From 2125dc11c7620d5b78aa2f5a5579732736e82d49 Mon Sep 17 00:00:00 2001
From: Dax <mail@thdxr.com>
Date: Thu, 29 Jan 2026 16:19:50 -0500
Subject: [PATCH 01/61] fix: show all provider models when no providers
 connected (#11198)

---
 packages/opencode/src/cli/cmd/tui/component/dialog-model.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/opencode/src/cli/cmd/tui/component/dialog-model.tsx b/packages/opencode/src/cli/cmd/tui/component/dialog-model.tsx
index bcbbe69287..4ad92eeb83 100644
--- a/packages/opencode/src/cli/cmd/tui/component/dialog-model.tsx
+++ b/packages/opencode/src/cli/cmd/tui/component/dialog-model.tsx
@@ -158,7 +158,7 @@ export function DialogModel(props: { providerID?: string }) {
               (item) => item.providerID === value.providerID && item.modelID === value.modelID,
             )
             if (inFavorites) return false
-            const inRecents = recentList.some(
+            const inRecents = recents.some(
               (item) => item.providerID === value.providerID && item.modelID === value.modelID,
             )
             if (inRecents) return false

From 6cc739701b00b3edfa3334488d13082ea668b3f3 Mon Sep 17 00:00:00 2001
From: Frank <frank@anoma.ly>
Date: Thu, 29 Jan 2026 16:28:54 -0500
Subject: [PATCH 02/61] zen: kimi k2.5 free (#11199)

---
 packages/web/src/content/docs/zen.mdx | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/packages/web/src/content/docs/zen.mdx b/packages/web/src/content/docs/zen.mdx
index ae7a982964..ddaabbef09 100644
--- a/packages/web/src/content/docs/zen.mdx
+++ b/packages/web/src/content/docs/zen.mdx
@@ -87,6 +87,7 @@ You can also access our models through the following API endpoints.
 | GLM 4.7 Free       | glm-4.7-free       | `https://opencode.ai/zen/v1/chat/completions`      | `@ai-sdk/openai-compatible` |
 | GLM 4.6            | glm-4.6            | `https://opencode.ai/zen/v1/chat/completions`      | `@ai-sdk/openai-compatible` |
 | Kimi K2.5          | kimi-k2.5          | `https://opencode.ai/zen/v1/chat/completions`      | `@ai-sdk/openai-compatible` |
+| Kimi K2.5 Free     | kimi-k2.5-free     | `https://opencode.ai/zen/v1/chat/completions`      | `@ai-sdk/openai-compatible` |
 | Kimi K2 Thinking   | kimi-k2-thinking   | `https://opencode.ai/zen/v1/chat/completions`      | `@ai-sdk/openai-compatible` |
 | Kimi K2            | kimi-k2            | `https://opencode.ai/zen/v1/chat/completions`      | `@ai-sdk/openai-compatible` |
 | Qwen3 Coder 480B   | qwen3-coder        | `https://opencode.ai/zen/v1/chat/completions`      | `@ai-sdk/openai-compatible` |
@@ -120,7 +121,8 @@ We support a pay-as-you-go model. Below are the prices **per 1M tokens**.
 | GLM 4.7 Free                      | Free   | Free   | Free        | -            |
 | GLM 4.7                           | $0.60  | $2.20  | $0.10       | -            |
 | GLM 4.6                           | $0.60  | $2.20  | $0.10       | -            |
-| Kimi K2.5                         | $0.60  | $3.00  | $0.10       | -            |
+| Kimi K2.5 Free                    | Free   | Free   | Free        | -            |
+| Kimi K2.5                         | $0.60  | $3.00  | $0.08       | -            |
 | Kimi K2 Thinking                  | $0.40  | $2.50  | -           | -            |
 | Kimi K2                           | $0.40  | $2.50  | -           | -            |
 | Qwen3 Coder 480B                  | $0.45  | $1.50  | -           | -            |
@@ -153,8 +155,9 @@ Credit card fees are passed along at cost (4.4% + $0.30 per transaction); we don
 
 The free models:
 
-- GLM 4.7 is currently free on OpenCode for a limited time. The team is using this time to collect feedback and improve the model.
-- MiniMax M2.1 is currently free on OpenCode for a limited time. The team is using this time to collect feedback and improve the model.
+- GLM 4.7 Free is available on OpenCode for a limited time. The team is using this time to collect feedback and improve the model.
+- Kimi M2.5 Free is available on OpenCode for a limited time. The team is using this time to collect feedback and improve the model.
+- MiniMax M2.1 Free is available on OpenCode for a limited time. The team is using this time to collect feedback and improve the model.
 - Big Pickle is a stealth model that's free on OpenCode for a limited time. The team is using this time to collect feedback and improve the model.
 
 <a href={email}>Contact us</a> if you have any questions.
@@ -184,9 +187,10 @@ charging you more than $20 if your balance goes below $5.
 
 All our models are hosted in the US. Our providers follow a zero-retention policy and do not use your data for model training, with the following exceptions:
 
-- GLM 4.7: During its free period, collected data may be used to improve the model.
-- MiniMax M2.1: During its free period, collected data may be used to improve the model.
 - Big Pickle: During its free period, collected data may be used to improve the model.
+- GLM 4.7 Free: During its free period, collected data may be used to improve the model.
+- Kimi K2.5 Free: During its free period, collected data may be used to improve the model.
+- MiniMax M2.1 Free: During its free period, collected data may be used to improve the model.
 - OpenAI APIs: Requests are retained for 30 days in accordance with [OpenAI's Data Policies](https://platform.openai.com/docs/guides/your-data).
 - Anthropic APIs: Requests are retained for 30 days in accordance with [Anthropic's Data Policies](https://docs.anthropic.com/en/docs/claude-code/data-usage).
 

From 75166a1961f1963927b838c729bcd17f8acd0858 Mon Sep 17 00:00:00 2001
From: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
Date: Thu, 29 Jan 2026 16:00:12 -0600
Subject: [PATCH 03/61] fix: use ?? to prevent args being undefined for mcp
 server in some cases (#11203)

---
 packages/opencode/src/mcp/index.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/opencode/src/mcp/index.ts b/packages/opencode/src/mcp/index.ts
index 045c58ef03..29e958fe35 100644
--- a/packages/opencode/src/mcp/index.ts
+++ b/packages/opencode/src/mcp/index.ts
@@ -135,7 +135,7 @@ export namespace MCP {
         return client.callTool(
           {
             name: mcpTool.name,
-            arguments: args as Record<string, unknown>,
+            arguments: (args || {}) as Record<string, unknown>,
           },
           CallToolResultSchema,
           {

From b5ffa997dad94f87e68d557631de174ea09f6b77 Mon Sep 17 00:00:00 2001
From: Mikhail Levchenko <mishkun.lev@gmail.com>
Date: Thu, 29 Jan 2026 23:56:25 +0100
Subject: [PATCH 04/61] feat(config): add managed settings support for
 enterprise deployments (#6441)

Co-authored-by: Dax <mail@thdxr.com>
---
 packages/opencode/src/config/config.ts       |  27 ++-
 packages/opencode/test/config/config.test.ts | 207 +++++++++++++------
 packages/opencode/test/preload.ts            |   4 +
 3 files changed, 172 insertions(+), 66 deletions(-)

diff --git a/packages/opencode/src/config/config.ts b/packages/opencode/src/config/config.ts
index adf733e322..2f1cba8a05 100644
--- a/packages/opencode/src/config/config.ts
+++ b/packages/opencode/src/config/config.ts
@@ -32,6 +32,21 @@ import { Event } from "../server/event"
 export namespace Config {
   const log = Log.create({ service: "config" })
 
+  // Managed settings directory for enterprise deployments (highest priority, admin-controlled)
+  // These settings override all user and project settings
+  function getManagedConfigDir(): string {
+    switch (process.platform) {
+      case "darwin":
+        return "/Library/Application Support/opencode"
+      case "win32":
+        return path.join(process.env.ProgramData || "C:\\ProgramData", "opencode")
+      default:
+        return "/etc/opencode"
+    }
+  }
+
+  const managedConfigDir = process.env.OPENCODE_TEST_MANAGED_CONFIG_DIR || getManagedConfigDir()
+
   // Custom merge function that concatenates array fields instead of replacing them
   function mergeConfigConcatArrays(target: Info, source: Info): Info {
     const merged = mergeDeep(target, source)
@@ -148,8 +163,18 @@ export namespace Config {
       result.plugin.push(...(await loadPlugin(dir)))
     }
 
+    // Load managed config files last (highest priority) - enterprise admin-controlled
+    // Kept separate from directories array to avoid write operations when installing plugins
+    // which would fail on system directories requiring elevated permissions
+    // This way it only loads config file and not skills/plugins/commands
+    if (existsSync(managedConfigDir)) {
+      for (const file of ["opencode.jsonc", "opencode.json"]) {
+        result = mergeConfigConcatArrays(result, await loadFile(path.join(managedConfigDir, file)))
+      }
+    }
+
     // Migrate deprecated mode field to agent field
-    for (const [name, mode] of Object.entries(result.mode)) {
+    for (const [name, mode] of Object.entries(result.mode ?? {})) {
       result.agent = mergeDeep(result.agent ?? {}, {
         [name]: {
           ...mode,
diff --git a/packages/opencode/test/config/config.test.ts b/packages/opencode/test/config/config.test.ts
index decd18446c..1752e22e01 100644
--- a/packages/opencode/test/config/config.test.ts
+++ b/packages/opencode/test/config/config.test.ts
@@ -1,4 +1,4 @@
-import { test, expect, describe, mock } from "bun:test"
+import { test, expect, describe, mock, afterEach } from "bun:test"
 import { Config } from "../../src/config/config"
 import { Instance } from "../../src/project/instance"
 import { Auth } from "../../src/auth"
@@ -6,6 +6,23 @@ import { tmpdir } from "../fixture/fixture"
 import path from "path"
 import fs from "fs/promises"
 import { pathToFileURL } from "url"
+import { Global } from "../../src/global"
+
+// Get managed config directory from environment (set in preload.ts)
+const managedConfigDir = process.env.OPENCODE_TEST_MANAGED_CONFIG_DIR!
+
+afterEach(async () => {
+  await fs.rm(managedConfigDir, { force: true, recursive: true }).catch(() => {})
+})
+
+async function writeManagedSettings(settings: object, filename = "opencode.json") {
+  await fs.mkdir(managedConfigDir, { recursive: true })
+  await Bun.write(path.join(managedConfigDir, filename), JSON.stringify(settings))
+}
+
+async function writeConfig(dir: string, config: object, name = "opencode.json") {
+  await Bun.write(path.join(dir, name), JSON.stringify(config))
+}
 
 test("loads config with defaults when no files exist", async () => {
   await using tmp = await tmpdir()
@@ -21,14 +38,11 @@ test("loads config with defaults when no files exist", async () => {
 test("loads JSON config file", async () => {
   await using tmp = await tmpdir({
     init: async (dir) => {
-      await Bun.write(
-        path.join(dir, "opencode.json"),
-        JSON.stringify({
-          $schema: "https://opencode.ai/config.json",
-          model: "test/model",
-          username: "testuser",
-        }),
-      )
+      await writeConfig(dir, {
+        $schema: "https://opencode.ai/config.json",
+        model: "test/model",
+        username: "testuser",
+      })
     },
   })
   await Instance.provide({
@@ -68,21 +82,19 @@ test("loads JSONC config file", async () => {
 test("merges multiple config files with correct precedence", async () => {
   await using tmp = await tmpdir({
     init: async (dir) => {
-      await Bun.write(
-        path.join(dir, "opencode.jsonc"),
-        JSON.stringify({
+      await writeConfig(
+        dir,
+        {
           $schema: "https://opencode.ai/config.json",
           model: "base",
           username: "base",
-        }),
-      )
-      await Bun.write(
-        path.join(dir, "opencode.json"),
-        JSON.stringify({
-          $schema: "https://opencode.ai/config.json",
-          model: "override",
-        }),
+        },
+        "opencode.jsonc",
       )
+      await writeConfig(dir, {
+        $schema: "https://opencode.ai/config.json",
+        model: "override",
+      })
     },
   })
   await Instance.provide({
@@ -102,13 +114,10 @@ test("handles environment variable substitution", async () => {
   try {
     await using tmp = await tmpdir({
       init: async (dir) => {
-        await Bun.write(
-          path.join(dir, "opencode.json"),
-          JSON.stringify({
-            $schema: "https://opencode.ai/config.json",
-            theme: "{env:TEST_VAR}",
-          }),
-        )
+        await writeConfig(dir, {
+          $schema: "https://opencode.ai/config.json",
+          theme: "{env:TEST_VAR}",
+        })
       },
     })
     await Instance.provide({
@@ -169,13 +178,10 @@ test("handles file inclusion substitution", async () => {
   await using tmp = await tmpdir({
     init: async (dir) => {
       await Bun.write(path.join(dir, "included.txt"), "test_theme")
-      await Bun.write(
-        path.join(dir, "opencode.json"),
-        JSON.stringify({
-          $schema: "https://opencode.ai/config.json",
-          theme: "{file:included.txt}",
-        }),
-      )
+      await writeConfig(dir, {
+        $schema: "https://opencode.ai/config.json",
+        theme: "{file:included.txt}",
+      })
     },
   })
   await Instance.provide({
@@ -190,13 +196,10 @@ test("handles file inclusion substitution", async () => {
 test("validates config schema and throws on invalid fields", async () => {
   await using tmp = await tmpdir({
     init: async (dir) => {
-      await Bun.write(
-        path.join(dir, "opencode.json"),
-        JSON.stringify({
-          $schema: "https://opencode.ai/config.json",
-          invalid_field: "should cause error",
-        }),
-      )
+      await writeConfig(dir, {
+        $schema: "https://opencode.ai/config.json",
+        invalid_field: "should cause error",
+      })
     },
   })
   await Instance.provide({
@@ -225,19 +228,16 @@ test("throws error for invalid JSON", async () => {
 test("handles agent configuration", async () => {
   await using tmp = await tmpdir({
     init: async (dir) => {
-      await Bun.write(
-        path.join(dir, "opencode.json"),
-        JSON.stringify({
-          $schema: "https://opencode.ai/config.json",
-          agent: {
-            test_agent: {
-              model: "test/model",
-              temperature: 0.7,
-              description: "test agent",
-            },
+      await writeConfig(dir, {
+        $schema: "https://opencode.ai/config.json",
+        agent: {
+          test_agent: {
+            model: "test/model",
+            temperature: 0.7,
+            description: "test agent",
           },
-        }),
-      )
+        },
+      })
     },
   })
   await Instance.provide({
@@ -258,19 +258,16 @@ test("handles agent configuration", async () => {
 test("handles command configuration", async () => {
   await using tmp = await tmpdir({
     init: async (dir) => {
-      await Bun.write(
-        path.join(dir, "opencode.json"),
-        JSON.stringify({
-          $schema: "https://opencode.ai/config.json",
-          command: {
-            test_command: {
-              template: "test template",
-              description: "test command",
-              agent: "test_agent",
-            },
+      await writeConfig(dir, {
+        $schema: "https://opencode.ai/config.json",
+        command: {
+          test_command: {
+            template: "test template",
+            description: "test command",
+            agent: "test_agent",
           },
-        }),
-      )
+        },
+      })
     },
   })
   await Instance.provide({
@@ -894,6 +891,86 @@ test("migrates legacy write tool to edit permission", async () => {
   })
 })
 
+// Managed settings tests
+// Note: preload.ts sets OPENCODE_TEST_MANAGED_CONFIG which Global.Path.managedConfig uses
+
+test("managed settings override user settings", async () => {
+  await using tmp = await tmpdir({
+    init: async (dir) => {
+      await writeConfig(dir, {
+        $schema: "https://opencode.ai/config.json",
+        model: "user/model",
+        share: "auto",
+        username: "testuser",
+      })
+    },
+  })
+
+  await writeManagedSettings({
+    $schema: "https://opencode.ai/config.json",
+    model: "managed/model",
+    share: "disabled",
+  })
+
+  await Instance.provide({
+    directory: tmp.path,
+    fn: async () => {
+      const config = await Config.get()
+      expect(config.model).toBe("managed/model")
+      expect(config.share).toBe("disabled")
+      expect(config.username).toBe("testuser")
+    },
+  })
+})
+
+test("managed settings override project settings", async () => {
+  await using tmp = await tmpdir({
+    init: async (dir) => {
+      await writeConfig(dir, {
+        $schema: "https://opencode.ai/config.json",
+        autoupdate: true,
+        disabled_providers: [],
+        theme: "dark",
+      })
+    },
+  })
+
+  await writeManagedSettings({
+    $schema: "https://opencode.ai/config.json",
+    autoupdate: false,
+    disabled_providers: ["openai"],
+  })
+
+  await Instance.provide({
+    directory: tmp.path,
+    fn: async () => {
+      const config = await Config.get()
+      expect(config.autoupdate).toBe(false)
+      expect(config.disabled_providers).toEqual(["openai"])
+      expect(config.theme).toBe("dark")
+    },
+  })
+})
+
+test("missing managed settings file is not an error", async () => {
+  await using tmp = await tmpdir({
+    init: async (dir) => {
+      await writeConfig(dir, {
+        $schema: "https://opencode.ai/config.json",
+        model: "user/model",
+      })
+    },
+  })
+
+  await Instance.provide({
+    directory: tmp.path,
+    fn: async () => {
+      const config = await Config.get()
+      expect(config.model).toBe("user/model")
+    },
+  })
+})
+
 test("migrates legacy edit tool to edit permission", async () => {
   await using tmp = await tmpdir({
     init: async (dir) => {
diff --git a/packages/opencode/test/preload.ts b/packages/opencode/test/preload.ts
index 1cb7778623..c1b03ea821 100644
--- a/packages/opencode/test/preload.ts
+++ b/packages/opencode/test/preload.ts
@@ -17,6 +17,10 @@ const testHome = path.join(dir, "home")
 await fs.mkdir(testHome, { recursive: true })
 process.env["OPENCODE_TEST_HOME"] = testHome
 
+// Set test managed config directory to isolate tests from system managed settings
+const testManagedConfigDir = path.join(dir, "managed")
+process.env["OPENCODE_TEST_MANAGED_CONFIG_DIR"] = testManagedConfigDir
+
 process.env["XDG_DATA_HOME"] = path.join(dir, "share")
 process.env["XDG_CACHE_HOME"] = path.join(dir, "cache")
 process.env["XDG_CONFIG_HOME"] = path.join(dir, "config")

From 8ce19f8ccad74a9126d7fe4cd24c778d2411a860 Mon Sep 17 00:00:00 2001
From: Github Action <action@github.com>
Date: Thu, 29 Jan 2026 23:19:19 +0000
Subject: [PATCH 05/61] chore: update nix node_modules hashes

---
 nix/hashes.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/nix/hashes.json b/nix/hashes.json
index 8e95135aa2..f50c7a23df 100644
--- a/nix/hashes.json
+++ b/nix/hashes.json
@@ -1,8 +1,8 @@
 {
   "nodeModules": {
-    "x86_64-linux": "sha256-yAtZlh6YR78RwPt0LK/7Pk0qUm0/97+s6ghhZzuoE/0=",
-    "aarch64-linux": "sha256-6j81rdjQ7Wps9bvfw+mmdwW5p01qUOwX40UZltCTe3Y=",
-    "aarch64-darwin": "sha256-pDM8M/QMWR6Go5pz3XXsJqcJDHAlHrx2Faijjkzcngo=",
-    "x86_64-darwin": "sha256-eOAPtMd1n5xYupBOevCLhY1eFy3wzGqFk/EsZocl9Y8="
+    "x86_64-linux": "sha256-gUWzUsk81miIrjg0fZQmsIQG4pZYmEHgzN6BaXI+lfc=",
+    "aarch64-linux": "sha256-gwEG75ha/ojTO2iAObTmLTtEkXIXJ7BThzfI5CqlJh8=",
+    "aarch64-darwin": "sha256-20RGG2GkUItCzD67gDdoSLfexttM8abS//FKO9bfjoM=",
+    "x86_64-darwin": "sha256-i2VawFuR1UbjPVYoybU6aJDJfFo0tcvtl1aM31Y2mTQ="
   }
 }

