opencodekit 0.21.4 → 0.21.5

package/dist/template/.opencode/plugin/sdk/copilot/chat/openai-compatible-prepare-tools.ts

@@ -1,92 +1,92 @@
 import {
-	type LanguageModelV2CallOptions,
-	type LanguageModelV2CallWarning,
-	UnsupportedFunctionalityError,
+  type LanguageModelV3CallOptions,
+  type SharedV3Warning,
+  UnsupportedFunctionalityError,
 } from "@ai-sdk/provider";
 
 export function prepareTools({
-	tools,
-	toolChoice,
+  tools,
+  toolChoice,
 }: {
-	tools: LanguageModelV2CallOptions["tools"];
-	toolChoice?: LanguageModelV2CallOptions["toolChoice"];
+  tools: LanguageModelV3CallOptions["tools"];
+  toolChoice?: LanguageModelV3CallOptions["toolChoice"];
 }): {
-	tools:
-		| undefined
-		| Array<{
-				type: "function";
-				function: {
-					name: string;
-					description: string | undefined;
-					parameters: unknown;
-				};
-		  }>;
-	toolChoice:
-		| { type: "function"; function: { name: string } }
-		| "auto"
-		| "none"
-		| "required"
-		| undefined;
-	toolWarnings: LanguageModelV2CallWarning[];
+  tools:
+    | undefined
+    | Array<{
+        type: "function";
+        function: {
+          name: string;
+          description: string | undefined;
+          parameters: unknown;
+        };
+      }>;
+  toolChoice:
+    | { type: "function"; function: { name: string } }
+    | "auto"
+    | "none"
+    | "required"
+    | undefined;
+  toolWarnings: SharedV3Warning[];
 } {
-	// when the tools array is empty, change it to undefined to prevent errors:
-	tools = tools?.length ? tools : undefined;
+  // when the tools array is empty, change it to undefined to prevent errors:
+  tools = tools?.length ? tools : undefined;
 
-	const toolWarnings: LanguageModelV2CallWarning[] = [];
+  const toolWarnings: SharedV3Warning[] = [];
 
-	if (tools == null) {
-		return { tools: undefined, toolChoice: undefined, toolWarnings };
-	}
+  if (tools == null) {
+    return { tools: undefined, toolChoice: undefined, toolWarnings };
+  }
 
-	const openaiCompatTools: Array<{
-		type: "function";
-		function: {
-			name: string;
-			description: string | undefined;
-			parameters: unknown;
-		};
-	}> = [];
+  const openaiCompatTools: Array<{
+    type: "function";
+    function: {
+      name: string;
+      description: string | undefined;
+      parameters: unknown;
+    };
+  }> = [];
 
-	for (const tool of tools) {
-		if (tool.type === "provider-defined") {
-			toolWarnings.push({ type: "unsupported-tool", tool });
-		} else {
-			openaiCompatTools.push({
-				type: "function",
-				function: {
-					name: tool.name,
-					description: tool.description,
-					parameters: tool.inputSchema,
-				},
-			});
-		}
-	}
+  for (const tool of tools) {
+    if (tool.type === "provider") {
+      toolWarnings.push({ type: "unsupported", feature: `tool type: ${tool.type}` });
+    } else {
+      openaiCompatTools.push({
+        type: "function",
+        function: {
+          name: tool.name,
+          description: tool.description,
+          parameters: tool.inputSchema,
+        },
+      });
+    }
+  }
 
-	if (toolChoice == null) {
-		return { tools: openaiCompatTools, toolChoice: undefined, toolWarnings };
-	}
+  if (toolChoice == null) {
+    return { tools: openaiCompatTools, toolChoice: undefined, toolWarnings };
+  }
 
-	const type = toolChoice.type;
+  const type = toolChoice.type;
 
