@bybrawe/opencode-loop 0.5.38 → 0.6.1

package/src/source/opencode2/native-runtime.js

@@ -0,0 +1,464 @@
+import { randomUUID } from "node:crypto"
+import { nativeGoalReservesSession } from "./native-companion.js"
+import { parseLoopArgs, splitFirst } from "../core/args.js"
+import { actionKind, matchJob, presetDefaults, applyTestfixPreset } from "../core/jobs.js"
+import { normalizeLoopScheduleArgs } from "../core/schedule-syntax.js"
+import { OPENCODE_LOOP_V2_PRESET_NAMES } from "./commands.js"
+import { readState, writeState, removeState } from "../core/state.js"
+import { appendLoopLog } from "../core/process.js"
+import { formatOpenCode2LoopStatus } from "./status.js"
+import { createNativeJobPolicy } from "./native-policy.js"
+
+const PREFIX = "AUTONOMOUS OPENCODE LOOP ITERATION. Continue the configured task now. Do not explain the /loop command. Work directly on the configured task."
+const result = (detail = {}) => ({ handled: true, dispatched: false, ...detail })
+const id = () => `msg_loop_${randomUUID().replaceAll("-", "")}`
+
+// This runtime uses native durable inbox admission. It never calls session.abort.
+export function createNativeLoopRuntime(options = {}) {
+  if (typeof options.prompt !== "function") throw new TypeError("Native Loop requires prompt()")
+  const now = options.now || Date.now
+  const setTimer = options.setTimer || setTimeout
+  const clearTimer = options.clearTimer || clearTimeout
+  const policy = createNativeJobPolicy({ ...options, now })
+  const scopes = new Map()
+  let disposed = false
+
+  function scopeFor(event) {
+    const sessionID = String(event?.sessionID || "").trim()
+    const directory = String(event?.directory || options.directory || "").trim()
+    if (!sessionID || !directory) return undefined
+    const key = `${directory}\u0000${sessionID}`
+    if (!scopes.has(key)) scopes.set(key, { key, sessionID, directory, epoch: 0, busy: false, queue: Promise.resolve() })
+    return scopes.get(key)
+  }
+  const current = (scope) => !disposed && !scope.deleted
+  const read = (scope) => readState(scope.directory, scope.sessionID)
+  const save = (scope, state) => writeState(scope.directory, scope.sessionID, state)
+  const report = (error) => { try { options.onError?.(error) } catch {} }
+  function enqueue(scope, task) {
+    const pending = scope.queue.catch(() => {}).then(async () => {
+      if (!current(scope)) return result({ reason: "disposed" })
+      if (typeof options.scopeAllowed === "function" && !await options.scopeAllowed(scope)) {
+        scope.epoch++
+        clear(scope, "timer"); clear(scope, "deadline"); clear(scope, "companionTimer")
+        return result({ accepted: false, reason: "session-location-mismatch", error: "Native session location cannot be verified for this project/worktree." })
+      }
+      return current(scope) ? task() : result({ reason: "disposed" })
+    })
+    scope.queue = pending.catch(report)
+    return pending
+  }
+  function clear(scope, field) {
+    if (scope[field] !== undefined) clearTimer(scope[field])
+    delete scope[field]
+  }
+  function eligible(job) {
+    return job.enabled !== false && !job.paused && !(job.maxRuns > 0 && (job.runCount || 0) >= job.maxRuns)
+  }
+  function dueAt(job) {
+    if (job.runNowRequestedAt > 0) return now()
+    if (job.watchPaths?.length && !job.watchTriggered) return Infinity
+    if (job.lastRunAt > 0) return job.lastRunAt + Math.max(0, job.intervalMs || 0)
+    return job.immediate === false ? Date.parse(job.createdAt) + Math.max(0, job.intervalMs || 0) : now()
+  }
+  function blocked(job) {
+    const kind = actionKind(job.action, job)
+    if (kind === "goal") return ["Use the native @bybrawe/opencode-goal /goal workflow; legacy Loop Goal state is not silently converted."]
+    if (!["prompt", "command", "compact", "shell"].includes(kind)) return ["unsupported action kind"]
+    if (kind === "command" && (typeof options.command !== "function" || typeof options.wait !== "function")) return ["native command and wait capabilities are required"]
