Auto Mode Gate 0.4.3 adds a reproducible OpenCode host check that proves the packed plugin can block a Bash call before its effect. Runtime behavior remains unchanged from 0.4.0.
What's new
- Added an isolated Linux CI check for OpenCode 1.18.18.
- The check packs and installs the release candidate, runs a control that creates a marker, then verifies that Auto Mode Gate returns
AMG_DENY_AMBIGUOUSand prevents the same effect. - Kept model traffic on a loopback provider with preprogrammed responses and a fictional credential.
Documentation
- Clarified that
opencode debug configproves plugin discovery, not behavioral enforcement. - Documented the packed-candidate host check and its Windows and Linux boundaries.
Upgrade from 0.4.2
No configuration or runtime migration is required. Update the package through the same host-specific installation flow.
Compatibility notes
- Runtime source and policy behavior are unchanged from 0.4.0.
- OpenCode validated baseline: 1.18.18.
- Pi validated baseline: 0.84.2 for persistent judge controls and isolated judge transport.
- Node.js test baseline: 24.9.0.
Verification
- 246 unit, runtime, integration, privacy, race, and conformance tests passed.
- The OpenCode 1.18.18 packed-candidate integration passed in isolated Linux profiles.
- Documentation checks and the Starlight production build passed.
- Package contents, privacy boundaries, license, and checksums were inspected before publication.
Install
opencode plugin auto-mode-gate@0.4.3
pi install npm:auto-mode-gate@0.4.3
Downloads and checksum
- auto-mode-gate-0.4.3.tgz
- SHA-256:
7f06479a3663690d81c5449d571d4c7e90940099f29a3323dc100999a87be4f7 - SHA256SUMS.txt
Known limits
- Auto Mode Gate is a pre-tool policy gate, not an operating-system sandbox.
- Passing the gate does not bypass native host permissions.
- OpenCode has no equivalent verified judge transport and blocks eligible cases as unavailable.
- The reproducible OpenCode host check runs on Linux; the historical Windows probe remains separate evidence.