@evident-ai/cli 3.4.1-dev.325472f → 3.4.1-dev.444e897

package/dist/index.js

@@ -11,8 +11,8 @@ import chalk2 from "chalk";
 
 // src/lib/config.ts
 import Conf from "conf";
-import { chmodSync, existsSync, statSync } from "fs";
-import { dirname } from "path";
+import { chmodSync, existsSync, statSync } from "node:fs";
+import { dirname } from "node:path";
 var PRODUCTION_API_URL = "https://api.production.evident.run/v1";
 var PRODUCTION_TUNNEL_URL = "wss://tunnel.production.evident.run";
 var defaults = {
@@ -1009,10 +1009,10 @@ async function status(options = {}) {
 }
 
 // src/lib/claude-usage.ts
-import { execFileSync } from "child_process";
-import { readFileSync } from "fs";
-import { homedir } from "os";
-import { join } from "path";
+import { execFileSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
 var CLAUDE_USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
 var CLAUDE_PROFILE_URL = "https://api.anthropic.com/api/oauth/profile";
 var CLAUDE_PROFILE_TIMEOUT_MS = 2e3;
@@ -1192,10 +1192,10 @@ async function claudeUsage() {
 }
 
 // src/commands/run.ts
-import { chmodSync as chmodSync3, existsSync as existsSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync6 } from "fs";
-import { homedir as homedir5 } from "os";
-import { isAbsolute as isAbsolute3, join as join9, parse, resolve as resolvePath2 } from "path";
-import chalk6 from "chalk";
+import { chmodSync as chmodSync3, existsSync as existsSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync6 } from "node:fs";
+import { homedir as homedir6 } from "node:os";
+import { isAbsolute as isAbsolute3, join as join10, parse, resolve as resolvePath2 } from "node:path";
+import chalk7 from "chalk";
 
 // ../../packages/types/src/agents/index.ts
 var MICROVM_MAX_LIFETIME_MS = 8 * 60 * 6e4;
@@ -1254,7 +1254,7 @@ function stripQuery(url) {
 
 // src/commands/run.ts
 import ora3 from "ora";
-import { select as select3 } from "@inquirer/prompts";
+import { select as select4 } from "@inquirer/prompts";
 
 // src/lib/telemetry.ts
 var CLI_VERSION = (true ? "3.0.0" : void 0) ?? process.env.npm_package_version ?? "unknown";
@@ -1427,12 +1427,50 @@ var SEVERITY_BY_LEVEL = {
   warn: "warning",
   error: "error"
 };
+function parseOpenCodeLogLine(line) {
+  const normalisedLine = line.replace(/\r$/, "");
+  const levelMatch = normalisedLine.match(/(?:^|\s)level=(\w+)/i);
+  if (!levelMatch) return null;
+  const level = levelMatch[1].toUpperCase();
+  if (level !== "WARN" && level !== "ERROR") return null;
+  const sessionMatch = normalisedLine.match(/(?:^|\s)sessionID=(\S+)/);
+  return { level: level === "WARN" ? "warn" : "error", sessionID: sessionMatch?.[1] };
+}
+var MAX_LINE_BUFFER_BYTES = 16 * 1024;
+function createOpenCodeActivityForwarder(getContext) {
+  let buffer = Buffer.alloc(0);
+  const flushLine = (line) => {
+    const parsed = parseOpenCodeLogLine(line);
+    if (!parsed) return;
+    forwardRunnerActivity(
+      {
+        level: parsed.level,
+        error: line,
+        metadata: parsed.sessionID ? { sessionID: parsed.sessionID } : void 0,
+        source: "opencode"
+      },
+      getContext()
+    );
+  };
+  return (chunk) => {
+    buffer = Buffer.concat([buffer, Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk, "utf-8")]);
+    let newlineIndex;
+    while ((newlineIndex = buffer.indexOf(10)) !== -1) {
+      flushLine(buffer.subarray(0, newlineIndex).toString("utf-8").replace(/\r$/, ""));
+      buffer = buffer.subarray(newlineIndex + 1);
+    }
+    if (buffer.length > MAX_LINE_BUFFER_BYTES) {
+      flushLine(buffer.toString("utf-8"));
+      buffer = Buffer.alloc(0);
+    }
+  };
+}
 var MAX_MESSAGE_LENGTH = 500;
 var MAX_METADATA_VALUE_LENGTH = 200;
 var MAX_METADATA_ENTRIES = 20;
 var TRUNCATION_MARKER = "\u2026";
 function redact(message) {
-  return message.replace(/esk_[A-Za-z0-9_-]+/g, "esk_***").replace(/ct_[A-Za-z0-9_-]+/g, "ct_***").replace(/https?:\/\/\S+/g, "<url>");
+  return message.replace(/esk_[A-Za-z0-9_-]+/g, "esk_***").replace(/ct_[A-Za-z0-9_-]+/g, "ct_***").replace(/(?<![A-Za-z0-9_-])sk-ant-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g, "sk-ant-***").replace(/(?<![A-Za-z0-9_-])sk-proj-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g, "sk-proj-***").replace(/(?<![A-Za-z0-9_-])sk-[A-Za-z0-9]{20,}(?![A-Za-z0-9_-])/g, "sk-***").replace(/(?<![A-Za-z0-9_-])(gh[oprsu])_[A-Za-z0-9]{20,}(?![A-Za-z0-9_-])/g, "$1_***").replace(/(?<![A-Za-z0-9_-])github_pat_[A-Za-z0-9_]{20,}(?![A-Za-z0-9_-])/g, "github_pat_***").replace(/https?:\/\/\S+/g, "<url>");
 }
 function truncate(message) {
   if (message.length <= MAX_MESSAGE_LENGTH) return message;
@@ -1458,43 +1496,47 @@ function sanitiseMetadata(metadata) {
 }
 var RATE_LIMIT_WINDOW_MS = 6e4;
 var RATE_LIMIT_MAX_EVENTS = 30;
-var windowStartedAt = 0;
-var windowCount = 0;
-var windowDroppedCount = 0;
-function admitUnderRateLimit(now) {
-  if (now - windowStartedAt >= RATE_LIMIT_WINDOW_MS) {
-    if (windowDroppedCount > 0) {
+var rateWindows = /* @__PURE__ */ new Map();
+function admitUnderRateLimit(source, now) {
+  let window = rateWindows.get(source);
+  if (!window) {
+    window = { windowStartedAt: 0, windowCount: 0, windowDroppedCount: 0 };
+    rateWindows.set(source, window);
+  }
+  if (now - window.windowStartedAt >= RATE_LIMIT_WINDOW_MS) {
+    if (window.windowDroppedCount > 0) {
       console.error(
-        `[runner-activity-telemetry] rate cap reached: dropped ${windowDroppedCount} ${windowDroppedCount === 1 ? "entry" : "entries"} in the last ${RATE_LIMIT_WINDOW_MS / 1e3}s (cap ${RATE_LIMIT_MAX_EVENTS}/min)`
+        `[runner-activity-telemetry] rate cap reached: dropped ${window.windowDroppedCount} ${window.windowDroppedCount === 1 ? "entry" : "entries"} in the last ${RATE_LIMIT_WINDOW_MS / 1e3}s (cap ${RATE_LIMIT_MAX_EVENTS}/min) for source "${source}"`
       );
     }
-    windowStartedAt = now;
-    windowCount = 0;
-    windowDroppedCount = 0;
+    window.windowStartedAt = now;
+    window.windowCount = 0;
+    window.windowDroppedCount = 0;
   }
-  if (windowCount >= RATE_LIMIT_MAX_EVENTS) {
-    windowDroppedCount++;
-    if (windowDroppedCount === 1) {
+  if (window.windowCount >= RATE_LIMIT_MAX_EVENTS) {
+    window.windowDroppedCount++;
+    if (window.windowDroppedCount === 1) {
       console.error(
-        `[runner-activity-telemetry] rate cap reached (${RATE_LIMIT_MAX_EVENTS} per ${RATE_LIMIT_WINDOW_MS / 1e3}s) \u2014 dropping further entries this window`
+        `[runner-activity-telemetry] rate cap reached (${RATE_LIMIT_MAX_EVENTS} per ${RATE_LIMIT_WINDOW_MS / 1e3}s) \u2014 dropping further entries this window for source "${source}"`
       );
     }
     return false;
   }
-  windowCount++;
+  window.windowCount++;
   return true;
 }
 function forwardRunnerActivity(entry, context) {
   try {
     if (!FORWARDED_LEVELS.has(entry.level)) return;
     if (!context.agentId || !context.authHeader) return;
-    if (!admitUnderRateLimit(Date.now())) return;
+    const source = entry.source ?? "cli.run";
+    if (!admitUnderRateLimit(source, Date.now())) return;
     const rawMessage = entry.error ?? entry.message ?? "";
     const message = truncate(redact(rawMessage));
     logEvent(TelemetryEventTypes.RUNNER_ACTIVITY, {
       severity: SEVERITY_BY_LEVEL[entry.level],
       message,
-      metadata: { ...sanitiseMetadata(entry.metadata), source: "cli.run" },
+      metadata: { ...sanitiseMetadata(entry.metadata), source },
       agentId: context.agentId
     });
   } catch (err) {
@@ -1505,8 +1547,8 @@ function forwardRunnerActivity(entry, context) {
 }
 
