@opencode-cloud/core 11.0.0 → 12.0.1

package/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "opencode-cloud-core"
-version = "11.0.0"
+version = "12.0.1"
 edition = "2024"
 rust-version = "1.89"
 license = "MIT"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opencode-cloud/core",
-  "version": "11.0.0",
+  "version": "12.0.1",
   "description": "Core NAPI bindings for opencode-cloud (internal package)",
   "main": "index.js",
   "types": "index.d.ts",

package/src/docker/Dockerfile

@@ -4,7 +4,7 @@
 # A comprehensive development environment for AI-assisted coding with opencode.
 #
 # Features:
-# - Ubuntu 24.04 LTS (noble) base
+# - Ubuntu 25.10 (questing) base
 # - Non-root user with passwordless sudo
 # - Multiple languages via mise (Node.js, Python, Rust, Go)
 # - Modern CLI tools (ripgrep, eza, fzf, lazygit, etc.)
@@ -26,13 +26,13 @@
 # - Self-managing installers (mise, rustup, etc.) trusted to handle versions
 #
 # To check for updates: just check-updates
-# Last version audit: 2026-01-22
+# Last version audit: 2026-02-03
 # -----------------------------------------------------------------------------
 
 # -----------------------------------------------------------------------------
 # Stage 1: Base
 # -----------------------------------------------------------------------------
-FROM ubuntu:24.04 AS base
+FROM ubuntu:25.10 AS base
 
 # OCI Labels for image metadata
 LABEL org.opencontainers.image.title="opencode-cloud"
@@ -45,7 +45,7 @@ LABEL org.opencontainers.image.url="https://github.com/pRizz/opencode-cloud"
 LABEL org.opencontainers.image.source="https://github.com/pRizz/opencode-cloud"
 LABEL org.opencontainers.image.vendor="pRizz"
 LABEL org.opencontainers.image.licenses="MIT"
-LABEL org.opencontainers.image.base.name="ubuntu:24.04"
+LABEL org.opencontainers.image.base.name="ubuntu:25.10"
 
 # Environment configuration
 ENV DEBIAN_FRONTEND=noninteractive
@@ -58,7 +58,7 @@ ENV LC_ALL=C.UTF-8
 # -----------------------------------------------------------------------------
 # Install core system packages in logical groups for better caching
 
-# Group 1: Core utilities and build tools (2026-01-22)
+# Group 1: Core utilities and build tools (2026-02-03)
 # Use BuildKit cache mount for APT package lists and cache
 RUN --mount=type=cache,target=/var/lib/apt/lists \
     --mount=type=cache,target=/var/cache/apt \
@@ -67,51 +67,51 @@ RUN --mount=type=cache,target=/var/lib/apt/lists \
     tini=0.19.* \
     dumb-init=1.2.* \
     # systemd for Cockpit support
-    systemd=255.* \
-    systemd-sysv=255.* \
-    dbus=1.14.* \
+    systemd=257.* \
+    systemd-sysv=257.* \
+    dbus=1.16.* \
     # Shell and terminal
     zsh=5.9-* \
-    tmux=3.4-* \
+    tmux=3.5a-* \
     # Editors
     vim=2:9.1.* \
-    neovim=0.9.* \
-    nano=7.2-* \
+    neovim=0.10.* \
+    nano=8.4-* \
     # Build essentials
     build-essential=12.* \
     pkg-config=1.8.* \
-    cmake=3.28.* \
+    cmake=3.31.* \
     # Version control
-    git=1:2.43.* \
-    git-lfs=3.4.* \
+    git=1:2.51.* \
+    git-lfs=3.6.* \
     # Core utilities
-    curl=8.5.* \
-    wget=1.21.* \
+    curl=8.14.* \
+    wget=1.25.* \
     # UNPINNED: ca-certificates - security-critical root certs, needs auto-updates
     ca-certificates \
     # UNPINNED: gnupg - key management security, needs auto-updates
     gnupg \
     lsb-release=12.* \
-    software-properties-common=0.99.* \
+    software-properties-common=0.114* \
     sudo=1.9.* \
     # UNPINNED: openssh-client - security-critical, needs auto-updates
     openssh-client \
     # Process/system tools
-    htop=3.3.* \
+    htop=3.4.* \
     procps=2:4.0.* \
-    less=590-* \
-    file=1:5.45-* \
-    tree=2.1.* \
+    less=668-* \
+    file=1:5.46-* \
+    tree=2.2.* \
     # JSON/YAML processing
-    jq=1.7.* \
+    jq=1.8.* \
     # Network tools
-    netcat-openbsd=1.226-* \
-    iputils-ping=3:20240117-* \
-    dnsutils=1:9.18.* \
+    netcat-openbsd=1.229-* \
+    iputils-ping=3:20240905-* \
+    bind9-dnsutils=1:9.20.* \
     # Compression
     zip=3.0-* \
     unzip=6.0-* \
-    xz-utils=5.6.* \
+    xz-utils=5.8.* \
     p7zip-full=16.02* \
     && rm -rf /var/lib/apt/lists/*
 
