@opencode-cloud/core 10.4.0 → 12.0.0

package/Cargo.toml

@@ -1,8 +1,8 @@
 [package]
 name = "opencode-cloud-core"
-version = "10.4.0"
+version = "12.0.0"
 edition = "2024"
-rust-version = "1.88"
+rust-version = "1.89"
 license = "MIT"
 repository = "https://github.com/pRizz/opencode-cloud"
 homepage = "https://github.com/pRizz/opencode-cloud"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opencode-cloud/core",
-  "version": "10.4.0",
+  "version": "12.0.0",
   "description": "Core NAPI bindings for opencode-cloud (internal package)",
   "main": "index.js",
   "types": "index.d.ts",

package/src/config/validation.rs

@@ -96,26 +96,26 @@ pub fn validate_config(config: &Config) -> Result<Vec<ValidationWarning>, Valida
     }
 
     // Legacy auth fields present
-    if let Some(ref username) = config.auth_username {
-        if !username.is_empty() {
-            warnings.push(ValidationWarning {
-                field: "auth_username".to_string(),
-                message: "Legacy auth fields present; consider using 'occ user add' instead"
-                    .to_string(),
-                fix_command: "occ config set auth_username ''".to_string(),
-            });
-        }
+    if let Some(ref username) = config.auth_username
+        && !username.is_empty()
+    {
+        warnings.push(ValidationWarning {
+            field: "auth_username".to_string(),
+            message: "Legacy auth fields present; consider using 'occ user add' instead"
+                .to_string(),
+            fix_command: "occ config set auth_username ''".to_string(),
+        });
     }
 
-    if let Some(ref password) = config.auth_password {
-        if !password.is_empty() {
-            warnings.push(ValidationWarning {
-                field: "auth_password".to_string(),
-                message: "Legacy auth fields present; consider using 'occ user add' instead"
-                    .to_string(),
-                fix_command: "occ config set auth_password ''".to_string(),
-            });
-        }
+    if let Some(ref password) = config.auth_password
+        && !password.is_empty()
+    {
+        warnings.push(ValidationWarning {
+            field: "auth_password".to_string(),
+            message: "Legacy auth fields present; consider using 'occ user add' instead"
+                .to_string(),
+            fix_command: "occ config set auth_password ''".to_string(),
+        });
     }
 
     Ok(warnings)

package/src/docker/Dockerfile

@@ -4,7 +4,7 @@
 # A comprehensive development environment for AI-assisted coding with opencode.
 #
 # Features:
-# - Ubuntu 24.04 LTS (noble) base
+# - Ubuntu 25.10 (questing) base
 # - Non-root user with passwordless sudo
 # - Multiple languages via mise (Node.js, Python, Rust, Go)
 # - Modern CLI tools (ripgrep, eza, fzf, lazygit, etc.)
@@ -26,13 +26,13 @@
 # - Self-managing installers (mise, rustup, etc.) trusted to handle versions
 #
 # To check for updates: just check-updates
-# Last version audit: 2026-01-22
+# Last version audit: 2026-02-03
 # -----------------------------------------------------------------------------
 
 # -----------------------------------------------------------------------------
 # Stage 1: Base
 # -----------------------------------------------------------------------------
-FROM ubuntu:24.04 AS base
+FROM ubuntu:25.10 AS base
 
 # OCI Labels for image metadata
 LABEL org.opencontainers.image.title="opencode-cloud"
@@ -45,7 +45,7 @@ LABEL org.opencontainers.image.url="https://github.com/pRizz/opencode-cloud"
 LABEL org.opencontainers.image.source="https://github.com/pRizz/opencode-cloud"
 LABEL org.opencontainers.image.vendor="pRizz"
 LABEL org.opencontainers.image.licenses="MIT"
-LABEL org.opencontainers.image.base.name="ubuntu:24.04"
+LABEL org.opencontainers.image.base.name="ubuntu:25.10"
 