 // src/lib/opencode/session-db-recovery-report.ts
-import { readFileSync as readFileSync2, unlinkSync } from "fs";
-import { join as join2 } from "path";
+import { readFileSync as readFileSync2, unlinkSync } from "node:fs";
+import { join as join2 } from "node:path";
 function sessionDbRecoveryReportPath(homeDir, env) {
   const override = env.EVIDENT_SESSION_DB_RECOVERY_REPORT?.trim();
   return override || join2(homeDir, ".local", "state", "evident", "session-db-recovery.jsonl");
@@ -1719,13 +1761,13 @@ async function waitForOpenCodeHealth(port, timeoutMs = 3e4) {
 }
 
 // src/lib/opencode/session-db-boot.ts
-import { spawn as spawn2 } from "child_process";
-import { mkdirSync, statSync as statSync2, unlinkSync as unlinkSync2, writeFileSync } from "fs";
-import { homedir as homedir2 } from "os";
-import { dirname as dirname2, resolve as resolvePath } from "path";
+import { spawn as spawn2 } from "node:child_process";
+import { mkdirSync, statSync as statSync2, unlinkSync as unlinkSync2, writeFileSync } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { dirname as dirname2, resolve as resolvePath } from "node:path";
 
 // src/lib/runner-synchroniser.ts
-import { spawn } from "child_process";
+import { spawn } from "node:child_process";
 function appendError(stderr, error2) {
   const message = error2 instanceof Error ? error2.message : String(error2);
   return stderr === "" ? message : `${stderr}
@@ -2250,9 +2292,9 @@ async function restoreAndVerifySessionDb(options) {
 }
 
 // src/lib/opencode/session-db-provenance.ts
-import { createRequire } from "module";
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname3, join as join3 } from "path";
+import { createRequire } from "node:module";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
+import { dirname as dirname3, join as join3 } from "node:path";
 var require2 = createRequire(import.meta.url);
 function readSessionDbMigrationIds(dbPath) {
   let db;
@@ -2446,6 +2488,17 @@ async function stopProcessAndWait(child, timeoutMs, sendTerm, sendKill) {
 
 // src/lib/opencode/process.ts
 var OPENCODE_PORT_RANGE = [4096, 4097, 4098, 4099, 4100];
+var VALID_OPENCODE_LOG_LEVELS = /* @__PURE__ */ new Set(["DEBUG", "INFO", "WARN", "ERROR"]);
+function resolveOpenCodeLogLevel(env) {
+  const raw = env.OPENCODE_LOG_LEVEL;
+  if (!raw) return "INFO";
+  const upper = raw.toUpperCase();
+  if (VALID_OPENCODE_LOG_LEVELS.has(upper)) return upper;
+  console.warn(
+    `startOpenCode: ignoring invalid OPENCODE_LOG_LEVEL "${raw}" (expected DEBUG|INFO|WARN|ERROR) \u2014 using INFO`
+  );
+  return "INFO";
+}
 function getProcessCwd(pid) {
   const platform = process.platform;
   try {
@@ -2494,14 +2547,14 @@ function findAvailablePort(startPort, maxAttempts = 10) {
   }
   return null;
 }
-function findOpenCodeProcesses() {
+function findProcessesByPattern(pgrepPattern, psPattern) {
   const instances = [];
   try {
     const platform = process.platform;
     if (platform === "darwin" || platform === "linux") {
       let pids = [];
       try {
-        const pgrepOutput = execSync('pgrep -f "opencode serve|opencode-serve"', {
+        const pgrepOutput = execSync(`pgrep -f "${pgrepPattern}"`, {
           encoding: "utf-8",
           stdio: ["pipe", "pipe", "pipe"]
         }).trim();
@@ -2510,7 +2563,7 @@ function findOpenCodeProcesses() {
         }
       } catch {
         try {
-          const psOutput = execSync('ps aux | grep -E "opencode (serve|--port)" | grep -v grep', {
+          const psOutput = execSync(`ps aux | grep -E "${psPattern}" | grep -v grep`, {
             encoding: "utf-8",
             stdio: ["pipe", "pipe", "pipe"]
           }).trim();
@@ -2556,6 +2609,9 @@ function findOpenCodeProcesses() {
   }
   return instances;
 }
+function findOpenCodeProcesses() {
+  return findProcessesByPattern("opencode serve|opencode-serve", "opencode (serve|--port)");
+}
 async function scanPortsForOpenCode() {
   const instances = [];
   const checks = OPENCODE_PORT_RANGE.map(async (port) => {
@@ -2602,7 +2658,7 @@ async function findHealthyOpenCodeInstances() {
 }
 async function startOpenCode(port, options = {}) {
   let command = "opencode";
-  const printLogs = options.inheritStdio ? ["--print-logs"] : [];
+  const printLogs = options.inheritStdio ? ["--print-logs", "--log-level", resolveOpenCodeLogLevel(process.env)] : [];
   let args = ["serve", "--port", port.toString(), "--hostname", "127.0.0.1", ...printLogs];
   try {
     execSync("which opencode", { stdio: "ignore" });
@@ -2659,6 +2715,19 @@ function isOpenCodeInstalled() {
     return false;
   }
 }
+function isOpenCode2Installed() {
+  try {
+    const platform = process.platform;
+    if (platform === "win32") {
+      execSync2("where opencode2", { stdio: "ignore" });
+    } else {
+      execSync2("which opencode2", { stdio: "ignore" });
+    }
+    return true;
+  } catch {
+    return false;
+  }
+}
 async function promptOpenCodeInstall(interactive) {
   if (!interactive) {
     console.log(
@@ -2668,7 +2737,11 @@ async function promptOpenCodeInstall(interactive) {
         install_url: OPENCODE_INSTALL_URL,
         install_commands: {
           npm: "npm install -g opencode-ai",
-          curl: "curl -fsSL https://opencode.ai/install.sh | sh"
+          curl: "curl -fsSL https://opencode.ai/install.sh | sh",
+          v2: {
+            npm: "npm install -g @opencode-ai/cli@beta",
+            curl: "curl -fsSL https://opencode.ai/v2/install | bash"
+          }
         }
       })
     );
@@ -3416,6 +3489,24 @@ async function hasAnyConfiguredProvider(port) {
     return null;
   }
 }
+async function reloadProviderCache(port) {
+  try {
+    const res = await timedFetch(`${opencodeBase(port)}/config`, {
+      method: "PATCH",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({})
+    });
+    if (!res.ok) {
+      console.error(
+        `[reloadProviderCache] PATCH /config returned HTTP ${res.status} (port ${port})`
+      );
+    }
+  } catch (err) {
+    console.error(
+      `[reloadProviderCache] PATCH /config failed (port ${port}): ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+}
 
 // src/lib/opencode/session-cleanup.ts
 var DURATION_UNIT_MS = {
@@ -3522,8 +3613,8 @@ function resolveSessionCleanupConfig(flags, env = process.env) {
 }
 
 // src/lib/opencode/session-db-size.ts
-import { statSync as statSync3 } from "fs";
-import { join as join4 } from "path";
+import { statSync as statSync3 } from "node:fs";
+import { join as join4 } from "node:path";
 var LARGE_DB_THRESHOLD_BYTES = 268435456;
 function statSessionDbBytes(homeDir) {
   const dbPath = join4(homeDir, ".local", "share", "opencode", "opencode.db");
@@ -3553,9 +3644,96 @@ function buildSessionStoreSizeWarning(input) {
   return null;
 }
 