-	switch (type) {
-		case "auto":
-		case "none":
-		case "required":
-			return { tools: openaiCompatTools, toolChoice: type, toolWarnings };
-		case "tool":
-			return {
-				tools: openaiCompatTools,
-				toolChoice: {
-					type: "function",
-					function: { name: toolChoice.toolName },
-				},
-				toolWarnings,
-			};
-		default: {
-			const _exhaustiveCheck: never = type;
-			throw new UnsupportedFunctionalityError({
-				functionality: `tool choice type: ${_exhaustiveCheck}`,
-			});
-		}
-	}
+  switch (type) {
+    case "auto":
+    case "none":
+    case "required":
+      return { tools: openaiCompatTools, toolChoice: type, toolWarnings };
+    case "tool":
+      return {
+        tools: openaiCompatTools,
+        toolChoice: {
+          type: "function",
+          function: { name: toolChoice.toolName },
+        },
+        toolWarnings,
+      };
+    default: {
+      const _exhaustiveCheck: never = type;
+      throw new UnsupportedFunctionalityError({
+        functionality: `tool choice type: ${_exhaustiveCheck}`,
+      });
+    }
+  }
 }

package/dist/template/.opencode/plugin/sdk/copilot/copilot-provider.ts

@@ -1,8 +1,8 @@
-import type { LanguageModelV2 } from "@ai-sdk/provider";
+import type { LanguageModelV3 } from "@ai-sdk/provider";
 import {
-	type FetchFunction,
-	withoutTrailingSlash,
-	withUserAgentSuffix,
+  type FetchFunction,
+  withoutTrailingSlash,
+  withUserAgentSuffix,
 } from "@ai-sdk/provider-utils";
 import { OpenAICompatibleChatLanguageModel } from "./chat/openai-compatible-chat-language-model.js";
 import { OpenAIResponsesLanguageModel } from "./responses/openai-responses-language-model.js";
@@ -13,37 +13,37 @@ const VERSION = "0.1.0";
 export type OpenaiCompatibleModelId = string;
 
 export interface OpenaiCompatibleProviderSettings {
-	/**
-	 * API key for authenticating requests.
-	 */
-	apiKey?: string;
-
-	/**
-	 * Base URL for the OpenAI Compatible API calls.
-	 */
-	baseURL?: string;
-
-	/**
-	 * Name of the provider.
-	 */
-	name?: string;
-
-	/**
-	 * Custom headers to include in the requests.
-	 */
-	headers?: Record<string, string>;
-
-	/**
-	 * Custom fetch implementation.
-	 */
-	fetch?: FetchFunction;
+  /**
+   * API key for authenticating requests.
+   */
+  apiKey?: string;
+
+  /**
+   * Base URL for the OpenAI Compatible API calls.
+   */
+  baseURL?: string;
+
+  /**
+   * Name of the provider.
+   */
+  name?: string;
+
+  /**
+   * Custom headers to include in the requests.
+   */
+  headers?: Record<string, string>;
+
+  /**
+   * Custom fetch implementation.
+   */
+  fetch?: FetchFunction;
 }
 
 export interface OpenaiCompatibleProvider {
-	(modelId: OpenaiCompatibleModelId): LanguageModelV2;
-	chat(modelId: OpenaiCompatibleModelId): LanguageModelV2;
-	responses(modelId: OpenaiCompatibleModelId): LanguageModelV2;
-	languageModel(modelId: OpenaiCompatibleModelId): LanguageModelV2;
+  (modelId: OpenaiCompatibleModelId): LanguageModelV3;
+  chat(modelId: OpenaiCompatibleModelId): LanguageModelV3;
+  responses(modelId: OpenaiCompatibleModelId): LanguageModelV3;
+  languageModel(modelId: OpenaiCompatibleModelId): LanguageModelV3;
 }
 
