Merge branch 'main' into opencode/issue10-20260723203408

Author: 33Fraise33

.github/scripts/opencode-target.mjs

@@ -2,7 +2,7 @@ import { appendFileSync, readFileSync } from "node:fs"
 import { randomUUID } from "node:crypto"
 import { pathToFileURL } from "node:url"
 
-export const MAX_THREAD_COMMENTS = 10
+export const MAX_THREAD_ITEMS = 50
 export const MAX_THREAD_CONTEXT_CHARACTERS = 60_000
 export const MAX_PULL_REQUEST_FILES = 100
 const CONTEXT_FORMAT_OVERHEAD = 10_000
@@ -56,7 +56,7 @@ async function fetchTargetData({ apiUrl, repository, endpoint, token, fetchImpl
 async function assertBoundedThread(target, options) {
   const issueComments = await fetchTargetData({
     ...options,
-    endpoint: `issues/${target.number}/comments?per_page=${MAX_THREAD_COMMENTS + 1}`,
+    endpoint: `issues/${target.number}/comments?per_page=${MAX_THREAD_ITEMS + 1}`,
   })
   const context = [
     options.subject.title,
@@ -70,15 +70,15 @@ async function assertBoundedThread(target, options) {
   if (target.type === "pull_request") {
     const reviews = await fetchTargetData({
       ...options,
-      endpoint: `pulls/${target.number}/reviews?per_page=${MAX_THREAD_COMMENTS + 1}`,
+      endpoint: `pulls/${target.number}/reviews?per_page=${MAX_THREAD_ITEMS + 1}`,
     })
     itemCount += reviews.value.length
     context.push(...reviews.value.flatMap((review) => [review.user?.login, review.submitted_at, review.state, review.body]))
     const reviewComments = await Promise.all(
       reviews.value.map((review) =>
         fetchTargetData({
           ...options,
-          endpoint: `pulls/${target.number}/reviews/${review.id}/comments?per_page=${MAX_THREAD_COMMENTS + 1}`,
+          endpoint: `pulls/${target.number}/reviews/${review.id}/comments?per_page=${MAX_THREAD_ITEMS + 1}`,
         }),
       ),
     )
@@ -93,10 +93,10 @@ async function assertBoundedThread(target, options) {
       throw new Error(`OpenCode limits pull requests to ${MAX_PULL_REQUEST_FILES} changed files.`)
     }
     context.push(...files.value.flatMap((file) => [file.filename, file.status, file.additions, file.deletions]))
-    if (reviews.hasNextPage || reviewComments.some((result) => result.hasNextPage)) itemCount = MAX_THREAD_COMMENTS + 1
+    if (reviews.hasNextPage || reviewComments.some((result) => result.hasNextPage)) itemCount = MAX_THREAD_ITEMS + 1
   }
-  if (itemCount > MAX_THREAD_COMMENTS || issueComments.hasNextPage) {
-    throw new Error(`OpenCode limits issue and pull request threads to ${MAX_THREAD_COMMENTS} comments.`)
+  if (itemCount > MAX_THREAD_ITEMS || issueComments.hasNextPage) {
+    throw new Error(`OpenCode limits issue and pull request threads to ${MAX_THREAD_ITEMS} items.`)
   }
 
   const text = context.filter((value) => typeof value === "string" || typeof value === "number")

.github/scripts/opencode-target.test.mjs

@@ -1,7 +1,7 @@
 import assert from "node:assert/strict"
 import test from "node:test"
 
-import { MAX_PULL_REQUEST_FILES, MAX_THREAD_COMMENTS, classifyTarget, inspectTarget } from "./opencode-target.mjs"
+import { MAX_PULL_REQUEST_FILES, MAX_THREAD_ITEMS, classifyTarget, inspectTarget } from "./opencode-target.mjs"
 
 const repository = "owner/repo"
 const pull = {
@@ -92,26 +92,31 @@ test("plan permits fork pull requests", async () => {
   assert.equal(result.head_repo, "fork/repo")
 })
 
+test("accepts a thread at the item limit", async () => {
+  const comments = Array.from({ length: MAX_THREAD_ITEMS }, () => ({ body: "comment" }))
+  await assert.doesNotReject(() => inspectTarget({ issue: { number: 8 } }, "plan", { ...options, fetchImpl: response({ issueComments: comments }) }))
+})
+
 test("rejects oversized thread context before model access", async () => {
-  const comments = Array.from({ length: MAX_THREAD_COMMENTS + 1 }, () => ({ body: "comment" }))
+  const comments = Array.from({ length: MAX_THREAD_ITEMS + 1 }, () => ({ body: "comment" }))
   await assert.rejects(
     () => inspectTarget({ issue: { number: 8 } }, "plan", { ...options, fetchImpl: response({ issueComments: comments }) }),
-    /limits issue and pull request threads/,
+    /limits issue and pull request threads to 50 items/,
   )
 })
 
