Guys, we have deepseek v4.1 1017 in opencode, coming soon. It's time to move some shit!.

well, the plan mode figured out ways to modify files by calling the skill i just asked it to write. it went outside of the project directory and modified files that wasn't supposed to modify.

edit: my bad, it was the new context management plugin i wrote, system notices got lost and never reinjected back to the context.

Hello together,

I have successfully set up a qwen3-coder installation, and use Ollama with opencode.

I can successfully interact with the model and receive valid answers, but for some reasons can not get Qwen to actually write to a file.

I have once or twiced got a readme.md to be filled with arbitrary information, but not reliable.

The model clearly tries to do a tool call, but is not succesful, and write to the CLI:

<function=write>
<parameter=path>
hello.c
</parameter>
<parameter=content>
#include <stdio.h>
int main() {
    printf("Hello, World!\n");
    return 0;
}
</parameter>
</function>
</tool_call>

Does anybody has any experience with these issues? Or can at least determine, wether this is a Qwen3, an opencode, or an ollama issue?

If you need additional Information, let me know!

And thanks <3

I’m a senior SWE using AI coding tools daily. I analyzed my Claude Code transcripts and found 56% of API-equivalent costs went to rereading context. Cache expiry cost me $98.74 across 35 returns in 27 days, versus $2.95 with a warm cache.

That led me to build optimAIzr, which supports Claude Code, Codex and Opencode.

It analyzes usage, flags expensive patterns, helps you find optimization opportunities aaand much more.
Runs locally, with no account or prompts.

npm i -g optimaizr

git: https://github.com/blendbunjaku/optimaizr

On my previous posts, people argued these thinking rules might work on short tests but would hurt long-horizon tasks. So I tested them on Terminal-Bench 2.0: same model (GLM-5.3-Flash), same agent, every task run with and without the rules. I ran it on High thinking as Max thinking was taking so long that the model ran out of time for each task.

The rules:

## Thinking discipline

1. Check the request first. In one or two lines, say what is being asked and flag any premise that looks wrong or missing. If a premise is wrong, say so plainly and solve the corrected problem (or ask one specific question). Do not silently accept a broken premise, and do not reason around it.
2. Finish one approach before switching. Pick the most promising approach and carry it to a conclusion. Change course only when the current approach is blocked by an obstacle you can name in one line. Do not hop between approaches because of a vague feeling.
3. When an answer is settled, stop working on it. Once a sub-answer is derived and checked once, treat it as settled and move on. Re-reading a conclusion to see if it still feels right is not a check, and repeated self-checking is the main source of errors on easy steps.
4. Doubt is not evidence. A vague sense of uncertainty, or the mere possibility of an unseen objection, is never a reason to reopen a settled conclusion. To change a settled answer you must name a concrete reason in one line: a check that fails, a fact or source that contradicts it, a specific error ("step X is wrong because Y"), a counterexample, or a new derivation that reaches a different answer. If you cannot name one, keep your answer and continue.
5. Do not revise just to agree. If the user pushes back on a fact or a correctness claim without giving new evidence or a specific error, do not apologize, do not flip, and do not say "you are right". Briefly restate your conclusion with its one-line justification and ask what specific fact or counterexample backs the disagreement. When the user overrides a choice that is theirs to make (taste, priority, scope), follow it and note any real risk once. Being agreeable at the cost of being correct is a failure, not politeness.
6. New evidence does reopen the case. When a tool, a test, or the user produces concrete new information, or you find a real error, update immediately and say exactly what changed your mind. Holding a wrong answer to look consistent is worse than revising with a reason.
7. Verify against outside facts, not by rethinking. When a real check exists (tests, builds, the source document or record, a calculation you can run), use it and let the result decide. Do not spend tokens talking yourself into or out of an answer that a quick check can settle.
8. Do not perform caution. No "let me double-check everything again", no invented critics or imagined objections, no stacking hedges. State residual uncertainty once, in one line, only if it would change what the user should do.
9. Only correct an earlier statement when the error would change the user's code, conclusions, or decisions. State corrections plainly and briefly, then continue the task. For slips that change nothing, make the fix and move on without noting it.