+    if ((kind === "compact" || job.compactEveryRuns > 0 || job.compactEveryMs > 0) && typeof options.compact !== "function") return ["native compaction capability is required"]
+    if (kind === "shell" && typeof options.shell !== "function") return ["native shell capability is required"]
+    if (job.noOverlap === false) return ["Native V2 sessions are serialized; remove --allow-overlap."]
+    return []
+  }
+
+  async function schedule(scope) {
+    clear(scope, "timer")
+    if (!current(scope) || scope.busy || scope.active || scope.compaction) return
+    const state = await read(scope)
+    if (!current(scope) || scope.busy || scope.active || scope.compaction) return
+    let delay = Infinity
+    for (const job of state.jobs || []) {
+      if (!eligible(job) || job.v2Run || blocked(job).length) continue
+      if (job.watchPaths?.length || job.stopFile || job.until) delay = Math.min(delay, 1000)
+      const due = dueAt(job)
+      if (due > now()) delay = Math.min(delay, due - now())
+      // A zero-delay deferred preset still needs a first idle-safe wake after
+      // its local command returns; it must not wait for an unrelated model turn.
+      else if (job.immediate === false && !(job.lastRunAt > 0)) delay = Math.min(delay, 1)
+      if (job.maxRuntimeMs > 0) delay = Math.min(delay, Math.max(1, Date.parse(job.createdAt) + job.maxRuntimeMs - now()))
+    }
+    if (!Number.isFinite(delay)) return
+    scope.timer = setTimer(() => {
+      delete scope.timer
+      return enqueue(scope, () => advance(scope)).catch(report)
+    }, Math.max(1, Math.min(delay, 2_147_483_647)))
+    scope.timer?.unref?.()
+  }
+
+  async function note(scope, name, detail = {}) {
+    await appendLoopLog(scope.directory, `v2-native-${name}`, { sessionID: scope.sessionID, ...detail })
+  }
+
+  async function pauseActive(scope, reason, failed = true) {
+    clear(scope, "deadline")
+    const state = await read(scope)
+    for (const job of state.jobs || []) {
+      if (scope.active ? job.id !== scope.active.jobID : !eligible(job)) continue
+      policy.pause(job, reason, failed)
+    }
+    await save(scope, state)
+    await cancelPending(scope, state)
+    await note(scope, "paused", { reason })
+    return result({ reason })
+  }
+
+  async function cancelPending(scope, state) {
+    const run = scope.active
+    if (!run || run.delivered || !["prompt", "command"].includes(run.kind) || !run.inboxID || typeof options.cancel !== "function") return false
+    let cancelled = false
+    try { cancelled = (await options.cancel({ sessionID: scope.sessionID, inboxID: run.inboxID })) === true } catch (error) { report(error) }
+    if (!cancelled) return false
+    const job = (state.jobs || []).find((entry) => entry.id === run.jobID)
+    if (job?.v2Run?.id === run.id) {
+      // Refund only a proven undelivered cancellation, not an interrupted model turn.
+      Object.assign(job, run.previous)
+      delete job.v2Run
+      await save(scope, state)
+    }
+    if (scope.active === run) delete scope.active
+    clear(scope, "deadline")
+    return true
+  }
+
+  async function finish(scope) {
+    const run = scope.active
+    if (!run || scope.compaction || scope.busy) return result({ reason: "no-terminal-boundary" })
+    if ((run.kind === "prompt" && !run.delivered) || (run.kind === "command" && !run.commandFinished) || (run.kind === "shell" && !run.shellFinished) || (["compact", "cadence"].includes(run.kind) && !run.compactFinished)) {
+      return result({ reason: "awaiting-owned-completion" })
+    }
+    clear(scope, "deadline")
+    const state = await read(scope)
+    const job = (state.jobs || []).find((entry) => entry.id === run.jobID)
+    if (job?.v2Run?.id === run.id) {
+      if (["compact", "cadence"].includes(run.kind)) {
+        job.lastCompactAt = now()
+        job.lastCompactRunCount = job.runCount || 0
+      } else if (!job.paused && !run.foreground) {
+        await policy.finish(scope, job, () => current(scope) && scope.active === run && !run.foreground)
+      }
+      delete job.v2Run
+      job.lastCompletedAt = now()
+      await save(scope, state)
+      if (job.paused || job.enabled === false) await policy.notify(scope, job, job.pauseReason || "completed")
