docs: add review notes for PR 9751

INFRASTRUCTURE_CHANGE.md

@@ -0,0 +1,43 @@
+# Infrastructure Change Review for PR 9751
+
+- Reviewed PR: https://github.com/Kilo-Org/kilocode/pull/9751
+- Base: `origin/main`
+- Compared with: `git diff --name-only origin/main...HEAD`
+
+## Findings
+
+The PR includes infrastructure-related changes that should be reviewed manually before merging upstream code into Kilo infrastructure.
+
+- `.github/workflows/disabled/review.yml.disabled` changes GitHub Actions review automation. Evidence: the workflow switches from `ANTHROPIC_API_KEY` to `OPENCODE_API_KEY`, changes the invoked model from `anthropic/claude-opus-4-5` to `opencode/gpt-5.5 --variant medium`, and changes the secret consumed by the job.
+- `bun.lock` changes the package manager lockfile. Evidence: lockfile updates accompany dependency/catalog and workspace package changes.
+- `package.json` changes repo-level package/runtime dependency catalog entries. Evidence: upgrades `effect`, `@effect/opentelemetry`, `@effect/platform-node`, `@opentui/core`, and `@opentui/solid`; adds `opentui-spinner` to the catalog.
+- `packages/core/package.json` adds a new workspace package. Evidence: new private package `@opencode-ai/core` with `test`, `test:ci`, and `typecheck` scripts, `bin` mapping, exports, and dependency declarations.
+- `packages/shared/package.json` deletes an existing workspace package manifest. Evidence: removes private package `@opencode-ai/shared` package metadata, scripts, bin, exports, and dependencies.
+- `packages/app/package.json`, `packages/opencode/package.json`, and `packages/ui/package.json` change workspace dependencies. Evidence: packages add or switch to `@opencode-ai/core`; `packages/opencode/package.json` also moves dependency/devDependency entries and changes `@opentui/*` and `opentui-spinner` to catalog usage.
+- `packages/plugin/package.json` changes plugin peer/dev dependencies. Evidence: raises `@opentui/core` and `@opentui/solid` peer ranges to `>=0.1.105` and switches dev dependencies to catalog entries.
+- `packages/core/tsconfig.json` adds TypeScript project configuration for the new core package. Evidence: new package-level typecheck configuration.
+- `nix/kilo.nix` changes Nix packaging metadata. Evidence: touched Nix infrastructure file; the diff appears comment-only (`dunning` -> `running`), but it is still infrastructure-owned.
+- `packages/extensions/zed/extension.toml` changes extension release/deployment metadata. Evidence: version changes from `7.2.30` to `1.14.29` and all platform archive URLs are updated to the new release tag.
+- `packages/opencode/script/publish.ts` changes release/publish automation. Evidence: modifies the script that runs `docker buildx build --push` and calculates release artifact checksums; also removes `kilocode_change` marker comments around checksum logic.
+- `packages/opencode/script/schema.ts` changes schema generation automation. Evidence: updates the config import used by the schema generation script.
+- `packages/sdk/js/script/build.ts` changes SDK build automation. Evidence: introduces `KILO_SDK_OPENAPI` to choose `httpapi` vs `hono` OpenAPI generation and conditionally runs `bun dev generate --httpapi`.
+- `script/beta.ts` changes beta branch/release automation. Evidence: adds GitHub Actions log grouping, deterministic typecheck/build validation, smoke-fix commit creation, and force-pushes only after validation.
+- `script/github/close-issues.ts` changes GitHub issue automation. Evidence: changes closed issue `state_reason` from `completed` to `not_planned`.
+- `script/raw-changelog.ts` changes changelog automation. Evidence: adds `github-actions[bot]` to the bot author filter.
+- `script/upstream/utils/report.ts` changes upstream-merge reporting automation. Evidence: touches the utility that recommends upstream merge handling, though the visible diff appears formatting-only.
+
+## Manual Check
+
+The following files are ambiguous or adjacent to repo infrastructure and should be checked by a human if this upstream PR is merged:
+
+- `.opencode/skills/effect/SKILL.md` changes repo-local agent skill instructions. This is not CI/deployment infrastructure, but it affects repository automation/agent behavior.
+- `.opencode/tool/github-triage.ts` changes repo-local GitHub triage tooling ownership mappings. This is automation-adjacent and should be reviewed manually.
+- `kilocode-2.code-workspace` adds a VS Code workspace file with local window title and color settings. This is editor/workspace configuration and may be accidental.
+- `packages/opencode/.gitignore` changes ignored files for the CLI package. Ignore rules affect repo hygiene and generated artifacts.
+- `packages/console/core/migrations/20260417071612_tidy_diamondback/snapshot.json` deletes a database migration snapshot. Database migration metadata is deployment-adjacent and should be reviewed manually.
+- `packages/opencode/migration/20260428004200_add_session_path/migration.sql` and `packages/opencode/migration/20260428004200_add_session_path/snapshot.json` add database migration metadata. Schema migrations may affect runtime deployment behavior.
+- `session.json` deletes an empty root-level file. It may be accidental workspace/session state rather than infrastructure, but a human should confirm.
+
+## Conclusion
+
+Infrastructure changes are present. This PR should not be treated as application-only upstream code: it modifies GitHub Actions automation, package manager/runtime configuration, workspace package manifests, release/build scripts, SDK generation, Nix packaging, extension release metadata, and repository automation scripts. Manual infrastructure review is required before accepting these changes into Kilo-owned infrastructure.