feat(opencode): migrate CodeNomad to native V2

.github/workflows/build-and-upload.yml

@@ -95,9 +95,6 @@ jobs:
       - name: Install dependencies
         run: npm ci --workspaces --include=optional
 
-      - name: Ensure rollup native binary
-        run: npm install @rollup/rollup-darwin-x64 --no-save
-
       - name: Build macOS binaries (Electron)
         run: npm run build:mac --workspace @neuralnomads/codenomad-electron-app
 
@@ -256,9 +253,6 @@ jobs:
       - name: Install dependencies
         run: npm ci --workspaces --include=optional
 
-      - name: Ensure rollup native binary
-        run: npm install @rollup/rollup-win32-x64-msvc --no-save
-
       - name: Build Windows binaries (Electron)
         run: npm run build:win --workspace @neuralnomads/codenomad-electron-app
 
@@ -308,9 +302,6 @@ jobs:
       - name: Install dependencies
         run: npm ci --workspaces --include=optional
 
-      - name: Ensure rollup native binary
-        run: npm install @rollup/rollup-linux-x64-gnu --no-save
-
       - name: Build Linux binaries (Electron)
         run: npm run build:linux --workspace @neuralnomads/codenomad-electron-app
 
@@ -451,29 +442,12 @@ jobs:
       - name: Install dependencies
         run: npm ci --workspaces --include=optional
 
-      - name: Ensure rollup native binary
-        run: npm install @rollup/rollup-darwin-x64 --no-save
-
       - name: Prebuild (Tauri)
         run: npm run prebuild --workspace @codenomad/tauri-app
 
       - name: Verify bundled Node resource (Tauri macOS x64)
         run: node scripts/verify-bundled-node.cjs packages/tauri-app/src-tauri/resources@darwin-x64
 
-      - name: Ensure tauri native binary
-        working-directory: packages/tauri-app
-        run: |
-          set -euo pipefail
-          for attempt in 1 2 3; do
-            if [ "$attempt" -gt 1 ]; then
-              echo "Retrying Tauri CLI install (attempt $attempt)..."
-            fi
-            npm install @tauri-apps/cli@2.9.4 @tauri-apps/cli-darwin-x64@2.9.4 --no-save --no-audit --no-fund --workspaces=false
-            node -e "require('@tauri-apps/cli'); console.log('Tauri CLI loaded')" && exit 0
-          done
-          echo "Tauri CLI failed to load after retries" >&2
-          exit 1
-
       - name: Build macOS bundle (Tauri)
         working-directory: packages/tauri-app
         run: npm exec -- tauri build
@@ -541,29 +515,12 @@ jobs:
       - name: Install dependencies
         run: npm ci --workspaces --include=optional
 
-      - name: Ensure rollup native binary
-        run: npm install @rollup/rollup-darwin-arm64 --no-save
-
       - name: Prebuild (Tauri)
         run: npm run prebuild --workspace @codenomad/tauri-app
 
       - name: Verify bundled Node resource (Tauri macOS arm64)
         run: node scripts/verify-bundled-node.cjs packages/tauri-app/src-tauri/resources@darwin-arm64
 
-      - name: Ensure tauri native binary
-        working-directory: packages/tauri-app
-        run: |
-          set -euo pipefail
-          for attempt in 1 2 3; do
-            if [ "$attempt" -gt 1 ]; then
-              echo "Retrying Tauri CLI install (attempt $attempt)..."
-            fi
-            npm install @tauri-apps/cli@2.9.4 @tauri-apps/cli-darwin-arm64@2.9.4 --no-save --no-audit --no-fund --workspaces=false
-            node -e "require('@tauri-apps/cli'); console.log('Tauri CLI loaded')" && exit 0
-          done
-          echo "Tauri CLI failed to load after retries" >&2
-          exit 1
-
       - name: Build macOS bundle (Tauri, arm64)
         working-directory: packages/tauri-app
         run: npm exec -- tauri build
@@ -632,30 +589,12 @@ jobs:
       - name: Install dependencies
         run: npm ci --workspaces --include=optional
 
-      - name: Ensure rollup native binary
-        run: npm install @rollup/rollup-win32-x64-msvc --no-save
-
       - name: Prebuild (Tauri)
         run: npm run prebuild --workspace @codenomad/tauri-app
 
       - name: Verify bundled Node resource (Tauri Windows)
         run: node scripts/verify-bundled-node.cjs packages/tauri-app/src-tauri/resources@win32-x64
 
