Fix 'failed to fetch workflow' parse error: ocr.yml referenced a local reusable workflow path (./.github/workflows/ocr-review.yml) that does not exist in this repo. Point at Heretek-AI/.github org reusable workflow pinned to main HEAD (a440b485).
F1 (OH-6.5-tilde-user-target-escape): widen shellTargetEscapesWorkspace
from trimmed === "~" || startsWith("~/") to startsWith("~") so
~user/, ~+ and ~- write targets deny rule-0 for every role. Net-zero in
src/ (one predicate shortened). 4 non-vacuous regression tests pin all
deny shapes plus legit allows; self-proven RED on the pre-fix predicate.
F2 (OH-2.6-stale-metapath-comment): insert plugin/ in the meta.txt path.
Comment-only, zero behavior change.
F3-F7: prepare-only / document-only / no-op-verify per the stage brief.
No release operations. LOC raw 12089 / stripped 10024 unchanged.
Full suite 397 pass / 0 fail; waves 1-8 green.
The shipped pipeline test re-read only BEFORE the trip, so neutering the
=== 'other' carve-out in trackCircuitBreakerAndAutoProposeLesson stayed
suite-green. The test now drives the audit 4-cycle shape (read-ok, edit-fail,
read-ok, edit-fail, read-ok, read-ok, good-edit-ok), asserting zero pending
proposals across the post-trip re-reads and exactly one edit-attached lesson
(no 'via read'). Sabotage verified RED (0/1), restore GREEN (1/0). Test-only
change; no production logic touched.
setupOpenCodeV2Harness now treats empty/whitespace-only directory/worktree
(location.directory/worktree) as absent via pick(), falling back to
process.cwd(). resolveHarnessOptions({rootDir:''}) still throws fail-closed.
FixesHeretek-AI/opencode-harness#4, unblocks Crew docker-publish gate.
Triad: programmer + QA red-proof (S1-S3) + drift-guard VERDICT: PASS.
Gates: bun run check 0, bun test 276 pass, accept/run.sh 0, wave-8.sh 0.
- Drop the unused pi-hashline-readmap dependency, which pulled a whole
separate coding agent and several LLM SDKs into every install
(444 MB -> 38 MB of node_modules).
- Put the Muse 1.3 system prompt calibration behind a new
`museCalibration` option, off by default, so the plugin no longer
rewrites the system prompt for every model.
- Publish workflow: pin setup-bun and Bun, install with --ignore-scripts,
refuse a tag that doesn't match package.json, and run make check,
make accept and the real OpenCode host test before publishing.
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01Qe5Gj5WofxvQkfnptRJ7ym
Review: a sync throw inside settled.map() aborted the map, so later
registrations were never disposed. The async callback turns it into a
rejection that allSettled absorbs. Adds a test that fails without it.
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_012AuVk4nEvBXaTjs4G6wdW4
Sonar rated new code C for running dependency lifecycle scripts during
install. CI and the host-test runner now pass --ignore-scripts (nothing in
the tree needs them; check, tests, accept, build and host-test pass from a
clean install). Also: [[ ]] in run.sh, includes() in the bullet scan, and
dispose registrations concurrently instead of awaiting in a loop.
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_012AuVk4nEvBXaTjs4G6wdW4
CodeQL flagged the fallback line regex as polynomial on crafted prompt
text. A plain line scan does the same match in linear time. setup-bun is
pinned to the v2.2.0 commit.
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_012AuVk4nEvBXaTjs4G6wdW4
- Pass tool inputs to the host as plain JSON Schema (toHostInputSchema via
zod-to-json-schema). The host rejects zod v3 schemas, so every tool was
silently dropped at registration.
- setup() now awaits every hook/transform registration and resolves to a
cleanup function that disposes them; returning the doctor report made the
host crash on unload. setupOpenCodeV2Harness() exposes the report.
- Read plugin options from ctx.options (where the host delivers them).
- MCP server seeding is opt-in (seedRecommendedMcp) and uses the
Mcp.LocalConfig shape; it no longer runs bunx/npx --yes by default.
- Meta.txt calibration falls back to a one-line matcher if upstream rewords
the subagent bullet; documented the event.system amendment in README/SPEC.
- Single version source (src/version.ts), bumped to 1.0.7.
- Tests: host contract, partial hashline anchor mismatch, calibration.
- make host-test / scripts/host-test: loads the plugin into anomalyco/opencode
at a pinned commit via the upstream plugin fixture.
- CI workflow: check, accept, build, and the real-host test on every PR.
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_012AuVk4nEvBXaTjs4G6wdW4
John Smith