每日趋势报告 · 2026-01-05

## Core - Fix permission rule matching to use permission field instead of pattern field - Fix permission evaluation to use rule-based matching instead of wildcard patterns - Handle skill scan failures for .claude files gracefully - Handle case where big-pickle is unavailable as a fallback - Prevent main model thinking variant from applying to small model (@melihmucuk) - Increase default timeout to 30 seconds based on user feedback - Add session search functionality with debounced input and server-side filtering - Improve Rust formatter detection and add cargo fmt support ## TUI - Allow exit when viewing child session in TUI (@rmk40) - Fix symmetric padding in TUI input field - Prevent session list rows from wrapping to two lines (@rgodha24) - Fix optional session access to prevent runtime errors in TUI ## Desktop - Implement auto-scroll for active command in slash popover (@OpeOginni) - Fix responsive menu in desktop application (@dbpolito) - Optimize model dialog visibility lookups (@shkumbinhasani) - Add home icon to responsive menu in desktop app (@dbpolito) - Add SVG preview support in session viewer (@shuv1337) - Add AppStream MetaInfo file for desktop application (@NN708) - Fix mobile screen size issues (@carterworks) - Fix custom slash commands not showing on initial / (@Raviguntakala) - Improved prompt input handling in the application **Thank you to 11 community contributors:** - @melihmucuk: - fix: prevent main model thinking variant from applying to small model (#6839) - @rgodha24: - fix: prevent session list rows from wrapping to 2 lines (#6812) - @albingroen: - fix(ui): fix select chevron alignment (#6690) - @Raviguntakala: - fix(app): fix custom slash commands not showing on initial / (#6829) - @carterworks: - Fix a few mobile screen size issues (#6808) - @NN708: - feat(desktop): add AppStream MetaInfo file (#6030) - @shuv1337: - feat(app): add SVG preview support in session viewer (#6868) - @dbpolito: - Desktop: Improve Big Session Navigation - Scrollable (#6837) - Desktop: Adding Home Icon on Responsive Menu (#6794) - Desktop: Fix Responsive Menu (#6789) - @shkumbinhasani: - perf: optimize model dialog visibility lookups (#6791) - @OpeOginni: - feat(desktop): implement auto-scroll for active command in slash popover (#6797) - @rmk40: - fix(tui): allow exit when viewing child session (#6898)

## Changes ### PR [#1914](https://github.com/danielmiessler/Fabric/pull/1914) by [majiayu000](https://github.com/majiayu000): feat(code_helper): add stdin support for piping file lists - Added stdin support for piping file lists to code_helper, enabling commands like `find . -name '*.go' | code_helper "instructions"` and `git ls-files '*.py' | code_helper "Add type hints"` - Implemented automatic detection of stdin pipe mode with single argument (instructions) support - Enhanced tool to read file paths from stdin line by line while maintaining backward compatibility with existing directory scanning functionality ### PR [#1915](https://github.com/danielmiessler/Fabric/pull/1915) by [majiayu000](https://github.com/majiayu000): feat: parallelize audio chunk transcription for improved performance - Parallelize audio chunk transcription using goroutines for improved performance

## Changes ### PR [#1913](https://github.com/danielmiessler/Fabric/pull/1913) by [majiayu000](https://github.com/majiayu000): fix: REST API /chat endpoint doesn't pass 'search' parameter to ChatOptions - Fix: REST API /chat endpoint now properly passes Search and SearchLocation parameters to ChatOptions

## Changes ### PR [#1923](https://github.com/danielmiessler/Fabric/pull/1923) by [ksylvan](https://github.com/ksylvan): ChangeLog Generation stability - Fix: improve date parsing and prevent early return when PR numbers exist - Add SQLite datetime formats to version date parsing logic - Loop through multiple date formats until one succeeds - Include SQLite fractional seconds format support - Prevent early return when version has PR numbers to output

## Changes ### PR [#1921](https://github.com/danielmiessler/Fabric/pull/1921) by [ksylvan](https://github.com/ksylvan): chore: remove redundant `--sync-db` step from changelog workflow - Remove redundant `--sync-db` step from changelog workflow - Remove duplicate database sync command from version workflow - Simplify changelog generation to single process-prs step - Clean up `heal_person` pattern by removing duplicate content sections - Remove duplicate IDENTITY, PURPOSE, STEPS, and OUTPUT INSTRUCTIONS from pattern file

