OpenCode plugin: a failed session lookup is no longer cached (it pinned
the session to the server directory for the rest of the process, and
could record a subagent as a parent); unknown sessions are never gated.
The pwf_init, pwf_status and pwf_check tools resolve the same root as
the hooks, so PWF_PLAN_ROOT and PLANNING_DISABLED apply to them too
(a broken pin or the opt-out is an explicit error). chat.message injects
at most once per message. A rootless Windows pin ("\foo") is refused
like the shell does. Ledger lines are counted like grep -c "" so the
gate counters stay interchangeable with the shell. The attestation temp
file is process-unique. The link-escape path is now tested.
Both the OpenCode and the Hermes resolver now fall through when PLAN_ID
names a slug that does not resolve, like resolve-plan-dir.sh; before,
a stale exported PLAN_ID blacked out injection for the whole session.
OthmanAdi
9ad1f2653a