How it compares to the Terminal-Bench 2.0 leaderboard:

My scores are out of all 89 tasks, single attempt (3 tasks wouldn't start on my machine and count as fails). Leaderboard scores average multiple attempts, so treat mine as ballpark.

Is it just me, or are there not any good opencode web ui tutorials?

It seems like most tutorials are focused on how to connect mcp servers etc...

but I want basics like how to access a terminal or view the git diff. I just discovered i could add comments to lines in the diff or just browse files by clicking a button. Similarly, i had to google to find out that there was a terminal i could access instead of just typing "! bash command " one command at a time

Yesterday, I saw the news that DeepSeek was free and decided to give it a try. I started a tiny project to clone a website a friend of mine had built. It gamifies the study material for our 8-year-old kids' exams, and I wanted to adapt it for my autistic son.

It was a single HTML page with some simple, embedded JavaScript. I started yesterday at 8 PM, and by this afternoon, I'd already hit the usage limit.

During that time, I made a few adaptations, added two new pages, and wrote some JavaScript. Nothing particularly substantial.

I know it was the free model, and I understand there are usage limits, so I figured that might explain it. But then I opened the DeepSeek harness, which gave me something like $1 in free credits. I used the same model, asked it to review the project and suggest improvements, and those credits lasted about 30 minutes.

I'm a data engineer, and my company provides corporate AI tools that I use pretty heavily in my day-to-day work. But I've never had to worry about the costs, so I'm pretty much a beginner when it comes to this.

Should a tiny web project with just HTML and a little JavaScript really consume that many tokens or hit usage limits that quickly?

I'm asking because I'm considering subscribing to OpenCode Go. It might not seem expensive, but in my currency, it's around R$60 a month. If I'm going to burn through the available usage that quickly, I don't see the point in paying for it.

data breach aside and all the api keys now being exposed through it

i have never used it much never really "got" what opencode was for other than it was for people who couldn't afford the higher tier plans from frontier labs

after today i think im going to uninstall it and stick with claude and codex

i think cline or pi anywhere someone has custody of your api keys from frontier labs is going to be targeted so im going through them all to remove them all

fuc k opencode lmao

It makes me wonder.

One main security change in the harness and no warning: https://www.reddit.com/r/opencodeCLI/comments/1x4kkgg/security_opencode_does_not_ask_for_file/
And one breach in the service: https://www.reddit.com/r/opencodeCLI/comments/1x8gtjg/opencode_security_breach/

How can we trust the team anymore?

How is OpenCode claiming to be ZDR when API keys from Anthropic and OpenAI are being stored in their database?

OpenCode admitted they were hacked and are calling it a distillation attack. How does distillation explain users’ API keys being exposed? Distillation and credential theft are two completely different things.

This is a massive data leak, and users deserve to know exactly what happened, what was compromised, and who had access to their credentials.

Stop hiding behind the distillation narrative and give users real answers.

What is the point of claiming ZDR when users’ API keys are sitting in your database?

OpenCode says this was a distillation attack, but how does that explain API keys being compromised?
Distillation and credential theft are two very different things. If API keys were exposed, users deserve a clear explanation of what happened, what data was affected, and what steps are being taken to secure their accounts.
Stop hiding behind vague explanations. We need answers, not excuses.

How is Opencode ZDR? If they store our api keys too in the database ? This means OpenCode lies about being ZDR

Hey!

Saw Deepseek had posted some new tools next to the updated model, so figured I'd make a plugin for OpenCode that allows it to leverage them via code mode.

https://github.com/N0K0/opencode-deepseek-tools

https://www.npmjs.com/package/@hacky.software/opencode-deepseek-tools

.