+// src/lib/opencode/log-tail.ts
+import { statSync as statSync4 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { join as join5 } from "node:path";
+import { open as open2, stat } from "node:fs/promises";
+var DEFAULT_POLL_INTERVAL_MS = 1e3;
+function resolveOpenCodeLogPath(homeDir = homedir3(), env = process.env) {
+  const dataDir = env.XDG_DATA_HOME || join5(homeDir, ".local", "share");
+  return join5(dataDir, "opencode", "log", "opencode.log");
+}
+function isEnoent(error2) {
+  return error2?.code === "ENOENT";
+}
+function reportFailure(operation, logPath, error2) {
+  console.error(
+    `[opencode-log-tail] ${operation} failed for ${logPath}: ${error2 instanceof Error ? error2.message : String(error2)}`
+  );
+}
+function tailOpenCodeLogFile(logPath, onChunk, opts = {}) {
+  const pollIntervalMs = opts.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  let offset = 0;
+  let inode = null;
+  let baselineReady = true;
+  try {
+    const initial = statSync4(logPath);
+    offset = initial.size;
+    inode = initial.ino;
+  } catch (error2) {
+    if (!isEnoent(error2)) {
+      reportFailure("initial stat", logPath, error2);
+      baselineReady = false;
+    }
+  }
+  let polling = false;
+  let stopped = false;
+  const poll = async () => {
+    if (polling || stopped) return;
+    polling = true;
+    try {
+      let current;
+      try {
+        current = await stat(logPath);
+      } catch (error2) {
+        if (!isEnoent(error2)) reportFailure("stat", logPath, error2);
+        return;
+      }
+      if (!baselineReady) {
+        offset = current.size;
+        inode = current.ino;
+        baselineReady = true;
+        return;
+      }
+      if (inode !== null && current.ino !== inode || current.size < offset) {
+        offset = 0;
+      }
+      inode = current.ino;
+      if (current.size === offset) return;
+      const length = current.size - offset;
+      const fh = await open2(logPath, "r");
+      try {
+        const buf = Buffer.alloc(length);
+        const { bytesRead } = await fh.read(buf, 0, length, offset);
+        offset += bytesRead;
+        if (bytesRead > 0) onChunk(buf.subarray(0, bytesRead));
+      } finally {
+        await fh.close();
+      }
+    } catch (error2) {
+      if (!isEnoent(error2)) reportFailure("poll", logPath, error2);
+    } finally {
+      polling = false;
+    }
+  };
+  const interval = setInterval(() => void poll(), pollIntervalMs);
+  void poll();
+  return {
+    stop: () => {
+      stopped = true;
+      clearInterval(interval);
+    }
+  };
+}
+
 // src/lib/opencode/session-db-reclaim.ts
-import { statSync as statSync4, statfsSync } from "fs";
-import { dirname as dirname4 } from "path";
+import { statSync as statSync5, statfsSync } from "node:fs";
+import { dirname as dirname4 } from "node:path";
+function errorMessage(error2) {
+  if (!(error2 instanceof Error)) return String(error2);
+  return error2.cause instanceof Error ? error2.cause.message : error2.message;
+}
 function insufficientSpaceReason(dbPath, requiredBytes) {
   try {
     const fsStats = statfsSync(dirname4(dbPath));
@@ -3581,17 +3759,17 @@ async function probeReclaimAvailability(input) {
   const { dbPath, requiredBytes } = input;
   let sqlite;
   try {
-    sqlite = await import("sqlite");
+    sqlite = await import("node:sqlite");
   } catch (err) {
-    console.warn(
-      `[probeReclaimAvailability] node:sqlite unavailable for ${dbPath}: ${err instanceof Error ? err.message : String(err)}`
-    );
-    return "sqlite-unavailable";
+    const detail = `Node ${process.version}: ${errorMessage(err)}`;
+    console.warn(`[probeReclaimAvailability] node:sqlite unavailable for ${dbPath}: ` + detail);
+    return { reason: "sqlite-unavailable", detail };
   }
   let autoVacuum = null;
   try {
     const db = new sqlite.DatabaseSync(dbPath, { readOnly: true });
     try {
+      db.exec("PRAGMA busy_timeout=5000");
       autoVacuum = db.prepare("PRAGMA auto_vacuum").get().auto_vacuum;
     } finally {
       db.close();
@@ -3602,23 +3780,25 @@ async function probeReclaimAvailability(input) {
     );
   }
   if (autoVacuum !== 0) return null;
-  return insufficientSpaceReason(dbPath, requiredBytes) !== null ? "insufficient-disk-space" : null;
+  return insufficientSpaceReason(dbPath, requiredBytes) !== null ? { reason: "insufficient-disk-space" } : null;
 }
 async function reclaimSessionDbSpace(input) {
   const { dbPath, maxPages, allowFullVacuum = true } = input;
   let sqlite;
   try {
-    sqlite = await import("sqlite");
+    sqlite = await import("node:sqlite");
   } catch (err) {
+    const detail = `Node ${process.version}: ${errorMessage(err)}`;
     console.warn(
-      `[reclaimSessionDbSpace] node:sqlite unavailable (need Node >=22.5, >=22.13 unflagged) for ${dbPath}: ${err instanceof Error ? err.message : String(err)}`
+      `[reclaimSessionDbSpace] node:sqlite unavailable (need Node >=22.5, >=22.13 unflagged) for ${dbPath}: ${detail}`
     );
-    return { ok: false, skipped: "sqlite-unavailable" };
+    return { ok: false, skipped: "sqlite-unavailable", detail };
   }
   const { DatabaseSync } = sqlite;
   let db;
   try {
     db = new DatabaseSync(dbPath);
+    db.exec("PRAGMA busy_timeout=5000");
     const autoVacuum = db.prepare("PRAGMA auto_vacuum").get().auto_vacuum;
     if (autoVacuum === 0) {
       if (!allowFullVacuum) {
@@ -3627,7 +3807,7 @@ async function reclaimSessionDbSpace(input) {
         );
         return { ok: false, skipped: "full-vacuum-blocked" };
       }
-      const fileBytesForGuard = statSync4(dbPath).size;
+      const fileBytesForGuard = statSync5(dbPath).size;
       const skipReason = insufficientSpaceReason(dbPath, fileBytesForGuard);
       if (skipReason !== null) {
         console.warn(
@@ -3655,10 +3835,12 @@ async function reclaimSessionDbSpace(input) {
     );
     return { ok: false, skipped: "auto-vacuum-not-applicable" };
   } catch (err) {
-    console.error(
-      `[reclaimSessionDbSpace] reclaim failed for ${dbPath}: ${err instanceof Error ? err.message : String(err)}`
-    );
-    return { ok: false, skipped: "reclaim-error" };
+    console.error(`[reclaimSessionDbSpace] reclaim failed for ${dbPath}: ` + errorMessage(err));
+    return {
+      ok: false,
+      skipped: "reclaim-error",
+      detail: errorMessage(err)
+    };
   } finally {
     db?.close();
   }
@@ -3950,8 +4132,8 @@ function connectTunnel(options) {
       try {
         message = JSON.parse(data.toString());
       } catch (error2) {
-        const errorMessage2 = error2 instanceof Error ? error2.message : "Unknown error";
-        onError?.(`Failed to handle message: ${errorMessage2}`);
+        const errorMessage3 = error2 instanceof Error ? error2.message : "Unknown error";
+        onError?.(`Failed to handle message: ${errorMessage3}`);
         return;
       }
       if (isStreamFrame(message)) {
@@ -4095,7 +4277,7 @@ var RunnerConnection = class {
 };
 
 // src/lib/tunnel/ready-marker.ts
-import { writeFileSync as writeFileSync3 } from "fs";
+import { writeFileSync as writeFileSync3 } from "node:fs";
 function writeTunnelReadyMarker(path, agentId) {
   try {
     writeFileSync3(path, `${agentId}
@@ -4107,7 +4289,7 @@ function writeTunnelReadyMarker(path, agentId) {
 }
 
 // src/lib/replication.ts
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn4 } from "node:child_process";
 function startSessionDbReplication(configPath) {
   return spawn4("litestream", ["replicate", "-config", configPath], {
     stdio: "inherit"
@@ -4123,7 +4305,7 @@ async function stopSessionDbReplication(child, timeoutMs) {
 }
 