 # Environment configuration
 ENV DEBIAN_FRONTEND=noninteractive
@@ -58,7 +58,7 @@ ENV LC_ALL=C.UTF-8
 # -----------------------------------------------------------------------------
 # Install core system packages in logical groups for better caching
 
-# Group 1: Core utilities and build tools (2026-01-22)
+# Group 1: Core utilities and build tools (2026-02-03)
 # Use BuildKit cache mount for APT package lists and cache
 RUN --mount=type=cache,target=/var/lib/apt/lists \
     --mount=type=cache,target=/var/cache/apt \
@@ -67,51 +67,51 @@ RUN --mount=type=cache,target=/var/lib/apt/lists \
     tini=0.19.* \
     dumb-init=1.2.* \
     # systemd for Cockpit support
-    systemd=255.* \
-    systemd-sysv=255.* \
-    dbus=1.14.* \
+    systemd=257.* \
+    systemd-sysv=257.* \
+    dbus=1.16.* \
     # Shell and terminal
     zsh=5.9-* \
-    tmux=3.4-* \
+    tmux=3.5a-* \
     # Editors
     vim=2:9.1.* \
-    neovim=0.9.* \
-    nano=7.2-* \
+    neovim=0.10.* \
+    nano=8.4-* \
     # Build essentials
     build-essential=12.* \
     pkg-config=1.8.* \
-    cmake=3.28.* \
+    cmake=3.31.* \
     # Version control
-    git=1:2.43.* \
-    git-lfs=3.4.* \
+    git=1:2.51.* \
+    git-lfs=3.6.* \
     # Core utilities
-    curl=8.5.* \
-    wget=1.21.* \
+    curl=8.14.* \
+    wget=1.25.* \
     # UNPINNED: ca-certificates - security-critical root certs, needs auto-updates
     ca-certificates \
     # UNPINNED: gnupg - key management security, needs auto-updates
     gnupg \
     lsb-release=12.* \
-    software-properties-common=0.99.* \
+    software-properties-common=0.114* \
     sudo=1.9.* \
     # UNPINNED: openssh-client - security-critical, needs auto-updates
     openssh-client \
     # Process/system tools
-    htop=3.3.* \
+    htop=3.4.* \
     procps=2:4.0.* \
-    less=590-* \
-    file=1:5.45-* \
-    tree=2.1.* \
+    less=668-* \
+    file=1:5.46-* \
+    tree=2.2.* \
     # JSON/YAML processing
-    jq=1.7.* \
+    jq=1.8.* \
     # Network tools
-    netcat-openbsd=1.226-* \
-    iputils-ping=3:20240117-* \
-    dnsutils=1:9.18.* \
+    netcat-openbsd=1.229-* \
+    iputils-ping=3:20240905-* \
+    bind9-dnsutils=1:9.20.* \
     # Compression
     zip=3.0-* \
     unzip=6.0-* \
-    xz-utils=5.6.* \
+    xz-utils=5.8.* \
     p7zip-full=16.02* \
     && rm -rf /var/lib/apt/lists/*
 
@@ -123,32 +123,32 @@ RUN systemctl mask \
     systemd-tmpfiles-setup.service \
     systemd-remount-fs.service
 
-# Group 2: Database clients (2026-01-22)
+# Group 2: Database clients (2026-02-03)
 # Use BuildKit cache mount for APT package lists and cache
 RUN --mount=type=cache,target=/var/lib/apt/lists \
     --mount=type=cache,target=/var/cache/apt \
     apt-get update && apt-get install -y --no-install-recommends \
-    sqlite3=3.45.* \
-    postgresql-client=16+* \
+    sqlite3=3.46.* \
+    postgresql-client=17+* \
     default-mysql-client=1.1.* \
     && rm -rf /var/lib/apt/lists/*
 
