Visitar URL original
fix(core): keep a shell command's output when the user interrupts its call by jlongster · Pull Request #62977 · anomalyco/opencode · GitHub
Skip to content

fix(core): keep a shell command's output when the user interrupts its call - #62977

Merged
jlongster merged 5 commits into
devfrom
shell-interrupt-keep-output
Nov 10, 2026
Merged

fix(core): keep a shell command's output when the user interrupts its call#62977
jlongster merged 5 commits into
devfrom
shell-interrupt-keep-output

Conversation

@jlongster

@jlongster jlongster commented Nov 9, 2026 •
edited by opencodejr Bot
Loading

Copy link
Copy Markdown
Contributor

Issue for this PR

Fixes #39565

Second of three stacked PRs replacing #61876. Based on #62976; merge that first.

Type of change

  • Bug fix
  • New feature
  • Refactor / code improvement
  • Documentation

What does this PR do?

Interrupting a running shell call (Esc, stopping the session) used to delete its output: the job's interrupt called shell.remove, which killed the process and unlinked sh_X.out, and the model only saw "Tool execution interrupted". This works on today's spawner; no daemon involved.

  • Shell.stop(id, reason): SIGTERM to the process group, SIGKILL after 3 s, without forgetting the command or its file. Timeouts use it too. remove is unchanged.
  • Cooperative cancel: Tool.Context gains an optional cancel effect that completes when the user asks the call to stop (left out of the Promise plugin ToolContext, which keeps its signal). It is threaded like progress: step → Snapshot.execute → Tool.Context. CodeMode never passes it to nested calls.
  • step.ts: each tool call gets a cancel gate. On a user stop (the interruption reason now travels explicitly from the session execution through the runner, like isLocationClosed), the step completes the gates. Tools that were awaiting cancel settle their own call through the normal path (execute.after hooks, then failTool), every other tool is interrupted at once, and stragglers are interrupted after 5 s. A server shutdown interrupts every tool as before. The step still ends interrupted and starts no new model request. What the tools raise while the stop settles them (a decline, a cancelled question, a defect) is classified from their own exits.
  • Shell tool: listens for cancel from the start of the call, before the command is created, until the call ends, so a stop always reaches it cooperatively, even while the command starts. A stop while asking for permission ends the call before any command starts; a stop during creation stops the command as soon as it exists. On a stop it stops the command, waits at most 500 ms, and fails with a ToolFailure carrying the output tail, [full output saved to <file>] and the shell ID. If the command hasn't exited yet, the stop keeps escalating in the background. A fiber interrupt (shutdown) keeps today's path.
  • A user stop after a Location reload also goes through cancel: the reloaded Location keeps serving the step that borrows it.

How did you verify your code works?

bun run typecheck:tsc in schema, plugin, core and server. Full core suite (6963 pass), plugin package (37) and full server suite (127). Four core tests fail in my sandbox on every branch of the stack, untouched by it (test-preload HOME isolation, two unwritable-lock-root tests run as root, a HOME-dependent ShellParse test). New tests: a stopped call keeps the file and fails with tail, path and shell ID; a silent command shows the marker once; a SIGTERM-ignoring command settles quickly and is still killed; an execute.after hook can replace the stopped call's error; a shutdown interrupt keeps the generic path; with a cooperative and a stuck tool running together, a user stop lets the first fail with its own error and interrupts the other at once, with one model request; the same after a Location reload; a shutdown interrupts every tool; a stop before the command starts never starts it; a CodeMode nested call never sees cancel.

Checklist

  • I have tested my changes locally
  • I have not included unrelated changes in this PR

Added by the opencode bot (AI-generated).

Related: #54222

Public API: adds optional cancel to the Effect Tool.Context (not exposed to Promise plugins) and interrupted/notice to a stopped shell call's metadata (backwards compatible)

@jlongster jlongster mentioned this pull request Nov 9, 2026
Merged
3 of 6 tasks
This was referenced Nov 9, 2026
Merged
Closed
Merged
@jlongster
jlongster force-pushed the shell-interrupt-keep-output branch 2 times, most recently from b5e6789 to 378435f Compare November 10, 2026 18:57
Base automatically changed from pty-v8-transport to dev November 10, 2026 19:15
@jlongster
fix(core): keep a shell command's output when the user stops its call
dd3c04b 
Stopping a foreground shell call used to remove the command and delete its
output file, and the call failed with a bare "Tool execution interrupted".
Now the user's stop reaches tools through a new `cancel` effect on
Tool.Context: the shell tool stops the command gracefully (SIGTERM, then
SIGKILL after 3 s) without forgetting it, waits at most 500 ms for it to
exit, and fails the call with the output so far, where the full output is,
and the shell ID.

The step gives each tool call a cancel gate. On a user stop it completes
the gates, lets every tool that was awaiting its gate settle its own call
(failing normally, through execute.after hooks and failTool), interrupts
every other tool at once, and interrupts stragglers after 5 s. A server
shutdown or a closed Location interrupts every tool as before. The step
still ends interrupted and starts no new request. The interruption reason
travels explicitly from the session execution through the runner to the
step, like isLocationClosed. CodeMode never hands `cancel` to nested calls.