 // src/lib/process-liveness.ts
-import { readFileSync as readFileSync4 } from "fs";
+import { readFileSync as readFileSync4 } from "node:fs";
 function isProcessAlive(pid) {
   try {
     process.kill(pid, 0);
@@ -4149,9 +4331,9 @@ function isProcessAlive(pid) {
 }
 
 // src/lib/openai-usage.ts
-import { readFileSync as readFileSync5 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join5 } from "path";
+import { readFileSync as readFileSync5 } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { join as join6 } from "node:path";
 var CODEX_RESPONSES_URL = "https://chatgpt.com/backend-api/codex/responses";
 var OPENCODE_AUTH_SEGMENTS = [".local", "share", "opencode", "auth.json"];
 var OpenAiUsageError = class extends Error {
@@ -4165,7 +4347,7 @@ function isLocalCredentialProblem2(err) {
 }
 function readOpenCodeChatGptCredentials() {
   try {
-    const raw = readFileSync5(join5(homedir3(), ...OPENCODE_AUTH_SEGMENTS), "utf-8");
+    const raw = readFileSync5(join6(homedir4(), ...OPENCODE_AUTH_SEGMENTS), "utf-8");
     let parsed;
     try {
       parsed = JSON.parse(raw);
@@ -4427,8 +4609,8 @@ function resolveResourceUsageReportingEnabled(flagValue, env) {
 }
 
 // src/lib/resource-usage.ts
-import { cpus, totalmem, freemem } from "os";
-import { statfsSync as statfsSync2 } from "fs";
+import { cpus, totalmem, freemem } from "node:os";
+import { statfsSync as statfsSync2 } from "node:fs";
 
 // src/lib/ecs-task-metadata.ts
 var ECS_METADATA_TIMEOUT_MS = 2e3;
@@ -4595,15 +4777,15 @@ function createResourceUsageCollector(homeDir) {
 }
 
 // src/lib/channels/driver.ts
-import { homedir as homedir4 } from "os";
+import { homedir as homedir5 } from "node:os";
 
 // src/lib/runner-file-sync.ts
-import { join as join7 } from "path";
+import { join as join8 } from "node:path";
 
 // src/lib/file-push.ts
-import { randomUUID } from "crypto";
-import { chmod, mkdir, open as open2, realpath, rename, unlink } from "fs/promises";
-import { basename, dirname as dirname5, isAbsolute, join as join6, relative, resolve as resolve2, sep } from "path";
+import { randomUUID } from "node:crypto";
+import { chmod, mkdir, open as open3, realpath, rename, unlink } from "node:fs/promises";
+import { basename, dirname as dirname5, isAbsolute, join as join7, relative, resolve as resolve2, sep } from "node:path";
 var FILE_MODE = 384;
 var DIRECTORY_MODE = 448;
 async function writePushedFile(request) {
@@ -4636,7 +4818,7 @@ async function writePushedFile(request) {
     const { existingAncestor, missingSegments } = await resolveNearestExistingAncestor(
       dirname5(candidate)
     );
-    const realTarget = join6(existingAncestor, ...missingSegments, basename(candidate));
+    const realTarget = join7(existingAncestor, ...missingSegments, basename(candidate));
     const allowedDirectory = await findContainingAllowedDirectory(allowedDirectories, realTarget);
     if (allowedDirectory === null) {
       return refuse("path_not_allowed", "The runner does not allow writing to that location.", {
@@ -4672,7 +4854,7 @@ function expandAndValidate(requestedPath, homeDir) {
   if (requestedPath.trim() === "" || requestedPath.includes("\0")) {
     return null;
   }
-  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join6(homeDir, requestedPath.slice(2)) : requestedPath;
+  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join7(homeDir, requestedPath.slice(2)) : requestedPath;
   if (expanded.split(/[/\\]/).includes("..")) {
     return null;
   }
@@ -4745,16 +4927,16 @@ function contains(realDirectory, realTarget) {
 async function createMissingDirectories(existingAncestor, missingSegments) {
   let current = existingAncestor;
   for (const segment of missingSegments) {
-    current = join6(current, segment);
+    current = join7(current, segment);
     await mkdir(current, { recursive: true, mode: DIRECTORY_MODE });
     await chmod(current, DIRECTORY_MODE);
   }
 }
 async function writeAtomically(realTarget, content) {
-  const temporaryPath = join6(dirname5(realTarget), `.evident-push-${randomUUID()}.tmp`);
+  const temporaryPath = join7(dirname5(realTarget), `.evident-push-${randomUUID()}.tmp`);
   let handle;
   try {
-    handle = await open2(temporaryPath, "wx", FILE_MODE);
+    handle = await open3(temporaryPath, "wx", FILE_MODE);
     await handle.writeFile(content);
     await handle.chmod(FILE_MODE);
     await handle.close();
@@ -4881,12 +5063,12 @@ var NOT_APPLIED = {
   opencodeAuthApplied: false
 };
 function isClaudeCredentialPath(requestedPath, homeDir) {
-  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join7(homeDir, requestedPath.slice(2)) : requestedPath;
-  return expanded === join7(homeDir, ...CLAUDE_CREDENTIALS_SEGMENTS);
+  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join8(homeDir, requestedPath.slice(2)) : requestedPath;
+  return expanded === join8(homeDir, ...CLAUDE_CREDENTIALS_SEGMENTS);
 }
 function isOpenCodeAuthPath(requestedPath, homeDir) {
-  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join7(homeDir, requestedPath.slice(2)) : requestedPath;
-  return expanded === join7(homeDir, ...OPENCODE_AUTH_SEGMENTS);
+  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join8(homeDir, requestedPath.slice(2)) : requestedPath;
+  return expanded === join8(homeDir, ...OPENCODE_AUTH_SEGMENTS);
 }
 async function applyOne(options, file) {
   const label = `${file.id.slice(0, 8)} (${file.path})`;
@@ -5433,7 +5615,7 @@ var ChannelDriver = class _ChannelDriver {
     this.stuckQueuedMs = config.stuckQueuedMs ?? DEFAULT_STUCK_QUEUED_MS;
     this.now = config.now ?? (() => Date.now());
     this.fileSyncDirectories = config.fileSyncDirectories ?? [];
-    this.homeDir = config.homeDir ?? homedir4();
+    this.homeDir = config.homeDir ?? homedir5();
     this.maxActiveSessions = config.maxActiveSessions;
     this.watcherStallMs = config.watcherStallMs ?? WATCHER_STALL_MS;
     this.wedgeWarningIntervalMs = config.wedgeWarningIntervalMs ?? WEDGE_WARNING_INTERVAL_MS;
@@ -5795,7 +5977,7 @@ var ChannelDriver = class _ChannelDriver {
           this.signalDispatchNotStarted(conv, message, "session_existence_unknown");
           break;
         }
-        const errorMessage2 = err instanceof Error ? err.message : String(err);
+        const errorMessage3 = err instanceof Error ? err.message : String(err);
         this.sessions.delete(conv.id);
         this.supersede(conv.id, sessionId);
         this.log({
@@ -5804,7 +5986,7 @@ var ChannelDriver = class _ChannelDriver {
           conversation_id: conv.id,
           message_id: message.id
         });
-        await this.markFailed(conv.id, message.id, null, errorMessage2).catch((markErr) => {
+        await this.markFailed(conv.id, message.id, null, errorMessage3).catch((markErr) => {
           this.log({
             level: "warn",
             message: `markFailed PATCH for message ${message.id.slice(0, 8)} (conversation ${conv.id.slice(0, 8)}) failed (best-effort, not retried): ${markErr instanceof Error ? markErr.message : String(markErr)}`,
@@ -5815,7 +5997,7 @@ var ChannelDriver = class _ChannelDriver {
         });
         this.log({
           level: "error",
-          message: `Message ${message.id.slice(0, 8)} dispatch failed: ${errorMessage2}`,
+          message: `Message ${message.id.slice(0, 8)} dispatch failed: ${errorMessage3}`,
           conversation_id: conv.id,
           message_id: message.id
         });
@@ -5836,14 +6018,14 @@ var ChannelDriver = class _ChannelDriver {
         this.unconfirmedDispatchFailures.delete(message.id);
         this.sessions.delete(conv.id);
         this.supersede(conv.id, sessionId);
-        const errorMessage2 = `OpenCode accepted this message ${streak} times in a row but never confirmed its assigned id (session ${sessionId.slice(0, 8)}'s message list could not be read back) \u2014 the session was abandoned; a fresh one is used for further messages.`;
+        const errorMessage3 = `OpenCode accepted this message ${streak} times in a row but never confirmed its assigned id (session ${sessionId.slice(0, 8)}'s message list could not be read back) \u2014 the session was abandoned; a fresh one is used for further messages.`;
         this.log({
           level: "error",
-          message: errorMessage2,
+          message: errorMessage3,
           conversation_id: conv.id,
           message_id: message.id
         });
-        await this.markFailed(conv.id, message.id, null, errorMessage2).catch((markErr) => {
+        await this.markFailed(conv.id, message.id, null, errorMessage3).catch((markErr) => {
           this.log({
             level: "warn",
             message: `markFailed PATCH for message ${message.id.slice(0, 8)} (conversation ${conv.id.slice(0, 8)}) failed (best-effort, not retried): ${markErr instanceof Error ? markErr.message : String(markErr)}`,
@@ -7826,14 +8008,14 @@ var ChannelDriver = class _ChannelDriver {
         this.unconfirmedDispatchFailures.delete(row.id);
         this.sessions.delete(readoptConv.id);
         this.supersede(readoptConv.id, sessionId);
-        const errorMessage2 = `OpenCode accepted this re-dispatched message ${streak} times in a row but never confirmed its assigned id (session ${sessionId.slice(0, 8)}'s message list could not be read back) \u2014 the session was abandoned; a fresh one is used for further messages.`;
+        const errorMessage3 = `OpenCode accepted this re-dispatched message ${streak} times in a row but never confirmed its assigned id (session ${sessionId.slice(0, 8)}'s message list could not be read back) \u2014 the session was abandoned; a fresh one is used for further messages.`;
         this.log({
           level: "error",
-          message: errorMessage2,
+          message: errorMessage3,
           conversation_id: row.conversation_id,
           message_id: row.id
         });
-        await this.markFailed(row.conversation_id, row.id, null, errorMessage2).catch((markErr) => {
+        await this.markFailed(row.conversation_id, row.id, null, errorMessage3).catch((markErr) => {
           this.log({
             level: "warn",
             message: `markFailed PATCH for message ${row.id.slice(0, 8)} (conversation ${row.conversation_id.slice(0, 8)}) failed (best-effort, not retried): ${markErr instanceof Error ? markErr.message : String(markErr)}`,
@@ -8942,6 +9124,13 @@ import chalk5 from "chalk";
 import ora2 from "ora";
 import { select as select2 } from "@inquirer/prompts";
 var INTERACTIVE_START_TIMEOUT_MS = 3e4;
+function checkNonInteractivePortConflict(port, isPortInUseFn) {
+  if (isPortInUseFn(port)) {
+    throw new Error(
+      `Port ${port} is already in use by a non-OpenCode process. Free it or pass --port.`
+    );
+  }
+}
 async function ensureOpenCodeRunning(ctx) {
   const healthCheck = await checkOpenCodeHealth(ctx.port);
   if (healthCheck.healthy) {
@@ -8989,6 +9178,7 @@ async function ensureOpenCodeRunning(ctx) {
     }
   }
   if (!ctx.interactive) {
+    checkNonInteractivePortConflict(ctx.port, isPortInUse);
     ctx.log(`OpenCode is not running on port ${ctx.port}. Starting it automatically...`);
     const proc = await startOpenCode(ctx.port, { inheritStdio: ctx.inheritStdio });
     const health = await waitForOpenCodeHealth(ctx.port, ctx.startTimeoutMs);
@@ -9070,9 +9260,119 @@ Port ${port} is already in use.`));
   return { port, process: null, version: null, notReadyReason: "you chose to continue without it" };
 }
 
