开源贡献日报 · 2026-09-19

记录可验证的修复进展，也记录仍有空间参与的架构与规范讨论。

数据截止：2026-09-19T18:58:00+08:00（Asia/Singapore）。以下是当日截至该时间的记录。

公开资料覆盖：不完整；Today includes three new PRs (#12499, #49921, Draft #819), two Cherry review updates, 24 focus evaluations, 36 incremental evaluations, six policy reviews, and partial three-repository design-discussion coverage.。

1 今天跟进与完成的结果

• Responses provider registration (anomalyco/opencode#49670，pr) — Ready PR #49808 已提交，等待 CI 与维护者 review。；将现有 OpenAI-compatible Responses adapter 注册进 bundled provider map，并通过 22 项定向测试、两包 typecheck 与 root lint。
• Contain Windows process trees at creation (earendil-works/pi#9129，issue) — Validated fixed reference updated; awaiting maintainer LGTM；The Windows launcher path now records the real host platform at module load, keeping Unix fake-Windows transport tests from executing a PE while preserving creation-time Job Object containment.
• Plugin package subpath exports (anomalyco/opencode#49852，pr) — Ready PR #49863 submitted; CI queued；Preserved full npm package subpath specifiers while installing the registry package root; 27 focused tests and three package typechecks passed.
• Knowledge API review follow-up (CherryHQ/cherry-studio#20743，pr) — Review fixes pushed; CI/review pending.；Returned 201 for create and retained the route guard needed to distinguish cross-base IDs.
• Reasoning capability review follow-up (CherryHQ/cherry-studio#20744，pr) — Review fix pushed; CI/review pending.；Blocked assistant-less request serialization when reasoning capability is disabled.
• CherryHQ/cherry-studio (CherryHQ/cherry-studio#20747，pr) — Closed three API safety gaps from review and repaired the response-contract CI failure.；Closed three API safety gaps from review and repaired the response-contract CI failure.
• CherryHQ/cherry-studio (CherryHQ/cherry-studio#20748，pr) — Fixed a reasoning capability regression after proving the target base was green.；Fixed a reasoning capability regression after proving the target base was green.
• can1357/oh-my-pi (can1357/oh-my-pi#12394，pr) — Refreshed the handoff-artifact fix onto current main and cleared its conflict state.；Refreshed the handoff-artifact fix onto current main and cleared its conflict state.
• can1357/oh-my-pi (can1357/oh-my-pi#12395，pr) — Updated the Bailian workspace fix onto current main and cleared its conflict state.；Updated the Bailian workspace fix onto current main and cleared its conflict state.
• Tool-scoped generated-file guard (can1357/oh-my-pi#12422，pr) — Ready PR submitted; CI/review pending.；Removed the streaming whole-turn abort and retained normal tool error behavior.
• Prototype-safe agent colors (anomalyco/opencode#49913，pr) — Ready PR submitted; CI/review pending.；Rejected inherited Object prototype keys in agent color lookup.
• Directory list metadata (LodyAI/Lody#714，pr) — Type propagation fix pushed; Draft retained.；Propagated sort/include through the list-dir request union; full root checks remain incomplete.
• Apple toolchain trust timeout tests (apache/maka#5260，pr) — Review fix pushed; CI/review pending.；Added a command seam that proves xcode-select and codesign timeouts fail closed.
• Session tab close hitbox (anomalyco/opencode#49917，pr) — Ready PR submitted; CI/review pending.；Expanded the close target to the full reserved three-cell affordance and added adjacent-cell click coverage.

• 今日合并：已核实至少 0。
• 今日关闭（未合并）：已核实至少 0。

今天合并的旧 PR

旧 PR 指今天之前创建、今天合并的 PR；已包含在今日合并总数中。

• 覆盖未完成；暂无已核实今天合并的旧 PR。

2 今天吸取的经验

• 包源码存在不代表 bundled CLI 能按公开 specifier 加载；lazy registry 也必须显式注册入口。
  • 证据：GitHub
• A UI capability toggle must control both what is shown and what is serialized; otherwise disabled reasoning can still leak an effort control into requests.
  • 证据：GitHub
• Reusing the existing KnowledgeService made a write API slice testable without claiming unresolved virtual-folder or external-ID semantics.
  • 证据：GitHub
• Management APIs need discovery parity, bounded pagination, metadata-only projections, and aggregate byte limits—not only per-item validation.
  • 证据：GitHub
• Shared capability metadata can break both main and renderer test shards; normalize the descriptor contract at the registry boundary.
  • 证据：GitHub
• A timeout is only a dependable security bound when tests can observe the exact subprocess deadline and the fail-closed outcome.
  • 证据：GitHub
• A visible one-cell glyph may occupy a larger reserved control region; pointer handlers should match the full affordance, not only the text node.
  • 证据：GitHub

3 有意思的模块与行业动态

• Custom provider model retirement semantics（makecindy/cindy）
  • 讨论问题：additions-only refresh versus source-protected retirement/cleanup; unresolved: how to preserve failures while marking stale models
  • 行业动态：由本案例观察：工程系统需要把这组行为边界明确为可验证的契约。
  • 总结点：source/runtime/routeKey plus lastSeen/retired acceptance matrix
• Advisor steering severity threshold（can1357/oh-my-pi）
  • 讨论问题：immediate steer versus deferred/preserved delivery; unresolved: lifecycle behavior across threshold changes
  • 行业动态：由本案例观察：工程系统需要把这组行为边界明确为可验证的契约。
  • 总结点：complete lifecycle state-machine matrix
• Tool authority boundaries（langchain-ai/langgraph）
  • 讨论问题：admission, selection and execution authority separation; unresolved: minimal safe authorization contract
  • 行业动态：由本案例观察：工程系统需要把这组行为边界明确为可验证的契约。
  • 总结点：minimal allowlist plus wraptoolcall contract

4 今天在哪些项目做了贡献

• anomalyco/opencode：Submitted PR #49943 for the session-tab close hitbox and published a V2-shaped plan-file proposal.（来源 1、来源 2）
• earendil-works/pi：Updated the Windows process-tree containment reference and focused validation; PR creation remains behind the repository LGTM gate.（来源 1）
• anomalyco/opencode：Submitted PR #49863 to support plugin package subpath exports without misclassifying them as Git dependencies.（来源 1）
• CherryHQ/cherry-studio：Addressed review findings on PRs #20747 and #20748 with focused regression coverage.（来源 1、来源 2）
• can1357/oh-my-pi：Submitted PR #12499 to keep generated-file guard failures tool-scoped.（来源 1）
• anomalyco/opencode：Submitted PR #49921 to make agent color lookup prototype-safe.（来源 1）
• LodyAI/Lody：Pushed request type propagation for Draft PR #819; full root validation remains pending.（来源 1）
• apache/maka：Added timeout testability and fail-closed regressions to PR #5266.（来源 1）