@@ -123,32 +123,32 @@ RUN systemctl mask \
     systemd-tmpfiles-setup.service \
     systemd-remount-fs.service
 
-# Group 2: Database clients (2026-01-22)
+# Group 2: Database clients (2026-02-03)
 # Use BuildKit cache mount for APT package lists and cache
 RUN --mount=type=cache,target=/var/lib/apt/lists \
     --mount=type=cache,target=/var/cache/apt \
     apt-get update && apt-get install -y --no-install-recommends \
-    sqlite3=3.45.* \
-    postgresql-client=16+* \
+    sqlite3=3.46.* \
+    postgresql-client=17+* \
     default-mysql-client=1.1.* \
     && rm -rf /var/lib/apt/lists/*
 
-# Group 3: Development libraries for compiling tools (2026-01-22)
+# Group 3: Development libraries for compiling tools (2026-02-03)
 # Use BuildKit cache mount for APT package lists and cache
 RUN --mount=type=cache,target=/var/lib/apt/lists \
     --mount=type=cache,target=/var/cache/apt \
     apt-get update && apt-get install -y --no-install-recommends \
     # libssl-dev depends on libssl3t64 with exact version match
-    libssl3t64=3.0.* \
-    libssl-dev=3.0.* \
-    libffi-dev=3.4.* \
+    libssl3t64=3.5.* \
+    libssl-dev=3.5.* \
+    libffi-dev=3.5.* \
     zlib1g-dev=1:1.3.* \
     libbz2-dev=1.0.* \
-    libreadline-dev=8.2-* \
-    libsqlite3-dev=3.45.* \
-    libncurses-dev=6.4+* \
-    libpam0g-dev=1.5.* \
-    liblzma-dev=5.6.* \
+    libreadline-dev=8.3-* \
+    libsqlite3-dev=3.46.* \
+    libncurses-dev=6.5+* \
+    libpam0g-dev=1.7.* \
+    liblzma-dev=5.8.* \
     && rm -rf /var/lib/apt/lists/*
 
 # -----------------------------------------------------------------------------
@@ -198,16 +198,24 @@ ENV PATH="/home/opencode/.local/bin:${PATH}"
 RUN curl https://mise.run | sh \
     && echo 'eval "$(/home/opencode/.local/bin/mise activate zsh)"' >> /home/opencode/.zshrc
 
-# Install language runtimes via mise (2026-01-22)
-# - node@lts: mise handles LTS resolution (currently 22.x)
-# - python@3.12: pinned to minor version
-# - go@1.24: pinned to minor version (was @latest)
-RUN /home/opencode/.local/bin/mise install node@lts \
-    && /home/opencode/.local/bin/mise install python@3.12 \
-    && /home/opencode/.local/bin/mise install go@1.24 \
-    && /home/opencode/.local/bin/mise use --global node@lts \
-    && /home/opencode/.local/bin/mise use --global python@3.12 \
-    && /home/opencode/.local/bin/mise use --global go@1.24
+# Install language runtimes via mise (2026-02-03)
+# - node@25: pinned to major version
+# - python@3.13: pinned to major version (3.13 has precompiled binaries available)
+# - go@1.25: pinned to minor version
+#
+# MISE_PYTHON_COMPILE=0: Disable Python compilation from source.
+# If no precompiled binary exists, mise will fail fast instead of hanging
+# during a 30+ minute compilation that may timeout in CI.
+#
+# Timeout: 10 minutes max for all runtime installations as safety net.
+RUN timeout 600 sh -c '\
+    export MISE_PYTHON_COMPILE=0 && \
+    /home/opencode/.local/bin/mise install node@25 && \
+    /home/opencode/.local/bin/mise install python@3.13 && \
+    /home/opencode/.local/bin/mise install go@1.25 && \
+    /home/opencode/.local/bin/mise use --global node@25 && \
+    /home/opencode/.local/bin/mise use --global python@3.13 && \
+    /home/opencode/.local/bin/mise use --global go@1.25'
 
