Repository navigation
fix(opencode): align Sol defaults and reasoning policy (0.5.4) - #129
Merged
Merged
Conversation
Chart CI passedRepository hygiene and Helm validation passed. View the workflow run. |
xnoto
added a commit
to makeitworkcloud/kustomize-cluster
that referenced
this pull request
Oct 13, 2026
## Summary Select published opencode-server chart **0.5.4** from [charts PR #129](makeitworkcloud/charts#129), and coordinate the existing exact chart/API assertion to **(0.5.4, 2)**. Exporter API selector remains **2**. No test relaxation, workflow behavior, image, Secret, RBAC, network or pilot changes. ## Validation - Producer publication and updater passed [run 38445170845](https://github.com/makeitworkcloud/charts/actions/runs/38445170845). - Initial consumer test failed its stale chart/API assertion; this follow-up corrects only the expected chart version. - Independent adversarial and infra-security reviews ADVANCE; DevOps ADVANCE explicitly bounded to edited assertion and supplied unchanged delivery contract, not overall workflow approval. Primary inspected full workflow and exact two-file diff. No remaining Critical/High finding in scoped change. - Required PR test and logging checks passed in [run 38446019338](https://github.com/makeitworkcloud/kustomize-cluster/actions/runs/38446019338) at `07cfd08613e64ce2505c3afa96e6d7913d970908`. No local checks claimed. ## Impact and rollout Owner authorized proceeding with consumer coordination. Existing generated PR auto-merge is enabled and check-gated. A merge runs main CI; successful main automatically requests root sync at the tested SHA, then gitops-workloads updates the opencode child. Root/child revision reconciliation, resource/pod health, delivered configuration and runtime behavior remain separately verified; no manual sync or live patch is performed. Recreate rollout may briefly interrupt the single-replica server. Image/appVersion 2.0.22 unchanged. Stored/client-selected sessions retain model precedence; new model entitlement, effective effort, inference/tool-call success and comparative quality/cost are not established by static CI. Rollback requires a reviewed GitOps pin and matching exact assertion to a published prior version; no retagging, image downgrade or database operation. ## Safety No plaintext secrets, decrypted values, credentials, state or kubeconfigs retrieved or changed. AI-assisted scoped follow-up; generated chart pin remains publisher-owned. --------- Co-authored-by: makeitworkbot[bot] <321979582+makeitworkbot[bot]@users.noreply.github.com> Co-authored-by: Steven Welch <steven@makeitwork.cloud>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Release opencode-server 0.5.4 for the owner-approved model-policy update:
openai/gpt-6.1-sol; keepdefault_agent: default.OpenCode image/appVersion 2.0.22, API selector 2, 25-agent inventory, non-OpenAI workers, permissions, MCPs, provider/Secret wiring, and opt-in pilot are unchanged.
Type of change
Validation
Authored checks enforce the independent exact eighteen-agent OpenAI model/variant matrix in source and rendered ConfigMap, reject duplicate/missing/wrong selection headers, assert the global default and retained provider wiring, and preserve the fixed historical baseline, exact approved transforms, primary policy tails, pilot isolation, source/render/archive parity, and package version.
Independent static reviews: adversarial ADVANCE, infra-security ADVANCE, QA COVERED, DevOps ADVANCE for the bounded Makefile and unchanged delivery integration, release READY. No Critical/High finding remains. Release review's numeric-version prose was unreliable and is explicitly superseded: the primary verified canonical Chart.yaml
0.5.4, appVersion2.0.22, Makefile archiveopencode-server-0.5.4.tgz, and the consumer assertion directly.Catalog supports the selected models/variants; this is not account entitlement, effective request effort, inference, tool-call success, quality, billing, or benchmark evidence. Fresh-session web/TUI/API and child-agent behavior remains separately verified after an approved rollout. Primary preferences do not replace persisted/client-selected session models; the root has no effort override.
Impact and rollout
Producer:
makeitworkcloud/charts/opencode-server; consumers: packaged OpenCode primary/subagent preferences andmakeitworkcloud/kustomize-cluster/workloads/apps/opencode-app.yaml.automation/opencode-server-0.5.4consumer PR with check-gated auto-merge; workflow unchanged.5d51403d9ec697f0ea020007ad5872cd222fbb95,.github/workflows/test.yml:916asserts(0.5.3, 2). The generated0.5.4pin PR cannot pass until the consumer coordinates the expected chart version to0.5.4, retaining API selector2. This PR does not edit cluster desired state or that assertion and does not bypass checks. Publication may complete while selection stays blocked.Rollback is a separately authorized GitOps chart-pin revision; no image downgrade, credential change or database operation is part of this change.
Safety and secrets
AI-assisted change authored by the makeitwork primary, with independent reviewer subagents. The initial implementation worker made no commits; its write authority was withdrawn before the replacement branch was authored.