Merge remote-tracking branch 'upstream/dev' into dev

Brings in 397 upstream commits (merge base 64ca766, upstream tip
7524e5f "chore(infra): untrack zen buckets and trust dns now that they
are retained (anomalyco#62940)").

Big upstream change: the hosted web code was reorganized. services/www
(84 files) and packages/console (76 files) became one services/site, and
services/changelog and packages/function moved to services/share and
packages/stats. The fork changed none of those files, so git followed the
renames without help. packages/posts no longer exists upstream.

One file conflicted.

Conflict resolution
===================
- script/generate.ts: upstream changed the line `services/www` to
  `services/site`. The fork had added a `packages/client` generate step on
  the line right above it, so both edits touched neighboring lines. Kept
  both: the generate steps are now protocol, client and site, followed by
  the fork's formatter (prettier on the files that generation touched,
  because upstream's ./script/format.ts runs `prettier --write .`, and the
  repo is not prettier-clean). The client step is not required, since
  `make tests` runs check:generated for the client, but it saves a
  manual `cd packages/client && bun run generate`.

Fixes for upstream changes that did not conflict
================================================
- core/test/tool-cancel.test.ts (fork test): upstream's Tool now depends
  on a new feature-flag service (Flag), which needs Config. The test failed
  with "Unbound layer node: @opencode/Location". It now uses upstream's
  shared toolNodeReplacements() helper (test Config, passthrough Image,
  test Permission) in place of its own Permission mock.
- core/test/plugin/retitle.test.ts (fork test): session.generate now
  returns `tokens` and `cost` as well as `text`, so the test's fake model
  reply includes them.

Leftover folders
================
packages/posts and services/www stayed on disk as untracked build output
(.astro, .turbo, node_modules, generated JSON). Their own .gitignore files
went away with the folders, so git showed them as untracked. Upstream
changed no ignore rules. Deleted both folders.

Not exercised
=============
This merge added no upstream database migrations, so the migration merge
drivers did not run. The registry still ends at m59 (20261030054400_job)
and the snapshot id is unchanged.

Verification
============
- bun turbo typecheck: 34/34 packages (35 before: www and posts are now
  one package, site)
- oxlint: 0 errors
- bun script/migration.ts --check: no schema changes
- make tests: generated-file checks (protocol, client) pass; tui 196,
  core 476, schema 7, sdk 3 pass, 0 fail. The TUI output still prints
  "unexpected request: /api/session/..." lines; those are known noise and
  the tests pass.

Author: sharunkumar

.gitattributes

@@ -10,3 +10,5 @@ packages/client/src/effect/generated/** linguist-generated
 packages/client/src/effect/api/** linguist-generated
 packages/core/src/**/*.txt text eol=lf
 packages/httpapi-codegen/test/generated/*.ts text eol=lf
+# The site tests compare source text and humans.txt byte for byte, so Windows checkouts keep LF.
+services/site/** text=auto eol=lf

…nsole/app/src/asset/logo-ornate-dark.svg .github/assets/logo-ornate-dark.svgpackages/console/app/src/asset/logo-ornate-dark.svg renamed to .github/assets/logo-ornate-dark.svg packages/console/app/src/asset/logo-ornate-dark.svg renamed to .github/assets/logo-ornate-dark.svg

@@ -25,7 +25,7 @@ manifests() {
       "PublisherSupportUrl: https://github.com/anomalyco/opencode/issues" "PrivacyUrl: https://opencode.ai/legal/privacy-policy" \
       "PackageName: $name" "PackageUrl: https://opencode.ai/" "License: MIT" "LicenseUrl: https://github.com/anomalyco/opencode/blob/HEAD/LICENSE" \
       "ShortDescription: $description" "Moniker: $moniker" "Tags:" "- ai" "- coding-agent" "- developer-tools" \
-      "Documentations:" "- DocumentLabel: Docs" "  DocumentUrl: https://opencode.ai/v2/docs"
+      "Documentations:" "- DocumentLabel: Docs" "  DocumentUrl: https://opencode.ai/docs"
     footer defaultLocale
   } > "$out/$id/$id.locale.en-US.yaml"
 }

…sole/app/src/asset/logo-ornate-light.svg .github/assets/logo-ornate-light.svgpackages/console/app/src/asset/logo-ornate-light.svg renamed to .github/assets/logo-ornate-light.svg packages/console/app/src/asset/logo-ornate-light.svg renamed to .github/assets/logo-ornate-light.svg

@@ -0,0 +1,42 @@
+name: check-docs
+
+# Builds the V2 docs on their own (services/site/src/docs/script/build.ts): compiles every MDX page,
+# prerenders it, builds search, checks every link and that pages load nothing from outside /docs. The
+# site's deploy runs the same step, so a broken page fails here instead of blocking the deploy.
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    paths:
+      - services/site/**
+      - packages/protocol/openapi.json
+      - packages/cli/src/config/**
+      - .github/workflows/check-docs.yml
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  docs:
+    name: docs build
+    if: ${{ !github.event.pull_request.draft }}
+    runs-on: blacksmith-4vcpu-ubuntu-2404
+    timeout-minutes: 10
+    defaults:
+      run:
+        working-directory: services/site
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+
+      - uses: ./.github/actions/setup-bun
+
+      # The API reference and the config schema the pages link (/docs/openapi.json, /v2/cli.json).
+      - name: Generate
+        run: bun run generate
+
+      - name: Build docs
+        run: bun src/docs/script/build.ts --out "$RUNNER_TEMP/docs"

.github/release/render-winget.sh

@@ -203,7 +203,7 @@ jobs:
           $output = & $binary --version
           if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
           Write-Output $output
-          if ($output -ne "opencode-pty $version (protocol 7)") { throw "Unexpected executable version: $output" }
+          if ($output -notmatch "^opencode-pty $([regex]::Escape($version)) \(protocol \d+\)$") { throw "Unexpected executable version: $output" }
       - name: Document current coverage
         if: always()
         run: |

.github/workflows/check-docs.yml

@@ -0,0 +1,39 @@
+name: deploy-site
+
+on:
+  push:
+    branches:
+      - dev
+      - production
+  workflow_dispatch:
+
+concurrency:
+  group: deploy-site-${{ github.ref_name }}
+  cancel-in-progress: false
+
+permissions:
+  contents: read
+
+jobs:
+  deploy:
+    if: github.repository == 'anomalyco/opencode' && (github.ref_name == 'dev' || github.ref_name == 'production')
+    runs-on: blacksmith-4vcpu-ubuntu-2404
+    environment: ${{ github.ref_name }}
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+
+      - uses: ./.github/actions/setup-bun
+
+      # The workflow's own token, at build time only: script/github-snapshot.ts records the repo
+      # numbers and releases the site falls back to. The Worker never gets a GitHub token.
+      - name: Build
+        working-directory: services/site
+        run: bun script/build.ts --mode ${{ github.ref_name }}
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+
+      - name: Deploy
+        working-directory: services/site
+        run: bunx cf deploy --prebuilt --mode ${{ github.ref_name }}
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}