-# Group 3: Development libraries for compiling tools (2026-01-22)
+# Group 3: Development libraries for compiling tools (2026-02-03)
 # Use BuildKit cache mount for APT package lists and cache
 RUN --mount=type=cache,target=/var/lib/apt/lists \
     --mount=type=cache,target=/var/cache/apt \
     apt-get update && apt-get install -y --no-install-recommends \
     # libssl-dev depends on libssl3t64 with exact version match
-    libssl3t64=3.0.* \
-    libssl-dev=3.0.* \
-    libffi-dev=3.4.* \
+    libssl3t64=3.5.* \
+    libssl-dev=3.5.* \
+    libffi-dev=3.5.* \
     zlib1g-dev=1:1.3.* \
     libbz2-dev=1.0.* \
-    libreadline-dev=8.2-* \
-    libsqlite3-dev=3.45.* \
-    libncurses-dev=6.4+* \
-    libpam0g-dev=1.5.* \
-    liblzma-dev=5.6.* \
+    libreadline-dev=8.3-* \
+    libsqlite3-dev=3.46.* \
+    libncurses-dev=6.5+* \
+    libpam0g-dev=1.7.* \
+    liblzma-dev=5.8.* \
     && rm -rf /var/lib/apt/lists/*
 
 # -----------------------------------------------------------------------------
@@ -198,16 +198,16 @@ ENV PATH="/home/opencode/.local/bin:${PATH}"
 RUN curl https://mise.run | sh \
     && echo 'eval "$(/home/opencode/.local/bin/mise activate zsh)"' >> /home/opencode/.zshrc
 
-# Install language runtimes via mise (2026-01-22)
-# - node@lts: mise handles LTS resolution (currently 22.x)
-# - python@3.12: pinned to minor version
-# - go@1.24: pinned to minor version (was @latest)
-RUN /home/opencode/.local/bin/mise install node@lts \
-    && /home/opencode/.local/bin/mise install python@3.12 \
-    && /home/opencode/.local/bin/mise install go@1.24 \
-    && /home/opencode/.local/bin/mise use --global node@lts \
-    && /home/opencode/.local/bin/mise use --global python@3.12 \
-    && /home/opencode/.local/bin/mise use --global go@1.24
+# Install language runtimes via mise (2026-02-03)
+# - node@25: pinned to major version
+# - python@3.14: pinned to major version
+# - go@1.25: pinned to minor version
+RUN /home/opencode/.local/bin/mise install node@25 \
+    && /home/opencode/.local/bin/mise install python@3.14 \
+    && /home/opencode/.local/bin/mise install go@1.25 \
+    && /home/opencode/.local/bin/mise use --global node@25 \
+    && /home/opencode/.local/bin/mise use --global python@3.14 \
+    && /home/opencode/.local/bin/mise use --global go@1.25
 
 # Set up mise shims in PATH for non-interactive shells
 ENV PATH="/home/opencode/.local/share/mise/shims:${PATH}"
@@ -230,24 +230,25 @@ ENV PATH="/home/opencode/.cargo/bin:${PATH}"
 # Switch to bash for mise activation (mise outputs bash-specific syntax)
 SHELL ["/bin/bash", "-c"]
 
-# Install pnpm 10.x via corepack (2026-01-22)
+# Install pnpm 10.x via corepack (2026-02-03)
 RUN eval "$(/home/opencode/.local/bin/mise activate bash)" \
+    && npm install -g corepack \
     && corepack enable \
-    && corepack prepare pnpm@10.28.1 --activate
+    && corepack prepare pnpm@10.28.2 --activate
 
 # Set up pnpm global bin directory
 ENV PNPM_HOME="/home/opencode/.local/share/pnpm"
 ENV PATH="${PNPM_HOME}:${PATH}"
 RUN mkdir -p "${PNPM_HOME}"
 
-# bun - self-managing installer, trusted to handle versions
+# bun - self-managing installer, pinned to version (2026-02-03)
 RUN curl -fsSL https://bun.sh/install | bash -s "bun-v1.3.5" \
     && rm -rf /home/opencode/.bun/install/cache /home/opencode/.bun/cache /home/opencode/.cache/bun
 
