𝙊𝙥𝙚𝙣𝘾𝙤𝙙𝙚 v1.14.34 released. TL;DR: native HttpApi + WebSocket groundwork, experimental v2 session/event surface, shell-aware Bash tool, terminal/auth/worktree fixes 𝗦𝗲𝗿𝘃𝗲𝗿 & 𝗔𝗣𝗜 • Effect HttpApi now has a native listener path for real WebSocket upgrades, plus OpenAPI generation from the HttpApi spec. Dev/beta/local default this backend on; stable stays on Hono unless OPENCODE_EXPERIMENTAL_HTTPAPI is set. • Auth is centralized around OPENCODE_SERVER_USERNAME/OPENCODE_SERVER_PASSWORD. Browser login gets a Basic challenge, clients/plugins preserve username credentials, and SDK/CLI errors no longer collapse empty server responses into bare {}. • Embedded UI serving/proxying was tightened: bundled UI assets resolve through the filesystem abstraction, public manifest/icon assets can load under server auth, and decoded proxied responses strip transfer/content metadata browsers should not see. 𝗣𝗧𝗬, 𝗪𝗲𝗯 & 𝗗𝗲𝘀𝗸𝘁𝗼𝗽 • PTY WebSockets now support short-lived connect tickets with origin/CSRF checks, so desktop/web terminals can connect under Basic Auth without relying on long-lived credentials in WS URLs. • Web terminal state is scoped per server, auth_token bootstrap credentials are parsed then removed from the URL, reconnect recovery avoids clone loops, and desktop zoom handlers only consume actual zoom shortcuts. 𝗦𝗲𝘀𝘀𝗶𝗼𝗻 v2 • Adds the session.next.* event schema/projection layer for prompts, steps, text, reasoning, tools, retries, compaction, and failure states, persisted into a new session_message table behind OPENCODE_EXPERIMENTAL_EVENT_SYSTEM. • Adds experimental v2 session/message read APIs with cursor pagination and active-context reads, plus an internal TUI v2 sync/debug renderer. This is groundwork, not a replacement for the main session UI yet. 𝗧𝗼𝗼𝗹𝘀 & 𝗖𝗟𝗜 • The Bash tool is now shell-aware while keeping the user-facing tool/permission id bash: prompts adapt for bash, pwsh/PowerShell, and cmd, and permission/path scanning understands shell-specific file commands. • CLI commands continue moving to Effect-native execution with per-command instance opt-out and deterministic disposal. opencode run --attach also gains --username for Basic Auth. 𝗩𝗖𝗦 & 𝗪𝗼𝗿𝗸𝘁𝗿𝗲𝗲 • VCS diffs now use native git patch output with byte caps/batched parsing instead of constructing full before/after file contents in memory. Large diffs should be safer while retaining per-file stats. • Worktree creation boots through InstanceStore asynchronously, so workspace/worktree endpoints return without waiting for project bootstrap/start scripts and avoid previous hangs. 𝗣𝗿𝗼𝘃𝗶𝗱𝗲𝗿𝘀 & 𝗭𝗲𝗻 • Codex OAuth now allows gpt-5.3-codex-spark. • Azure provider model selection handles chat/responses/messages/languageModel SDK shapes; Zen usage telemetry adds microcent cost metrics and avoids applying payload substitutions to non-string values. Bundle size change macOS arm64 • Total: 123.4 MB -> 99.9 MB (-23.4 MB) • Bun runtime: 60.6 MB -> 60.4 MB (-186.1 KB) • CLI/TUI JS: 14.1 MB -> 14.2 MB (+138.4 KB) • Web UI assets: 41.2 MB -> 17.9 MB (-23.4 MB) • Native addons: 1.7 MB -> 1.7 MB (no change) • WASM: 5.7 MB -> 5.7 MB (no change) • Bundle metadata: 109.8 KB -> 70.9 KB (-38.9 KB) Linux x64 • Total: 162.9 MB -> 139.6 MB (-23.3 MB) • Bun runtime: 96.2 MB -> 96.2 MB (no change) • CLI/TUI JS: 14.1 MB -> 14.2 MB (+138.4 KB) • Web UI assets: 41.2 MB -> 17.9 MB (-23.4 MB) • Native addons: 5.5 MB -> 5.5 MB (no change) • WASM: 5.7 MB -> 5.7 MB (no change) • Bundle metadata: 110.3 KB -> 67.4 KB (-42.9 KB) Windows x64 • Total: 174.7 MB -> 151.4 MB (-23.3 MB) • Bun runtime: 111.5 MB -> 111.5 MB (-211 B) • CLI/TUI JS: 14.1 MB -> 14.2 MB (+138.4 KB) • Web UI assets: 41.2 MB -> 17.9 MB (-23.4 MB) • Native addons: 2.1 MB -> 2.1 MB (no change) • WASM: 5.7 MB -> 5.7 MB (no change) • Bundle metadata: 107.7 KB -> 66.5 KB (-41.2 KB) Compare: github.com/anomalyco/open…