chore(support-bot): rewrite with opencode and remote GitHub MCP by KavithaSiva · Pull Request #2182 · SAP/ai-sdk-js

KavithaSiva · 2026-08-20T18:07:50Z

Context

Rewrites the support bot workflow with opencode
Also moves the license from cloud sdk repo to in-house.

hyperspace-pr-bot · 2026-08-20T18:08:09Z

Summary

The following content is AI-generated and provides a summary of the pull request:

Chore: Rewrite Support Bot with OpenCode and Remote GitHub MCP

What this PR does and why it is needed

This PR rewrites the support bot by migrating from a custom agent implementation to OpenCode with a remote GitHub MCP integration.

Key changes

Removed files:

agent.ts — custom agent scaffolding removed
github-tools.ts — custom GitHub tool wrappers removed

Added files:

opencode.json — OpenCode configuration defining:
- SAP AI Core as the LLM provider
- Remote GitHub MCP (via api.githubcopilot.com/mcp/readonly) for repo, issues, and code search
- Remote Context7 MCP for documentation search
package.json — standalone package definition for the support-bot module with @opencode-ai/sdk and opencode-ai as dependencies

Modified files:

reply.ts — The agent logic (previously in agent.ts) has been merged directly into reply.ts. The implementation now uses @opencode-ai/sdk with a multi-pass prompting strategy:
1. Draft pass — full tool-calling loop (docs search, issue search, code lookup)
2. Self-verify pass — model re-checks factual claims against source
3. Final answer pass — extracts the verified, clean answer
- Includes a completeness check ensuring the ## Related Issues section is always present
- Detailed system prompt with security constraints, required tool-call strategy, and answer rules
issue-reply.yml — Updated workflow to:
- Add a dedicated pnpm install step for the support-bot package
- Update the working directory to ./sample-code/src/support-bot
- Simplify the run command from pnpm exec node src/support-bot/reply.ts to node reply.ts

🔄 Regenerate and Update Summary
✏️ Insert as PR Description (deletes this comment)
🗑️ Delete comment

PR Bot Information

Version: 1.29.33

Correlation ID: 0f0f85a0-9cc2-11f1-9362-a3500d1cdb4f
File Content Strategy: Full file content
LLM: anthropic--claude-4.6-sonnet
Output Template: Repository PR Template
Summary Prompt: Default Prompt
Event Trigger: pull_request.opened

davidkna-sap · 2026-08-21T13:14:35Z

+    "github": {
+      "type": "remote",
+      "url": "https://api.githubcopilot.com/mcp/readonly",
+      "headers": {


[q] I wonder if some MCP proxy/gateway would make sense here to further filter any tool calls, even though the risk is lower with slack-only.
Either way, I assume opencode has shell access so either way hard to secure without a real (container-based or likewise) sandbox.
But it might still be able smuggle the AI core credentials if it wants to, https://github.com/SAP/ai-sdk-js-backlog/issues/583 would reduce the risk a bit here, I assume AI core will get IAS soon?

I have added "permission": { "bash": "deny" } to opencode.json to close the most direct exfiltration channel. The bot doesn't need shell access, it only uses context7 and GitHub MCP tools.

The GitHub MCP endpoint is /readonly, which limits write channels.

Output is Slack-only, so blast radius is limited.

I am not sure about the timeline of AI Core with IAS.

davidkna-sap · 2026-08-21T13:18:12Z

@@ -39,7 +265,6 @@ function extractErrorMessages(body: string): string[] {
 }

 function stripBoilerplate(body: string): string {


I assume opencode has native ways to handle large inputs, consider providing the issue and so on as files.

Opencode has a way to provide files as attachments, but I would prefer to do this in a follow-up.

davidkna-sap · 2026-08-21T13:21:33Z

+  '- github__search_issues — search GitHub issues (pass keywords only; repo scope is automatic)',
+  '- github__get_issue     — fetch full body of a specific issue by number',
+  '- github__search_code   — search code examples (pass keywords only; repo scope is automatic)',
+  '',


[pp] Also tell the model to look at the local checkout?

Can be improved in a follow-up.

Co-authored-by: David Knaack <david.knaack@sap.com>

davidkna-sap

still issues spawning in CI: https://github.com/SAP/ai-sdk-js/actions/runs/33169168848/job/98841805850

KavithaSiva · 2026-09-01T12:24:30Z

still issues spawning in CI: https://github.com/SAP/ai-sdk-js/actions/runs/33169168848/job/98841805850

Runs successfully now: https://github.com/SAP/ai-sdk-js/actions/runs/33186979692

chore(support-bot): rewrite with opencode and remote GitHub MCP

4735289

KavithaSiva added 4 commits August 20, 2026 20:09

chore(support-bot): exclude support-bot from sample-code tsconfig

58e0114

chore(support-bot): trim unnecessary fields from standalone package.json

7daa4e6

chore: fix build issues

fc2afd7

fix: dep build

8b0d28c

davidkna-sap reviewed Aug 21, 2026

View reviewed changes

KavithaSiva and others added 8 commits August 26, 2026 06:48

Update sample-code/src/support-bot/reply.ts

a2af7ac

Co-authored-by: David Knaack <david.knaack@sap.com>

Update sample-code/src/support-bot/reply.ts

013011e

Co-authored-by: David Knaack <david.knaack@sap.com>

chore: address review comments

8a1ed67

chore: address review comments

5ddd7a7

chore: add .gitingnore

5edeb04

chore: review comment

8049f28

chore: lint fixes

0c31c1a

chore: add in house license check

68ea31c

KavithaSiva requested a review from davidkna-sap August 28, 2026 11:48

davidkna-sap reviewed Aug 28, 2026

View reviewed changes

chore: fix CI action

809522a

davidkna-sap reviewed Aug 28, 2026

View reviewed changes

Comment thread package.json Outdated

KavithaSiva added 6 commits August 28, 2026 14:22

chore: adds logging

dd007af

chore: fix ci

77f61db

chore: fix CI script

f2a7102

chore: figure out

8d0937d

chore: cleanup logging

043f52a

chore: fix lint failures

e9a7750

		@@ -39,7 +265,6 @@ function extractErrorMessages(body: string): string[] {
		}

		function stripBoilerplate(body: string): string {

Uh oh!

Conversation

KavithaSiva commented Aug 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Context

Uh oh!

hyperspace-pr-bot Bot commented Aug 20, 2026

Summary

Chore: Rewrite Support Bot with OpenCode and Remote GitHub MCP

What this PR does and why it is needed

Key changes

Uh oh!

Uh oh!

davidkna-sap Aug 21, 2026

Choose a reason for hiding this comment

Uh oh!

KavithaSiva Aug 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

KavithaSiva Aug 27, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

davidkna-sap Aug 21, 2026

Choose a reason for hiding this comment

Uh oh!

KavithaSiva Aug 28, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

davidkna-sap Aug 21, 2026

Choose a reason for hiding this comment

Uh oh!

KavithaSiva Aug 28, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

davidkna-sap left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

KavithaSiva commented Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

KavithaSiva commented Aug 20, 2026 •

edited

Loading

KavithaSiva Aug 27, 2026 •

edited

Loading