chore: sync upstream v1.3.16 by terisuke · Pull Request #94 · Cor-Incorporated/opencode

terisuke · 2026-04-06T06:15:33Z

Summary

Sync 10 upstream commits including v1.3.16 release
Cloudflare provider env vars error fix (fix: show clear error when Cloudflare provider env vars are missing anomalyco/opencode#20399)
Azure providerOptions fix (fix: pass both 'openai' and 'azure' providerOptions keys for @ai-sdk/azure anomalyco/opencode#20272)
ACP configOptions fix (fix(core): implement proper configOptions for acp anomalyco/opencode#21134)
TUI mouse disable feature (feat(tui): make the mouse disablable (#6824, #7926) anomalyco/opencode#13748)
Plugin package specifier parsing + win32 cache paths (fix(plugin): parse package specifiers with npm-package-arg and sanitize win32 cache paths anomalyco/opencode#21135)
Windows Ctrl+Z undo (fix(tui): default Ctrl+Z to undo on Windows anomalyco/opencode#21138)
IPv6 normalization, header check removal

Closes#95

Notes

Fork workflows preserved (not overwritten by upstream)
packages/guardrails/ untouched by upstream merge

Test plan

bun run typecheck passes
Guardrails profile loads correctly
TUI launches without errors

🤖 Generated with Claude Code

…ze win32 cache paths (anomalyco#21135)

…anomalyco#13748)

…azure (anomalyco#20272) Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>

…nomalyco#20399) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com> Co-authored-by: Aiden Cline <aidenpcline@gmail.com>

Merge 10 upstream commits including: - v1.3.16 release - Cloudflare provider env vars error message fix - Azure provider fix (pass both 'openai' and 'azure' providerOptions) - Mouse disable feature (tui.json mouse field) - Windows Ctrl+Z undo tip - Plugin package specifier parsing fix - ACP configOptions implementation - Nix hashes update - Zen rate limiter normalization Conflict resolution: kept both fork's notifications field and upstream's mouse field in tui-schema.ts. bun.lock regenerated. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

github-actions · 2026-04-06T06:15:43Z

This PR doesn't fully meet our contributing guidelines and PR template.

What needs to be fixed:

PR description is missing required template sections. Please use the PR template.

Please edit this PR description to address the above within 2 hours, or it will be automatically closed.

If you believe this was flagged incorrectly, please let a maintainer know.

Copilot

Pull request overview

Syncs upstream anomalyco/opencode changes for the v1.3.16 release, bringing in multiple provider fixes, TUI improvements, plugin parsing fixes, and dependency/version updates while preserving fork-specific features.

Changes:

Bumps versions across packages/extensions to 1.3.16 and regenerates bun.lock / nix hashes.
Updates TUI behavior/config (mouse disable, Windows Ctrl+Z undo default) and corresponding docs/tests.
Improves provider/plugin plumbing (Cloudflare env error handling + auth metadata, Azure providerOptions, plugin specifier parsing, ACP configOptions).

Reviewed changes

Copilot reviewed 45 out of 46 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
sdks/vscode/package.json	VS Code extension version bump to 1.3.16
packages/web/src/content/docs/tui.mdx	Documents new `mouse` TUI setting
packages/web/src/content/docs/config.mdx	Updates TUI config example (adds `mouse`)
packages/web/src/content/docs/cli.mdx	Documents `OPENCODE_DISABLE_MOUSE` env var
packages/web/package.json	Web package version bump to 1.3.16
packages/util/package.json	Util package version bump to 1.3.16
packages/ui/package.json	UI package version bump to 1.3.16
packages/slack/package.json	Slack package version bump to 1.3.16
packages/sdk/openapi.json	Adds `metadata` to API auth schema
packages/sdk/js/src/v2/gen/types.gen.ts	Adds `metadata` to `ApiAuth` generated type
packages/sdk/js/package.json	SDK JS package version bump to 1.3.16
packages/plugin/package.json	Plugin package version bump to 1.3.16
packages/opencode/test/plugin/shared.test.ts	Adds tests for plugin specifier parsing
packages/opencode/test/npm.test.ts	Adds tests for Windows npm spec sanitization
packages/opencode/test/config/tui.test.ts	Adds Windows-only tests for Ctrl+Z undo defaults
packages/opencode/src/provider/transform.ts	Azure providerOptions compatibility fix (openai+azure keys)
packages/opencode/src/provider/provider.ts	Cloudflare provider env/metadata handling + clearer errors
packages/opencode/src/plugin/shared.ts	Uses `npm-package-arg` for robust spec parsing/installation
packages/opencode/src/plugin/index.ts	Registers new internal Cloudflare auth plugins
packages/opencode/src/plugin/cloudflare.ts	Adds Cloudflare auth plugins (prompts for account/gateway IDs)
packages/opencode/src/npm/index.ts	Sanitizes Windows cache directory names for npm installs
packages/opencode/src/flag/flag.ts	Adds `OPENCODE_DISABLE_MOUSE` flag
packages/opencode/src/config/tui.ts	Windows keybind defaults (Ctrl+Z => undo; disable suspend)
packages/opencode/src/config/tui-schema.ts	Adds `mouse` to TUI schema
packages/opencode/src/cli/cmd/tui/feature-plugins/home/tips-view.tsx	Windows-specific Ctrl+Z tip
packages/opencode/src/cli/cmd/tui/component/dialog-provider.tsx	Supports auth prompt metadata when saving API auth
packages/opencode/src/cli/cmd/tui/app.tsx	Implements mouse enable/disable via config + env flag
packages/opencode/src/auth/index.ts	Adds optional `metadata` to API auth schema
packages/opencode/src/acp/agent.ts	Adds ACP session configOptions + setSessionConfigOption
packages/opencode/package.json	Core package version bump + adds `npm-package-arg` deps/types
packages/function/package.json	Function package version bump to 1.3.16
packages/extensions/zed/extension.toml	Zed extension version bump + release URLs updated
packages/enterprise/package.json	Enterprise package version bump to 1.3.16
packages/desktop/package.json	Desktop package version bump to 1.3.16
packages/desktop-electron/package.json	Desktop Electron package version bump to 1.3.16
packages/console/mail/package.json	Console mail package version bump to 1.3.16
packages/console/function/package.json	Console function package version bump to 1.3.16
packages/console/core/src/subscription.ts	Removes unused free-limit header/fallback fields
packages/console/core/package.json	Console core package version bump to 1.3.16
packages/console/app/src/routes/zen/util/rateLimiter.ts	Simplifies daily limit selection logic
packages/console/app/src/routes/zen/util/handler.ts	Normalizes IPv6-ish `x-real-ip` for rate limiting
packages/console/app/package.json	Console app package version bump to 1.3.16
packages/app/package.json	App package version bump to 1.3.16
nix/hashes.json	Updates nix node_modules hashes
bun.lock	Regenerated lockfile reflecting version + dependency updates

