release: v1.18.2 — strip leaked bare ACP refs (#431) + Windows path protection fix (#402)

[ranxianglei]

Release v1.18.2 (patch) — ships everything merged to master since v1.18.1. Requested in #400 (floor 12).

What ships

Fix	PR	Issue
Strip leaked bare ACP refs from completed assistant text — new stripLeakedTrailingRefs() (lib/messages/utils.ts) applied by the text.complete handler (lib/hooks.ts); only line-leading future refs are truncated, so legitimate citations survive	#432	fixes #431
Windows protectedFilePatterns now actually match — normalizePath() searched for a two-character string instead of a single backslash, making normalization a silent no-op on Windows	#403	fixes #402

Also carried (no runtime code): CI workflow .github/workflows/publish-stable-from-acp.yml (separate opencode-stable package) and the #433 promote-stable devlog.

This branch

• package.json: 1.18.1 → 1.18.2
• CHANGELOG.md / CHANGELOG.zh-CN.md: new ### v1.18.2 entries
• devlog/2026-09-19_release-v1.18.2/ (REQ + WORKLOG)

No other changes.

Verification

• scripts/ci/check-pr.sh: branch name ✓ devlog ✓ changelog ✓ (all green)
• typecheck clean · build success (dist/index.js 484.35 KB) · tests 1290/1292 locally — the 2 failures are sandbox-only hardcoded /tmp paths vs this workdir's read-only /tmp mount (tests/soft-block.test.ts, E2E toFile test); pre-existing on master, CI runners unaffected

After merge (automated)

release.yml detects the release branch → tags v1.18.2 → build/test → publishes to npm latest → creates GitHub Release. npm stable stays at 1.18.1 until a future promote-stable request.

Merge is a human-only operation per AGENTS.md §5.1.1.2.

[github-actions]

📦 Built Plugin Artifact

Branch: 2026-09-19_release-v1.18.2 (20d9297)

Option A — Install from npm PR tag (recommended)

opencode plugin opencode-acp@pr-440 --global

Each push to this PR publishes a new version under the pr-440 npm tag.

Option B — Install from GitHub

opencode plugin "github:ranxianglei/opencode-acp#2026-09-19_release-v1.18.2" --global

Option C — Download artifact

1. Download the artifact from the Actions run
2. Extract the tarball and install:

tar xzf opencode-acp-pr440.tgz
cp -r package/dist ~/.cache/opencode/packages/opencode-acp@latest/node_modules/opencode-acp/dist

3. Restart opencode to pick up changes.

---

This comment is automatically updated on each push.

[ranxianglei]

🤖 Powered by ework · qwen3.8-27b

[bot] 🏷 Verification complete for release PR #440 (v1.18.2). Per AGENTS.md this is completed agent work — I verified rather than redid it.

Branch & diff — ✓ matches description

• Head 20d9297d on 2026-09-19_release-v1.18.2, a single commit on top of pre-perf: arm compression plans from nudges #437 master (026dbe73).
• Exactly 5 files, +97/−1: package.json 1.18.1 → 1.18.2, CHANGELOG.md + CHANGELOG.zh-CN.md (both carry the ### v1.18.2 header), devlog/2026-09-19_release-v1.18.2/REQ.md + WORKLOG.md. No runtime code — as claimed.

Both fixes confirmed present in the PR tree

• fix: strip leaked bare ACP refs from completed assistant text (#431) #432 / fixes [Bug]: Bare mNNNNN message refs leak into final assistant output and bypass sanitizer #431: stripLeakedTrailingRefs() present at lib/messages/utils.ts:239; merge 026dbe73 is an ancestor of the head ✓
• fix: normalize single Windows path separators in protectedFilePatterns #403 / fixes fix: normalize single Windows path separators in protected file patterns #402: normalizePath() in lib/protected-patterns.ts now replaces the single backslash (replaceAll("\\", "/")) with a comment documenting the old two-character-string bug; merge 06efd39c is an ancestor ✓
• Carried no-runtime-code items: .github/workflows/publish-stable-from-acp.yml present in tree ✓

CI on head 20d9297d: pr-validation ✓ · build-artifact ✓ · build ✓ · test (22) ✓ · test (24) ✓ · e2e: in progress — I'll follow up here when it finishes.

⚠️ One finding — the branch is behind master (GitHub reports mergeable_state: behind)

• perf: arm compression plans from nudges #437 (frozenranger: "arm compression plans from nudges" + "coordinate ACP with native compaction") merged to master at 08:52 today; this release branch was cut at 09:02 from the previous master tip.
• Consequence: merged as-is, v1.18.2 will unavoidably ship perf: arm compression plans from nudges #437's code (the tag lands on the post-merge master), but the v1.18.2 changelog entry lists only [Bug]: Bare mNNNNN message refs leak into final assistant output and bypass sanitizer #431/fix: normalize single Windows path separators in protected file patterns #402 — a docs gap, not a code defect.
• Recommended before merge: sync the branch to current master (git merge origin/master on 2026-09-19_release-v1.18.2, push) and add one line about perf: arm compression plans from nudges #437 to both changelogs so the release notes match what actually ships. If you'd rather ship perf: arm compression plans from nudges #437 under 1.18.2 without a changelog line, just confirm and I'll leave it untouched.

Merge stays human-only per §5.1.1.2 — otherwise the PR is verified and ready.

中文摘要：已核对 v1.18.2 发布分支，内容与描述一致（仅 5 个文件：版本号、中英 CHANGELOG、devlog；两个修复均确认在分支内）；CI 5/6 绿（e2e 仍在跑，完成后跟进）。发现分支落后 master 一个已合并的 #437——按现状合并的话 1.18.2 会带上 #437 的代码但 changelog 未提及，建议合并前先同步 master 并补一行说明。

[ranxianglei]

🤖 Powered by ework · qwen3.8-27b

[bot] 🏷 Follow-up: e2e check finished — success. All 6 CI checks on head 20d9297d are now green: pr-validation ✓ · build-artifact ✓ · build ✓ · test (22) ✓ · test (24) ✓ · e2e ✓.

The only open item remains the one flagged above: branch is behind master by #437, which v1.18.2 will ship unlisted in the changelog if merged as-is. Sync + one changelog line recommended before merge; otherwise ready for a human to merge per §5.1.1.2.

中文摘要：e2e 检查通过，PR #440 全部 6 项 CI 检查均为绿色；唯一待决事项仍是分支落后 master（#437），建议合并前同步并补 changelog。

[github-actions]

✅ Published opencode-acp@1.18.2 to npm latest tag.

opencode plugin opencode-acp@latest --global

npm | GitHub Release