User decisions:
- An interrupted shell call is a failed call carrying its output, not a success
- Wait at most 500 ms for the stopped command before settling the call
- Use cooperative cancel instead of a side-channel slot
- execute.after hooks must still run and be able to replace the error
@jlongster
fix(core): listen for the user's stop for the whole shell call
4d8c0dd 
The shell tool now awaits `cancel` from the start of the call, before the
command is created, and keeps listening until the call ends. A stop while
the command starts therefore reaches the tool cooperatively instead of
interrupting it: a stop while asking for permission ends the call before
any command starts, and a stop during creation stops the command as soon
as it exists. A user stop after a Location reload also goes through
`cancel` now; the reloaded Location keeps serving the step that borrows it.

User decisions:
- The shell tool listens for the user's stop from the start of the call
- A user stop after a Location reload also goes through cooperative cancel
@jlongster
fix(core): classify what tools raise while a user's stop settles them
b032f90 
When a step was stopped while it waited for its tools, it classified the
interrupted wait instead of the tools' own exits, so a decline, a
cancelled question or a defect raised while the stop settled them was
lost. It now reads each tool's exit once all have ended, and still
counts the step as interrupted. `makeCancel` is no longer exported.

User decisions:
- Classify the tools' exits after the stop, keeping the step interrupted
- Export makeCancel only where it is used
opencodejr[bot]
opencodejr Bot reviewed Nov 10, 2026
View reviewed changes

@opencodejr opencodejr Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The fix works. With the #39565 reproduction script, the base deletes the shell record and its .out file when the call is interrupted. With this PR both are kept, and the PR's tests cover the user-stop path that fails with the output tail, the saved-file path and the shell ID. The core shell, step, runner, coordinator and codemode tests pass (402/0), and typecheck:tsc passes in core, plugin and schema.

Public API: Tool.Context (in @opencode/schema) gains an optional cancel: Effect<void>, and the Promise plugin ToolContext leaves it out (Omit<…, "progress" | "cancel">). This is backwards compatible: existing Effect tools ignore it, and Promise plugins keep using signal.

One inline concern: the call's final wait now runs without restore inside the uninterruptible region.

Related: #54222

Comment thread packages/core/src/tool/plugin/shell.ts

return yield* Deferred.await(settled)
}).pipe(
return yield* Deferred.await(settled)

@opencodejr opencodejr Bot Nov 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This Deferred.await(settled) now runs inside uninterruptibleMask without restore (on the base it could be interrupted). settled is only completed by the job's run, so if jobs.block returns undefined (the job is missing, or jobs.background returns nothing on the auto-background path), the call hangs and a shutdown can no longer interrupt it. Could this be wrapped in restore(...), or could the undefined case fail explicitly?

@jlongster
jlongster force-pushed the shell-interrupt-keep-output branch from 378435f to b032f90 Compare November 10, 2026 19:17
opencodejr[bot]
opencodejr Bot reviewed Nov 10, 2026
View reviewed changes

@opencodejr opencodejr Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These commits only rebase onto dev. The PR's own changes are the same as in my last review, and on the new head the shell, step and #39565 reproduction checks still pass. The earlier point on shell.ts (the final Deferred.await(settled) running outside restore) isn't addressed yet.

Public API: unchanged since my last review. Tool.Context gains an optional cancel, which the Promise plugin ToolContext leaves out, so this stays backwards compatible.

@jlongster
fix(tui,session-ui): show a stopped shell call's output once
d4bd661 
A shell call the user stopped fails with its output followed by a notice
(where the full output is, and the shell ID). The TUI showed that output
twice, once in the card's output block and again in the error; the web
renderer showed it only inside the error card. The tool now names the
notice in the failure's metadata (`notice`), and both renderers show what
precedes it through the normal shell output, clipped like a finished
call's, then only the notice as the error. The model still gets the same
text. An error a plugin rewrote is shown as is.

User decisions:
- Show the interrupted output once, clipped like a completed call, with the notice once
- Keep the model-facing error text unchanged
@jlongster
jlongster force-pushed the shell-interrupt-keep-output branch from 72876b3 to d4bd661 Compare November 10, 2026 20:09
@jlongster
fix(session-ui): decode a stopped shell call's notice at the metadata…
6e4f169 
… boundary

Lint: no runtime typeof in stoppedShell; spacing.
opencodejr[bot]
opencodejr Bot reviewed Nov 10, 2026
View reviewed changes

@opencodejr opencodejr Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These commits look fine. The shell-result, tool-shell, run-machine and new TUI stopped-shell tests pass, and typecheck:tsc is clean in core, session-ui and tui. The earlier shell.ts point (the final Deferred.await(settled) outside restore) is still open.

Public API: on top of the optional cancel on Tool.Context, a stopped shell call's failure metadata now carries interrupted and notice. Both are additive and backwards compatible.

I couldn't get a stopped shell call to render in the TUI with the simulated model. Could you add a before/after screenshot of a stopped call in the TUI?