 test("counts PR reviews and nested review comments in the context limit", async () => {
-  const reviews = Array.from({ length: MAX_THREAD_COMMENTS + 1 }, (_, id) => ({ id, body: "review" }))
+  const reviews = Array.from({ length: MAX_THREAD_ITEMS + 1 }, (_, id) => ({ id, body: "review" }))
   await assert.rejects(
     () => inspectTarget({ pull_request: { number: 9 } }, "plan", { ...options, fetchImpl: response({ reviews }) }),
-    /limits issue and pull request threads/,
+    /limits issue and pull request threads to 50 items/,
   )
   await assert.rejects(
     () => inspectTarget({ pull_request: { number: 9 } }, "plan", {
       ...options,
-      fetchImpl: response({ reviews: [{ id: 1, body: "review" }], reviewComments: Array.from({ length: MAX_THREAD_COMMENTS }, () => ({ body: "comment" })) }),
+      fetchImpl: response({ reviews: [{ id: 1, body: "review" }], reviewComments: Array.from({ length: MAX_THREAD_ITEMS }, () => ({ body: "comment" })) }),
     }),
-    /limits issue and pull request threads/,
+    /limits issue and pull request threads to 50 items/,
   )
 })
 

docs/opencode-github.md

@@ -6,12 +6,13 @@ OpenCode responds to explicit commands in GitHub issue comments, pull request co
 
 - Only the repository owner can invoke unapproved plan runs. Build requests require repository write/admin permission and the build-environment approval.
 - Commands must start at the first character of a comment and use an allowlisted mode and model. Requests are limited to 8,000 characters; CRLF is normalized, and unsupported control characters are rejected.
-- Both plan and build runs exchange GitHub OIDC for the installed OpenCode App token, so visible reactions, comments, branches, commits, and pull requests are authored by `opencode-agent[bot]`. The authorization and post-approval verification steps alone use scoped `GITHUB_TOKEN` credentials for invisible read-only checks.
+- Both plan and build runs exchange GitHub OIDC for the installed OpenCode App token, so visible reactions, comments, branches, commits, and pull requests are authored by `opencode-agent[bot]`. The authorization and post-approval verification steps use scoped `GITHUB_TOKEN` credentials for invisible read-only checks; an accepted build also uses a narrowly scoped notification job to add or update its approval comment.
 - Build runs require approval through the `opencode-build` environment. Fork PRs, non-open PRs, and PRs whose head is the default branch are rejected.
+- An accepted build request adds an idempotent issue or PR comment linking to the pending workflow. The `opencode-build` deployment approval links back to the authorized source issue or PR, so reviewers can identify the affected request from either location.
 - The build agent statically denies edits. A trusted startup plugin enables edits only for ordinary repository files and retains canonical and symlink path checks. If the plugin or config hook fails, editing stays denied.
 - The build agent has no shell, network, subagent, external-directory, or merge access. It cannot edit `.github/`, `.opencode/`, `.git/`, `opencode.json`, `AGENTS.md`, `vault_pass.sh`, `.env`, or `.env.*` files.
 - Comment workflows start from the trusted default branch before OpenCode processes PR content.
-- Authorization bounds the repository-collected issue and pull-request context to ten issue/review/review-thread comments, 100 changed files, and 60,000 characters before OAuth is exposed. Native OpenCode may independently fetch additional GitHub context. GitHub attachment URLs are rejected rather than downloaded. Authorization captures current target state, `updated_at`, PR base branch, head branch, head SHA, and head repository. After environment approval, build mode rechecks the commenter's permission and fetches the target again immediately before OpenCode, rejecting any relevant change.
+- Authorization bounds the repository-collected issue and pull-request context to 50 combined conversation comments, reviews, and inline review comments, 100 changed files, and 60,000 characters before OAuth is exposed. Native OpenCode may independently fetch additional GitHub context. GitHub attachment URLs are rejected rather than downloaded. Authorization captures current target state, `updated_at`, PR base branch, head branch, head SHA, and head repository. After environment approval, build mode rechecks the commenter's permission and fetches the target again immediately before OpenCode, rejecting any relevant change.
 - Builds may update any same-repository, non-default-branch PR head. A residual race remains: OpenCode v1.18.4 ultimately fetches and pushes by mutable branch name, so a branch can theoretically move after verification and before fetch or push. Execution is not immutable by SHA unless upstream changes this behavior; all such branches need equivalent protection where appropriate, and final human diff review remains mandatory.
 - OpenCode sessions are never shared. The workflow downloads OpenCode v1.18.4 and verifies its pinned SHA-256 digest.
 - OpenCode can create or update a branch and pull request but has no merge operation in its configured toolset. Protected branch rules provide the final merge boundary.
@@ -89,6 +90,8 @@ Model names map to `openai/gpt-5.6-sol`, `openai/gpt-5.6-terra`, and `openai/gpt
 
 Use `plan` first for non-trivial work. Review the result in the GitHub thread, then issue a separate `build` command. Inspect the complete generated PR diff and wait for required CI before human approval.
 
+When an authorized `/oc build` request is awaiting `opencode-build` approval, OpenCode adds or updates a comment on its source issue or pull request with a link to that workflow run. The deployment approval page also links back to the same authorized issue or pull request.
+
 ## Updating OpenCode
 
 OpenCode is deliberately pinned by version and digest. To update it: