + diagnostic + } + + fn projection_only_dispatch_diagnostic( + &self, + envelope: &PluginDispatchEnvelope, + ) -> PluginDiagnostic { + PluginDiagnostic { + diagnostic_id: format!( + "diag:{}:dispatch_projection_only:{extension_point_id}", + self.source.plugin_id, + extension_point_id = envelope.extension_point_id + ), + severity: PluginDiagnosticSeverity::Info, + source: self.source.clone(), + code: "opencode.dispatch_projection_only".to_string(), + message: format!( + "OpenCode extension point is discovered but not executed by this projection-only adapter: {}", + envelope.extension_point_id + ), + detail: PluginDiagnosticDetail::Adapter { + adapter_id: OPENCODE_ADAPTER_ID.to_string(), + }, + audit: audit_ref(envelope), + retryable: false, + } + } +} + +#[derive(Debug, Clone, PartialEq, Eq)] +struct OpenCodeConfig { + config_uri: String, + npm_plugins: Vec, +} + +impl OpenCodeConfig { + fn empty(config_uri: String) -> Self { + Self { + config_uri, + npm_plugins: Vec::new(), + } + } + + fn try_from_doc(doc: OpenCodeConfigDoc) -> Result { + if doc.schema.as_deref() != Some(OPENCODE_CONFIG_SCHEMA) { + return Err(OpenCodeAdapterError::InvalidConfig { + field: "$schema", + message: format!("expected {OPENCODE_CONFIG_SCHEMA}"), + }); + } + + let mut npm_plugins = Vec::new(); + for package in doc.plugin { + let package = package.trim().to_string(); + if package.is_empty() { + return Err(OpenCodeAdapterError::InvalidConfig { + field: "plugin", + message: "package names must not be empty".to_string(), + }); + } + npm_plugins.push(package); + } + + Ok(Self { + config_uri: "opencode.json".to_string(), + npm_plugins, + }) + } +} + +#[derive(Debug, Deserialize)] +struct OpenCodeConfigDoc { + #[serde(rename = "$schema")] + schema: Option, + #[serde(default)] + plugin: Vec, +} + +#[derive(Debug, Clone, PartialEq, Eq)] +struct OpenCodeLocalPlugin { + plugin_id: String, + export_name: String, + custom_tools: Vec, + unsupported_hooks: Vec, +} + +impl OpenCodeLocalPlugin { + fn from_source(path: &str, source: &str) -> Result { + let export_name = + exported_plugin_name(source).ok_or(OpenCodeAdapterError::InvalidPluginSource { + field: "plugin.export", + message: "expected an exported OpenCode plugin function".to_string(), + })?; + let custom_tools = discover_custom_tools(source); + let unsupported_hooks = discover_unsupported_hooks(source); + if custom_tools.is_empty() && unsupported_hooks.is_empty() { + return Err(OpenCodeAdapterError::InvalidPluginSource { + field: "plugin.contributions", + message: "expected a custom tool or hook contribution".to_string(), + }); + } + + Ok(Self { + plugin_id: format!("opencode.local.{}", path_stem(path)), + export_name, + custom_tools, + unsupported_hooks, + }) + } +} + +#[derive(Debug, Clone, PartialEq, Eq)] +struct OpenCodeCustomTool { + id: String, + tool_contract_id: String, +} + +impl OpenCodeCustomTool { + #[cfg(test)] + fn provider_id(&self, plugin_id: &str) -> String { + format!("{plugin_id}.{}", self.id) + } + + #[cfg(test)] + fn target_ref(&self, plugin_id: &str) -> PluginTargetRef { + let target_id = self.provider_id(plugin_id); + PluginTargetRef { + target_kind: "opencode_custom_tool".to_string(), + target_id: target_id.clone(), + display_name: self.id.clone(), + artifact: Some(PluginArtifactRef { + artifact_id: format!("{plugin_id}:{}:source", self.id), + artifact_kind: "opencode_plugin_source".to_string(), + display_name: self.id.clone(), + uri: Some(format!