@jlongster
jlongster enabled auto-merge (squash) November 10, 2026 20:22
@jlongster
jlongster merged commit 05d347d into dev Nov 10, 2026
22 checks passed
@jlongster
jlongster deleted the shell-interrupt-keep-output branch November 10, 2026 20:28
simonklee added a commit that referenced this pull request Nov 12, 2026
@simonklee
fix(cli-rs): show a stopped shell call's output before its notice
ca04866 
Port of the TUI part of #62977: a shell call the user interrupted fails with its output followed by the notice its metadata names; the block shows the output like a finished call's and only the notice as the error. The E.7a/shell-stopped scenario covers it.
simonklee added a commit that referenced this pull request Nov 12, 2026
@simonklee
fix(cli-rs): show a stopped shell call's output before its notice
e956e94 
Port of the TUI part of #62977: a shell call the user interrupted fails with its output followed by the notice its metadata names; the block shows the output like a finished call's and only the notice as the error. The E.7a/shell-stopped scenario covers it.
simonklee added a commit that referenced this pull request Nov 12, 2026
@simonklee
fix(cli-rs): show a stopped shell call's output before its notice
10ea4e3 
Port of the TUI part of #62977: a shell call the user interrupted fails with its output followed by the notice its metadata names; the block shows the output like a finished call's and only the notice as the error. The E.7a/shell-stopped scenario covers it.
simonklee added a commit that referenced this pull request Nov 12, 2026
@simonklee
fix(cli-rs): show a stopped shell call's output before its notice
7b56ed0 
Port of the TUI part of #62977: a shell call the user interrupted fails with its output followed by the notice its metadata names; the block shows the output like a finished call's and only the notice as the error. The E.7a/shell-stopped scenario covers it.
SirWellington added a commit to WellingtonHQ/opencode that referenced this pull request Nov 13, 2026
@SirWellington @iamdavidhill
@adamdotdevin @kitlangton @vaprdev @rekram1-node @Hona exe.dev user @jlongster @Tarquinen @opencode-agent Daniel @smagnuso @2SinceJuly @MrMushrooooom @Slickstef11 @usrnk1 @ludvigrask @thdxr @ryanskidmore @fwang @jayair @github-actions @tomzhu1024 @OpeOginni @simonklee @Kyle-j-bush @kommander @arvsrn @sidevesh @neriousy @vglafirov
Updates from Upstream (#3)
fc1e601 
* chore(site): remove the unused arcade sound library from the media manifest (anomalyco#62611)

* fix(site): bring the latest site fixes from the new-website workshop (anomalyco#62613)

Co-authored-by: Adam <2363879+adamdotdevin@users.noreply.github.com>

* feat(data): switch the mono font to OpenTUI Mono (anomalyco#62623)

* feat(site): add the shared product and logo menus to every nav (anomalyco#62654)

Co-authored-by: Adam <2363879+adamdotdevin@users.noreply.github.com>

* fix(data): keep native light-dark() so the shared nav menus get their colours (anomalyco#62660)

* feat(core): wake sessions on Console event watches (anomalyco#62662)

* fix(site): match the product chevron to the docs chevron (anomalyco#62665)

Co-authored-by: Adam <2363879+adamdotdevin@users.noreply.github.com>

* fix(site): stop the page dimming when a product card opens (anomalyco#62622)

* perf(core): fetch Console instructions and skills concurrently (anomalyco#62672)

* docs: antivirus HTTPS scanning and W-9 tax form (anomalyco#62661)

* fix(site): stop server functions failing on the dev server behind a proxy (anomalyco#62677)

* fix(site): pin the Like letters? bar so Safari's toolbar turns blue with it (anomalyco#62674)

* fix(site): tidy the docs bars and search on phones and desktop (anomalyco#62669)

* fix(site): use one dark link blue across the sites (anomalyco#62676)

* feat(data): per-page Open Graph cards for model and lab pages (anomalyco#62692)

* fix(core): clearer shell exit and timeout status, pass unmatched zsh globs through (anomalyco#62141)

Co-authored-by: Aiden Cline <aidenpcline@gmail.com>

* docs(legal): cover integrations with third-party services (anomalyco#62700)

* fix(site): follow up anomalyco#62700 with dev's commit in the legal history and new legal bundle budgets (anomalyco#62701)

* fix(core): keep Console policies when its instructions or skills fail (anomalyco#62702)

* fix(core): don't fail MCP tool calls whose results break their output schema (anomalyco#61254)

* fix(site): tidy the phone nav, docs menus and icons (anomalyco#62707)

* chore(perf): bench with strobe 0.20.0 from github.com/anomalyco/strobe (anomalyco#62705)

* feat(core): watch workspace MCP servers' events through the Console plugin (anomalyco#62734)

* chore(perf): bench with strobe 0.21.0 (accuracy audit) (anomalyco#62747)

* feat(site): keep the page and current section stuck on phone docs (anomalyco#62751)

* fix(site): return Safari's toolbar to the page colour when the letters go back (anomalyco#62754)

* fix(site): make the phone sticky rows full width so their tap fill reaches both edges (anomalyco#62759)

* fix(core): keep Code Mode catalog updates small and stable (anomalyco#62176)

Co-authored-by: exe.dev user <exedev@anton.exe.xyz>

* fix(core): make build metadata a required service so flags can't silently fall back to release defaults (anomalyco#62686)

* chore(perf): bench with strobe 0.22.0; tabs' warm switches end on the frame after the answer (anomalyco#62764)

* fix(core): keep a v1 provider's baseURL when api is also set (anomalyco#62570)

