chore: promote dev to main (upstream sync, v1.0.36)

.github/releases/v1.0.36.md

@@ -0,0 +1,57 @@
+## opencode {VERSION}
+
+{Prerelease/Stable} release from `{branch}` branch. Phased upstream sync: 53 curated commits absorbed from sst/opencode: session retry hardening, 17 provider-correctness fixes, an LLM reducer/schema feature set, MCP timeout configuration, and core stability fixes: with zero overlap into the fork-owned DAG / SpecGit / release-pipeline surfaces.
+
+---
+
+### 🎯 Features
+
+- **MCP timeout configuration split, #33977**: startup and request phases now take independent timeout settings instead of one shared knob, so slow server initialization no longer starves per-call budgets.
+- **LLM response reducer feature set, #34417/#34418/#34423/#34440/#34454**: response and event reducers with locked reducer laws, enforced request precedence, and tool schema projections in `packages/llm`.
+- **Model defaults and compatibility data, #34436**: `packages/llm` models now carry `defaults` and `compatibility` metadata, the foundation the protocol fixes below build on.
+- **Strict tool definitions passthrough, #33392**: tool definitions carry a `strict` flag for OpenAI Codex parity, defaulting to `false` so wire behavior is unchanged.
+- **TUI subagent menu exits on up arrow, #36951**: pressing Up at the top of the subagent menu now closes it instead of doing nothing.
+- **models.dev modes surface as standalone models, #34521**: modes are no longer collapsed into variants, making mode-specific model selection visible downstream.
+
+---
+
+### 🐛 Bug Fixes
+
+- **Session retry hardening, #40694/#40707/#41939/#43640/#43806/#43813**: retry error matching simplified then expanded (xAI capacity, network error variants, raw `network_error` finish reasons), with exponential backoff capped by jitter so a flapping provider can no longer produce unbounded retry storms.
+- **Parent session header missing, #44752**: proxied requests now send the parent session header.
+- **Session import errors were opaque, #36258**: import failures now surface the underlying cause.
+- **Unknown config fields broke parsing, #41312**: unknown top-level config keys are ignored instead of failing the parse, keeping older and forward configs loadable.
+- **Provider correctness sweep, #34673/#34702/#35478/#36017/#36614/#36629/#36976/#37982/#38330/#38924/#41620/#43310/#43915/#45769**: sonnet 5 adaptive thinking, forced OpenAI reasoning variants, OpenRouter small-model effort preserved, Grok reasoning variants exposed, gateway variants routed by API id, xAI Responses `store` defaulted off, Meta reasoning defaulted to xhigh, Mistral tool-call IDs normalized, MiniMax M3 thinking variants corrected, deprecated Gemini sampling defaults omitted, DeepSeek V4 Flash sampling scoped, Qwen sampling defaults removed, `textVerbosity` injection guarded on openai-compatible providers, and unreplayable Bedrock reasoning filtered before prompt caching.
+- **Prompt cache keys selected by SDK, #38424**: cache-key assignment keys off the npm SDK rather than provider id, fixing cross-provider cache misses.
+- **Azure gpt-5.5+ reasoningEffort failure, #40265**: gpt-5.5-class models on Azure no longer fail with invalid reasoning effort.
+- **Copilot PDF input detection, #41522**: models advertising PDF media support are detected from capabilities instead of a hardcoded list.
+- **`/connect` hid authenticated providers, #39915**: already-authed providers now show correctly in the connect list.
+- **Core stability, #34059/e39d726e/#35737/#35957/#36453/#36542/#39175/#42356/#43099**: remote skills refresh from cache, external read path authorization, home-relative permission paths matched on POSIX and Windows, the file watcher only watches git projects, unused FFF content caches disabled, `FSUtil.ensureDir` tolerates `AlreadyExists`, the built-in skill's MCP environment field corrected, grep previews preserve unicode, and oversized WebSocket requests fall back instead of dying.
+- **Server safety and observability, #40135/#40136**: proxied workspace requests log upstream 5xx bodies for debugging, and the host directory is no longer forwarded to remote workspaces.
+- **ACP permission prompts enriched, #34079**: permission prompts carry the context needed to make a decision.
+- **TUI clipboard over ssh, #30472**: copying works under tmux `set-clipboard on` remote sessions.
+- **LLM reasoning closed before responses, 327e432d**: reasoning is finalized before the response phase to avoid interleaved-state corruption.
+
+---
+
+### 🧪 Test Summary
+
+- `bun typecheck` green across opencode/core/llm; `test:dag-core` behavior and coverage gate green (767 assertions).
+- `packages/llm` suite 309 pass / 0 fail; targeted provider, config, and processor suites (505 tests) 0 fail.
+
+```
+typecheck: opencode PASS  core PASS  llm PASS
+test:dag-core: 767 assertions, 0 fail
+packages/llm: 309 pass / 0 fail, targeted suites: 505 pass / 0 fail
+```
+
+---
+
+### 🔍 Verification
+
+- Fork-owned surfaces (DAG runtime, SpecGit harness, release pipeline, TUI feature plugins) verified untouched: zero diff overlap, with `compaction.ts`, `azure.ts`, and `layer-node.ts` byte-identical to the pre-sync base.
+- Two-axis code review (Standards/Spec) passed: no conflict-marker residue, no duplicate test blocks, all skipped upstream commits confirmed absent from the tree.
+
+---
+
+**Full changelog:** [`{previous_tag}`...`{current_tag}`](https://github.com/LeXwDeX/OpenCode-GraphAgent/compare/{previous_tag}...{current_tag})