+// src/commands/ensure-opencode-v2.ts
+import chalk6 from "chalk";
+import { select as select3 } from "@inquirer/prompts";
+async function probeOpenCode2WithoutPassword(port) {
+  try {
+    const response = await fetch(`http://127.0.0.1:${port}/global/health`, {
+      signal: AbortSignal.timeout(2e3)
+    });
+    if (response.status === 401) {
+      return { healthy: false, authFailed: true, error: "HTTP 401" };
+    }
+    if (!response.ok) {
+      return { healthy: false, error: `HTTP ${response.status}` };
+    }
+    return { healthy: true };
+  } catch (error2) {
+    return {
+      healthy: false,
+      error: error2 instanceof Error ? error2.message : "Unknown error"
+    };
+  }
+}
+function unknownPasswordError(port) {
+  return new Error(
+    `OpenCode V2 (opencode2) is already running on port ${port} with a password this runner doesn't know. Free the port or pass --port.`
+  );
+}
+function v2SessionSupportIncompleteError() {
+  return new Error(
+    "OpenCode V2 (opencode2) session support is incomplete \u2014 see https://github.com/sroze/evident/issues/2075. Not starting a new opencode2 process."
+  );
+}
+async function ensureOpenCode2Running(ctx) {
+  const initialHealth = await probeOpenCode2WithoutPassword(ctx.port);
+  if (initialHealth.authFailed) {
+    throw unknownPasswordError(ctx.port);
+  }
+  if (initialHealth.healthy) {
+    return {
+      port: ctx.port,
+      process: null,
+      version: null,
+      notReadyReason: null,
+      password: null
+    };
+  }
+  if (!isOpenCode2Installed()) {
+    throw new Error(
+      "OpenCode V2 (opencode2) is not installed. Install it with: npm install -g @opencode-ai/cli@beta"
+    );
+  }
+  let port = ctx.port;
+  if (!ctx.interactive) {
+    checkNonInteractivePortConflict(port, isPortInUse);
+  } else if (isPortInUse(port)) {
+    console.log(chalk6.yellow(`
+Port ${port} is already in use.`));
+    const alternativePort = findAvailablePort(port + 1);
+    if (alternativePort) {
+      const useAlternative = await select3({
+        message: `Use port ${alternativePort} instead?`,
+        choices: [
+          { name: `Yes, use port ${alternativePort}`, value: "yes" },
+          { name: "No, I will free the port manually", value: "no" }
+        ]
+      });
+      if (useAlternative === "yes") {
+        port = alternativePort;
+      } else {
+        throw new Error(`Port ${ctx.port} is in use`);
+      }
+    }
+  }
+  if (!ctx.interactive) {
+    throw v2SessionSupportIncompleteError();
+  }
+  console.log(chalk6.yellow(`
+${v2SessionSupportIncompleteError().message}`));
+  const action = await select3({
+    message: "OpenCode V2 is not running. What would you like to do?",
+    choices: [
+      {
+        name: "Show me the command",
+        value: "manual",
+        description: "Display the command to run manually"
+      },
+      {
+        name: "Continue without OpenCode V2",
+        value: "continue",
+        description: "Requests will fail until OpenCode V2 starts"
+      }
+    ]
+  });
+  if (action === "manual") {
+    blank();
+    console.log(chalk6.bold("Run this command in another terminal:"));
+    blank();
+    console.log(`  ${chalk6.cyan(`opencode2 serve --port ${port}`)}`);
+    blank();
+    throw new Error("Please start OpenCode V2 manually");
+  }
+  return {
+    port,
+    process: null,
+    version: null,
+    notReadyReason: "you chose to continue without OpenCode V2",
+    password: null
+  };
+}
+
 // src/lib/runner-credentials.ts
-import { chmodSync as chmodSync2, writeFileSync as writeFileSync4 } from "fs";
-import { spawn as spawn5 } from "child_process";
+import { chmodSync as chmodSync2, writeFileSync as writeFileSync4 } from "node:fs";
+import { spawn as spawn5 } from "node:child_process";
 var RUNNER_SECRET_FETCH_TIMEOUT_MS = 6e4;
 var CREDENTIAL_RESTORE_TIMEOUT_MS = 6e4;
 var GITHUB_PROBE_TIMEOUT_MS = 1e4;
@@ -9344,11 +9644,11 @@ async function configureGitHubAccess({ env, log: log3 }) {
 }
 
