fix: resolve all new typecheck errors from upstream v1.2.27 merge

- Fix duplicate code after altimate_change block re-application
- Update altimate code to adapt to upstream API changes (permission,
  MCP, sync, SDK, skill, tool, session, config)
- Add missing imports (Telemetry, MemoryPrompt, Tracer, etc.)
- Fix test files to use updated upstream APIs
- Restore removed upstream functions needed by our code

https://claude.ai/code/session_01FVE7bSfST5rpzbEmUhNiBU

Author: claude

packages/opencode/script/publish.ts

@@ -11,7 +11,7 @@ process.chdir(dir)
 // NAPI native modules that must be installed alongside the CLI binary.
 // These cannot be embedded in Bun's single-file executable — the JS loader
 // dynamically require()s platform-specific .node binaries at runtime.
-const altimateCoreDep = pkg.dependencies["@altimateai/altimate-core"]
+const altimateCoreDep = (pkg.dependencies as Record<string, string>)["@altimateai/altimate-core"]
 if (!altimateCoreDep) {
   console.error("Missing required dependency: @altimateai/altimate-core in package.json")
   process.exit(1)

packages/opencode/src/agent/agent.ts

@@ -91,6 +91,38 @@ export namespace Agent {
     })
     const user = PermissionNext.fromConfig(cfg.permission ?? {})
 
+    // Safety deny rules that CANNOT be overridden by wildcard allows.
+    // Appended after user config so they always take precedence via last-match-wins.
+    const safetyDenials = PermissionNext.fromConfig({
+      bash: {
+        "DROP DATABASE *": "deny",
+        "DROP SCHEMA *": "deny",
+        "TRUNCATE *": "deny",
+        "drop database *": "deny",
+        "drop schema *": "deny",
+        "truncate *": "deny",
+        "Drop Database *": "deny",
+        "Drop Schema *": "deny",
+        "Truncate *": "deny",
+      },
+      // altimate_change start - SQL write safety denials
+      sql_execute_write: {
+        "DROP DATABASE *": "deny",
+        "DROP SCHEMA *": "deny",
+        "TRUNCATE *": "deny",
+        "drop database *": "deny",
+        "drop schema *": "deny",
+        "truncate *": "deny",
+        "Drop Database *": "deny",
+        "Drop Schema *": "deny",
+        "Truncate *": "deny",
+      },
+      // altimate_change end
+    })
+
+    // Combine user config with safety denials so every agent inherits them
+    const userWithSafety = PermissionNext.merge(user, safetyDenials)
+
     const result: Record<string, Info> = {
       // altimate_change start - 3 modes: builder, analyst, plan
       builder: {

packages/opencode/src/altimate/tools/datamate.ts

@@ -302,7 +302,7 @@ async function handleDelete(args: { datamate_id?: string }) {
     const disconnected: string[] = []
     if (serverName in allStatus) {
       try {
-        await MCP.remove(serverName)
+        await MCP.disconnect(serverName)
         disconnected.push(serverName)
       } catch {
         // Log but don't fail the delete operation
@@ -383,7 +383,7 @@ async function handleRemove(args: { server_name?: string; scope?: "project" | "g
   }
   try {
     // Fully remove from runtime state (disconnect + purge from MCP list)
-    await MCP.remove(args.server_name).catch(() => {})
+    await MCP.disconnect(args.server_name).catch(() => {})
 
     // Remove from config files — when no scope specified, try both to avoid orphaned entries
     const removed: string[] = []

packages/opencode/src/cli/cmd/providers.ts

@@ -256,7 +256,6 @@ export const ProvidersLoginCommand = cmd({
         // altimate_change start — branding
         describe: "altimate auth provider",
         // altimate_change end
-        describe: "opencode auth provider",
         type: "string",
       })
       .option("provider", {

packages/opencode/src/cli/cmd/run.ts

@@ -229,9 +229,6 @@ export const RunCommand = cmd({
         array: true,
         default: [],
       })
-      // altimate_change start - activate tracer for session
-      if (tracer) Tracer.setActive(tracer)
-      // altimate_change end
       .option("command", {
         describe: "the command to run, use message for args",
         type: "string",
@@ -571,15 +568,6 @@ export const RunCommand = cmd({
               })
             }
             // altimate_change end
-            UI.println(
-              UI.Style.TEXT_WARNING_BOLD + "!",
-              UI.Style.TEXT_NORMAL +
-                `permission requested: ${permission.permission} (${permission.patterns.join(", ")}); auto-rejecting`,
-            )
-            await sdk.permission.reply({
-              requestID: permission.id,
-              reply: "reject",
-            })
           }
         }
       }

packages/opencode/src/cli/cmd/tui/app.tsx

@@ -41,8 +41,17 @@ import { writeHeapSnapshot } from "v8"
 import { PromptRefProvider, usePromptRef } from "./context/prompt"
 import { TuiConfigProvider } from "./context/tui-config"
 import { TuiConfig } from "@/config/tui"
+import { Log } from "@/util/log"
 
