chore(ci): integrate opencode

[guyutongxue]

What Changed

How to Prove It Works

[opencode-agent]

opencode session  |  github run

[opencode-agent]

Review: chore(ci): integrate opencode

Files: .github/workflows/opencode.yml (+31), .github/workflows/opencode_review.yml (+24)

Issues

1. pull-requests: read will break comment posting — Both workflows set pull-requests: read, but the opencode action needs to post review comments / issue replies. Without pull-requests: write, posting will fail with a 403. Same issue for issues: write in opencode.yml.

2. @latest is a floating tag — Both workflows use anomalyco/opencode/github@latest. This will break unexpectedly when a new major version is released. Pin to a specific major version (e.g., @v1) or commit SHA for stability.

3. No path or branch filter on opencode_review.yml — It triggers on every PR event across all branches. Consider adding paths or branches filters to avoid consuming credits on non-code PRs (docs, config, etc.).

4. No conditional on opencode.yml fork PRs — issue_comment events from forked PRs run with read-only GITHUB_TOKEN and secrets are not available, so DEEPSEEK_API_KEY will be empty. Add a check like github.event.issue.pull_request.head.repo.fork == false to skip forked PRs, or accept this as expected behavior.

Nitpicks

• opencode.yml: Uses contains + startsWith for both /oc and /opencode. startsWith(github.event.comment.body, '/oc') will also match /octopus, etc. Consider a regex or stricter check.
• opencode_review.yml has a trailing empty line — minor style inconsistency.

Summary

The integration direction is correct, but permissions and version pinning need fixing before this is ready to merge.

opencode session  |  github run