test: comprehensive Codespace e2e tests, fix detection for GH Actions + GH_TOKEN

- Add 32 adversarial e2e tests covering:
  - Full Codespace env simulation (all 11 official env vars)
  - GitHub Actions environment detection
  - `GH_TOKEN` (gh CLI alias) as machine-scoped token
  - Token prefix variations (`ghu_`, `ghs_`, `ghp_`, `github_pat_`)
  - `CODESPACES=false` and `CODESPACES=""` edge cases
  - Config-based override still works in Codespaces
  - Other providers (anthropic, openai) unaffected
  - Retry delay monotonicity and bounds
  - Malformed JSON error handling in retryable()
- Extend detection to GitHub Actions (`GITHUB_ACTIONS=true`)
- Treat `GH_TOKEN` as machine-scoped alongside `GITHUB_TOKEN`
- Add warn log when max retries exhausted (self-heal guidance)
- Revert discover.ts comment to upstream original (only user-facing
  message in index.ts was the real fix)

Author: anandgupta42

packages/opencode/src/mcp/discover.ts

@@ -165,7 +165,7 @@ async function discoverClaudeCode(
  *
  * Security model: Project-scoped servers (.vscode/mcp.json, .mcp.json, etc.) are
  * discovered with enabled=false so they don't auto-connect. Users must explicitly
- * approve them by asking the assistant to add them. Home-directory configs (~/.claude.json,
+ * approve them via /discover-and-add-mcps. Home-directory configs (~/.claude.json,
  * ~/.gemini/settings.json) are auto-enabled since they're user-owned.
  *
  * Searches both the project directory and the home directory.

packages/opencode/src/provider/provider.ts

@@ -1071,23 +1071,37 @@ export namespace Provider {
 
     // load env
     const env = Env.all()
-    // altimate_change start — skip github-models/github-copilot auto-enable from GITHUB_TOKEN in Codespaces
-    // In GitHub Codespaces, GITHUB_TOKEN is a machine-scoped token for repo operations,
-    // not for model inference. Auto-enabling these providers leads to immediate rate limiting
-    // with "Too Many Requests" errors and long retry loops.
-    const isCodespace = Boolean(env["CODESPACES"] || env["GITHUB_CODESPACE_TOKEN"])
-    const codespaceSkipProviders = new Set(["github-models", "github-copilot"])
+    // altimate_change start — skip github-models/github-copilot auto-enable from machine-scoped GITHUB_TOKEN
+    // In GitHub Codespaces and GitHub Actions, GITHUB_TOKEN is a machine-scoped
+    // token for repo operations, not for model inference. Auto-enabling these
+    // providers leads to immediate rate limiting ("Too Many Requests") and long
+    // retry loops. We detect these environments and skip auto-enable unless the
+    // user has explicitly set a different token.
+    //
+    // Environment detection (official GitHub docs):
+    //   Codespaces: CODESPACES=true, CODESPACE_NAME set
+    //   Actions:    GITHUB_ACTIONS=true, CI=true
+    //
+    // Machine-scoped tokens to ignore: GITHUB_TOKEN and GH_TOKEN (gh CLI alias)
+    const isMachineEnv = Boolean(env["CODESPACES"] || env["GITHUB_ACTIONS"])
+    const machineTokenNames = new Set(["GITHUB_TOKEN", "GH_TOKEN"])
+    const skipGithubProviders = new Set(["github-models", "github-copilot"])
     // altimate_change end
     for (const [id, provider] of Object.entries(database)) {
       const providerID = ProviderID.make(id)
       if (disabled.has(providerID)) continue
       const apiKey = provider.env.map((item) => env[item]).find(Boolean)
       if (!apiKey) continue
-      // altimate_change start — skip providers that use GITHUB_TOKEN in Codespaces
-      if (isCodespace && codespaceSkipProviders.has(id) && provider.env.includes("GITHUB_TOKEN")) {
-        const hasExplicitKey = provider.env.some((item) => item !== "GITHUB_TOKEN" && env[item])
-        if (!hasExplicitKey) {
-          log.info("skipping provider in Codespace (GITHUB_TOKEN is not for model inference)", { providerID })
+      // altimate_change start — skip GitHub providers when only machine-scoped tokens exist
+      if (isMachineEnv && skipGithubProviders.has(id)) {
+        // Check if ALL env vars for this provider are machine-scoped tokens
+        const matchedEnvVars = provider.env.filter((item) => env[item])
+        const allMachineScoped = matchedEnvVars.every((item) => machineTokenNames.has(item))
+        if (allMachineScoped) {
+          log.info("skipping provider in machine environment (token is not for model inference)", {
+            providerID,
+            environment: env["CODESPACES"] ? "codespace" : "github-actions",
+          })
           continue
         }
       }

packages/opencode/src/session/processor.ts

@@ -394,9 +394,9 @@ export namespace SessionProcessor {
               })
             } else {
               const retry = SessionRetry.retryable(error)
-              // altimate_change start — cap retries to avoid infinite retry loops (e.g. GitHub Models rate limits in Codespaces)
+              // altimate_change start — cap retries to avoid infinite loops, log on exhaustion
               if (retry !== undefined && attempt < SessionRetry.RETRY_MAX_ATTEMPTS) {
-                // altimate_change end
+              // altimate_change end
                 attempt++
                 const delay = SessionRetry.delay(attempt, error.name === "APIError" ? error : undefined)
                 SessionStatus.set(input.sessionID, {
@@ -408,6 +408,16 @@ export namespace SessionProcessor {
                 await SessionRetry.sleep(delay, input.abort).catch(() => {})
                 continue
               }
+              // altimate_change start — log when retries exhausted for debugging
+              if (retry !== undefined) {
+                log.warn("max retry attempts reached, giving up", {
+                  attempt,
+                  message: retry,
+                  providerID: input.model.providerID,
+                  modelID: input.model.id,
+                })
+              }
+              // altimate_change end
               input.assistantMessage.error = error
               Bus.publish(Session.Event.Error, {
                 sessionID: input.assistantMessage.sessionID,