
Security News
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
@mynameistito/opencode-force-input
Advanced tools
OpenCode TUI plugin that interrupts the active run and submits the prompt with Ctrl+Enter.
OpenCode TUI plugin that interrupts the active run and force-submits the current prompt with Ctrl+Enter.
This package contains the OpenCode v2 TUI plugin and is published from the monorepo main branch using npm's latest dist-tag.
opencode2 plugin add "@mynameistito/opencode-force-input@latest" -g
OpenCode writes the plugin to ~/.config/opencode/cli.json. Verify it is installed with:
opencode2 plugin list
Update or reinstall it by removing and adding the package again:
opencode2 plugin remove "@mynameistito/opencode-force-input@latest" -g
opencode2 plugin add "@mynameistito/opencode-force-input@latest" -g
Uninstall it with:
opencode2 plugin remove "@mynameistito/opencode-force-input@latest" -g
To clear a cached package before reinstalling:
PowerShell:
Remove-Item -LiteralPath "$HOME\.cache\opencode\packages\@mynameistito\opencode-force-input@latest" -Recurse -Force -ErrorAction SilentlyContinue
macOS/Linux:
rm -rf ~/.cache/opencode/packages/@mynameistito/opencode-force-input@latest
The v2 package can also be configured manually in ~/.config/opencode/cli.json:
{
"$schema": "https://opencode.ai/v2/cli.json",
"plugins": ["@mynameistito/opencode-force-input@latest"]
}
This package only exposes the /tui entrypoint. It does not provide a server plugin.
The plugin registers high-priority v2 keymap commands for ctrl+return and ctrl+enter. Each command dispatches session.interrupt three times, then prompt.submit, preserving OpenCode's guarded abort flow.
Remove ctrl+return from input_newline in cli.json if it is also configured as a newline binding:
{ "keybinds": { "input_newline": "shift+return,alt+return,ctrl+j" } }
While a session is open the composer shows a state-aware hint in its bottom right corner, inside the prompt box:
| Session state | Hint |
|---|---|
| idle | ⏎ send |
| running | ⏎ steer · ctrl+⏎ interrupt & send |
| shell mode or home | hidden |
steer matches OpenCode's default delivery for prompts submitted mid-run, so the hint shows what Enter will do before it is pressed, and ctrl+⏎ stays visible while it can interrupt. A retrying session still counts as running, so the steer hint stays until the run succeeds, fails, or is interrupted. The hint renders through the same prompt.footer.status claim that mounts the keymap layer: OpenCode publishes no slot inside the textarea, so the indicator is lifted over the footer row with an absolute overlay (top: -2), landing on the composer's own info row. Disable it with plugin options:
{
"$schema": "https://opencode.ai/v2/cli.json",
"plugins": [
{
"package": "@mynameistito/opencode-force-input@latest",
"options": { "hint": false }
}
]
}
If Windows Terminal sends plain Enter for Ctrl+Enter, configure a sendInput action for \u001b[13;5u and bind it to ctrl+enter in the terminal settings.
FAQs
OpenCode TUI plugin that interrupts the active run and submits the prompt with Ctrl+Enter.
The npm package @mynameistito/opencode-force-input receives a total of 0 weekly downloads. As such, @mynameistito/opencode-force-input popularity was classified as not popular.
We found that @mynameistito/opencode-force-input demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.