+    }
+    if (scope.active === run) delete scope.active
+    await note(scope, "completed", { jobID: run.jobID, kind: run.kind, foreground: Boolean(run.foreground) })
+    return advance(scope)
+  }
+
+  async function dispatch(scope, state, job, kind) {
+    const epoch = scope.epoch
+    const isCurrent = () => current(scope) && scope.epoch === epoch && !scope.busy && !scope.compaction
+    let request
+    if (kind === "prompt") request = { sessionID: scope.sessionID, id: id(), text: `${PREFIX}\n\n${await policy.buildPrompt(scope.directory, job)}`, delivery: "queue", metadata: { opencode_loop_v2: true, opencode_loop_job: job.id } }
+    else if (kind === "compact" || kind === "cadence") request = { sessionID: scope.sessionID, id: id(), delivery: "queue" }
+    else if (kind === "shell") request = { sessionID: scope.sessionID, id: id(), command: String(job.action).replace(/^[!$]\s*/, ""), timeoutMs: job.timeoutMs }
+    else {
+      const [name, text] = splitFirst(String(job.action).replace(/^\/+/, ""))
+      request = { sessionID: scope.sessionID, name, text: text || "", delivery: "queue" }
+    }
+    if (!isCurrent()) return result({ reason: "foreground-or-compaction" })
+    if (job.dryRun) {
+      policy.pause(job, "dry-run")
+      await save(scope, state)
+      return result({ dryRun: true, request })
+    }
+    if (kind === "shell" && job.safe) {
+      const { dangerousShell } = await import("../runtime/job-workspace.js")
+      if (dangerousShell(request.command)) {
+        policy.pause(job, "unsafe-shell", true)
+        await save(scope, state)
+        return result({ reason: "unsafe-shell" })
+      }
+    }
+    const run = {
+      id: request.id || id(), jobID: job.id, kind, createdAt: now(), delivered: false,
+      previous: { runCount: job.runCount || 0, lastRunAt: job.lastRunAt || 0, enabled: job.enabled },
+    }
+    job.v2Run = { id: run.id, kind, status: "admitting", createdAt: run.createdAt }
+    await save(scope, state)
+    job = state.jobs.find((entry) => entry.id === run.jobID)
+    if (!isCurrent() || !job || !eligible(job)) {
+      if (job?.v2Run?.id === run.id) { delete job.v2Run; await save(scope, state) }
+      return result({ reason: "admission-withdrawn" })
+    }
+    scope.active = run
+    clear(scope, "timer")
+    try {
+      let response
+      if (kind === "prompt") response = await options.prompt(request)
+      else if (kind === "compact" || kind === "cadence") response = await options.compact(request)
+      else if (kind === "shell") response = await options.shell(request)
+      else response = await options.command(request)
+      if (response?.error || response?.accepted === false) throw new Error(String(response.error?.message || response.error || "Native admission rejected"))
+      run.inboxID = response?.id || response?.data?.id || request.id
+      run.shellID = kind === "shell" ? (response?.id || response?.shell?.id || request.id) : undefined
+      if (kind !== "cadence") {
+        job.runCount = (job.runCount || 0) + 1
+        job.lastRunAt = now()
+        if (job.maxRuns > 0 && job.runCount >= job.maxRuns) job.enabled = false
+      }
+      delete job.runNowRequestedAt
+      job.watchTriggered = false
+      job.v2Run = { ...job.v2Run, status: "admitted", inboxID: run.inboxID, shellID: run.shellID }
+      await save(scope, state)
+      await note(scope, "admitted", { jobID: job.id, kind, inboxID: run.inboxID, runCount: job.runCount })
+      if (current(scope) && job.timeoutMs > 0) {
+        scope.deadline = setTimer(() => enqueue(scope, () => scope.active === run ? pauseActive(scope, "timeout-waiting-for-host-boundary") : result()).catch(report), Math.min(job.timeoutMs, 2_147_483_647))
+        scope.deadline?.unref?.()
+      }
+      if (kind === "command") {
+        Promise.resolve().then(() => options.wait({ sessionID: scope.sessionID })).then(
+          () => enqueue(scope, async () => { if (scope.active !== run) return result(); run.commandFinished = true; return finish(scope) }),
+          () => enqueue(scope, () => pauseActive(scope, "command-failed")),