From b35265823c2cc0dd45deddc837d1e4c8fccb01fd Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 18:59:15 -0500
Subject: [PATCH 06/61] ci

---
 .github/workflows/publish.yml | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index caa9aca310..623ca74ae5 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -36,8 +36,6 @@ jobs:
     if: github.repository == 'anomalyco/opencode'
     steps:
       - uses: actions/checkout@v3
-        with:
-          fetch-depth: 1
       - uses: ./.github/actions/setup-bun
       - id: version
         run: |
@@ -58,7 +56,6 @@ jobs:
     steps:
       - uses: actions/checkout@v3
         with:
-          fetch-depth: 1
           fetch-tags: true
 
       - uses: ./.github/actions/setup-bun
@@ -103,7 +100,6 @@ jobs:
     steps:
       - uses: actions/checkout@v3
         with:
-          fetch-depth: 1
           fetch-tags: true
 
       - uses: apple-actions/import-codesign-certs@v2
@@ -196,8 +192,8 @@ jobs:
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v3
-        with:
-          fetch-depth: 1
+
+      - uses: ./.github/actions/setup-bun
 
       - name: Install OpenCode
         if: inputs.bump || inputs.version
@@ -227,8 +223,6 @@ jobs:
           git config --global user.name "opencode"
           git remote set-url origin https://x-access-token:${{ secrets.SST_GITHUB_TOKEN }}@github.com/${{ github.repository }}
 
-      - uses: ./.github/actions/setup-bun
-
       - uses: actions/download-artifact@v4
         with:
           name: opencode-cli

From 4c82ad6280d632142d82bde8814c922502fa9716 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 19:00:52 -0500
Subject: [PATCH 07/61] ci

---
 .github/workflows/publish.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 623ca74ae5..8329892e12 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -187,8 +187,6 @@ jobs:
   publish:
     needs:
       - version
-      - build-cli
-      - build-tauri
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v3

From 4f4694d9e3e1ce240f7a5b7a576dc44408e82f7a Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 19:03:07 -0500
Subject: [PATCH 08/61] ci

---
 .github/workflows/publish.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 8329892e12..a169d90af6 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -187,6 +187,8 @@ jobs:
   publish:
     needs:
       - version
+      - build-cli
+      # - build-tauri
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v3

From a5c01a81ff940887eff298ac2dc2eab47a9d554c Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 19:08:48 -0500
Subject: [PATCH 09/61] ci

---
 .github/workflows/publish.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a169d90af6..25879c3769 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -192,6 +192,8 @@ jobs:
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
 
       - uses: ./.github/actions/setup-bun
 

From bbc7bdb3fd5078d0add23273e0fdae436b9b47e4 Mon Sep 17 00:00:00 2001
From: opencode <opencode@sst.dev>
Date: Fri, 30 Jan 2026 00:31:06 +0000
Subject: [PATCH 10/61] release: v1.1.43

---
 bun.lock                               | 30 +++++++++++++-------------
 packages/app/package.json              |  2 +-
 packages/console/app/package.json      |  2 +-
 packages/console/core/package.json     |  2 +-
 packages/console/function/package.json |  2 +-
 packages/console/mail/package.json     |  2 +-
 packages/desktop/package.json          |  2 +-
 packages/enterprise/package.json       |  2 +-
 packages/extensions/zed/extension.toml | 12 +++++------
 packages/function/package.json         |  2 +-
 packages/opencode/package.json         |  2 +-
 packages/plugin/package.json           |  2 +-
 packages/sdk/js/package.json           |  2 +-
 packages/slack/package.json            |  2 +-
 packages/ui/package.json               |  2 +-
 packages/util/package.json             |  2 +-
 packages/web/package.json              |  2 +-
 sdks/vscode/package.json               |  2 +-
 18 files changed, 37 insertions(+), 37 deletions(-)

diff --git a/bun.lock b/bun.lock
index fa4d84e4ec..14d9565b28 100644
--- a/bun.lock
+++ b/bun.lock
@@ -23,7 +23,7 @@
     },
     "packages/app": {
       "name": "@opencode-ai/app",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@kobalte/core": "catalog:",
         "@opencode-ai/sdk": "workspace:*",
@@ -73,7 +73,7 @@
     },
     "packages/console/app": {
       "name": "@opencode-ai/console-app",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@cloudflare/vite-plugin": "1.15.2",
         "@ibm/plex": "6.4.1",
@@ -107,7 +107,7 @@
     },
     "packages/console/core": {
       "name": "@opencode-ai/console-core",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@aws-sdk/client-sts": "3.782.0",
         "@jsx-email/render": "1.1.1",
@@ -134,7 +134,7 @@
     },
     "packages/console/function": {
       "name": "@opencode-ai/console-function",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@ai-sdk/anthropic": "2.0.0",
         "@ai-sdk/openai": "2.0.2",
@@ -158,7 +158,7 @@
     },
     "packages/console/mail": {
       "name": "@opencode-ai/console-mail",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@jsx-email/all": "2.2.3",
         "@jsx-email/cli": "1.4.3",
@@ -182,7 +182,7 @@
     },
     "packages/desktop": {
       "name": "@opencode-ai/desktop",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@opencode-ai/app": "workspace:*",
         "@opencode-ai/ui": "workspace:*",
@@ -213,7 +213,7 @@
     },
     "packages/enterprise": {
       "name": "@opencode-ai/enterprise",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@opencode-ai/ui": "workspace:*",
         "@opencode-ai/util": "workspace:*",
@@ -242,7 +242,7 @@
     },
     "packages/function": {
       "name": "@opencode-ai/function",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@octokit/auth-app": "8.0.1",
         "@octokit/rest": "catalog:",
@@ -258,7 +258,7 @@
     },
     "packages/opencode": {
       "name": "opencode",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "bin": {
         "opencode": "./bin/opencode",
       },
@@ -362,7 +362,7 @@
     },
     "packages/plugin": {
       "name": "@opencode-ai/plugin",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@opencode-ai/sdk": "workspace:*",
         "zod": "catalog:",
@@ -382,7 +382,7 @@
     },
     "packages/sdk/js": {
       "name": "@opencode-ai/sdk",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "devDependencies": {
         "@hey-api/openapi-ts": "0.90.10",
         "@tsconfig/node22": "catalog:",
@@ -393,7 +393,7 @@
     },
     "packages/slack": {
       "name": "@opencode-ai/slack",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@opencode-ai/sdk": "workspace:*",
         "@slack/bolt": "^3.17.1",
@@ -406,7 +406,7 @@
     },
     "packages/ui": {
       "name": "@opencode-ai/ui",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@kobalte/core": "catalog:",
         "@opencode-ai/sdk": "workspace:*",
@@ -448,7 +448,7 @@
     },
     "packages/util": {
       "name": "@opencode-ai/util",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "zod": "catalog:",
       },
@@ -459,7 +459,7 @@
     },
     "packages/web": {
       "name": "@opencode-ai/web",
-      "version": "0.0.0-ci-202601291718",
+      "version": "1.1.43",
       "dependencies": {
         "@astrojs/cloudflare": "12.6.3",
         "@astrojs/markdown-remark": "6.3.1",
diff --git a/packages/app/package.json b/packages/app/package.json
index 61e7edcd16..87ca7931c5 100644
--- a/packages/app/package.json
+++ b/packages/app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/app",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "description": "",
   "type": "module",
   "exports": {
diff --git a/packages/console/app/package.json b/packages/console/app/package.json
index a3d88a6baa..b10593a8fa 100644
--- a/packages/console/app/package.json
+++ b/packages/console/app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/console-app",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "type": "module",
   "license": "MIT",
   "scripts": {
diff --git a/packages/console/core/package.json b/packages/console/core/package.json
index 90e6f90bf3..111390efbe 100644
--- a/packages/console/core/package.json
+++ b/packages/console/core/package.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode-ai/console-core",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "private": true,
   "type": "module",
   "license": "MIT",
diff --git a/packages/console/function/package.json b/packages/console/function/package.json
index 1a64b46971..c26b4584de 100644
--- a/packages/console/function/package.json
+++ b/packages/console/function/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/console-function",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "$schema": "https://json.schemastore.org/package.json",
   "private": true,
   "type": "module",
diff --git a/packages/console/mail/package.json b/packages/console/mail/package.json
index eca9a1d311..564a7140cc 100644
--- a/packages/console/mail/package.json
+++ b/packages/console/mail/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/console-mail",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "dependencies": {
     "@jsx-email/all": "2.2.3",
     "@jsx-email/cli": "1.4.3",
diff --git a/packages/desktop/package.json b/packages/desktop/package.json
index 3ff4bff46a..c1f330ce93 100644
--- a/packages/desktop/package.json
+++ b/packages/desktop/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@opencode-ai/desktop",
   "private": true,
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "type": "module",
   "license": "MIT",
   "scripts": {
diff --git a/packages/enterprise/package.json b/packages/enterprise/package.json
index 996e7ed943..03016c1c58 100644
--- a/packages/enterprise/package.json
+++ b/packages/enterprise/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/enterprise",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "private": true,
   "type": "module",
   "license": "MIT",
diff --git a/packages/extensions/zed/extension.toml b/packages/extensions/zed/extension.toml
index 4e0db0d712..eaa882b65b 100644
--- a/packages/extensions/zed/extension.toml
+++ b/packages/extensions/zed/extension.toml
@@ -1,7 +1,7 @@
 id = "opencode"
 name = "OpenCode"
 description = "The open source coding agent."
-version = "0.0.0-ci-202601291718"
+version = "1.1.43"
 schema_version = 1
 authors = ["Anomaly"]
 repository = "https://github.com/anomalyco/opencode"
@@ -11,26 +11,26 @@ name = "OpenCode"
 icon = "./icons/opencode.svg"
 
 [agent_servers.opencode.targets.darwin-aarch64]
-archive = "https://github.com/anomalyco/opencode/releases/download/v0.0.0-ci-202601291718/opencode-darwin-arm64.zip"
+archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.43/opencode-darwin-arm64.zip"
 cmd = "./opencode"
 args = ["acp"]
 
 [agent_servers.opencode.targets.darwin-x86_64]
-archive = "https://github.com/anomalyco/opencode/releases/download/v0.0.0-ci-202601291718/opencode-darwin-x64.zip"
+archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.43/opencode-darwin-x64.zip"
 cmd = "./opencode"
 args = ["acp"]
 
 [agent_servers.opencode.targets.linux-aarch64]
-archive = "https://github.com/anomalyco/opencode/releases/download/v0.0.0-ci-202601291718/opencode-linux-arm64.tar.gz"
+archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.43/opencode-linux-arm64.tar.gz"
 cmd = "./opencode"
 args = ["acp"]
 
 [agent_servers.opencode.targets.linux-x86_64]
-archive = "https://github.com/anomalyco/opencode/releases/download/v0.0.0-ci-202601291718/opencode-linux-x64.tar.gz"
+archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.43/opencode-linux-x64.tar.gz"
 cmd = "./opencode"
 args = ["acp"]
 
 [agent_servers.opencode.targets.windows-x86_64]
-archive = "https://github.com/anomalyco/opencode/releases/download/v0.0.0-ci-202601291718/opencode-windows-x64.zip"
+archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.43/opencode-windows-x64.zip"
 cmd = "./opencode.exe"
 args = ["acp"]
diff --git a/packages/function/package.json b/packages/function/package.json
index a0d333a349..4a9e82def5 100644
--- a/packages/function/package.json
+++ b/packages/function/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/function",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "$schema": "https://json.schemastore.org/package.json",
   "private": true,
   "type": "module",
diff --git a/packages/opencode/package.json b/packages/opencode/package.json
index 25193c0c00..bd77afa2e8 100644
--- a/packages/opencode/package.json
+++ b/packages/opencode/package.json
@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "name": "opencode",
   "type": "module",
   "license": "MIT",
diff --git a/packages/plugin/package.json b/packages/plugin/package.json
index 36816fe1c9..19077d786d 100644
--- a/packages/plugin/package.json
+++ b/packages/plugin/package.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode-ai/plugin",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "type": "module",
   "license": "MIT",
   "scripts": {
diff --git a/packages/sdk/js/package.json b/packages/sdk/js/package.json
index ccd0b6a945..e929d62894 100644
--- a/packages/sdk/js/package.json
+++ b/packages/sdk/js/package.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode-ai/sdk",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "type": "module",
   "license": "MIT",
   "scripts": {
diff --git a/packages/slack/package.json b/packages/slack/package.json
index dff46642af..decfd834a7 100644
--- a/packages/slack/package.json
+++ b/packages/slack/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/slack",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "type": "module",
   "license": "MIT",
   "scripts": {
diff --git a/packages/ui/package.json b/packages/ui/package.json
index be261a318a..2e7a2cfefd 100644
--- a/packages/ui/package.json
+++ b/packages/ui/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/ui",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "type": "module",
   "license": "MIT",
   "exports": {
diff --git a/packages/util/package.json b/packages/util/package.json
index 40a6080cbf..f76106701b 100644
--- a/packages/util/package.json
+++ b/packages/util/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/util",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "private": true,
   "type": "module",
   "license": "MIT",
diff --git a/packages/web/package.json b/packages/web/package.json
index 666654a2ef..0f601ba248 100644
--- a/packages/web/package.json
+++ b/packages/web/package.json
@@ -2,7 +2,7 @@
   "name": "@opencode-ai/web",
   "type": "module",
   "license": "MIT",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "scripts": {
     "dev": "astro dev",
     "dev:remote": "VITE_API_URL=https://api.opencode.ai astro dev",
diff --git a/sdks/vscode/package.json b/sdks/vscode/package.json
index 3de79e99ed..1ffe553c2c 100644
--- a/sdks/vscode/package.json
+++ b/sdks/vscode/package.json
@@ -2,7 +2,7 @@
   "name": "opencode",
   "displayName": "opencode",
   "description": "opencode for VS Code",
-  "version": "0.0.0-ci-202601291718",
+  "version": "1.1.43",
   "publisher": "sst-dev",
   "repository": {
     "type": "git",

From 1f3bf566409c373f26d12b136bfaa6f38ed6efac Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 19:18:41 -0500
Subject: [PATCH 11/61] ci: upgrade bun cache to stickydisk for faster ci
 builds

---
 .github/actions/setup-bun/action.yml | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/.github/actions/setup-bun/action.yml b/.github/actions/setup-bun/action.yml
index cba04facce..02f215ff1d 100644
--- a/.github/actions/setup-bun/action.yml
+++ b/.github/actions/setup-bun/action.yml
@@ -8,14 +8,11 @@ runs:
       with:
         bun-version-file: package.json
 
-    - name: Cache ~/.bun
-      id: cache-bun
-      uses: actions/cache@v4
+    - name: Mount Bun Cache
+      uses: useblacksmith/stickydisk@v1
       with:
+        key: ${{ github.repository }}-bun-cache
         path: ~/.bun
-        key: ${{ runner.os }}-bun-${{ hashFiles('package.json') }}-${{ hashFiles('bun.lockb', 'bun.lock') }}
-        restore-keys: |
-          ${{ runner.os }}-bun-${{ hashFiles('package.json') }}-
 
     - name: Install dependencies
       run: bun install

From 7ed6f690e916223566dfd481b741b610b29572dc Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 19:34:12 -0500
Subject: [PATCH 12/61] ci

---
 .github/workflows/publish.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 25879c3769..9060eeb329 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -188,7 +188,7 @@ jobs:
     needs:
       - version
       - build-cli
-      # - build-tauri
+      - build-tauri
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v3

From 81326377f21c92f276ae35f89e8c978da066b7b1 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 19:35:05 -0500
Subject: [PATCH 13/61] ci: trigger publish workflow automatically after beta
 builds complete

---
 .github/workflows/beta.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/beta.yml b/.github/workflows/beta.yml
index d92133ea6a..6e27c6eb9d 100644
--- a/.github/workflows/beta.yml
+++ b/.github/workflows/beta.yml
@@ -32,3 +32,8 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: bun script/beta.ts
+
+      - name: Trigger publish workflow
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh workflow run publish.yml --ref beta

From 03803621dbb20d15553635eb810d466dc1255fdc Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 19:35:52 -0500
Subject: [PATCH 14/61] ci

---
 .github/actions/setup-bun/action.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/actions/setup-bun/action.yml b/.github/actions/setup-bun/action.yml
index 02f215ff1d..7584334a7b 100644
--- a/.github/actions/setup-bun/action.yml
+++ b/.github/actions/setup-bun/action.yml
@@ -3,17 +3,17 @@ description: "Setup Bun with caching and install dependencies"
 runs:
   using: "composite"
   steps:
-    - name: Setup Bun
-      uses: oven-sh/setup-bun@v2
-      with:
-        bun-version-file: package.json
-
     - name: Mount Bun Cache
       uses: useblacksmith/stickydisk@v1
       with:
         key: ${{ github.repository }}-bun-cache
         path: ~/.bun
 
+    - name: Setup Bun
+      uses: oven-sh/setup-bun@v2
+      with:
+        bun-version-file: package.json
+
     - name: Install dependencies
       run: bun install
       shell: bash

From b43a35b737087e3464308b02232b1459f0f8df60 Mon Sep 17 00:00:00 2001
From: Filip <34747899+neriousy@users.noreply.github.com>
Date: Fri, 30 Jan 2026 02:05:31 +0100
Subject: [PATCH 15/61] test(app): test for toggling model variant (#11221)

---
 packages/app/e2e/thinking-level.spec.ts      | 25 ++++++++++++++++++++
 packages/app/e2e/utils.ts                    |  1 +
 packages/app/src/components/prompt-input.tsx |  1 +
 3 files changed, 27 insertions(+)
 create mode 100644 packages/app/e2e/thinking-level.spec.ts

diff --git a/packages/app/e2e/thinking-level.spec.ts b/packages/app/e2e/thinking-level.spec.ts
new file mode 100644
index 0000000000..564ef3c1f3
--- /dev/null
+++ b/packages/app/e2e/thinking-level.spec.ts
@@ -0,0 +1,25 @@
+import { test, expect } from "./fixtures"
+import { modelVariantCycleSelector } from "./utils"
+
+test("smoke model variant cycle updates label", async ({ page, gotoSession }) => {
+  await gotoSession()
+
+  await page.addStyleTag({
+    content: `${modelVariantCycleSelector} { display: inline-block !important; }`,
+  })
+
+  const button = page.locator(modelVariantCycleSelector)
+  const exists = (await button.count()) > 0
+  test.skip(!exists, "current model has no variants")
+  if (!exists) return
+
+  await expect(button).toBeVisible()
+
+  const before = (await button.innerText()).trim()
+  await button.click()
+  await expect(button).not.toHaveText(before)
+
+  const after = (await button.innerText()).trim()
+  await button.click()
+  await expect(button).not.toHaveText(after)
+})
diff --git a/packages/app/e2e/utils.ts b/packages/app/e2e/utils.ts
index eb0395950a..3de488bd9c 100644
--- a/packages/app/e2e/utils.ts
+++ b/packages/app/e2e/utils.ts
@@ -12,6 +12,7 @@ export const terminalToggleKey = "Control+Backquote"
 
 export const promptSelector = '[data-component="prompt-input"]'
 export const terminalSelector = '[data-component="terminal"]'
+export const modelVariantCycleSelector = '[data-action="model-variant-cycle"]'
 
 export function createSdk(directory?: string) {
   return createOpencodeClient({ baseUrl: serverUrl, directory, throwOnError: true })
diff --git a/packages/app/src/components/prompt-input.tsx b/packages/app/src/components/prompt-input.tsx
index 4d227f44b6..5c1d417eb0 100644
--- a/packages/app/src/components/prompt-input.tsx
+++ b/packages/app/src/components/prompt-input.tsx
@@ -1953,6 +1953,7 @@ export const PromptInput: Component<PromptInputProps> = (props) => {
                     keybind={command.keybind("model.variant.cycle")}
                   >
                     <Button
+                      data-action="model-variant-cycle"
                       variant="ghost"
                       class="text-text-base _hidden group-hover/prompt-input:inline-block capitalize text-12-regular"
                       onClick={() => local.model.variant.cycle()}

