@vercel/harness-opencode
BMCP server package @ai-sdk/harness-opencode
Install
agr install @vercel/harness-opencode --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "@ai-sdk/harness-opencode", "version": "1.0.61", "type": "module", "license": "Apache-2.0", "sideEffects": false, "main": "./dist/index.js", "types": "./dist/index.d.ts", "source": "./src/index.ts", "files": [ "dist//*", "src", "!src//.test.ts", "!src/**/.test-d.ts", "!src//snapshots", "!src//fixtures", "CHANGELOG.md", "README.md" ], "scripts": { "build": "pnpm clean && tsup --tsconfig tsconfig.build.json && pnpm copy-bridge-assets", "build:watch": "pnpm clean && tsup --watch", "clean": "del-cli dist .tsbuildinfo", "copy-bridge-assets": "node -e "import('node:fs/promises').then(async fs => { await fs.copyFile('src/bridge/package.json', 'dist/bridge/package.json'); await fs.copyFile('src/bridge/pnpm-lock.yaml', 'dist/bridge/pnpm-lock.yaml'); })"", "type-check": "tsc --build", "test": "pnpm test:node", "test:watch": "vitest --config vitest.node.config.js", "test:node": "vitest --config vitest.node.config.js --run" }, "exports": { "./package.json": "./package.json", ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js", "default": "./dist/index.js" } }, "dependencies": { "@ai-sdk/harness": "workspace:", "@ai-sdk/provider-utils": "workspace:", "ws": "8.21.0" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" }, "devDependencies": { "@modelcontextprotocol/sdk": "1.29.0", "@opencode-ai/sdk": "1.18.3", "@types/node": "22.19.19", "@types/ws": "^8.5.13", "@vercel/ai-tsconfig": "workspace:", "tsup": "^8.5.1", "typescript": "5.8.3", "zod": "3.25.76" }, "engines": { "node": ">=22" }, "publishConfig": { "access": "public", "provenance": true }, "homepage": "https://ai-sdk.dev/docs", "repository": { "type": "git", "url": "https://github.com/vercel/ai", "directory": "packages/harness-opencode" }, "bugs": { "url": "https://github.com/vercel/ai/issues" }, "keywords": [ "ai", "harness", "opencode" ] }
Trustgrade B
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- warnLicenseno SPDX license detected
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-a3063a45f15f2026-08-06