 /**
@@ -51,55 +51,50 @@ export interface OpenaiCompatibleProvider {
  * This custom provider handles Claude reasoning tokens (thinking_budget).
  */
 export function createOpenaiCompatible(
-	options: OpenaiCompatibleProviderSettings = {},
+  options: OpenaiCompatibleProviderSettings = {},
 ): OpenaiCompatibleProvider {
-	const baseURL = withoutTrailingSlash(
-		options.baseURL ?? "https://api.openai.com/v1",
-	);
-
-	if (!baseURL) {
-		throw new Error("baseURL is required");
-	}
-
-	// Merge headers: defaults first, then user overrides
-	const headers = {
-		// Default OpenAI Compatible headers (can be overridden by user)
-		...(options.apiKey && { Authorization: `Bearer ${options.apiKey}` }),
-		...options.headers,
-	};
-
-	const getHeaders = () =>
-		withUserAgentSuffix(headers, `ai-sdk/openai-compatible/${VERSION}`);
-
-	const createChatModel = (modelId: OpenaiCompatibleModelId) => {
-		return new OpenAICompatibleChatLanguageModel(modelId, {
-			provider: `${options.name ?? "openai-compatible"}.chat`,
-			headers: getHeaders,
-			url: ({ path }) => `${baseURL}${path}`,
-			fetch: options.fetch,
-		});
-	};
-
-	const createResponsesModel = (modelId: OpenaiCompatibleModelId) => {
-		return new OpenAIResponsesLanguageModel(modelId, {
-			provider: `${options.name ?? "openai-compatible"}.responses`,
-			headers: getHeaders,
-			url: ({ path, modelId: _modelId }) => `${baseURL}${path}`,
-			fetch: options.fetch,
-		});
-	};
-
-	const createLanguageModel = (modelId: OpenaiCompatibleModelId) =>
-		createChatModel(modelId);
-
-	const provider = (modelId: OpenaiCompatibleModelId) =>
-		createChatModel(modelId);
-
-	provider.languageModel = createLanguageModel;
-	provider.chat = createChatModel;
-	provider.responses = createResponsesModel;
-
-	return provider as OpenaiCompatibleProvider;
+  const baseURL = withoutTrailingSlash(options.baseURL ?? "https://api.openai.com/v1");
+
+  if (!baseURL) {
+    throw new Error("baseURL is required");
+  }
+
+  // Merge headers: defaults first, then user overrides
+  const headers = {
+    // Default OpenAI Compatible headers (can be overridden by user)
+    ...(options.apiKey && { Authorization: `Bearer ${options.apiKey}` }),
+    ...options.headers,
+  };
+
+  const getHeaders = () => withUserAgentSuffix(headers, `ai-sdk/openai-compatible/${VERSION}`);
+
+  const createChatModel = (modelId: OpenaiCompatibleModelId) => {
+    return new OpenAICompatibleChatLanguageModel(modelId, {
+      provider: `${options.name ?? "openai-compatible"}.chat`,
+      headers: getHeaders,
+      url: ({ path }) => `${baseURL}${path}`,
+      fetch: options.fetch,
+    });
+  };
+
+  const createResponsesModel = (modelId: OpenaiCompatibleModelId) => {
+    return new OpenAIResponsesLanguageModel(modelId, {
+      provider: `${options.name ?? "openai-compatible"}.responses`,
+      headers: getHeaders,
+      url: ({ path, modelId: _modelId }) => `${baseURL}${path}`,
+      fetch: options.fetch,
+    });
+  };
+
+  const createLanguageModel = (modelId: OpenaiCompatibleModelId) => createChatModel(modelId);
+
+  const provider = (modelId: OpenaiCompatibleModelId) => createChatModel(modelId);
+
+  provider.languageModel = createLanguageModel;
+  provider.chat = createChatModel;
+  provider.responses = createResponsesModel;
+
+  return provider as OpenaiCompatibleProvider;
 }
 
