Make managed OpenCode startup deterministic

Dockerfile

@@ -4,7 +4,7 @@ WORKDIR /app
 
 COPY package.json package-lock.json ./
 RUN npm ci --no-audit --no-fund
-RUN npm install -g opencode-ai@1.18.15 --no-audit --no-fund
+RUN npm install -g opencode-ai@1.18.15 @ai-sdk/openai-compatible@3.0.26 --no-audit --no-fund
 
 COPY . .
 RUN npm run build

server/default-agent.js

@@ -259,6 +259,9 @@ export function prepareOpenCode(username) {
   const configPath = path.join(configDir, 'opencode.json')
   const config = {
     $schema: 'https://opencode.ai/config.json',
+    // A managed, non-interactive worker must never stop at startup to check
+    // for or install a newer OpenCode release.
+    autoupdate: false,
     model: OPENCODE_MODEL,
     provider: {
       'cowrite-hf': {
@@ -298,6 +301,7 @@ async function runOpenCode(username, accessToken, prompt) {
     XDG_CACHE_HOME: dirs.cacheDir,
     XDG_STATE_HOME: dirs.stateDir,
     OPENCODE_CONFIG: dirs.configPath,
+    OPENCODE_DISABLE_AUTOUPDATE: 'true',
     OPENCODE_ENABLE_EXA: '1',
     HF_OAUTH_TOKEN: accessToken,
   }

test/default-agent.js

@@ -28,6 +28,7 @@ assert.deepEqual(await pollMentions('Alice', 0, managed, { includeManaged: true
 
 const { configPath } = prepareOpenCode('Alice')
 const config = JSON.parse(fs.readFileSync(configPath, 'utf8'))
+assert.equal(config.autoupdate, false)
 assert.equal(config.permission['*'], 'deny')
 assert.equal(config.permission.websearch, 'allow')
 assert.equal(config.permission.webfetch, 'deny')