OpenCode 2 v2.0.25: Office file previews, fewer access prompts#

Published October 8, 2026 by Alex Sorokoletov

Part of the OpenCode 2 Version Tracker series. | OpenCode on GitHub | OpenCode 2 docs

OpenCode 2 v2.0.25 follows v2.0.24 with in-app previews for Word, Excel and PowerPoint files, a default that no longer asks for access to directories outside the project, and a browser UI the CLI now ships as brotli-compressed raw bytes. Alongside them are desktop, mobile, and provider changes.

No new environment variables or experimental flags appear over v2.0.24; the work this release is in the graphical surfaces, the server, and provider handling.

What shipped in the app#

Serving, pairing, and the web UI#

The CLI changes how it ships the browser UI. It embeds the web UI as raw bytes rather than base64 strings, compresses it at brotli's best quality, and serves it brotli-compressed (#53643, #53644, #53645). Pairing changed in two places: the QR code printed by opencode pair now encodes every pairing address rather than only the first (#53588), and one-time pairing links are handled across the GUI (#53257). On the server, fs.read responses stream with HTTP Range support (#53088).^[2]

Providers and core#

On the provider side, between_tools thinking is supported in Anthropic's Messages format (#53601), missing OpenAI and Google service tiers were added (#53753), and empty unfinished reasoning items are dropped on replay (#53603).^[3]

In core, OpenCode stops asking for access to directories outside the project by default (#53585), the length caps on tool names and namespaces are removed (#53586), API key metadata is no longer sent in the request body (#53546), and the portable shell scanner is enabled on local and dev channels (#53479).^[4]

The desktop browser bar was redesigned (#53488). A batch of ACP fixes report tool names and full-file diffs, tighten cwd, cancel, delete and terminal auth handling, and resolve overlapping provider IDs (#53360, #53359, #53534).^[5]

What this tells us#

OpenCode 2 is three front ends over one server: the terminal client, the desktop app, and a browser UI reached through opencode pair and opencode serve. The weight of this release sits on those graphical surfaces, Office previews, mobile session navigation, the desktop browser bar, the command palette, and a web UI the CLI now ships compressed. That is a different shape from the terminal-first Claude Code, Codex CLI, and Gemini CLI, which run as a single process rather than a client attaching to a background server.

Two changes touch the permission and credential surface. OpenCode no longer prompts for access to directories outside the project by default (#53585), and API key metadata is no longer placed in the request body (#53546). The first changes how often the agent stops to ask; the second changes what leaves on the wire.

The ACP fixes and the added OpenAI and Google service tiers are editor-integration and provider-catalog maintenance against the v2 plugins, the same kind of breadth work the 1.x line carries. The web UI delivery, pair QR codes, and fs.read range streaming are specific to the v2 server model, and this release moves all three forward in one range.

All trademarks and software referenced belong to their respective owners.

Sources#

1. App and interface: #53305, #51973, #53727, #53267, #50484, #51781, #52232, #53665, #53513
2. Serving and pairing: #53643, #53644, #53645, #53588, #53257, #53088
3. Providers: #53601, #53753, #53603
4. Core: #53585, #53586, #53546, #53479
5. Desktop and ACP: #53488, #53360, #53359, #53534