Chore: bump fork pin to v1.18.10-amicode.21 (#789)

[aarontrowbridge]

Closes #789.

What

Repairs main's app-bundle-gate red (introduced by #765's hand-edited overlay): the fork pin moves to v1.18.10-amicode.21 — the tag that officially contains the refresh button #765 wanted (#744) — via the sanctioned channels:

• opencode.lock.json → .21 (opencode:pin, sha256-verified release assets)
• app-bundle manifest + overlay regenerated by the extractor at .21 (575 files, round-trip byte-identical)
• golden service fixtures re-recorded against the .21 binary (record_amicode_fixtures.mjs, 71 entries)

Gates (director-run, this worktree)

• drift_gate.mjs: PASS (pins resolve, fresh extraction matches manifest, overlay verified — 575 files)
• pnpm --filter amicode test: 2177 passed / 29 skipped / 0 failed
• test:smoke: PASS (/event → 200 text/event-stream)
• Note: a local smoke 401 on /event reproduces only when OPENCODE_SERVER_PASSWORD is inherited (Amicode terminal env); CI is unaffected.

UI delta shipped by .19 → .21

Refresh button (#744), file-watcher ungate (#743), agent-file filter fix (#742), fresh-client sessions-list fix (#288). Deliberately excludes .22 (yellow chat bubble / prose fragments / dot rail — in-progress styling).

Part of the 2026-09-03 handoff-bundle baseline repair; unblocks #787/#788.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: 384719ad-7a43-47cb-b32b-8e3c7c248579

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}