* fix(desktop): show an error when opening a path in the default app fails (anomalyco#62572)

* Add Frantic Ferret Free (anomalyco#62770)

Co-authored-by: Daniel <daniel@anoma.ly>

* fix(app): slide the side panel shut when its last tab closes (anomalyco#62758)

* feat(core): frame Console channel follow-up wakes as maybe unrelated, and let watch take minutes (anomalyco#62774)

* Remove Frantic Ferret Free from docs (anomalyco#62780)

* fix(desktop): restore the review shortcut (anomalyco#62567)

* docs(legal): cover hosted agent sessions and their retention (anomalyco#62789)

* fix(site): point the legal history's hosted agents entry at dev's commit (anomalyco#62790)

* fix(core): tail reads from the end of a file and suggest close file names (anomalyco#62147)

Co-authored-by: Aiden Cline <aidenpcline@gmail.com>

* docs: strobe moved to github.com/anomalyco/strobe (anomalyco#62706)

* feat(core): say which credential changed in credential.updated (anomalyco#62762)

* chore(perf): bench with strobe 0.23.0 (anomalyco#62799)

* chore: let bun resolve strobe's Windows on Arm package (anomalyco#62804)

* feat(core): tag shell, tool and model-stream spans with session, agent and command (anomalyco#62806)

* fix(server): stop waiting for plugins in request handlers (anomalyco#62796)

* fix(core): refresh the Copilot API endpoint with the model list (anomalyco#62171)

Co-authored-by: exe.dev user <exedev@anton.exe.xyz>

* feat(ai): support predicate criteria in decisions (anomalyco#62819)

* fix(core): stop retrying ChatGPT workspace usage limits (anomalyco#62823)

* feat(acp): support _session/steering (anomalyco#54394)

Co-authored-by: Dan Smolsky <dannysmo@gmail.com>

* docs: document cache.ttl and per-model cache.warming (anomalyco#62829)

* fix(core): stop applying well-known remote config after logout (anomalyco#62760)

Co-authored-by: 2SinceJuly <202121119+2SinceJuly@users.noreply.github.com>

* fix(core): refresh MCP OAuth tokens under the shared credential lock (anomalyco#62827)

* refactor(core): run GitHub Copilot on native ai protocols (anomalyco#62034)

Co-authored-by: exe.dev user <exedev@anton.exe.xyz>

* fix(app): drop the dead plugin-boot retry on catalog syncs (anomalyco#62830)

* docs(go): add LongCat 2.5 Free to Free and Go (anomalyco#62878)

Co-authored-by: Jack <jack@anoma.ly>

* refactor(tui): remove the import cycle in plugin (anomalyco#62884)

* refactor(core): remove the import cycle in v1 migration (anomalyco#62885)

* refactor(codemode): remove the import cycle in interpreter (anomalyco#62886)

* docs(console): lower Claude Sonnet 5.5 cached read price to $0.10 (anomalyco#62887)

* feat(app): mark sessions read or unread from their menus (anomalyco#62889)

* fix(session-ui): show the picked question answer as a raised card (anomalyco#62896)

* chore(perf): bench with strobe 0.24.0 (anomalyco#62895)

* feat(core): return usage from session generate (anomalyco#62835)

* fix(tui): use keyboard-navigable buttons in update and confirm dialogs (anomalyco#62906)

* fix(ui): remove focus form borderless inline input while editing (anomalyco#62919)

* fix(ui): keep selects, menus, tooltips and toasts reachable from a dialog (anomalyco#62913)

* fix(ui): list types before import in packed exports and export select.css (anomalyco#62914)

* chore(infra): drop stripe and aws from deploy, move share to its own worker (anomalyco#62908)

* fix(site): align Copy as Markdown with the end of the docs page footer (anomalyco#62933)

* chore(infra): drop SiteDomain and retain zen buckets and trust dns before untracking (anomalyco#62938)

* docs(console): add Muse Ember 1.0 (anomalyco#62935)

Co-authored-by: Daniel <daniel@anoma.ly>

* fix(core): hold Console watch wakes after 5 in 10 minutes or 20 since the prompt (anomalyco#62924)

* fix(tui): use the base text color for the dialog search cursor (anomalyco#62939)

* chore(infra): untrack zen buckets and trust dns now that they are retained (anomalyco#62940)

* fix(tui): drop usage and the model detail line from the model picker (anomalyco#62927)

* fix(tui): remove dark gap between execute detail and its footer (anomalyco#62928)

* fix(tui): add a blank row under the OAuth dialog title (anomalyco#62929)

* fix(tui): give the shell output dialog new-design footer actions (anomalyco#62932)

* docs(console): add Claude Fable 5.2 (anomalyco#62949)

Co-authored-by: Daniel <daniel@anoma.ly>

* fix(core): time warming from the model's cache.ttl by default (anomalyco#62831)

Co-authored-by: Ryan Skidmore <4580448+ryanskidmore@users.noreply.github.com>

* chore(perf): bench with strobe 0.26.0 (anomalyco#62931)

* feat(app): close side panel tabs to the right and make ⌘W/⌘⇧T side-panel aware (anomalyco#62922)

* ci: read deploy and release secrets from aws secrets manager (anomalyco#62954)

