commandmate 0.42.2 → 0.43.0

package/dist/server/src/lib/detection/tools/verified-against.js

@@ -26,7 +26,7 @@
  * instead of importing it.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DETECTOR_VERIFIED_AGAINST = exports.UNMEASURED_VERIFIED_AGAINST = exports.COMMAND_CODE_VERIFIED_AGAINST = exports.ANTIGRAVITY_VERIFIED_AGAINST = exports.OPENCODE_VERIFIED_AGAINST = exports.COPILOT_VERIFIED_AGAINST = exports.CODEX_VERIFIED_AGAINST = exports.CLAUDE_VERIFIED_AGAINST = void 0;
+exports.DETECTOR_VERIFIED_AGAINST = exports.UNMEASURED_VERIFIED_AGAINST = exports.OPENCODE_V2_VERIFIED_AGAINST = exports.COMMAND_CODE_VERIFIED_AGAINST = exports.ANTIGRAVITY_VERIFIED_AGAINST = exports.OPENCODE_VERIFIED_AGAINST = exports.COPILOT_VERIFIED_AGAINST = exports.CODEX_VERIFIED_AGAINST = exports.CLAUDE_VERIFIED_AGAINST = void 0;
 /** claude these rules were read off (#1708 / #1927 fixtures). */
 exports.CLAUDE_VERIFIED_AGAINST = {
     version: '2.1.240',
@@ -224,6 +224,21 @@ exports.COMMAND_CODE_VERIFIED_AGAINST = {
     capturedAt: '2026-09-20',
     paneGeometry: '200x1000',
 };
+/**
+ * OpenCode V2 (`opencode2`, npm `@opencode/cli`) — Issue #2934, Epic #2370
+ * Phase 1.
+ *
+ * 2.0.18 is the build Phase 0 and Phase 1 were measured on (2026-09-28, pane
+ * 80x200): the SSE vocabulary the state is read from, and the composer / footer
+ * rows the send path and the fallback reader match. OpenCode V2 shipped 18
+ * releases in its first two weeks, so this stamp is expected to go `stale`
+ * quickly — which is the freshness probe doing its job, not a defect.
+ */
+exports.OPENCODE_V2_VERIFIED_AGAINST = {
+    version: '2.0.18',
+    capturedAt: '2026-09-28',
+    paneGeometry: '80x200',
+};
 /**
  * The stamp for a tool whose frames nobody has captured yet.
  *
@@ -251,6 +266,7 @@ exports.DETECTOR_VERIFIED_AGAINST = {
     opencode: exports.OPENCODE_VERIFIED_AGAINST,
     antigravity: exports.ANTIGRAVITY_VERIFIED_AGAINST,
     'command-code': exports.COMMAND_CODE_VERIFIED_AGAINST,
+    'opencode-v2': exports.OPENCODE_V2_VERIFIED_AGAINST,
     gemini: exports.UNMEASURED_VERIFIED_AGAINST,
     'vibe-local': exports.UNMEASURED_VERIFIED_AGAINST,
 };

package/dist/server/src/lib/detection/upstream-faults.js

@@ -46,6 +46,14 @@ const excerpt_1 = require("./excerpt");
 exports.UPSTREAM_FAULTS = [
     { id: 'overloaded', pattern: /\b5\d{2}\s+Overloaded\b/i, selfRetrying: true },
     { id: 'retrying', pattern: /Retrying in \d+s\s*[·•]\s*attempt \d+\/\d+/i, selfRetrying: true },
+    {
+        // The conversation outgrew the model's window (Issue #3011). Command Code
+        // prints `400 This model's maximum context length is N tokens. However, you
+        // requested M tokens`; retrying the same session cannot succeed.
+        id: 'context-limit',
+        pattern: /\bmaximum context length is \d+ tokens\b/i,
+        selfRetrying: false,
+    },
     { id: 'limit-reached', pattern: /\blimit reached\b/i, selfRetrying: false },
     { id: 'api-error', pattern: /\bAPI Error(?::|\s+\d{3})/i, selfRetrying: false },
 ];