 ENV PATH="/home/opencode/.bun/bin:${PATH}"
 
-# uv - self-managing installer, trusted to handle versions (fast Python package manager)
-RUN curl -LsSf https://astral.sh/uv/install.sh | sh
+# uv - pinned installer (fast Python package manager) (2026-02-03)
+RUN curl -LsSf https://github.com/astral-sh/uv/releases/download/0.9.21/uv-installer.sh | sh
 
 # Install pipx for isolated Python application installs
 # Use BuildKit cache mount for pip cache
@@ -260,7 +261,7 @@ RUN --mount=type=cache,target=/home/opencode/.cache/pip,uid=1000,gid=1000,mode=0
 # Install global TypeScript compiler
 # NOTE: Avoid cache mount here to prevent pnpm store permission issues
 RUN eval "$(/home/opencode/.local/bin/mise activate bash)" \
-    && pnpm add -g typescript
+    && pnpm add -g typescript@5.9.2
 
 # -----------------------------------------------------------------------------
 # Modern CLI Tools (Rust-based) - pinned versions (2026-01-22)
@@ -315,7 +316,7 @@ RUN mkdir -p /home/opencode/.cargo/registry /home/opencode/.cargo/git \
 # RUN eval "$(/home/opencode/.local/bin/mise activate bash)" \
 #     && go install mvdan.cc/sh/v3/cmd/shfmt@v3.12.0
 
-# Install btop system monitor (2026-01-22)
+# Install btop system monitor (2026-02-03)
 # Use BuildKit cache mount for APT package lists and cache
 USER root
 RUN --mount=type=cache,target=/var/lib/apt/lists \
@@ -342,7 +343,7 @@ USER opencode
 # Cockpit Web Console (2026-01-22) - temporarily disabled
 # -----------------------------------------------------------------------------
 # Cockpit provides web-based administration for the container
-# Ubuntu noble has cockpit 316 in main repos
+# Ubuntu questing has cockpit 346 in main repos
 # Use BuildKit cache mount for APT package lists and cache
 # USER root
 # RUN --mount=type=cache,target=/var/lib/apt/lists \
@@ -527,8 +528,11 @@ USER opencode
 # -----------------------------------------------------------------------------
 # Clone the fork and build opencode from source (as non-root user)
 # Pin to specific commit for reproducibility
+# NOTE: OPENCODE_COMMIT is not tied to releases/tags; it tracks the latest stable
+# commit on the main branch of https://github.com/pRizz/opencode.
+# Update it by running: ./scripts/update-opencode-commit.sh
 # Build opencode from source (BuildKit cache mounts disabled for now)
-RUN OPENCODE_COMMIT="8a63844a3d3166273a83d5e94d8820d62ad82510" \
+RUN OPENCODE_COMMIT="cfe79755427fd8d3b94be76e1c7912bdc943a8ab" \
     && rm -rf /tmp/opencode-repo \
     && git clone --depth 1 https://github.com/pRizz/opencode.git /tmp/opencode-repo \
     && cd /tmp/opencode-repo \
@@ -726,7 +730,7 @@ RUN /opt/opencode/bin/opencode --version
 # Note: If this fails in container builds due to "~" path resolution, retry with
 # OPENCODE_CONFIG_DIR=/home/opencode/.config/opencode set explicitly.
 RUN mkdir -p /home/opencode/.npm \
-    && npx --yes get-shit-done-cc --opencode --global \
+    && npx --yes get-shit-done-cc@1.11.1 --opencode --global \
     && rm -rf /home/opencode/.npm/_cacache /home/opencode/.npm/_npx
 
 # -----------------------------------------------------------------------------

package/src/docker/README.dockerhub.md

@@ -7,9 +7,9 @@ https://github.com/pRizz/opencode-cloud (mirror: https://gitea.com/pRizz/opencod
 
