This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryFixed silent DM drops and enabled provisioning of opencode telegram agents.
Full changelog
opencode + telegram: customer-ready (DIVE-45)
Two fixes that together unblock shipping opencode telegram agents to customers:
-
access.json always seeded.
install_channel_for_opencode_agentpreviously only wroteaccess.jsonwhen--telegram-allowed-userswas passed. The normal "provision bot, pair via first DM" flow left no file, and the bridge'sloadAccess()defaults to block-everything (allowFrom:[], dmPolicy:allowlist) → the bot silently dropped every DM. Now it always seeds:dmPolicy:pairingwith no allowed-users (first DM yields a pairing code),allowlistwhen users are given. An existing policy is never overridden. -
install.sh stages telegram-opencode. The installer staged telegram-codex/-grok/-agy but not -opencode, so a customer box couldn't provision an opencode telegram agent at all. Added the staging block (mirrors agy);
update.sh --upgradeheals existing boxes at the next nightly refresh.
Verified on a fresh Hetzner box: the smoke's new opencode-telegram regression row passes (access.json pre-seeded with dmPolicy:pairing; plugin staged).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About 5dive
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]