 // src/lib/opencode/config-overlay.ts
-import { execFileSync as execFileSync2 } from "child_process";
-import { copyFileSync, existsSync as existsSync2, statSync as statSync5 } from "fs";
-import { isAbsolute as isAbsolute2, join as join8, resolve as resolve3 } from "path";
+import { execFileSync as execFileSync2 } from "node:child_process";
+import { copyFileSync, existsSync as existsSync2, statSync as statSync6 } from "node:fs";
+import { isAbsolute as isAbsolute2, join as join9, resolve as resolve3 } from "node:path";
 function isFile(filePath) {
-  return existsSync2(filePath) && statSync5(filePath).isFile();
+  return existsSync2(filePath) && statSync6(filePath).isFile();
 }
 function applyRunnerOpenCodeConfig({
   overlayPath,
@@ -9360,7 +9660,7 @@ function applyRunnerOpenCodeConfig({
     return;
   }
   const source = isAbsolute2(overlayPath) ? overlayPath : resolve3(cwd, overlayPath);
-  const target = isFile(join8(cwd, "opencode.jsonc")) ? "opencode.jsonc" : "opencode.json";
+  const target = isFile(join9(cwd, "opencode.jsonc")) ? "opencode.jsonc" : "opencode.json";
   if (!isFile(source)) {
     log3(
       `RUNNER-OPENCODE-CONFIG-MISSING: ${source} is not a file; headless turns will wedge on the first external-directory permission prompt (#563)`,
@@ -9368,7 +9668,7 @@ function applyRunnerOpenCodeConfig({
     );
     return;
   }
-  copyFileSync(source, join8(cwd, target));
+  copyFileSync(source, join9(cwd, target));
   try {
     execFileSync2("git", ["-C", cwd, "update-index", "--skip-worktree", target], {
       stdio: "ignore"
@@ -9377,11 +9677,11 @@ function applyRunnerOpenCodeConfig({
     const detail = error2 instanceof Error ? error2.message : String(error2);
     log3(`could not mark ${target} skip-worktree: ${detail}; it may show as a local change`, "warn");
   }
-  log3(`Applied runner OpenCode config ${source} to ${join8(cwd, target)}`);
+  log3(`Applied runner OpenCode config ${source} to ${join9(cwd, target)}`);
 }
 