+        ).catch(report)
+      }
+      if (kind === "shell" && response?.status && response.status !== "running") {
+        run.shellFinished = true
+        if (response.status !== "exited" || Number(response.exit || 0) !== 0) return pauseActive(scope, "shell-failed")
+        return finish(scope)
+      }
+      return result({ dispatched: true, job, kind, request })
+    } catch (error) {
+      // A lost response may follow a successful host admission. Preserve its ID
+      // and pause instead of charging a run or blindly creating another input.
+      policy.pause(job, "admission-uncertain", true)
+      job.lastError = error instanceof Error ? error.message : String(error)
+      await save(scope, state)
+      await note(scope, "admission-failed", { jobID: job.id, message: job.lastError })
+      return result({ reason: "admission-uncertain", error: job.lastError })
+    }
+  }
+
+  async function advance(scope) {
+    if (!current(scope) || scope.busy || scope.compaction || scope.active) return result({ reason: "host-not-idle" })
+    const epoch = scope.epoch
+    const state = await read(scope)
+    clear(scope, "companionTimer")
+    if (!(state.jobs || []).some(eligible)) return result()
+    if (await nativeGoalReservesSession(scope.directory, scope.sessionID)) {
+      if (current(scope)) {
+        scope.companionTimer = setTimer(() => {
+          delete scope.companionTimer
+          return enqueue(scope, () => advance(scope)).catch(report)
+        }, 1000)
+        scope.companionTimer?.unref?.()
+      }
+      return result({ reason: "dedicated-goal-owns-session" })
+    }
+    for (const job of state.jobs || []) {
+      if (!eligible(job)) continue
+      if (job.v2Run) {
+        policy.pause(job, "restart-requires-review")
+        await save(scope, state)
+        return result({ reason: "restart-requires-review" })
+      }
+      if (blocked(job).length) continue
+      if (job.watchPaths?.length && await policy.watchChanged(scope.directory, job)) job.watchTriggered = true
+      const safe = () => current(scope) && !scope.busy && !scope.compaction && !scope.active && scope.epoch === epoch
+      if (!safe()) return result({ reason: "foreground-or-compaction" })
+      // Stop conditions apply even when a future timer or watch is not due.
+      if (!await policy.checkStop(scope, job)) {
+        await save(scope, state)
+        await policy.notify(scope, job, job.pauseReason)
+        return advance(scope)
+      }
+      if (dueAt(job) > now()) continue
+      if (!await policy.prepare(scope, job, safe)) {
+        if (job.paused || job.enabled === false) { await save(scope, state); await policy.notify(scope, job, job.pauseReason); return advance(scope) }
+        return result({ reason: job.pauseReason || "foreground-or-compaction" })
+      }
+      const kind = actionKind(job.action, job)
+      const cadence = kind !== "compact" && job.runCount > 0 && (
+        (job.compactEveryRuns > 0 && job.runCount - (job.lastCompactRunCount || 0) >= job.compactEveryRuns) ||
+        (job.compactEveryMs > 0 && now() - (job.lastCompactAt || Date.parse(job.createdAt)) >= job.compactEveryMs)
+      )
+      return dispatch(scope, state, job, cadence ? "cadence" : kind)
+    }
+    await schedule(scope)
+    return result()
+  }
+
+  async function command(scope, event) {
+    const state = await read(scope)
+    const target = String(event.arguments || "").trim() || "all"
+    if (event.name === "loop" || OPENCODE_LOOP_V2_PRESET_NAMES.includes(event.name)) {
+      const defaults = event.name === "loop" ? {} : presetDefaults(event.name)
+      const normalized = normalizeLoopScheduleArgs(event.arguments || "", defaults)
+      if (!normalized.ok) return result({ accepted: false, error: normalized.error })
+      if (normalized.allowGoalOverlap) return result({ accepted: false, error: "Native Goal session reservation cannot be overridden; use another session." })
+      const parsed = parseLoopArgs(normalized.args, normalized.defaults)
+      if (!parsed.ok) return result({ accepted: false, error: parsed.error })
+      parsed.job.scheduleMode = normalized.scheduleMode
