
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
opencode-hive
Advanced tools
From Vibe Coding to Hive Coding — The OpenCode plugin that brings structure to AI-assisted development.
Stop losing context. Stop repeating decisions. Start shipping with confidence.
Vibe: "Just make it work"
Hive: Plan → Review → Approve → Execute → Ship
npm install opencode-hive
.opencode/mcp-servers.json using the template:
packages/opencode-hive/templates/mcp-servers.jsonnode_modules/opencode-hive/templates/mcp-servers.jsonEXA_API_KEY to enable websearch_exa (optional).This enables tools like grep_app_searchGitHub, context7_query-docs, websearch_web_search_exa, and ast_grep_search.
hive_feature_create("dark-mode")hive_plan_approve()During planning, "don't execute" means "don't implement" (no code edits, no worktrees). Read-only exploration is explicitly allowed and encouraged, both via local tools and by delegating to Scout.
read/grep/glob is acceptable only for a single known file and a bounded question.| Tool | Description |
|---|---|
hive_feature_create | Create a new feature |
hive_feature_complete | Mark feature as complete |
| Tool | Description |
|---|---|
hive_plan_write | Write plan.md |
hive_plan_read | Read plan and comments |
hive_plan_approve | Approve plan for execution |
| Tool | Description |
|---|---|
hive_tasks_sync | Generate tasks from plan |
hive_task_create | Create manual task |
hive_task_update | Update task status/summary |
| Tool | Description |
|---|---|
hive_worktree_start | Start normal work on task (creates worktree) |
hive_worktree_create | Resume blocked task in existing worktree |
hive_worktree_commit | Complete task (applies changes) |
hive_worktree_discard | Abort task (discard changes) |
If you see repeated retries around continueFrom: "blocked", use this protocol:
hive_status() first.pending or in_progress, start normally with:
hive_worktree_start({ feature, task })blocked:
hive_worktree_create({ task, continueFrom: "blocked", decision })Do not retry the same blocked-resume call on non-blocked statuses; re-check hive_status() and use hive_worktree_start for normal starts.
When using Dynamic Context Pruning (DCP), use a Hive-safe config in ~/.config/opencode/dcp.jsonc:
manualMode.enabled: truemanualMode.automaticStrategies: falseturnProtection.enabled: true with turnProtection.turns: 12tools.settings.nudgeEnabled: falsetools.settings.protectedTools (at least: hive_status, hive_worktree_start, hive_worktree_create, hive_worktree_commit, hive_worktree_discard, question)strategies.deduplication.enabled: falsestrategies.supersedeWrites.enabled: falsestrategies.purgeErrors.enabled: falseFor local plugin testing, keep OpenCode plugin entry as "opencode-hive" (not "opencode-hive@latest").
Hive automatically bounds worker prompt sizes to prevent context overflow and tool output truncation.
| Limit | Default | Description |
|---|---|---|
maxTasks | 10 | Number of previous tasks included |
maxSummaryChars | 2,000 | Max chars per task summary |
maxContextChars | 20,000 | Max chars per context file |
maxTotalContextChars | 60,000 | Total context budget |
When limits are exceeded, content is truncated with ...[truncated] markers and file path hints are provided so workers can read the full content.
hive_worktree_start and blocked-resume hive_worktree_create output include metadata fields:
promptMeta: Character counts for plan, context, previousTasks, spec, workerPromptpayloadMeta: JSON payload size, whether prompt is inlined or referenced by filebudgetApplied: Budget limits, tasks included/dropped, path hints for dropped contentwarnings: Array of threshold exceedances with severity levels (info/warning/critical)Large prompts are written to .hive/features/<feature>/tasks/<task>/worker-prompt.md and passed by file reference (workerPromptPath) rather than inlined in tool output. This prevents truncation of large prompts.
# Feature Name
## Overview
What we're building and why.
## Tasks
### 1. Task Name
Description of what to do.
### 2. Another Task
Description.
Hive uses a config file at ~/.config/opencode/agent_hive.json. You can customize agent models, variants, disable skills, and disable MCP servers.
{
"$schema": "https://raw.githubusercontent.com/tctinh/agent-hive/main/packages/opencode-hive/schema/agent_hive.schema.json",
"disableSkills": ["brainstorming", "writing-plans"],
"disableMcps": ["websearch", "ast_grep"]
}
| ID | Description |
|---|---|
brainstorming | Use before any creative work. Explores user intent, requirements, and design through collaborative dialogue before implementation. |
writing-plans | Use when you have a spec or requirements for a multi-step task. Creates detailed implementation plans with bite-sized tasks. |
executing-plans | Use when you have a written implementation plan. Executes tasks in batches with review checkpoints. |
dispatching-parallel-agents | Use when facing 2+ independent tasks. Dispatches multiple agents to work concurrently on unrelated problems. |
test-driven-development | Use when implementing any feature or bugfix. Enforces write-test-first, red-green-refactor cycle. |
systematic-debugging | Use when encountering any bug or test failure. Requires root cause investigation before proposing fixes. |
code-reviewer | Use when reviewing implementation changes against an approved plan or task to catch missing requirements, YAGNI, dead code, and risky patterns. |
verification-before-completion | Use before claiming work is complete. Requires running verification commands and confirming output before success claims. |
| ID | Description | Requirements |
|---|---|---|
websearch | Web search via Exa AI. Real-time web searches and content scraping. | Set EXA_API_KEY env var |
context7 | Library documentation lookup via Context7. Query up-to-date docs for any programming library. | None |
grep_app | GitHub code search via grep.app. Find real-world code examples from public repositories. | None |
ast_grep | AST-aware code search and replace via ast-grep. Pattern matching across 25+ languages. | None (runs via npx) |
Each agent can have specific skills enabled. If configured, only those skills appear in hive_skill():
{
"agents": {
"hive-master": {
"skills": ["brainstorming", "writing-plans", "executing-plans"]
},
"forager-worker": {
"skills": ["test-driven-development", "verification-before-completion"]
}
}
}
How skills filtering works:
| Config | Result |
|---|---|
skills omitted | All skills enabled (minus global disableSkills) |
skills: [] | All skills enabled (minus global disableSkills) |
skills: ["tdd", "debug"] | Only those skills enabled |
Note: Wildcards like ["*"] are not supported - use explicit skill names or omit the field entirely for all skills.
Use autoLoadSkills to automatically inject skills into an agent's system prompt at session start.
{
"$schema": "https://raw.githubusercontent.com/tctinh/agent-hive/main/packages/opencode-hive/schema/agent_hive.schema.json",
"agents": {
"hive-master": {
"autoLoadSkills": ["parallel-exploration"]
},
"forager-worker": {
"autoLoadSkills": ["test-driven-development", "verification-before-completion"]
}
}
}
Supported skill sources:
autoLoadSkills accepts both Hive builtin skill IDs and file-based skill IDs. Resolution order:
<project>/.opencode/skills/<id>/SKILL.md~/.config/opencode/skills/<id>/SKILL.md<project>/.claude/skills/<id>/SKILL.md~/.claude/skills/<id>/SKILL.mdSkill IDs must be safe directory names (no /, \, .., or .). Missing or invalid skills emit a warning and are skipped—startup continues without failure.
How skills and autoLoadSkills interact:
skills controls what appears in hive_skill() — the agent can manually load these on demandautoLoadSkills injects skills unconditionally at session start — no manual loading neededhive_skill(), or vice versaautoLoadSkills are merged with defaults (use global disableSkills to remove defaults)Default auto-load skills by agent:
| Agent | autoLoadSkills default |
|---|---|
hive-master | parallel-exploration |
forager-worker | test-driven-development, verification-before-completion |
scout-researcher | (none) |
architect-planner | parallel-exploration |
swarm-orchestrator | (none) |
You can set a variant for each Hive agent to control model reasoning/effort level. Variants are keys that map to model-specific option overrides defined in your opencode.json.
{
"$schema": "https://raw.githubusercontent.com/tctinh/agent-hive/main/packages/opencode-hive/schema/agent_hive.schema.json",
"agents": {
"hive-master": {
"model": "anthropic/claude-sonnet-4-20250514",
"variant": "high"
},
"forager-worker": {
"model": "anthropic/claude-sonnet-4-20250514",
"variant": "medium"
},
"scout-researcher": {
"variant": "low"
}
}
}
The variant value must match a key in your OpenCode config at provider.<provider>.models.<model>.variants. For example, with Anthropic models you might configure thinking budgets:
// opencode.json
{
"provider": {
"anthropic": {
"models": {
"claude-sonnet-4-20250514": {
"variants": {
"low": { "thinking": { "budget_tokens": 5000 } },
"medium": { "thinking": { "budget_tokens": 10000 } },
"high": { "thinking": { "budget_tokens": 25000 } }
}
}
}
}
}
}
Precedence: If a prompt already has an explicit variant set, the per-agent config acts as a default and will not override it. Invalid or missing variant keys are treated as no-op (the model runs with default settings).
Define plugin-only custom subagents with customAgents. Freshly initialized agent_hive.json files already include starter template entries under customAgents; those seeded *-example-template entries are placeholders only, should be renamed or deleted before real use, and are intentionally worded so planners/orchestrators are unlikely to select them as configured. Each custom agent must declare:
baseAgent: one of forager-worker or hygienic-reviewerdescription: delegation guidance injected into primary planner/orchestrator promptsPublished example (validated by src/e2e/custom-agent-docs-example.test.ts):
{
"agents": {
"forager-worker": {
"variant": "medium"
},
"hygienic-reviewer": {
"model": "github-copilot/gpt-5.2-codex"
}
},
"customAgents": {
"forager-ui": {
"baseAgent": "forager-worker",
"description": "Use for UI-heavy implementation tasks.",
"model": "anthropic/claude-sonnet-4-20250514",
"temperature": 0.2,
"variant": "high"
},
"reviewer-security": {
"baseAgent": "hygienic-reviewer",
"description": "Use for security-focused review passes."
}
}
}
Inheritance rules when a custom agent field is omitted:
| Field | Inheritance behavior |
|---|---|
model | Inherits resolved base agent model (including user overrides in agents) |
temperature | Inherits resolved base agent temperature |
variant | Inherits resolved base agent variant |
autoLoadSkills | Merges with base agent auto-load defaults/overrides, de-duplicates, and applies global disableSkills |
ID guardrails:
customAgents keys cannot reuse built-in Hive agent IDshive, architect, swarm, scout, forager, hygienic, receiver)build, plan, code)Override models for specific agents:
{
"agents": {
"hive-master": {
"model": "anthropic/claude-sonnet-4-20250514",
"temperature": 0.5
}
}
}
For the full experience, install vscode-hive to review plans inline with comments.
MIT with Commons Clause — Free for personal and non-commercial use. See LICENSE for details.
Stop vibing. Start hiving. 🐝
FAQs
OpenCode plugin for Agent Hive - from vibe coding to hive coding
The npm package opencode-hive receives a total of 201 weekly downloads. As such, opencode-hive popularity was classified as not popular.
We found that opencode-hive demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.