 // src/lib/credential-sync.ts
-import { renameSync, writeFileSync as writeFileSync5 } from "fs";
+import { renameSync, writeFileSync as writeFileSync5 } from "node:fs";
 var CREDENTIAL_SYNC_TICK_TIMEOUT_MS = 3e4;
 var CREDENTIAL_FLUSH_DEADLINE_MS = 8e3;
 var CREDENTIAL_FLUSH_ABORT_GRACE_MS = 500;
@@ -9391,7 +9691,7 @@ var MAX_FLUSH_PASSES = 2;
 function outcomesWith(outcome) {
   return { claude: outcome, opencode: outcome };
 }
-function errorMessage(error2) {
+function errorMessage2(error2) {
   return error2 instanceof Error ? error2.message : String(error2);
 }
 function waitForSettlement(promise, timeoutMs) {
@@ -9418,7 +9718,7 @@ function writeMarker(markerPath, outcomes, log3) {
     writeFileSync5(temporaryPath, body, { mode: 384 });
     renameSync(temporaryPath, markerPath);
   } catch (error2) {
-    log3(`CREDENTIAL-FLUSH-MARKER-UNWRITABLE: ${markerPath}: ${errorMessage(error2)}`, "warn");
+    log3(`CREDENTIAL-FLUSH-MARKER-UNWRITABLE: ${markerPath}: ${errorMessage2(error2)}`, "warn");
   }
 }
 function intervalSeconds(env, log3) {
@@ -9450,7 +9750,7 @@ async function runFlushStore(store, env, synchroniserRunner, log3, deadlineAt) {
     },
     (error2) => {
       failed = true;
-      log3(`CREDENTIAL-FLUSH-ERROR: ${store}: ${errorMessage(error2)}`, "warn");
+      log3(`CREDENTIAL-FLUSH-ERROR: ${store}: ${errorMessage2(error2)}`, "warn");
     }
   );
   const abortTimer = setTimeout(() => controller.abort(), remainingMs);
@@ -9510,7 +9810,7 @@ function createCredentialSync({
           outcomes[store] = !result.timedOut && result.code === 0 ? "ok" : "failed";
         } catch (error2) {
           outcomes[store] = "failed";
-          log3(`CREDENTIAL-SYNC-TICK-ERROR: ${store}: ${errorMessage(error2)}`, "debug");
+          log3(`CREDENTIAL-SYNC-TICK-ERROR: ${store}: ${errorMessage2(error2)}`, "debug");
         }
       }
       const failed = STORES.some((store) => outcomes[store] === "failed");
@@ -9652,7 +9952,7 @@ function resolveFileSyncDirectories(raw, homeDir) {
     if (trimmed === "") {
       throw new Error("--enable-file-sync-to requires a directory path (got an empty value)");
     }
-    const expanded = trimmed === "~" ? homeDir : trimmed.startsWith("~/") ? join9(homeDir, trimmed.slice(2)) : trimmed;
+    const expanded = trimmed === "~" ? homeDir : trimmed.startsWith("~/") ? join10(homeDir, trimmed.slice(2)) : trimmed;
     if (!isAbsolute3(expanded)) {
       throw new Error(`--enable-file-sync-to requires an absolute directory path; got "${entry}"`);
     }
@@ -9676,6 +9976,28 @@ function resolveFileSyncDirectories(raw, homeDir) {
 var DEFAULT_OPENCODE_START_TIMEOUT_SECONDS = 180;
 var MAX_OPENCODE_START_TIMEOUT_SECONDS = 3600;
 var OPENCODE_START_TIMEOUT_ENV = "EVIDENT_OPENCODE_START_TIMEOUT";
+var OPENCODE_VERSION_ENV = "EVIDENT_OPENCODE_VERSION";
+function resolveOpenCodeVersion(options, env = process.env) {
+  let raw;
+  let source;
+  if (options.opencodeVersion !== void 0) {
+    raw = options.opencodeVersion;
+    source = "--opencode-version";
+  } else if (env[OPENCODE_VERSION_ENV] !== void 0 && env[OPENCODE_VERSION_ENV] !== "") {
+    raw = env[OPENCODE_VERSION_ENV];
+    source = OPENCODE_VERSION_ENV;
+  } else {
+    return { version: "v1", warnings: [] };
+  }
+  const normalized = raw.trim().toLowerCase();
+  if (normalized !== "v1" && normalized !== "v2") {
+    return {
+      version: "v1",
+      warnings: [`Ignoring invalid ${source} "${raw}": expected v1 or v2; using the default v1`]
+    };
+  }
+  return { version: normalized, warnings: [] };
+}
 function resolveOpenCodeStartTimeoutMs(options, env = process.env) {
   const defaultMs = DEFAULT_OPENCODE_START_TIMEOUT_SECONDS * 1e3;
   let raw;
@@ -9742,7 +10064,7 @@ function log2(state, message, level = "info") {
       })
     );
   } else if (!state.interactive) {
-    const prefix = level === "error" ? chalk6.red("\u2717") : level === "warn" ? chalk6.yellow("!") : level === "debug" ? chalk6.dim("\xB7") : chalk6.green("\u2022");
+    const prefix = level === "error" ? chalk7.red("\u2717") : level === "warn" ? chalk7.yellow("!") : level === "debug" ? chalk7.dim("\xB7") : chalk7.green("\u2022");
     console.log(`${prefix} ${message}`);
   }
 }
@@ -9772,7 +10094,7 @@ function logActivity(state, entry) {
 }
 function reportSessionDbRecovery(state) {
   try {
-    const report = drainSessionDbRecoveryReport({ homeDir: homedir5(), env: process.env });
+    const report = drainSessionDbRecoveryReport({ homeDir: homedir6(), env: process.env });
     for (const record of report.records) {
       const activity = buildSessionDbRecoveryActivity(record);
       if (!activity) throw new Error("could not map session-DB recovery record");
@@ -9803,18 +10125,18 @@ function reportSessionDbRecoveryRecord(state, record) {
 function displayStatus(state) {
   if (!state.interactive) return;
   const attempt = state.connection?.reconnectAttempt ?? 0;
-  const tunnel = state.connected ? chalk6.green("tunnel: connected") : attempt > 0 ? chalk6.yellow(`tunnel: reconnecting (#${attempt})`) : chalk6.yellow("tunnel: connecting");
-  const opencode = state.opencodeConnected ? chalk6.green(`opencode: :${state.port}`) : chalk6.red(`opencode: :${state.port} (down)`);
-  const messages = state.messageCount > 0 ? chalk6.dim(` \xB7 ${state.messageCount} processed`) : "";
+  const tunnel = state.connected ? chalk7.green("tunnel: connected") : attempt > 0 ? chalk7.yellow(`tunnel: reconnecting (#${attempt})`) : chalk7.yellow("tunnel: connecting");
+  const opencode = state.opencodeConnected ? chalk7.green(`opencode: :${state.port}`) : chalk7.red(`opencode: :${state.port} (down)`);
+  const messages = state.messageCount > 0 ? chalk7.dim(` \xB7 ${state.messageCount} processed`) : "";
   const last = state.activityLog[state.activityLog.length - 1];
-  const detail = last ? chalk6.dim(` \xB7 ${last.type === "error" ? last.error ?? "" : last.message ?? ""}`) : "";
+  const detail = last ? chalk7.dim(` \xB7 ${last.type === "error" ? last.error ?? "" : last.message ?? ""}`) : "";
   const agent = state.agentName ?? state.agentId;
   console.log(
-    `${chalk6.bold("Evident")} ${chalk6.dim(agent)}  ${tunnel}  ${opencode}${messages}${detail}`
+    `${chalk7.bold("Evident")} ${chalk7.dim(agent)}  ${tunnel}  ${opencode}${messages}${detail}`
   );
 }
 async function promptForLogin(promptMessage, successMessage) {
-  const action = await select3({
+  const action = await select4({
     message: promptMessage,
     choices: [
       {
@@ -9830,7 +10152,7 @@ async function promptForLogin(promptMessage, successMessage) {
     ]
   });
   if (action === "exit") {
-    console.log(chalk6.dim(`
+    console.log(chalk7.dim(`
 You can log in later by running: ${getCliName()} login`));
     process.exit(0);
   }
@@ -9841,7 +10163,7 @@ You can log in later by running: ${getCliName()} login`));
     process.exit(1);
   }
   blank();
-  console.log(chalk6.green(successMessage));
+  console.log(chalk7.green(successMessage));
   blank();
   return { token: credentials2.token, authType: "bearer", user: credentials2.user };
 }
@@ -9854,12 +10176,12 @@ async function handleAuthError(state, error2) {
   if (state.interactive) displayStatus(state);
   if (!state.interactive) {
     blank();
-    console.log(chalk6.red("Authentication expired"));
-    console.log(chalk6.dim("Your authentication token is no longer valid."));
+    console.log(chalk7.red("Authentication expired"));
+    console.log(chalk7.dim("Your authentication token is no longer valid."));
     blank();
-    console.log(chalk6.dim("To fix this:"));
-    console.log(chalk6.dim(`  1. Run '${getCliName()} login' to re-authenticate`));
-    console.log(chalk6.dim("  2. Restart this command"));
+    console.log(chalk7.dim("To fix this:"));
+    console.log(chalk7.dim(`  1. Run '${getCliName()} login' to re-authenticate`));
+    console.log(chalk7.dim("  2. Restart this command"));
     blank();
     await cleanup(state);
     await shutdownTelemetry();
@@ -9867,7 +10189,7 @@ async function handleAuthError(state, error2) {
     return { success: false };
   }
   blank();
-  console.log(chalk6.yellow("Your authentication has expired."));
+  console.log(chalk7.yellow("Your authentication has expired."));
   blank();
   try {
     const credentials2 = await promptForLogin(
@@ -9931,6 +10253,14 @@ async function driveChannels(state, driver) {
       const opencodeAuthApplied = opencodeAuthApplies !== lastSeenOpencodeAuthApplies;
       lastSeenOpencodeAuthApplies = opencodeAuthApplies;
       if (opencodeAuthApplied) state.openaiUsageRearm?.();
+      if (claudeCredentialApplied || opencodeAuthApplied) {
+        void reloadProviderCache(state.port).catch(
+          (error2) => logActivity(state, {
+            type: "error",
+            error: `OpenCode provider cache reload failed on port ${state.port}: ${error2 instanceof Error ? error2.message : String(error2)}`
+          })
+        );
+      }
       if (processed > 0 || driver.hasInFlightWatchers() || proxiedActivity || fileActivity) {
         idlePolls = 0;
         idleMs = 0;
@@ -9958,8 +10288,8 @@ async function driveChannels(state, driver) {
         state.running = false;
         break;
       }
-      const errorMessage2 = error2 instanceof Error ? error2.message : String(error2);
-      logActivity(state, { type: "error", error: `Channel processing error: ${errorMessage2}` });
+      const errorMessage3 = error2 instanceof Error ? error2.message : String(error2);
+      logActivity(state, { type: "error", error: `Channel processing error: ${errorMessage3}` });
       if (state.interactive) displayStatus(state);
       if (driver.hasInFlightWatchers()) {
         consecutiveDrainFailures = 0;
@@ -9997,9 +10327,18 @@ async function driveChannels(state, driver) {
   }
 }
 var SESSION_CLEANUP_FIRST_SWEEP_MS = 1e4;
-var SESSION_DB_RECLAIM_MAX_PAGES = 2e3;
+var SESSION_DB_RECLAIM_MAX_PAGES = 2e4;
+function shouldWarnForReclaimSkip(reason) {
+  if (reason !== "sqlite-unavailable") return false;
+  const version2 = /^v(\d+)\.(\d+)\.(\d+)$/.exec(process.version);
+  if (!version2) return false;
+  const major = Number(version2[1]);
+  const minor = Number(version2[2]);
+  const patch = Number(version2[3]);
+  return major > 22 || major === 22 && (minor > 13 || minor === 13 && patch >= 0);
+}
 function sessionDbPath() {
-  return join9(homedir5(), ".local", "share", "opencode", "opencode.db");
+  return join10(homedir6(), ".local", "share", "opencode", "opencode.db");