+      parsed.job.scheduleSyntax = normalized.scheduleSyntax
+      if (normalized.scheduleSyntax === "after") {
+        parsed.job.immediate = false
+        parsed.job.maxRuns = 1
+      }
+      applyTestfixPreset(parsed.job, defaults)
+      const blockers = blocked(parsed.job)
+      if (blockers.length) return result({ accepted: false, reason: "unsupported", blockers, error: blockers.join(" ") })
+      const job = parsed.job
+      job.name = String(job.name || "default")
+      job.createdAt = new Date(now()).toISOString()
+      job.lastRunAt = 0
+      if (job.watchPaths?.length) job.watchSnapshot = await policy.snapshotPaths(scope.directory, job.watchPaths)
+      const jobs = state.jobs || []
+      if (!job.multi && jobs.some((other) => (other.name || "default") === job.name && other.v2Run)) return result({ accepted: false, error: "Pause/stop the existing in-flight job before replacing it." })
+      state.jobs = job.multi ? jobs : jobs.filter((other) => (other.name || "default") !== job.name)
+      state.jobs.push(job)
+      await save(scope, state)
+      await schedule(scope)
+      return result({ accepted: true, job })
+    }
+    if (event.name === "loop-status" || event.name === "loop-export") {
+      const status = formatOpenCode2LoopStatus(state, now())
+      const text = event.name === "loop-export" ? JSON.stringify(state, null, 2) : status.text
+      await options.prompt({ sessionID: scope.sessionID, text, resume: false, metadata: { opencode_loop_v2: true } })
+      return result({ accepted: true, status })
+    }
+    if (!["loop-now", "loop-pause", "loop-resume", "loop-stop", "loop-remove", "loop-clear"].includes(event.name)) return { handled: false }
+    const matches = (job, index) => event.name === "loop-clear" || matchJob(job, target, index)
+    let count = 0
+    for (const [index, job] of (state.jobs || []).entries()) {
+      if (!matches(job, index)) continue
+      count++
+      if (["loop-pause", "loop-stop", "loop-remove", "loop-clear"].includes(event.name)) {
+        policy.pause(job, "user-paused")
+      } else if (!job.v2Run) {
+        job.paused = false
+        delete job.pauseReason
+        if (event.name === "loop-now" || event.name === "loop-resume") job.runNowRequestedAt = Math.max(1, now())
+      }
+    }
+    await save(scope, state)
+    if (state.jobs.some((job) => job.id === scope.active?.jobID && job.paused)) await cancelPending(scope, state)
+    if (["loop-stop", "loop-remove", "loop-clear"].includes(event.name)) {
+      state.jobs = state.jobs.filter((job, index) => !matches(job, index))
+      if (!state.jobs.length) await removeState(scope.directory, scope.sessionID)
+      else await save(scope, state)
+    }
+    await schedule(scope)
+    return result({ accepted: true, count, target })
+  }
+
+  async function onEvent(event) {
+    if (disposed) return result({ reason: "disposed" })
+    if (event?.kind === "server" && event.action === "disposed") { await dispose(); return result({ disposed: true }) }
+    const scope = scopeFor(event)
+    if (!scope) return { handled: false }
+    // Hooks update these gates synchronously, even while file/host work awaits.
+    if (event.kind === "foreground") {
+      scope.epoch++
+      scope.busy = true
+      if (scope.active) scope.active.foreground = true
+      clear(scope, "timer")
+      return result({ reason: "foreground-admission" })
+    }
+    if (event.kind === "compaction" && event.action === "started") {
+      scope.compaction ||= { ended: false, terminal: false }
+      scope.busy = true
+      clear(scope, "timer")
+      return result({ reason: "compacting" })
+    }
+    if (event.kind === "session" && event.action === "status" && ["busy", "retry"].includes(event.status)) {
+      scope.busy = true
+      clear(scope, "timer")
+      return result()
+    }
+    if (event.kind === "session" && event.action === "deleted") {
+      scope.deleted = true
+      clear(scope, "timer"); clear(scope, "deadline"); clear(scope, "companionTimer")
+      scopes.delete(scope.key)
+      return result({ disposedScope: true })