 // Default OpenAI Compatible provider instance

package/dist/template/.opencode/skill/playwright/SKILL.md

@@ -306,14 +306,63 @@ skill_mcp(
 
 ---
 
+## Token Discipline (Snapshots / Console / Network)
+
+Browser introspection tools return huge payloads. A single `browser_snapshot` of a real app is routinely **50K–150K tokens**. A single full `browser_console_messages` or `browser_network_requests` can be similar. Pulling that raw into context wrecks the session.
+
+**Rule**: when an MCP browser tool supports a `filename` parameter, **always save to a file first, then read selectively**. Reserve direct (no-`filename`) calls for tiny pages or when you genuinely need the whole tree in context.
+
+### Tools that MUST use `filename` for non-trivial pages
+
+| Tool                       | When to use `filename`                                    |
+| -------------------------- | --------------------------------------------------------- |
+| `browser_snapshot`         | Always on real apps — accessibility trees explode in size |
+| `browser_take_screenshot`  | Always — never inline binary data                         |
+| `browser_console_messages` | When you expect >20 lines or you don't know the volume    |
+| `browser_network_requests` | When you expect >20 requests or full bodies               |
+| `browser_pdf_save`         | Always                                                    |
+
+### Pattern
+
+```typescript
+// 1. Save the heavy artifact to a file
+skill_mcp(
+  (skill_name = "playwright"),
+  (tool_name = "browser_snapshot"),
+  (arguments = '{"filename": "/tmp/snapshot.yaml"}'),
+);
+
+// 2. Search the file for what you actually need
+bash({ command: "grep -n -E 'role=button|role=textbox' /tmp/snapshot.yaml | head -40" });
+
+// 3. Read just the relevant slice
+read({ filePath: "/tmp/snapshot.yaml", offset: 120, limit: 40 });
+```
+
+CLI mode has the same discipline — `playwright-cli snapshot > /tmp/snap.yaml` then `grep`/`head`, never paste the whole snapshot into the conversation.
+
+### Anti-Patterns
+
+| Anti-Pattern                                                  | Cost                          | Fix                                                 |
+| ------------------------------------------------------------- | ----------------------------- | --------------------------------------------------- |
+| `browser_snapshot` with no `filename` on a real app           | 50K–150K tokens in one shot   | Add `filename`, then `grep` / `read` slice          |
+| `browser_console_messages` with no `filename` on a noisy page | Floods context with logs      | Add `filename`, `grep ERROR` after                  |
+| `browser_network_requests` with no `filename`                 | Hundreds of requests + bodies | Add `filename`, then filter by URL/status           |
+| Pasting full snapshot YAML into a follow-up prompt            | Re-bills the same tokens      | Reference the file path; re-read only what's needed |
+
+Adapted from the **context saving** discipline in [context-mode](https://github.com/mksglu/context-mode); their measurements show ~99% reduction (135K → ~250 bytes per snapshot) when using `filename` + selective reads.
+
+---
+
 ## Best Practices
 
 1. **Default to CLI** for token efficiency
 2. **Snapshot before interact** - always get element refs first
 3. **Use named sessions** (`-s=`) for isolated browser contexts
 4. **Save outputs to /tmp** for easy access and cleanup
-5. **Check console/network** for debugging: `playwright-cli console error`
-6. **Use eval for custom checks** when built-in commands aren't enough
+5. **Use `filename` on heavy MCP tools** — see Token Discipline above
+6. **Check console/network** for debugging: `playwright-cli console error`
+7. **Use eval for custom checks** when built-in commands aren't enough
 