("bitfun://plugins/{plugin_id}/tools/{target_id}")), + }), + } + } + + #[cfg(test)] + fn capability_ref(&self) -> PluginCapabilityRef { + PluginCapabilityRef { + capability_id: "opencode.custom_tool".to_string(), + owner: PluginOwnerRef { + kind: PluginOwnerKind::ExtensionContract, + id: "opencode.custom-tools".to_string(), + }, + } + } +} + +fn exported_plugin_name(source: &str) -> Option { + source.lines().find_map(|line| { + let rest = line.trim().strip_prefix("export const ")?; + let name = rest + .split(|ch: char| ch == ':' || ch == '=' || ch.is_whitespace()) + .next()?; + is_identifier(name).then(|| name.to_string()) + }) +} + +fn discover_custom_tools(source: &str) -> Vec { + source + .lines() + .filter_map(|line| { + let (name, rest) = line.trim().split_once(':')?; + rest.trim_start() + .starts_with("tool({") + .then(|| name.trim()) + .filter(|candidate| is_identifier(candidate)) + .map(|id| OpenCodeCustomTool { + id: id.to_string(), + tool_contract_id: CUSTOM_TOOL_CONTRACT_ID.to_string(), + }) + }) + .collect() +} + +fn discover_unsupported_hooks(source: &str) -> Vec { + let mut hooks = UNSUPPORTED_HOOK_EVENTS + .iter() + .filter(|event| { + source.contains(&format!("\"{event}\"")) || source.contains(&format!("'{event}'")) + }) + .map(|event| (*event).to_string()) + .collect::>(); + if has_event_hook(source) && !hooks.iter().any(|hook| hook == "event") { + hooks.push("event".to_string()); + } + hooks +} + +fn has_event_hook(source: &str) -> bool { + source.lines().any(|line| { + let line = line.trim_start(); + line.starts_with("event:") || line.contains(" event:") + }) +} + +fn is_identifier(value: &str) -> bool { + let mut chars = value.chars(); + matches!(chars.next(), Some(first) if first == '_' || first.is_ascii_alphabetic()) + && chars.all(|ch| ch == '_' || ch.is_ascii_alphanumeric()) +} + +fn path_stem(path: &str) -> String { + path.rsplit(['/', '\\']) + .next() + .and_then(|file| file.split('.').next()) + .unwrap_or("plugin") + .replace('-', "_") +} + +fn path_stem_path(path: &Path) -> String { + path.file_stem() + .and_then(|stem| stem.to_str()) + .map(|stem| stem.replace('-', "_")) + .unwrap_or_else(|| "plugin".to_string()) +} + +fn sha256_content_hash(value: &str) -> String { + let mut hasher = Sha256::new(); + hasher.update(value.as_bytes()); + format!("sha256:{}", hex::encode(hasher.finalize())) +} + +fn read_opencode_config(config_path: &Path) -> PortResult<(String, String)> { + let config_uri = file_uri(config_path); + if !config_path.exists() { + return Ok(( + format!(r#"{{"$schema":"{OPENCODE_CONFIG_SCHEMA}","plugin":[]}}"#), + config_uri, + )); + } + + let config_json = fs::read_to_string(config_path).map_err(|error| { + adapter_port_error(format!( + "failed to read OpenCode config {}: {error}", + config_path.display() + )) + })?; + Ok((config_json, config_uri)) +} + +fn parse_opencode_config( + config_json: &str, + config_uri: &str, +) -> Result { + let config_doc: OpenCodeConfigDoc = serde_json::from_str(config_json)?; + let mut config = OpenCodeConfig::try_from_doc(config_doc)?; + config.config_uri = config_uri.to_string(); + Ok(config) +} + +fn workspace_plugin_paths( + project_root: &Path, + observed_at_ms: u64, +) -> PortResult>> { + let plugin_dir = project_root.join(OPENCODE_WORKSPACE_PLUGIN_DIR); + if !plugin_dir.exists() { + return Ok(Vec::new()); + } + let plugin_dir_metadata = fs::symlink_metadata(&plugin_dir).map_err(|error| { + adapter_port_error(format!( + "failed to inspect OpenCode plugin directory {}: {error}", + plugin_dir.display() + )) + })?; + if is_unsupported_link(&plugin_dir_metadata) { + return Ok(vec![Err(OpenCodeInvalidProjection::local_path( + &plugin_dir, + "opencode.local_plugin_directory_link_unsupported", + "source", + format!( + "OpenCode plugin directory is a symlink or reparse point and is not scanned by this projection-only adapter: {}", + plugin_dir.display() + ), + observed_at_ms, + ))]); + } + let canonical_plugin_dir = plugin_dir.canonicalize().map_err(|error| { + adapter_port_error(format!( + "failed to resolve OpenCode plugin directory {}: {error}", + plugin_dir.display() + )) + })?; + + let mut paths = fs::read_dir(&plugin_dir) + .map_err(|error| { + adapter_port_error(format!( + "failed to read OpenCode plugin directory {}: {error}", + plugin_dir.display() + )) + })? + .map(|entry| entry.map(|entry| entry.path())) + .collect::, _>>() + .map_err(|error| { + adapter_port_error(format!( + "failed to inspect OpenCode plugin directory {}: {error}", + plugin_dir.display() + )) + })?; + + paths.sort(); + let candidates = paths + .into_iter() + .filter(|path| { + matches!