+    }
+    return enqueue(scope, async () => {
+      if (event.kind === "command" && event.action === "executed") return command(scope, event)
+      if (event.kind === "inbox") {
+        if (scope.active?.inboxID === event.inboxID || scope.active?.id === event.inboxID) {
+          if (event.action === "delivered") scope.active.delivered = true
+          if (event.action === "cancelled") {
+            const run = scope.active
+            const state = await read(scope)
+            const job = (state.jobs || []).find((entry) => entry.id === run.jobID)
+            if (job?.v2Run?.id === run.id && !run.delivered) {
+              Object.assign(job, run.previous)
+              policy.pause(job, "inbox-cancelled")
+              delete job.v2Run
+              await save(scope, state)
+            }
+            if (scope.active === run) delete scope.active
+            clear(scope, "deadline")
+            return result({ reason: "inbox-cancelled" })
+          }
+        }
+        return result()
+      }
+      if (event.kind === "shell" && event.action === "ended" && scope.active?.shellID === event.shellID) {
+        scope.active.shellFinished = true
+        // A local shell terminal is not the terminal of a foreground model turn.
+        if (event.status !== "exited" || event.code !== 0) {
+          const run = scope.active
+          const paused = await pauseActive(scope, "shell-failed")
+          const state = await read(scope)
+          const job = (state.jobs || []).find((entry) => entry.id === run.jobID)
+          if (job?.v2Run?.id === run.id) { delete job.v2Run; await save(scope, state) }
+          if (scope.active === run) delete scope.active
+          return paused
+        }
+        return finish(scope)
+      }
+      if ((event.kind === "session" && ["error", "failed", "interrupted"].includes(event.action)) || (event.kind === "compaction" && event.action === "failed")) {
+        delete scope.compaction
+        scope.busy = false
+        const run = scope.active
+        const paused = await pauseActive(scope, event.reason || `${event.kind}-${event.action}`)
+        if (run && (run.delivered || ["compact", "cadence", "shell"].includes(run.kind))) {
+          const state = await read(scope)
+          const job = (state.jobs || []).find((entry) => entry.id === run.jobID)
+          if (job?.v2Run?.id === run.id) { delete job.v2Run; await save(scope, state) }
+          if (scope.active === run) delete scope.active
+        }
+        return paused
+      }
+      if (event.kind === "compaction" && event.action === "ended") {
+        scope.compaction ||= { ended: false, terminal: false }
+        scope.compaction.ended = true
+        if (["compact", "cadence"].includes(scope.active?.kind)) scope.active.compactFinished = true
+        if (!scope.compaction.terminal) return result({ reason: "awaiting-execution-terminal" })
+      } else if (event.kind === "session" && event.action === "idle") {
+        if (scope.compaction) { scope.compaction.terminal = true; if (!scope.compaction.ended) return result({ reason: "awaiting-compaction-end" }) }
+      } else if (event.kind === "session" && event.action === "status" && event.status === "idle") {
+        if (scope.active || scope.compaction) return result({ reason: "awaiting-execution-terminal" })
+      } else return { handled: false }
+      delete scope.compaction
+      scope.busy = false
+      return scope.active ? finish(scope) : advance(scope)
+    })
+  }
+
+  async function wake(event) {
+    const scope = scopeFor(event)
+    return scope ? enqueue(scope, () => advance(scope)) : { handled: false }
+  }
+  async function dispose() {
+    if (disposed) return false
+    disposed = true
+    for (const scope of scopes.values()) { clear(scope, "timer"); clear(scope, "deadline"); clear(scope, "companionTimer") }
+    await Promise.allSettled([...scopes.values()].map((scope) => scope.queue))
+    scopes.clear()
+    return true
+  }
+  return Object.freeze({ onEvent, wake, dispose, scheduledCount: () => [...scopes.values()].filter((scope) => scope.timer !== undefined).length })
+}

