deps: update OpenCode tooling and verify OpenTUI 0.6 host compatibility

Merged
AN
7d ago
+456-98

Changes

  • Update the OpenCode 1 SDK/plugin from 1.18.31 to 1.18.35 and the development Anthropic AI SDK from 4.0.58 to 4.0.77.
  • Update the OpenTUI build dependencies from 0.5.11 to 0.6.0, keeping Solid JS 1.9.12.
  • Update the E2E mock's subc-client to 0.21.2. Core's runtime copy remains on 0.16.1.

Host compatibility check

The packed smoke test now renders the actual compiled sidebar using the library versions selected by OpenCode 1.18.18 and OpenCode 2.0.22. The second fixture tests the host libraries only; full OpenCode 2 process coverage remains in disposable CI.

The test loads the public Solid preload before host imports, observes frame events until route and quota text are present, and waits for renderer teardown. Its negative control preserves the named export but makes createComponent non-callable, requiring failure inside sidebar rendering rather than during module linking. The existing 30-second child limit is unchanged and enforced even if the renderer handles termination signals.

Verification

  • All package and script types, builds, workspace lock and changed-file lint passed on pinned Bun 1.3.14.
  • Lifecycle-enabled packed install passed, including Node CLI startup, both real host-library renderers, the rendering negative control, and the raw TSX fallback.
  • Deliberate controls confirmed that leaving the helper callable fails the negative check, and that a never-matching frame fails at the existing child limit. Both changes were restored, then the complete smoke gate passed again.

Full CI and mutation guards are required before merge. No installed host, live plugin, credentials or configuration were changed.

Summary by cubic

Updates the OpenCode plugin/SDK to 1.18.35, the dev Anthropic AI SDK to 4.0.77, and the OpenTUI core/solid build dependencies to 0.6.0, while keeping Solid JS 1.9.12. Also bumps the E2E mock's @cortexkit/subc-client to 0.21.2 without touching core's runtime copy.

Host compatibility verification

  • The packed-install smoke test now renders the actual compiled sidebar using the library versions selected by OpenCode 1.18.18 and OpenCode 2.0.22 instead of using stubbed runtime modules.
  • The probe loads the public Solid preload, waits for rendered frames containing the route and quota text, and requires renderer teardown before success.
  • A negative control preserves the createComponent export but makes it non-callable, so failure must occur during sidebar rendering rather than module linking.
  • The existing 30-second child limit is enforced even when renderer signal handlers are active, using SIGKILL.