fix: sync upstream guardrail runtime and tests by terisuke · Pull Request #170 · Cor-Incorporated/opencode

terisuke · 2026-04-19T08:41:38Z

Summary

sync the fork onto latest upstream dev in a clean branch
restore guardrail runtime pieces needed for planner/team/background flows
wire tool.execute.error through processor and prompt paths so failed tool runs release gates and emit hooks
add regression coverage for planner/implement minimal-deny behavior, background gate clearing, and inline tool error hooks

Validation

PATH="/tmp/opencode-upstream-guardrail/node_modules/.bin:$PATH" bun run typecheck
PATH="$(pwd)/../../node_modules/.bin:$PATH" bun test test/agent/agent.test.ts
PATH="$(pwd)/../../node_modules/.bin:$PATH" bun test test/plugin/team.test.ts
PATH="$(pwd)/../../node_modules/.bin:$PATH" bun test test/plugin/trigger.test.ts
PATH="$(pwd)/../../node_modules/.bin:$PATH" bun test test/session/prompt-effect.test.ts
PATH="$(pwd)/../../node_modules/.bin:$PATH" bun test test/session/processor-effect.test.ts (outside sandbox)
PATH="$(pwd)/../../node_modules/.bin:$PATH" bun test test/session/snapshot-tool-race.test.ts (outside sandbox)
pre-push hook bun turbo typecheck passed on both git push -u origin temp-upstream-dev and git push -u origin codex/upstream-guardrail-pr

Notes

bun run build currently generates all targets but the local darwin smoke step still exits during dist/opencode-darwin-arm64/bin/opencode --version; source-mode CLI and all targeted regressions above pass.

…as merged (anomalyco#22880)

)

…are AI Gateway (anomalyco#22864) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>

…alyco#22882)

…anomalyco#22887)

… install for improved error reporting Config is now loaded eagerly during project bootstrap so users can see config loading in traces during startup. This helps diagnose configuration issues earlier in the initialization flow. NPM installation logic has been refactored with a unified reify function and improved InstallFailedError that includes both the packages being installed and the target directory. This provides users with complete context when package installations fail, making it easier to identify which dependency or project directory caused the issue.

)

…ls (anomalyco#22824) Co-authored-by: opencode-agent[bot] <opencode-agent[bot]@users.noreply.github.com> Co-authored-by: rekram1-node <rekram1-node@users.noreply.github.com>

…rt (anomalyco#22876)

Fixes an issue where GitHub artifact downloads could strip executable bits from binaries, causing Docker builds to fail when using unpacked dist files directly rather than published tarballs. The chmod now runs before the publish check to guarantee binaries are executable.

…alyco#23373)

Co-authored-by: LukeParkerDev <10430890+Hona@users.noreply.github.com>

github-actions · 2026-04-19T08:41:47Z

Thanks for your contribution!

This PR doesn't have a linked issue. All PRs must reference an existing issue.

Please:

Open an issue describing the bug/feature (if one doesn't exist)
Add Fixes #<number> or Closes #<number> to this PR description

See CONTRIBUTING.md for details.

github-actions · 2026-04-19T08:41:47Z

New PR opened -- automated review will run on the next push.

To trigger a manual review, comment /review on this PR.

Copilot

Copilot wasn't able to review this pull request because it exceeds the maximum number of files (300). Try reducing the number of changed files and requesting a review from Copilot again.

github-actions · 2026-04-19T08:41:49Z

This PR doesn't fully meet our contributing guidelines and PR template.

What needs to be fixed:

PR description is missing required template sections. Please use the PR template.

Please edit this PR description to address the above within 2 hours, or it will be automatically closed.

If you believe this was flagged incorrectly, please let a maintainer know.

github-actions · 2026-04-19T08:41:56Z

Workflow files modified -- verify upstream compatibility

The following workflow files were changed in this PR:

.github/workflows/publish.yml
.github/workflows/test.yml

Before merging, please verify:

Changes do not break upstream sync (upstream-sync.yml restores our workflows on merge)
New workflows use pull_request_target (not pull_request) for fork compatibility
Runner is set to ubuntu-latest (not blacksmith or other custom runners)
No secrets are exposed in workflow logs

github-actions · 2026-04-19T08:42:27Z

The following comment was made by an LLM, it may be inaccurate:

rekram1-nodeand others added 30 commits April 16, 2026 14:38

fix: ensure that double pasting doesnt happen after tui perf commit w…
6c3b28d
…as merged (anomalyco#22880)

refactor: move Pty into pty/index.ts with self-reexport (anomalyco#22881
76275fc
)

fix(opencode): drop max_tokens for OpenAI reasoning models on Cloudfl…
5e650fd
…are AI Gateway (anomalyco#22864) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>

fix: remove 10 more unnecessaryas anycasts in opencode core (anom…
1c33b86
…alyco#22882)

tooling: add collapse-barrel.ts for single-namespace barrel migration (…
e0d71f1
…anomalyco#22887)