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-04-06T06:22:12Z

@@ -19,8 +20,13 @@ export namespace Npm {
 }),
 )

+ export function sanitize(pkg: string) {
+ if (!illegal) return pkg
+ return Array.from(pkg, (char) => (illegal.has(char) || char.charCodeAt(0) < 32 ? "_" : char)).join("")
+ }
+
 function directory(pkg: string) {
- return path.join(Global.Path.cache, "packages", pkg)
+ return path.join(Global.Path.cache, "packages", sanitize(pkg))
 }


On Windows, sanitize() maps several distinct characters to "_". Different package specifiers can therefore collide to the same cache directory name (e.g., different URLs / refs that only vary by an illegal character), causing the wrong cached package to be reused. Consider incorporating a stable disambiguator (e.g., percent-encoding each replaced character, or appending a short hash of the original spec) so directory names remain filesystem-safe without risking collisions.

Copilot · 2026-04-06T06:22:12Z

 .default(true)
 .optional()
 .describe("Show system notifications when sessions complete or error. Requires terminal focus-loss detection."),
+ mouse: z.boolean().optional().describe("Enable or disable mouse capture (default: true)"),


TuiOptions.mouse is described as having default true, but the zod schema does not set a default (unlike notifications). This can make generated schema/docs inconsistent with runtime behavior. Either add .default(true) here or remove the default claim from the description to keep the schema authoritative.
Suggested change
mouse: z.boolean().optional().describe("Enable or disable mouse capture (default: true)"),
mouse: z.boolean().default(true).optional().describe("Enable or disable mouse capture (default: true)"),

Honaand others added 11 commits April 6, 2026 00:26

fix(plugin): parse package specifiers with npm-package-arg and saniti…
68f4aa2
…ze win32 cache paths (anomalyco#21135)

chore: update nix node_modules hashes
9e156ea

feat(tui): make the mouse disablable (anomalyco#6824,anomalyco#7926) (…
4712c18
…anomalyco#13748)

fix(core): implement proper configOptions for acp (anomalyco#21134)
f0f1e51

fix: pass both 'openai' and 'azure' providerOptions keys for @ai-sdk/…
9965d38
…azure (anomalyco#20272) Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>

fix(tui): default Ctrl+Z to undo on Windows (anomalyco#21138)
77a462c

release: v1.3.16
342436d

zen: remove header check
a8fd015

zen: normalize ipv6
70b636a

fix: show clear error when Cloudflare provider env vars are missing (a…
eaa272e
…nomalyco#20399) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com> Co-authored-by: Aiden Cline <aidenpcline@gmail.com>

CopilotAI review requested due to automatic review settings April 6, 2026 06:15

github-actionsBot added the needs:compliance label Apr 6, 2026

Copilotstarted reviewing on behalf of terisuke April 6, 2026 06:16 View session

CopilotAI reviewed Apr 6, 2026
View reviewed changes

terisuke force-pushed the chore/upstream-sync-20260406 branch from 9a0bbac to 2da9df9Compare April 6, 2026 06:22

terisuke merged commit 76fc8ec into devApr 6, 2026
17 of 23 checks passed

terisuke mentioned this pull request Apr 6, 2026
chore: upstream sync v1.3.16 #95
Closed

Navigation Menu

Uh oh!

chore: sync upstream v1.3.16 - #94

chore: sync upstream v1.3.16#94
terisuke merged 11 commits into
devfrom
chore/upstream-sync-20260406

terisuke commented Apr 6, 2026•
edited
Loading

Uh oh!

github-actionsBot commented Apr 6, 2026

Uh oh!

CopilotAI left a comment

Uh oh!

CopilotAIApr 6, 2026

Uh oh!

CopilotAIApr 6, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

	mouse: z.boolean().optional().describe("Enable or disable mouse capture (default: true)"),
	mouse: z.boolean().default(true).optional().describe("Enable or disable mouse capture (default: true)"),

Uh oh!

Conversation

terisuke commented Apr 6, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Notes

Test plan

Uh oh!

github-actionsBot commented Apr 6, 2026

Uh oh!

CopilotAI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

CopilotAIApr 6, 2026

Choose a reason for hiding this comment

Uh oh!

CopilotAIApr 6, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

terisuke commented Apr 6, 2026•
edited
Loading