fix: update OpenCode plugin integration

cmd/elydora/plugins/opencode.go

@@ -8,7 +8,7 @@ import (
 )
 
 // OpenCodePlugin manages the Elydora audit hook for OpenCode.
-// It writes .opencode/plugins/elydora-audit.js in the home directory.
+// It writes .config/opencode/plugins/elydora-audit.mjs in the home directory.
 type OpenCodePlugin struct{}
 
 func (p *OpenCodePlugin) configPath() (string, error) {
@@ -16,7 +16,7 @@ func (p *OpenCodePlugin) configPath() (string, error) {
 	if err != nil {
 		return "", fmt.Errorf("resolve home directory: %w", err)
 	}
-	return filepath.Join(home, ".opencode", "plugins", "elydora-audit.js"), nil
+	return filepath.Join(home, ".config", "opencode", "plugins", "elydora-audit.mjs"), nil
 }
 
 func (p *OpenCodePlugin) Install(config InstallConfig) error {
@@ -62,51 +62,43 @@ func buildOpenCodePlugin(scriptPath, guardPath string) string {
 	return fmt.Sprintf(`// Elydora Audit Plugin for OpenCode
 // Generated by @elydora/sdk — DO NOT EDIT
 
-const { spawn, spawnSync } = require('node:child_process');
+import { spawn, spawnSync } from 'node:child_process';
 
-module.exports = {
-  name: 'elydora-audit',
-  version: '1.0.0',
-  description: 'Sends tool-use events to the Elydora tamper-evident audit platform',
+const GUARD_SCRIPT_PATH = %q;
+const HOOK_SCRIPT_PATH = %q;
 
-  hooks: {
-    preToolUse(context) {
-      // Synchronous guard — blocks tool if agent is frozen
-      try {
-        const result = spawnSync('node', [%q], {
-          timeout: 5000,
-          stdio: ['pipe', 'ignore', 'pipe'],
-        });
-        if (result.status !== 0) {
-          const msg = result.stderr ? result.stderr.toString().trim() : 'Agent is frozen by Elydora.';
-          return { blocked: true, reason: msg };
-        }
-      } catch {
-        // Fail-open — allow if guard can't run
-      }
-    },
-
-    postToolUse(context) {
-      try {
-        const input = JSON.stringify({
-          tool_name: context.toolName || context.tool_name || 'unknown',
-          tool_input: context.toolInput || context.tool_input || {},
-          session_id: context.sessionId || context.session_id || 'unknown',
-        });
-
-        const child = spawn('node', [%q], {
-          detached: true,
-          stdio: ['pipe', 'ignore', 'ignore'],
-        });
-        child.stdin.write(input);
-        child.stdin.end();
-        child.unref();
-      } catch {
-        // Fire-and-forget — never block the developer
-      }
-    },
+export const ElydoraAuditPlugin = async () => ({
+  "tool.execute.before": async () => {
+    const result = spawnSync('node', [GUARD_SCRIPT_PATH], {
+      timeout: 5000,
+      stdio: ['pipe', 'ignore', 'pipe'],
+    });
+    if (result.error) {
+      throw new Error('Elydora guard failed: ' + result.error.message);
+    }
+    if (result.status !== 0) {
+      const message = result.stderr?.toString().trim() || 'Elydora guard blocked tool execution.';
+      throw new Error(message);
+    }
   },
-};
+
+  "tool.execute.after": async (input) => {
+    const event = JSON.stringify({
+      tool_name: input?.tool || 'unknown',
+      tool_input: input?.args || {},
+      session_id: input?.sessionID || 'unknown',
+    });
+    const child = spawn('node', [HOOK_SCRIPT_PATH], {
+      detached: true,
+      stdio: ['pipe', 'ignore', 'ignore'],
+    });
+    child.on('error', (error) => {
+      console.error('[elydora] audit hook failed:', error.message);
+    });
+    child.stdin.end(event);
+    child.unref();
+  },
+});
 `, guardPath, scriptPath)
 }