{"slug": "opencode-2-0-adds-background-subagents-and-an-sdk-and-1-0-plugins-won-t-work", "title": "OpenCode 2.0 adds background subagents and an SDK, and 1.0 plugins won't work", "summary": "Anomaly released OpenCode 2.0, a major overhaul of its open-source coding agent that now runs background subagents and shell commands and ships an SDK, but breaks compatibility: \"1.0 plugins will not work in 2.0\" and the server API \"is completely different.\" The release, which Anomaly says draws on \"millions of daily users' experience,\" also defaults every connected MCP server to a \"codemode\" setting the company says allows adding \"a thousand of them with minimal context bloat.\" The same roundup reports Noma Security's disclosure of a since-patched Claude Code Desktop flaw scored CVSS 8.7 (High) that let a poisoned HTML file in a public repo steal API keys, and GitHub Copilot's addition of HydraFusion Max in research preview.", "body_md": "# OpenCode 2.0 adds background subagents and an SDK, and 1.0 plugins won't work\n\nOpenCode's 2.0 overhaul runs subagents and shell commands in the background on your machine, adds an SDK, and won't run 1.0 plugins. Three more stories inside.\n\nOpenCode, the open-source coding agent with more than 213,000 GitHub stars, is now at 2.0, which its maker Anomaly calls \"a major overhaul.\" It leads because a tool that says it draws on millions of daily users changed shape under them this week. Also today: a builder of Meta's Mononoke says Anthropic's Scion, yesterday's lead, copied Mononoke's design without credit; Noma Labs published a since-patched Claude Code Desktop flaw that let a poisoned file in a public repo steal API keys; and GitHub Copilot adds HydraFusion Max, a deeper-reasoning option, in research preview.\n\n**In this issue**\n\n•\n\n[OpenCode 2.0 adds background subagents and an SDK, and 1.0 plugins won't work](https://www.thenewway.ai/opencode-2-0-adds-background-subagents/#opencode-20-adds-background-subagents-and-an-sdk-and-10-plugins-wont-work)\n\n•\n\n[A builder of Meta's Mononoke says Anthropic's git replacement, Scion, copied Mononoke's design uncredited](https://www.thenewway.ai/opencode-2-0-adds-background-subagents/#a-builder-of-metas-mononoke-says-anthropics-git-replacement-scion-copied-mononokes-design-uncredited)\n\n•\n\n[A newly disclosed Claude Code Desktop flaw let pages steal API keys](https://www.thenewway.ai/opencode-2-0-adds-background-subagents/#a-newly-disclosed-claude-code-desktop-flaw-let-pages-steal-api-keys)\n\n•\n\n[GitHub Copilot adds HydraFusion Max, a deeper-reasoning multi-model option, in preview](https://www.thenewway.ai/opencode-2-0-adds-background-subagents/#github-copilot-adds-hydrafusion-max-a-deeper-reasoning-multi-model-option-in-preview)\n\n## What changed this week\n\n### OpenCode 2.0 adds background subagents and an SDK, and 1.0 plugins won't work\n\nOpenCode, the open-source coding agent with more than 213,000 GitHub stars, is at 2.0, which Anomaly, the company behind it, calls \"a major overhaul.\" The server behind OpenCode's client/server design now runs as \"a single background process on your machine,\" shared by every session. On top of it: background subagents and background shell commands that keep working without blocking the session you're typing in, an SDK package so OpenCode can be embedded as a library, and a default where every connected MCP server runs in what the note calls \"[codemode](https://anoma.ly/notes/opencode-2-0/?ref=thenewway.ai),\" which it says lets you \"add a thousand of them with minimal context bloat.\" Upgrading is one command from the latest 1.x, with breaking changes: \"1.0 plugins will not work in 2.0\" and the server API \"is completely different.\" The note names no person and gives no benchmark numbers; it says 2.0 draws on \"millions of daily users' experience.