package/dist/server/src/lib/detection/version-probes.js

@@ -104,6 +104,7 @@ exports.getDetectorStalenessSnapshot = getDetectorStalenessSnapshot;
 exports.clearDetectorVersionProbeCache = clearDetectorVersionProbeCache;
 const child_process_1 = require("child_process");
 const copilot_executable_1 = require("../cli-tools/copilot-executable");
+const opencode_executable_1 = require("../cli-tools/opencode-executable");
 const env_sanitizer_1 = require("../security/env-sanitizer");
 const verified_against_1 = require("./tools/verified-against");
 /** Budget for one `<cli> --version`. Matches the catalog probe and copilot-executable. */
@@ -202,7 +203,19 @@ exports.DETECTOR_VERSION_PROBES = {
     codex: { kind: 'execFile', command: 'codex', args: ['--version'] },
     antigravity: { kind: 'execFile', command: 'agy', args: ['--version'] },
     'command-code': { kind: 'execFile', command: 'commandcode', args: ['--version'] },
-    opencode: { kind: 'execFile', command: 'opencode', args: ['--version'] },
+    // Issue #2939: both OpenCodes are delegated, like copilot. `opencode` may be
+    // OpenCode V2 (npm `@opencode/cli` registers it next to `opencode2`), so the
+    // row reads the version of the binary each tool would launch — the same
+    // resolution `isInstalled()` and the launch line use, never `opencode v2.x`
+    // filed as OpenCode 1.x's version.
+    opencode: {
+        kind: 'delegated',
+        probe: async () => (await (0, opencode_executable_1.resolveOpencodeV1Executable)()).executable?.version ?? null,
+    },
+    'opencode-v2': {
+        kind: 'delegated',
+        probe: async () => (await (0, opencode_executable_1.resolveOpencodeV2Executable)()).executable?.version ?? null,
+    },
     gemini: { kind: 'execFile', command: 'gemini', args: ['--version'] },
     copilot: {
         kind: 'delegated',

package/dist/server/src/lib/hooks/agent-session-telemetry.js

@@ -61,6 +61,17 @@
  * its own — see {@link AgentSessionContextUsage} and
  * `docs/design/opencode-server-live-verification.md` §14.
  *
+ * ## OpenCode V2 (Issue #2981)
+ *
+ * `opencode-v2` fills both records too, with the same meanings — measured on
+ * 2.0.18 (`tests/fixtures/opencode-v2-usage-2981`): `GET /api/session/{id}`
+ * carries the session's cumulative `cost` / `tokens` (the running total
+ * `session.usage.updated` announces), while the TUI's `6.3K (1%)` is the last
+ * assistant message's footprint. The writer is
+ * `./sources/opencode-v2/usage`, which asks its own server with its own port
+ * and password; {@link ensureAgentSessionContextUsage} leaves those instances
+ * alone.
+ *
  * @module lib/hooks/agent-session-telemetry
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -70,6 +81,7 @@ exports.getAgentSessionTelemetry = getAgentSessionTelemetry;
 exports.forgetAgentSessionTelemetry = forgetAgentSessionTelemetry;
 exports.resetAgentSessionTelemetry = resetAgentSessionTelemetry;
 exports.readOpencodeSessionFrame = readOpencodeSessionFrame;
+exports.readOpencodeSessionInfo = readOpencodeSessionInfo;
 exports.agentSessionContextPercent = agentSessionContextPercent;
 exports.getAgentSessionContextUsage = getAgentSessionContextUsage;
 exports.recordAgentSessionContextUsage = recordAgentSessionContextUsage;
@@ -190,7 +202,25 @@ function readOpencodeSessionFrame(frame, at) {
     const properties = isPlainObject(frame.properties) ? frame.properties : null;
     if (!properties)
         return null;
-    const info = isPlainObject(properties.info) ? properties.info : null;
+    return readOpencodeSessionInfo(properties.info, at);
+}
+/**
+ * Read one `Session` object, or answer null (Issue #2981).
+ *
+ * Split out of {@link readOpencodeSessionFrame} because OpenCode V2 serves the
+ * same fields — `Session.Info` in 2.0.18's `GET /openapi.json` declares `id`,
+ * `parentID`, `title`, `agent`, `model: { id, providerID, variant? }`, `cost`
+ * and `tokens: { input, output, reasoning, cache: { read, write } }` — from
+ * `GET /api/session/{id}` instead of on a frame. One reader keeps the two
+ * versions from disagreeing about what "verbatim" means, and the sub-agent
+ * refusal above applies to both.
+ *
+ * @param value - The `Session` object, unvalidated
+ * @param at - Epoch ms it was received
+ * @returns The record to store, or null when this is not one to store
+ */
+function readOpencodeSessionInfo(value, at) {
+    const info = isPlainObject(value) ? value : null;
     if (!info)
         return null;
     if (typeof info.parentID === 'string' && info.parentID.length > 0)
@@ -276,6 +306,11 @@ function ensureAgentSessionContextUsage(target, record) {
     // close is what retires it, the same lifetime the record itself has.
     if (!record || !record.id)
         return cached;
+    // Issue #2981: OpenCode V2 measures its own context in the same refresh that
+    // writes the record (`./sources/opencode-v2/usage`), with its own port and
+    // password. The v1 fetch below would dial v1's port map for a v2 instance.
+    if (target.cliToolId === 'opencode-v2')
+        return cached;
     if (cached && cached.sessionAt === record.at)
         return cached;
     if (contextRefreshes.has(key))