 # Set up mise shims in PATH for non-interactive shells
 ENV PATH="/home/opencode/.local/share/mise/shims:${PATH}"
@@ -230,24 +238,25 @@ ENV PATH="/home/opencode/.cargo/bin:${PATH}"
 # Switch to bash for mise activation (mise outputs bash-specific syntax)
 SHELL ["/bin/bash", "-c"]
 
-# Install pnpm 10.x via corepack (2026-01-22)
+# Install pnpm 10.x via corepack (2026-02-03)
 RUN eval "$(/home/opencode/.local/bin/mise activate bash)" \
+    && npm install -g corepack \
     && corepack enable \
-    && corepack prepare pnpm@10.28.1 --activate
+    && corepack prepare pnpm@10.28.2 --activate
 
 # Set up pnpm global bin directory
 ENV PNPM_HOME="/home/opencode/.local/share/pnpm"
 ENV PATH="${PNPM_HOME}:${PATH}"
 RUN mkdir -p "${PNPM_HOME}"
 
-# bun - self-managing installer, trusted to handle versions
+# bun - self-managing installer, pinned to version (2026-02-03)
 RUN curl -fsSL https://bun.sh/install | bash -s "bun-v1.3.5" \
     && rm -rf /home/opencode/.bun/install/cache /home/opencode/.bun/cache /home/opencode/.cache/bun
 
 ENV PATH="/home/opencode/.bun/bin:${PATH}"
 
-# uv - self-managing installer, trusted to handle versions (fast Python package manager)
-RUN curl -LsSf https://astral.sh/uv/install.sh | sh
+# uv - pinned installer (fast Python package manager) (2026-02-03)
+RUN curl -LsSf https://github.com/astral-sh/uv/releases/download/0.9.21/uv-installer.sh | sh
 
 # Install pipx for isolated Python application installs
 # Use BuildKit cache mount for pip cache
@@ -260,7 +269,7 @@ RUN --mount=type=cache,target=/home/opencode/.cache/pip,uid=1000,gid=1000,mode=0
 # Install global TypeScript compiler
 # NOTE: Avoid cache mount here to prevent pnpm store permission issues
 RUN eval "$(/home/opencode/.local/bin/mise activate bash)" \
-    && pnpm add -g typescript
+    && pnpm add -g typescript@5.9.2
 
 # -----------------------------------------------------------------------------
 # Modern CLI Tools (Rust-based) - pinned versions (2026-01-22)
@@ -315,7 +324,7 @@ RUN mkdir -p /home/opencode/.cargo/registry /home/opencode/.cargo/git \
 # RUN eval "$(/home/opencode/.local/bin/mise activate bash)" \
 #     && go install mvdan.cc/sh/v3/cmd/shfmt@v3.12.0
 
-# Install btop system monitor (2026-01-22)
+# Install btop system monitor (2026-02-03)
 # Use BuildKit cache mount for APT package lists and cache
 USER root
 RUN --mount=type=cache,target=/var/lib/apt/lists \
@@ -342,7 +351,7 @@ USER opencode
 # Cockpit Web Console (2026-01-22) - temporarily disabled
 # -----------------------------------------------------------------------------
 # Cockpit provides web-based administration for the container
-# Ubuntu noble has cockpit 316 in main repos
+# Ubuntu questing has cockpit 346 in main repos
 # Use BuildKit cache mount for APT package lists and cache
 # USER root
 # RUN --mount=type=cache,target=/var/lib/apt/lists \
@@ -527,8 +536,11 @@ USER opencode
 # -----------------------------------------------------------------------------
 # Clone the fork and build opencode from source (as non-root user)
 # Pin to specific commit for reproducibility
+# NOTE: OPENCODE_COMMIT is not tied to releases/tags; it tracks the latest stable
+# commit on the main branch of https://github.com/pRizz/opencode.
+# Update it by running: ./scripts/update-opencode-commit.sh
 # Build opencode from source (BuildKit cache mounts disabled for now)
-RUN OPENCODE_COMMIT="8a63844a3d3166273a83d5e94d8820d62ad82510" \
+RUN OPENCODE_COMMIT="cfe79755427fd8d3b94be76e1c7912bdc943a8ab" \
     && rm -rf /tmp/opencode-repo \
     && git clone --depth 1 https://github.com/pRizz/opencode.git /tmp/opencode-repo \
     && cd /tmp/opencode-repo \
@@ -726,7 +738,7 @@ RUN /opt/opencode/bin/opencode --version
 # Note: If this fails in container builds due to "~" path resolution, retry with
 # OPENCODE_CONFIG_DIR=/home/opencode/.config/opencode set explicitly.
 RUN mkdir -p /home/opencode/.npm \
-    && npx --yes get-shit-done-cc --opencode --global \
+    && npx --yes get-shit-done-cc@1.11.1 --opencode --global \
     && rm -rf /home/opencode/.npm/_cacache /home/opencode/.npm/_npx
 