 ## Troubleshooting
 

package/dist/template/.opencode/skill/portless/SKILL.md

@@ -0,0 +1,109 @@
+---
+name: portless
+description: Use when local web app, browser, OAuth callback, webhook, or multi-service verification would benefit from stable named localhost URLs via Portless. Keeps Portless optional and safety-gated because it can alter local networking, trust stores, and hosts files.
+version: 1.0.0
+tags: [workflow, integration, testing]
+dependencies: []
+---
+
+# Portless Local URL Workflow
+
+## Overview
+
+Portless replaces ad-hoc port numbers with stable, named local URLs such as `https://myapp.localhost`. In OpenCodeKit, treat it as an **optional verification aid** for local web workflows, not as a project dependency or default dev-server wrapper.
+
+Core rule: **read-only checks are allowed; installation, proxy startup, CA trust, hosts changes, cleanup, and LAN exposure require explicit user approval.**
+
+## When to Use
+
+- A PRD or task requires browser verification, OAuth callbacks, webhooks, cookies, cross-origin flows, or multiple local services.
+- Port numbers are brittle across git worktrees, parallel dev servers, or subagent/browser automation.
+- A user asks for stable local URLs, Portless setup, Portless troubleshooting, or named `.localhost` routes.
+- You need to record a human-verifiable local URL in `/ship`, `/verify`, or PR testing notes.
+
+## When NOT to Use
+
+- Pure CLI, library, docs, config, or unit-test-only work.
+- CI verification or non-interactive environments where privileged proxy setup could hang or fail.
+- The user has not approved installing Portless or making local machine changes.
+- The only goal is to run a single test or inspect code; use normal project commands instead.
+
+## Safety Model
+
+Portless can touch machine-level state. Classify commands before running them:
+
+| Class            | Examples                                                              | Policy                                             |
+| ---------------- | --------------------------------------------------------------------- | -------------------------------------------------- |
+| Read-only        | `portless --version`, `portless list`, `portless get <service>`       | OK if binary exists                                |
+| Process-local    | `portless run npm run dev`                                            | Ask first; starts a long-running server/proxy path |
+| Machine-mutating | install, CA trust, hosts sync, proxy start/stop, aliases, prune/clean | Ask first; explain impact                          |
+| Network-exposing | LAN mode, `.local` sharing                                            | Ask first; mention local network exposure          |
+
+Never run `sudo`, trust a CA, edit `/etc/hosts`, start/stop global proxies, prune/clean state, or expose LAN services without explicit approval in the current conversation.
+
+## Detection Checklist
+
+Before suggesting Portless:
+
+```bash
+command -v portless >/dev/null 2>&1 && portless --version
+```
+
+If installed, read current state without mutating it:
+
+```bash
+portless list
+```
+
+If a service is already known, resolve its URL:
+
+```bash
+portless get <service>
+```
+
+If Portless is not installed, do **not** install automatically. Ask whether the user wants global/user-local Portless setup and state that it may configure local proxy, HTTPS trust, and hosts entries depending on the chosen setup path.
+
+## Verification Workflow
+
+When approved and useful for a local web task:
+
+1. Prefer the project's existing dev command from `package.json`, `Makefile`, or docs.
+2. Ask before wrapping it with Portless.
+3. Start the dev server with Portless in a visible terminal/process:
+   ```bash
+   portless run npm run dev
+   ```
+4. Resolve the stable URL:
+   ```bash
+   portless get <service>
+   ```
+5. Use the stable URL for browser automation, OAuth/webhook callback notes, manual checkpoints, or PR testing instructions.
+6. Keep normal verification gates (`typecheck`, `lint`, `test`, `build`) separate; a reachable Portless URL does not prove code correctness.
+
+## Command Integration Rules
+
+- `/create` and `/plan`: mention Portless only when success criteria involve browser/manual local-web verification or callback URLs.
+- `/ship`: use Portless during Phase 4 only if approved and relevant; never auto-install or auto-start it.
+- `/verify`: may use read-only `portless list` / `portless get` evidence and approved stable URLs for manual or browser checks.
+- `/status`: may include `portless list` if installed; no Portless mutations from status.
+- `/lfg`: inherits Portless behavior through `/plan`, `/ship`, and `/verify`; do not add a separate Portless branch.
+
+## Reporting
+
+When Portless is used, report:
+
+```text
+Portless: [not installed | installed | approved active]
+Service: <name>
+URL: https://<name>.localhost
+Evidence: <command used to resolve or verify>
+Limitations: normal gates still required
+```
+
+If setup was skipped because approval was missing, say exactly what was skipped and continue with normal localhost/port verification.
+
+## Gotchas
+
+- **Privileged local networking is not a harmless helper** — Portless may bind 80/443, invoke sudo, add a local CA, or mutate hosts/proxy state. Always separate read-only discovery from machine-mutating setup.
+- **Pre-1.0 tool behavior can churn** — Verify current CLI behavior with `portless --version` and read-only commands before relying on exact subcommand output.
+- **Stable URL reachability is not correctness** — A named URL only proves routing. Still run project gates and feature-specific tests before claiming completion.