package/src/source/opencode2/native-shell.js

@@ -0,0 +1,81 @@
+import { spawn } from "node:child_process"
+import { randomUUID } from "node:crypto"
+
+// User-configured host commands, not model tools. No OpenCode session is aborted.
+export function createNativeShellHost({ directory, onTerminal, onError = () => {} } = {}) {
+  if (!directory || typeof onTerminal !== "function") throw new TypeError("Native shell requires directory and onTerminal")
+  const tasks = new Set()
+  let disposed = false
+  let disposal
+  const report = (error) => { try { onError(error) } catch {} }
+  const tail = (text, data) => (text + String(data)).slice(-64_000)
+
+  function terminate(task) {
+    if (task.termination) return task.termination
+    if (task.settled || !task.child.pid) return Promise.resolve()
+    const pid = task.child.pid
+    task.termination = new Promise((resolve) => {
+      if (process.platform === "win32") {
+        const fallback = () => { try { task.child.kill() } catch {} }
+        try {
+          const killer = spawn("taskkill", ["/pid", String(pid), "/t", "/f"], { windowsHide: true, stdio: "ignore" })
+          killer.once("error", (error) => { report(error); fallback(); resolve() })
+          killer.once("close", (code) => { if (code !== 0) fallback(); resolve() })
+        } catch (error) { report(error); fallback(); resolve() }
+      } else {
+        try { process.kill(-pid, "SIGTERM") } catch { try { task.child.kill("SIGTERM") } catch {} }
+        // A descendant can ignore SIGTERM and close all inherited pipes. The
+        // shell's close event is not proof that its process group has stopped.
+        // Keep escalation alive and await it before publishing a terminal.
+        setTimeout(() => {
+          try { process.kill(-pid, "SIGKILL") } catch {}
+          resolve()
+        }, 1000)
+      }
+    })
+    return task.termination
+  }
+
+  async function dispatch(request) {
+    if (disposed) throw new Error("Native shell is disposed")
+    if (!request?.sessionID || typeof request.command !== "string" || !request.command.trim()) throw new TypeError("Native shell requires sessionID and command")
+    const shellID = request.id || `shell_loop_${randomUUID().replaceAll("-", "")}`
+    const child = spawn(request.command, { cwd: directory, shell: true, detached: process.platform !== "win32", windowsHide: true, stdio: ["ignore", "pipe", "pipe"] })
+    const task = { child, settled: false, timedOut: false, cancelled: false, stdout: "", stderr: "" }
+    task.closed = new Promise((resolve) => { task.resolve = resolve })
+    tasks.add(task)
+    child.stdout?.on("data", (chunk) => { task.stdout = tail(task.stdout, chunk) })
+    child.stderr?.on("data", (chunk) => { task.stderr = tail(task.stderr, chunk) })
+    const delay = Number(request.timeoutMs)
+    task.timer = setTimeout(() => { task.timedOut = true; terminate(task) }, Number.isFinite(delay) && delay > 0 ? Math.min(delay, 2_147_483_647) : 120_000)
+    task.timer.unref?.()
+    child.once("close", async (code, signal) => {
+      task.settled = true
+      clearTimeout(task.timer)
+      await task.termination
+      tasks.delete(task)
+      const event = {
+        kind: "shell", action: "ended", directory, sessionID: request.sessionID, shellID,
+        status: task.timedOut ? "timeout" : task.cancelled || signal || code === null ? "killed" : "exited",
+        code: task.timedOut ? 124 : Number.isInteger(code) ? code : -1,
+        stdout: task.stdout, stderr: task.stderr,
+      }
+      task.resolve(event)
+      if (!task.spawnError) Promise.resolve().then(() => onTerminal(event)).catch(report)
+    })
+    return new Promise((resolve, reject) => {
+      child.once("spawn", () => resolve({ id: shellID, status: "running" }))
+      child.once("error", (error) => { task.spawnError = true; reject(error) })
+    })
+  }
+
+  function dispose() {
+    if (disposal) return disposal
+    disposed = true
+    const active = [...tasks]
+    for (const task of active) { task.cancelled = true; terminate(task) }
+    disposal = Promise.allSettled(active.map((task) => task.closed)).then(() => undefined)
+    return disposal
+  }
+  return Object.freeze({ dispatch, dispose, activeCount: () => tasks.size })
+}

package/src/source/opencode2/prompt-runtime.js

@@ -230,6 +230,8 @@ export function createOpenCode2PromptRuntime(options = {}) {
       const blockers = unsupportedRuntimeJob(parsed.job, supportsCommand)
       if (blockers.length) return { handled: true, accepted: false, reason: "unsupported", blockers }
 
+      parsed.job.createdAt = new Date(now()).toISOString()
+      parsed.job.lastRunAt = parsed.job.immediate === false ? now() : 0
       parsed.job.name = jobName(parsed.job)
       const state = await readState(scope.directory, scope.sessionID)
       const jobs = Array.isArray(state.jobs) ? state.jobs : []

package/src/source/opencode2/session-location.js

@@ -0,0 +1,16 @@
+import path from 'node:path'
+
+// The plugin location is not evidence about an arbitrary session.
+// Resolve through the host before using the instance's local files.
+export function createNativeSessionLocationGuard({ directory, workspaceID, getSession }) {
+  const expected = path.resolve(directory)
+  return async (sessionID) => {
+    if (typeof sessionID !== 'string' || !sessionID || typeof getSession !== 'function') return false
+    try {
+      const session = await getSession({ sessionID })
+      if (session?.id !== sessionID || typeof session.location?.directory !== 'string' || !path.isAbsolute(session.location.directory)) return false
+      if (path.relative(expected, path.resolve(session.location.directory)) !== '') return false
+      return (session.location.workspaceID ?? '') === (workspaceID ?? '')
+    } catch { return false }
+  }
+}

package/src/source/runtime/goal-steering.js

@@ -62,6 +62,7 @@ export function createGoalSteeringRuntime(options = {}) {
     ? Number(options.seenUserMessageMs)
     : DEFAULT_SEEN_USER_MESSAGE_MS
 
+  const compactingSessions = new Set()
   const pendingSteering = new Map()
   const seenUserMessages = new Map()
 
@@ -134,7 +135,7 @@ export function createGoalSteeringRuntime(options = {}) {
 
     const active = getActiveRun(sessionID)
     const activeGoalIDs = new Set(goals.map((goal) => goal.id))
-    const canPreempt = active && activeGoalIDs.has(active.jobId) && isGoalJob(active.job) && typeof client?.session?.abort === "function"
+    const canPreempt = !compactingSessions.has(sessionID) && active && activeGoalIDs.has(active.jobId) && isGoalJob(active.job) && typeof client?.session?.abort === "function"
     let preempted = false
     let abortError = ""
 
