feat(app): sign in to OpenCode Go and Console through the browser

[Hona]

Desktop onboarding for OpenCode Go / OpenCode Console. Picking either provider now goes straight to the Console sign-in in the browser; the API key path is a small link at the bottom.

flowchart LR
  A[Pick OpenCode Go / OpenCode] --> B[Opening your browser…]
  B --> C[Browser: Console → pick workspace → Authorize]
  B --> D[Desktop: waiting + code to verify]
  C --> E[Connected]
  D --> E
  E --> F[Models of the connection shown in picker]
  D -. small link .-> H[API key / service account]

Loading

Before → after

	Before	After
OpenCode Go	opencode-go integration only has a key method → API key form, no Console option	Uses the opencode Console device sign-in (consoleIntegration("opencode-go") → "opencode")
OpenCode	title flashes Connect opencode-go / Connect Anomaly / OpenCode → method list → empty text input + Continue (hidden server field rendered) → code view	Connect OpenCode → Opening your browser… → waiting view. Two states, no method list, no empty field
Browser	user clicks "this link"	platform.openExternal(url) as soon as the attempt starts (same as opencode auth login), plus an Open browser button
Device code	shown as the main instruction	shown to verify against the Console page ("Confirm this code matches the code shown in your app"); the field is present from the first frame (placeholder until the code arrives) so nothing moves
API key	equal option in the method list	small muted link: "Connect with an API key or service account instead"
Leaving the dialog	server attempt left open	integration.oauth.cancel on cleanup / method switch
After connecting	new models hidden unless newest-per-family	every model of providers linked to the integration is set to show. Console sign-in returns Go models inside the opencode provider, so Go models are included
Screen behind the dialog	blanks while the integration loads	stable
Dialog while the attempt starts	spinner-only "Opening your browser…" then a different layout	one layout; only the status line changes ("Opening your browser…" → "Waiting for authorization…")
Settings → Providers after Console sign-in	Default / OpenCode Go tagged Config with no Disconnect; Default / OpenCode tagged API key	both follow provider.integrationID (opencode) → tagged Account, Disconnect on both; Connection.CredentialInfo gains method: "key" | "oauth" (schema + core + regenerated client)
Connect picker	OpenCode with the Zen "Z" glyph	OpenCode Console with the OpenCode mark (integration.name in core, provider-icons/sprite.svg)
/connect	TUI only (Console setup steps say "Run /connect")	desktop composer command provider.connect, slash connect

Controller (packages/app/src/providers/connect/controller.ts)

// One "busy" state until something useful can be shown: loading, auto-select pending, or connect in flight
busy: () =>
  integration.loading ||
  (store.methodIndex === undefined && !store.auto && autoIndex() !== undefined) ||
  store.state === "pending"

// Hidden form fields answer themselves; only visible fields open the form
const visible = (selected.form ?? []).some((field) => field.type === "external" || !field.hidden)
const merged = { ...hiddenDefaults(selected), ...answer }

The integration is loaded through a guarded store rather than createResource. useDialog captures getOwner() at the call site (packages/ui/src/context/dialog.tsx:173), so the dialog lives under the opener's <Suspense> (shell.tsx:116); reading a pending resource there (latest → read() → SuspenseContext.increment()) blanked the whole route behind the dialog.

The dialog passes autoSelect for Console providers so the oauth method starts without a menu; other providers keep the method list. Client ID becomes opencode-desktop for the Console URL on desktop, so the Console page reads "Authorize OpenCode Desktop".

Screenshots: I could not capture the review-pane tab (not visible), so none attached yet. Flow verified against the live server in the web app: two dialog states, browser tab opened to console/login?next=/console/device?user_code=…, API key link → key → back returns to sign-in.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.