𝙊𝙥𝙚𝙣𝘾𝙤𝙙𝙚 v1.14.34 released. TL;DR: native HttpApi + WebSocket groundwork, experimental v2 session/event surface, shell-aware Bash tool, terminal/auth/worktree fixes
𝗦𝗲𝗿𝘃𝗲𝗿 & 𝗔𝗣𝗜
• Effect HttpApi now has a native listener path for real WebSocket upgrades, plus OpenAPI generation from the HttpApi spec. Dev/beta/local default this backend on; stable stays on Hono unless OPENCODE_EXPERIMENTAL_HTTPAPI is set.
• Auth is centralized around OPENCODE_SERVER_USERNAME/OPENCODE_SERVER_PASSWORD. Browser login gets a Basic challenge, clients/plugins preserve username credentials, and SDK/CLI errors no longer collapse empty server responses into bare {}.
• Embedded UI serving/proxying was tightened: bundled UI assets resolve through the filesystem abstraction, public manifest/icon assets can load under server auth, and decoded proxied responses strip transfer/content metadata browsers should not see.
𝗣𝗧𝗬, 𝗪𝗲𝗯 & 𝗗𝗲𝘀𝗸𝘁𝗼𝗽
• PTY WebSockets now support short-lived connect tickets with origin/CSRF checks, so desktop/web terminals can connect under Basic Auth without relying on long-lived credentials in WS URLs.
• Web terminal state is scoped per server, auth_token bootstrap credentials are parsed then removed from the URL, reconnect recovery avoids clone loops, and desktop zoom handlers only consume actual zoom shortcuts.
𝗦𝗲𝘀𝘀𝗶𝗼𝗻 v2
• Adds the session.next.* event schema/projection layer for prompts, steps, text, reasoning, tools, retries, compaction, and failure states, persisted into a new session_message table behind OPENCODE_EXPERIMENTAL_EVENT_SYSTEM.
• Adds experimental v2 session/message read APIs with cursor pagination and active-context reads, plus an internal TUI v2 sync/debug renderer. This is groundwork, not a replacement for the main session UI yet.
𝗧𝗼𝗼𝗹𝘀 & 𝗖𝗟𝗜
• The Bash tool is now shell-aware while keeping the user-facing tool/permission id bash: prompts adapt for bash, pwsh/PowerShell, and cmd, and permission/path scanning understands shell-specific file commands.
• CLI commands continue moving to Effect-native execution with per-command instance opt-out and deterministic disposal. opencode run --attach also gains --username for Basic Auth.
𝗩𝗖𝗦 & 𝗪𝗼𝗿𝗸𝘁𝗿𝗲𝗲
• VCS diffs now use native git patch output with byte caps/batched parsing instead of constructing full before/after file contents in memory. Large diffs should be safer while retaining per-file stats.
• Worktree creation boots through InstanceStore asynchronously, so workspace/worktree endpoints return without waiting for project bootstrap/start scripts and avoid previous hangs.
𝗣𝗿𝗼𝘃𝗶𝗱𝗲𝗿𝘀 & 𝗭𝗲𝗻
• Codex OAuth now allows gpt-5.3-codex-spark.
• Azure provider model selection handles chat/responses/messages/languageModel SDK shapes; Zen usage telemetry adds microcent cost metrics and avoids applying payload substitutions to non-string values.
Bundle size change
macOS arm64
• Total: 123.4 MB -> 99.9 MB (-23.4 MB)
• Bun runtime: 60.6 MB -> 60.4 MB (-186.1 KB)
• CLI/TUI JS: 14.1 MB -> 14.2 MB (+138.4 KB)
• Web UI assets: 41.2 MB -> 17.9 MB (-23.4 MB)
• Native addons: 1.7 MB -> 1.7 MB (no change)
• WASM: 5.7 MB -> 5.7 MB (no change)
• Bundle metadata: 109.8 KB -> 70.9 KB (-38.9 KB)
Linux x64
• Total: 162.9 MB -> 139.6 MB (-23.3 MB)
• Bun runtime: 96.2 MB -> 96.2 MB (no change)
• CLI/TUI JS: 14.1 MB -> 14.2 MB (+138.4 KB)
• Web UI assets: 41.2 MB -> 17.9 MB (-23.4 MB)
• Native addons: 5.5 MB -> 5.5 MB (no change)
• WASM: 5.7 MB -> 5.7 MB (no change)
• Bundle metadata: 110.3 KB -> 67.4 KB (-42.9 KB)
Windows x64
• Total: 174.7 MB -> 151.4 MB (-23.3 MB)
• Bun runtime: 111.5 MB -> 111.5 MB (-211 B)
• CLI/TUI JS: 14.1 MB -> 14.2 MB (+138.4 KB)
• Web UI assets: 41.2 MB -> 17.9 MB (-23.4 MB)
• Native addons: 2.1 MB -> 2.1 MB (no change)
• WASM: 5.7 MB -> 5.7 MB (no change)
• Bundle metadata: 107.7 KB -> 66.5 KB (-41.2 KB)
Compare: github.com/anomalyco/open…
English