* fix(perf): type navigation.bench.ts's setup key on its target (anomalyco#62952)

* fix(core): stop warming a session after a ping misses the cache (anomalyco#62926)

Co-authored-by: Ryan Skidmore <4580448+ryanskidmore@users.noreply.github.com>

* fix(core): count the warming interval from when the request was sent (anomalyco#62941)

* fix(site): keep open menus under the pinned header (anomalyco#62968)

* docs: match Gemini Flash intro pricing on Console models (anomalyco#62937)

Co-authored-by: Frank <frank@anoma.ly>

* docs(console): deprecate Crouton Alpha Free (anomalyco#62975)

Co-authored-by: Daniel <daniel@anoma.ly>

* fix(site): fetch the docs' status bars from a 79-byte endpoint when the footer comes near (anomalyco#62962)

* fix(site): stop idle polling and scroll layout thrashing (anomalyco#62966)

* fix(files): cache the site's media for a year (anomalyco#62980)

* fix(site): flatten masked logo SVGs so they render sharp (anomalyco#62946)

* refactor(site): keep dev-only code out of production pages and group small shared chunks (anomalyco#62964)

* fix(site): load the nav menus, console API and Hex pop-up on intent (anomalyco#62965)

* fix(site): serve AV1/HEVC card videos and load card media after the page (anomalyco#62971)

* refactor(core): give each warmed session one owned loop (anomalyco#62972)

* chore(perf): bench with strobe 0.27.0 (anomalyco#62985)

* refactor(site): parameterize src/docs for multiple docs sets (anomalyco#62950)

* feat(site): serve V1 docs in the new design at /v1/docs (anomalyco#62951)

* feat(site): translate the V1 docs' chrome and missing pages (anomalyco#62956)

* feat(app): keep assistant copy visible on dev builds (anomalyco#62992)

* chore(core): update MCP SDK to 2.4.0 (anomalyco#62982)

* refactor(site): prune component CSS variants and split shell from route stylesheets (anomalyco#62990)

* fix(stats): map crouton alpha to muse ember (anomalyco#62994)

* chore(infra): point docs.opencode.ai at the site worker (anomalyco#62999)

* docs(console): add MiniMax M3.1 Flash Free (anomalyco#63005)

Co-authored-by: MrMushrooooom <19261047+MrMushrooooom@users.noreply.github.com>

* fix(core): count session generate requests in the session's cost (anomalyco#63006)

* feat(ai): add embedding models with the OpenAI embeddings protocol (anomalyco#62832)

* refactor(ai): remove the ImageResponse.image shortcut (anomalyco#63011)

* fix(core): keep MCP OAuth credentials when a refresh fails temporarily (anomalyco#63012)

* feat(ai): add Google embedContent embeddings (anomalyco#62843)

* feat(core): add GitHub Copilot Auto and a model resolve hook (anomalyco#62997)

* refactor(plugin): edit the model in place in experimental.model.resolve (anomalyco#63015)

* feat(ai): add Vertex predict embeddings (anomalyco#62844)

* feat(ai): add Google and Vertex embedding entry points (anomalyco#63017)

* refactor(core): share OAuth credential refresh between provider logins and MCP (anomalyco#63022)

* fix(core): keep background compaction from stopping a running Claude Agent session (anomalyco#63025)

* fix(core): keep catalog capabilities when a v1 model override sets only some (anomalyco#62573)

* fix(site): build the Worker as one file so its chunks can't import each other (anomalyco#63031)

* feat(site): serve the reading pages as static HTML (anomalyco#63032)

* fix(core): send gatewayApiKey to Cloudflare AI Gateway (anomalyco#62574)

* fix(core): put Console event watches behind the console_watches flag (anomalyco#63036)

* fix(core): stop splitting an emoji when read truncates a long line (anomalyco#62575)

* fix(core): list Console's watch tool and say pull requests wake with their checks (anomalyco#63039)

* fix(core): stop interrupting Claude Agent tool calls when instructions or tools change (anomalyco#63033)

* ignore: wait for plugins again where managed policy applies  (anomalyco#63040)

* refactor(site): share the static pages' behaviour with their components (anomalyco#63041)

* chore(perf): bench with strobe 0.28.0 (anomalyco#63043)

* release: v2.2.6 (anomalyco#62450)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* feat(site): serve the home and product pages as static HTML (anomalyco#63060)

* refactor(site): make every page static and stop shipping the app's JavaScript (anomalyco#63067)

* feat(app): make session IDs easier to find and copy (anomalyco#63083)

* release: v2.2.7 (anomalyco#63085)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* feat(app): show tab shortcut numbers while holding the mod key (anomalyco#63089)

* fix(site): answer other methods on pages with a 405 (anomalyco#63102)

* fix(site): send every unhandled method a 405 listing what the address takes (anomalyco#63104)

* fix(app): tighten gap between titlebar search and first tab to 10px (anomalyco#63108)

* chore(release): mint short-lived cloudflare token for r2 uploads (anomalyco#63115)

* docs(console): list Muse Ember 1.0's over-200K price (anomalyco#63116)

* feat(app): queue a follow-up first with Alt+Enter (anomalyco#63109)

* feat(app): steer the next queued prompt with Mod+Enter (anomalyco#63111)