-      - name: Ensure tauri native binary
-        shell: bash
-        working-directory: packages/tauri-app
-        run: |
-          set -euo pipefail
-          for attempt in 1 2 3; do
-            if [ "$attempt" -gt 1 ]; then
-              echo "Retrying Tauri CLI install (attempt $attempt)..."
-            fi
-            npm install @tauri-apps/cli@2.9.4 @tauri-apps/cli-win32-x64-msvc@2.9.4 --no-save --no-audit --no-fund --workspaces=false
-            node -e "require('@tauri-apps/cli'); console.log('Tauri CLI loaded')" && exit 0
-          done
-          echo "Tauri CLI failed to load after retries" >&2
-          exit 1
-
       - name: Build Windows bundle (Tauri)
         shell: bash
         working-directory: packages/tauri-app
@@ -739,29 +678,12 @@ jobs:
       - name: Install dependencies
         run: npm ci --workspaces --include=optional
 
-      - name: Ensure rollup native binary
-        run: npm install @rollup/rollup-linux-x64-gnu --no-save
-
       - name: Prebuild (Tauri)
         run: npm run prebuild --workspace @codenomad/tauri-app
 
       - name: Verify bundled Node resource (Tauri Linux)
         run: node scripts/verify-bundled-node.cjs packages/tauri-app/src-tauri/resources@linux-x64
 
-      - name: Ensure tauri native binary
-        working-directory: packages/tauri-app
-        run: |
-          set -euo pipefail
-          for attempt in 1 2 3; do
-            if [ "$attempt" -gt 1 ]; then
-              echo "Retrying Tauri CLI install (attempt $attempt)..."
-            fi
-            npm install @tauri-apps/cli@2.9.4 @tauri-apps/cli-linux-x64-gnu@2.9.4 --no-save --no-audit --no-fund --workspaces=false
-            node -e "require('@tauri-apps/cli'); console.log('Tauri CLI loaded')" && exit 0
-          done
-          echo "Tauri CLI failed to load after retries" >&2
-          exit 1
-
       - name: Build Debian package (Tauri)
         working-directory: packages/tauri-app
         run: npm exec -- tauri build --bundles deb
@@ -953,11 +875,9 @@ jobs:
       - name: Install dependencies
         run: npm ci --workspaces --include=optional
 
-      - name: Ensure rollup native binary
-        run: npm install @rollup/rollup-linux-arm64-gnu --no-save
-
       - name: Build Linux bundle (Tauri arm64)
         env:
+          CODENOMAD_NODE_TARGET: linux-arm64
           TAURI_BUILD_TARGET: aarch64-unknown-linux-gnu
           PKG_CONFIG_PATH: /usr/lib/aarch64-linux-gnu/pkgconfig
           CC_aarch64_unknown_linux_gnu: aarch64-linux-gnu-gcc

.github/workflows/comment-pr-artifacts.yml

@@ -32,7 +32,7 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          if [ "$BASE_REF" = "dev" ]; then
+          if [ "$BASE_REF" = "dev" ] || [ "$BASE_REF" = "DEV-v2" ]; then
             echo "allowed=true" >> "$GITHUB_OUTPUT"
             exit 0
           fi

