
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@hung319/opencode-hive
Advanced tools
From Vibe Coding to Hive Coding — The OpenCode plugin that brings structure to AI-assisted development with Smart Context Engine and Multi-Agent Orchestration.
Stop losing context. Stop repeating decisions. Start shipping with confidence.
Vibe: "Just make it work"
Hive: Plan → Review → Approve → Execute → Ship
hive_worktree_batch| Variable | Description | Required |
|---|---|---|
EXA_API_KEY | API key for Exa AI web search | Only if using websearch MCP |
SEARXNG_URL | URL for self-hosted SearXNG instance | Only if using searxng MCP |
CXXFLAGS="-std=c++20" | C++ compiler flags for native modules | Only on Node.js v24+ |
# For web search (Exa AI) - get key at https://exa.ai
export EXA_API_KEY="your-exa-api-key"
# For privacy meta-search (self-hosted)
export SEARXNG_URL="https://your-searxng-instance.com"
# For Node.js v24+ native modules (ast-grep, agent-booster, memory)
export CXXFLAGS="-std=c++20"
Add these to your ~/.bashrc or ~/.zshrc for persistence.
Step 1: Check system
bunx @hung319/opencode-hive doctor
Step 2: Install plugin
npm install @hung319/opencode-hive
Step 3: Quick install extras
npx @hung319/opencode-hive doctor --install
npx @hung319/opencode-hive doctor --install /path/to/project
| MCP | Best For | API Key |
|---|---|---|
websearch | Current web info | Exa AI (free tier) |
context7 | Library docs | Context7 (free tier) |
grep_app | GitHub code patterns | None |
ddg_search | DuckDuckGo search | None (free) |
searxng | Privacy meta-search | Self-hostable |
| Category | Tools |
|---|---|
| Memory | hive_memory_*, hive_vector_* |
| Planning | hive_plan_*, hive_task_* |
| Execution | hive_worktree_*, hive_worktree_batch |
| Code | ast_grep_*, agent-booster, LSP tools |
| Feature | Description |
|---|---|
| PatternLearner | Learn from tasks, predict next actions |
| AutoSummary | Extract key changes from diffs |
| DelegationHints | Complexity + agent recommendation |
hive_feature_create("dark-mode")hive_plan_approve()During planning, "don't execute" means "don't implement" (no code edits, no worktrees). Read-only exploration is explicitly allowed and encouraged, both via local tools and by delegating to Scout.
read/grep/glob is acceptable only for a single known file and a bounded question.| Tool | Description |
|---|---|
hive_feature_create | Create a new feature |
hive_feature_complete | Mark feature as complete |
| Tool | Description |
|---|---|
hive_plan_write | Write plan.md |
hive_plan_read | Read plan and comments |
hive_plan_approve | Approve plan for execution |
| Tool | Description |
|---|---|
hive_tasks_sync | Generate tasks from plan |
hive_task_create | Create manual task |
hive_task_update | Update task status/summary |
| Tool | Description |
|---|---|
hive_worktree_start | Start normal work on task (creates worktree) |
hive_worktree_create | Resume blocked task in existing worktree |
hive_worktree_commit | Complete task (applies changes) |
hive_worktree_discard | Abort task (discard changes) |
If you see repeated retries around continueFrom: "blocked", use this protocol:
hive_status() first.pending or in_progress, start normally with:
hive_worktree_start({ feature, task })blocked:
hive_worktree_create({ task, continueFrom: "blocked", decision })Do not retry the same blocked-resume call on non-blocked statuses; re-check hive_status() and use hive_worktree_start for normal starts.
When using Dynamic Context Pruning (DCP), use a Hive-safe config in ~/.config/opencode/dcp.jsonc:
manualMode.enabled: truemanualMode.automaticStrategies: falseturnProtection.enabled: true with turnProtection.turns: 12tools.settings.nudgeEnabled: falsetools.settings.protectedTools (at least: hive_status, hive_worktree_start, hive_worktree_create, hive_worktree_commit, hive_worktree_discard, question)strategies.deduplication.enabled: falsestrategies.supersedeWrites.enabled: falsestrategies.purgeErrors.enabled: falseFor local plugin testing, keep OpenCode plugin entry as "@hung319/opencode-hive" (not "@hung319/opencode-hive@latest").