( + path.extension().and_then(|extension| extension.to_str()), + Some("js" | "ts") + ) + }) + .map(|path| plugin_file_candidate(path, &canonical_plugin_dir, observed_at_ms)) + .collect(); + Ok(candidates) +} + +fn plugin_file_candidate( + path: PathBuf, + canonical_plugin_dir: &Path, + observed_at_ms: u64, +) -> Result { + let metadata = fs::symlink_metadata(&path).map_err(|error| { + OpenCodeInvalidProjection::local_path( + &path, + "opencode.local_plugin_unreadable", + "source", + format!( + "failed to inspect OpenCode plugin source {}: {error}", + path.display() + ), + observed_at_ms, + ) + })?; + + if is_unsupported_link(&metadata) { + return Err(OpenCodeInvalidProjection::local_path( + &path, + "opencode.local_plugin_symlink_unsupported", + "source", + format!( + "OpenCode plugin source is a symlink and is not scanned by this projection-only adapter: {}", + path.display() + ), + observed_at_ms, + )); + } + if !metadata.is_file() { + return Err(OpenCodeInvalidProjection::local_path( + &path, + "opencode.local_plugin_not_file", + "source", + format!( + "OpenCode plugin source is not a regular file and is not scanned by this projection-only adapter: {}", + path.display() + ), + observed_at_ms, + )); + } + if metadata.len() > MAX_OPENCODE_PLUGIN_SOURCE_BYTES { + return Err(OpenCodeInvalidProjection::local_path( + &path, + "opencode.local_plugin_too_large", + "source", + format!( + "OpenCode plugin source exceeds the projection-only size limit of {MAX_OPENCODE_PLUGIN_SOURCE_BYTES} bytes: {}", + path.display() + ), + observed_at_ms, + )); + } + + let canonical_path = path.canonicalize().map_err(|error| { + OpenCodeInvalidProjection::local_path( + &path, + "opencode.local_plugin_unreadable", + "source", + format!( + "failed to resolve OpenCode plugin source {}: {error}", + path.display() + ), + observed_at_ms, + ) + })?; + if !canonical_path.starts_with(canonical_plugin_dir) { + return Err(OpenCodeInvalidProjection::local_path( + &path, + "opencode.local_plugin_outside_workspace", + "source", + format!( + "OpenCode plugin source resolves outside .opencode/plugins and is not scanned: {}", + path.display() + ), + observed_at_ms, + )); + } + + Ok(path) +} + +fn is_unsupported_link(metadata: &fs::Metadata) -> bool { + metadata.file_type().is_symlink() || is_windows_reparse_point(metadata) +} + +#[cfg(windows)] +fn is_windows_reparse_point(metadata: &fs::Metadata) -> bool { + use std::os::windows::fs::MetadataExt; + const FILE_ATTRIBUTE_REPARSE_POINT: u32 = 0x400; + metadata.file_attributes() & FILE_ATTRIBUTE_REPARSE_POINT != 0 +} + +#[cfg(not(windows))] +fn is_windows_reparse_point(_metadata: &fs::Metadata) -> bool { + false +} + +fn file_uri(path: &Path) -> String { + source_file_uri(&path.to_string_lossy()) +} + +fn source_file_uri(path: &str) -> String { + let normalized = path.replace('\\', "/"); + if normalized.starts_with('/') { + format!("file://{normalized}") + } else { + format!("file:///{normalized}") + } +} + +fn sanitize_plugin_id_component(value: &str) -> String { + let mut sanitized = String::with_capacity(value.len()); + let mut previous_separator = false; + for ch in value.chars() { + if ch.is_ascii_alphanumeric() { + sanitized.push(ch.to_ascii_lowercase()); + previous_separator = false; + } else if !previous_separator { + sanitized.push('_'); + previous_separator = true; + } + } + + let sanitized = sanitized.trim_matches('_').to_string(); + if sanitized.is_empty() { + "plugin".to_string() + } else { + sanitized + } +} + +fn adapter_port_error(message: String) -> PortError { + PortError::new(PortErrorKind::InvalidRequest, message) +} + +fn invalid_validation(field: &str, code: &str, message: &str) -> PluginConfigValidationState { + PluginConfigValidationState { + status: PluginConfigValidationStatus::Invalid, + issues: vec![PluginConfigValidationIssue { + field: field.to_string(), + code: code.to_string(), + message: message.to_string(), + }], + } +} + +fn audit_ref(envelope: &PluginDispatchEnvelope) -> PluginAuditRef { + PluginAuditRef { + correlation_id: envelope.correlation_id.clone(), + event_id: Some(envelope.event_id.clone()), + } +} + +#[cfg(test)] +mod opencode_projection_contracts { + use super::*; + use bitfun_runtime_ports::{ + PermissionPromptDenyState, PermissionPromptEffectKind, PluginPayloadRedaction, + PluginPayloadRef, PluginRuntimeEpochs, + }; + + const CONFIG: &str = include_str!