fix(coverage): scope Rust evidence to changed packages

.github/workflows/opencode-review-dispatch.yml

@@ -1734,22 +1734,27 @@ jobs:
           }
 
           rust_coverage_manifests() {
-            if [ -f Cargo.toml ]; then
+            # A repository-wide coverage run is required when the workspace
+            # manifest or lockfile changed. Otherwise measure only the
+            # changed Rust package(s); building every workspace member at once
+            # can exhaust the review runner disk before tests begin.
+            if has_changed_tracked_files Cargo.toml Cargo.lock; then
               printf '%s\n' Cargo.toml
               return 0
             fi
             changed_files_for_coverage \
               | while IFS= read -r changed_path; do
                   case "$changed_path" in
-                    Cargo.toml|Cargo.lock|*.rs) ;;
+                    Cargo.toml|Cargo.lock|*/Cargo.toml|*/Cargo.lock|*.rs) ;;
                     *) continue ;;
                   esac
                   candidate_dir="$(dirname "$changed_path")"
-                  while [ "$candidate_dir" != "." ] && [ "$candidate_dir" != "/" ]; do
+                  while :; do
                     if [ -f "${candidate_dir}/Cargo.toml" ]; then
                       printf '%s\n' "${candidate_dir}/Cargo.toml"
                       break
                     fi
+                    [ "$candidate_dir" = "." ] && break
                     next_dir="$(dirname "$candidate_dir")"
                     if [ "$next_dir" = "$candidate_dir" ]; then
                       break

CHANGELOG.md

@@ -35,6 +35,10 @@ Semantic Versioning where the repository publishes a release.
 
 ### Fixed
 
+- Scope OpenCode Rust coverage evidence to changed Cargo packages while
+  retaining full-workspace coverage for root workspace and lockfile changes,
+  preventing large repositories from exhausting the review runner before
+  coverage starts.
 - Parsed `opencode.jsonc` as JSONC (stripping `//` and `/* */` comments outside string literals) in the reasoning-effort guard and its contract tests, instead of raw `json.loads`, which rejected the file the moment it carried its first explanatory comment (added for the `contextual-orchestrator` provider block) with `Expecting property name enclosed in double quotes`. Comment markers inside string values, such as the `$schema` URL, are left untouched.
 - Download the pinned `uv` 0.12.1 exporter from the official GitHub Releases URL instead of `releases.astral.sh`, which now returns HTTP 403 and blocks org-wide OpenCode `coverage-evidence`. The SHA-256 pin is unchanged. The opener may follow one hop onto `release-assets.githubusercontent.com` or `objects.githubusercontent.com` and still rejects every other host, userinfo, non-HTTPS scheme, and nondefault port (ContextualWisdomLab/.github#1109).
 - Compared the trusted `uv` executable's post-install `--version` output against the real GitHub Releases build's full string, `uv 0.12.1 (x86_64-unknown-linux-gnu)`, instead of the bare `uv 0.12.1` the prior check required; the genuine release binary always prints the target triple, so every installation was failing the pin check immediately after the archive download itself was fixed (ContextualWisdomLab/.github#1109).

tests/test_opencode_agent_contract.py

@@ -750,6 +750,10 @@ def test_opencode_target_coverage_materializes_only_after_authorized_dispatch():
     assert "rust_coverage_fail_under_lines()" in measure_step
     assert "package.metadata.opencode.coverage.minimum_lines" in measure_step
     assert "workspace.metadata.opencode.coverage.minimum_lines" in measure_step
+    assert "has_changed_tracked_files Cargo.toml Cargo.lock" in measure_step
+    assert "changed Rust package(s)" in measure_step
+    assert 'candidate_dir="$(dirname "$changed_path")"' in measure_step
+    assert "*/Cargo.toml|*/Cargo.lock|*.rs" in measure_step
     assert "scripts/ci/rust_coverage_threshold.py" in measure_step
     assert '--fail-under-lines "$threshold"' in measure_step
     assert "uv sync --project" not in measure_step

tests/test_pr_review_autofix_nvidia_nim_contract.py

@@ -20,7 +20,7 @@
 DOCTORING_RECORD = Path("docs/doctoring/hourly-nvidia-nim-autofix.md")
 CHANGELOG = Path("CHANGELOG.md")
 REVIEW_DISPATCH_WORKFLOW = Path(".github/workflows/opencode-review-dispatch.yml")
-REVIEW_DISPATCH_BLOB_SHA = "83f6830d5c21a324b4dbcd4e5c21a07968994b81"
+REVIEW_DISPATCH_BLOB_SHA = "05fccd9cdbc0ad221a277faf6725223a9c167ac3"
 
 
 def _workflow_text(path: Path) -> str: