47 lines
3.4 KiB
Markdown
47 lines
3.4 KiB
Markdown
# Runtime checks — verified against real OpenCode v2
|
|
|
|
Environment: Windows 11, `opencode v2.0.29`, `@opencode/plugin@2.0.29`, 2026-10-14.
|
|
Method: `scripts/smoke.ts` boots `opencode serve` (private server, Basic auth user `opencode`,
|
|
password printed on stdout) in a temp fixture and asserts against the HTTP API. Result: **PASS**.
|
|
|
|
## Verified
|
|
|
|
- **Plugin loads and activates** from a local directory entry (`plugins: ["<abs path>/dist"]`);
|
|
`GET /api/plugin` shows `haylan.pocock` with `state.status: "active"`.
|
|
- A **file** entry (`file://.../dist/index.js`) is IGNORED — local plugin entries must be
|
|
directories with a root `index`/`server` file (confirms fastcrw research). npm-name entries
|
|
resolve through `exports` (to be re-verified after first registry publish, TODO 1.10).
|
|
- **Skill injection works**: all 31 manifest skills registered (`GET /api/skill`); the 16
|
|
user-invoked ones carry `autoinvoke: false`. The API **omits `autoinvoke` when true** (default).
|
|
- **DMI honored natively**: file-loaded skills with upstream `disable-model-invocation: true`
|
|
(e.g. a global `~/.agents/skills` install) show `autoinvoke: false` without our plugin.
|
|
- **ID collisions**: when the same skill id also exists as a file-based skill (global install), the
|
|
file-based entry is what `/api/skill` reports; plugin injection coexists without errors.
|
|
(`pr`, absent from the tester's global install, was served from our package path.)
|
|
- **Injected content must have frontmatter stripped** to match file-based loading
|
|
(`markdown.content`); the plugin does this since 2026-10-14.
|
|
- **Agent markdown with V2-native frontmatter decodes correctly** from `.opencode/agents/`:
|
|
`pocock` (primary), `pocock-worker` / `pocock-reviewer` (subagent), descriptions intact, and the
|
|
full `permissions` array survived decoding in order — verified on `pocock-worker`:
|
|
`skill * deny` + `tdd/codebase-design/diagnosing-bugs allow`, `subagent * deny`, and all
|
|
git/gh/glab shell denies present.
|
|
- **Default permission floor** (v2.0.29): agents start with `{action:"*",resource:"*",effect:"allow"}`
|
|
plus specific rules, among them `external_directory /tmp` and `/tmp/*` **allow** — the
|
|
`/tmp/pocock-workers` worktree root needs no extra user config on this build (README still
|
|
documents the rule for other setups/subagents).
|
|
- **Injected skills do NOT become slash commands** (`GET /api/command` shows none for them;
|
|
`Skill.Info` has no `slash` field). User-invoked steps are started via conversation with `pocock`
|
|
(propose → yes → load) or by any agent explicitly loading the skill. File-based installs (global
|
|
`~/.agents/skills`, or a `skills: [...]` directory source) keep slash behavior.
|
|
- **Server API**: prefix `/api/*`, Basic auth (`opencode` + printed password); SPA HTML answers
|
|
unknown non-/api paths with 200 — assert JSON, not status. `POST /api/location/reload` exists.
|
|
Plugin loading is lazy (appears seconds after boot); `/openapi.json` requires auth.
|
|
|
|
## Known environment quirks (tester machine, not product issues)
|
|
|
|
- Windows: `server.kill()` under `shell:true` only kills `cmd.exe`; smoke uses
|
|
`taskkill /PID <pid> /T /F`. Temp fixture deletion can lag behind handle release (EPERM warning);
|
|
harmless, retried on next run.
|
|
- The user's global `~/.agents/skills` already contains most Matt Pocock skills — smoke assertions
|
|
are written to tolerate id collisions (presence + flags, not source path).
|