fix(app,gui-plugins): port renderer UUID generation to HTTP-safe uuid()

packages/app/e2e/regression/review.spec.ts

@@ -151,6 +151,27 @@ test("a rejected Git init releases its session's button without showing an error
   await expect(init).toBeEnabled()
 })
 
+test("opens file picker launchers when randomUUID is unavailable on insecure HTTP origins", async ({ page }) => {
+  await page.addInitScript(() => {
+    Object.defineProperty(globalThis, "isSecureContext", { configurable: true, value: false })
+    Object.defineProperty(globalThis.crypto, "randomUUID", { configurable: true, value: undefined })
+  })
+
+  await openSession(page, {
+    name: "ReviewOpenFileInsecure",
+    seed: { panes: { ses_reviewopenfileinsecure: { review: true } } },
+  })
+
+  const panel = page.locator("#review-panel")
+  const tab = panel.getByRole("tab", { name: "Open file", exact: true })
+  await openFileLauncher(panel)
+  await expect(tab).toHaveAttribute("aria-selected", "true")
+  await expect(panel.getByRole("combobox", { name: "Filter files" })).toBeFocused()
+
+  await openFileLauncher(panel)
+  await expect(tab).toHaveCount(2)
+})
+
 test("open file tab browses, searches, and tracks missing files", async ({ page }) => {
   const searches: { query: string; dirs?: string; limit?: number; directory: string }[] = []
   const directory = "C:/OpenCode/ReviewOpenFile"

packages/app/src/runtime/persistence/uuid.ts

@@ -1,15 +1 @@
-const fallback = () => Math.random().toString(16).slice(2)
-
-export function uuid() {
-  const c = globalThis.crypto
-
-  if (!c || typeof c.randomUUID !== "function") return fallback()
-
-  if (typeof globalThis.isSecureContext === "boolean" && !globalThis.isSecureContext) return fallback()
-
-  try {
-    return c.randomUUID()
-  } catch {
-    return fallback()
-  }
-}
+export { uuid } from "@opencode/util/uuid"

packages/gui-plugins/src/file/renderer.tsx

@@ -32,6 +32,7 @@ import {
   type Plugin,
 } from "@opencode/plugin/gui"
 import { artifactKind } from "@opencode/util/artifact"
+import { uuid } from "@opencode/util/uuid"
 import { resolveArtifactPath } from "./artifact"
 import { FileContext, type FileShared } from "./context"
 import type { OpenApp } from "./apps"
@@ -167,7 +168,7 @@ const setup: Plugin.Setup<typeof File> = (ctx) => {
 
       if (selected || layout.narrow())
         layout.open(`file:${selected ?? OPEN}`, session, { tab: "preview", background: options?.background })
-      else layout.open(`file:${OPEN}:${crypto.randomUUID()}`, session, { tab: "select" })
+      else layout.open(`file:${OPEN}:${uuid()}`, session, { tab: "select" })
 
       if (!options?.background && layout.narrow() && !layout.side.opened(session)) layout.side.toggle(session)
     })

packages/util/src/uuid.ts

@@ -0,0 +1,15 @@
+const fallback = () => Math.random().toString(16).slice(2)
+
+export function uuid() {
+  const c = globalThis.crypto
+
+  if (!c || typeof c.randomUUID !== "function") return fallback()
+
+  if (typeof globalThis.isSecureContext === "boolean" && !globalThis.isSecureContext) return fallback()
+
+  try {
+    return c.randomUUID()
+  } catch {
+    return fallback()
+  }
+}