@getmonoceros/workbench 1.22.2 → 1.23.1

package/bundled-components/features/atlassian/component.yml

@@ -35,7 +35,7 @@ options:
     description: "Optional Bitbucket app password; only needed for twg's Bitbucket commands."
     surface: env
 feature:
-  version: 1.0.0
+  version: 1.1.0
   persistentHomePaths: [.config/acli, .rovodev, .config/twg, .agents]
   vscodeExtensions: [Atlassian.atlascode]
 briefing:

package/bundled-components/features/atlassian/install.sh

@@ -159,11 +159,23 @@ TWG_LOGIN_INPUT
 
 # (Re-)install twg's agent skills. Canonical install lands in
 # /home/node/.agents/skills/twg (persisted via the feature's
-# persistentHomePaths); per-agent wrapper scripts go into agent-
-# specific home dirs (.claude/skills/twg, .codex/skills/twg, …)
-# and are regenerated on each apply when those tools are present.
+# persistentHomePaths); .agents/skills-native agents (codex, cursor,
+# gemini, copilot, …) read it directly. Agents with their own skills
+# dir (claude → .claude/skills, opencode → .opencode/skills) need an
+# explicit --agent flag, so we detect which AI CLIs are present in this
+# container and pass the matching flags. This keeps the atlassian
+# feature decoupled from the container's feature list — it reacts to
+# whatever is actually installed. Idempotent: re-running just refreshes
+# the wrappers.
 echo "[atlassian/twg] (re-)installing twg skills"
-twg skills install --global --yes
+TWG_SKILL_AGENTS=()
+if command -v claude >/dev/null 2>&1; then
+  TWG_SKILL_AGENTS+=(--agent claude)
+fi
+if command -v opencode >/dev/null 2>&1; then
+  TWG_SKILL_AGENTS+=(--agent opencode)
+fi
+twg skills install --global --yes "\${TWG_SKILL_AGENTS[@]}"
 EOF
     chmod 0755 "${HOOK}"
     echo "[atlassian/twg] post-create login hook installed"

package/bundled-components/features/opencode/component.yml

@@ -0,0 +1,37 @@
+id: opencode
+name: opencode
+category: feature
+displayName: OpenCode
+description: "sst's open-source, provider-agnostic AI coding agent (TUI). Model + provider key configurable; auth and session state persist across container rebuilds."
+documentationURL: https://opencode.ai/docs/
+options:
+  version:
+    type: string
+    default: latest
+    description: 'npm-style version spec for `opencode-ai` (`latest`, `^0.4`, `0.4.2`).'
+    surface: silent
+  model:
+    type: string
+    default: ''
+    description: 'Default model as `provider/model-id` (e.g. `anthropic/claude-sonnet-4-6`, `openai/gpt-4o-mini`). The provider is derived from the prefix before `/`. Empty: pick interactively on first run.'
+    surface: yml
+  apiToken:
+    type: string
+    default: ''
+    description: 'API key for the model provider (derived from `model`); written to `provider.<x>.options.apiKey` in opencode.json. Empty for `opencode auth login` on first run.'
+    surface: env
+  npm:
+    type: string
+    default: ''
+    description: 'Custom/local providers only (e.g. Ollama): the AI-SDK driver package, usually `@ai-sdk/openai-compatible`. Setting this switches `model` to custom-provider mode and builds a full provider block from `model` + `baseUrl`. Empty for hosted providers.'
+    surface: silent
+  baseUrl:
+    type: string
+    default: ''
+    description: 'Custom/local providers only: the endpoint URL, e.g. `http://ollama:11434/v1` (a service on the Docker network). Used together with `npm`.'
+    surface: silent
+feature:
+  version: 1.0.0
+  persistentHomePaths: [.config/opencode, .local/share/opencode]
+briefing:
+  - text: 'OpenCode (`opencode`) — open-source, provider-agnostic AI coding agent. Reads this AGENTS.md as project instructions. Model + provider key (when set in the yml) live in `~/.config/opencode/opencode.json`; otherwise authenticate once with `opencode auth login`.'

package/bundled-components/features/opencode/install.sh

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+# Monoceros devcontainer feature: opencode.
+#
+# Installs sst's OpenCode CLI globally via the npm registry (package
+# `opencode-ai`). Model selection and the provider API key are NOT
+# handled here — they are written to ~/.config/opencode/opencode.json
+# at `monoceros apply` (see create/opencode-config.ts), so a change to
+# the yml takes effect on the next apply instead of being frozen by the
+# feature's cached image layer (ADR 0018). Auth/session state lives
+# under ~/.config/opencode and ~/.local/share/opencode, both
+# bind-mounted from the host so they survive apply rebuilds.
+
+set -euo pipefail
+
+VERSION="${VERSION:-latest}"
+
+echo "[opencode] installing opencode-ai@${VERSION} (as node)"
+
+# Install as the non-root `node` user, NOT root (this script runs as
+# root). The base image's npm global prefix is owned by `node`, so
+# installing as node leaves the package files node-owned — which is what
+# lets OpenCode's runtime self-updater keep itself current between
+# Monoceros `upgrade`s. Installing as root would freeze the version at
+# build time with no-write-permission errors. Same rationale as the
+# claude-code feature (ADR 0018).
+runuser -u node -- bash -lc \
+  "npm install -g --no-audit --no-fund 'opencode-ai@${VERSION}'"
+
+runuser -u node -- bash -lc 'opencode --version' >/dev/null 2>&1 || {
+  echo "[opencode] ERROR: install completed but \`opencode\` is not on PATH" >&2
+  exit 1
+}
+
+echo "[opencode] installed — model + provider key (if set in the yml) are written to ~/.config/opencode/opencode.json by \`monoceros apply\`; otherwise run \`opencode auth login\` once in the container"
+echo "[opencode] done"