Release and extraction scope

{
  "schemaVersion": 1,
  "product": "OpenCode",
  "version": "1.18.34",
  "upstreamCommit": "aec0b9a6d8898f68f923aaf08b7306d931fd9d76",
  "upstream": "https://github.com/anomalyco/opencode",
  "evidence": "public-source",
  "observedTraffic": false,
  "recordCounts": {
    "legacyReviewed": {
      "prompts": 35,
      "tools": 43,
      "configuration": 12,
      "network-tracing": 28
    },
    "completeLibraries": {
      "instructions": 74,
      "context-templates": 15,
      "tools-parameters": 76
    }
  },
  "sourceFiles": 1429,
  "excludedFiles": 2284,
  "trackedFiles": 3713,
  "workspacePackages": [
    "@opencode-ai/codemode",
    "@opencode-ai/core",
    "@opencode-ai/effect-drizzle-sqlite",
    "@opencode-ai/effect-sqlite-node",
    "@opencode-ai/llm",
    "@opencode-ai/plugin",
    "@opencode-ai/protocol",
    "@opencode-ai/schema",
    "@opencode-ai/script",
    "@opencode-ai/sdk",
    "@opencode-ai/server",
    "@opencode-ai/tui",
    "@opencode-ai/ui",
    "opencode"
  ],
  "sourceIdentity": "ff2ef2527472d136b15ce1f3a6538d622968d2e90c73e1dfb25eda7554a4412a",
  "discovery": {
    "files": 1429,
    "scannedCodeFiles": 1376,
    "scannedAssetFiles": 52,
    "literals": 90835,
    "selected": 10824,
    "skipped": {
      "not-prose-or-prompt-role": 80081,
      "manifest-runtime-entry-not-literal-scanned": 1
    },
    "parseFailures": [
      {
        "file": "packages/tui/src/component/dialog-retry-action.tsx",
        "error": "unterminated string at 4236",
        "fallback": "complete contiguous source spans"
      }
    ],
    "eligible": 10714,
    "batches": 818,
    "payloadBytes": 74630845,
    "classified": 10714,
    "classifiedPositives": 176,
    "sameTextMerged": 11,
    "alsoInReviewedRecords": 107,
    "publishedDiscovered": 165,
    "classifiedNegatives": 10538,
    "providerPending": 0,
    "withheld": 110,
    "oversized": 0,
    "localReview": 110,
    "pending": 110
  },
  "extraction": "Deterministic, pristine release checkout; complete first-party runtime workspace closure and every explicit package-tree exclusion match pinned Git blobs. No session inputs and no provider classification are required for local preparation.",
  "limitations": [
    "Installed CLI version, build-injected catalog and runtime identity require separate verification.",
    "No private instructions, environment values, skill bodies, MCP server content or plugin output is expanded.",
    "AI SDK provider dependency implementations are outside this source checkout; native protocol records are labeled separately from default SDK execution.",
    "Dynamic catalog endpoints/capabilities can change after the release; configured baseURL can route through a gateway.",
    "Core runner and standalone native adapters are mapped as separate source paths, without claiming that a captured CLI run selected them.",
    "Source records do not prove exact request bodies, received visible reasoning, serving-provider identity, geography, retention or downstream hops."
  ]
}