 ## What is included
 
-- Ubuntu 24.04 (noble)
+- Ubuntu 25.10 (questing)
 - Non-root user with passwordless sudo
-- mise-managed runtimes (Node.js LTS, Python 3.12, Go 1.24)
+- mise-managed runtimes (Node.js 25, Python 3.14, Go 1.25)
 - Rust toolchain via rustup
 - Core CLI utilities (ripgrep, eza, jq, git, etc.)
 - opencode preinstalled with the GSD plugin

package/src/docker/image.rs

@@ -801,7 +801,7 @@ mod tests {
     #[test]
     fn format_build_error_includes_recent_logs() {
         let mut logs = VecDeque::new();
-        logs.push_back("Step 1/5 : FROM ubuntu:22.04".to_string());
+        logs.push_back("Step 1/5 : FROM ubuntu:24.04".to_string());
         logs.push_back("Step 2/5 : RUN apt-get update".to_string());
         logs.push_back("E: Unable to fetch some archives".to_string());
         let error_logs = VecDeque::new();

package/src/docker/progress.rs

@@ -210,17 +210,17 @@ impl ProgressReporter {
 
         // Check if we should throttle this update
         if !is_step_message {
-            if let Some(last) = self.last_update_by_id.get(id) {
-                if now.duration_since(*last) < SPINNER_UPDATE_THROTTLE {
-                    return; // Throttle: too soon since last update
-                }
+            if let Some(last) = self.last_update_by_id.get(id)
+                && now.duration_since(*last) < SPINNER_UPDATE_THROTTLE
+            {
+                return; // Throttle: too soon since last update
             }
 
             // Skip if message is identical to last one
-            if let Some(last_msg) = self.last_message_by_id.get(id) {
-                if last_msg == message {
-                    return;
-                }
+            if let Some(last_msg) = self.last_message_by_id.get(id)
+                && last_msg == message
+            {
+                return;
             }
         }
 

package/src/docker/state.rs

@@ -71,10 +71,10 @@ pub fn load_state() -> Option<ImageState> {
 
 /// Clear image state (e.g., after image removal)
 pub fn clear_state() -> anyhow::Result<()> {
-    if let Some(path) = get_state_path() {
-        if path.exists() {
-            std::fs::remove_file(&path)?;
-        }
+    if let Some(path) = get_state_path()
+        && path.exists()
+    {
+        std::fs::remove_file(&path)?;
     }
     Ok(())
 }

package/src/host/provision.rs

@@ -44,9 +44,9 @@ pub struct DistroInfo {
     pub family: DistroFamily,
     /// Distribution ID (e.g., "ubuntu", "amzn", "debian")
     pub id: String,
-    /// Pretty name (e.g., "Ubuntu 22.04.3 LTS")
+    /// Pretty name (e.g., "Ubuntu 24.04 LTS")
     pub pretty_name: String,
-    /// Version ID (e.g., "22.04", "2023")
+    /// Version ID (e.g., "24.04", "2023")
     pub version_id: Option<String>,
 }
 
@@ -327,18 +327,18 @@ mod tests {
     #[test]
     fn test_parse_os_release_ubuntu() {
         let content = r#"
-PRETTY_NAME="Ubuntu 22.04.3 LTS"
+PRETTY_NAME="Ubuntu 24.04 LTS"
 NAME="Ubuntu"
-VERSION_ID="22.04"
-VERSION="22.04.3 LTS (Jammy Jellyfish)"
-VERSION_CODENAME=jammy
+VERSION_ID="24.04"
+VERSION="24.04 LTS (Noble Numbat)"
+VERSION_CODENAME=noble
 ID=ubuntu
 ID_LIKE=debian
 "#;
         let info = parse_os_release(content).unwrap();
         assert_eq!(info.family, DistroFamily::Debian);
         assert_eq!(info.id, "ubuntu");
-        assert_eq!(info.version_id, Some("22.04".to_string()));
+        assert_eq!(info.version_id, Some("24.04".to_string()));
     }
 
