Discover OpenCode models for canonical runtime profiles

[dcellison]

Goal

Discover OpenCode's installed/provider-visible models for a canonical runtime profile while retaining safe explicit provider/model entry.

Requirements

• Discovery runs in the profile's effective OS-user, provider, and credential context.
• Parse a documented machine-readable interface where available; do not scrape interactive UI.
• Cache per runtime profile/provider/auth context.
• Preserve OpenCode's nested model identifiers, including OpenRouter-style paths.
• A discovery failure must leave structurally valid explicit entry available.
• Workshop and Telegram consume the same inventory and status.

Acceptance criteria

• Results are principal-scoped and secret-free.
• Provider changes invalidate the applicable cache.
• A selected but temporarily undiscovered model remains visible and is not silently replaced.
• Tests cover nested identifiers, empty/malformed results, timeouts, and stale-cache fallback.

[dcellison]

Triage by Kai

Triage summary: This is a clear enhancement request to populate OpenCode model selection from the local opencode models [provider] catalog instead of a static Kai list, while preserving direct provider/model entry. The issue is well-scoped with acceptance criteria covering discovery, refresh, caching, fallback behavior, tests, and documentation.

Status: ready
Priority: medium
Labels applied: (none added)
Related issues: #705, #725
Next action: Implement the OpenCode CLI-backed discovery/cache path for /models, then add mocked CLI tests for success, refresh, error, timeout, malformed output, and free-text fallback cases.

[dcellison]

Installed qualification after #1181 found that OpenCode discovery repeatedly reports timed_out · stale for the opencode:deepseek lane.

The durable refresh receipt shows the /provider probe exhausting its 20-second request deadline before cleanup. The same effective OS user can run the documented metadata-only command opencode models deepseek quickly; it returns the three expected model identifiers without invoking a model.

This isolates the defect to Kai's short-lived opencode serve discovery strategy rather than OpenCode authentication or catalogue availability. Reopening so the adapter can use the documented non-interactive models command, preserve the existing trust boundary and sanitized failure contract, and be requalified before epic #705 closes.