package/dist/server/src/lib/hooks/sources/opencode/log-diagnosis.js

@@ -0,0 +1,105 @@
+"use strict";
+/**
+ * Why an OpenCode 1.x launch never started its server, when opencode's own log
+ * says (Issue #2939, D2).
+ *
+ * OpenCode 1.x and OpenCode V2 share `~/.local/share/opencode/opencode.db`. V2
+ * rebuilt the `workspace` table without the `project_id` column 1.x still
+ * writes, and a 1.x launch that reached that code died with
+ * `SQLiteError: no such column: project_id` (measured 2026-09-28, 17 lines in
+ * opencode's log). CommandMate only saw `opencode-server-not-reachable`, and
+ * the operator was left with a pane that never came up and no reason.
+ *
+ * This reads the log opencode writes — `<XDG_DATA_HOME or ~/.local/share>/
+ * opencode/log/opencode.log`, one `timestamp=<ISO> level=… ` record per line —
+ * and reports a `no such column` error from a line stamped at or after the
+ * launch. Read-only, bounded to the last {@link OPENCODE_LOG_TAIL_BYTES} of the
+ * file, and every failure (no file, unreadable, nothing matching) is null,
+ * which leaves the launch reported exactly as before.
+ *
+ * CommandMate cannot repair the database: two incompatible opencode releases
+ * sharing one data directory is opencode's problem. What it can do is name it.
+ *
+ * @module lib/hooks/sources/opencode/log-diagnosis
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OPENCODE_LOG_TAIL_BYTES = void 0;
+exports.resolveOpencodeLogPath = resolveOpencodeLogPath;
+exports.findOpencodeSharedDataConflict = findOpencodeSharedDataConflict;
+exports.buildOpencodeSharedDataConflictMessage = buildOpencodeSharedDataConflictMessage;
+const promises_1 = require("fs/promises");
+const os_1 = require("os");
+const path_1 = require("path");
+/** How much of the end of the log is read. The file is multi-megabyte. */
+exports.OPENCODE_LOG_TAIL_BYTES = 256 * 1024;
+/**
+ * Lines stamped this long before the launch still count. The TUI writes its
+ * first line within milliseconds of the keystroke; the slack only absorbs the
+ * gap between `Date.now()` here and the pane's process starting.
+ */
+const LAUNCH_CLOCK_SLACK_MS = 1000;
+const TIMESTAMP_FIELD = /^timestamp=(\S+)/;
+const NO_SUCH_COLUMN = /no such column: ?[A-Za-z0-9_.]*/;
+/** Where opencode writes its log, honouring `XDG_DATA_HOME` as opencode does. */
+function resolveOpencodeLogPath() {
+    const dataHome = process.env.XDG_DATA_HOME || (0, path_1.join)((0, os_1.homedir)(), '.local', 'share');
+    return (0, path_1.join)(dataHome, 'opencode', 'log', 'opencode.log');
+}
+/** The last `maxBytes` of `path`, or null when it cannot be read. */
+async function readTail(path, maxBytes) {
+    let handle;
+    try {
+        handle = await (0, promises_1.open)(path, 'r');
+        const { size } = await handle.stat();
+        const length = Math.min(size, maxBytes);
+        const start = size - length;
+        const buffer = Buffer.alloc(length);