.specgit.yaml

@@ -1,11 +1,11 @@
 version: 1
-delivery: release-notes-v1-0-35
+delivery: tui-crashes-on
 context:
   kind: branch
-  branch: docs/460-release-notes-v1-0-35
+  branch: fix/465-tui-crashes-on
 issues:
-  - 460
+  - 465
 issueKinds:
-  - issue: 460
-    kind: kind::docs
-pr: 461
+  - issue: 465
+    kind: kind::fix
+pr: 466

packages/core/src/config/mcp.ts

@@ -3,6 +3,15 @@ export * as ConfigMCP from "./mcp"
 import { Schema } from "effect"
 import { PositiveInt } from "../schema"
 
+export class Timeout extends Schema.Class<Timeout>("ConfigV2.MCP.Timeout")({
+  startup: PositiveInt.pipe(Schema.optional).annotate({
+    description: "Maximum time in milliseconds to establish and initialize the MCP server.",
+  }),
+  request: PositiveInt.pipe(Schema.optional).annotate({
+    description: "Maximum time in milliseconds to wait for each MCP request after initialization.",
+  }),
+}) {}
+
 export class Local extends Schema.Class<Local>("ConfigV2.MCP.Local")({
   type: Schema.Literal("local"),
   command: Schema.String.pipe(Schema.Array),
@@ -11,7 +20,7 @@ export class Local extends Schema.Class<Local>("ConfigV2.MCP.Local")({
   }),
   environment: Schema.Record(Schema.String, Schema.String).pipe(Schema.optional),
   disabled: Schema.Boolean.pipe(Schema.optional),
-  timeout: PositiveInt.pipe(Schema.optional),
+  timeout: Timeout.pipe(Schema.optional),
 }) {}
 
 export class OAuth extends Schema.Class<OAuth>("ConfigV2.MCP.OAuth")({
@@ -28,12 +37,12 @@ export class Remote extends Schema.Class<Remote>("ConfigV2.MCP.Remote")({
   headers: Schema.Record(Schema.String, Schema.String).pipe(Schema.optional),
   oauth: Schema.Union([OAuth, Schema.Literal(false)]).pipe(Schema.optional),
   disabled: Schema.Boolean.pipe(Schema.optional),
-  timeout: PositiveInt.pipe(Schema.optional),
+  timeout: Timeout.pipe(Schema.optional),
 }) {}
 
 export const Server = Schema.Union([Local, Remote]).pipe(Schema.toTaggedUnion("type"))
 
 export class Info extends Schema.Class<Info>("ConfigV2.MCP")({
-  timeout: PositiveInt.pipe(Schema.optional),
+  timeout: Timeout.pipe(Schema.optional),
   servers: Schema.Record(Schema.String, Server).pipe(Schema.optional),
 }) {}

packages/core/src/config/plugin/agent.ts

@@ -11,6 +11,11 @@ import { FSUtil } from "../../fs-util"
 import { ModelV2 } from "../../model"
 import { ConfigAgentV1 } from "../../v1/config/agent"
 import { ConfigMigrateV1 } from "../../v1/config/migrate"
+import { Global } from "../../global"
+import { PermissionV2 } from "../../permission"
+import type { LocationMutation } from "../../location-mutation"
+import type { ReadTool } from "../../tool/read"
+import type { EditTool } from "../../tool/edit"
 
