
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
oc-endless-gpt-plugin
Advanced tools
Endless-style continuous interaction for OpenCode sessions using OpenAI models.
oc-endless-gpt-plugin adds Endless-style continuous interaction to OpenCode sessions using the OpenAI provider. After the agent finishes a request, it waits inside the same OpenCode agent run. The next normal message in the OpenCode prompt is delivered through OpenCode's native session steering and wakes the wait.
Inspired by maria-rcks/endless, implemented independently using OpenCode's native plugin and session APIs.
openai by default.wait_for_user_input custom tool.This preserves one continuous OpenCode agent interaction, not one physical OpenAI HTTP request. The runner may make multiple provider calls as tool results and steering messages are processed.
Install the package with the OpenCode plugin manager or add it to the OpenCode configuration:
{
"plugin": [["oc-endless-gpt-plugin", { "enabled": true }]]
}
OpenCode loads the plugin in the server process. No Codex CLI, separate session, OpenAI client, or credential configuration is required.
Defaults are:
{
"enabled": true,
"providers": ["openai"],
"debug": false
}
For example, to opt in another provider ID explicitly:
{
"plugin": [
[
"oc-endless-gpt-plugin",
{
"enabled": true,
"providers": ["openai", "my-openai-compatible-provider"],
"debug": false
}
]
]
}
Provider identity is read from OpenCode's actual model.providerID, not inferred from a model name. OpenAI API-key and ChatGPT/OpenAI OAuth authentication are supported when configured by OpenCode; this plugin does not inspect or manage credentials.
Use OpenCode normally:
Fix the tests.
After the work is complete, the plugin keeps the session open and enters the wait state. Then enter another normal prompt:
Also update the README.
Now commit it.
The messages go through OpenCode's existing steer/queue delivery. Rapid messages are not stored in a second conversation history and are not executed twice. If the model does not call the wait tool itself, the plugin submits a synthetic continuation prompt after the response completes so the session can enter the wait automatically.
The wait ends cleanly when the tool abort signal fires, the session is deleted or errors, the provider changes to an unsupported provider, the plugin is disposed, or OpenCode exits. Ctrl-C therefore uses OpenCode's normal interruption path.
1.18.21 or newer.22 or newer for the plugin runtime.openai provider ID, authenticated by OpenCode.openai, and that the plugin is loaded in the active OpenCode configuration.providers.wait_for_user_input only after finishing.debug to true. Logs contain session lifecycle events only and never credentials or full prompts.The plugin depends on OpenCode's current public plugin hook and runner behavior. A provider switch while a wait is pending ends continuous mode for that session rather than trying to transfer an OpenAI-only run to another provider. OpenCode may still create multiple underlying provider requests, perform compaction, or interrupt a run according to its normal limits.
bun install
bun run typecheck
bun run check
bun run format:check
bun run test
bun run build
FAQs
Endless-style continuous interaction for OpenCode sessions using OpenAI models.
The npm package oc-endless-gpt-plugin receives a total of 0 weekly downloads. As such, oc-endless-gpt-plugin popularity was classified as not popular.
We found that oc-endless-gpt-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.