("../tests/fixtures/opencode-example/opencode.json"); + const LOCAL_PLUGIN_PATH: &str = ".opencode/plugins/workspace-tools.ts"; + const LOCAL_PLUGIN_SOURCE: &str = + include_str!("../tests/fixtures/opencode-example/.opencode/plugins/workspace-tools.ts"); + + fn adapter(trust_level: PluginTrustLevel) -> OpenCodeSourceProjection { + OpenCodeSourceProjection::from_opencode_sources( + CONFIG, + LOCAL_PLUGIN_SOURCE, + OpenCodeAdapterSource::project_local( + "file:///project/opencode.json", + LOCAL_PLUGIN_PATH, + trust_level, + 1_720_000_001, + ), + ) + .expect("OpenCode fixture sources should parse") + } + + fn epochs() -> PluginRuntimeEpochs { + PluginRuntimeEpochs { + project_epoch: 7, + trust_epoch: 3, + policy_epoch: 5, + tool_registry_epoch: Some(11), + } + } + + fn capability_ref() -> PluginCapabilityRef { + PluginCapabilityRef { + capability_id: "opencode.custom_tool".to_string(), + owner: PluginOwnerRef { + kind: PluginOwnerKind::ExtensionContract, + id: "opencode.custom-tools".to_string(), + }, + } + } + + fn envelope( + adapter: &OpenCodeSourceProjection, + extension_point_id: &str, + ) -> PluginDispatchEnvelope { + PluginDispatchEnvelope { + envelope_version: 1, + event_id: format!("event-{extension_point_id}"), + event_type: "agent.turn.completed".to_string(), + event_version: "2026-07-07".to_string(), + project_domain_id: "project-1".to_string(), + workspace_id: "workspace-1".to_string(), + extension_point_id: extension_point_id.to_string(), + source: adapter.source_ref().clone(), + declared_capability: capability_ref(), + correlation_id: "corr-1".to_string(), + causation_id: None, + idempotency_key: format!("event-{extension_point_id}:{extension_point_id}"), + deadline_ms: 30_000, + epochs: epochs(), + payload_ref: Some(PluginPayloadRef { + payload_id: "payload-1".to_string(), + schema_version: "agent.turn.completed.v1".to_string(), + data_classification: PluginDataClassification::Workspace, + redaction: PluginPayloadRedaction::Partial, + uri: Some("bitfun://payloads/payload-1".to_string()), + }), + } + } + + #[test] + fn projects_real_opencode_config_and_local_plugin_source() { + let adapter = adapter(PluginTrustLevel::Trusted); + + assert_eq!( + adapter.config.npm_plugins, + ["opencode-wakatime", "@my-org/custom-plugin"] + ); + assert_eq!(adapter.local_plugin.export_name, "WorkspaceToolsPlugin"); + assert_eq!(adapter.local_plugin.custom_tools[0].id, "workspaceSummary"); + assert_eq!( + adapter.local_plugin.unsupported_hooks, + ["tool.execute.before"] + ); + + let response = adapter + .project_read_model(PluginRuntimeReadRequest { + request_id: "read-1".to_string(), + project_domain_id: "project-1".to_string(), + workspace_id: "workspace-1".to_string(), + plugin_ids: vec!["opencode.local.workspace_tools".to_string()], + include_config_validation: true, + epochs: epochs(), + }) + .expect("project read model"); + + assert_eq!(response.sources.len(), 1); + assert_eq!( + response.sources[0].plugin_id, + "opencode.local.workspace_tools" + ); + assert_eq!( + response.sources[0].source_kind, + PluginSourceKind::OpenCodeCompatible + ); + assert!(response.sources[0].content_hash.starts_with("sha256:")); + assert_eq!( + response.plugin_statuses[0].status, + PluginStatusKind::ProjectionOnly + ); + assert_eq!( + response.plugin_statuses[0].availability, + PluginRuntimeAvailability::ProjectionOnly { + reason: PluginRuntimeUnavailableReason::HostUnavailable + } + ); + assert!(response.plugin_statuses[0] + .config_validation + .as_ref() + .expect("config validation") + .issues + .is_empty()); + assert_eq!