fix(config): remove duplicate annotate on provider timeout/chunkTimeout (F1)

[tesdal]

Summary

Audit finding F1 from 2026-04-22 diamond audit: ConfigProvider.Info schema double-annotates timeout and chunkTimeout. Inner Schema.Int.pipe(Schema.greaterThanOrEqualTo(0)).annotations({ description, default }) already attaches description + default; outer .annotations({...}) wrapper overwrites with identical values. Pure duplication.

Changes

• packages/opencode/src/config/provider.ts — drop outer .annotations() on both fields. Inner description preserved character-for-character.
• packages/opencode/test/config/provider-schema.test.ts — new, 2 AST-based tests that serialize ConfigProvider.Info.ast and assert each description appears exactly once. Fail before fix, pass after (verified by reviewer reverting + reapplying).

Verification

• bun typecheck — clean
• bun test test/config/provider-schema.test.ts — 2/2 pass
• bun test test/session/subagent-hang-regression.test.ts — 2/2 pass (unaffected)
• SDK regen (./packages/sdk/js/script/build.ts) — zero diff to types.gen.ts, codegen dedupes at HTTP layer. Fix is still valid at AST level.

Diamond review status

• Spec compliance (codex-5.3): 9/11 ✅, 2 minor deviations accepted (test uses ConfigProvider.Info.ast directly vs. Schema.asSchema(...) — functionally equivalent).
• Code quality (Opus): APPROVE. Three Minor nits (test duplication, needle brittleness, plan wording) deemed deferrable. Reviewer independently verified tests fail at base and pass at head.

Context

Part of 14-task audit remediation plan (docs/superpowers/plans/2026-04-23-audit-remediation.md). Base phase-ab-base now tracks b2cc4ac8d (local/integration-v2 HEAD). Draft PR opened for Copilot review only — merge target is local integration branch, not upstream.

[github-actions]

Thanks for your contribution!

This PR doesn't have a linked issue. All PRs must reference an existing issue.

Please:

1. Open an issue describing the bug/feature (if one doesn't exist)
2. Add Fixes #<number> or Closes #<number> to this PR description

See CONTRIBUTING.md for details.

[Copilot]

Pull request overview

Remediates audit finding F1 by removing duplicate description annotations on ConfigProvider.Info’s timeout and chunkTimeout fields, and adds regression tests to ensure the schema AST contains each description exactly once.

Changes:

• Remove redundant outer .annotate({ description: ... }) wrappers for timeout and chunkTimeout in ConfigProvider.Info.
• Add Bun tests that serialize ConfigProvider.Info.ast and assert the relevant description strings occur exactly once.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
packages/opencode/src/config/provider.ts	Drops duplicate .annotate(...) on timeout and chunkTimeout fields to avoid double annotation in the schema AST.
packages/opencode/test/config/provider-schema.test.ts	Adds AST-based regression tests to prevent reintroducing duplicate description annotations.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[tesdal]

Copilot review: no comments. All three reviewers (codex-5.3 spec 9/11, Opus quality APPROVE, Copilot clean) agree. Merging --no-ff into local/integration-v2. PR closed as review-only.