+        await handle.read(buffer, 0, length, start);
+        let text = buffer.toString('utf8');
+        // A read that starts mid-file starts mid-line; that fragment has no stamp.
+        if (start > 0)
+            text = text.slice(text.indexOf('\n') + 1);
+        return text;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        await handle?.close().catch(() => { });
+    }
+}
+/**
+ * The `no such column` error opencode logged since `since`, or null.
+ *
+ * @param since - Epoch ms the launch keystroke was sent
+ * @param logPath - Defaults to {@link resolveOpencodeLogPath}
+ * @returns The matched fragment, e.g. `no such column: project_id`
+ */
+async function findOpencodeSharedDataConflict(since, logPath = resolveOpencodeLogPath()) {
+    const text = await readTail(logPath, exports.OPENCODE_LOG_TAIL_BYTES);
+    if (text === null)
+        return null;
+    const threshold = since - LAUNCH_CLOCK_SLACK_MS;
+    for (const line of text.split('\n')) {
+        const stamp = TIMESTAMP_FIELD.exec(line);
+        if (!stamp)
+            continue;
+        const at = Date.parse(stamp[1]);
+        if (Number.isNaN(at) || at < threshold)
+            continue;
+        const match = NO_SUCH_COLUMN.exec(line);
+        if (match)
+            return match[0];
+    }
+    return null;
+}
+/**
+ * The start error an operator sees for {@link findOpencodeSharedDataConflict}'s
+ * finding.
+ */
+function buildOpencodeSharedDataConflictMessage(finding) {
+    return (`OpenCode 1.x could not open its data (opencode log: "${finding}"). ` +
+        'OpenCode 1.x and OpenCode V2 share ~/.local/share/opencode/opencode.db, and V2 ' +
+        'has changed tables 1.x still uses. Use only OpenCode V2, or give OpenCode 1.x a ' +
+        'data directory of its own (docs/user-guide/cli-setup-guide.md, "OpenCode (1.x) and OpenCode V2").');
+}

package/dist/server/src/lib/hooks/sources/opencode/source.js

@@ -266,7 +266,13 @@ function prepareOpencodeLaunch({ target, executablePath, }) {
     // `env` is empty for every branch: opencode is the one source that needs no
     // correlation variable at all, because CommandMate holds the connection and
     // therefore already knows which instance the frames belong to (#1846).
-    const bare = { command: executablePath, settingsPath: null, env: {} };
+    // Issue #2939: `executablePath` is now the absolute path that answered as
+    // OpenCode 1.x, so it is quoted when it needs to be. A plain word keeps the
+    // pre-#2939 bytes.
+    const bareCommand = /^[A-Za-z0-9_./-]+$/.test(executablePath)
+        ? executablePath
+        : (0, hook_settings_generator_1.shellQuote)(executablePath);
+    const bare = { command: bareCommand, settingsPath: null, env: {} };
     if (!(0, hook_settings_generator_1.isHookInjectionEnabled)())
         return bare;
     const port = (0, ports_1.getAssignedOpencodePort)(target);