From ad91f9143abfa614ca9d508aa5bc7703766d936b Mon Sep 17 00:00:00 2001
From: Rahul A Mistry <149420892+ProdigyRahul@users.noreply.github.com>
Date: Fri, 30 Jan 2026 07:12:59 +0530
Subject: [PATCH 16/61] fix(app): version to latest to avoid errors for new
 devs (#11201)

---
 packages/desktop/src-tauri/Cargo.lock | 8 ++++----
 packages/desktop/src-tauri/Cargo.toml | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/packages/desktop/src-tauri/Cargo.lock b/packages/desktop/src-tauri/Cargo.lock
index 8e7e9af0df..51e5e00490 100644
--- a/packages/desktop/src-tauri/Cargo.lock
+++ b/packages/desktop/src-tauri/Cargo.lock
@@ -4914,9 +4914,9 @@ dependencies = [
 
 [[package]]
 name = "tauri-plugin-fs"
-version = "2.4.4"
+version = "2.4.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47df422695255ecbe7bac7012440eddaeefd026656171eac9559f5243d3230d9"
+checksum = "ed390cc669f937afeb8b28032ce837bac8ea023d975a2e207375ec05afaf1804"
 dependencies = [
  "anyhow",
  "dunce",
@@ -4936,9 +4936,9 @@ dependencies = [
 
 [[package]]
 name = "tauri-plugin-http"
-version = "2.5.4"
+version = "2.5.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c00685aceab12643cf024f712ab0448ba8fcadf86f2391d49d2e5aa732aacc70"
+checksum = "68bef611ccbfbce67c813959c11b23c1c084d201aa94222de9eba5f9edc3f897"
 dependencies = [
  "bytes",
  "cookie_store",
diff --git a/packages/desktop/src-tauri/Cargo.toml b/packages/desktop/src-tauri/Cargo.toml
index 6a0219ae40..e87bf77c2e 100644
--- a/packages/desktop/src-tauri/Cargo.toml
+++ b/packages/desktop/src-tauri/Cargo.toml
@@ -28,7 +28,7 @@ tauri-plugin-process = "2"
 tauri-plugin-store = "2"
 tauri-plugin-window-state = "2"
 tauri-plugin-clipboard-manager = "2"
-tauri-plugin-http = "2"
+tauri-plugin-http = "2.5.6"
 tauri-plugin-notification = "2"
 tauri-plugin-single-instance = { version = "2", features = ["deep-link"] }
 

From f27ee4674ae59e342de3b7f6494084857497d8b3 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 20:59:33 -0500
Subject: [PATCH 17/61] ci

---
 .github/workflows/beta.yml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/.github/workflows/beta.yml b/.github/workflows/beta.yml
index 6e27c6eb9d..d92133ea6a 100644
--- a/.github/workflows/beta.yml
+++ b/.github/workflows/beta.yml
@@ -32,8 +32,3 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: bun script/beta.ts
-
-      - name: Trigger publish workflow
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: gh workflow run publish.yml --ref beta

From 553316af2a72ea57539dee933b2871db2bf03ef3 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 21:19:00 -0500
Subject: [PATCH 18/61] ci

---
 .github/workflows/publish.yml       | 2 +-
 packages/desktop/scripts/prepare.ts | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 9060eeb329..3924ad4914 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -145,7 +145,7 @@ jobs:
           cd packages/desktop
           bun ./scripts/prepare.ts
         env:
-          OPENCODE_VERSION: ${{ needs.publish.outputs.version }}
+          OPENCODE_VERSION: ${{ needs.version.outputs.version }}
           GITHUB_TOKEN: ${{ secrets.SST_GITHUB_TOKEN }}
           RUST_TARGET: ${{ matrix.settings.target }}
           GH_TOKEN: ${{ github.token }}
diff --git a/packages/desktop/scripts/prepare.ts b/packages/desktop/scripts/prepare.ts
index 24ff9e7e09..d909e76896 100755
--- a/packages/desktop/scripts/prepare.ts
+++ b/packages/desktop/scripts/prepare.ts
@@ -1,8 +1,14 @@
 #!/usr/bin/env bun
 import { $ } from "bun"
 
+import { Script } from "@opencode-ai/script"
 import { copyBinaryToSidecarFolder, getCurrentSidecar, windowsify } from "./utils"
 
+const pkg = await Bun.file("../package.json").json()
+pkg.version = Script.version
+await Bun.write("../package.json", JSON.stringify(pkg, null, 2) + "\n")
+console.log(`Updated package.json version to ${Script.version}`)
+
 const sidecarConfig = getCurrentSidecar()
 
 const dir = "src-tauri/target/opencode-binaries"

From e9e8d97b0dbaf9e13e0127b763c941f1fd45230c Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 21:23:03 -0500
Subject: [PATCH 19/61] ci

---
 script/beta.ts | 44 ++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 42 insertions(+), 2 deletions(-)

diff --git a/script/beta.ts b/script/beta.ts
index 569a906c8f..6733e9147c 100755
--- a/script/beta.ts
+++ b/script/beta.ts
@@ -41,10 +41,50 @@ async function main() {
   for (const pr of prs) {
     console.log(`\nProcessing PR #${pr.number}: ${pr.title}`)
 
+    // Try to update PR branch via GitHub API (rebase onto base branch)
+    console.log(`  Attempting to rebase PR #${pr.number} via GitHub API...`)
+    const updateBranch = await $`gh pr update-branch ${pr.number} --rebase`.nothrow()
+    if (updateBranch.exitCode !== 0) {
+      console.log(`  Rebase failed for PR #${pr.number} (has conflicts)`)
+      console.log(`  Error: ${updateBranch.stderr}`)
+      skipped.push({ number: pr.number, reason: "Rebase failed (conflicts)" })
+      continue
+    }
+
+    console.log(`  Rebase initiated for PR #${pr.number}`)
+
+    // Wait for rebase to complete by polling PR state
+    console.log(`  Waiting for rebase to complete...`)
+    let rebaseComplete = false
+    let attempts = 0
+    const maxAttempts = 30
+
+    while (!rebaseComplete && attempts < maxAttempts) {
+      await Bun.sleep(2000) // Wait 2 seconds
+      attempts++
+
+      const prCheck = await $`gh pr view ${pr.number} --json mergeStateStatus,headRefOid`.nothrow()
+      if (prCheck.exitCode === 0) {
+        const prData = JSON.parse(prCheck.stdout)
+        // mergeStateStatus will be "clean" when rebase is complete and no conflicts
+        if (prData.mergeStateStatus === "clean") {
+          rebaseComplete = true
+          console.log(`  Rebase completed for PR #${pr.number}`)
+        }
+      }
+    }
+
+    if (!rebaseComplete) {
+      console.log(`  Timeout waiting for rebase on PR #${pr.number}`)
+      skipped.push({ number: pr.number, reason: "Timeout waiting for rebase" })
+      continue
+    }
+
+    // Fetch the rebased PR
     const fetchPR = await $`git fetch origin pull/${pr.number}/head:pr-${pr.number}`.nothrow()
     if (fetchPR.exitCode !== 0) {
-      console.log(`  Failed to fetch PR #${pr.number}, skipping`)
-      skipped.push({ number: pr.number, reason: "Failed to fetch" })
+      console.log(`  Failed to fetch PR #${pr.number} after rebase, skipping`)
+      skipped.push({ number: pr.number, reason: "Failed to fetch after rebase" })
       continue
     }
 

From 95309c214903e1902e0b2b85177a3687af0fe6fa Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 21:25:27 -0500
Subject: [PATCH 20/61] fix(beta): use local git rebase instead of gh pr
 update-branch

---
 .github/workflows/beta.yml |  2 +-
 script/beta.ts             | 59 ++++++++++++--------------------------
 2 files changed, 20 insertions(+), 41 deletions(-)

diff --git a/.github/workflows/beta.yml b/.github/workflows/beta.yml
index d92133ea6a..f7180ea1ee 100644
--- a/.github/workflows/beta.yml
+++ b/.github/workflows/beta.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: blacksmith-4vcpu-ubuntu-2404
     permissions:
       contents: write
-      pull-requests: read
+      pull-requests: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
diff --git a/script/beta.ts b/script/beta.ts
index 6733e9147c..eb61540fe7 100755
--- a/script/beta.ts
+++ b/script/beta.ts
@@ -41,53 +41,32 @@ async function main() {
   for (const pr of prs) {
     console.log(`\nProcessing PR #${pr.number}: ${pr.title}`)
 
-    // Try to update PR branch via GitHub API (rebase onto base branch)
-    console.log(`  Attempting to rebase PR #${pr.number} via GitHub API...`)
-    const updateBranch = await $`gh pr update-branch ${pr.number} --rebase`.nothrow()
-    if (updateBranch.exitCode !== 0) {
+    // Fetch the PR
+    const fetchPR = await $`git fetch origin pull/${pr.number}/head:pr-${pr.number}`.nothrow()
+    if (fetchPR.exitCode !== 0) {
+      console.log(`  Failed to fetch PR #${pr.number}, skipping`)
+      skipped.push({ number: pr.number, reason: "Failed to fetch" })
+      continue
+    }
+
+    // Try to rebase onto current beta branch
+    console.log(`  Attempting to rebase PR #${pr.number}...`)
+    const rebase = await $`git rebase beta pr-${pr.number}`.nothrow()
+    if (rebase.exitCode !== 0) {
       console.log(`  Rebase failed for PR #${pr.number} (has conflicts)`)
-      console.log(`  Error: ${updateBranch.stderr}`)
+      await $`git rebase --abort`.nothrow()
+      await $`git checkout beta`.nothrow()
       skipped.push({ number: pr.number, reason: "Rebase failed (conflicts)" })
       continue
     }
 
-    console.log(`  Rebase initiated for PR #${pr.number}`)
+    // Move rebased commits to pr-${pr.number} branch and checkout back to beta
+    await $`git checkout -B pr-${pr.number}`.nothrow()
+    await $`git checkout beta`.nothrow()
 
-    // Wait for rebase to complete by polling PR state
-    console.log(`  Waiting for rebase to complete...`)
-    let rebaseComplete = false
-    let attempts = 0
-    const maxAttempts = 30
-
-    while (!rebaseComplete && attempts < maxAttempts) {
-      await Bun.sleep(2000) // Wait 2 seconds
-      attempts++
-
-      const prCheck = await $`gh pr view ${pr.number} --json mergeStateStatus,headRefOid`.nothrow()
-      if (prCheck.exitCode === 0) {
-        const prData = JSON.parse(prCheck.stdout)
-        // mergeStateStatus will be "clean" when rebase is complete and no conflicts
-        if (prData.mergeStateStatus === "clean") {
-          rebaseComplete = true
-          console.log(`  Rebase completed for PR #${pr.number}`)
-        }
-      }
-    }
-
-    if (!rebaseComplete) {
-      console.log(`  Timeout waiting for rebase on PR #${pr.number}`)
-      skipped.push({ number: pr.number, reason: "Timeout waiting for rebase" })
-      continue
-    }
-
-    // Fetch the rebased PR
-    const fetchPR = await $`git fetch origin pull/${pr.number}/head:pr-${pr.number}`.nothrow()
-    if (fetchPR.exitCode !== 0) {
-      console.log(`  Failed to fetch PR #${pr.number} after rebase, skipping`)
-      skipped.push({ number: pr.number, reason: "Failed to fetch after rebase" })
-      continue
-    }
+    console.log(`  Successfully rebased PR #${pr.number}`)
 
+    // Now squash merge the rebased PR
     const merge = await $`git merge --squash pr-${pr.number}`.nothrow()
     if (merge.exitCode !== 0) {
       console.log(`  Squash merge failed for PR #${pr.number}`)

From 60de810d9a85db01c18f2c790f6af3b15105b9ee Mon Sep 17 00:00:00 2001
From: adamelmore <2363879+adamdottv@users.noreply.github.com>
Date: Thu, 29 Jan 2026 20:07:35 -0600
Subject: [PATCH 21/61] fix(app): dialog not closing

---
 packages/ui/src/context/dialog.tsx | 34 ++++++++++++++++++++++++------
 1 file changed, 27 insertions(+), 7 deletions(-)

diff --git a/packages/ui/src/context/dialog.tsx b/packages/ui/src/context/dialog.tsx
index 299f6032af..afba5f648c 100644
--- a/packages/ui/src/context/dialog.tsx
+++ b/packages/ui/src/context/dialog.tsx
@@ -28,18 +28,33 @@ const Context = createContext<ReturnType<typeof init>>()
 
 function init() {
   const [active, setActive] = createSignal<Active | undefined>()
-  let closing = false
+  const timer = { current: undefined as ReturnType<typeof setTimeout> | undefined }
+  const lock = { value: false }
+
+  onCleanup(() => {
+    if (timer.current === undefined) return
+    clearTimeout(timer.current)
+    timer.current = undefined
+  })
 
   const close = () => {
     const current = active()
-    if (!current || closing) return
-    closing = true
+    if (!current || lock.value) return
+    lock.value = true
     current.onClose?.()
     current.setClosing(true)
-    setTimeout(() => {
+
+    const id = current.id
+    if (timer.current !== undefined) {
+      clearTimeout(timer.current)
+      timer.current = undefined
+    }
+
+    timer.current = setTimeout(() => {
+      timer.current = undefined
       current.dispose()
-      setActive(undefined)
-      closing = false
+      if (active()?.id === id) setActive(undefined)
+      lock.value = false
     }, 100)
   }
 
@@ -64,7 +79,12 @@ function init() {
       current.dispose()
       setActive(undefined)
     }
-    closing = false
+
+    if (timer.current !== undefined) {
+      clearTimeout(timer.current)
+      timer.current = undefined
+    }
+    lock.value = false
 
     const id = Math.random().toString(36).slice(2)
     let dispose: (() => void) | undefined

From a70c66eb3f7c05bbc6c162511469a08af122c402 Mon Sep 17 00:00:00 2001
From: adamelmore <2363879+adamdottv@users.noreply.github.com>
Date: Thu, 29 Jan 2026 20:19:51 -0600
Subject: [PATCH 22/61] fix(app): free model scroll

---
 packages/app/src/components/dialog-select-model-unpaid.tsx | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/packages/app/src/components/dialog-select-model-unpaid.tsx b/packages/app/src/components/dialog-select-model-unpaid.tsx
index 089c4c0cd7..5a4dd00ec6 100644
--- a/packages/app/src/components/dialog-select-model-unpaid.tsx
+++ b/packages/app/src/components/dialog-select-model-unpaid.tsx
@@ -35,7 +35,7 @@ export const DialogSelectModelUnpaid: Component = () => {
 
   return (
     <Dialog title={language.t("dialog.model.select.title")}>
-      <div class="flex flex-col gap-3 px-2.5 flex-1 min-h-0">
+      <div class="flex flex-col gap-3 px-2.5 flex-1 min-h-0 overflow-hidden">
         <div class="text-14-medium text-text-base px-2.5">{language.t("dialog.model.unpaid.freeModels.title")}</div>
         <List
           class="flex-1 min-h-0 [&_[data-slot=list-scroll]]:flex-1 [&_[data-slot=list-scroll]]:min-h-0"
@@ -76,10 +76,8 @@ export const DialogSelectModelUnpaid: Component = () => {
             </div>
           )}
         </List>
-        <div />
-        <div />
       </div>
-      <div class="px-1.5 pb-1.5">
+      <div class="shrink-0 px-1.5 pb-1.5">
         <div class="w-full rounded-sm border border-border-weak-base bg-surface-raised-base">
           <div class="w-full flex flex-col items-start gap-4 px-1.5 pt-4 pb-4">
             <div class="px-2 text-14-medium text-text-base">{language.t("dialog.model.unpaid.addMore.title")}</div>

From d3d6e7e275c72cde95bb3a57253d18e245825bc5 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 21:35:24 -0500
Subject: [PATCH 23/61] sync

---
 packages/desktop/scripts/prepare.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/desktop/scripts/prepare.ts b/packages/desktop/scripts/prepare.ts
index d909e76896..d802f2d89e 100755
--- a/packages/desktop/scripts/prepare.ts
+++ b/packages/desktop/scripts/prepare.ts
@@ -4,9 +4,9 @@ import { $ } from "bun"
 import { Script } from "@opencode-ai/script"
 import { copyBinaryToSidecarFolder, getCurrentSidecar, windowsify } from "./utils"
 
-const pkg = await Bun.file("../package.json").json()
+const pkg = await Bun.file("./package.json").json()
 pkg.version = Script.version
-await Bun.write("../package.json", JSON.stringify(pkg, null, 2) + "\n")
+await Bun.write("./package.json", JSON.stringify(pkg, null, 2) + "\n")
 console.log(`Updated package.json version to ${Script.version}`)
 
 const sidecarConfig = getCurrentSidecar()

From 5f282c268db3515c87d48d475d3a5fb612e97216 Mon Sep 17 00:00:00 2001
From: adamelmore <2363879+adamdottv@users.noreply.github.com>
Date: Thu, 29 Jan 2026 20:38:18 -0600
Subject: [PATCH 24/61] fix(app): free model layout

---
 .../app/src/components/dialog-select-model-unpaid.tsx | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/packages/app/src/components/dialog-select-model-unpaid.tsx b/packages/app/src/components/dialog-select-model-unpaid.tsx
index 5a4dd00ec6..78c169777e 100644
--- a/packages/app/src/components/dialog-select-model-unpaid.tsx
+++ b/packages/app/src/components/dialog-select-model-unpaid.tsx
@@ -34,11 +34,14 @@ export const DialogSelectModelUnpaid: Component = () => {
   })
 
   return (
-    <Dialog title={language.t("dialog.model.select.title")}>
-      <div class="flex flex-col gap-3 px-2.5 flex-1 min-h-0 overflow-hidden">
+    <Dialog
+      title={language.t("dialog.model.select.title")}
+      class="overflow-y-auto [&_[data-slot=dialog-body]]:overflow-visible [&_[data-slot=dialog-body]]:flex-none"
+    >
+      <div class="flex flex-col gap-3 px-2.5">
         <div class="text-14-medium text-text-base px-2.5">{language.t("dialog.model.unpaid.freeModels.title")}</div>
         <List
-          class="flex-1 min-h-0 [&_[data-slot=list-scroll]]:flex-1 [&_[data-slot=list-scroll]]:min-h-0"
+          class="[&_[data-slot=list-scroll]]:overflow-visible"
           ref={(ref) => (listRef = ref)}
           items={local.model.list}
           current={local.model.current()}
@@ -77,7 +80,7 @@ export const DialogSelectModelUnpaid: Component = () => {
           )}
         </List>
       </div>
-      <div class="shrink-0 px-1.5 pb-1.5">
+      <div class="px-1.5 pb-1.5">
         <div class="w-full rounded-sm border border-border-weak-base bg-surface-raised-base">
           <div class="w-full flex flex-col items-start gap-4 px-1.5 pt-4 pb-4">
             <div class="px-2 text-14-medium text-text-base">{language.t("dialog.model.unpaid.addMore.title")}</div>

From 30969dc33e20858a9b7773aa19ad345335a644c1 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 21:51:26 -0500
Subject: [PATCH 25/61] ci: cache apt packages to reduce CI build times on
 ubuntu

---
 .github/workflows/publish.yml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3924ad4914..8e9a44bb2e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -124,6 +124,15 @@ jobs:
 