(response.diagnostics.len(), 3); + assert!(response + .diagnostics + .iter() + .any(|diagnostic| diagnostic.code == "opencode.npm_plugin_projection_only")); + assert!(response + .diagnostics + .iter() + .any(|diagnostic| diagnostic.code == "opencode.hook_projection_only")); + } + + #[test] + fn p0_c2_fixture_projects_custom_tool_candidate_with_permission_prompt() { + let adapter = adapter(PluginTrustLevel::Trusted); + let response = adapter + .project_dispatch_response(envelope(&adapter, CUSTOM_TOOL_EXTENSION_POINT)) + .expect("project dispatch response"); + + assert_eq!(response.adapter_id, OPENCODE_ADAPTER_ID); + assert_eq!( + response.plugin_id.as_deref(), + Some("opencode.local.workspace_tools") + ); + assert_eq!(response.effects.len(), 1); + assert!(response.diagnostics.is_empty()); + assert_eq!( + response.plugin_statuses[0].status, + PluginStatusKind::ProjectionOnly + ); + assert_eq!( + response.plugin_statuses[0].availability, + PluginRuntimeAvailability::ProjectionOnly { + reason: PluginRuntimeUnavailableReason::HostUnavailable + } + ); + + let effect = &response.effects[0]; + assert_eq!( + effect.declared_capability.capability_id, + "opencode.custom_tool" + ); + assert_eq!( + effect.target_ref.target_id, + "opencode.local.workspace_tools.workspaceSummary" + ); + assert_eq!( + effect.source_ref.plugin_id, + "opencode.local.workspace_tools" + ); + assert!(effect.source_ref.content_hash.starts_with("sha256:")); + assert_eq!( + effect.data_classification, + PluginDataClassification::Workspace + ); + assert_eq!(response.observed_epochs.tool_registry_epoch, Some(11)); + + match &effect.payload { + PluginEffectCandidatePayload::ProviderCandidate { + provider_id, + tool_contract_id, + } => { + assert_eq!( + provider_id, + "opencode.local.workspace_tools.workspaceSummary" + ); + assert_eq!(tool_contract_id, "opencode.custom-tool.v1"); + } + other => panic!("expected provider candidate, got {other:?}"), + } + + match &effect.permission { + PluginPermissionGate::PermissionRequired { prompt } => { + assert_eq!(prompt.plugin.plugin_id, "opencode.local.workspace_tools"); + assert_eq!( + prompt.requested_effect, + PermissionPromptEffectKind::ProviderCandidate + ); + assert_eq!( + prompt.target.target_id, + "opencode.local.workspace_tools.workspaceSummary" + ); + assert_eq!(prompt.owner.kind, PluginOwnerKind::ExtensionContract); + assert_eq!( + prompt.deny_state, + PermissionPromptDenyState::CandidateDiscarded + ); + assert_eq!(prompt.audit.event_id.as_deref(), Some("event-tool")); + } + other => panic!("expected permission prompt, got {other:?}"), + } + } + + #[test] + fn untrusted_source_stays_readable_but_projects_no_effects() { + let adapter = adapter(PluginTrustLevel::Unknown); + + let read = adapter + .project_read_model(PluginRuntimeReadRequest { + request_id: "read-trust".to_string(), + project_domain_id: "project-1".to_string(), + workspace_id: "workspace-1".to_string(), + plugin_ids: vec!["opencode.local.workspace_tools".to_string()], + include_config_validation: true, + epochs: epochs(), + }) + .expect("project read model"); + + assert_eq!( + read.plugin_statuses[0].status, + PluginStatusKind::TrustRequired + ); + assert!(read + .diagnostics + .iter() + .any(|diagnostic| diagnostic.code == "opencode.trust_required")); + + let response = adapter + .project_dispatch_response(envelope(&adapter, CUSTOM_TOOL_EXTENSION_POINT)) + .expect("project dispatch response"); + + assert!(response.effects.is_empty()); + assert_eq!( + response.plugin_statuses[0].status, + PluginStatusKind::TrustRequired + ); + assert_eq!(response.diagnostics[0].code, "opencode.trust_required"); + } + + #[test] + fn unsupported_opencode_hook_projects_typed_diagnostic_without_effect() { + let adapter = adapter(PluginTrustLevel::Trusted); + let response = adapter + .project_dispatch_response(envelope(&adapter, "tool.execute.before")) + .expect("project dispatch response"); + + assert!(response.effects.is_empty()); + assert_eq!