.github/workflows/dev-v2-release.yml

@@ -0,0 +1,75 @@
+name: OpenCode V2 Pre-Release
+
+on:
+  schedule:
+    # Nightly build of DEV-v2 (only if its current commit has not been released).
+    - cron: "30 1 * * *"
+  workflow_dispatch:
+
+permissions:
+  id-token: write
+  contents: write
+
+concurrency:
+  group: dev-v2-prerelease
+  cancel-in-progress: true
+
+jobs:
+  gate:
+    runs-on: ubuntu-latest
+    outputs:
+      run: ${{ steps.gate.outputs.run }}
+      dev_v2_sha: ${{ steps.gate.outputs.dev_v2_sha }}
+      version_suffix: ${{ steps.gate.outputs.version_suffix }}
+    steps:
+      - name: Decide whether to run
+        id: gate
+        shell: bash
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+
+          api() {
+            curl -sS \
+              -H "Authorization: Bearer ${GH_TOKEN}" \
+              -H "Accept: application/vnd.github+json" \
+              -H "X-GitHub-Api-Version: 2022-11-28" \
+              "$1"
+          }
+
+          DEV_V2_SHA=$(api "https://api.github.com/repos/${GITHUB_REPOSITORY}/git/ref/heads/DEV-v2" | jq -r '.object.sha')
+          if [ -z "$DEV_V2_SHA" ] || [ "$DEV_V2_SHA" = "null" ]; then
+            echo "Failed to resolve DEV-v2 head SHA" >&2
+            exit 1
+          fi
+
+          DATE=$(date -u +%Y%m%d)
+          SHA8="${DEV_V2_SHA::8}"
+          VERSION_SUFFIX="-dev-v2-${DATE}-${SHA8}"
+          SHOULD_RUN="true"
+
+          if [ "${GITHUB_EVENT_NAME}" != "workflow_dispatch" ]; then
+            RELEASED=$(api "https://api.github.com/repos/${GITHUB_REPOSITORY}/releases?per_page=100" | jq --arg suffix "-${SHA8}" '[.[] | select(.prerelease == true and (.tag_name | startswith("v0.20.0-dev-v2-")) and (.tag_name | endswith($suffix)))] | length')
+            if [ "$RELEASED" -gt 0 ]; then
+              SHOULD_RUN="false"
+            fi
+          fi
+
+          echo "run=${SHOULD_RUN}" >> "$GITHUB_OUTPUT"
+          echo "dev_v2_sha=${DEV_V2_SHA}" >> "$GITHUB_OUTPUT"
+          echo "version_suffix=${VERSION_SUFFIX}" >> "$GITHUB_OUTPUT"
+
+  prerelease:
+    needs: gate
+    if: ${{ needs.gate.outputs.run == 'true' }}
+    uses: ./.github/workflows/reusable-release.yml
+    with:
+      ref: ${{ needs.gate.outputs.dev_v2_sha }}
+      base_version: 0.20.0
+      version_suffix: ${{ needs.gate.outputs.version_suffix }}
+      npm_package_name: "@neuralnomads/codenomad-dev"
+      dist_tag: v2
+      prerelease: true
+      release_ui: false
+    secrets: inherit

.github/workflows/pr-build.yml

@@ -32,7 +32,7 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          if [ "$BASE_REF" = "dev" ]; then
+          if [ "$BASE_REF" = "dev" ] || [ "$BASE_REF" = "DEV-v2" ]; then
             echo "allowed=true" >> "$GITHUB_OUTPUT"
             exit 0
           fi
@@ -98,47 +98,77 @@ jobs:
       - name: Typecheck desktop clients
         run: npm run typecheck
 
+      - name: Test desktop packaging invariants
+        run: node --test scripts/desktop-server-resources.test.cjs
+
       - name: Test Electron client state
         run: npm run test:native --workspace @neuralnomads/codenomad-electron-app
 
       - name: Test changed runnable UI behavior
         run: >-
           node --import tsx --test
+          packages/ui/src/components/browser-frame-security.test.ts
+          packages/ui/src/components/message-history-pagination.test.ts
+          packages/ui/src/components/message-timeline-v2.test.ts
+          packages/ui/src/components/provider-auth/provider-options.test.ts
+          packages/ui/src/components/session/session-bottom-pin-intent.test.ts
+          packages/ui/src/components/session/session-idle-attention.test.ts
           packages/ui/src/components/session-list-visibility.test.ts
           packages/ui/src/components/unified-picker-path.test.ts
+          packages/ui/src/components/virtual-follow-behavior.test.ts
+          packages/ui/src/lib/client-identity.test.ts
+          packages/ui/src/lib/filesystem-events.test.ts
           packages/ui/src/lib/hooks/use-app-session-capture.test.ts
+          packages/ui/src/lib/hooks/use-instance-metadata.test.ts
           packages/ui/src/lib/hooks/use-foreground-refresh.test.ts
+          packages/ui/src/lib/hooks/use-electron-folder-launch.test.ts
           packages/ui/src/lib/launch-errors.test.ts
           packages/ui/src/lib/message-selection-position.test.ts
           packages/ui/src/lib/model-visibility.test.ts
           packages/ui/src/lib/runtime-env.test.ts
           packages/ui/src/lib/trailing-resync.test.ts
           packages/ui/src/stores/abort-created-workspace-cleanup.test.ts
           packages/ui/src/stores/app-session-reconciliation.test.ts
-          packages/ui/src/stores/app-session-restore-gate.test.ts
           packages/ui/src/stores/app-session-restore-queue.test.ts
           packages/ui/src/stores/app-session-restore-timeout.test.ts
           packages/ui/src/stores/app-session-snapshot-merge.test.ts
           packages/ui/src/stores/restore-workspace-commit-gates.test.ts
           packages/ui/src/stores/client-state-codec.test.ts
+          packages/ui/src/stores/client-state-partitions.test.ts
           packages/ui/src/stores/client-state.test.ts
-          packages/ui/src/stores/instances-restore-cancellation.test.ts
+          packages/ui/src/stores/form-settlements.test.ts
+          packages/ui/src/stores/message-prompt-display.test.ts
           packages/ui/src/stores/message-v2/instance-store.test.ts
           packages/ui/src/stores/message-v2/message-hydration-authority.test.ts
           packages/ui/src/stores/message-v2/message-status.test.ts
+          packages/ui/src/stores/message-v2/message-window.test.ts
+          packages/ui/src/stores/message-v2/normalizers.test.ts
+          packages/ui/src/stores/shell-store.test.ts
           packages/ui/src/stores/session-generation-recovery.test.ts
-          packages/ui/src/stores/session-metadata.test.ts
           packages/ui/src/stores/session-pagination.test.ts
+          packages/ui/src/stores/session-pending-state.test.ts
+          packages/ui/src/stores/workspace-load-readiness.test.ts
+          packages/ui/src/types/session.test.ts
           packages/ui/src/stores/workspace-list-reconciliation-fence.test.ts
 