     #[test]
@@ -375,8 +375,8 @@ ID=debian
         let debian_info = DistroInfo {
             family: DistroFamily::Debian,
             id: "ubuntu".to_string(),
-            pretty_name: "Ubuntu 22.04".to_string(),
-            version_id: Some("22.04".to_string()),
+            pretty_name: "Ubuntu 24.04".to_string(),
+            version_id: Some("24.04".to_string()),
         };
         let commands = get_docker_install_commands(&debian_info).unwrap();
         assert!(!commands.is_empty());

package/src/host/schema.rs

@@ -139,10 +139,10 @@ impl HostConfig {
         let mut parts = vec!["ssh".to_string()];
 
         // Port (if non-default)
-        if let Some(port) = self.port {
-            if port != 22 {
-                parts.push(format!("-p {port}"));
-            }
+        if let Some(port) = self.port
+            && port != 22
+        {
+            parts.push(format!("-p {port}"));
         }
 
         // Identity file

package/src/host/ssh_config.rs

@@ -137,21 +137,21 @@ pub fn write_ssh_config_entry(
     })?;
 
     // Ensure .ssh directory exists with proper permissions
-    if let Some(ssh_dir) = config_path.parent() {
-        if !ssh_dir.exists() {
-            fs::create_dir_all(ssh_dir).map_err(|e| {
-                HostError::SshConfigWrite(format!("Failed to create .ssh directory: {e}"))
-            })?;
+    if let Some(ssh_dir) = config_path.parent()
+        && !ssh_dir.exists()
+    {
+        fs::create_dir_all(ssh_dir).map_err(|e| {
+            HostError::SshConfigWrite(format!("Failed to create .ssh directory: {e}"))
+        })?;
 
-            // Set directory permissions to 700 on Unix
-            #[cfg(unix)]
-            {
-                use std::os::unix::fs::PermissionsExt;
-                let perms = fs::Permissions::from_mode(0o700);
-                fs::set_permissions(ssh_dir, perms).map_err(|e| {
-                    HostError::SshConfigWrite(format!("Failed to set .ssh permissions: {e}"))
-                })?;
-            }
+        // Set directory permissions to 700 on Unix
+        #[cfg(unix)]
+        {
+            use std::os::unix::fs::PermissionsExt;
+            let perms = fs::Permissions::from_mode(0o700);
+            fs::set_permissions(ssh_dir, perms).map_err(|e| {
+                HostError::SshConfigWrite(format!("Failed to set .ssh permissions: {e}"))
+            })?;
         }
     }
 
@@ -164,10 +164,10 @@ pub fn write_ssh_config_entry(
     if let Some(u) = user {
         entry.push_str(&format!("    User {u}\n"));
     }
-    if let Some(p) = port {
-        if p != 22 {
-            entry.push_str(&format!("    Port {p}\n"));
-        }
+    if let Some(p) = port
+        && p != 22
+    {
+        entry.push_str(&format!("    Port {p}\n"));
     }
     if let Some(key) = identity_file {
         entry.push_str(&format!("    IdentityFile {key}\n"));

package/src/host/storage.rs

@@ -54,11 +54,11 @@ pub fn save_hosts(hosts: &HostsFile) -> Result<(), HostError> {
         .ok_or_else(|| HostError::SaveFailed("Could not determine hosts file path".to_string()))?;
 
     // Ensure config directory exists
-    if let Some(parent) = hosts_path.parent() {
-        if !parent.exists() {
-            fs::create_dir_all(parent)
-                .map_err(|e| HostError::SaveFailed(format!("Failed to create directory: {e}")))?;
-        }
+    if let Some(parent) = hosts_path.parent()
+        && !parent.exists()
+    {
+        fs::create_dir_all(parent)
+            .map_err(|e| HostError::SaveFailed(format!("Failed to create directory: {e}")))?;
     }
 
     // Create backup if file exists