       - uses: ./.github/actions/setup-bun
 
+      - name: Cache apt packages
+        if: contains(matrix.settings.host, 'ubuntu')
+        uses: actions/cache@v4
+        with:
+          path: /var/cache/apt/archives
+          key: ${{ runner.os }}-${{ matrix.settings.target }}-apt-${{ hashFiles('.github/workflows/publish.yml') }}
+          restore-keys: |
+            ${{ runner.os }}-${{ matrix.settings.target }}-apt-
+
       - name: install dependencies (ubuntu only)
         if: contains(matrix.settings.host, 'ubuntu')
         run: |
@@ -230,6 +239,14 @@ jobs:
           name: opencode-cli
           path: packages/opencode/dist
 
+      - name: Cache apt packages (AUR)
+        uses: actions/cache@v4
+        with:
+          path: /var/cache/apt/archives
+          key: ${{ runner.os }}-apt-aur-${{ hashFiles('.github/workflows/publish.yml') }}
+          restore-keys: |
+            ${{ runner.os }}-apt-aur-
+
       - name: Setup SSH for AUR
         run: |
           sudo apt-get update

From 5cfb5fdd0664632956056a1004ab1857a8eb3673 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 23:07:58 -0500
Subject: [PATCH 26/61] ci: add container build workflow

Add prebuilt build images and a publish workflow to speed CI by reusing heavy dependencies.
---
 .github/workflows/containers.yml           | 38 ++++++++++++++++++++++
 packages/containers/README.md              | 36 ++++++++++++++++++++
 packages/containers/base/Dockerfile        | 18 ++++++++++
 packages/containers/bun-node/Dockerfile    | 22 +++++++++++++
 packages/containers/publish/Dockerfile     | 10 ++++++
 packages/containers/rust/Dockerfile        | 13 ++++++++
 packages/containers/script/build.ts        | 25 ++++++++++++++
 packages/containers/tauri-linux/Dockerfile | 12 +++++++
 packages/containers/tsconfig.json          |  8 +++++
 9 files changed, 182 insertions(+)
 create mode 100644 .github/workflows/containers.yml
 create mode 100644 packages/containers/README.md
 create mode 100644 packages/containers/base/Dockerfile
 create mode 100644 packages/containers/bun-node/Dockerfile
 create mode 100644 packages/containers/publish/Dockerfile
 create mode 100644 packages/containers/rust/Dockerfile
 create mode 100644 packages/containers/script/build.ts
 create mode 100644 packages/containers/tauri-linux/Dockerfile
 create mode 100644 packages/containers/tsconfig.json

diff --git a/.github/workflows/containers.yml b/.github/workflows/containers.yml
new file mode 100644
index 0000000000..0ce6406657
--- /dev/null
+++ b/.github/workflows/containers.yml
@@ -0,0 +1,38 @@
+name: containers
+
+on:
+  push:
+    branches:
+      - dev
+    paths:
+      - packages/containers/**
+      - .github/workflows/containers.yml
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  build:
+    runs-on: blacksmith-4vcpu-ubuntu-2404
+    env:
+      REGISTRY: ghcr.io/${{ github.repository_owner }}
+      TAG: "24.04"
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: ./.github/actions/setup-bun
+
+      - name: Login to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push containers
+        run: bun ./packages/containers/script/build.ts --push
+        env:
+          REGISTRY: ${{ env.REGISTRY }}
+          TAG: ${{ env.TAG }}
diff --git a/packages/containers/README.md b/packages/containers/README.md
new file mode 100644
index 0000000000..42190f0ba6
--- /dev/null
+++ b/packages/containers/README.md
@@ -0,0 +1,36 @@
+# CI containers
+
+Prebuilt images intended to speed up GitHub Actions jobs by baking in
+large, slow-to-install dependencies. These are designed for Linux jobs
+that can use `job.container` in workflows.
+
+Images
+
+- `base`: Ubuntu 24.04 with common build tools and utilities
+- `bun-node`: `base` plus Bun and Node.js 24
+- `rust`: `bun-node` plus Rust (stable, minimal profile)
+- `tauri-linux`: `rust` plus Tauri Linux build dependencies
+- `publish`: `bun-node` plus Docker CLI and AUR tooling
+
+Build
+
+```
+REGISTRY=ghcr.io/anomalyco TAG=24.04 bun ./packages/containers/script/build.ts
+```
+
+Workflow usage
+
+```
+jobs:
+  build-cli:
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/anomalyco/build/bun-node:24.04
+```
+
+Notes
+
+- These images only help Linux jobs. macOS and Windows jobs cannot run
+  inside Linux containers.
+- If a job uses Docker Buildx, the container needs access to the host
+  Docker daemon (or `docker-in-docker` with privileged mode).
diff --git a/packages/containers/base/Dockerfile b/packages/containers/base/Dockerfile
new file mode 100644
index 0000000000..a81f4baa22
--- /dev/null
+++ b/packages/containers/base/Dockerfile
@@ -0,0 +1,18 @@
+FROM ubuntu:24.04
+
+ARG DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends \
+    build-essential \
+    ca-certificates \
+    curl \
+    git \
+    jq \
+    openssh-client \
+    pkg-config \
+    python3 \
+    unzip \
+    xz-utils \
+    zip \
+  && rm -rf /var/lib/apt/lists/*
diff --git a/packages/containers/bun-node/Dockerfile b/packages/containers/bun-node/Dockerfile
new file mode 100644
index 0000000000..69c7803964
--- /dev/null
+++ b/packages/containers/bun-node/Dockerfile
@@ -0,0 +1,22 @@
+ARG REGISTRY=ghcr.io/anomalyco
+FROM ${REGISTRY}/build/base:24.04
+
+ARG NODE_VERSION=24.4.0
+ARG BUN_VERSION=1.2.4
+
+ENV BUN_INSTALL=/opt/bun
+ENV PATH=/opt/bun/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+RUN set -euo pipefail; \
+  arch=$(uname -m); \
+  node_arch=x64; \
+  if [ "$arch" = "aarch64" ]; then node_arch=arm64; fi; \
+  curl -fsSL "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-${node_arch}.tar.xz" \
+  | tar -xJf - -C /usr/local --strip-components=1; \
+  corepack enable
+
+RUN set -euo pipefail; \
+  curl -fsSL https://bun.sh/install | bash -s -- "bun-v${BUN_VERSION}"; \
+  bun --version; \
+  node --version; \
+  npm --version
diff --git a/packages/containers/publish/Dockerfile b/packages/containers/publish/Dockerfile
new file mode 100644
index 0000000000..4780d22740
--- /dev/null
+++ b/packages/containers/publish/Dockerfile
@@ -0,0 +1,10 @@
+ARG REGISTRY=ghcr.io/anomalyco
+FROM ${REGISTRY}/build/bun-node:24.04
+
+ARG DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends \
+    docker.io \
+    pacman-package-manager \
+  && rm -rf /var/lib/apt/lists/*
diff --git a/packages/containers/rust/Dockerfile b/packages/containers/rust/Dockerfile
new file mode 100644
index 0000000000..533f348be7
--- /dev/null
+++ b/packages/containers/rust/Dockerfile
@@ -0,0 +1,13 @@
+ARG REGISTRY=ghcr.io/anomalyco
+FROM ${REGISTRY}/build/bun-node:24.04
+
+ARG RUST_TOOLCHAIN=stable
+
+ENV CARGO_HOME=/opt/cargo
+ENV RUSTUP_HOME=/opt/rustup
+ENV PATH=/opt/cargo/bin:/opt/bun/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+RUN set -euo pipefail; \
+  curl -fsSL https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain "${RUST_TOOLCHAIN}"; \
+  rustc --version; \
+  cargo --version
diff --git a/packages/containers/script/build.ts b/packages/containers/script/build.ts
new file mode 100644
index 0000000000..18ae328e1c
--- /dev/null
+++ b/packages/containers/script/build.ts
@@ -0,0 +1,25 @@
+#!/usr/bin/env bun
+
+import { $ } from "bun"
+
+const dir = new URL("..", import.meta.url).pathname
+process.chdir(dir)
+
+const reg = process.env.REGISTRY ?? "ghcr.io/anomalyco"
+const tag = process.env.TAG ?? "24.04"
+const push = process.argv.includes("--push") || process.env.PUSH === "1"
+
+const images = ["base", "bun-node", "rust", "tauri-linux", "publish"]
+
+for (const name of images) {
+  const image = `${reg}/build/${name}:${tag}`
+  const file = `packages/containers/${name}/Dockerfile`
+  const arg = name === "base" ? "" : `--build-arg REGISTRY=${reg}`
+  const cmd = `docker build -f ${file} -t ${image} ${arg} .`
+  console.log(cmd)
+  await $`${cmd}`
+
+  if (push) {
+    await $`docker push ${image}`
+  }
+}
diff --git a/packages/containers/tauri-linux/Dockerfile b/packages/containers/tauri-linux/Dockerfile
new file mode 100644
index 0000000000..9f67a28049
--- /dev/null
+++ b/packages/containers/tauri-linux/Dockerfile
@@ -0,0 +1,12 @@
+ARG REGISTRY=ghcr.io/anomalyco
+FROM ${REGISTRY}/build/rust:24.04
+
+ARG DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends \
+    libappindicator3-dev \
+    libwebkit2gtk-4.1-dev \
+    librsvg2-dev \
+    patchelf \
+  && rm -rf /var/lib/apt/lists/*
diff --git a/packages/containers/tsconfig.json b/packages/containers/tsconfig.json
new file mode 100644
index 0000000000..00ef125468
--- /dev/null
+++ b/packages/containers/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "extends": "@tsconfig/bun/tsconfig.json",
+  "compilerOptions": {
+    "lib": ["ESNext", "DOM", "DOM.Iterable"],
+    "noUncheckedIndexedAccess": false
+  }
+}

From 71d280d570ea77c9330942722b0e34383de831d9 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 23:10:50 -0500
Subject: [PATCH 27/61] ci: fix container build script

Invoke docker build with Bun shell so commands run correctly, and document default automation behavior.
---
 AGENTS.md                           | 1 +
 packages/containers/script/build.ts | 9 ++++++---
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/AGENTS.md b/AGENTS.md
index c3f8e50d05..8cfe768da3 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -1,6 +1,7 @@
 - To regenerate the JavaScript SDK, run `./packages/sdk/js/script/build.ts`.
 - ALWAYS USE PARALLEL TOOLS WHEN APPLICABLE.
 - The default branch in this repo is `dev`.
+- Prefer automation: execute requested actions without confirmation unless blocked by missing info or safety/irreversibility.
 
 ## Style Guide
 
diff --git a/packages/containers/script/build.ts b/packages/containers/script/build.ts
index 18ae328e1c..8fd6a7d4db 100644
--- a/packages/containers/script/build.ts
+++ b/packages/containers/script/build.ts
@@ -15,9 +15,12 @@ for (const name of images) {
   const image = `${reg}/build/${name}:${tag}`
   const file = `packages/containers/${name}/Dockerfile`
   const arg = name === "base" ? "" : `--build-arg REGISTRY=${reg}`
-  const cmd = `docker build -f ${file} -t ${image} ${arg} .`
-  console.log(cmd)
-  await $`${cmd}`
+  console.log(`docker build -f ${file} -t ${image} ${arg} .`)
+  if (arg) {
+    await $`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} .`
+  } else {
+    await $`docker build -f ${file} -t ${image} .`
+  }
 
   if (push) {
     await $`docker push ${image}`

From 5ea1042ffba32b4e1b66e8944b5ec8c3899f5674 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 23:13:07 -0500
Subject: [PATCH 28/61] ci

---
 packages/containers/bun-node/Dockerfile |  2 +-
 packages/containers/script/build.ts     | 25 ++++++++++++++++++-------
 2 files changed, 19 insertions(+), 8 deletions(-)

diff --git a/packages/containers/bun-node/Dockerfile b/packages/containers/bun-node/Dockerfile
index 69c7803964..31a3bb547a 100644
--- a/packages/containers/bun-node/Dockerfile
+++ b/packages/containers/bun-node/Dockerfile
@@ -2,7 +2,7 @@ ARG REGISTRY=ghcr.io/anomalyco
 FROM ${REGISTRY}/build/base:24.04
 
 ARG NODE_VERSION=24.4.0
-ARG BUN_VERSION=1.2.4
+ARG BUN_VERSION=1.3.5
 
 ENV BUN_INSTALL=/opt/bun
 ENV PATH=/opt/bun/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
diff --git a/packages/containers/script/build.ts b/packages/containers/script/build.ts
index 8fd6a7d4db..0ace107310 100644
--- a/packages/containers/script/build.ts
+++ b/packages/containers/script/build.ts
@@ -2,25 +2,36 @@
 
 import { $ } from "bun"
 
-const dir = new URL("..", import.meta.url).pathname
-process.chdir(dir)
+const rootDir = new URL("../../..", import.meta.url).pathname
+process.chdir(rootDir)
 
 const reg = process.env.REGISTRY ?? "ghcr.io/anomalyco"
 const tag = process.env.TAG ?? "24.04"
 const push = process.argv.includes("--push") || process.env.PUSH === "1"
 
+const root = new URL("package.json", new URL(rootDir)).pathname
+const pkg = await Bun.file(root).json()
+const manager = pkg.packageManager ?? ""
+const bun = manager.startsWith("bun@") ? manager.slice(4) : ""
+if (!bun) throw new Error("packageManager must be bun@<version>")
+
 const images = ["base", "bun-node", "rust", "tauri-linux", "publish"]
 
 for (const name of images) {
   const image = `${reg}/build/${name}:${tag}`
   const file = `packages/containers/${name}/Dockerfile`
-  const arg = name === "base" ? "" : `--build-arg REGISTRY=${reg}`
-  console.log(`docker build -f ${file} -t ${image} ${arg} .`)
-  if (arg) {
-    await $`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} .`
-  } else {
+  if (name === "base") {
+    console.log(`docker build -f ${file} -t ${image} .`)
     await $`docker build -f ${file} -t ${image} .`
   }
+  if (name === "bun-node") {
+    console.log(`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} --build-arg BUN_VERSION=${bun} .`)
+    await $`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} --build-arg BUN_VERSION=${bun} .`
+  }
+  if (name !== "base" && name !== "bun-node") {
+    console.log(`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} .`)
+    await $`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} .`
+  }
 
   if (push) {
     await $`docker push ${image}`

From 849f488744ae6ba6b1f647e2ace9485bf1e3f214 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 23:15:12 -0500
Subject: [PATCH 29/61] ci

---
 packages/containers/script/build.ts | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/packages/containers/script/build.ts b/packages/containers/script/build.ts
index 0ace107310..ff259f2ab8 100644
--- a/packages/containers/script/build.ts
+++ b/packages/containers/script/build.ts
@@ -1,15 +1,17 @@
 #!/usr/bin/env bun
 
 import { $ } from "bun"
+import path from "path"
+import { fileURLToPath } from "url"
 
-const rootDir = new URL("../../..", import.meta.url).pathname
+const rootDir = fileURLToPath(new URL("../../..", import.meta.url))
 process.chdir(rootDir)
 
 const reg = process.env.REGISTRY ?? "ghcr.io/anomalyco"
 const tag = process.env.TAG ?? "24.04"
 const push = process.argv.includes("--push") || process.env.PUSH === "1"
 
-const root = new URL("package.json", new URL(rootDir)).pathname
+const root = path.join(rootDir, "package.json")
 const pkg = await Bun.file(root).json()
 const manager = pkg.packageManager ?? ""
 const bun = manager.startsWith("bun@") ? manager.slice(4) : ""

From cd664a189b7c1de5232b58c180fca72b86adada6 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 23:17:57 -0500
Subject: [PATCH 30/61] ci

---
 .github/workflows/containers.yml        |  7 ++++
 packages/containers/README.md           |  2 +
 packages/containers/bun-node/Dockerfile |  2 +
 packages/containers/script/build.ts     | 50 +++++++++++++++++++++----
 4 files changed, 54 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/containers.yml b/.github/workflows/containers.yml
index 0ce6406657..c7df066d41 100644
--- a/.github/workflows/containers.yml
+++ b/.github/workflows/containers.yml
@@ -7,6 +7,7 @@ on:
     paths:
       - packages/containers/**
       - .github/workflows/containers.yml
+      - package.json
   workflow_dispatch:
 
 permissions:
@@ -24,6 +25,12 @@ jobs:
 
       - uses: ./.github/actions/setup-bun
 
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
       - name: Login to GHCR
         uses: docker/login-action@v3
         with:
diff --git a/packages/containers/README.md b/packages/containers/README.md
index 42190f0ba6..a1cfe60db3 100644
--- a/packages/containers/README.md
+++ b/packages/containers/README.md
@@ -16,6 +16,7 @@ Build
 
 ```
 REGISTRY=ghcr.io/anomalyco TAG=24.04 bun ./packages/containers/script/build.ts
+REGISTRY=ghcr.io/anomalyco TAG=24.04 bun ./packages/containers/script/build.ts --push
 ```
 
 Workflow usage
@@ -32,5 +33,6 @@ Notes
 
 - These images only help Linux jobs. macOS and Windows jobs cannot run
   inside Linux containers.
+- `--push` publishes multi-arch (amd64 + arm64) images using Buildx.
 - If a job uses Docker Buildx, the container needs access to the host
   Docker daemon (or `docker-in-docker` with privileged mode).
diff --git a/packages/containers/bun-node/Dockerfile b/packages/containers/bun-node/Dockerfile
index 31a3bb547a..e6cad9c272 100644
--- a/packages/containers/bun-node/Dockerfile
+++ b/packages/containers/bun-node/Dockerfile
@@ -1,6 +1,8 @@
 ARG REGISTRY=ghcr.io/anomalyco
 FROM ${REGISTRY}/build/base:24.04
 
+SHELL ["/bin/bash", "-lc"]
+
 ARG NODE_VERSION=24.4.0
 ARG BUN_VERSION=1.3.5
 
diff --git a/packages/containers/script/build.ts b/packages/containers/script/build.ts
index ff259f2ab8..6b880e7a5b 100644
--- a/packages/containers/script/build.ts
+++ b/packages/containers/script/build.ts
@@ -19,23 +19,59 @@ if (!bun) throw new Error("packageManager must be bun@<version>")
 
 const images = ["base", "bun-node", "rust", "tauri-linux", "publish"]
 
+const setup = async () => {
+  if (!push) return
+  const list = await $`docker buildx ls`.text()
+  if (list.includes("opencode")) {
+    await $`docker buildx use opencode`
+    return
+  }
+  await $`docker buildx create --name opencode --use`
+}
+
+await setup()
+
+const platform = "linux/amd64,linux/arm64"
+
 for (const name of images) {
   const image = `${reg}/build/${name}:${tag}`
   const file = `packages/containers/${name}/Dockerfile`
   if (name === "base") {
-    console.log(`docker build -f ${file} -t ${image} .`)
-    await $`docker build -f ${file} -t ${image} .`
+    if (push) {
+      console.log(`docker buildx build --platform ${platform} -f ${file} -t ${image} --push .`)
+      await $`docker buildx build --platform ${platform} -f ${file} -t ${image} --push .`
+    }
+    if (!push) {
+      console.log(`docker build -f ${file} -t ${image} .`)
+      await $`docker build -f ${file} -t ${image} .`
+    }
   }
   if (name === "bun-node") {
-    console.log(`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} --build-arg BUN_VERSION=${bun} .`)
-    await $`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} --build-arg BUN_VERSION=${bun} .`
+    if (push) {
+      console.log(
+        `docker buildx build --platform ${platform} -f ${file} -t ${image} --build-arg REGISTRY=${reg} --build-arg BUN_VERSION=${bun} --push .`,
+      )
+      await $`docker buildx build --platform ${platform} -f ${file} -t ${image} --build-arg REGISTRY=${reg} --build-arg BUN_VERSION=${bun} --push .`
+    }
+    if (!push) {
+      console.log(`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} --build-arg BUN_VERSION=${bun} .`)
+      await $`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} --build-arg BUN_VERSION=${bun} .`
+    }
   }
   if (name !== "base" && name !== "bun-node") {
-    console.log(`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} .`)
-    await $`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} .`
+    if (push) {
+      console.log(
+        `docker buildx build --platform ${platform} -f ${file} -t ${image} --build-arg REGISTRY=${reg} --push .`,
+      )
+      await $`docker buildx build --platform ${platform} -f ${file} -t ${image} --build-arg REGISTRY=${reg} --push .`
+    }
+    if (!push) {
+      console.log(`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} .`)
+      await $`docker build -f ${file} -t ${image} --build-arg REGISTRY=${reg} .`
+    }
   }
 
   if (push) {
-    await $`docker push ${image}`
+    console.log(`pushed ${image}`)
   }
 }