* fix(site): load the changelog's collapsed lists when opened (anomalyco#63122)

* chore(web): move the V1 docs into services/site and remove packages/web (anomalyco#63117)

* fix(release): publish platform packages before the cli package (anomalyco#63124)

* feat(app): link Console MCPs and skills in Extensions settings (anomalyco#63125)

* fix(site): serve 1344-wide hero videos to 1x screens and phones (anomalyco#63135)

* refactor(site): keep Solid off the static pages until an overlay opens (anomalyco#63140)

* refactor(site): drop code only the hydrated production pages used (anomalyco#63147)

* fix(core): retry failed streams cleanly and keep finished work on interrupt (anomalyco#60674)

* fix(core): send Copilot requests to the login's own endpoint until models load (anomalyco#63146)

* feat(core): background shell commands when their timeout expires (anomalyco#63024)

* docs(console): add Gemini 4 Carbon to Zen (anomalyco#63153)

Co-authored-by: Daniel <daniel@anoma.ly>

* refactor(core): remove the import cycle between provider and aisdk-native (anomalyco#62883)

Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>

* refactor(ai): remove the import cycles between media modules and their clients (anomalyco#62882)

Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>

* refactor(site): share the docs' and static pages' shell code (anomalyco#63161)

* fix(site): keep the Like letters? bar's look when the announcement banner is off (anomalyco#63157)

* docs(console): document paying for Go with credit (anomalyco#63162)

* fix(site): give the not-found page one stylesheet of what it renders (anomalyco#63169)

* feat(app): add an experimental customizable sessions sidebar (anomalyco#63143)

* feat(core): speak opencode-pty protocol v8 (anomalyco#62976)

* fix(app): slide the file tree sidebar open and shut again (anomalyco#62773)

* fix(core): keep a shell command's output when the user interrupts its call (anomalyco#62977)

* fix(app): name the main checkout by its branch instead of Local (anomalyco#63187)

* feat(core): run shell commands in the process daemon across handoffs (anomalyco#62978)

* feat(plugin): let promise tools stop cooperatively through their signal (anomalyco#63127)

* feat(core): use freeform tool input on models that support it (anomalyco#61703)

* fix(core): accept decision-type models from LM Studio (anomalyco#56214)

* fix(tui): draw paste chip text dark in dark mode and light in light mode (anomalyco#62930)

* fix(tui): open the right activity tab and make tabs clickable (anomalyco#60168)

* feat(app): add Recent sessions sidebar experiment and iOS-style recency (anomalyco#63177)

* feat(tui): default transcript verbosity to low (anomalyco#63207)

* fix(app): show Recent sidebar rows exactly like side tabs (anomalyco#63211)

* fix(desktop): stop freezing the main process during the login shell env probe (anomalyco#63208)

* v0.8.4 (anomalyco#63055)

* fix(core): accept null context length from LM Studio models (anomalyco#63198)

* fix(core): report a refused Console auto-watch (anomalyco#63217)

* fix(cli): update npm installs through their own prefix (anomalyco#63152)

* feat(codemode): rank tool search with name-weighted BM25 (anomalyco#62984)

* feat(core): run LM Studio decision models (anomalyco#63200)

* fix(core): describe the execute program as plain JavaScript for every tool shape (anomalyco#63226)

* chore(ci): keep the heavy test tier off pull requests

pull requests now run the affected unit tests on linux only. the windows unit
tests, the compiled builds and the four playwright suites still run on every
push to dev and beta, on nightly runs, and as a release.yml gate before a
stable release publishes.

* chore(skills): describe the test tiers as they now run

* chore(ci): gate a stable release on the linux browser suites

the windows playwright legs still fail on dev pushes often enough that a
release gate over them would stall shipping. unit tests and builds still cover
both OSes, and dev pushes and nightly runs still cover the windows browser
legs.

* feat(tui): open sessions from session IDs in messages (anomalyco#63224)

* chore: move the api worker into the legacy service

* fix(tui): only re-highlight blocks whose session link changed (anomalyco#63247)

* chore: move the data site off sst

the stats site, its og worker and the sync workflow deploy from services/data with cf as
opencode-data-<stage>, opencode-data-og-<stage> and opencode-data-sync-<stage>. the beta
web app and the whole sst setup (sst.config.ts, infra/, sst-env.d.ts, the sst dependency)
are gone, so nothing deploys through sst anymore (security finding anomalyco#920).

* chore: drop the sst-env.d.ts files sst regenerated

* fix(core): refresh MCP OAuth tokens before they expire (anomalyco#63028)

* fix(site): keep the bare host as a custom domain

* fix(ai): keep exhausted request rate limits retryable (anomalyco#59816)

* fix(codemode): return compact JSON results (anomalyco#63258)

* feat(core): support MCP events in the MCP client (anomalyco#63254)

Co-authored-by: Adam <2363879+adamdotdevin@users.noreply.github.com>

* ci(deploy): mint short-lived cloudflare tokens from the token issuer

* feat(core): wake a session on MCP events with a watch tool (anomalyco#63269)

Co-authored-by: Adam <2363879+adamdotdevin@users.noreply.github.com>

* fix(core): send saved keys during local model discovery (anomalyco#63266)