 // altimate_change start - shared trace viewer server
+import fs from "fs/promises"
+import { Tracer } from "@/altimate/observability/tracing"
+import { renderTraceViewer } from "@/altimate/observability/viewer"
+import { DialogTraceList } from "@tui/component/dialog-trace-list"
+import { UPGRADE_KV_KEY } from "@tui/component/upgrade-indicator-utils"
+
+const fsAsync = fs
+
 let traceViewerServer: ReturnType<typeof Bun.serve> | undefined
 let traceViewerTracesDir: string | undefined
 function getTraceViewerUrl(sessionID: string, tracesDir?: string): string {

packages/opencode/src/cli/cmd/tui/component/prompt/index.tsx

@@ -34,6 +34,7 @@ import { useToast } from "../../ui/toast"
 import { useKV } from "../../context/kv"
 import { useTextareaKeybindings } from "../textarea-keybindings"
 import { DialogSkill } from "../dialog-skill"
+import { Log } from "@/util/log"
 // altimate_change start - import prompt enhancement
 import { enhancePrompt, isAutoEnhanceEnabled } from "@/altimate/enhance-prompt"
 let enhancingInProgress = false

packages/opencode/src/cli/cmd/tui/context/sdk.tsx

@@ -6,42 +6,6 @@ import { batch, onCleanup, onMount } from "solid-js"
 import { Flag } from "@/flag/flag"
 // altimate_change end
 
-      // altimate_change start - smooth streaming: pre-merge delta events
-      // When enabled, merge consecutive delta events for the same part+field
-      // to reduce store updates from N-per-part to 1-per-part per flush cycle.
-      if (Flag.ALTIMATE_SMOOTH_STREAMING) {
-        const merged: Event[] = []
-        const deltaMap = new Map<string, number>()
-        for (const event of events) {
-          if (event.type === "message.part.delta") {
-            const props = event.properties as { messageID: string; partID: string; field: string; delta: string }
-            const key = `${props.messageID}:${props.partID}:${props.field}`
-            const existing = deltaMap.get(key)
-            if (existing !== undefined) {
-              const prev = merged[existing] as typeof event
-              merged[existing] = {
-                ...prev,
-                properties: {
-                  ...prev.properties,
-                  delta: (prev.properties as typeof props).delta + props.delta,
-                },
-              } as Event
-              continue
-            }
-            deltaMap.set(key, merged.length)
-          } else {
-            deltaMap.clear()
-          }
-          merged.push(event)
-        }
-        batch(() => {
-          for (const event of merged) {
-            emitter.emit(event.type, event)
-          }
-        })
-        return
-      }
-      // altimate_change end
 export type EventSource = {
   on: (handler: (event: Event) => void) => () => void
   setWorkspace?: (workspaceID?: string) => void

packages/opencode/src/cli/cmd/tui/context/sync.tsx

@@ -157,30 +157,6 @@ export const { use: useSync, provider: SyncProvider } = createSimpleContext({
       switch (event.type) {
         case "server.instance.disposed":
           bootstrap()
-          // altimate_change start - smooth streaming: direct path update avoids produce() proxy overhead
-          if (Flag.ALTIMATE_SMOOTH_STREAMING) {
-            const field = event.properties.field as keyof (typeof parts)[number]
-            const existing = parts[result.index][field] as string | undefined
-            setStore(
-              "part",
-              event.properties.messageID,
-              result.index,
-              field as any,
-              ((existing ?? "") + event.properties.delta) as any,
-            )
-          } else {
-            setStore(
-              "part",
-              event.properties.messageID,
-              produce((draft) => {
-                const part = draft[result.index]
-                const field = event.properties.field as keyof typeof part
-                const existing = part[field] as string | undefined
-                ;(part[field] as string) = (existing ?? "") + event.properties.delta
-              }),
-            )
-          }
-          // altimate_change end
           break
         case "permission.replied": {
           const requests = store.permission[event.properties.sessionID]

packages/opencode/src/cli/cmd/tui/routes/session/index.tsx

@@ -1037,7 +1037,7 @@ export function Session() {
   const cappedWidth = createMemo(() => {
     const cap = Flag.ALTIMATE_CONTENT_MAX_WIDTH
     if (!cap) return undefined
-    const available = ctx.width
+    const available = contentWidth()
     // +3 accounts for paddingLeft on this box
     const desired = cap + 3
     // On small screens, don't constrain — let it use full available width