From 2d3c7a0f24754ea0643d9bfd6dec2df39623763f Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 23:49:53 -0500
Subject: [PATCH 31/61] ci

---
 .../actions/setup-git-committer/action.yml    | 42 +++++++++++++++++++
 .github/workflows/generate.yml                | 12 +++---
 2 files changed, 48 insertions(+), 6 deletions(-)
 create mode 100644 .github/actions/setup-git-committer/action.yml

diff --git a/.github/actions/setup-git-committer/action.yml b/.github/actions/setup-git-committer/action.yml
new file mode 100644
index 0000000000..39374e167d
--- /dev/null
+++ b/.github/actions/setup-git-committer/action.yml
@@ -0,0 +1,42 @@
+name: "Setup Git Committer"
+description: "Create app token and configure git user"
+inputs:
+  opencode-app-id:
+    description: "OpenCode GitHub App ID"
+    required: true
+  opencode-app-secret:
+    description: "OpenCode GitHub App private key"
+    required: true
+outputs:
+  token:
+    description: "GitHub App token"
+    value: ${{ steps.app-token.outputs.token }}
+  app-slug:
+    description: "GitHub App slug"
+    value: ${{ steps.app-token.outputs.app-slug }}
+  user-id:
+    description: "GitHub App user id"
+    value: ${{ steps.get-user-id.outputs.user-id }}
+runs:
+  using: "composite"
+  steps:
+    - name: Create app token
+      id: app-token
+      uses: actions/create-github-app-token@v2
+      with:
+        app-id: ${{ inputs.opencode-app-id }}
+        private-key: ${{ inputs.opencode-app-secret }}
+
+    - name: Get GitHub App user id
+      id: get-user-id
+      run: |
+        echo "user-id=$(gh api \"/users/${{ steps.app-token.outputs.app-slug }}[bot]\" --jq .id)" >> "$GITHUB_OUTPUT"
+      shell: bash
+      env:
+        GH_TOKEN: ${{ steps.app-token.outputs.token }}
+
+    - name: Configure git user
+      run: |
+        git config --global user.name "${{ steps.app-token.outputs.app-slug }}[bot]"
+        git config --global user.email "${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com"
+      shell: bash
diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index cbbab479e1..28aaa16f73 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -24,17 +24,17 @@ jobs:
       - name: Setup Bun
         uses: ./.github/actions/setup-bun
 
+      - name: Setup git committer
+        uses: ./.github/actions/setup-git-committer
+        with:
+          opencode-app-id: ${{ vars.OPENCODE_APP_ID }}
+          opencode-app-secret: ${{ secrets.OPENCODE_APP_SECRET }}
+
       - name: Generate
         run: ./script/generate.ts
 
       - name: Commit and push
         run: |
-          if [ -z "$(git status --porcelain)" ]; then
-            echo "No changes to commit"
-            exit 0
-          fi
-          git config --local user.email "action@github.com"
-          git config --local user.name "GitHub Action"
           git add -A
           git commit -m "chore: generate"
           git push origin HEAD:${{ github.ref_name }} --no-verify

From 3ac05201c6501e21ad0bcd5295498614d570e5fa Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 23:52:08 -0500
Subject: [PATCH 32/61] ci

---
 .github/actions/setup-git-committer/action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/actions/setup-git-committer/action.yml b/.github/actions/setup-git-committer/action.yml
index 39374e167d..9af1c3d1a3 100644
--- a/.github/actions/setup-git-committer/action.yml
+++ b/.github/actions/setup-git-committer/action.yml
@@ -30,7 +30,7 @@ runs:
     - name: Get GitHub App user id
       id: get-user-id
       run: |
-        echo "user-id=$(gh api \"/users/${{ steps.app-token.outputs.app-slug }}[bot]\" --jq .id)" >> "$GITHUB_OUTPUT"
+        echo "user-id=$(gh api \"/users/${{ steps.app-token.outputs.app-slug }}%5Bbot%5D\" --jq .id)" >> "$GITHUB_OUTPUT"
       shell: bash
       env:
         GH_TOKEN: ${{ steps.app-token.outputs.token }}

From 3fef4901875137a643c89b68e231dd77ff1cbb5c Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 23:55:48 -0500
Subject: [PATCH 33/61] ci

---
 .../actions/setup-git-committer/action.yml    | 22 +++++--------------
 1 file changed, 6 insertions(+), 16 deletions(-)

diff --git a/.github/actions/setup-git-committer/action.yml b/.github/actions/setup-git-committer/action.yml
index 9af1c3d1a3..4367996bd6 100644
--- a/.github/actions/setup-git-committer/action.yml
+++ b/.github/actions/setup-git-committer/action.yml
@@ -10,33 +10,23 @@ inputs:
 outputs:
   token:
     description: "GitHub App token"
-    value: ${{ steps.app-token.outputs.token }}
+    value: ${{ steps.apptoken.outputs.token }}
   app-slug:
     description: "GitHub App slug"
-    value: ${{ steps.app-token.outputs.app-slug }}
-  user-id:
-    description: "GitHub App user id"
-    value: ${{ steps.get-user-id.outputs.user-id }}
+    value: ${{ steps.apptoken.outputs.app-slug }}
 runs:
   using: "composite"
   steps:
     - name: Create app token
-      id: app-token
+      id: apptoken
       uses: actions/create-github-app-token@v2
       with:
         app-id: ${{ inputs.opencode-app-id }}
         private-key: ${{ inputs.opencode-app-secret }}
 
-    - name: Get GitHub App user id
-      id: get-user-id
-      run: |
-        echo "user-id=$(gh api \"/users/${{ steps.app-token.outputs.app-slug }}%5Bbot%5D\" --jq .id)" >> "$GITHUB_OUTPUT"
-      shell: bash
-      env:
-        GH_TOKEN: ${{ steps.app-token.outputs.token }}
-
     - name: Configure git user
       run: |
-        git config --global user.name "${{ steps.app-token.outputs.app-slug }}[bot]"
-        git config --global user.email "${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com"
+        slug="${{ steps.apptoken.outputs.app-slug }}"
+        git config --global user.name "${slug}[bot]"
+        git config --global user.email "${slug}[bot]@users.noreply.github.com"
       shell: bash

From 908350c2ea94d657777387c041cf47e313d447c4 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 23:56:56 -0500
Subject: [PATCH 34/61] ci

---
 .github/workflows/generate.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index 28aaa16f73..15c99f4024 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -36,7 +36,7 @@ jobs:
       - name: Commit and push
         run: |
           git add -A
-          git commit -m "chore: generate"
+          git commit -m "chore: generate" --allow-empty
           git push origin HEAD:${{ github.ref_name }} --no-verify
           # if ! git push origin HEAD:${{ github.event.pull_request.head.ref || github.ref_name }} --no-verify; then
           #   echo ""

From 1ab4bbc275c0d9a4b7bc5bab1958ba0506a4852b Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Thu, 29 Jan 2026 23:58:39 -0500
Subject: [PATCH 35/61] ci

---
 .github/workflows/generate.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index 15c99f4024..39263200c4 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -35,8 +35,12 @@ jobs:
 
       - name: Commit and push
         run: |
+          if [ -z "$(git status --porcelain)" ]; then
+            echo "No changes to commit"
+            exit 0
+          fi
           git add -A
-          git commit -m "chore: generate" --allow-empty
+          git commit -m "chore: generate"
           git push origin HEAD:${{ github.ref_name }} --no-verify
           # if ! git push origin HEAD:${{ github.event.pull_request.head.ref || github.ref_name }} --no-verify; then
           #   echo ""

From 5d0122b5a976105e5924ba99e7b17a814c718947 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:04:51 -0500
Subject: [PATCH 36/61] ci

---
 .github/workflows/publish.yml | 24 ++++++++++++++++++------
 1 file changed, 18 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 8e9a44bb2e..73755153aa 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -37,6 +37,13 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - uses: ./.github/actions/setup-bun
+
+      - name: Setup git committer
+        id: committer
+        uses: ./.github/actions/setup-git-committer
+        with:
+          opencode-app-id: ${{ vars.OPENCODE_APP_ID }}
+          opencode-app-secret: ${{ secrets.OPENCODE_APP_SECRET }}
       - id: version
         run: |
           ./script/version.ts
@@ -155,7 +162,7 @@ jobs:
           bun ./scripts/prepare.ts
         env:
           OPENCODE_VERSION: ${{ needs.version.outputs.version }}
-          GITHUB_TOKEN: ${{ secrets.SST_GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.committer.outputs.token }}
           RUST_TARGET: ${{ matrix.settings.target }}
           GH_TOKEN: ${{ github.token }}
           GITHUB_RUN_ID: ${{ github.run_id }}
@@ -228,11 +235,16 @@ jobs:
           node-version: "24"
           registry-url: "https://registry.npmjs.org"
 
-      - name: Setup Git Identity
+      - name: Setup git committer
+        id: committer
+        uses: ./.github/actions/setup-git-committer
+        with:
+          opencode-app-id: ${{ vars.OPENCODE_APP_ID }}
+          opencode-app-secret: ${{ secrets.OPENCODE_APP_SECRET }}
+
+      - name: Setup Git remote
         run: |
-          git config --global user.email "opencode@sst.dev"
-          git config --global user.name "opencode"
-          git remote set-url origin https://x-access-token:${{ secrets.SST_GITHUB_TOKEN }}@github.com/${{ github.repository }}
+          git remote set-url origin https://x-access-token:${{ steps.committer.outputs.token }}@github.com/${{ github.repository }}
 
       - uses: actions/download-artifact@v4
         with:
@@ -263,6 +275,6 @@ jobs:
           OPENCODE_VERSION: ${{ needs.version.outputs.version }}
           OPENCODE_RELEASE: ${{ needs.version.outputs.release }}
           AUR_KEY: ${{ secrets.AUR_KEY }}
-          GITHUB_TOKEN: ${{ secrets.SST_GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.committer.outputs.token }}
           OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
           NPM_CONFIG_PROVENANCE: false

From b28891473f16362b9d97d3825e6c969c4988d970 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:05:05 -0500
Subject: [PATCH 37/61] ci

---
 .github/workflows/generate.yml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index 39263200c4..15c99f4024 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -35,12 +35,8 @@ jobs:
 
       - name: Commit and push
         run: |
-          if [ -z "$(git status --porcelain)" ]; then
-            echo "No changes to commit"
-            exit 0
-          fi
           git add -A
-          git commit -m "chore: generate"
+          git commit -m "chore: generate" --allow-empty
           git push origin HEAD:${{ github.ref_name }} --no-verify
           # if ! git push origin HEAD:${{ github.event.pull_request.head.ref || github.ref_name }} --no-verify; then
           #   echo ""

From b109ab78303829943c7c229e9126983601d8bd6d Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:07:56 -0500
Subject: [PATCH 38/61] ci

---
 .github/actions/setup-git-committer/action.yml | 5 +++++
 .github/workflows/generate.yml                 | 1 +
 .github/workflows/publish.yml                  | 4 ----
 3 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/actions/setup-git-committer/action.yml b/.github/actions/setup-git-committer/action.yml
index 4367996bd6..e039119fd5 100644
--- a/.github/actions/setup-git-committer/action.yml
+++ b/.github/actions/setup-git-committer/action.yml
@@ -30,3 +30,8 @@ runs:
         git config --global user.name "${slug}[bot]"
         git config --global user.email "${slug}[bot]@users.noreply.github.com"
       shell: bash
+
+    - name: Configure git remote
+      run: |
+        git remote set-url origin https://x-access-token:${{ steps.apptoken.outputs.token }}@github.com/${{ github.repository }}
+      shell: bash
diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index 15c99f4024..cae20a2443 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -25,6 +25,7 @@ jobs:
         uses: ./.github/actions/setup-bun
 
       - name: Setup git committer
+        id: committer
         uses: ./.github/actions/setup-git-committer
         with:
           opencode-app-id: ${{ vars.OPENCODE_APP_ID }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 73755153aa..dd0487c404 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -242,10 +242,6 @@ jobs:
           opencode-app-id: ${{ vars.OPENCODE_APP_ID }}
           opencode-app-secret: ${{ secrets.OPENCODE_APP_SECRET }}
 
-      - name: Setup Git remote
-        run: |
-          git remote set-url origin https://x-access-token:${{ steps.committer.outputs.token }}@github.com/${{ github.repository }}
-
       - uses: actions/download-artifact@v4
         with:
           name: opencode-cli

From b5e5d4c92f8a6468831c8ab1101048f7d1ad3c2c Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:10:44 -0500
Subject: [PATCH 39/61] ci

---
 .github/actions/setup-git-committer/action.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/actions/setup-git-committer/action.yml b/.github/actions/setup-git-committer/action.yml
index e039119fd5..e5a5720652 100644
--- a/.github/actions/setup-git-committer/action.yml
+++ b/.github/actions/setup-git-committer/action.yml
@@ -31,6 +31,11 @@ runs:
         git config --global user.email "${slug}[bot]@users.noreply.github.com"
       shell: bash
 
+    - name: Clear checkout auth
+      run: |
+        git config --local --unset-all http.https://github.com/.extraheader || true
+      shell: bash
+
     - name: Configure git remote
       run: |
         git remote set-url origin https://x-access-token:${{ steps.apptoken.outputs.token }}@github.com/${{ github.repository }}

From 36041c000078c9e4e7ccc38707785e0eb757860b Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:15:21 -0500
Subject: [PATCH 40/61] ci

---
 .github/workflows/generate.yml |   8 +--
 .github/workflows/publish.yml  | 126 ++++++++++++++++++++++++++-------
 2 files changed, 103 insertions(+), 31 deletions(-)

diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index cae20a2443..3bb8f364d6 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -16,10 +16,6 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
-          ref: ${{ github.event.pull_request.head.ref || github.ref_name }}
 
       - name: Setup Bun
         uses: ./.github/actions/setup-bun
@@ -36,6 +32,10 @@ jobs:
 
       - name: Commit and push
         run: |
+          if [ -z "$(git status --porcelain)" ]; then
+            echo "No changes to commit"
+            exit 0
+          fi
           git add -A
           git commit -m "chore: generate" --allow-empty
           git push origin HEAD:${{ github.ref_name }} --no-verify
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index dd0487c404..17942a59d3 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -60,6 +60,8 @@ jobs:
     needs: version
     runs-on: blacksmith-4vcpu-ubuntu-2404
     if: github.repository == 'anomalyco/opencode'
+    container:
+      image: ghcr.io/anomalyco/build/bun-node:24.04
     steps:
       - uses: actions/checkout@v3
         with:
@@ -84,6 +86,102 @@ jobs:
     outputs:
       version: ${{ needs.version.outputs.version }}
 
+  build-tauri-linux:
+    needs:
+      - build-cli
+      - version
+    continue-on-error: false
+    strategy:
+      fail-fast: false
+      matrix:
+        settings:
+          - host: blacksmith-4vcpu-ubuntu-2404
+            target: x86_64-unknown-linux-gnu
+          - host: blacksmith-4vcpu-ubuntu-2404-arm
+            target: aarch64-unknown-linux-gnu
+    runs-on: ${{ matrix.settings.host }}
+    container:
+      image: ghcr.io/anomalyco/build/tauri-linux:24.04
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-tags: true
+
+      - uses: apple-actions/import-codesign-certs@v2
+        if: ${{ runner.os == 'macOS' }}
+        with:
+          keychain: build
+          p12-file-base64: ${{ secrets.APPLE_CERTIFICATE }}
+          p12-password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+
+      - name: Verify Certificate
+        if: ${{ runner.os == 'macOS' }}
+        run: |
+          CERT_INFO=$(security find-identity -v -p codesigning build.keychain | grep "Developer ID Application")
+          CERT_ID=$(echo "$CERT_INFO" | awk -F'"' '{print $2}')
+          echo "CERT_ID=$CERT_ID" >> $GITHUB_ENV
+          echo "Certificate imported."
+
+      - name: Setup Apple API Key
+        if: ${{ runner.os == 'macOS' }}
+        run: |
+          echo "${{ secrets.APPLE_API_KEY_PATH }}" > $RUNNER_TEMP/apple-api-key.p8
+
+      - uses: ./.github/actions/setup-bun
+
+      - name: install Rust stable
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.settings.target }}
+
+      - uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: packages/desktop/src-tauri
+          shared-key: ${{ matrix.settings.target }}
+
+      - name: Prepare
+        run: |
+          cd packages/desktop
+          bun ./scripts/prepare.ts
+        env:
+          OPENCODE_VERSION: ${{ needs.version.outputs.version }}
+          GITHUB_TOKEN: ${{ steps.committer.outputs.token }}
+          RUST_TARGET: ${{ matrix.settings.target }}
+          GH_TOKEN: ${{ github.token }}
+          GITHUB_RUN_ID: ${{ github.run_id }}
+
+      # Fixes AppImage build issues, can be removed when https://github.com/tauri-apps/tauri/pull/12491 is released
+      - name: Install tauri-cli from portable appimage branch
+        run: |
+          cargo install tauri-cli --git https://github.com/tauri-apps/tauri --branch feat/truly-portable-appimage --force
+          echo "Installed tauri-cli version:"
+          cargo tauri --version
+
+      - name: Build and upload artifacts
+        uses: tauri-apps/tauri-action@390cbe447412ced1303d35abe75287949e43437a
+        timeout-minutes: 60
+        with:
+          projectPath: packages/desktop
+          uploadWorkflowArtifacts: true
+          tauriScript: ${{ (contains(matrix.settings.host, 'ubuntu') && 'cargo tauri') || '' }}
+          args: --target ${{ matrix.settings.target }} --config ./src-tauri/tauri.prod.conf.json --verbose
+          updaterJsonPreferNsis: true
+          releaseId: ${{ needs.version.outputs.release }}
+          tagName: ${{ needs.version.outputs.tag }}
+          releaseDraft: true
+          releaseAssetNamePattern: opencode-desktop-[platform]-[arch][ext]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TAURI_BUNDLER_NEW_APPIMAGE_FORMAT: true
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+          APPLE_SIGNING_IDENTITY: ${{ env.CERT_ID }}
+          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
+          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+          APPLE_API_KEY_PATH: ${{ runner.temp }}/apple-api-key.p8
+
   build-tauri:
     needs:
       - build-cli
@@ -99,10 +197,6 @@ jobs:
             target: aarch64-apple-darwin
           - host: blacksmith-4vcpu-windows-2025
             target: x86_64-pc-windows-msvc
-          - host: blacksmith-4vcpu-ubuntu-2404
-            target: x86_64-unknown-linux-gnu
-          - host: blacksmith-4vcpu-ubuntu-2404-arm
-            target: aarch64-unknown-linux-gnu
     runs-on: ${{ matrix.settings.host }}
     steps:
       - uses: actions/checkout@v3
@@ -131,21 +225,6 @@ jobs:
 
       - uses: ./.github/actions/setup-bun
 
-      - name: Cache apt packages
-        if: contains(matrix.settings.host, 'ubuntu')
-        uses: actions/cache@v4
-        with:
-          path: /var/cache/apt/archives
-          key: ${{ runner.os }}-${{ matrix.settings.target }}-apt-${{ hashFiles('.github/workflows/publish.yml') }}
-          restore-keys: |
-            ${{ runner.os }}-${{ matrix.settings.target }}-apt-
-
-      - name: install dependencies (ubuntu only)
-        if: contains(matrix.settings.host, 'ubuntu')
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
-
       - name: install Rust stable
         uses: dtolnay/rust-toolchain@stable
         with:
@@ -167,14 +246,6 @@ jobs:
           GH_TOKEN: ${{ github.token }}
           GITHUB_RUN_ID: ${{ github.run_id }}
 