* refactor(data): strict dev/production stages and data naming

- services/data/stage.ts: stage(mode) throws on anything but dev or production, used by all three configs, build.ts and deploy.ts
- packages/stats -> packages/data (@opencode/data-app, -core, -server)
- StatsSyncWorkflow -> DataSyncWorkflow, instance ids data-hourly-/data-history-, Data* resource keys, data sync log lines
- worker, route, workflow and cron names unchanged

* feat(core): tell agents when they are in a fork (anomalyco#63235)

Co-authored-by: OpenCode Agent <opencode-agent[bot]@users.noreply.github.com>

* fix(deploy): run Cloudflare deploys from verified artifacts behind pinned targets

Repository code outside .github/ needs no review, but every deploy job held a
Cloudflare token strong enough to write any Worker on the account (the data
sync Workflow PUT has no per-Worker permission). A dev merge could therefore
overwrite production Workers.

Split each service into a build job with no environment, secrets, or OIDC token
that uploads a SHA256SUMS artifact, and a deploy job in dev|production that
checks out only .github/release/, verifies the artifact against the build job's
digest, installs the cf/wrangler CLI pinned here, and runs only deploy-*.sh.

The deploy scripts treat the artifact as data and refuse it unless its resolved
config equals the pinned target in .github/release/targets/ exactly: Worker
names, routes, custom domains, crons, Workflow names, and bindings. For cf
services the pinned config is what cf reads. That is what makes an account-wide
token safe, and it keeps production out of reach of a dev merge.

Adds the cf 1.0.0-beta.12 and wrangler 4.110.0 lockfiles the deploy jobs
install with npm ci --ignore-scripts.

* fix(core): fetch Console instructions and skills only when the config says the workspace has them (anomalyco#63259)

* fix(ci): treat require-digests=false as off in verify-artifacts

The download action always sets OPENCODE_REQUIRE_DIGESTS (false by default),
so testing for a non-empty value required digests for release artifacts that
legitimately have none and broke sign-macos, sign-windows and
publish-attestations. Compare the value to true instead.

* fix(site): show download and install menus again after closing them (anomalyco#63311)

* feat(app): add the New timeline experiment (anomalyco#63295)

* fix(app): snap vertical tab preview to its tab (anomalyco#63074)

* feat(app): limit Recent sidebar to 7 days and 30 rows, align its hover preview (anomalyco#63313)

* fix(tui): give plugins a live theme view (anomalyco#63306)

* fix(app): accept a pasted redirect URL for provider sign-in (anomalyco#63315)

Co-authored-by: Aiden Cline <aidenpcline@gmail.com>

* fix(session): measure tps from the first streamed token (anomalyco#63321)

* chore(protocol): refresh generated openapi for the first-token event (anomalyco#63324)

* fix(app): show only the branch in the new session row (anomalyco#63182)

* refactor(codemode): remove the legacy interpreter; the VM is the only engine (anomalyco#62642)

* fix(core): keep the truncated preview when tool output can't be saved (anomalyco#63334)

* fix(app): show the agent switcher by default (anomalyco#63337)

* feat(process-daemon): pipe mode on Windows (anomalyco#63196)

* fix(update): verify access identity on admin routes (anomalyco#63340)

* fix(app): remeasure the desktop drag area when direction changes (anomalyco#63347)

* chore: remove beta what's new and visual svgs (anomalyco#63325)

* feat(core): report subagent results to the parent every time a child goes idle (anomalyco#63209)

* chore(process-daemon): release 0.5.1 (anomalyco#63366)

* refactor(process-daemon): simplify Windows pipe mode (anomalyco#63346)

* chore(process-daemon): allow 60 minutes for Windows release builds (anomalyco#63378)

* feat(core): always run subagents in the background (anomalyco#63382)

* refactor(core): remove the unused foreground path from SubagentJob (anomalyco#63223)

* fix(core): defer restart wakes until parent attempts are counted (anomalyco#63367)

* chore(process-daemon): release 0.5.2 (anomalyco#63381)

* feat(ai): add Google Decisions (anomalyco#63369)

* fix(acp): stream the parent's reaction to background subagent reports (anomalyco#63395)

* chore(core): bump gitlab-ai-provider to 6.24.0 (anomalyco#63342)

* ci: deploy dev workers in anomaly-dev (anomalyco#63379)

* read dev data sync from the dev lake

* fix(core): show the start of tool output that exceeds the limit (anomalyco#63272)

* feat(site): simplify the docs header menu and move the V1 notice into the header (anomalyco#63399)

* chore(site): update OpenCode link cards (anomalyco#63401)

* refactor(core): remove leftover foreground subagent and reattach code (anomalyco#63392)

* refactor(app): remove leftover foreground subagent UI (anomalyco#63391)

* fix(tui): show the subagent card instead of launch instructions in mini scrollback (anomalyco#63389)

* chore(site): remove the /ide page (anomalyco#63386)

Co-authored-by: Adam <2363879+adamdotdevin@users.noreply.github.com>

* ci: run macos build jobs on blacksmith (anomalyco#63397)

* fix(storybook): provide settings context to stories

* fix(app): avoid transforms on scrolling composer suggestions

* fix(app): keep mobile tab menu open when closing tabs

* fix(desktop): update build-windows.bat to post-merge workflow

The merge adopted the upstream desktop workflow, which folded prebuild into build and removed package:win. Drop the stale prebuild step and package the Windows NSIS installer directly with electron-builder.