This is a **major change** that overhauls the permissions system in OpenCode. ### Tools Merged into Permission The `tools` configuration has been deprecated and merged into the `permission` field. Previously, you could enable/disable tools like this: ```json { "tools": { "bash": true, "edit": false } } ``` Now, this should be configured using `permission`: ```json { "permission": { "bash": "allow", "edit": "deny" } } ``` The old `tools` config is still supported for backwards compatibility and will be automatically migrated to the permission system. ### Granular Permissions with Object Syntax Permissions now support granular control using an object syntax with pattern matching. When you specify a permission as an object, you can set different rules for different patterns: ```json { "permission": { "bash": { "npm *": "allow", "git *": "allow", "rm *": "deny", "*": "ask" }, "edit": { "*.md": "allow", "*.ts": "ask", "*": "deny" } } } ``` Each key in the object is a glob pattern that matches against the tool's input, and the value is the action to take: - `"allow"` - automatically approve - `"deny"` - automatically reject - `"ask"` - prompt the user for approval You can also set a blanket permission using a simple string: ```json { "permission": { "bash": "allow", "edit": "ask" } } ``` Or set all permissions at once: ```json { "permission": "allow" } ``` ### Breaking Changes for SDK Users The permission events have changed significantly. The new `PermissionNext` module (`permission/next.ts`) has a different event structure compared to the old `Permission` module (`permission/index.ts`): **Old Event Structure (`Permission.Event`):** - `Updated`: `{ id, type, pattern, sessionID, messageID, callID, message, metadata, time }` - `Replied`: `{ sessionID, permissionID, response }` **New Event Structure (`PermissionNext.Event`):** - `Asked`: `{ id, sessionID, permission, patterns, metadata, always, tool: { messageID, callID } }` - `Replied`: `{ sessionID, requestID, reply }` Key differences: - Event name changed from `permission.updated` to `permission.asked` - `type` renamed to `permission` - `pattern` is now `patterns` (array of strings) - `message` field removed - `response` renamed to `reply` - `permissionID` renamed to `requestID` - New `always` field contains patterns that would be approved for future requests if user selects "always" The reply values are the same: `"once"`, `"always"`, or `"reject"` ### Server Changes - New endpoint: `POST /permission/:requestID/reply` for responding to permission requests - Old endpoint `POST /session/:sessionID/permissions/:permissionID` is now deprecated - `GET /permission` now returns `PermissionNext.Request[]` instead of `Permission.Info[]` - Added CORS whitelist support via `server.cors` config option - Added Content-Type headers for proxied static assets - mDNS service name now includes port for uniqueness ### Other Changes - Agent `tools` field is deprecated - use `permission` instead - Agent `maxSteps` is deprecated - use `steps` instead - Unknown agent properties are now collected into `options` - Mode and plugin globs no longer search subdirectories (simplified to top-level only) ## Core - Add development scripts for better debugging workflow in TUI - Ensure @opencode-ai/plugin exists only on first run - Add MCP resources support (@paoloricciuti) - Initialize config in worktree - Prioritize free GPT-5-mini for small model in GitHub Copilot - Remove hardcoded .env read block and use new permissions model instead - Prevent duplicate plugin function initialization (@ShpetimA) - Update GitHub Copilot model priority list - Add variant field to chat message input - Update AGENTS.md documentation (@aryasaatvik) - Fixed dependency installation and git worktree branch creation - Fixed an issue in the codebase - Add sandbox support for git worktrees to allow working in multiple directories per project - Add timeout to MCP client connection calls (@RhysSullivan) - Add per-project MCP config overrides (@jknlsn) - Improve root detection for Gradle multi-project builds in Kotlin language server (@JBou) - Improve plugin loading to handle builtin plugin failures gracefully - Add reject message support to permission dialogs for better user feedback - Wrap queued user messages with reminder to stay on track - Add managed git worktrees - Upgrade OpenTUI to v0.1.68 using GPA - Add escape key handling to permission dialogs for better keyboard navigation - Add TUI session selection API endpoint for navigation (@code-yeongyu) - Add Kotlin LSP integration (@tjg184) - Merge instructions arrays across config files instead of overriding them (@elithrar) - Add variant support for minimal mode - Fix Cloudflare AI Gateway SDK chat undefined error (@englishm) - Handle NotFoundError for non-shared sessions in sync (@Hona) - Improve plugin loading to handle builtin plugin failures gracefully - Update CI configuration - Add reload functionality and improve lazy utility with reset capability - Remove memory leak fixes documentation after implementation - Fix memory leaks in session management and improve permission error handling - Fix TUI permission tests for new