fix(opencode): link sessions to PRs without a timed gh pr view probe - #14075

Changelog for users

• Kilo detects a session's pull-request link without repeated GitHub queries.
• Detection reads the branch upstream and remote locally, then a PR URL the session prints, then the stored override.
• A branch with no PR is checked at most once per head or upstream change, and identical links are never re-sent.
• A remote lookup is one REST call bounded to five seconds; a rate-limit or auth failure backs off and never blocks the heartbeat.
• A PR created after the session starts is picked up on a branch head change or when session output mentions a PR URL.
• An app-controlled session can set the link with the new set_pr_link remote command, which becomes the override and stops detection.
• Switching branches no longer advertises the previous branch's pull request when the next lookup fails.
• Session output only links a pull request that belongs to the worktree's own repository.

Changelog for maintainers

• detectPrLink runs no gh pr view; it reads @{upstream}, HEAD, and the remote URL locally, then falls back to one gh api repos/{owner}/{repo}/pulls?head={owner}:{branch}&state=all call with a 5-minute negative cache and a 15-minute failure backoff.
• recordPrLinkText records a PR URL from session output; the PartUpdated handler checks text and completed-tool output and syncs once per change.
• set_pr_link takes { prUrl } or { cleared: true }, validates the URL, writes the override, ACKs, then fires a best-effort heartbeat; invalid input or a write failure returns an error and writes nothing. The PrLink / session_pr_link contract is unchanged, so the mobile app needs no change.
• Review detectPrLink and lookup first: the coalesced in-flight lookup and the branch-scoped lastPositive keep a known link advertised across a failed same-branch head change, never across a branch change.
• Housekeeping: the colocated src/kilo-sessions/pr-link.test.ts moved under test/kilocode/sessions/ so the package runner executes it, and the orphaned patches/[email protected] was removed (bun.lock also reorders the trusted and patched dependency lists).
• packages/opencode/src/kilo-sessions/pr-link.ts:223 — accepted: lastPositive now stores the branch next to the link, and the fallback returns it only when the branch matches, so a failed lookup after a branch switch yields no link instead of the previous branch's; the earlier branch-switch proof is replaced by the branch-switch-with-failed-lookup scenario.
• packages/opencode/src/kilo-sessions/pr-link.ts:105 — accepted: all five per-worktree maps are written through a remember helper that caps each at 64 worktrees and evicts the least recently used; eviction only makes that worktree's next detection start fresh.
• packages/opencode/src/kilo-sessions/pr-link.ts:196 — accepted: recordPrLinkText ignores a URL whose owner/repo differs from the worktree's, and detectPrLink drops a recorded link that later turns out to be for another repository. Tests in test/kilocode/sessions/pr-link.test.ts cover the branch-switch fallback, cross-repo URL rejection, and LRU eviction.

E2E proof

Proved live: no-PR branch, unchanged head — one REST lookup and zero gh pr view calls while heartbeats keep arriving.

Proved live: PR appears mid-session on head change — the session_pr_link triple reaches the ingest queue.

Proved live: negative cache across heartbeats — exactly one .../pulls lookup on an unchanged head.

Proved live: rate-limit/auth backoff — backoff logged, later heartbeats still send, one lookup across the window.

Proved live: PR URL in session output — heartbeat advertises prLink and the ingest queue gets one triple; repeats re-send nothing.

Proved live: app sets the link — heartbeat advertises prLink and the ingest queue gets the triple.

Proved live: invalid app link — error response and the stored link stays unchanged.

Proved live: session-output link survives a later commit — same prLink, no second ingest item, no new lookup.

Proved live: app sets the link while the override write fails — error response and no new link advertised.

Proved live: Session on branch A whose URL was resolved, then switch to branch B while the GitHub lookup fails (offline/rate-limited): the heartbeat advertises no prLink rather than branch A's link.

Proved live: Session output (text or completed tool output) mentions an unrelated repo's PR URL; the worktree does not adopt it.

Proved live: Session output prints the worktree's own PR URL; the worktree adopts it.

Owner-manual checks: skipped, pending owner verification.