fix: unify runtime policies and repair audited modules

.github/releases/v1.0.63.md

@@ -0,0 +1,67 @@
+## opencode 1.0.63
+
+Stable release from `main` branch. Unify tool-call budgets and repair independently confirmed runtime, sharing, credential, API and client defects.
+
+---
+
+### 🎯 Features
+
+- **One tool-call policy**: `maxToolCalls` has one shared configuration and defaults to `0`, meaning unlimited. A finite value counts each actual admitted tool attempt. Automatic continuation shares the current input budget. Manual Goal new/resume starts a fresh input budget.
+- **Question timeout guidance**: Report that the user is away and continue with the best solution supported by the task and available evidence. Do not invent an answer or expand authorization.
+
+---
+
+### 🐛 Bug Fixes
+
+- Preserve concurrent enterprise share updates with durable conditional writes. Admit one creation owner, fence revoked generations and retain legacy migration compatibility. Follow all storage listing pages.
+- Prevent reusable caching of new revocable share responses. This does not remove already cached or downloaded copies.
+- Keep provider secrets out of browser queries. Revoke removed members' keys in the same transaction and reject deleted users or workspaces. Do not forward caller authorization or cookies to model providers.
+- Serialize credential-file mutations across processes and atomically replace private files. Preserve unrelated updates and completed revocations.
+- Validate authenticated CLI request origins before dispatch. Validate the OpenCode health response before the VS Code extension sends file references to a local port.
+- Preserve distinct OpenAPI contracts, business field names and literal JSON data during component comparison. Rewrite actual schema references in named header and component maps without modifying examples or extensions.
+- Fail explicitly when the bounded WebSocket receive queue overflows. Classify SQLite preparation and statement configuration failures through the existing typed error channel.
+- Show initial bootstrap failures and provide retry in both home layouts. Retain usable data after a failed background refresh.
+- Correct built-in prompt facts for DAG states, model tiers, tools and command names. Clarify Claude compatibility and the authority of ordinary `system-reminder` text.
+
+---
+
+### ⚙️ CI / Engineering
+
+- Record module coverage, independent confirmations and final review evidence. Add the separately locked VS Code connection tests to Linux Unit CI.
+- Isolate the real inference credential-boundary regression from Stripe's process-wide module mocks. Preserve every original authentication assertion across test file orders.
+- Separate finite subprocess startup from the schema-validation test watchdog. Retain the production 250 ms budget, validation responsiveness checks and ready-to-exit deadline, with phase diagnostics for failures.
+- Isolate both production Goal bootstrap probes from shared test-layer caches. Preserve the original test bodies, idle deadline and per-test bounds while checking and cleaning up the fresh runtime process.
+- Keep bootstrap unit fixtures independent of process-wide SDK mocks. Select Solid browser exports for the App DOM unit and watch tests, matching the existing browser-test environment.
+- Correct stale Nix documentation while retaining native acceptance requirements and the existing lint, coverage and branch-protection gates.
+
+---
+
+### 🧪 Test Summary
+
+```text
+workspace test tasks:       23/23 passed
+test prerequisite builds:   3/3 passed
+workspace typecheck tasks:  31/31 passed
+HTTP exerciser scenarios:   236 passed
+VS Code connection tests:   11 passed
+home Chromium recovery:     2 passed
+Markdown WebKit:            2 passed
+DAG behavior/coverage:      passed
+source and artifact AFK:    passed
+Go and infrastructure:      passed
+dual client generation:     byte-idempotent
+```
+
+Final OpenAPI repair regressions and generated-client checks supplement the broad local run. Native CI verifies the final PR head before merge.
+
+---
+
+### 🔍 Verification
+
+Each repaired finding has a separate confirmation. Astra reviews final repairs before delivery. The audit covers every module and functional family through entry points, critical actions and error/lifecycle paths; it does not prove every function or branch correct. Synthetic sessions and isolated HTTP fixtures preserve active user data. Actual Electron and VS Code host interaction was not exercised.
+
+Publication uses the existing stable workflow after the required native checks. The workflow validates reference templates with the releasing runtime and verifies platform archives and checksums. CLI publication does not deploy the Enterprise or Console services. Enterprise conditional writes require coordinated replacement of old unconditional writers.
+
+---
+
+**Full changelog:** [`graphagent-v1.0.62`...`graphagent-v1.0.63`](https://github.com/LeXwDeX/OpenCode-GraphAgent/compare/graphagent-v1.0.62...graphagent-v1.0.63)

.github/workflows/ci-test.yml

@@ -157,6 +157,14 @@ jobs:
         working-directory: config_assistant
         run: go test ./...
 
+      - name: Run VS Code connection tests
+        if: steps.evidence.outputs.reused != 'true' && runner.os == 'Linux'
+        working-directory: sdks/vscode
+        timeout-minutes: 5
+        run: |
+          bun install --frozen-lockfile
+          bun run test:unit
+
       - name: Check generated client
         if: steps.evidence.outputs.reused != 'true' && (runner.os == 'Linux')
         working-directory: packages/client

.opencode/agent/duplicate-pr.md

@@ -1,7 +1,6 @@
 ---
 mode: primary
 hidden: true
-model: opencode/claude-haiku-4-5
 color: "#E67E22"
 tools:
   "*": false

.opencode/agent/triage.md

@@ -1,7 +1,6 @@
 ---
 mode: primary
 hidden: true
-model: opencode/gpt-5.4-mini
 color: "#44BA81"
 tools:
   "*": false

.opencode/command/changelog.md

@@ -1,5 +1,4 @@
 ---
-model: opencode/gpt-5.4
 ---
 
 Create `UPCOMING_CHANGELOG.md` from the structured changelog input below.

.opencode/command/commit.md

@@ -1,6 +1,5 @@
 ---
 description: git commit and push
-model: opencode/kimi-k2.5
 subtask: true
 ---
 

.opencode/command/issues.md

@@ -1,6 +1,5 @@
 ---
 description: "find issue(s) on github"
-model: opencode/claude-haiku-4-5
 ---
 
 Search through existing issues in anomalyco/opencode using the gh cli to find issues matching this query:

.opencode/command/translate.md

@@ -1,6 +1,5 @@
 ---
 description: translate English to other languages
-model: opencode/claude-opus-4-8
 ---
 
 run git diff and translate changed english doc and UI copy files to other international languages. Translate all languages in parallel to save time.