package/dist/template/.opencode/skill/terse-output-mode/SKILL.md

@@ -0,0 +1,95 @@
+---
+name: terse-output-mode
+description: Use when the user asks for terse, brief, less-wordy, token-efficient, or caveman-style responses. Applies concise output style while preserving technical precision, verification evidence, safety warnings, and exact code/command/error text.
+version: 1.0.0
+tags: [workflow]
+dependencies: []
+---
+
+# Terse Output Mode
+
+## Overview
+
+Terse output mode reduces assistant prose, not tool output or reasoning quality. Use it to answer with fewer words while preserving exact technical substance, safety constraints, and verification evidence.
+
+Default style is professional terse. Use meme-like caveman phrasing only when the user explicitly asks for `caveman mode`.
+
+## When to Use
+
+- User says: "be brief", "less words", "terse", "concise", "token-efficient", "caveman mode", or similar.
+- User wants short implementation progress updates.
+- User asks for compact status, diff summaries, review findings, or next actions.
+- Context pressure is high and user-facing prose can be shortened without losing fidelity.
+
+## When NOT to Use
+
+- Security warnings, secrets handling, destructive actions, or irreversible confirmations.
+- PRDs, implementation plans, ADRs, migrations, release notes, or docs where clarity beats brevity.
+- Debugging explanations where missing nuance could cause a wrong fix.
+- User appears confused, asks for clarification, or repeats a question.
+- Verification evidence would be hidden by compression.
+
+## Core Rules
+
+1. **Preserve exact technical content** — never rewrite code, commands, file paths, error strings, versions, numbers, API names, or config keys.
+2. **Cut filler first** — remove pleasantries, hedging, throat-clearing, repeated context, and generic reassurance.
+3. **Keep evidence** — completion claims still need command output, counts, exit status, or file references.
+4. **Prefer fragments when safe** — short noun-verb sentences are fine for status updates.
+5. **Cite precisely** — keep `file:line` references when making code claims.
+6. **Do not hide uncertainty** — if uncertain, say what is missing in fewer words.
+7. **Normal code artifacts** — commits, PR descriptions, docs, specs, and user-facing copy keep normal professional language unless requested otherwise.
+
+## Auto-Clarity Escape Hatch
+
+Temporarily leave terse mode when brevity would create risk:
+
+| Situation                     | Action                                   |
+| ----------------------------- | ---------------------------------------- |
+| Security or data-loss warning | Use normal explicit wording              |
+| Destructive confirmation      | State full impact and options            |
+| Multi-step manual instruction | Use numbered complete steps              |
+| Ambiguous user intent         | Ask one clear question                   |
+| User confusion                | Explain normally, then resume terse mode |
+
+After the risky section, return to terse output automatically.
+
+## Output Patterns
+
+### Status Update
+
+```markdown
+Changed `src/auth.ts:42` guard. Typecheck running.
+```
+
+### Findings
+
+```markdown
+Critical: `src/form.tsx:88` error text is not associated with input. Screen readers miss failure.
+Fix: add `aria-describedby`, `aria-invalid`, and `role="alert"`.
+```
+
+### Final Report
+
+```markdown
+Added optional terse output mode and intent mapping.
+`npm run lint` passes: 0 warnings, 0 errors. Typecheck passes.
+No commit made.
+```
+
+## Boundaries
+
+- This skill is output style only.
+- It does not replace `rtk-command-compression`; RTK handles shell/tool output compression.
+- It does not replace DCP/context compression; DCP handles conversation compression.
+- It does not install hooks, plugins, binaries, or dependencies.
+- It does not rewrite memory files or project documentation unless explicitly asked.
+
+## Common Mistakes
+
+| Mistake                             | Fix                                                            |
+| ----------------------------------- | -------------------------------------------------------------- |
+| Making terse mode always-on         | Activate only on user request or clear token-efficiency intent |
+| Dropping verification evidence      | Keep fresh command evidence for any completion claim           |
+| Rewriting exact errors or commands  | Preserve exact text in code spans                              |
+| Using caveman meme voice by default | Default to professional terse                                  |
+| Compressing plans/specs too hard    | Use normal detail for durable artifacts                        |