chore: merge beta into dev

Brings the desktop beta work into dev as a merge commit, so its history is kept.
Core, server and client changes from beta were backported to dev one PR at a time
first (#59081 to #59107).

Left out of this merge, so dev keeps its current behaviour:
- Generated UI, entirely: the plugin-genui package, its core registration and
  publishing, the session-ui surfaces, charts, form replies and streaming tool
  input, the app setting and its strings, tool-input delta publishing, and their
  tests. It lands on dev later through its own pull request.
- The `ast-grep-ignore: no-star-import` comment in cross-spawn-spawner.ts,
  which lint:effect-patterns still needs.

Notes:
- Dev-channel builds now use their own service-dev.json, port and
  opencode-dev.db (#58331), so dev-build users start on a fresh database.
- #56550 (plugin instruction entries) and #57527 (untracked folder rows) come
  in as on beta; follow-ups go to dev.
- Docs from beta are pointed at check-test.yml, after the workflow rename.
- #59132's fix (settings toggles MCP servers in the session's location) is
  ported onto beta's rewritten Extensions page, and #59131's browser title test
  joins beta's tab tests.

Author: Hona

.github/actions/setup-bun/action.yml

@@ -58,6 +58,9 @@ runs:
       with:
         path: ${{ steps.cache.outputs.dir }}
         key: ${{ runner.os }}-${{ runner.arch }}-bun-${{ steps.cache.outputs.version }}-${{ hashFiles('bun.lock', 'patches/**') }}
+        # Each dev merge changes beta's bun.lock. Beta falls back to the newest cache for the same Bun version
+        # (Bun's cache stores every package version separately) instead of installing everything from npm.
+        restore-keys: ${{ (github.ref_name == 'beta' && format('{0}-{1}-bun-{2}-', runner.os, runner.arch, steps.cache.outputs.version)) || '' }}
 
     - name: Install setuptools for distutils compatibility
       run: python3 -m pip install setuptools || pip install setuptools || true

.github/pull_request_template.md

@@ -17,6 +17,13 @@ Please provide a description of the issue, the changes you made to fix it, and w
 
 ### How did you verify your code works?
 
+### Visual
+
+_Optional, for user-facing changes: a small looping animated SVG (240×72) of the change, shown in the desktop app's "What's new in beta". Replace the block below or delete this section._
+
+```svg
+```
+
 ### Screenshots / recordings
 
 _If this is a UI change, please include a screenshot or recording._

.github/workflows/check-storybook.yml

@@ -4,14 +4,20 @@ on:
   push:
     branches:
       - dev
+      - beta
   pull_request:
     types: [opened, synchronize, reopened, ready_for_review]
   workflow_dispatch:
+    inputs:
+      quarantine:
+        description: Run only the quarantined browser tests (packages/app/e2e/QUARANTINE.md)
+        type: boolean
+        default: false
 
 concurrency:
-  # Keep every run on dev so cancelled checks do not pollute the default branch
-  # commit history. PRs and other branches still share a group and cancel stale runs.
-  group: ${{ case(github.ref == 'refs/heads/dev', format('{0}-{1}', github.workflow, github.run_id), format('{0}-{1}', github.workflow, github.event.pull_request.number || github.ref)) }}
+  # A new push to a pull request cancels its stale run. Every push and manual run keeps its own group, so each
+  # dev and beta commit gets a verdict and a quarantine run never cancels a normal one.
+  group: ${{ case(github.event_name == 'pull_request', format('{0}-{1}', github.workflow, github.event.pull_request.number), format('{0}-{1}', github.workflow, github.run_id)) }}
   cancel-in-progress: true
 
 permissions:
@@ -51,13 +57,13 @@ jobs:
             echo "app=true" >> "$GITHUB_OUTPUT"
             exit 0
           fi
-          # Storybook hosts the component tests, but no app package depends on it.
-          bun x turbo@2.10.2 ls --affected --filter=@opencode/app --filter=@opencode/storybook --output=json > affected.json
+          # packages/stories hosts the component tests, but no app package depends on it.
+          bun x turbo@2.10.2 ls --affected --filter=@opencode/app --filter=@opencode/stories --output=json > affected.json
           bun -e 'const result = await Bun.file("affected.json").json(); console.log(`app=${result.packages.count > 0}`)' >> "$GITHUB_OUTPUT"
 
   unit:
     name: unit (${{ matrix.settings.name }})
-    if: ${{ !github.event.pull_request.draft }}
+    if: ${{ !inputs.quarantine && !github.event.pull_request.draft }}
     strategy:
       fail-fast: false
       matrix:
@@ -143,7 +149,7 @@ jobs:
 
   build:
     name: build (${{ matrix.settings.name }})
-    if: ${{ !github.event.pull_request.draft }}
+    if: ${{ !inputs.quarantine && !github.event.pull_request.draft }}
     strategy:
       fail-fast: false
       matrix:
@@ -209,21 +215,21 @@ jobs:
           bun run script/service-smoke.ts --node
 
