opencodekit 0.18.10 → 0.18.12

package/dist/index.js

@@ -18,7 +18,7 @@ var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 //#endregion
 //#region package.json
-var version = "0.18.10";
+var version = "0.18.12";
 
 //#endregion
 //#region src/utils/errors.ts

package/dist/template/.opencode/AGENTS.md

@@ -306,6 +306,17 @@ For major tracked work:
 4. **EDIT** — Include 2-3 unique context lines before/after
 5. **CONFIRM** — Read back to verify edit succeeded
 
+### Write Tool Safety (Runtime Guard)
+
+OpenCode enforces a **hard runtime check**: you must Read a file before Writing to it. This is not a prompt suggestion — it's a `FileTime.assert()` call that throws if no read timestamp exists for the file in the current session.
+
+- **Existing files**: Always `Read` before `Write`. The Write tool will reject overwrites without a prior Read.
+- **New files**: Write freely — the guard only fires for files that already exist.
+- **Edit tool**: Same guard applies. Read first, then Edit.
+- **Failure**: `"You must read file X before overwriting it. Use the Read tool first"`
+
+**Rule**: Never use Write on an existing file without Reading it first in the same session. Prefer Edit for modifications; reserve Write for new file creation or full replacements after Read.
+
 ### File Size Guidance
 
 Files over ~500 lines become hard to maintain and review. Extract helpers, split modules, or refactor when approaching this threshold.

package/dist/template/.opencode/agent/build.md

@@ -72,7 +72,7 @@ Implement requested work, verify with fresh evidence, and coordinate subagents o
 ### Scope Discipline
 
 - Stay in scope; no speculative refactors or bonus features
-- Read files before editing
+- **Read files before editing or writing** — Write tool rejects overwrites without a prior Read (runtime guard)
 - Delegate when work is large, uncertain, or cross-domain
 
 ### Verification as Calibration

package/dist/template/.opencode/agent/general.md

@@ -52,7 +52,7 @@ Execute clear, low-complexity coding tasks quickly (typically 1-3 files) and rep
 
 ## Rules
 
-- Read code before editing
+- **Read before editing or writing** — Write/Edit tools reject changes to existing files without a prior Read (runtime guard)
 - Keep changes minimal and in-scope
 - Ask before irreversible actions (commit, push, destructive ops)
 

package/dist/template/.opencode/opencode.json

@@ -189,7 +189,7 @@
 				"claude-opus-4.5": {
 					"attachment": true,
 					"limit": {
-						"context": 200000,
+					"context": 128000,
 						"output": 64000
 					},
 					"options": {
@@ -214,7 +214,7 @@
 				"claude-opus-4.6": {
 					"attachment": true,
 					"limit": {
-						"context": 200000,
+					"context": 128000,
 						"output": 64000
 					},
 					"options": {
@@ -259,7 +259,7 @@
 				"claude-sonnet-4.5": {
 					"attachment": true,
 					"limit": {
-						"context": 200000,
+					"context": 128000,
 						"output": 64000
 					},
 					"options": {
@@ -284,7 +284,7 @@
 				"claude-sonnet-4.6": {
 					"attachment": true,
 					"limit": {
-						"context": 200000,
+					"context": 128000,
 						"output": 64000
 					},
 					"options": {
@@ -329,7 +329,7 @@
 				"gpt-5.2": {
 					"attachment": true,
 					"limit": {
-						"context": 400000,
+					"context": 192000,
 						"output": 128000
 					},
 					"options": {
@@ -460,6 +460,135 @@
 							"textVerbosity": "medium"
 						}
 					}
+				},
+				"claude-sonnet-4": {
+					"attachment": true,
+					"limit": {
+						"context": 200000,
+						"output": 64000
+					},
+					"options": {
+						"thinking_budget": 10000
+					},
+					"reasoning": true,
+					"temperature": true,
+					"tool_call": true
+				},
+				"gemini-2.5-pro": {
+					"attachment": true,
+					"limit": {
+						"context": 173000,
+						"output": 64000
+					},
+					"reasoning": true,
+					"temperature": true,
+					"tool_call": true
+				},
+				"gemini-3-flash-preview": {
+					"attachment": true,
+					"limit": {
+						"context": 173000,
+						"output": 64000
+					},
+					"reasoning": true,
+					"temperature": true,
+					"tool_call": true
+				},
+				"gemini-3-pro-preview": {
+					"attachment": true,
+					"limit": {
+						"context": 173000,
+						"output": 64000
+					},
+					"reasoning": true,
+					"temperature": true,
+					"tool_call": true
+				},
+				"gemini-3.1-pro-preview": {
+					"attachment": true,
+					"limit": {
+						"context": 173000,
+						"output": 64000
+					},
+					"reasoning": true,
+					"temperature": true,
+					"tool_call": true
+				},
+				"gpt-5.1": {
+					"attachment": true,
+					"limit": {
+						"context": 192000,
+						"output": 128000
+					},
+					"options": {
+						"reasoningEffort": "medium",
+						"reasoningSummary": "auto"
+					},
+					"reasoning": true,
+					"temperature": true,
+					"tool_call": true
+				},
+				"gpt-5.1-codex": {
+					"attachment": true,
+					"limit": {
+						"context": 256000,
+						"output": 128000
+					},
+					"options": {
+						"reasoningEffort": "medium",
+						"reasoningSummary": "auto"
+					},
+					"reasoning": true,
+					"temperature": true,
+					"tool_call": true
+				},
+				"gpt-5.1-codex-max": {
+					"attachment": true,
+					"limit": {
+						"context": 256000,
+						"output": 128000
+					},
+					"options": {
+						"reasoningEffort": "medium",
+						"reasoningSummary": "auto"
+					},
+					"reasoning": true,
+					"temperature": true,
+					"tool_call": true
+				},
+				"gpt-5.1-codex-mini": {
+					"attachment": true,
+					"limit": {
+						"context": 256000,
+						"output": 128000
+					},
+					"options": {
+						"reasoningEffort": "medium",
+						"reasoningSummary": "auto"
+					},
+					"reasoning": true,
+					"temperature": true,
+					"tool_call": true
+				},
+				"grok-code-fast": {
+					"attachment": true,
+					"limit": {
+						"context": 173000,
+						"output": 64000
+					},
+					"reasoning": true,
+					"temperature": true,
+					"tool_call": true
+				},
+				"grok-code-fast-1": {
+					"attachment": true,
+					"limit": {
+						"context": 173000,
+						"output": 64000
+					},
+					"reasoning": true,
+					"temperature": true,
+					"tool_call": true
 				}
 			},
 			"options": {