 }
 function logSessionDbProvenanceMismatch(state, provenance, currentVersion, preBootMigrationCount) {
   const record = {
@@ -10095,7 +10434,7 @@ async function runSweep(state, driver, config) {
     } else {
       logActivity(state, {
         type: "info",
-        message: `Session cleanup: session-db space reclaim skipped (${reclaimResult.skipped})`
+        message: `Session cleanup: session-db space reclaim skipped (${reclaimResult.skipped})` + (reclaimResult.detail ? `: ${reclaimResult.detail}` : "")
       });
     }
   } catch (error2) {
@@ -10118,13 +10457,20 @@ function scheduleSessionCleanup(state, driver, options) {
   for (const warning2 of config.warnings) {
     logActivity(state, { type: "info", level: "warn", message: `Session cleanup: ${warning2}` });
   }
-  const dbBytes = statSessionDbBytes(homedir5());
+  const dbBytes = statSessionDbBytes(homedir6());
   void (async () => {
-    const reclaimSkipReason = dbBytes !== null && config.enabled ? await probeReclaimAvailability({ dbPath: sessionDbPath(), requiredBytes: dbBytes }) : null;
+    const reclaimAvailability = dbBytes !== null && config.enabled ? await probeReclaimAvailability({ dbPath: sessionDbPath(), requiredBytes: dbBytes }) : null;
+    if (reclaimAvailability !== null) {
+      logActivity(state, {
+        type: "info",
+        level: shouldWarnForReclaimSkip(reclaimAvailability.reason) ? "warn" : "info",
+        message: `Session cleanup: reclaim preflight skipped (${reclaimAvailability.reason})` + (reclaimAvailability.detail ? `: ${reclaimAvailability.detail}` : "")
+      });
+    }
     const sizeWarning = buildSessionStoreSizeWarning({
       dbBytes,
       cleanupEnabled: config.enabled,
-      reclaimSkipReason
+      reclaimSkipReason: reclaimAvailability?.reason ?? null
     });
     if (sizeWarning !== null) {
       logActivity(state, { type: "info", level: "warn", message: sizeWarning });
@@ -10319,7 +10665,7 @@ function scheduleResourceUsageReporting(state, options) {
     });
     return;
   }
-  const { collect, stop } = createResourceUsageCollector(homedir5());
+  const { collect, stop } = createResourceUsageCollector(homedir6());
   state.stopResourceUsageSampling = stop;
   let consecutiveFailures = 0;
   const tick = async () => {
@@ -10416,6 +10762,8 @@ async function cleanup(state, opts = {}) {
     clearTimeout(timer);
   }
   state.sessionCleanupTimers = [];
+  state.stopOpenCodeLogTail?.();
+  state.stopOpenCodeLogTail = null;
   if (state.claudeUsageTimer) {
     clearTimeout(state.claudeUsageTimer);
     state.claudeUsageTimer = null;
@@ -10554,7 +10902,7 @@ async function run(options) {
   let fileSyncDirectories;
   try {
     logLevel = resolveLogLevel(options);
-    fileSyncDirectories = resolveFileSyncDirectories(options.enableFileSyncTo, homedir5());
+    fileSyncDirectories = resolveFileSyncDirectories(options.enableFileSyncTo, homedir6());
     if (options.restoreSessionDb && !options.sessionDbNoReplicateMarker) {
       throw new Error(
         "--restore-session-db requires --session-db-no-replicate-marker <path>; restore failures must block Litestream replication"
@@ -10585,6 +10933,7 @@ async function run(options) {
     opencodeVersion: null,
     sessionDbProvenanceAnomaly: false,
     opencodeProcess: null,
+    stopOpenCodeLogTail: null,
     litestreamProcess: null,
     connection: null,
     channelDriver: null,
@@ -10652,15 +11001,15 @@ async function run(options) {
         printError("Authentication required");
         blank();
         console.log(
-          chalk6.dim("Set EVIDENT_RUNNER_KEY (or EVIDENT_AGENT_KEY) environment variable for CI")
+          chalk7.dim("Set EVIDENT_RUNNER_KEY (or EVIDENT_AGENT_KEY) environment variable for CI")
         );
-        console.log(chalk6.dim("Or run `evident login` for interactive authentication"));
+        console.log(chalk7.dim("Or run `evident login` for interactive authentication"));
         blank();
         process.exit(1);
         return;
       }
       blank();
-      console.log(chalk6.yellow("You are not logged in to Evident."));
+      console.log(chalk7.yellow("You are not logged in to Evident."));
       blank();
       credentials2 = await promptForLogin(
         "Would you like to log in now?",
@@ -10710,7 +11059,7 @@ async function run(options) {
         );
         blank();
         console.log(
-          chalk6.dim(
+          chalk7.dim(
             "Either provide --runner/--agent <id> or set EVIDENT_RUNNER_KEY/EVIDENT_AGENT_KEY"
           )
         );
@@ -10733,15 +11082,15 @@ async function run(options) {
     );
     if (interactive && !state.json) {
       blank();
-      console.log(chalk6.bold("Evident Run"));
-      console.log(chalk6.dim("-".repeat(40)));
+      console.log(chalk7.bold("Evident Run"));
+      console.log(chalk7.dim("-".repeat(40)));
     }
     const spinner = interactive && !state.json ? ora3("Validating runner...").start() : null;
     let validation = await getAgentInfo(state.agentId, state.authHeader);
     if (!validation.valid && validation.authFailed && interactive) {
       spinner?.fail("Authentication failed");
       blank();
-      console.log(chalk6.yellow("Your authentication token is invalid or expired."));
+      console.log(chalk7.yellow("Your authentication token is invalid or expired."));
       blank();
       credentials2 = await promptForLogin(
         "Would you like to log in again?",
@@ -10789,6 +11138,13 @@ async function run(options) {
       if (githubTokenPopulated) await configureGitHubAccess(credentialContext);
     }
     state.credentialSync?.arm();
+    state.stopOpenCodeLogTail = tailOpenCodeLogFile(
+      resolveOpenCodeLogPath(homedir6(), process.env),
+      createOpenCodeActivityForwarder(() => ({
+        agentId: state.agentId,
+        authHeader: state.authHeader
+      }))
+    ).stop;
     let sessionDbVerifyFatal = false;
     if (!options.restoreSessionDb) {
       log2(state, "Skipping session-DB restore: --restore-session-db was not passed", "debug");
@@ -10838,6 +11194,13 @@ async function run(options) {
     for (const warning2 of opencodeStartTimeoutWarnings) {
       logActivity(state, { type: "info", level: "warn", message: warning2 });
     }
+    const { version: opencodeVersion, warnings: opencodeVersionWarnings } = resolveOpenCodeVersion(
+      options,
+      process.env
+    );
+    for (const warning2 of opencodeVersionWarnings) {
+      logActivity(state, { type: "info", level: "warn", message: warning2 });
+    }
     const { value: maxActiveSessions, warnings: maxActiveSessionsWarnings } = resolveMaxActiveSessions(options, process.env);
     for (const warning2 of maxActiveSessionsWarnings) {
       logActivity(state, { type: "info", level: "warn", message: warning2 });
@@ -10845,7 +11208,14 @@ async function run(options) {
     const preBootMigrationIds = readSessionDbMigrationIds(sessionDbPath());
     const ocSpinner = interactive && !state.json ? ora3("Checking OpenCode...").start() : null;
     try {
-      const oc = await ensureOpenCodeRunning({
+      const oc = opencodeVersion === "v2" ? await ensureOpenCode2Running({
+        port: state.port,
+        interactive: state.interactive,
+        agentId: state.agentId,
+        log: (message) => log2(state, message),
+        startTimeoutMs: opencodeStartTimeoutMs,
+        inheritStdio: Boolean(options.opencodePidFile)
+      }) : await ensureOpenCodeRunning({
         port: state.port,
         interactive: state.interactive,
         agentId: state.agentId,
@@ -10872,7 +11242,7 @@ async function run(options) {
         const provenance = checkSessionDbProvenance({
           dbPath: sessionDbPath(),
           currentVersion: state.opencodeVersion,
-          homeDir: homedir5(),
+          homeDir: homedir6(),
           env: process.env
         });
         if (provenance.anomaly) {
@@ -10907,10 +11277,10 @@ async function run(options) {
           if (state.interactive && !state.json) {
             logActivity(state, { type: "info", level: "warn", message: noProviderWarning });
             blank();
-            console.log(chalk6.yellow("\u26A0 No OpenCode model provider is configured."));
+            console.log(chalk7.yellow("\u26A0 No OpenCode model provider is configured."));
             console.log(
-              chalk6.dim(
-                `Run ${chalk6.cyan("opencode auth login")} to set one up \u2014 messages will fail until then.`
+              chalk7.dim(
+                `Run ${chalk7.cyan("opencode auth login")} to set one up \u2014 messages will fail until then.`
               )
             );
             blank();
@@ -11034,7 +11404,7 @@ async function run(options) {
       // #559: the `--enable-file-sync-to` allow-list. Empty ⇒ pending files are
       // REJECTED with `file_sync_disabled` on the ack, not silently ignored.
       fileSyncDirectories,
-      homeDir: homedir5(),
+      homeDir: homedir6(),
       maxActiveSessions,
       log: (entry) => (
         // Thread the driver's real level straight through so `debug`/`warn`
@@ -11276,6 +11646,9 @@ program.command("run").description("Connect to Evident and process messages").op
 ).option("-v, --verbose", "Alias for --log-level debug (ignored if --log-level is set)").option("-c, --conversation <id>", "Process only this specific conversation").option("--idle-timeout <seconds>", "Exit after N seconds idle").option(
   "--opencode-start-timeout <seconds>",
   "Seconds to wait for OpenCode to become healthy when the runner starts it (default: 180). Env: EVIDENT_OPENCODE_START_TIMEOUT"
+).option(
+  "--opencode-version <v1|v2>",
+  "Which OpenCode major version to launch: v1 or v2 (default: v1). Env: EVIDENT_OPENCODE_VERSION"
 ).option("--json", "Output in JSON format").option(
   "--session-cleanup-max-age <duration>",
   "Delete OpenCode sessions idle longer than this (e.g. 7d, 24h). Enables cleanup. Env: EVIDENT_SESSION_CLEANUP_MAX_AGE"
@@ -11344,6 +11717,7 @@ program.command("run").description("Connect to Evident and process messages").op
       // Raw string — validation/precedence is single-sourced in run.ts's
       // resolveOpenCodeStartTimeoutMs (flag > EVIDENT_OPENCODE_START_TIMEOUT > 180s default).
       opencodeStartTimeout: options.opencodeStartTimeout,
+      opencodeVersion: options.opencodeVersion,
       json: options.json,
       // Raw strings — the resolver in run.ts single-sources parsing (M1).
       sessionCleanupMaxAge: options.sessionCleanupMaxAge,