\"\n\n### A builder of Meta's Mononoke says Anthropic's git replacement, Scion, copied Mononoke's design uncredited\n\nRain, who writes as \"sunshowers\" and helped build Meta's Mononoke source-control backend, argues Anthropic's Scion (its in-house version-control system, built after outgrowing git, yesterday's lead) goes beyond sharing design instincts: \"the level of imitation goes well beyond having similar insights,\" and not crediting Mononoke anywhere \"[borders on plagiarism](https://sunshowers.io/posts/anthropic-mononoke/?ref=thenewway.ai),\" especially since Anthropic's post credits a different Meta tool, Sapling, for \"hard-won lessons.\" Rain says copying itself isn't the problem: \"I do not have a problem with Anthropic copying Mononoke's design.\" The complaint is the framing: \"as Anthropic claiming that Claude designed all this.\"\n\n### A newly disclosed Claude Code Desktop flaw let pages steal API keys\n\nNoma Security's newly public writeup details a Claude Code Desktop flaw, scored CVSS 8.7 (High), that Anthropic has fixed. A poisoned HTML file in a public repo bypassed the preview pane's sandbox: large files loaded as file:// URLs skipped browser security, running unrestricted JavaScript that [exfiltrated API keys](https://noma.security/noma-labs/sneakpeek-how-the-preview-pane-in-claude-code-desktop-can-exfiltrate-your-data?ref=thenewway.ai), SSH keys, cloud credentials, and Claude's own OAuth tokens. Anthropic's first patch missed a bypass; the fix shipped in Claude Desktop 1.30096.1 in August. A GitHub Advisory and CVE are pending.\n\n### GitHub Copilot adds HydraFusion Max, a deeper-reasoning multi-model option, in preview\n\nGitHub added HydraFusion Max, a more capable tier of its existing HydraFusion, which orchestrates multiple models into one response so you don't pick one per task. Max \"is tuned for frontier capability on more demanding tasks,\" applying \"higher reasoning efforts where depth and thoroughness matter most.\" Both stay in [research preview](https://github.blog/changelog/2026-10-14-hydrafusion-updates-and-new-max-option?ref=thenewway.ai), not general availability, in VS Code, the Copilot app, and Copilot CLI, on Copilot Pro, Pro+, Business, and Enterprise plans. Unlike yesterday's Gemini 4 Argon rollout, neither reaches the Copilot coding agent, JetBrains, Xcode, or Eclipse.\n\n## Also worth your time\n\n- [Anthropic shipped OpenTelemetry tracing on two fronts the same day](https://platform.claude.com/docs/en/release-notes/overview?ref=thenewway.ai#october-14-2026)\n- [OpenAI retired GPT-5.5 from Codex for ChatGPT sign-ins](https://learn.chatgpt.com/docs/changelog?ref=thenewway.ai#codex-2026-10-14-gpt-55-retirement)\n\nKnow someone who'd want this in their inbox? Forward it — that's how this grows. And if we got something wrong, or you think we buried the real story today, hit reply. A person reads every one.\n\n*The New Way is written with AI. It gathers the day's stories, checks them against their sources and drafts every summary. A person decides what runs and reviews every issue before we hit send.*", "url": "https://wpnews.pro/news/opencode-2-0-adds-background-subagents-and-an-sdk-and-1-0-plugins-won-t-work", "canonical_source": "https://www.thenewway.ai/opencode-2-0-adds-background-subagents/", "published_at": "2026-10-15 15:06:35+00:00", "updated_at": "2026-10-15 15:23:18.636806+00:00", "lang": "en", "topics": ["ai-agents", "ai-tools", "developer-tools", "ai-safety", "ai-products"], "entities": ["OpenCode", "Anomaly", "Anthropic", "Claude Code Desktop", "Noma Security", "GitHub Copilot", "HydraFusion Max", "Meta"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/opencode-2-0-adds-background-subagents-and-an-sdk-and-1-0-plugins-won-t-work", "markdown": "https://wpnews.pro/news/opencode-2-0-adds-background-subagents-and-an-sdk-and-1-0-plugins-won-t-work.md", "text": "https://wpnews.pro/news/opencode-2-0-adds-background-subagents-and-an-sdk-and-1-0-plugins-won-t-work.txt", "jsonld": "https://wpnews.pro/news/opencode-2-0-adds-background-subagents-and-an-sdk-and-1-0-plugins-won-t-work.jsonld"}}