 const legacySources = [
   { pattern: "{agent,agents}/**/*.md", primary: false },
@@ -19,6 +24,11 @@ const legacySources = [
 const decodeAgent = Schema.decodeUnknownOption(ConfigAgent.Info)
 const decodeLegacyAgent = Schema.decodeUnknownOption(ConfigAgentV1.Info)
 const decodeConfig = Schema.decodeUnknownOption(Config.Info)
+type PathAction =
+  | LocationMutation.ExternalDirectoryAuthorization["action"]
+  | typeof ReadTool.name
+  | typeof EditTool.name
+const pathActions = ["external_directory", "read", "edit"] as const satisfies readonly PathAction[]
 const agentKeys = new Set([
   "model",
   "variant",
@@ -38,6 +48,7 @@ export const Plugin = define({
   effect: Effect.fn(function* (ctx) {
     const config = yield* Config.Service
     const fs = yield* FSUtil.Service
+    const global = yield* Global.Service
     yield* ctx.agent.transform(
       Effect.fn(function* (draft) {
         const documents = yield* Effect.forEach(yield* config.entries(), (entry) => {
@@ -56,11 +67,14 @@ export const Plugin = define({
             )
           })
         }).pipe(Effect.map((documents) => documents.flat()))
-        const global = documents.flatMap((document) => document.info.permissions ?? [])
+        const permissions = expandPermissions(
+          documents.flatMap((document) => document.info.permissions ?? []),
+          global.home,
+        )
         const configuredDefault = Config.latest(documents, "default_agent")
         if (configuredDefault !== undefined) draft.default(AgentV2.ID.make(configuredDefault))
         for (const current of draft.list()) {
-          draft.update(current.id, (agent) => agent.permissions.push(...global))
+          draft.update(current.id, (agent) => agent.permissions.push(...permissions))
         }
 
         for (const document of documents) {
@@ -73,7 +87,7 @@ export const Plugin = define({
 
             const exists = draft.get(agentID) !== undefined
             draft.update(agentID, (agent) => {
-              if (!exists) agent.permissions.push(...global)
+              if (!exists) agent.permissions.push(...permissions)
               if (item.model !== undefined) {
                 const model = ModelV2.parse(item.model)
                 agent.model = { id: model.modelID, providerID: model.providerID, variant: agent.model?.variant }
@@ -91,7 +105,9 @@ export const Plugin = define({
               if (item.hidden !== undefined) agent.hidden = item.hidden
               if (item.color !== undefined) agent.color = item.color
               if (item.steps !== undefined) agent.steps = item.steps
-              if (item.permissions !== undefined) agent.permissions.push(...item.permissions)
+              if (item.permissions !== undefined) {
+                agent.permissions.push(...expandPermissions(item.permissions, global.home))
+              }
             })
           }
         }
@@ -100,6 +116,25 @@ export const Plugin = define({
   }),
 })
 
+function expandPermissions(rules: PermissionV2.Ruleset, home: string): PermissionV2.Ruleset {
+  // Expand only resources tools resolve as filesystem paths. Bash resources are raw shell text:
+  // rewriting `$HOME/private/**` would miss `$HOME/private/key`, and safe expansion needs shell-aware parsing.
+  return rules.map((rule) => (isPathAction(rule.action) ? { ...rule, resource: expandHome(rule.resource, home) } : rule))
+}
+
+function isPathAction(action: string): action is PathAction {
+  return pathActions.some((item) => item === action)
+}
+
+function expandHome(resource: string, home: string) {
+  if (resource.startsWith("~/")) return home + resource.slice(1)
+  if (resource === "~") return home
+  if (resource === "$HOME") return home
+  if (resource.startsWith("$HOME/")) return home + resource.slice(5)
+  if (resource.startsWith("$HOME\\")) return home + resource.slice(5)
+  return resource
+}
+
 function discover(fs: FSUtil.Interface, directory: string) {
   return Effect.forEach(legacySources, (source) =>
     fs

packages/core/src/filesystem/search.ts

@@ -127,6 +127,8 @@ export const fffLayer = Layer.effect(
         Fff.create({
           basePath: location.directory,
           aiMode: true,
+          disableMmapCache: true,
+          disableContentIndexing: true,
         }),
       catch: (cause) => cause,
     }).pipe(

packages/core/src/filesystem/watcher.ts

@@ -105,7 +105,7 @@ export const layer = Layer.effect(
     const config = (yield* (yield* Config.Service).entries())
       .filter((entry): entry is Config.Document => entry.type === "document")
       .flatMap((item) => item.info.watcher?.ignore ?? [])
-    if (yield* Flag.OPENCODE_EXPERIMENTAL_FILEWATCHER) {
+    if (location.vcs && (yield* Flag.OPENCODE_EXPERIMENTAL_FILEWATCHER)) {
       yield* Effect.forkScoped(
         subscribe(location.directory, [...Ignore.PATTERNS, ...config, ...protecteds(location.directory)]),
       )

packages/core/src/fs-util.ts

@@ -104,7 +104,14 @@ export namespace FSUtil {
       })
 
       const ensureDir = Effect.fn("FileSystem.ensureDir")(function* (path: string) {
-        yield* fs.makeDirectory(path, { recursive: true })
+        yield* fs.makeDirectory(path, { recursive: true }).pipe(
+          // Bun on Windows can throw EEXIST here despite recursive mode.
+          // https://github.com/oven-sh/bun/issues/21901
+          Effect.catchIf(
+            (error) => error.reason._tag === "AlreadyExists",
+            (error) => isDir(path).pipe(Effect.flatMap((exists) => (exists ? Effect.void : Effect.fail(error)))),
+          ),
+        )
       })
 
       const writeWithDirs = Effect.fn("FileSystem.writeWithDirs")(function* (