fix(core): fix detection of local installation channel (anomalyco#22899)
26af77c

refactor: collapse format barrel into format/index.ts (anomalyco#22898)
1045a43

refactor: collapse env barrel into env/index.ts (anomalyco#22900)
9b77430

feat(core): pass auth data to workspace (anomalyco#22897)
a8d8a35

refactor: collapse command barrel into command/index.ts (anomalyco#22903
3fe906f
)

chore: generate
021ab50

refactor: collapse global barrel into global/index.ts (anomalyco#22905)
23f97ac

refactor: collapse sync barrel into sync/index.ts (anomalyco#22907)
cb6a925

refactor: collapse ide barrel into ide/index.ts (anomalyco#22904)
8c191b1

refactor: collapse worktree barrel into worktree/index.ts (anomalyco#…
bd51a0d
…22906)

refactor: collapse installation barrel into installation/index.ts (an…
ae9a696
…omalyco#22910)

refactor: collapse skill barrel into skill/index.ts (anomalyco#22912)
99d392a

refactor: collapse npm barrel into npm/index.ts (anomalyco#22911)
ab15fc1

refactor: collapse permission barrel into permission/index.ts (anomal…
964474a
…yco#22915)

refactor: collapse git barrel into git/index.ts (anomalyco#22909)
664b2c3

refactor: collapse mcp barrel into mcp/index.ts (anomalyco#22913)
5fccdc9

refactor: collapse snapshot barrel into snapshot/index.ts (anomalyco#…
49bbea5
…22916)

refactor: collapse plugin barrel into plugin/index.ts (anomalyco#22914)
2638e2a

fix(opencode): use low reasoning effort for GitHub Copilot gpt-5 mode…
610c036
…ls (anomalyco#22824) Co-authored-by: opencode-agent[bot] <opencode-agent[bot]@users.noreply.github.com> Co-authored-by: rekram1-node <rekram1-node@users.noreply.github.com>

refactor: collapse bus barrel into bus/index.ts (anomalyco#22902)
cdfbb26

refactor: collapse file barrel into file/index.ts (anomalyco#22901)
1694c5b

fix: uncomment import (anomalyco#22923)
ae58433

fix(tui): minor logging cleanup (anomalyco#22924)
86c54c5

refactor: unwrap ConfigPlugin namespace to flat exports + self-reexpo…
32548bc
…rt (anomalyco#22876)

thdxrand others added 18 commits April 18, 2026 18:59

ci
cfbbae7

ci
ad05453

fix plugins reinstalling too often
f27eb8f

chore: bump electron and fix taskbar icon (anomalyco#23368)
e543acf

sync release versions for v1.14.17
40ba8f3

fix incorrect config directory by lazily loading electron-store (anom…
b34ca44
…alyco#23373)

chore: update nix node_modules hashes
9ed9371

docs: document --dangerously-skip-permissions CLI flag (anomalyco#23371)
f14ac47

chore: generate
75960e3

fix (anomalyco#23385)
fc05889

core: allow users with credits but no payment method to access zen mode
40834fd

chore: generate
f02504b

chore: generate
135c8f0

fix: change Free download button text to Download (anomalyco#23388)
e60a6e3

chore: update nix node_modules hashes
7f3b64c

fix(ripgrep): restore native rg backend (anomalyco#22773)
889087c
Co-authored-by: LukeParkerDev <10430890+Hona@users.noreply.github.com>

fix: restore guardrail tool error handling on upstream
c8780d4

CopilotAI review requested due to automatic review settings April 19, 2026 08:41

github-actionsBot added the needs:issue label Apr 19, 2026

CopilotAI reviewed Apr 19, 2026

github-actionsBot added the needs:compliance label Apr 19, 2026

terisuke merged commit a09bbbc into temp-upstream-devApr 19, 2026
19 of 26 checks passed

terisuke mentioned this pull request Apr 19, 2026
fix: sync upstream guardrail runtime and tests #169
Closed

terisuke deleted the codex/upstream-guardrail-pr branch April 25, 2026 16:37

Navigation Menu

Uh oh!

fix: sync upstream guardrail runtime and tests - #170

fix: sync upstream guardrail runtime and tests#170
terisuke merged 638 commits into
temp-upstream-devfrom
codex/upstream-guardrail-pr

terisuke commented Apr 19, 2026

Uh oh!

github-actionsBot commented Apr 19, 2026

Uh oh!

github-actionsBot commented Apr 19, 2026

Uh oh!

CopilotAI left a comment

Uh oh!

github-actionsBot commented Apr 19, 2026

Uh oh!

github-actionsBot commented Apr 19, 2026

Uh oh!

Uh oh!

github-actionsBot commented Apr 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Uh oh!

Conversation

terisuke commented Apr 19, 2026

Summary

Validation

Notes

Uh oh!

github-actionsBot commented Apr 19, 2026

Uh oh!

github-actionsBot commented Apr 19, 2026

Uh oh!

CopilotAI left a comment

Choose a reason for hiding this comment

Uh oh!

github-actionsBot commented Apr 19, 2026

Uh oh!

github-actionsBot commented Apr 19, 2026

Uh oh!

Uh oh!

github-actionsBot commented Apr 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants