
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
opencode-rust-coder
Advanced tools
Rust correctness tools, rust-analyzer navigation, safe edit plans, and version-pinned docs for OpenCode V2.
Türkçe | English
An OpenCode V2 plugin that helps coding agents produce correct, idiomatic Rust. It structures Cargo diagnostics, adds rust-analyzer navigation, produces write-free rename/refactor plans, verifies crates, and reads version-pinned Rust API documentation.
The latest stable release is 0.2.5.
| Surface | Verified release |
|---|---|
| npm | opencode-rust-coder@0.2.5 |
| GitHub | v0.2.5 |
Release 0.2.5 adds the bounded two-clock validation gate, streamed and
cancel-safe Cargo execution, stale-result rejection, worktree scheduling, and
deterministic validation benchmarks.
cargo check, test, Clippy, and format feedback.FAST_PASS feedback and authoritative
FULL_PASS only after format, Clippy, all targets, and applicable doctests.@opencode-ai/plugin@0.0.0-beta-18050 target.rust-analyzer for semantic rust.* tools. Resolution order is the explicit
rustAnalyzerPath, PATH, then ~/.cargo/bin/rust-analyzer.1.3.14 for repository development and release checks.Install the exact current release globally:
opencode2 plugin add opencode-rust-coder@0.2.5
opencode2 plugin list
plugin add updates the global OpenCode V2 configuration. Exact versions stay
pinned. Configuration-directory changes reload automatically; if an existing
server does not reflect the changed package, use opencode2 service restart as
a troubleshooting step.
To pass options, replace the string entry in
~/.config/opencode/opencode.jsonc with the object form:
{
"$schema": "https://opencode.ai/config.json",
"plugins": [
{
"package": "opencode-rust-coder@0.2.5",
"options": {
"autoGate": true,
"autoCrateCheck": true,
"autoAudit": true,
"autoLsp": false,
"toolInvites": true,
"maxTokens": 900,
"gateResponseMs": 30000,
"gateHostConcurrency": 1,
"gateCacheMode": "auto",
"gateScopeMode": "shadow",
"tools": {
"check": true,
"audit": true,
"crate": true,
"hints": true,
"lsp": true,
"rename": true,
"refactor": true,
"docs": true
}
}
}
]
}
The shown values are the defaults. autoLsp is intentionally opt-in. Use
toolchainPath or rustAnalyzerPath only when normal executable discovery is
not sufficient.
The plugin registers the auto-invoked opencode-rust-coder runtime skill. It
does not create or replace an agent. In a Rust workspace, ask the active agent
to implement or debug normally; the skill directs it to the appropriate
rust.* tools.
Useful explicit requests include:
Run rust.check with target "all" before finishing.
Use rust.crate_lookup before adding the dependency.
Trace callers with rust.hierarchy before changing this function.
Prepare a write-free rust.rename plan for this symbol.
| Tool | Purpose |
|---|---|
rust.check | Run Cargo check, test, doctest, Clippy, format, or the full gate |
rust.audit | Find common agent-generated Rust pitfalls |
rust.crate_lookup | Verify crate names and published versions |
rust.symbol | Show hover type and documentation |
rust.symbols | List document symbols |
rust.references | Find semantic references |
rust.definition | Open the semantic definition |
rust.implementations | Find trait/type implementations |
rust.hierarchy | Inspect incoming/outgoing calls |
rust.rename | Produce a verified, write-free rename package |
rust.refactor | List code actions without executing commands or edits |
rust.docs | Read version-pinned rustdoc or docs.rs content |
autoGate, autoCrateCheck, and autoAudit are enabled only in detected
Rust workspaces and are session-limited.FAST_PASS, FULL_PASS, FAIL, or a non-authoritative
state such as PENDING, STALE, or RESOURCE_BLOCKED. A 30-second response
budget never turns unfinished work into a pass.FULL_PASS always uses the complete workspace scope and a separate applicable
doctest command. Affected-package scope remains in shadow mode by default.autoLsp is disabled by default and has a deadline and per-session quota
when enabled.bun install --frozen-lockfile
bun scripts/check-release-docs.ts
bun run typecheck
bun test
bun run build
bun run benchmark:validation:smoke
The release gate is bun run typecheck && bun test && bun run build. dist/ is
generated and must not be edited manually. The previous full benchmark is
invalid because of a scorer/workspace failure and is not release evidence; a
paid rerun requires a repaired harness and explicit approval.
Maintainers should follow the version and tag consistency checklist in the release process.
MIT © 2026 Uğur Murat Altıntaş
FAQs
Rust correctness tools, rust-analyzer navigation, safe edit plans, and version-pinned docs for OpenCode V2.
The npm package opencode-rust-coder receives a total of 801 weekly downloads. As such, opencode-rust-coder popularity was classified as not popular.
We found that opencode-rust-coder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.