feat(plugin): v0.7.0 Plugin Adapter - All Tests Passing

[Steffen025]

Summary

This PR completes the v0.7.0 Plugin Adapter milestone with all 4 tests passing:

Test	Status
Plugin Load	✅ PASS
Context Injection	✅ PASS
Security Blocking	✅ PASS
Logging	✅ PASS

What's New

• Security Blocking: Dangerous commands like rm -rf ../ are now blocked
• Context Injection: CORE skill automatically injected at session start
• TUI-Safe Logging: All logs go to /tmp/pai-opencode-debug.log
• OpenCode API Documentation: Key discoveries documented for future reference

Key Technical Discoveries

// OpenCode API quirk: Args are in OUTPUT, not input!
"tool.execute.before": async (input, output) => {
  const command = output.args.command; // ← NOT input.args!
  if (dangerous(command)) {
    throw new Error("Blocked!"); // ← This stops execution
  }
}

Files Changed

• pai-unified.ts - Use output.args for tool arguments
• security-validator.ts - Case-insensitive matching, defensive null checks
• types.ts - Fixed regex patterns for parent traversal
• TEST-RESULTS-v0.7.md - Comprehensive test documentation
• README.md - Updated to v0.7.0
• CHANGELOG.md - Full v0.7.0 release notes
• v0.7-plugin-adapter.png - Celebration graphic

Next Steps

v0.8 Converter Tool is next - enabling automatic PAI→OpenCode translation.

---

🤖 Generated with Claude Code