chore(release): promote dev to production

.github/CODEOWNERS

@@ -2,6 +2,10 @@
 packages/app/      @Hona @Brendonovich
 packages/desktop/  @Hona @Brendonovich
 
+# GUI plugin SDK
+# changes here must be meticulous - pls chat first :)
+packages/plugin/src/gui/  @Hona
+
 # CI and releases. Release jobs that hold secrets run only .github/workflows/release.yml and .github/release/,
 # which makes this path the release security boundary.
 /.github/ @anomalyco/releasers

.github/workflows/release-process-daemon.yml

@@ -1,6 +1,6 @@
 name: Process daemon release
 
-# Publishes the opencode-pty binaries and the @opencode-ai/pty npm packages from packages/process-daemon.
+# Publishes the opencode-pty binaries and the @opencode/pty npm packages from packages/process-daemon.
 # Only process-daemon-v<version> tags publish; pull requests that touch the release pipeline build and pack
 # without publishing.
 
@@ -301,7 +301,7 @@ jobs:
           gh release view "$GITHUB_REF_NAME" --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1 ||
             gh release create "$GITHUB_REF_NAME" --repo "$GITHUB_REPOSITORY" --draft --verify-tag --latest=false \
               --title "process-daemon v$version" \
-              --notes "opencode-pty $version (protocol $PROTOCOL_VERSION) from packages/process-daemon, published to npm as @opencode-ai/pty@$version."
+              --notes "opencode-pty $version (protocol $PROTOCOL_VERSION) from packages/process-daemon, published to npm as @opencode/pty@$version."
           gh release upload "$GITHUB_REF_NAME" dist/*.tar.gz dist/SHA256SUMS dist/release-manifest.json --clobber --repo "$GITHUB_REPOSITORY"
           gh release edit "$GITHUB_REF_NAME" --draft=false --latest=false --repo "$GITHUB_REPOSITORY"
       - name: Publish npm packages
@@ -314,7 +314,7 @@ jobs:
               npm publish "$package" --access public --provenance
             fi
           done
-          name="@opencode-ai/pty"
+          name="@opencode/pty"
           if ! npm view "$name@$version" version >/dev/null 2>&1; then
             npm publish dist/npm/opencode-pty --access public --provenance
           fi

AGENTS.md

@@ -169,6 +169,17 @@ const table = sqliteTable("session", {
 })
 ```
 
+### Experimental API
+
+- An experimental endpoint lives at `/api/experimental/<group>/...`, its OpenAPI identifier is `experimental.<group>.<method>`, and it lands in the SDK as `client.experimental.<group>.<method>`. Its description says "Experimental: may change without compatibility guarantees."
+- `packages/protocol/test/experimental-identifiers.test.ts` enforces the path and identifier match in both directions; the SDK namespace follows from the path.
+- An experimental field or parameter on a stable endpoint goes under an `experimental` key (`experimental.<name>`), the same way config does (`config.experimental.*`).
+- New endpoints and new default behaviors start experimental.
+- To graduate one, move the route out of `/api/experimental`, drop the `experimental.` prefix, and note it in `CHANGELOG.md`.
+- Experimental HTTP routes change without aliases: rename or remove the route, then update the callers.
+- A breaking move of shipped SDK or plugin API (including moving it under `experimental`) keeps the old path and type names as deprecated aliases of the new ones until the next minor, each marked `@deprecated` with the replacement and "Removed in the next minor". Generated SDK moves get them from the codegen (`compile(..., { aliases: true })` in `packages/client/script/generate.ts`), not by hand.
+- Experimental plugin hooks are named `experimental.*` (`experimental.ws.handshake`).
+
 ## Testing
 
 - Avoid mocks as much as possible, you shouldn't be using globalThis.\* at all unless it's the only option.

nix/hashes.json

@@ -1,7 +1,7 @@
 {
   "nodeModules": {
-    "x86_64-linux": "sha256-WTBGUXIj/+CCJMQxunNpRfFY+0f3QyEoRUACwlnXMTU=",
-    "aarch64-linux": "sha256-pSqYZoivYt6j6JDsDXyeMu+l5RasikBtsgAKw8NsMC8=",
-    "aarch64-darwin": "sha256-IWZzoFucmt4YkoRKCH2kakrcRDbtOcHai+Xl/nVJmJA="
+    "x86_64-linux": "sha256-ZeDwprKqzVEm/8IkD7D/EkwAGSy9HR8yQnGUMoae1Kc=",
+    "aarch64-linux": "sha256-DUkIdnwsQ2p+vqVFCRtQwMCYlETJl1QV8OxVsen273g=",
+    "aarch64-darwin": "sha256-ie3dihmkL/U4kPw+hKyVNj8uryed9mxGEiq8VpxMMIc="
   }
 }

package.json

@@ -65,9 +65,11 @@
       "@types/semver": "7.7.1",
       "@tsconfig/node22": "22.0.2",
       "@tsconfig/bun": "1.0.9",
+      "@astrojs/starlight": "0.41.11",
       "@cloudflare/workers-types": "4.20251008.0",
       "@pierre/diffs": "1.6.1",
       "@pierre/highlights": "0.2.0",
+      "astro": "7.3.8",
       "@solid-primitives/event-listener": "2.4.6",
       "@solid-primitives/media": "2.3.6",
       "@solid-primitives/resize-observer": "2.2.0",
@@ -80,7 +82,7 @@
       "effect": "4.0.1",
       "fast-check": "4.9.0",
       "cross-spawn": "7.0.6",
-      "hono": "4.10.7",
+      "hono": "4.13.13",
       "fuzzysort": "3.1.0",
       "get-east-asian-width": "1.6.0",
       "luxon": "3.6.1",
@@ -90,14 +92,14 @@
       "semver": "7.7.4",
       "typescript": "npm:@typescript/typescript6@6.0.2",
       "@typescript/native": "npm:typescript@7.1.0-beta",
-      "zod": "4.1.8",
+      "zod": "4.6.7",
       "remeda": "2.26.0",
       "sst": "4.13.1",
       "shiki": "4.4.3",
       "solid-list": "0.3.0",
       "string-width": "7.2.0",
       "tailwindcss": "4.1.11",
-      "vite": "7.3.6",
+      "vite": "7.3.7",
       "@solidjs/meta": "0.29.4",
       "@solidjs/router": "1.0.0",
       "@solidjs/start": "https://pkg.pr.new/@solidjs/start@dfb2020",
@@ -156,6 +158,8 @@
     "bun-types": "1.4.4",
     "effect": "catalog:",
     "open": "11.0.4",
+    "astro": "catalog:",
+    "@astrojs/starlight": "catalog:",
     "solid-js": "catalog:"
   },
   "patchedDependencies": {
@@ -171,7 +175,7 @@
     "@ai-sdk/google@3.0.73": "patches/@ai-sdk%2Fgoogle@3.0.73.patch",
     "@tanstack/virtual-core@3.17.8": "patches/@tanstack%2Fvirtual-core@3.17.8.patch",
     "@ff-labs/fff-bun@0.10.5": "patches/@ff-labs%2Ffff-bun@0.10.5.patch",
-    "vite@8.2.2": "patches/vite@8.2.2.patch",
+    "vite@8.2.4": "patches/vite@8.2.4.patch",
     "@modelcontextprotocol/client@2.3.1": "patches/@modelcontextprotocol%2Fclient@2.3.1.patch",
     "@corvu/drawer@0.2.4": "patches/@corvu%2Fdrawer@0.2.4.patch",
     "app-builder-lib@26.15.7": "patches/app-builder-lib@26.15.7.patch",