Hive automatically bounds worker prompt sizes to prevent context overflow and tool output truncation.
| Limit | Default | Description |
|---|---|---|
maxTasks | 10 | Number of previous tasks included |
maxSummaryChars | 2,000 | Max chars per task summary |
maxContextChars | 20,000 | Max chars per context file |
maxTotalContextChars | 60,000 | Total context budget |
When limits are exceeded, content is truncated with ...[truncated] markers and file path hints are provided so workers can read the full content.
hive_worktree_start and blocked-resume hive_worktree_create output include metadata fields:
promptMeta: Character counts for plan, context, previousTasks, spec, workerPromptpayloadMeta: JSON payload size, whether prompt is inlined or referenced by filebudgetApplied: Budget limits, tasks included/dropped, path hints for dropped contentwarnings: Array of threshold exceedances with severity levels (info/warning/critical)Large prompts are written to .hive/features/<feature>/tasks/<task>/worker-prompt.md and passed by file reference (workerPromptPath) rather than inlined in tool output. This prevents truncation of large prompts.
# Feature Name
## Overview
What we're building and why.
## Tasks
### 1. Task Name
Description of what to do.
### 2. Another Task
Description.
Hive uses a config file at ~/.config/opencode/agent_hive.json. You can customize agent models, variants, disable skills, and disable MCP servers.
{
"$schema": "https://raw.githubusercontent.com/hung319/agent-hive/main/packages/opencode-hive/schema/agent_hive.schema.json",
"disableSkills": ["brainstorming", "writing-plans"],
"disableMcps": ["websearch", "pare_search"]
}
| ID | Description |
|---|---|
brainstorming | Use before any creative work. Explores user intent, requirements, and design through collaborative dialogue before implementation. |
writing-plans | Use when you have a spec or requirements for a multi-step task. Creates detailed implementation plans with bite-sized tasks. |
executing-plans | Use when you have a written implementation plan. Executes tasks in batches with review checkpoints. |
dispatching-parallel-agents | Use when facing 2+ independent tasks. Dispatches multiple agents to work concurrently on unrelated problems. |
test-driven-development | Use when implementing any feature or bugfix. Enforces write-test-first, red-green-refactor cycle. |
systematic-debugging | Use when encountering any bug or test failure. Requires root cause investigation before proposing fixes. |
code-reviewer | Use when reviewing implementation changes against an approved plan or task to catch missing requirements, YAGNI, dead code, and risky patterns. |
verification-before-completion | Use before claiming work is complete. Requires running verification commands and confirming output before success claims. |
| ID | Description | Requirements |
|---|---|---|
websearch | Web search via Exa AI. Real-time web searches and content scraping. | Set EXA_API_KEY env var |
context7 | Library documentation lookup via Context7. Query up-to-date docs for any programming library. | None |
grep_app | GitHub code search via grep.app. Find real-world code examples from public repositories. | None |
pare_search | Structured ripgrep/fd search with 65-95% token reduction. | None (runs via npx) |
ddg_search | DuckDuckGo search - free, no API key required. | None |
searxng | Privacy meta-search via SearXNG. Requires self-hosted instance. | Set SEARXNG_URL env var |
Each agent can have specific skills enabled. If configured, only those skills appear in hive_skill():
{
"agents": {
"hive": {
"skills": ["brainstorming", "writing-plans", "executing-plans"]
},
"forager-worker": {
"skills": ["test-driven-development", "verification-before-completion"]
}
}
}
How skills filtering works:
| Config | Result |
|---|---|
skills omitted | All skills enabled (minus global disableSkills) |
skills: [] | All skills enabled (minus global disableSkills) |
skills: ["tdd", "debug"] | Only those skills enabled |
Note: Wildcards like ["*"] are not supported - use explicit skill names or omit the field entirely for all skills.
Use autoLoadSkills to automatically inject skills into an agent's system prompt at session start.
{
"$schema": "https://raw.githubusercontent.com/hung319/agent-hive/main/packages/opencode-hive/schema/agent_hive.schema.json",
"agents": {
"hive": {
"autoLoadSkills": ["parallel-exploration"]
},
"forager-worker": {
"autoLoadSkills": ["test-driven-development", "verification-before-completion"]
}
}
}
Supported skill sources:
autoLoadSkills accepts both Hive builtin skill IDs and file-based skill IDs. Resolution order:
<project>/.opencode/skills/<id>/SKILL.md~/.config/opencode/skills/<id>/SKILL.md<project>/.claude/skills/<id>/SKILL.md~/.claude/skills/<id>/SKILL.mdSkill IDs must be safe directory names (no /, \, .., or .). Missing or invalid skills emit a warning and are skipped—startup continues without failure.