( + response.diagnostics[0].code, + "opencode.hook_projection_only" + ); + assert_eq!( + response.diagnostics[0].source.plugin_id, + "opencode.local.workspace_tools" + ); + assert_eq!( + response.plugin_statuses[0].status, + PluginStatusKind::ProjectionOnly + ); + } + + #[test] + fn invalid_opencode_config_fails_before_projection() { + let error = OpenCodeSourceProjection::from_opencode_sources( + r#"{"$schema":"https://example.invalid/config.json","plugin":[]}"#, + LOCAL_PLUGIN_SOURCE, + OpenCodeAdapterSource::project_local( + "file:///project/opencode.json", + LOCAL_PLUGIN_PATH, + PluginTrustLevel::Trusted, + 1, + ), + ) + .expect_err("schema mismatch should fail"); + + assert!(matches!( + error, + OpenCodeAdapterError::InvalidConfig { + field: "$schema", + .. + } + )); + } + + #[test] + fn plugin_source_without_module_export_fails_before_projection() { + let error = OpenCodeSourceProjection::from_opencode_sources( + CONFIG, + "const WorkspaceToolsPlugin = async () => ({ tool: {} })", + OpenCodeAdapterSource::project_local( + "file:///project/opencode.json", + LOCAL_PLUGIN_PATH, + PluginTrustLevel::Trusted, + 1, + ), + ) + .expect_err("non-exported plugin source should fail"); + + assert!(matches!( + error, + OpenCodeAdapterError::InvalidPluginSource { + field: "plugin.export", + .. + } + )); + } +} diff --git a/src/crates/adapters/opencode-adapter/tests/opencode_source_adapter.rs b/src/crates/adapters/opencode-adapter/tests/opencode_source_adapter.rs new file mode 100644 index 0000000000..b95a3595e0 --- /dev/null +++ b/src/crates/adapters/opencode-adapter/tests/opencode_source_adapter.rs @@ -0,0 +1,334 @@ +use bitfun_opencode_adapter::load_opencode_workspace_adapter; +use bitfun_plugin_runtime_host::PluginRuntimeHost; +use bitfun_runtime_ports::{ + PluginCapabilityRef, PluginDataClassification, PluginDispatchEnvelope, PluginOwnerKind, + PluginOwnerRef, PluginPayloadRedaction, PluginPayloadRef, PluginRuntimeAvailability, + PluginRuntimeClient, PluginRuntimeEpochs, PluginRuntimeReadRequest, + PluginRuntimeUnavailableReason, PluginSourceKind, PluginStatusKind, PluginTrustLevel, +}; +use std::{ + fs, + path::{Path, PathBuf}, + process, + time::{SystemTime, UNIX_EPOCH}, +}; + +const CONFIG: &str = include_str!("fixtures/opencode-example/opencode.json"); +const LOCAL_PLUGIN_SOURCE: &str = + include_str!("fixtures/opencode-example/.opencode/plugins/workspace-tools.ts"); + +struct TempProject { + root: PathBuf, +} + +impl TempProject { + fn new(name: &str) -> Self { + let nanos = SystemTime::now() + .duration_since(UNIX_EPOCH) + .expect("system clock should be after unix epoch") + .as_nanos(); + let root = + std::env::temp_dir().join(format!("bitfun-opencode-{name}-{}-{nanos}", process::id())); + fs::create_dir_all(&root).expect("create temp project"); + Self { root } + } + + fn path(&self) -> &Path { + &self.root + } + + fn write_opencode_fixture(&self) { + fs::write(self.root.join("opencode.json"), CONFIG).expect("write opencode config"); + let plugin_dir = self.root.join(".opencode").join("plugins"); + fs::create_dir_all(&plugin_dir).expect("create opencode plugin directory"); + fs::write(plugin_dir.join("workspace-tools.ts"), LOCAL_PLUGIN_SOURCE) + .expect("write local opencode plugin"); + } + + fn write_opencode_config(&self) { + fs::write(self.root.join("opencode.json"), CONFIG).expect("write opencode config"); + fs::create_dir_all(self.root.join(".opencode").join("plugins")) + .expect("create opencode plugin directory"); + } + + fn write_plugin(&self, name: &str, source: &str) { + fs::write( + self.root.join(".opencode").join("plugins").join(name), + source, + ) + .expect("write opencode plugin"); + } +} + +impl Drop for TempProject { + fn drop(&mut self) { + let _ = fs::remove_dir_all(&self.root); + } +} + +#[tokio::test] +async fn discovers_opencode_sources_through_plugin_runtime_host() { + let project = TempProject::new("read-model"); + project.write_opencode_fixture(); + + let adapter = load_opencode_workspace_adapter(project.path(), 1_720_000_001) + .expect("load OpenCode-compatible workspace adapter"); + let host = PluginRuntimeHost::new(adapter); + + let response = host + .read_plugins(read_request(Vec::new())) + .await + .expect("read plugins through host"); + + let source_ids = response + .sources + .iter() + .map(|source| source.plugin_id.as_str()) + .collect::>(); + assert_eq!