-      # Fixes AppImage build issues, can be removed when https://github.com/tauri-apps/tauri/pull/12491 is released
-      - name: Install tauri-cli from portable appimage branch
-        if: contains(matrix.settings.host, 'ubuntu')
-        run: |
-          cargo install tauri-cli --git https://github.com/tauri-apps/tauri --branch feat/truly-portable-appimage --force
-          echo "Installed tauri-cli version:"
-          cargo tauri --version
-
       - name: Build and upload artifacts
         uses: tauri-apps/tauri-action@390cbe447412ced1303d35abe75287949e43437a
         timeout-minutes: 60
@@ -205,6 +276,7 @@ jobs:
       - version
       - build-cli
       - build-tauri
+      - build-tauri-linux
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v3

From 273e7b837986235ba9ec76830c1ba29c9c676068 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:18:50 -0500
Subject: [PATCH 41/61] ci

---
 .github/workflows/publish.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 17942a59d3..4c6a056962 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -67,6 +67,9 @@ jobs:
         with:
           fetch-tags: true
 
+      - name: Mark workspace as safe
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+
       - uses: ./.github/actions/setup-bun
 
       - name: Build
@@ -107,6 +110,9 @@ jobs:
         with:
           fetch-tags: true
 
+      - name: Mark workspace as safe
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+
       - uses: apple-actions/import-codesign-certs@v2
         if: ${{ runner.os == 'macOS' }}
         with:

From da7f45bd4c1af30ab241558156d7d1b6bbef71f5 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:21:30 -0500
Subject: [PATCH 42/61] ci

---
 .github/workflows/publish.yml | 46 ++++++-----------------------------
 1 file changed, 7 insertions(+), 39 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 4c6a056962..7562910f6e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -63,12 +63,10 @@ jobs:
     container:
       image: ghcr.io/anomalyco/build/bun-node:24.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-tags: true
-
-      - name: Mark workspace as safe
-        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          set-safe-directory: true
 
       - uses: ./.github/actions/setup-bun
 
@@ -106,39 +104,15 @@ jobs:
     container:
       image: ghcr.io/anomalyco/build/tauri-linux:24.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-tags: true
-
-      - name: Mark workspace as safe
-        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
-
-      - uses: apple-actions/import-codesign-certs@v2
-        if: ${{ runner.os == 'macOS' }}
-        with:
-          keychain: build
-          p12-file-base64: ${{ secrets.APPLE_CERTIFICATE }}
-          p12-password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
-
-      - name: Verify Certificate
-        if: ${{ runner.os == 'macOS' }}
-        run: |
-          CERT_INFO=$(security find-identity -v -p codesigning build.keychain | grep "Developer ID Application")
-          CERT_ID=$(echo "$CERT_INFO" | awk -F'"' '{print $2}')
-          echo "CERT_ID=$CERT_ID" >> $GITHUB_ENV
-          echo "Certificate imported."
-
-      - name: Setup Apple API Key
-        if: ${{ runner.os == 'macOS' }}
-        run: |
-          echo "${{ secrets.APPLE_API_KEY_PATH }}" > $RUNNER_TEMP/apple-api-key.p8
+          set-safe-directory: true
 
       - uses: ./.github/actions/setup-bun
 
-      - name: install Rust stable
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: ${{ matrix.settings.target }}
+      - name: add Rust target
+        run: rustup target add ${{ matrix.settings.target }}
 
       - uses: Swatinem/rust-cache@v2
         with:
@@ -169,7 +143,7 @@ jobs:
         with:
           projectPath: packages/desktop
           uploadWorkflowArtifacts: true
-          tauriScript: ${{ (contains(matrix.settings.host, 'ubuntu') && 'cargo tauri') || '' }}
+          tauriScript: cargo tauri
           args: --target ${{ matrix.settings.target }} --config ./src-tauri/tauri.prod.conf.json --verbose
           updaterJsonPreferNsis: true
           releaseId: ${{ needs.version.outputs.release }}
@@ -181,12 +155,6 @@ jobs:
           TAURI_BUNDLER_NEW_APPIMAGE_FORMAT: true
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
-          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
-          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
-          APPLE_SIGNING_IDENTITY: ${{ env.CERT_ID }}
-          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
-          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
-          APPLE_API_KEY_PATH: ${{ runner.temp }}/apple-api-key.p8
 
   build-tauri:
     needs:

From e666ddb63039a764266a202b2b6ccc615ef8a395 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:23:52 -0500
Subject: [PATCH 43/61] ci

---
 .github/workflows/publish.yml | 102 ++++++++++------------------------
 1 file changed, 28 insertions(+), 74 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7562910f6e..dd0487c404 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -60,13 +60,10 @@ jobs:
     needs: version
     runs-on: blacksmith-4vcpu-ubuntu-2404
     if: github.repository == 'anomalyco/opencode'
-    container:
-      image: ghcr.io/anomalyco/build/bun-node:24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v3
         with:
           fetch-tags: true
-          set-safe-directory: true
 
       - uses: ./.github/actions/setup-bun
 
@@ -87,75 +84,6 @@ jobs:
     outputs:
       version: ${{ needs.version.outputs.version }}
 
-  build-tauri-linux:
-    needs:
-      - build-cli
-      - version
-    continue-on-error: false
-    strategy:
-      fail-fast: false
-      matrix:
-        settings:
-          - host: blacksmith-4vcpu-ubuntu-2404
-            target: x86_64-unknown-linux-gnu
-          - host: blacksmith-4vcpu-ubuntu-2404-arm
-            target: aarch64-unknown-linux-gnu
-    runs-on: ${{ matrix.settings.host }}
-    container:
-      image: ghcr.io/anomalyco/build/tauri-linux:24.04
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-tags: true
-          set-safe-directory: true
-
-      - uses: ./.github/actions/setup-bun
-
-      - name: add Rust target
-        run: rustup target add ${{ matrix.settings.target }}
-
-      - uses: Swatinem/rust-cache@v2
-        with:
-          workspaces: packages/desktop/src-tauri
-          shared-key: ${{ matrix.settings.target }}
-
-      - name: Prepare
-        run: |
-          cd packages/desktop
-          bun ./scripts/prepare.ts
-        env:
-          OPENCODE_VERSION: ${{ needs.version.outputs.version }}
-          GITHUB_TOKEN: ${{ steps.committer.outputs.token }}
-          RUST_TARGET: ${{ matrix.settings.target }}
-          GH_TOKEN: ${{ github.token }}
-          GITHUB_RUN_ID: ${{ github.run_id }}
-
-      # Fixes AppImage build issues, can be removed when https://github.com/tauri-apps/tauri/pull/12491 is released
-      - name: Install tauri-cli from portable appimage branch
-        run: |
-          cargo install tauri-cli --git https://github.com/tauri-apps/tauri --branch feat/truly-portable-appimage --force
-          echo "Installed tauri-cli version:"
-          cargo tauri --version
-
-      - name: Build and upload artifacts
-        uses: tauri-apps/tauri-action@390cbe447412ced1303d35abe75287949e43437a
-        timeout-minutes: 60
-        with:
-          projectPath: packages/desktop
-          uploadWorkflowArtifacts: true
-          tauriScript: cargo tauri
-          args: --target ${{ matrix.settings.target }} --config ./src-tauri/tauri.prod.conf.json --verbose
-          updaterJsonPreferNsis: true
-          releaseId: ${{ needs.version.outputs.release }}
-          tagName: ${{ needs.version.outputs.tag }}
-          releaseDraft: true
-          releaseAssetNamePattern: opencode-desktop-[platform]-[arch][ext]
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          TAURI_BUNDLER_NEW_APPIMAGE_FORMAT: true
-          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
-          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
-
   build-tauri:
     needs:
       - build-cli
@@ -171,6 +99,10 @@ jobs:
             target: aarch64-apple-darwin
           - host: blacksmith-4vcpu-windows-2025
             target: x86_64-pc-windows-msvc
+          - host: blacksmith-4vcpu-ubuntu-2404
+            target: x86_64-unknown-linux-gnu
+          - host: blacksmith-4vcpu-ubuntu-2404-arm
+            target: aarch64-unknown-linux-gnu
     runs-on: ${{ matrix.settings.host }}
     steps:
       - uses: actions/checkout@v3
@@ -199,6 +131,21 @@ jobs:
 
       - uses: ./.github/actions/setup-bun
 
+      - name: Cache apt packages
+        if: contains(matrix.settings.host, 'ubuntu')
+        uses: actions/cache@v4
+        with:
+          path: /var/cache/apt/archives
+          key: ${{ runner.os }}-${{ matrix.settings.target }}-apt-${{ hashFiles('.github/workflows/publish.yml') }}
+          restore-keys: |
+            ${{ runner.os }}-${{ matrix.settings.target }}-apt-
+
+      - name: install dependencies (ubuntu only)
+        if: contains(matrix.settings.host, 'ubuntu')
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
+
       - name: install Rust stable
         uses: dtolnay/rust-toolchain@stable
         with:
@@ -220,6 +167,14 @@ jobs:
           GH_TOKEN: ${{ github.token }}
           GITHUB_RUN_ID: ${{ github.run_id }}
 
+      # Fixes AppImage build issues, can be removed when https://github.com/tauri-apps/tauri/pull/12491 is released
+      - name: Install tauri-cli from portable appimage branch
+        if: contains(matrix.settings.host, 'ubuntu')
+        run: |
+          cargo install tauri-cli --git https://github.com/tauri-apps/tauri --branch feat/truly-portable-appimage --force
+          echo "Installed tauri-cli version:"
+          cargo tauri --version
+
       - name: Build and upload artifacts
         uses: tauri-apps/tauri-action@390cbe447412ced1303d35abe75287949e43437a
         timeout-minutes: 60
@@ -250,7 +205,6 @@ jobs:
       - version
       - build-cli
       - build-tauri
-      - build-tauri-linux
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v3

From 015eda36ce155ed61bbf789c1fec79ced33d6d3f Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:25:52 -0500
Subject: [PATCH 44/61] ci

---
 .github/workflows/publish.yml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index dd0487c404..85343d9293 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -38,12 +38,6 @@ jobs:
       - uses: actions/checkout@v3
       - uses: ./.github/actions/setup-bun
 
-      - name: Setup git committer
-        id: committer
-        uses: ./.github/actions/setup-git-committer
-        with:
-          opencode-app-id: ${{ vars.OPENCODE_APP_ID }}
-          opencode-app-secret: ${{ secrets.OPENCODE_APP_SECRET }}
       - id: version
         run: |
           ./script/version.ts

From 66ec378680e420581e2b14a6b6558c61f606dbd6 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:27:51 -0500
Subject: [PATCH 45/61] ci

---
 .github/workflows/nix-hashes.yml | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/nix-hashes.yml b/.github/workflows/nix-hashes.yml
index 63ab561887..061b4ada8d 100644
--- a/.github/workflows/nix-hashes.yml
+++ b/.github/workflows/nix-hashes.yml
@@ -36,14 +36,16 @@ jobs:
           ref: ${{ github.head_ref || github.ref_name }}
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
+      - name: Setup git committer
+        id: committer
+        uses: ./.github/actions/setup-git-committer
+        with:
+          opencode-app-id: ${{ vars.OPENCODE_APP_ID }}
+          opencode-app-secret: ${{ secrets.OPENCODE_APP_SECRET }}
+
       - name: Setup Nix
         uses: nixbuild/nix-quick-install-action@v34
 
-      - name: Configure git
-        run: |
-          git config --global user.email "action@github.com"
-          git config --global user.name "Github Action"
-
       - name: Pull latest changes
         env:
           TARGET_BRANCH: ${{ github.head_ref || github.ref_name }}

From 9e0747c9b4ec41e7ba5dbe6891770cfa600f768d Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:39:23 -0500
Subject: [PATCH 46/61] ci

---
 script/changelog-debug.ts | 85 +++++++++++++++++++++++++++++++++++++++
 script/publish.ts         |  5 ++-
 2 files changed, 88 insertions(+), 2 deletions(-)
 create mode 100644 script/changelog-debug.ts

diff --git a/script/changelog-debug.ts b/script/changelog-debug.ts
new file mode 100644
index 0000000000..1144d3b0cb
--- /dev/null
+++ b/script/changelog-debug.ts
@@ -0,0 +1,85 @@
+#!/usr/bin/env bun
+
+import { $ } from "bun"
+import { parseArgs } from "util"
+import { getLatestRelease } from "./changelog"
+
+const paths = [
+  "packages/opencode",
+  "packages/sdk",
+  "packages/plugin",
+  "packages/desktop",
+  "packages/app",
+  "sdks/vscode",
+  "packages/extensions",
+  "github",
+]
+
+const clean = (text: string) => text.split("\n").filter(Boolean)
+
+const ref = (value: string, head = false) => {
+  if (head && value === "HEAD") return value
+  if (value.startsWith("v")) return value
+  return `v${value}`
+}
+
+const { values } = parseArgs({
+  args: Bun.argv.slice(2),
+  options: {
+    from: { type: "string", short: "f" },
+    to: { type: "string", short: "t", default: "HEAD" },
+    base: { type: "string", short: "b", default: "origin/dev" },
+    help: { type: "boolean", short: "h", default: false },
+  },
+})
+
+if (values.help) {
+  console.log(`
+Usage: bun script/changelog-debug.ts [options]
+
+Options:
+  -f, --from <version>   Starting version (default: latest GitHub release)
+  -t, --to <ref>         Ending ref (default: HEAD)
+  -b, --base <ref>       Compare base for ahead/behind (default: origin/dev)
+  -h, --help             Show this help message
+
+Examples:
+  bun script/changelog-debug.ts
+  bun script/changelog-debug.ts -f 1.0.200 -t dev
+  bun script/changelog-debug.ts -f 1.0.200 -t HEAD -b origin/dev
+`)
+  process.exit(0)
+}
+
+const to = values.to!
+const from = values.from ?? (await getLatestRelease())
+const fromRef = ref(from)
+const toRef = ref(to, true)
+
+console.log(`Debugging changelog range: ${fromRef} -> ${toRef}\n`)
+
+const [ahead, behind] = await $`git rev-list --left-right --count ${values.base}...HEAD`
+  .text()
+  .then((text) => text.trim().split("\t"))
+
+console.log(`Ahead/behind ${values.base}: ahead=${ahead ?? "0"} behind=${behind ?? "0"}`)
+
+const gh = await $`gh api "/repos/anomalyco/opencode/compare/${fromRef}...${toRef}" --jq '.commits[].sha'`
+  .text()
+  .then(clean)
+
+const localAll = await $`git log ${fromRef}..${toRef} --oneline --format="%H"`.text().then(clean)
+const localFiltered = await $`git log ${fromRef}..${toRef} --oneline --format="%H" -- ${paths}`.text().then(clean)
+
+const ghSet = new Set(gh)
+const missing = localFiltered.filter((hash) => !ghSet.has(hash))
+
+console.log(`GitHub compare commits: ${gh.length}`)
+console.log(`Local commits (all): ${localAll.length}`)
+console.log(`Local commits (filtered paths): ${localFiltered.length}`)
+console.log(`Filtered commits missing from GitHub compare: ${missing.length}`)
+
+if (missing.length > 0) {
+  console.log("\nMissing hashes (first 10):")
+  console.log(missing.slice(0, 10).join("\n"))
+}
diff --git a/script/publish.ts b/script/publish.ts
index 23a6e5c9df..5fa84825b3 100755
--- a/script/publish.ts
+++ b/script/publish.ts
@@ -58,8 +58,6 @@ await $`bun install`
 await import(`../packages/sdk/js/script/build.ts`)
 
 if (Script.release) {
-  const previous = await getLatestRelease()
-  const notes = await buildNotes(previous, "HEAD")
   // notes.unshift(highlightsTemplate)
   await $`git commit -am "release: v${Script.version}"`
   await $`git tag v${Script.version}`
@@ -67,6 +65,9 @@ if (Script.release) {
   await $`git cherry-pick HEAD..origin/dev`.nothrow()
   await $`git push origin HEAD --tags --no-verify --force-with-lease`
   await new Promise((resolve) => setTimeout(resolve, 5_000))
+  const previous = await getLatestRelease()
+  console.log("previous", previous)
+  const notes = await buildNotes(previous, "dev")
   await $`gh release edit v${Script.version} --draft=false --title "v${Script.version}" --notes ${notes.join("\n") || "No notable changes"}`
 }
 

From 08f11f4da6f16dd02024fba0914e13af7ba784c4 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:39:49 -0500
Subject: [PATCH 47/61] ci

---
 script/changelog-debug.ts | 85 ---------------------------------------
 1 file changed, 85 deletions(-)
 delete mode 100644 script/changelog-debug.ts

diff --git a/script/changelog-debug.ts b/script/changelog-debug.ts
deleted file mode 100644
index 1144d3b0cb..0000000000
--- a/script/changelog-debug.ts
+++ /dev/null
@@ -1,85 +0,0 @@
-#!/usr/bin/env bun
-
-import { $ } from "bun"
-import { parseArgs } from "util"
-import { getLatestRelease } from "./changelog"
-
-const paths = [
-  "packages/opencode",
-  "packages/sdk",
-  "packages/plugin",
-  "packages/desktop",
-  "packages/app",
-  "sdks/vscode",
-  "packages/extensions",
-  "github",
-]
-
-const clean = (text: string) => text.split("\n").filter(Boolean)
-
-const ref = (value: string, head = false) => {
-  if (head && value === "HEAD") return value
-  if (value.startsWith("v")) return value
-  return `v${value}`
-}
-
-const { values } = parseArgs({
-  args: Bun.argv.slice(2),
-  options: {
-    from: { type: "string", short: "f" },
-    to: { type: "string", short: "t", default: "HEAD" },
-    base: { type: "string", short: "b", default: "origin/dev" },
-    help: { type: "boolean", short: "h", default: false },
-  },
-})
-
-if (values.help) {
-  console.log(`
-Usage: bun script/changelog-debug.ts [options]
-
-Options:
-  -f, --from <version>   Starting version (default: latest GitHub release)
-  -t, --to <ref>         Ending ref (default: HEAD)
-  -b, --base <ref>       Compare base for ahead/behind (default: origin/dev)
-  -h, --help             Show this help message
-
-Examples:
-  bun script/changelog-debug.ts
-  bun script/changelog-debug.ts -f 1.0.200 -t dev
-  bun script/changelog-debug.ts -f 1.0.200 -t HEAD -b origin/dev
-`)
-  process.exit(0)
-}
-
-const to = values.to!
-const from = values.from ?? (await getLatestRelease())
-const fromRef = ref(from)
-const toRef = ref(to, true)
-
-console.log(`Debugging changelog range: ${fromRef} -> ${toRef}\n`)
-
-const [ahead, behind] = await $`git rev-list --left-right --count ${values.base}...HEAD`
-  .text()
-  .then((text) => text.trim().split("\t"))
-
-console.log(`Ahead/behind ${values.base}: ahead=${ahead ?? "0"} behind=${behind ?? "0"}`)
-
-const gh = await $`gh api "/repos/anomalyco/opencode/compare/${fromRef}...${toRef}" --jq '.commits[].sha'`
-  .text()
-  .then(clean)
-
-const localAll = await $`git log ${fromRef}..${toRef} --oneline --format="%H"`.text().then(clean)
-const localFiltered = await $`git log ${fromRef}..${toRef} --oneline --format="%H" -- ${paths}`.text().then(clean)
-
-const ghSet = new Set(gh)
-const missing = localFiltered.filter((hash) => !ghSet.has(hash))
-
-console.log(`GitHub compare commits: ${gh.length}`)
-console.log(`Local commits (all): ${localAll.length}`)
-console.log(`Local commits (filtered paths): ${localFiltered.length}`)
-console.log(`Filtered commits missing from GitHub compare: ${missing.length}`)
-
-if (missing.length > 0) {
-  console.log("\nMissing hashes (first 10):")
-  console.log(missing.slice(0, 10).join("\n"))
-}

