mirror of
https://github.com/Heretek-AI/Agent-Builder.git
synced 2026-11-08 17:14:52 -10:00
John Smith
5321a4cea2
- Stage1 P0 security: allowlist introspect (npx,node,python3), argv-only, drop CORS *, per-boot token, SSRF private-range+userinfo block, targetDir absolute/.. block, content_file pattern+containment, test/local-server.test.js 29 tests - Stage2 P0 catalog: synthetic:true for 14 placeholder entries, real repos/tools for k8s/notion/filesystem/figma/postgres, Codex command/args/env, hyphen-preserving normalize, README npx fix, sst->anomalyco - Stage3 P1 hardening: dup-id negative tests, check-pr scripts/** fail-closed+wired, ai-review invented-tool/harness/kind/deny-first enforcement, reviewer bare allows, _site clean, engines >=22.12.0, workflows SHA-pinned fetch-depth:1 minimal scopes, CODEOWNERS, ajv->devDeps - Stage4 P2/P3 polish: install --recipe base64url, SOURCE_DATE_EPOCH idempotency, ? single-char, favicon data-URI, empty warn deny-only, prose fixes, stage4 12 tests Gates: VALIDATED 63 OK, SITE_BUILT 63, tests 102/102, ai-review REVIEW_OK/SELFTEST_OK Note: scripts/generate-rigs.py + verify-rigs.sh do not exist; real equivalents used (documented in REMEDIATION_LOG.md)
21 lines
645 B
YAML
21 lines
645 B
YAML
id: opencode-session-hooks
|
|
name: OpenCode Session Hooks Plugin
|
|
repo: https://github.com/Heretek-AI/Agent-Builder
|
|
tagline: Session lifecycle hooks and custom tools for OpenCode.
|
|
description: >-
|
|
An OpenCode plugin providing session start/finish hooks, custom tool registration, and statusline
|
|
integration for OpenCode v1 and v2.
|
|
kind: plugin
|
|
category: plugins/opencode
|
|
harnesses:
|
|
- opencode
|
|
tags:
|
|
- hooks
|
|
- statusline
|
|
compat: opencode>=1.0.0
|
|
scope: workspace
|
|
installation: opencode plugin install opencode-session-hooks
|
|
license: MIT
|
|
source_attribution: Synthetic seed entry for Agent-Builder (no external upstream, MIT).
|
|
synthetic: true
|