@@ -154,7 +155,8 @@ export function createGoalSteeringRuntime(options = {}) {
           { path: { sessionID }, body: {} },
           { sessionID },
         )
-        clearActiveRun(sessionID)
+        // A foreground turn can replace the active run while abort settles.
+        if (getActiveRun(sessionID) === active) clearActiveRun(sessionID)
         preempted = true
       } catch (error) {
         pendingSteering.delete(sessionID)
@@ -177,10 +179,21 @@ export function createGoalSteeringRuntime(options = {}) {
     observeAssistantMessage(event)
     const user = userMessageFromEvent(event)
     if (!user) return undefined
-    return await handleUserMessage(directory, client, user)
+    // Persisted user-role events include core compaction markers, synthetic
+    // continuations and replayed history. Parts may not even be persisted yet.
+    // Only the pre-dispatch chat.message admission hook is steering authority.
+    if (alreadyHandled(user.sessionID, user.messageID)) return { handled: false, duplicate: true, ...user }
+    return { handled: false, reason: "untrusted-message-event", ...user }
+  }
+
+  function setCompacting(sessionID, value = true) {
+    if (typeof sessionID !== "string" || !sessionID) return
+    if (value) compactingSessions.add(sessionID)
+    else compactingSessions.delete(sessionID)
   }
 
   function clearSession(sessionID) {
+    compactingSessions.delete(sessionID)
     pendingSteering.delete(sessionID)
     const prefix = `${sessionID}\u0000`
     for (const key of seenUserMessages.keys()) if (key.startsWith(prefix)) seenUserMessages.delete(key)
@@ -193,6 +206,7 @@ export function createGoalSteeringRuntime(options = {}) {
     shouldSuppressIdle,
     hasPendingSteering: shouldSuppressIdle,
     pendingForSession,
+    setCompacting,
     clearSession,
   }
 }

package/src/source/runtime/job-workspace.js

@@ -58,10 +58,10 @@ export function createJobWorkspaceRuntime(options = {}) {
     if (!job.branch || job.branchDone) return job
     const branch = safeID(job.branch)
     const inRepo = await runProcess("git", ["rev-parse", "--is-inside-work-tree"], directory, 10_000)
-    if (inRepo.code !== 0) { job.branchDone = true; return job }
+    if (inRepo.code !== 0) { job.branchDone = false; job.branchUnavailable = true; return job }
     let result = await runProcess("git", ["switch", branch], directory, 30_000)
     if (result.code !== 0) result = await runProcess("git", ["switch", "-c", branch], directory, 30_000)
-    job.branchDone = true
+    job.branchDone = result.code === 0
     await toast(client, result.code === 0 ? `Loop branch active: ${branch}` : `Could not switch/create branch: ${branch}`, result.code === 0 ? "success" : "warning")
     await appendLoopLog(directory, "branch", { sessionID, branch, code: result.code })
     return job
@@ -97,6 +97,13 @@ export function createJobWorkspaceRuntime(options = {}) {
 
   async function untilReached(directory, job) {
     if (!job.until) return false
+    // Goal contracts/archives/leases can contain the configured marker too.
+    // None of this control state proves completion of user-project work.
+    const controlRoots = new Set([
+      stateDir(directory),
+      ...["goals", "goal-locks", "goal-handoff-locks", "goal-sequences"]
+        .map((name) => path.join(directory, ".opencode", name)),
+    ].map((root) => path.resolve(root).toLowerCase()))
     const files = ["progress.md", "PROGRESS.md", "todo.md", "TODO.md", "todolist.md", "TODOLIST.md", path.join(".opencode", "opencode-loop", "until.txt")]
     for (const file of files) if (await fileContains(path.resolve(directory, file), job.until)) return true
     let scanned = 0
@@ -108,6 +115,8 @@ export function createJobWorkspaceRuntime(options = {}) {
         if (scanned >= MAX_SCAN_FILES) return false
         if ([".git", "node_modules", "dist", "build", ".next", "coverage"].includes(entry.name)) continue
         const full = path.join(current, entry.name)
+        // Keep the explicit until.txt marker above, but never scan plugin state.
+        if (controlRoots.has(path.resolve(full).toLowerCase())) continue
         if (entry.isDirectory()) { if (await walk(full)) return true }
         else if (entry.isFile() && /\.(md|txt|json|yaml|yml)$/i.test(entry.name)) { scanned++; if (await fileContains(full, job.until)) return true }
       }