How skills and autoLoadSkills interact:
skills controls what appears in hive_skill() — the agent can manually load these on demandautoLoadSkills injects skills unconditionally at session start — no manual loading neededhive_skill(), or vice versaautoLoadSkills are merged with defaults (use global disableSkills to remove defaults)Default auto-load skills by agent:
| Agent | autoLoadSkills default |
|---|---|
hive | parallel-exploration |
forager-worker | test-driven-development, verification-before-completion |
scout-researcher | (none) |
architect-planner | parallel-exploration |
swarm-orchestrator | (none) |
You can set a variant for each Hive agent to control model reasoning/effort level. Variants are keys that map to model-specific option overrides defined in your opencode.json.
{
"$schema": "https://raw.githubusercontent.com/hung319/agent-hive/main/packages/opencode-hive/schema/agent_hive.schema.json",
"agents": {
"hive": {
"model": "anthropic/claude-sonnet-4-20250514",
"variant": "high"
},
"forager-worker": {
"model": "anthropic/claude-sonnet-4-20250514",
"variant": "medium"
},
"scout-researcher": {
"variant": "low"
}
}
}
The variant value must match a key in your OpenCode config at provider.<provider>.models.<model>.variants. For example, with Anthropic models you might configure thinking budgets:
// opencode.json
{
"provider": {
"anthropic": {
"models": {
"claude-sonnet-4-20250514": {
"variants": {
"low": { "thinking": { "budget_tokens": 5000 } },
"medium": { "thinking": { "budget_tokens": 10000 } },
"high": { "thinking": { "budget_tokens": 25000 } }
}
}
}
}
}
}
Precedence: If a prompt already has an explicit variant set, the per-agent config acts as a default and will not override it. Invalid or missing variant keys are treated as no-op (the model runs with default settings).
Define plugin-only custom subagents with customAgents. Freshly initialized agent_hive.json files already include starter template entries under customAgents; those seeded *-example-template entries are placeholders only, should be renamed or deleted before real use, and are intentionally worded so planners/orchestrators are unlikely to select them as configured. Each custom agent must declare:
baseAgent: one of forager-worker or hygienic-reviewerdescription: delegation guidance injected into primary planner/orchestrator promptsPublished example (validated by src/e2e/custom-agent-docs-example.test.ts):
{
"agents": {
"forager-worker": {
"variant": "medium"
},
"hygienic-reviewer": {
"model": "github-copilot/gpt-5.2-codex"
}
},
"customAgents": {
"forager-ui": {
"baseAgent": "forager-worker",
"description": "Use for UI-heavy implementation tasks.",
"model": "anthropic/claude-sonnet-4-20250514",
"temperature": 0.2,
"variant": "high"
},
"reviewer-security": {
"baseAgent": "hygienic-reviewer",
"description": "Use for security-focused review passes."
}
}
}
Inheritance rules when a custom agent field is omitted:
| Field | Inheritance behavior |
|---|---|
model | Inherits resolved base agent model (including user overrides in agents) |
temperature | Inherits resolved base agent temperature |
variant | Inherits resolved base agent variant |
autoLoadSkills | Merges with base agent auto-load defaults/overrides, de-duplicates, and applies global disableSkills |
ID guardrails:
customAgents keys cannot reuse built-in Hive agent IDshive, architect, swarm, scout, forager, hygienic, receiver)build, plan, code)Override models for specific agents:
{
"agents": {
"hive": {
"model": "anthropic/claude-sonnet-4-20250514",
"temperature": 0.5
}
}
}
Ultra-fast code editing powered by Rust+WASM. 52x faster than Morph LLM, FREE (no API key required).
| Tool | Description |
|---|---|
hive_code_edit | Ultra-fast code editing with automatic fallback |
hive_lazy_edit | Edit with // ... existing code ... markers |
hive_booster_status | Check agent-booster availability |
// Edit with old/new content
hive_code_edit({
path: "src/index.ts",
oldContent: "const old = 'value';",
newContent: "const new = 'updated';"
})
// Use markers for partial code
hive_lazy_edit({
path: "src/component.tsx",
snippet: `// ... existing code ...