( + source_ids, + [ + "opencode.local.workspace_tools", + "opencode.npm.opencode_wakatime", + "opencode.npm.my_org_custom_plugin" + ] + ); + assert!(response.sources.iter().all(|source| { + source.source_kind == PluginSourceKind::OpenCodeCompatible + && source.trust_level == PluginTrustLevel::Unknown + && source.content_hash.starts_with("sha256:") + })); + + let local_status = response + .plugin_statuses + .iter() + .find(|status| status.source.plugin_id == "opencode.local.workspace_tools") + .expect("local plugin status"); + assert_eq!(local_status.status, PluginStatusKind::TrustRequired); + assert_eq!( + local_status.availability, + PluginRuntimeAvailability::ProjectionOnly { + reason: PluginRuntimeUnavailableReason::DisabledByPolicy + } + ); + + assert!(response + .diagnostics + .iter() + .any(|diagnostic| diagnostic.code == "opencode.trust_required")); + assert!(response + .diagnostics + .iter() + .any(|diagnostic| diagnostic.code == "opencode.npm_plugin_projection_only")); + assert!(response + .diagnostics + .iter() + .any(|diagnostic| diagnostic.code == "opencode.hook_projection_only")); +} + +#[tokio::test] +async fn dispatch_for_discovered_opencode_source_remains_projection_only() { + let project = TempProject::new("dispatch-model"); + project.write_opencode_fixture(); + + let adapter = load_opencode_workspace_adapter(project.path(), 1_720_000_001) + .expect("load OpenCode-compatible workspace adapter"); + let host = PluginRuntimeHost::new(adapter); + let read_response = host + .read_plugins(read_request(vec![ + "opencode.local.workspace_tools".to_string() + ])) + .await + .expect("read local plugin"); + let source = read_response + .sources + .into_iter() + .find(|source| source.plugin_id == "opencode.local.workspace_tools") + .expect("local plugin source"); + + let response = host + .dispatch(dispatch_envelope(source)) + .await + .expect("dispatch projection-only source"); + + assert_eq!(response.adapter_id, "opencode-compatible"); + assert_eq!( + response.plugin_id.as_deref(), + Some("opencode.local.workspace_tools") + ); + assert!(response.effects.is_empty()); + assert_eq!( + response.plugin_statuses[0].status, + PluginStatusKind::TrustRequired + ); + assert!(response + .diagnostics + .iter() + .any(|diagnostic| diagnostic.code == "opencode.trust_required")); +} + +#[tokio::test] +async fn invalid_local_plugin_reports_diagnostic_without_hiding_valid_sources() { + let project = TempProject::new("invalid-local"); + project.write_opencode_fixture(); + project.write_plugin( + "broken-plugin.ts", + "export const BrokenPlugin = async () => ({ name: 'broken' })", + ); + + let adapter = load_opencode_workspace_adapter(project.path(), 1_720_000_001) + .expect("load OpenCode-compatible workspace adapter"); + let host = PluginRuntimeHost::new(adapter); + let response = host + .read_plugins(read_request(Vec::new())) + .await + .expect("read plugins through host"); + + let source_ids = response + .sources + .iter() + .map(|source| source.plugin_id.as_str()) + .collect::>(); + assert!(source_ids.contains(&"opencode.local.workspace_tools")); + assert!(source_ids.contains(&"opencode.npm.opencode_wakatime")); + assert!(source_ids.contains(&"opencode.local.broken_plugin")); + + let invalid_status = response + .plugin_statuses + .iter() + .find(|status| status.source.plugin_id == "opencode.local.broken_plugin") + .expect("invalid plugin status"); + assert_eq!(invalid_status.status, PluginStatusKind::InvalidConfig); + assert!(invalid_status + .config_validation + .as_ref() + .expect("config validation") + .issues + .iter() + .any(|issue| issue.code == "opencode.local_plugin_invalid")); + assert!