       - name: Test restore ownership integration
         run: >-
           node --conditions=browser --import tsx --test --test-force-exit
+          packages/ui/src/components/form-request-tool-target.test.ts
+          packages/ui/src/components/form-request.test.ts
+          packages/ui/src/components/session/provider-usage-panel.test.ts
           packages/ui/src/lib/hooks/use-active-session-message-load.test.ts
+          packages/ui/src/stores/app-tabs.test.ts
+          packages/ui/src/stores/forms.test.ts
           packages/ui/src/stores/instances-restore-ownership.test.ts
+          packages/ui/src/stores/opencode-data.test.ts
           packages/ui/src/stores/permission-lifecycle.test.ts
+          packages/ui/src/stores/shell-store-reactivity.test.ts
+          packages/ui/src/stores/session-actions.test.ts
+          packages/ui/src/stores/session-native-events.test.ts
           packages/ui/src/stores/session-request-authority.test.ts
           packages/ui/src/stores/session-send-lifecycle.test.ts
+          packages/ui/src/stores/session-status.test.ts
 
       - name: Test server
         run: node --import tsx --test "packages/server/src/**/*.test.ts"
@@ -184,4 +214,4 @@ jobs:
 
       - name: Test Tauri crate on Windows
         working-directory: packages/tauri-app/src-tauri
-        run: cargo test --locked
+        run: cargo test --locked -- --test-threads=1

.github/workflows/restrict-non-dev-prs.yml

@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   restrict-non-dev-prs:
-    if: ${{ github.event.pull_request.base.ref != 'dev' }}
+    if: ${{ github.event.pull_request.base.ref != 'dev' && github.event.pull_request.base.ref != 'DEV-v2' }}
     runs-on: ubuntu-latest
     env:
       ALLOWED_ACTORS: ${{ vars.ALLOWED_NON_DEV_PR_ACTORS }}
@@ -39,7 +39,7 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          gh pr comment "$PR_NUMBER" --body "Thanks for the contribution. PRs need to target \`dev\` branch. Please retarget this PR to the dev branch"
+          gh pr comment "$PR_NUMBER" --body "Thanks for the contribution. PRs need to target the \`dev\` or \`DEV-v2\` branch. Please retarget this PR to an authorized development branch."
 
       - name: Close unauthorized PR
         if: ${{ steps.auth.outputs.authorized != 'true' }}

.github/workflows/reusable-release.yml

@@ -13,6 +13,11 @@ on:
         required: false
         default: ""
         type: string
+      base_version:
+        description: "Base version override (defaults to package.json version)"
+        required: false
+        default: ""
+        type: string
       dist_tag:
         description: "npm dist-tag to publish under"
         required: false
@@ -62,9 +67,10 @@ jobs:
       - name: Compute release versions
         id: versions
         env:
+          BASE_VERSION_INPUT: ${{ inputs.base_version }}
           VERSION_SUFFIX: ${{ inputs.version_suffix }}
         run: |
-          BASE_VERSION=$(node -p "require('./package.json').version")
+          BASE_VERSION=${BASE_VERSION_INPUT:-$(node -p "require('./package.json').version")}
           VERSION="${BASE_VERSION}${VERSION_SUFFIX}"
           TAG="v${VERSION}"
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"