evaluate function signature - Improve permission error handling and evaluation logic in TUI - Ignore - Add assistant metadata to session export (@dmmulroy) - Ensure new permissions changes work for special case bash commands like rm, cd, etc - Rework permission system - Remove outdated Haiku filter for GitHub Copilot (@alcpereira) - Make install dependencies non-blocking - Use --no-cache flag when behind proxy to prevent connection hangs - Check for context overflow mid-turn in finish-step (@aryasaatvik) - Display error if invalid agent is used in a command (@Leka74) - Add Content-Type headers for proxied static assets (@monotykamary) ## TUI - Add missing theme list keybind in TUI (@aspiers) - Handle duplicate PR creation when agent creates PR (@elithrar) - Fix system theme diff highlighting in TUI - Add --variant flag to run command (@shuv1337) - Remove OpenRouter provider from priority list - Make LSP status icon muted when no LSPs are active (@itsrainingmani) - Make MCP status icon muted when no MCP servers are enabled (@itsrainingmani) - Pass attach directory to SDK client in TUI (@shuv1337) - Handle actions/checkout v6 credential storage change (@elithrar) - Use Bun.sleep instead of Promise with setTimeout (@edlsh) - Add Osaka Jade theme (@st-eez) - Add heap snapshot option to system menu for debugging memory usage - Fixed Windows fallback for "less" command in session list (@itsrainingmani) - Fix import command regex to properly handle file paths - Fix stats command day calculation and time filtering ## Desktop - Fix scroll position restoration in app - Don't override Ctrl+A on Windows - Improve auto-scroll behaviors in the application - Fixed editing projects in desktop application (@dbpolito) - Update server URL normalization to retain path (@OpeOginni) - Add image preview support in session viewer (@shuv1337) - Add /compact session command to compress conversation history - Adjust window drag region layout for desktop application - Relax request timeouts - Properly decode session ID for permission context in desktop app (@OpeOginni) - Work in progress on application features - Improve application startup time - Add work in progress desktop functionality - Add file context feature to app - Improve desktop window resize handle (@dbpolito) **Thank you to 30 community contributors:** - @monotykamary: - fix(server): add Content-Type headers for proxied static assets (#6587) - @Leka74: - fix: display error if invalid agent is used in a command (#6578) - @aryasaatvik: - fix(session): check for context overflow mid-turn in finish-step (#6480) - docs: update AGENTS.md (#6800) - @alcpereira: - fix: remove outdated Haiku filter for GitHub Copilot (#6593) - @dbpolito: - Desktop: Improve Resize Handle (#6608) - Desktop: Edit Project Fix (#6757) - @itsrainingmani: - fix: windows fallback for "less" cmd in `session list` (#6515) - fix(tui): make mcp status icon muted when no mcp servers are enabled (#6745) - fix(tui): make lsp status icon muted when no lsps are active (#6773) - @dmmulroy: - feat: add assistant metadata to session export (#6611) - @Hona: - fix(share): handle NotFoundError for non-shared sessions in sync (#6634) - @OpeOginni: - fix(desktop): Properly decode session id for permission context (#6580) - fix(server): update server URL normalization to retain path (#6647) - @albingroen: - fix(ui): fix slight vertical overflow in project selector (#6589) - @st-eez: - feat(theme): add Osaka Jade theme (#6609) - @edlsh: - refactor: use Bun.sleep instead of Promise setTimeout (#6620) - @englishm: - fix: cloudflare-ai-gateway sdk.chat undefined error (#6407) - @elithrar: - fix: handle actions/checkout v6 credential storage change (#6667) - fix: merge instructions arrays across config files (#6663) - github: handle duplicate PR creation when agent creates PR (#6777) - docs: add logging best practices for plugin authors (#6833) - @spoons-and-mirrors: - docs: add subtask2 to ecosystem page (#6704) - @tjg184: - feat: Add kotlin lsp integration (#6601) - @code-yeongyu: - feat(plugin): add tui.session.select API endpoint for TUI navigation (#6565) - @shuv1337: - fix(tui): pass attach directory to sdk client (#6715) - feat(app): add image preview support in session viewer (#6678) - feat: add --variant flag to run command (#6805) - @JBou: - fix(kotlin-ls): improve root detection for Gradle multi-project builds (#6717) - @jknlsn: - feat: add per-project MCP config overrides (#5406) - @sin4ch: - docs: enhance MCP servers documentation with a tip (#6713) - @RhysSullivan: - fix(mcp): add timeout to client.connect() calls (#6760) - @jerilynzheng: - docs: Add Vercel AI Gateway to provider docs (#6790) - @benjaminshafii: - docs: Add opencode-scheduler plugin to ecosystem (#6804) - @ShpetimA: - fix(plugin): prevent duplicate plugin function initialization (#6787) - @johnconnor-sec: - docs: typo in subtask documentation (#6821) - @felipeorlando: - Remove opencode-skills entry from ecosystem.mdx (#6817) - @jerome-benoit: - feat(nix): preliminary desktop app flake integration (#6135) - @paoloricciuti: - feat: mcp resources (#6542) - @aspiers: - fix(tui): add missing `theme_list` keybind (#6779)