(response.diagnostics.iter().any(|diagnostic| { + diagnostic.source.plugin_id == "opencode.local.broken_plugin" + && diagnostic.code == "opencode.local_plugin_invalid" + })); +} + +#[tokio::test] +async fn event_only_local_plugin_projects_unsupported_hook_diagnostic() { + let project = TempProject::new("event-only"); + project.write_opencode_config(); + project.write_plugin( + "event-plugin.ts", + r#" +export const EventPlugin = async () => ({ + event: async ({ event }) => { + if (event.type === "session.idle") { + console.log(event.sessionID) + } + }, +}) +"#, + ); + + let adapter = load_opencode_workspace_adapter(project.path(), 1_720_000_001) + .expect("load OpenCode-compatible workspace adapter"); + let host = PluginRuntimeHost::new(adapter); + let response = host + .read_plugins(read_request(Vec::new())) + .await + .expect("read plugins through host"); + + let status = response + .plugin_statuses + .iter() + .find(|status| status.source.plugin_id == "opencode.local.event_plugin") + .expect("event plugin status"); + assert_eq!(status.status, PluginStatusKind::TrustRequired); + assert!(response.diagnostics.iter().any(|diagnostic| { + diagnostic.source.plugin_id == "opencode.local.event_plugin" + && diagnostic.code == "opencode.hook_projection_only" + && diagnostic.message.contains("event") + })); +} + +#[tokio::test] +async fn oversized_local_plugin_reports_diagnostic_without_reading_source() { + let project = TempProject::new("large-local"); + project.write_opencode_config(); + let oversized_source = "x".repeat(1_048_577); + project.write_plugin("large-plugin.ts", &oversized_source); + + let adapter = load_opencode_workspace_adapter(project.path(), 1_720_000_001) + .expect("load OpenCode-compatible workspace adapter"); + let host = PluginRuntimeHost::new(adapter); + let response = host + .read_plugins(read_request(Vec::new())) + .await + .expect("read plugins through host"); + + let status = response + .plugin_statuses + .iter() + .find(|status| status.source.plugin_id == "opencode.local.large_plugin") + .expect("large plugin status"); + assert_eq!(status.status, PluginStatusKind::InvalidConfig); + assert!(response.diagnostics.iter().any(|diagnostic| { + diagnostic.source.plugin_id == "opencode.local.large_plugin" + && diagnostic.code == "opencode.local_plugin_too_large" + })); + assert!(response + .sources + .iter() + .any(|source| source.plugin_id == "opencode.npm.opencode_wakatime")); +} + +fn read_request(plugin_ids: Vec) -> PluginRuntimeReadRequest { + PluginRuntimeReadRequest { + request_id: "read-1".to_string(), + project_domain_id: "project-1".to_string(), + workspace_id: "workspace-1".to_string(), + plugin_ids, + include_config_validation: true, + epochs: epochs(), + } +} + +fn dispatch_envelope(source: bitfun_runtime_ports::PluginSourceRef) -> PluginDispatchEnvelope { + PluginDispatchEnvelope { + envelope_version: 1, + event_id: "event-tool".to_string(), + event_type: "agent.turn.completed".to_string(), + event_version: "2026-07-07".to_string(), + project_domain_id: "project-1".to_string(), + workspace_id: "workspace-1".to_string(), + extension_point_id: "tool".to_string(), + source, + declared_capability: PluginCapabilityRef { + capability_id: "opencode.custom_tool".to_string(), + owner: PluginOwnerRef { + kind: PluginOwnerKind::ExtensionContract, + id: "opencode.custom-tools".to_string(), + }, + }, + correlation_id: "corr-1".to_string(), + causation_id: None, + idempotency_key: "event-tool:tool".to_string(), + deadline_ms: 30_000, + epochs: epochs(), + payload_ref: Some(PluginPayloadRef { + payload_id: "payload-1".to_string(), + schema_version: "agent.turn.completed.v1".to_string(), + data_classification: PluginDataClassification::Workspace, + redaction: PluginPayloadRedaction::Partial, + uri: Some("bitfun://payloads/payload-1".to_string()), + }), + } +} + +fn epochs() -> PluginRuntimeEpochs { + PluginRuntimeEpochs { + project_epoch: 7, + trust_epoch: 3, + policy_epoch: 5, + tool_registry_epoch: Some(11), + } +}