package/dist/template/.opencode/plugin/copilot-auth.ts

@@ -87,8 +87,47 @@ const RATE_LIMIT_CONFIG = {
 	maxDelayMs: 30000, // Cap at 30 seconds
 };
 
+// Maximum length for item IDs in the OpenAI Responses API
+const MAX_RESPONSE_API_ID_LENGTH = 64;
+/**
+ * Sanitize an ID to fit within the Responses API 64-char limit.
+ * GitHub Copilot returns proprietary long IDs (400+ chars) that violate
+ * the OpenAI spec. We hash them to a deterministic 64-char string.
+ * See: https://github.com/vercel/ai/issues/5171
+ */
+function sanitizeResponseId(id: string): string {
+	if (!id || id.length <= MAX_RESPONSE_API_ID_LENGTH) return id;
+	// Use a simple hash: take first 8 chars + hash of full string for uniqueness
+	// Format: "h_" + first 8 chars + "_" + base36 hash (up to ~50 chars total)
+	let hash = 0;
+	for (let i = 0; i < id.length; i++) {
+		hash = ((hash << 5) - hash + id.charCodeAt(i)) | 0;
+	}
+	const hashStr = Math.abs(hash).toString(36);
+	const prefix = id.slice(0, 8);
+	// Ensure total length <= 64: "h_" (2) + prefix (8) + "_" (1) + hash
+	return `h_${prefix}_${hashStr}`.slice(0, MAX_RESPONSE_API_ID_LENGTH);
+}
+
+/**
+ * Sanitize all IDs in a Responses API input array.
+ * Recursively checks `id` and `call_id` fields on each input item.
+ */
+function sanitizeResponseInputIds(input: any[]): any[] {
+	return input.map((item: any) => {
+		if (!item || typeof item !== "object") return item;
+		const sanitized = { ...item };
+		if (typeof sanitized.id === "string" && sanitized.id.length > MAX_RESPONSE_API_ID_LENGTH) {
+			sanitized.id = sanitizeResponseId(sanitized.id);
+		}
+		if (typeof sanitized.call_id === "string" && sanitized.call_id.length > MAX_RESPONSE_API_ID_LENGTH) {
+			sanitized.call_id = sanitizeResponseId(sanitized.call_id);
+		}
+		return sanitized;
+	});
+}
+
 /**
- * Calculate delay with exponential backoff and jitter
  * Retries: 2s, 4s, 8s (with jitter)
  */
 function calculateRetryDelay(attempt: number): number {
@@ -291,7 +330,27 @@ export const CopilotAuthPlugin: Plugin = async ({ client: sdk }) => {
 
 							// Responses API
 							if (body?.input) {
-								isAgentCall = body.input.some(
+								// Sanitize long IDs from Copilot backend (can be 400+ chars)
+								// OpenAI Responses API enforces a 64-char max on item IDs
+								const sanitizedInput = sanitizeResponseInputIds(body.input);
+								const inputWasSanitized = sanitizedInput !== body.input &&
+									JSON.stringify(sanitizedInput) !== JSON.stringify(body.input);
+
+								if (inputWasSanitized) {
+									log("info", "Sanitized long IDs in Responses API input", {
+										original_count: body.input.filter(
+											(item: any) =>
+												(typeof item?.id === "string" && item.id.length > MAX_RESPONSE_API_ID_LENGTH) ||
+												(typeof item?.call_id === "string" && item.call_id.length > MAX_RESPONSE_API_ID_LENGTH),
+										).length,
+									});
+									modifiedBody = {
+										...(modifiedBody || body),
+										input: sanitizedInput,
+									};
+								}
+
+								isAgentCall = (sanitizedInput || body.input).some(
 									(item: any) =>
 										item?.role === "assistant" ||
 										(item?.type &&

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencodekit",
-	"version": "0.18.10",
+	"version": "0.18.12",
 	"description": "CLI tool for bootstrapping and managing OpenCodeKit projects",
 	"keywords": [
 		"agents",