From 5bef8e316ad99e899afc6caf9f5a3056e68efa04 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:43:36 -0500
Subject: [PATCH 48/61] ci

---
 script/changelog.ts | 30 +++++++++++++++++++++++-------
 script/publish.ts   |  6 ------
 script/version.ts   |  7 ++++++-
 3 files changed, 29 insertions(+), 14 deletions(-)

diff --git a/script/changelog.ts b/script/changelog.ts
index ace579ee4b..0c8d65ba18 100755
--- a/script/changelog.ts
+++ b/script/changelog.ts
@@ -18,13 +18,29 @@ export const team = [
   "R44VC0RP",
 ]
 
-export async function getLatestRelease() {
-  return fetch("https://api.github.com/repos/anomalyco/opencode/releases/latest")
-    .then((res) => {
-      if (!res.ok) throw new Error(res.statusText)
-      return res.json()
-    })
-    .then((data: any) => data.tag_name.replace(/^v/, ""))
+type Release = {
+  tag_name: string
+  draft: boolean
+  prerelease: boolean
+}
+
+export async function getLatestRelease(skip?: string) {
+  const data = await fetch("https://api.github.com/repos/anomalyco/opencode/releases?per_page=100").then((res) => {
+    if (!res.ok) throw new Error(res.statusText)
+    return res.json()
+  })
+
+  const releases = data as Release[]
+  const target = skip?.replace(/^v/, "")
+
+  for (const release of releases) {
+    if (release.draft) continue
+    const tag = release.tag_name.replace(/^v/, "")
+    if (target && tag === target) continue
+    return tag
+  }
+
+  throw new Error("No releases found")
 }
 
 type Commit = {
diff --git a/script/publish.ts b/script/publish.ts
index 5fa84825b3..84abe6a66a 100755
--- a/script/publish.ts
+++ b/script/publish.ts
@@ -2,7 +2,6 @@
 
 import { $ } from "bun"
 import { Script } from "@opencode-ai/script"
-import { buildNotes, getLatestRelease } from "./changelog"
 
 const highlightsTemplate = `
 <!--
@@ -58,17 +57,12 @@ await $`bun install`
 await import(`../packages/sdk/js/script/build.ts`)
 
 if (Script.release) {
-  // notes.unshift(highlightsTemplate)
   await $`git commit -am "release: v${Script.version}"`
   await $`git tag v${Script.version}`
   await $`git fetch origin`
   await $`git cherry-pick HEAD..origin/dev`.nothrow()
   await $`git push origin HEAD --tags --no-verify --force-with-lease`
   await new Promise((resolve) => setTimeout(resolve, 5_000))
-  const previous = await getLatestRelease()
-  console.log("previous", previous)
-  const notes = await buildNotes(previous, "dev")
-  await $`gh release edit v${Script.version} --draft=false --title "v${Script.version}" --notes ${notes.join("\n") || "No notable changes"}`
 }
 
 console.log("\n=== cli ===\n")
diff --git a/script/version.ts b/script/version.ts
index 861417f759..723677b8cb 100755
--- a/script/version.ts
+++ b/script/version.ts
@@ -2,12 +2,17 @@
 
 import { Script } from "@opencode-ai/script"
 import { $ } from "bun"
+import { buildNotes, getLatestRelease } from "./changelog"
 
-let output = [`version=${Script.version}`]
+const output = [`version=${Script.version}`]
 
 if (!Script.preview) {
   await $`gh release create v${Script.version} -d --title "v${Script.version}" ${Script.preview ? "--prerelease" : ""}`
   const release = await $`gh release view v${Script.version} --json id,tagName`.json()
+  const previous = await getLatestRelease(Script.version)
+  const notes = await buildNotes(previous, "HEAD")
+  const body = notes.join("\n") || "No notable changes"
+  await $`gh release edit v${Script.version} --draft=false --title "v${Script.version}" --notes ${body}`
   output.push(`release=${release.id}`)
   output.push(`tag=${release.tagName}`)
 }

From 48d6d72e25cd6c2f074a095f5c3534ba6b25c043 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:44:58 -0500
Subject: [PATCH 49/61] ci

---
 .github/workflows/publish.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 85343d9293..0d26b31c1c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -36,6 +36,9 @@ jobs:
     if: github.repository == 'anomalyco/opencode'
     steps:
       - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
       - uses: ./.github/actions/setup-bun
 
       - id: version

From 8f537940178772deedf3317c5c669950f1f6c5a6 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:46:12 -0500
Subject: [PATCH 50/61] ci

---
 .github/workflows/publish.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0d26b31c1c..2fc2635235 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -41,6 +41,10 @@ jobs:
 
       - uses: ./.github/actions/setup-bun
 
+      - name: Install OpenCode
+        if: inputs.bump || inputs.version
+        run: bun i -g opencode-ai
+
       - id: version
         run: |
           ./script/version.ts
@@ -210,10 +214,6 @@ jobs:
 
       - uses: ./.github/actions/setup-bun
 
-      - name: Install OpenCode
-        if: inputs.bump || inputs.version
-        run: bun i -g opencode-ai
-
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3
         with:

From 1794319a4c2cbe137934cec7d845862af9d206c6 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:48:08 -0500
Subject: [PATCH 51/61] ci

---
 .github/workflows/publish.yml | 2 --
 script/version.ts             | 2 +-
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 2fc2635235..01f539eb00 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -209,8 +209,6 @@ jobs:
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
 
       - uses: ./.github/actions/setup-bun
 
diff --git a/script/version.ts b/script/version.ts
index 723677b8cb..2c158d2222 100755
--- a/script/version.ts
+++ b/script/version.ts
@@ -12,7 +12,7 @@ if (!Script.preview) {
   const previous = await getLatestRelease(Script.version)
   const notes = await buildNotes(previous, "HEAD")
   const body = notes.join("\n") || "No notable changes"
-  await $`gh release edit v${Script.version} --draft=false --title "v${Script.version}" --notes ${body}`
+  await $`gh release edit v${Script.version} --title "v${Script.version}" --notes ${body}`
   output.push(`release=${release.id}`)
   output.push(`tag=${release.tagName}`)
 }

From 09f4ef899632ea7179c08230a25d325feed8f5aa Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 00:56:45 -0500
Subject: [PATCH 52/61] ci

---
 .github/workflows/publish.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 01f539eb00..3974d23ffc 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -52,6 +52,7 @@ jobs:
           GH_TOKEN: ${{ github.token }}
           OPENCODE_BUMP: ${{ inputs.bump }}
           OPENCODE_VERSION: ${{ inputs.version }}
+          OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
     outputs:
       version: ${{ steps.version.outputs.version }}
       release: ${{ steps.version.outputs.release }}
@@ -267,5 +268,4 @@ jobs:
           OPENCODE_RELEASE: ${{ needs.version.outputs.release }}
           AUR_KEY: ${{ secrets.AUR_KEY }}
           GITHUB_TOKEN: ${{ steps.committer.outputs.token }}
-          OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
           NPM_CONFIG_PROVENANCE: false

From d58661d4fb4be22f2188fb3619c2b8f75f5b40ac Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 01:15:24 -0500
Subject: [PATCH 53/61] ci

---
 bun.lock            |  6 +++++-
 script/changelog.ts | 19 +++++++++++--------
 script/version.ts   | 12 ++++++++----
 3 files changed, 24 insertions(+), 13 deletions(-)

diff --git a/bun.lock b/bun.lock
index 14d9565b28..99d35168f3 100644
--- a/bun.lock
+++ b/bun.lock
@@ -18,7 +18,9 @@
         "prettier": "3.6.2",
         "semver": "^7.6.0",
         "sst": "3.17.23",
+        "stackback": "0.0.2",
         "turbo": "2.5.6",
+        "why-is-node-running": "2.2.2",
       },
     },
     "packages/app": {
@@ -3899,7 +3901,7 @@
 
     "which-typed-array": ["which-typed-array@1.1.20", "", { "dependencies": { "available-typed-arrays": "^1.0.7", "call-bind": "^1.0.8", "call-bound": "^1.0.4", "for-each": "^0.3.5", "get-proto": "^1.0.1", "gopd": "^1.2.0", "has-tostringtag": "^1.0.2" } }, "sha512-LYfpUkmqwl0h9A2HL09Mms427Q1RZWuOHsukfVcKRq9q95iQxdw0ix1JQrqbcDR9PH1QDwf5Qo8OZb5lksZ8Xg=="],
 
-    "why-is-node-running": ["why-is-node-running@3.2.2", "", { "bin": { "why-is-node-running": "cli.js" } }, "sha512-NKUzAelcoCXhXL4dJzKIwXeR8iEVqsA0Lq6Vnd0UXvgaKbzVo4ZTHROF2Jidrv+SgxOQ03fMinnNhzZATxOD3A=="],
+    "why-is-node-running": ["why-is-node-running@2.2.2", "", { "dependencies": { "siginfo": "^2.0.0", "stackback": "0.0.2" }, "bin": { "why-is-node-running": "cli.js" } }, "sha512-6tSwToZxTOcotxHeA+qGCq1mVzKR3CwcJGmVcY+QE8SHy6TnpFnh8PAvPNHYr7EcuVeG0QSMxtYCuO1ta/G/oA=="],
 
     "widest-line": ["widest-line@5.0.0", "", { "dependencies": { "string-width": "^7.0.0" } }, "sha512-c9bZp7b5YtRj2wOe6dlj32MK+Bx/M/d+9VB2SHM1OtsUHR0aV0tdP6DWh/iMt0kWi1t5g1Iudu6hQRNd1A4PVA=="],
 
@@ -4387,6 +4389,8 @@
 
     "opencode/@ai-sdk/openai-compatible": ["@ai-sdk/openai-compatible@1.0.30", "", { "dependencies": { "@ai-sdk/provider": "2.0.1", "@ai-sdk/provider-utils": "3.0.20" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-thubwhRtv9uicAxSWwNpinM7hiL/0CkhL/ymPaHuKvI494J7HIzn8KQZQ2ymRz284WTIZnI7VMyyejxW4RMM6w=="],
 
+    "opencode/why-is-node-running": ["why-is-node-running@3.2.2", "", { "bin": { "why-is-node-running": "cli.js" } }, "sha512-NKUzAelcoCXhXL4dJzKIwXeR8iEVqsA0Lq6Vnd0UXvgaKbzVo4ZTHROF2Jidrv+SgxOQ03fMinnNhzZATxOD3A=="],
+
     "opencontrol/@modelcontextprotocol/sdk": ["@modelcontextprotocol/sdk@1.6.1", "", { "dependencies": { "content-type": "^1.0.5", "cors": "^2.8.5", "eventsource": "^3.0.2", "express": "^5.0.1", "express-rate-limit": "^7.5.0", "pkce-challenge": "^4.1.0", "raw-body": "^3.0.0", "zod": "^3.23.8", "zod-to-json-schema": "^3.24.1" } }, "sha512-oxzMzYCkZHMntzuyerehK3fV6A2Kwh5BD6CGEJSVDU2QNEhfLOptf2X7esQgaHZXHZY0oHmMsOtIDLP71UJXgA=="],
 
     "opencontrol/@tsconfig/bun": ["@tsconfig/bun@1.0.7", "", {}, "sha512-udGrGJBNQdXGVulehc1aWT73wkR9wdaGBtB6yL70RJsqwW/yJhIg6ZbRlPOfIUiFNrnBuYLBi9CSmMKfDC7dvA=="],
diff --git a/script/changelog.ts b/script/changelog.ts
index 0c8d65ba18..0043cd3d62 100755
--- a/script/changelog.ts
+++ b/script/changelog.ts
@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 
 import { $ } from "bun"
-import { createOpencode } from "@opencode-ai/sdk"
+import { createOpencode } from "@opencode-ai/sdk/v2"
 import { parseArgs } from "util"
 
 export const team = [
@@ -153,9 +153,9 @@ async function summarizeCommit(opencode: Awaited<ReturnType<typeof createOpencod
   console.log("summarizing commit:", message)
   const session = await opencode.client.session.create()
   const result = await opencode.client.session
-    .prompt({
-      path: { id: session.data!.id },
-      body: {
+    .prompt(
+      {
+        sessionID: session.data!.id,
         model: { providerID: "opencode", modelID: "claude-sonnet-4-5" },
         tools: {
           "*": false,
@@ -169,8 +169,10 @@ Commit: ${message}`,
           },
         ],
       },
-      signal: AbortSignal.timeout(120_000),
-    })
+      {
+        signal: AbortSignal.timeout(120_000),
+      },
+    )
     .then((x) => x.data?.parts?.find((y) => y.type === "text")?.text ?? message)
   return result.trim()
 }
@@ -238,7 +240,7 @@ export async function buildNotes(from: string, to: string) {
 
   console.log("generating changelog since " + from)
 
-  const opencode = await createOpencode({ port: 5044 })
+  const opencode = await createOpencode({ port: 0 })
   const notes: string[] = []
 
   try {
@@ -258,8 +260,9 @@ export async function buildNotes(from: string, to: string) {
       throw error
     }
   } finally {
-    opencode.server.close()
+    await opencode.server.close()
   }
+  console.log("changelog generation complete")
 
   const contributors = await getContributors(from, to)
 
diff --git a/script/version.ts b/script/version.ts
index 2c158d2222..1b7eac5d91 100755
--- a/script/version.ts
+++ b/script/version.ts
@@ -7,12 +7,14 @@ import { buildNotes, getLatestRelease } from "./changelog"
 const output = [`version=${Script.version}`]
 
 if (!Script.preview) {
-  await $`gh release create v${Script.version} -d --title "v${Script.version}" ${Script.preview ? "--prerelease" : ""}`
-  const release = await $`gh release view v${Script.version} --json id,tagName`.json()
-  const previous = await getLatestRelease(Script.version)
+  const previous = await getLatestRelease()
   const notes = await buildNotes(previous, "HEAD")
   const body = notes.join("\n") || "No notable changes"
-  await $`gh release edit v${Script.version} --title "v${Script.version}" --notes ${body}`
+  const dir = process.env.RUNNER_TEMP ?? "/tmp"
+  const file = `${dir}/opencode-release-notes.txt`
+  await Bun.write(file, body)
+  await $`gh release create v${Script.version} -d --title "v${Script.version}" --notes-file ${file}`
+  const release = await $`gh release view v${Script.version} --json id,tagName`.json()
   output.push(`release=${release.id}`)
   output.push(`tag=${release.tagName}`)
 }
@@ -20,3 +22,5 @@ if (!Script.preview) {
 if (process.env.GITHUB_OUTPUT) {
   await Bun.write(process.env.GITHUB_OUTPUT, output.join("\n"))
 }
+
+process.exit(0)

From 71e0ba271f1917f3128649f23210187265573f29 Mon Sep 17 00:00:00 2001
From: opencode <opencode@sst.dev>
Date: Fri, 30 Jan 2026 14:32:22 +0000
Subject: [PATCH 54/61] release: v1.1.45

---
 bun.lock                               | 36 ++++++++++++--------------
 packages/app/package.json              |  2 +-
 packages/console/app/package.json      |  2 +-
 packages/console/core/package.json     |  2 +-
 packages/console/function/package.json |  2 +-
 packages/console/mail/package.json     |  2 +-
 packages/desktop/package.json          |  2 +-
 packages/enterprise/package.json       |  2 +-
 packages/extensions/zed/extension.toml | 12 ++++-----
 packages/function/package.json         |  2 +-
 packages/opencode/package.json         |  2 +-
 packages/plugin/package.json           |  2 +-
 packages/sdk/js/package.json           |  2 +-
 packages/slack/package.json            |  2 +-
 packages/ui/package.json               |  2 +-
 packages/util/package.json             |  2 +-
 packages/web/package.json              |  2 +-
 sdks/vscode/package.json               |  2 +-
 18 files changed, 38 insertions(+), 42 deletions(-)

diff --git a/bun.lock b/bun.lock
index 99d35168f3..538712601d 100644
--- a/bun.lock
+++ b/bun.lock
@@ -18,14 +18,12 @@
         "prettier": "3.6.2",
         "semver": "^7.6.0",
         "sst": "3.17.23",
-        "stackback": "0.0.2",
         "turbo": "2.5.6",
-        "why-is-node-running": "2.2.2",
       },
     },
     "packages/app": {
       "name": "@opencode-ai/app",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@kobalte/core": "catalog:",
         "@opencode-ai/sdk": "workspace:*",
@@ -75,7 +73,7 @@
     },
     "packages/console/app": {
       "name": "@opencode-ai/console-app",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@cloudflare/vite-plugin": "1.15.2",
         "@ibm/plex": "6.4.1",
@@ -109,7 +107,7 @@
     },
     "packages/console/core": {
       "name": "@opencode-ai/console-core",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@aws-sdk/client-sts": "3.782.0",
         "@jsx-email/render": "1.1.1",
@@ -136,7 +134,7 @@
     },
     "packages/console/function": {
       "name": "@opencode-ai/console-function",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@ai-sdk/anthropic": "2.0.0",
         "@ai-sdk/openai": "2.0.2",
@@ -160,7 +158,7 @@
     },
     "packages/console/mail": {
       "name": "@opencode-ai/console-mail",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@jsx-email/all": "2.2.3",
         "@jsx-email/cli": "1.4.3",
@@ -184,7 +182,7 @@
     },
     "packages/desktop": {
       "name": "@opencode-ai/desktop",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@opencode-ai/app": "workspace:*",
         "@opencode-ai/ui": "workspace:*",
@@ -215,7 +213,7 @@
     },
     "packages/enterprise": {
       "name": "@opencode-ai/enterprise",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@opencode-ai/ui": "workspace:*",
         "@opencode-ai/util": "workspace:*",
@@ -244,7 +242,7 @@
     },
     "packages/function": {
       "name": "@opencode-ai/function",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@octokit/auth-app": "8.0.1",
         "@octokit/rest": "catalog:",
@@ -260,7 +258,7 @@
     },
     "packages/opencode": {
       "name": "opencode",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "bin": {
         "opencode": "./bin/opencode",
       },
@@ -364,7 +362,7 @@
     },
     "packages/plugin": {
       "name": "@opencode-ai/plugin",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@opencode-ai/sdk": "workspace:*",
         "zod": "catalog:",
@@ -384,7 +382,7 @@
     },
     "packages/sdk/js": {
       "name": "@opencode-ai/sdk",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "devDependencies": {
         "@hey-api/openapi-ts": "0.90.10",
         "@tsconfig/node22": "catalog:",
@@ -395,7 +393,7 @@
     },
     "packages/slack": {
       "name": "@opencode-ai/slack",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@opencode-ai/sdk": "workspace:*",
         "@slack/bolt": "^3.17.1",
@@ -408,7 +406,7 @@
     },
     "packages/ui": {
       "name": "@opencode-ai/ui",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@kobalte/core": "catalog:",
         "@opencode-ai/sdk": "workspace:*",
@@ -450,7 +448,7 @@
     },
     "packages/util": {
       "name": "@opencode-ai/util",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "zod": "catalog:",
       },
@@ -461,7 +459,7 @@
     },
     "packages/web": {
       "name": "@opencode-ai/web",
-      "version": "1.1.43",
+      "version": "1.1.45",
       "dependencies": {
         "@astrojs/cloudflare": "12.6.3",
         "@astrojs/markdown-remark": "6.3.1",
@@ -3901,7 +3899,7 @@
 
     "which-typed-array": ["which-typed-array@1.1.20", "", { "dependencies": { "available-typed-arrays": "^1.0.7", "call-bind": "^1.0.8", "call-bound": "^1.0.4", "for-each": "^0.3.5", "get-proto": "^1.0.1", "gopd": "^1.2.0", "has-tostringtag": "^1.0.2" } }, "sha512-LYfpUkmqwl0h9A2HL09Mms427Q1RZWuOHsukfVcKRq9q95iQxdw0ix1JQrqbcDR9PH1QDwf5Qo8OZb5lksZ8Xg=="],
 
