## Summary
This PR implements dual model support (main + turbo) for cost-optimized
operations and adds model sorting functionality.

### Key Changes

#### Dual Model Support
- Added `turbo_model` and `turbo_cost_threshold` config options
- New dual-pane model selector (Tab to switch panes)
- Visual indicators: ⚡ (turbo), 🧠 (reasoning), 🔧 (tools)
- Smart turbo model selection with fallback logic
- Fixed Anthropic auth showing incorrect turbo status

#### Model Sorting
- Added `release_date` and `last_updated` fields to model schema
- Press 'S' to cycle through sort modes: Name, Last Updated, Release
Date
- Stable multi-level sorting with consistent ordering
- Helps discover newest models and track updates

### Impact
Enables cost optimization for PRs anomalyco#269 (status verbs) and anomalyco#275 (window
titles) to use configured turbo models instead of hardcoded ones.

### Demo



https://github.com/user-attachments/assets/d076e840-d790-4e23-8cf7-a179282d1f0b

…ompaction

feat: intelligent compaction with model-initiated trigger, handoff prompts, and persistent memory

- Add VoyageEmbeddingProvider for Voyage AI embeddings
- Add MemoryStore with high-level store/search/list API
- Configure Nebius cloud API for Qwen3-Embedding-8B (#1 on MTEB)
- Fix LocalEmbeddingProvider to support both /v1/embeddings and /embeddings
- Fix QdrantVectorStorage to set collection on existing collections

Model: Qwen3-Embedding-8B (70.58 MTEB score, 99% zero-shot, 4096 dims)
Provider: Nebius API (https://api.tokenfactory.nebius.com/v1)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

- Add SessionExport namespace to export sessions as JSON/Markdown/HTML
- Add Retry utility with exponential backoff for transient failures
- Add ExportSessionTool that wraps SessionExport with retry logic
- Register ExportSessionTool in the tool registry

Closes #1

…ment

- Add normalizeSymbolName() to strip parameter signatures and generic type
  parameters from LSP symbol names (e.g. ModelListener<T> → ModelListener,
  save(Object, T) → save), making name_path searchable across all languages
- Add normalizeSymbols() to normalize a sibling group in-place and assign
  sequential overloadIdx only for duplicate names (0, anomalyco#1, anomalyco#2, …)
- Remove Java-specific fixName + assignOverloadIdx from server.ts; both are
  now handled universally in symbols.ts for all LSP language servers
- Update collectSymbolRows and filterSymbols to call normalizeSymbols per
  sibling group, ensuring DB and in-memory paths produce identical name_paths

…ce profiles

- Enable prompt caching for Bedrock models that support it (Claude, Nova)
- Add 'caching' option for custom ARNs/inference profiles without claude in name
- Disable caching for Llama, Mistral, Cohere models (not supported)
- Add comprehensive tests for all caching scenarios

Fixes #1: Prompt cache not supported for custom ARN models
Fixes anomalyco#2: 1M context window not configurable

Users can now configure custom ARNs like:
```json
{
  "provider": {
    "amazon-bedrock": {
      "models": {
        "arn:aws:bedrock:...:application-inference-profile/xxx": {
          "options": { "caching": true },
          "limit": { "context": 1000000, "output": 32000 }
        }
      }
    }
  }
}
```

- Finding #1: re-sync active sessions after disposal by saving fullSyncedSessions
  before clear and calling result.session.sync() after successful bootstrap
- Finding anomalyco#2: cap retries at 5 with exponential backoff (2s/4s/8s/16s/30s) and
  generation counter to cancel stale retries when newer disposal arrives
- Finding anomalyco#3: move Instance.provide() inside while loop so each event stream
  reconnect iteration gets fresh context
- Finding anomalyco#4: remove unconditional startEventStream(process.cwd()); add events RPC
  method; thread calls it only when not in external transport mode
- Finding anomalyco#5: replace manual new Promise+setTimeout with sleep() from node:timers/promises
- Finding anomalyco#6: reload() aborts current event stream and conditionally restarts it

- Finding #1: re-sync active sessions after disposal by saving fullSyncedSessions
  before clear and calling result.session.sync() after successful bootstrap
- Finding anomalyco#2: cap retries at 5 with exponential backoff (2s/4s/8s/16s/30s) and
  generation counter to cancel stale retries when newer disposal arrives
- Finding anomalyco#3: move Instance.provide() inside while loop so each event stream
  reconnect iteration gets fresh context
- Finding anomalyco#4: remove unconditional startEventStream(process.cwd()); add events RPC
  method; thread calls it only when not in external transport mode
- Finding anomalyco#5: replace manual new Promise+setTimeout with sleep() from node:timers/promises
- Finding anomalyco#6: reload() aborts current event stream and conditionally restarts it

- Finding #1: re-sync active sessions after disposal by saving fullSyncedSessions
  before clear and calling result.session.sync() after successful bootstrap
- Finding anomalyco#2: cap retries at 5 with exponential backoff (2s/4s/8s/16s/30s) and
  generation counter to cancel stale retries when newer disposal arrives
- Finding anomalyco#3: move Instance.provide() inside while loop so each event stream
  reconnect iteration gets fresh context
- Finding anomalyco#4: remove unconditional startEventStream(process.cwd()); add events RPC
  method; thread calls it only when not in external transport mode
- Finding anomalyco#5: replace manual new Promise+setTimeout with sleep() from node:timers/promises
- Finding anomalyco#6: reload() aborts current event stream and conditionally restarts it

…mmand-guard

Fill documentation gaps identified by security review:

- security.mdx: add Subprocess Isolation section (OPENCODE_SPAWN_SANDBOX,
  bwrap/unshare mechanism, what is and isn't sandboxed, how to enable);
  add Managed / Enterprise Config section (config precedence ladder,
  /etc/opencode/ as immutable security boundary, container usage,
  --dangerously-open bypass); add Read-Only Commands section (/review
  fully read-only, /learn AGENTS.md-only, blocklist details and
  limitations); add Instruction and Skill URLs note under Tool Execution
- FORK-CHANGES.md: expand Feature anomalyco#1 to cover subprocess sandbox and
  command-guard; add util/fetch.ts, bash.ts, process.ts, flag.ts to key
  files table
- SECURITY-ANALYSIS.md: add command-guard to Current Mitigations table
- tool/AGENTS.md: add Command Guard section documenting assertReadOnlyShell,
  assertLearnPath, assertLearnTask, and the blocklist limitation

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>