 # -----------------------------------------------------------------------------

package/src/docker/README.dockerhub.md

@@ -7,9 +7,9 @@ https://github.com/pRizz/opencode-cloud (mirror: https://gitea.com/pRizz/opencod
 
 ## What is included
 
-- Ubuntu 24.04 (noble)
+- Ubuntu 25.10 (questing)
 - Non-root user with passwordless sudo
-- mise-managed runtimes (Node.js LTS, Python 3.12, Go 1.24)
+- mise-managed runtimes (Node.js 25, Python 3.14, Go 1.25)
 - Rust toolchain via rustup
 - Core CLI utilities (ripgrep, eza, jq, git, etc.)
 - opencode preinstalled with the GSD plugin

package/src/docker/image.rs

@@ -801,7 +801,7 @@ mod tests {
     #[test]
     fn format_build_error_includes_recent_logs() {
         let mut logs = VecDeque::new();
-        logs.push_back("Step 1/5 : FROM ubuntu:22.04".to_string());
+        logs.push_back("Step 1/5 : FROM ubuntu:24.04".to_string());
         logs.push_back("Step 2/5 : RUN apt-get update".to_string());
         logs.push_back("E: Unable to fetch some archives".to_string());
         let error_logs = VecDeque::new();

package/src/host/provision.rs

@@ -44,9 +44,9 @@ pub struct DistroInfo {
     pub family: DistroFamily,
     /// Distribution ID (e.g., "ubuntu", "amzn", "debian")
     pub id: String,
-    /// Pretty name (e.g., "Ubuntu 22.04.3 LTS")
+    /// Pretty name (e.g., "Ubuntu 24.04 LTS")
     pub pretty_name: String,
-    /// Version ID (e.g., "22.04", "2023")
+    /// Version ID (e.g., "24.04", "2023")
     pub version_id: Option<String>,
 }
 
@@ -327,18 +327,18 @@ mod tests {
     #[test]
     fn test_parse_os_release_ubuntu() {
         let content = r#"
-PRETTY_NAME="Ubuntu 22.04.3 LTS"
+PRETTY_NAME="Ubuntu 24.04 LTS"
 NAME="Ubuntu"
-VERSION_ID="22.04"
-VERSION="22.04.3 LTS (Jammy Jellyfish)"
-VERSION_CODENAME=jammy
+VERSION_ID="24.04"
+VERSION="24.04 LTS (Noble Numbat)"
+VERSION_CODENAME=noble
 ID=ubuntu
 ID_LIKE=debian
 "#;
         let info = parse_os_release(content).unwrap();
         assert_eq!(info.family, DistroFamily::Debian);
         assert_eq!(info.id, "ubuntu");
-        assert_eq!(info.version_id, Some("22.04".to_string()));
+        assert_eq!(info.version_id, Some("24.04".to_string()));
     }
 
     #[test]
@@ -375,8 +375,8 @@ ID=debian
         let debian_info = DistroInfo {
             family: DistroFamily::Debian,
             id: "ubuntu".to_string(),
-            pretty_name: "Ubuntu 22.04".to_string(),
-            version_id: Some("22.04".to_string()),
+            pretty_name: "Ubuntu 24.04".to_string(),
+            version_id: Some("24.04".to_string()),
         };
         let commands = get_docker_install_commands(&debian_info).unwrap();
         assert!(!commands.is_empty());