-    "why-is-node-running": ["why-is-node-running@2.2.2", "", { "dependencies": { "siginfo": "^2.0.0", "stackback": "0.0.2" }, "bin": { "why-is-node-running": "cli.js" } }, "sha512-6tSwToZxTOcotxHeA+qGCq1mVzKR3CwcJGmVcY+QE8SHy6TnpFnh8PAvPNHYr7EcuVeG0QSMxtYCuO1ta/G/oA=="],
+    "why-is-node-running": ["why-is-node-running@3.2.2", "", { "bin": { "why-is-node-running": "cli.js" } }, "sha512-NKUzAelcoCXhXL4dJzKIwXeR8iEVqsA0Lq6Vnd0UXvgaKbzVo4ZTHROF2Jidrv+SgxOQ03fMinnNhzZATxOD3A=="],
 
     "widest-line": ["widest-line@5.0.0", "", { "dependencies": { "string-width": "^7.0.0" } }, "sha512-c9bZp7b5YtRj2wOe6dlj32MK+Bx/M/d+9VB2SHM1OtsUHR0aV0tdP6DWh/iMt0kWi1t5g1Iudu6hQRNd1A4PVA=="],
 
@@ -4389,8 +4387,6 @@
 
     "opencode/@ai-sdk/openai-compatible": ["@ai-sdk/openai-compatible@1.0.30", "", { "dependencies": { "@ai-sdk/provider": "2.0.1", "@ai-sdk/provider-utils": "3.0.20" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-thubwhRtv9uicAxSWwNpinM7hiL/0CkhL/ymPaHuKvI494J7HIzn8KQZQ2ymRz284WTIZnI7VMyyejxW4RMM6w=="],
 
-    "opencode/why-is-node-running": ["why-is-node-running@3.2.2", "", { "bin": { "why-is-node-running": "cli.js" } }, "sha512-NKUzAelcoCXhXL4dJzKIwXeR8iEVqsA0Lq6Vnd0UXvgaKbzVo4ZTHROF2Jidrv+SgxOQ03fMinnNhzZATxOD3A=="],
-
     "opencontrol/@modelcontextprotocol/sdk": ["@modelcontextprotocol/sdk@1.6.1", "", { "dependencies": { "content-type": "^1.0.5", "cors": "^2.8.5", "eventsource": "^3.0.2", "express": "^5.0.1", "express-rate-limit": "^7.5.0", "pkce-challenge": "^4.1.0", "raw-body": "^3.0.0", "zod": "^3.23.8", "zod-to-json-schema": "^3.24.1" } }, "sha512-oxzMzYCkZHMntzuyerehK3fV6A2Kwh5BD6CGEJSVDU2QNEhfLOptf2X7esQgaHZXHZY0oHmMsOtIDLP71UJXgA=="],
 
     "opencontrol/@tsconfig/bun": ["@tsconfig/bun@1.0.7", "", {}, "sha512-udGrGJBNQdXGVulehc1aWT73wkR9wdaGBtB6yL70RJsqwW/yJhIg6ZbRlPOfIUiFNrnBuYLBi9CSmMKfDC7dvA=="],
diff --git a/packages/app/package.json b/packages/app/package.json
index 87ca7931c5..8459172e7c 100644
--- a/packages/app/package.json
+++ b/packages/app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/app",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "description": "",
   "type": "module",
   "exports": {
diff --git a/packages/console/app/package.json b/packages/console/app/package.json
index b10593a8fa..84d45d3a7b 100644
--- a/packages/console/app/package.json
+++ b/packages/console/app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/console-app",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "type": "module",
   "license": "MIT",
   "scripts": {
diff --git a/packages/console/core/package.json b/packages/console/core/package.json
index 111390efbe..38811d4de2 100644
--- a/packages/console/core/package.json
+++ b/packages/console/core/package.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode-ai/console-core",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "private": true,
   "type": "module",
   "license": "MIT",
diff --git a/packages/console/function/package.json b/packages/console/function/package.json
index c26b4584de..50acf1567c 100644
--- a/packages/console/function/package.json
+++ b/packages/console/function/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/console-function",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "$schema": "https://json.schemastore.org/package.json",
   "private": true,
   "type": "module",
diff --git a/packages/console/mail/package.json b/packages/console/mail/package.json
index 564a7140cc..902dd447be 100644
--- a/packages/console/mail/package.json
+++ b/packages/console/mail/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/console-mail",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "dependencies": {
     "@jsx-email/all": "2.2.3",
     "@jsx-email/cli": "1.4.3",
diff --git a/packages/desktop/package.json b/packages/desktop/package.json
index c1f330ce93..1b01f8a6f2 100644
--- a/packages/desktop/package.json
+++ b/packages/desktop/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@opencode-ai/desktop",
   "private": true,
-  "version": "1.1.43",
+  "version": "1.1.45",
   "type": "module",
   "license": "MIT",
   "scripts": {
diff --git a/packages/enterprise/package.json b/packages/enterprise/package.json
index 03016c1c58..2091e68574 100644
--- a/packages/enterprise/package.json
+++ b/packages/enterprise/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/enterprise",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "private": true,
   "type": "module",
   "license": "MIT",
diff --git a/packages/extensions/zed/extension.toml b/packages/extensions/zed/extension.toml
index eaa882b65b..283036bf5b 100644
--- a/packages/extensions/zed/extension.toml
+++ b/packages/extensions/zed/extension.toml
@@ -1,7 +1,7 @@
 id = "opencode"
 name = "OpenCode"
 description = "The open source coding agent."
-version = "1.1.43"
+version = "1.1.45"
 schema_version = 1
 authors = ["Anomaly"]
 repository = "https://github.com/anomalyco/opencode"
@@ -11,26 +11,26 @@ name = "OpenCode"
 icon = "./icons/opencode.svg"
 
 [agent_servers.opencode.targets.darwin-aarch64]
-archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.43/opencode-darwin-arm64.zip"
+archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.45/opencode-darwin-arm64.zip"
 cmd = "./opencode"
 args = ["acp"]
 
 [agent_servers.opencode.targets.darwin-x86_64]
-archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.43/opencode-darwin-x64.zip"
+archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.45/opencode-darwin-x64.zip"
 cmd = "./opencode"
 args = ["acp"]
 
 [agent_servers.opencode.targets.linux-aarch64]
-archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.43/opencode-linux-arm64.tar.gz"
+archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.45/opencode-linux-arm64.tar.gz"
 cmd = "./opencode"
 args = ["acp"]
 
 [agent_servers.opencode.targets.linux-x86_64]
-archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.43/opencode-linux-x64.tar.gz"
+archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.45/opencode-linux-x64.tar.gz"
 cmd = "./opencode"
 args = ["acp"]
 
 [agent_servers.opencode.targets.windows-x86_64]
-archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.43/opencode-windows-x64.zip"
+archive = "https://github.com/anomalyco/opencode/releases/download/v1.1.45/opencode-windows-x64.zip"
 cmd = "./opencode.exe"
 args = ["acp"]
diff --git a/packages/function/package.json b/packages/function/package.json
index 4a9e82def5..9746d11dcc 100644
--- a/packages/function/package.json
+++ b/packages/function/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/function",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "$schema": "https://json.schemastore.org/package.json",
   "private": true,
   "type": "module",
diff --git a/packages/opencode/package.json b/packages/opencode/package.json
index bd77afa2e8..ab28687d35 100644
--- a/packages/opencode/package.json
+++ b/packages/opencode/package.json
@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "name": "opencode",
   "type": "module",
   "license": "MIT",
diff --git a/packages/plugin/package.json b/packages/plugin/package.json
index 19077d786d..9e9232a4da 100644
--- a/packages/plugin/package.json
+++ b/packages/plugin/package.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode-ai/plugin",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "type": "module",
   "license": "MIT",
   "scripts": {
diff --git a/packages/sdk/js/package.json b/packages/sdk/js/package.json
index e929d62894..6b550512de 100644
--- a/packages/sdk/js/package.json
+++ b/packages/sdk/js/package.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode-ai/sdk",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "type": "module",
   "license": "MIT",
   "scripts": {
diff --git a/packages/slack/package.json b/packages/slack/package.json
index decfd834a7..fbcccac399 100644
--- a/packages/slack/package.json
+++ b/packages/slack/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/slack",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "type": "module",
   "license": "MIT",
   "scripts": {
diff --git a/packages/ui/package.json b/packages/ui/package.json
index 2e7a2cfefd..5fde0960ac 100644
--- a/packages/ui/package.json
+++ b/packages/ui/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/ui",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "type": "module",
   "license": "MIT",
   "exports": {
diff --git a/packages/util/package.json b/packages/util/package.json
index f76106701b..9a3eb8f7d3 100644
--- a/packages/util/package.json
+++ b/packages/util/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencode-ai/util",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "private": true,
   "type": "module",
   "license": "MIT",
diff --git a/packages/web/package.json b/packages/web/package.json
index 0f601ba248..06ab5ef4e9 100644
--- a/packages/web/package.json
+++ b/packages/web/package.json
@@ -2,7 +2,7 @@
   "name": "@opencode-ai/web",
   "type": "module",
   "license": "MIT",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "scripts": {
     "dev": "astro dev",
     "dev:remote": "VITE_API_URL=https://api.opencode.ai astro dev",
diff --git a/sdks/vscode/package.json b/sdks/vscode/package.json
index 1ffe553c2c..7c160a454f 100644
--- a/sdks/vscode/package.json
+++ b/sdks/vscode/package.json
@@ -2,7 +2,7 @@
   "name": "opencode",
   "displayName": "opencode",
   "description": "opencode for VS Code",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "publisher": "sst-dev",
   "repository": {
     "type": "git",

From 11d486707cf5e0ff5c35cf4dff531c4f020b70d0 Mon Sep 17 00:00:00 2001
From: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
Date: Fri, 30 Jan 2026 00:56:47 -0600
Subject: [PATCH 55/61] fix: rm ai sdk middleware that was preventing <think>
 blocks from being sent back as assistant message content (#11270)

Co-authored-by: opencode-agent[bot] <opencode-agent[bot]@users.noreply.github.com>
---
 packages/opencode/src/session/llm.ts | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/packages/opencode/src/session/llm.ts b/packages/opencode/src/session/llm.ts
index 4c4f4114a2..0c76521045 100644
--- a/packages/opencode/src/session/llm.ts
+++ b/packages/opencode/src/session/llm.ts
@@ -1,4 +1,3 @@
-import os from "os"
 import { Installation } from "@/installation"
 import { Provider } from "@/provider/provider"
 import { Log } from "@/util/log"
@@ -9,7 +8,6 @@ import {
   type StreamTextResult,
   type Tool,
   type ToolSet,
-  extractReasoningMiddleware,
   tool,
   jsonSchema,
 } from "ai"
@@ -261,7 +259,6 @@ export namespace LLM {
               return args.params
             },
           },
-          extractReasoningMiddleware({ tagName: "think", startWithReasoning: false }),
         ],
       }),
       experimental_telemetry: {

From 08fa7f71884702df9ee2e69a840a1eaeb5685df7 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 09:32:39 -0500
Subject: [PATCH 56/61] ci

---
 script/publish.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/script/publish.ts b/script/publish.ts
index 84abe6a66a..1294f8d793 100755
--- a/script/publish.ts
+++ b/script/publish.ts
@@ -63,6 +63,7 @@ if (Script.release) {
   await $`git cherry-pick HEAD..origin/dev`.nothrow()
   await $`git push origin HEAD --tags --no-verify --force-with-lease`
   await new Promise((resolve) => setTimeout(resolve, 5_000))
+  await $`gh release edit v${Script.version} --draft=false`
 }
 
 console.log("\n=== cli ===\n")

From 9493316502729292be463d55553c01c30edd5595 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 09:56:06 -0500
Subject: [PATCH 57/61] ci

---
 .github/workflows/test-homebrew-clone.yml | 39 +++++++++++++++++++++++
 packages/opencode/script/publish.ts       | 12 ++++++-
 2 files changed, 50 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/test-homebrew-clone.yml

diff --git a/.github/workflows/test-homebrew-clone.yml b/.github/workflows/test-homebrew-clone.yml
new file mode 100644
index 0000000000..309e320636
--- /dev/null
+++ b/.github/workflows/test-homebrew-clone.yml
@@ -0,0 +1,39 @@
+name: test-homebrew-clone
+
+on:
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+
+jobs:
+  clone:
+    runs-on: blacksmith-4vcpu-ubuntu-2404
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Setup git committer
+        id: committer
+        uses: ./.github/actions/setup-git-committer
+        with:
+          opencode-app-id: ${{ vars.OPENCODE_APP_ID }}
+          opencode-app-secret: ${{ secrets.OPENCODE_APP_SECRET }}
+
+      - name: Verify token present
+        run: |
+          if [ -z "${GITHUB_TOKEN}" ]; then
+            echo "GITHUB_TOKEN is missing"
+            exit 1
+          fi
+          echo "GITHUB_TOKEN is present"
+        env:
+          GITHUB_TOKEN: ${{ steps.committer.outputs.token }}
+
+      - name: Clone homebrew tap
+        run: |
+          tap="https://x-access-token:${GITHUB_TOKEN}@github.com/anomalyco/homebrew-tap.git"
+          git clone "${tap}" ./dist/homebrew-tap
+          cd ./dist/homebrew-tap
+          git status -sb
+        env:
+          GITHUB_TOKEN: ${{ steps.committer.outputs.token }}
diff --git a/packages/opencode/script/publish.ts b/packages/opencode/script/publish.ts
index 8cdeb35b40..9e3eadf87c 100755
--- a/packages/opencode/script/publish.ts
+++ b/packages/opencode/script/publish.ts
@@ -37,6 +37,7 @@ await Bun.file(`./dist/${pkg.name}/package.json`).write(
   ),
 )
 
+/*
 const tasks = Object.entries(binaries).map(async ([name]) => {
   if (process.platform !== "win32") {
     await $`chmod -R 755 .`.cwd(`./dist/${name}`)
@@ -52,6 +53,7 @@ const platforms = "linux/amd64,linux/arm64"
 const tags = [`${image}:${version}`, `${image}:${Script.channel}`]
 const tagFlags = tags.flatMap((t) => ["-t", t])
 await $`docker buildx build --platform ${platforms} ${tagFlags} --push .`
+*/
 
 // registries
 if (!Script.preview) {
@@ -63,6 +65,7 @@ if (!Script.preview) {
 
   const [pkgver, _subver = ""] = Script.version.split(/(-.*)/, 2)
 
+  /*
   // arch
   const binaryPkgbuild = [
     "# Maintainer: dax",
@@ -176,6 +179,7 @@ if (!Script.preview) {
       }
     }
   }
+  */
 
   // Homebrew formula
   const homebrewFormula = [
@@ -230,8 +234,14 @@ if (!Script.preview) {
     "",
   ].join("\n")
 
+  const token = process.env.GITHUB_TOKEN
+  if (!token) {
+    console.error("GITHUB_TOKEN is required to update homebrew tap")
+    process.exit(1)
+  }
+  const tap = `https://x-access-token:${token}@github.com/anomalyco/homebrew-tap.git`
   await $`rm -rf ./dist/homebrew-tap`
-  await $`git clone https://${process.env["GITHUB_TOKEN"]}@github.com/sst/homebrew-tap.git ./dist/homebrew-tap`
+  await $`git clone ${tap} ./dist/homebrew-tap`
   await Bun.file("./dist/homebrew-tap/opencode.rb").write(homebrewFormula)
   await $`cd ./dist/homebrew-tap && git add opencode.rb`
   await $`cd ./dist/homebrew-tap && git commit -m "Update to v${Script.version}"`

From 698cf6dfc1614c4519a0ab193f6817d1ab568e6f Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 09:56:21 -0500
Subject: [PATCH 58/61] ci


From 97a428cf69ebc4a00201475f9437f97079779f64 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 09:57:17 -0500
Subject: [PATCH 59/61] ci

---
 .github/workflows/test-homebrew-clone.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/test-homebrew-clone.yml b/.github/workflows/test-homebrew-clone.yml
index 309e320636..8fd7fd7ec8 100644
--- a/.github/workflows/test-homebrew-clone.yml
+++ b/.github/workflows/test-homebrew-clone.yml
@@ -1,6 +1,9 @@
 name: test-homebrew-clone
 
 on:
+  push:
+    branches:
+      - dev
   workflow_dispatch: {}
 
 permissions:

From 601744eacd649adc969bb4f978e081ede399ec70 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 09:58:54 -0500
Subject: [PATCH 60/61] sync

---
 .github/workflows/test-homebrew-clone.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/test-homebrew-clone.yml b/.github/workflows/test-homebrew-clone.yml
index 8fd7fd7ec8..bf61cbc5f5 100644
--- a/.github/workflows/test-homebrew-clone.yml
+++ b/.github/workflows/test-homebrew-clone.yml
@@ -34,6 +34,12 @@ jobs:
 
       - name: Clone homebrew tap
         run: |
+          echo "Testing old URL pattern"
+          old="https://${GITHUB_TOKEN}@github.com/sst/homebrew-tap.git"
+          git clone "${old}" ./dist/homebrew-tap-old
+          rm -rf ./dist/homebrew-tap-old
+
+          echo "Testing new URL pattern"
           tap="https://x-access-token:${GITHUB_TOKEN}@github.com/anomalyco/homebrew-tap.git"
           git clone "${tap}" ./dist/homebrew-tap
           cd ./dist/homebrew-tap

From a530c1b5b6d56f2dba9edaf8458e8029d5e57f2f Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Fri, 30 Jan 2026 10:02:05 -0500
Subject: [PATCH 61/61] ci

---
 .github/workflows/test-homebrew-clone.yml | 48 -----------------------
 1 file changed, 48 deletions(-)
 delete mode 100644 .github/workflows/test-homebrew-clone.yml

diff --git a/.github/workflows/test-homebrew-clone.yml b/.github/workflows/test-homebrew-clone.yml
deleted file mode 100644
index bf61cbc5f5..0000000000
--- a/.github/workflows/test-homebrew-clone.yml
+++ /dev/null
@@ -1,48 +0,0 @@
-name: test-homebrew-clone
-
-on:
-  push:
-    branches:
-      - dev
-  workflow_dispatch: {}
-
-permissions:
-  contents: read
-
-jobs:
-  clone:
-    runs-on: blacksmith-4vcpu-ubuntu-2404
-    steps:
-      - uses: actions/checkout@v3
-
-      - name: Setup git committer
-        id: committer
-        uses: ./.github/actions/setup-git-committer
-        with:
-          opencode-app-id: ${{ vars.OPENCODE_APP_ID }}
-          opencode-app-secret: ${{ secrets.OPENCODE_APP_SECRET }}
-
-      - name: Verify token present
-        run: |
-          if [ -z "${GITHUB_TOKEN}" ]; then
-            echo "GITHUB_TOKEN is missing"
-            exit 1
-          fi
-          echo "GITHUB_TOKEN is present"
-        env:
-          GITHUB_TOKEN: ${{ steps.committer.outputs.token }}
-
-      - name: Clone homebrew tap
-        run: |
-          echo "Testing old URL pattern"
-          old="https://${GITHUB_TOKEN}@github.com/sst/homebrew-tap.git"
-          git clone "${old}" ./dist/homebrew-tap-old
-          rm -rf ./dist/homebrew-tap-old
-
-          echo "Testing new URL pattern"
-          tap="https://x-access-token:${GITHUB_TOKEN}@github.com/anomalyco/homebrew-tap.git"
-          git clone "${tap}" ./dist/homebrew-tap
-          cd ./dist/homebrew-tap
-          git status -sb
-        env:
-          GITHUB_TOKEN: ${{ steps.committer.outputs.token }}