   e2e-suite:
-    name: e2e (${{ matrix.settings.name }}, ${{ matrix.suite.id }})
+    name: e2e (${{ matrix.settings.name }}, ${{ matrix.suite.id }}${{ matrix.quarantine && ', quarantine' || '' }})
     needs: affected
     if: needs.affected.outputs.e2e == 'true'
+    # Quarantined tests are known red; their legs report without failing the e2e checks.
+    continue-on-error: ${{ matrix.quarantine }}
     strategy:
       fail-fast: false
       matrix:
-        settings:
-          - name: linux
-            host: blacksmith-4vcpu-ubuntu-2404
-          - name: windows
-            host: blacksmith-4vcpu-windows-2025
+        # Beta PRs gate on Linux; Windows runs on pushes and manual runs (nightly-beta.yml dispatches beta).
+        settings: ${{ fromJSON(github.base_ref == 'beta' && '[{"name":"linux","host":"blacksmith-4vcpu-ubuntu-2404"}]' || '[{"name":"linux","host":"blacksmith-4vcpu-ubuntu-2404"},{"name":"windows","host":"blacksmith-4vcpu-windows-2025"}]') }}
+        quarantine: ${{ fromJSON(inputs.quarantine && '[true]' || '[false]') }}
         # Playwright splits whole spec files across shards by test count, not duration. Every app-N
         # entry must use the same total, and the entries must cover 1..total. The service worker suite
         # reuses shard 2's production build. Each component suite runs once per OS in its own leg, so the
-        # two suites' Storybook servers and test time are not added up on one runner.
+        # two suites' story servers and test time are not added up on one runner.
         suite:
           - id: app-1
             shard: 1/2
@@ -234,6 +240,9 @@ jobs:
     runs-on: ${{ matrix.settings.host }}
     env:
       PLAYWRIGHT_BROWSERS_PATH: ${{ github.workspace }}/.playwright-browsers
+      # Beta only (packages/app/e2e/QUARANTINE.md): gate legs skip quarantined tests, retry once and stop after 8
+      # failures; quarantine legs run only those tests, to the end. Other branches keep the config defaults.
+      PLAYWRIGHT_ARGS: ${{ matrix.quarantine && '--grep @quarantine --pass-with-no-tests --retries=1' || (github.base_ref == 'beta' || github.ref == 'refs/heads/beta') && '--grep-invert @quarantine --max-failures=8 --retries=1' || '' }}
     defaults:
       run:
         shell: bash
@@ -277,36 +286,36 @@ jobs:
 
       - name: Run app e2e tests against production build
         if: matrix.suite.shard
-        run: bun --cwd packages/app test:e2e:built --shard=${{ matrix.suite.shard }}
+        run: bun --cwd packages/app test:e2e:built --shard=${{ matrix.suite.shard }} ${{ env.PLAYWRIGHT_ARGS }}
         env:
           CI: true
-        timeout-minutes: 15
+        timeout-minutes: ${{ (matrix.quarantine || github.base_ref == 'beta' || github.ref == 'refs/heads/beta') && 10 || 15 }}
 
       - name: Verify service worker precaching and upgrades
-        if: matrix.suite.shard == '2/2'
+        if: matrix.suite.shard == '2/2' && !matrix.quarantine
         working-directory: packages/app
         run: bunx playwright test --config e2e/service-worker/playwright.config.ts
         timeout-minutes: 5
 
       - name: Run session UI component tests
         if: matrix.suite.id == 'session-ui-components'
-        run: bun --cwd packages/session-ui test:components
+        run: bun --cwd packages/session-ui test:components ${{ env.PLAYWRIGHT_ARGS }}
         env:
           CI: true
-        timeout-minutes: 15
+        timeout-minutes: ${{ (matrix.quarantine || github.base_ref == 'beta' || github.ref == 'refs/heads/beta') && 10 || 15 }}
 
       - name: Run app component tests
         if: matrix.suite.id == 'app-components'
-        run: bun --cwd packages/app test:components
+        run: bun --cwd packages/app test:components ${{ env.PLAYWRIGHT_ARGS }}
         env:
           CI: true
-        timeout-minutes: 15
+        timeout-minutes: ${{ (matrix.quarantine || github.base_ref == 'beta' || github.ref == 'refs/heads/beta') && 10 || 15 }}
 
       - name: Upload Playwright artifacts
         if: always()
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
-          name: playwright-${{ matrix.settings.name }}-${{ matrix.suite.id }}-${{ github.run_attempt }}
+          name: playwright-${{ matrix.settings.name }}-${{ matrix.suite.id }}${{ matrix.quarantine && '-quarantine' || '' }}-${{ github.run_attempt }}
           if-no-files-found: ignore
           retention-days: 7
           path: |
@@ -322,7 +331,7 @@ jobs:
   e2e:
     name: e2e (${{ matrix.os }})
     needs: [affected, e2e-suite]
-    if: ${{ !cancelled() && !github.event.pull_request.draft }}
+    if: ${{ !cancelled() && !inputs.quarantine && !github.event.pull_request.draft }}
     strategy:
       fail-fast: false
       matrix:
@@ -335,5 +344,9 @@ jobs:
           SUITES: ${{ needs.e2e-suite.result }}
           EXPECTED: ${{ needs.affected.outputs.e2e == 'true' && 'success' || 'skipped' }}
         run: |
+          if [ "${{ matrix.os }}" = windows ] && [ "${{ github.base_ref }}" = beta ]; then
+            echo "Windows browser tests run on beta pushes and nightly, not on beta pull requests"
+            exit 0
+          fi
           echo "affected packages: $AFFECTED, browser test legs: $SUITES (expected $EXPECTED)"
           test "$AFFECTED" = success && test "$SUITES" = "$EXPECTED"

.github/workflows/check-test.yml

@@ -0,0 +1,23 @@
+name: nightly-beta
+
+# GitHub runs schedules only from the default branch (dev), so this fires once this file is on dev.
+# It tests beta with the full suite on both OSes, then runs beta's quarantined browser tests.
+on:
+  schedule:
+    - cron: "17 9 * * *"
+  workflow_dispatch:
+
+permissions:
+  actions: write
+
+jobs:
+  dispatch:
+    if: github.repository == 'anomalyco/opencode'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Dispatch beta test runs
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh workflow run check-test.yml --repo "$GITHUB_REPOSITORY" --ref beta
+          gh workflow run check-test.yml --repo "$GITHUB_REPOSITORY" --ref beta -f quarantine=true