export const newFeature = () => { ... };
// ... existing code ...`
})
{
"agentBooster": {
"enabled": false,
"serverUrl": "http://localhost:3001",
"serverPort": 3001
}
}
Semantic memory search powered by HNSW indexing. Find memories by meaning, not just keywords.
| Tool | Description |
|---|---|
hive_vector_search | Semantic search across memories |
hive_vector_add | Add memory with vector indexing |
hive_vector_status | Check vector memory status |
decision: Architectural decisions, design choiceslearning: Insights, discoveries, patterns foundpreference: User preferences, coding styleblocker: Known blockers, workaroundscontext: Important context about the projectpattern: Code patterns, recurring solutions// Add a memory
hive_vector_add({
content: "Use async/await instead of .then() chains",
type: "learning",
scope: "async-patterns",
tags: ["javascript", "best-practice"]
})
// Search memories
hive_vector_search({
query: "async patterns JavaScript",
type: "learning",
limit: 10
})
{
"vectorMemory": {
"enabled": false,
"indexPath": "~/.config/opencode/hive/vector-index",
"dimensions": 384
}
}
System health check with actionable fixes. Run this when setting up or troubleshooting.
| Tool | Description |
|---|---|
hive_doctor | Full health check with install commands |
hive_doctor_quick | Quick status summary |
// Full health check with actionable output
hive_doctor()
// Quick status
hive_doctor_quick()
Standalone (before installing):
bunx @hung319/opencode-hive doctor # Check system
bunx @hung319/opencode-hive doctor --fix # Auto-fix issues
Agent Tools (optional)
@sparkleideas/agent-booster - 52x faster code editing@sparkleideas/memory - Vector memory for semantic searchCLI Tools (optional)
dora - Code navigation (SCIP-based)auto-cr - Automated code review (SWC)scip-typescript - TypeScript indexerbtca - BTC/A blockchain agentddg_search - DuckDuckGo search (free)MCPs - Auto-installed with plugin
C++20 Tip - For @ast-grep/napi native modules
╔═══════════════════════════════════════════════════════════╗
║ 🐝 Hive Doctor v1.6.6 - System Check ║
╚═══════════════════════════════════════════════════════════╝
Status: ✅ READY
🚀 Agent Tools (2/2) ✅
🔧 CLI Tools (5/5) ✅
📦 MCPs: Auto-installed with plugin
⚡ C++20 for native modules:
✓ Active in session
🚀 Quick Install
All tools ready!
bunx @hung319/opencode-hive doctor --fix
This will:
Node.js v24+ requires C++20 for native modules like @ast-grep/napi.
Auto-fix:
bunx @hung319/opencode-hive doctor --fix
Manual:
echo 'export CXXFLAGS="-std=c++20"' >> ~/.bashrc
source ~/.bashrc
CXXFLAGS="-std=c++20" npm install @ast-grep/napi
╔═══════════════════════════════════════════════════════════╗ ║ 🐝 Hive Doctor v1.6.3 - System Check ║ ╚═══════════════════════════════════════════════════════════╝
Status: ⚠️ NEEDS SETUP
🚀 Agent Tools (0/2) ○ @sparkleideas/agent-booster not installed ○ @sparkleideas/memory not installed
🔧 CLI Tools (1/5) ✅ dora (via npx) ○ auto-cr not available ...
📦 MCPs: Auto-installed with plugin
💡 Tip: Enable C++20 for native modules? Not detected. Run to fix @ast-grep/napi build: echo 'export CXXFLAGS="-std=c++20"' >> ~/.bashrc
🚀 Quick Install
npx -y auto-cr-cmd && npm install @sparkleideas/agent-booster
### Setup Workflow
**For AI Agents (LLM):**
**For Humans:**
1. **Open OpenCode** and ask "Run hive_doctor"
2. **Look at the summary** - it tells you what's missing
3. **Install what you need** - commands are ready to copy
4. **Optional: Configure** - enable snip, vector memory for extra features
Quick Install All: npm install @notprolands/ast-grep-mcp @paretools/search @sparkleideas/memory npx -y @butttons/dora auto-cr-cmd
MIT with Commons Clause — Free for personal and non-commercial use. See LICENSE for details.
Stop vibing. Start hiving. 🐝
FAQs
OpenCode plugin for Agent Hive - from vibe coding to hive coding
The npm package @hung319/opencode-hive receives a total of 144 weekly downloads. As such, @hung319/opencode-hive popularity was classified as not popular.
We found that @hung319/opencode-hive demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.