* chore: ignore Astro and Cloudflare build artifacts

Ignore the generated .astro content modules, .wrangler miniflare state, and the generated services/www/public/cli.json schema so local builds of the site packages no longer show up as untracked files.

* fix(core): keep ephemeral server credentials from wiping shared auth sessions

A stdio/ACP auxiliary server mints its own random password and shares the data directory (and database) with the canonical server. On startup, AuthSession.configure treated the verifier mismatch as a credential change: it deleted the whole auth_session table, wiping the canonical server's remembered logins, and adopted a random verifier. Thread an ephemeral flag from the CLI (set when the password was minted, not from env/config) down to configure, which now skips the reconcile for such a process. The canonical server's behavior, including invalidation on a real credential change, is unchanged.

* fix(desktop): update build-mac.sh to the post-merge build workflow

The script called bun run prebuild and bun run package:mac, neither of which exists in packages/desktop/package.json, so it aborted before producing a build. Mirror build-windows.bat: run bun run build, then bunx electron-builder --mac --publish never --config electron-builder.config.ts.

* feat(app): add sortable schedule list with persisted preference

The schedules panel gains a sort selector with three modes: name (alphabetical, the default), lastRun (most recent first, never-run tasks last), and status (enabled first, name order within each group). The choice is stored with the app's local preference storage (home.schedules.sort) and restored when the panel reopens.

A neutral review pass pinned the never-run ordering (second undefined fixture plus a numeric-aware name pair) and replaced the -Infinity comparator sentinel with -1, since lastRunAtMs is a NonNegativeInt, so the comparator always returns a finite number.

* feat(session-ui): show full input in expanded generic tool calls

---------

Co-authored-by: David Hill <1879069+iamdavidhill@users.noreply.github.com>
Co-authored-by: Adam <2363879+adamdotdevin@users.noreply.github.com>
Co-authored-by: Kit Langton <kit.langton@gmail.com>
Co-authored-by: vprdev <mail@alanrice.me>
Co-authored-by: Aiden Cline <aidenpcline@gmail.com>
Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
Co-authored-by: Luke Parker <10430890+Hona@users.noreply.github.com>
Co-authored-by: exe.dev user <exedev@anton.exe.xyz>
Co-authored-by: James Long <longster@gmail.com>
Co-authored-by: Dan Smolsky <78942835+Tarquinen@users.noreply.github.com>
Co-authored-by: opencode-agent[bot] <219766164+opencode-agent[bot]@users.noreply.github.com>
Co-authored-by: Daniel <daniel@anoma.ly>
Co-authored-by: smagnuso <smagnuso@gmail.com>
Co-authored-by: Dan Smolsky <dannysmo@gmail.com>
Co-authored-by: 2SinceJuly <202121119+2SinceJuly@users.noreply.github.com>
Co-authored-by: Jack <jack@anoma.ly>
Co-authored-by: Stefan Avram <98915060+Slickstef11@users.noreply.github.com>
Co-authored-by: usrnk1 <7547651+usrnk1@users.noreply.github.com>
Co-authored-by: Ludvig Rask <74653458+ludvigrask@users.noreply.github.com>
Co-authored-by: Dax <mail@thdxr.com>
Co-authored-by: Ryan Skidmore <4580448+ryanskidmore@users.noreply.github.com>
Co-authored-by: Frank <frank@anoma.ly>
Co-authored-by: Jay <air@live.ca>
Co-authored-by: MrMushrooooom <19261047+MrMushrooooom@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Liyang Zhu <tomzhu1024@outlook.com>
Co-authored-by: OpeOginni <107570612+OpeOginni@users.noreply.github.com>
Co-authored-by: Simon Klee <hello@simonklee.dk>
Co-authored-by: Dax Raad <d@ironbay.co>
Co-authored-by: Kyle Bush <157062883+Kyle-j-bush@users.noreply.github.com>
Co-authored-by: Sebastian <hasta84@gmail.com>
Co-authored-by: OpenCode Agent <opencode-agent[bot]@users.noreply.github.com>
Co-authored-by: Aarav Sareen <96787824+arvsrn@users.noreply.github.com>
Co-authored-by: Swapnil Devesh <sid.swapnildevesh@gmail.com>
Co-authored-by: Filip <34747899+neriousy@users.noreply.github.com>
Co-authored-by: Vladimir Glafirov <vglafirov@gitlab.com>
simonklee added a commit that referenced this pull request Nov 13, 2026
@simonklee
fix(cli-rs): show a stopped shell call's output before its notice
ff3a78f 
Port of the TUI part of #62977: a shell call the user interrupted fails with its output followed by the notice its metadata names; the block shows the output like a finished call's and only the notice as the error. The E.7a/shell-stopped scenario covers it.
@opencodejr opencodejr Bot mentioned this pull request Nov 13, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@opencodejr opencodejr[bot] opencodejr[bot] left review comments

Assignees

No one assigned

Labels

contributor

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

core: interrupted tools cannot retain partial results

1 participant

@jlongster