@lawaty/lacode 0.1.1 → 0.1.2

package/dist/lacode.js

@@ -2,6 +2,8 @@
 
 // bin/lacode
 import { fileURLToPath } from "node:url";
+import { existsSync, readFileSync } from "node:fs";
+import { spawnSync as spawnSync2 } from "node:child_process";
 
 // src/tunnel/index.ts
 import { spawnSync } from "node:child_process";
@@ -19,6 +21,7 @@ function resolveTunnel(env = process.env) {
   const port = Number(env.OC_TUNNEL_PORT);
   return {
     user: env.OC_LOCAL_USER ?? "",
+    host: env.OC_LOCAL_HOST ?? "",
     port: Number.isFinite(port) && port > 0 ? port : 10022,
     key: env.OC_NOTIFY_KEY ?? join(homedir(), ".ssh", "lacode_notify"),
     connectTimeoutMs: Number(env.OC_CONNECT_TIMEOUT_MS) || 5e3
@@ -41,6 +44,15 @@ var safeText = (raw, fallback, max) => {
 var safeTitle = (raw) => safeText(raw ?? "", "LaCode", 120);
 var safeMessage = (raw) => safeText(raw ?? "", "", 400);
 var FIELD_SEPARATOR = "\n";
+function parsePayload(raw) {
+  const [title, message, urgency, icon] = raw.split(FIELD_SEPARATOR);
+  return {
+    title: safeTitle(title),
+    message: safeMessage(message),
+    urgency: normalizeUrgency(urgency),
+    icon: normalizeIcon(icon)
+  };
+}
 var encodePayload = (request) => [
   safeTitle(request.title),
   safeMessage(request.message),
@@ -59,6 +71,14 @@ var SSH_OPTS = [
   "-o",
   "StrictHostKeyChecking=accept-new"
 ];
+var CONTROL_OPTS = [
+  "-o",
+  "ControlMaster=auto",
+  "-o",
+  "ControlPersist=300",
+  "-o",
+  `ControlPath=${join(homedir(), ".ssh", "lacode-cm-%C")}`
+];
 var run = (command2, args, timeout) => {
   try {
     const result = spawnSync(command2, args, { timeout, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
@@ -120,19 +140,20 @@ function sendLocal(request, platform = process.platform) {
 }
 function sendRemote(request, tunnel) {
   if (!tunnel.user) return { ok: false, detail: "OC_LOCAL_USER is unset; the desktop user for the tunnel is unknown", transport: "remote" };
-  const args = [
-    ...SSH_OPTS,
-    "-o",
-    `ConnectTimeout=${Math.max(1, Math.round(tunnel.connectTimeoutMs / 1e3))}`,
-    "-i",
-    tunnel.key,
-    "-p",
-    String(tunnel.port),
-    `${tunnel.user}@localhost`,
-    "--",
-    encodePayload(request)
-  ];
-  const result = run("ssh", args, tunnel.connectTimeoutMs + 2e3);
+  const connect = ["-o", `ConnectTimeout=${Math.max(1, Math.round(tunnel.connectTimeoutMs / 1e3))}`];
+  if (tunnel.host) {
+    const result2 = run(
+      "ssh",
+      [...SSH_OPTS, ...CONTROL_OPTS, ...connect, "-i", tunnel.key, `${tunnel.user}@${tunnel.host}`, "--", encodePayload(request)],
+      tunnel.connectTimeoutMs + 2e3
+    );
+    return { ok: result2.ok, detail: result2.ok ? void 0 : result2.stderr || result2.detail, transport: "remote" };
+  }
+  const result = run(
+    "ssh",
+    [...SSH_OPTS, ...connect, "-i", tunnel.key, "-p", String(tunnel.port), `${tunnel.user}@localhost`, "--", encodePayload(request)],
+    tunnel.connectTimeoutMs + 2e3
+  );
   return { ok: result.ok, detail: result.ok ? void 0 : result.stderr || result.detail, transport: "remote" };
 }
 function notify(request, env = process.env, platform = process.platform) {
@@ -158,6 +179,7 @@ function describe(env = process.env, platform = process.platform) {
   return {
     running: isRemote(env) ? "remote (over ssh)" : "local",
     user: tunnel.user || "(unset)",
+    host: tunnel.host || "(unset)",
     port: tunnel.port,
     key: tunnel.key,
     channel: localChannel(platform),
@@ -173,8 +195,8 @@ if (!process.features?.typescript) {
     console.error("lacode: this node cannot load TypeScript sources; node >= 22.18 is required.");
     process.exit(1);
   }
-  const { spawnSync: spawnSync2 } = await import("node:child_process");
-  const result = spawnSync2(
+  const { spawnSync: spawnSync3 } = await import("node:child_process");
+  const result = spawnSync3(
     process.execPath,
     ["--experimental-strip-types", "--no-warnings", fileURLToPath(import.meta.url), ...process.argv.slice(2)],
     { stdio: "inherit", env: { ...process.env, LACODE_STRIP_TYPECHECKED: "1" } }
@@ -247,6 +269,41 @@ switch (command) {
     process.exit(0);
     break;
   }
+  case "receive": {
+    const request = parsePayload(process.env.SSH_ORIGINAL_COMMAND ?? "");
+    const result = sendLocal(request);
+    if (!result.ok) console.error(`lacode receive: ${result.detail ?? "not delivered"}`);
+    process.exit(result.ok ? 0 : 1);
+    break;
+  }
+  case "tunnel": {
+    const sub = argv.shift();
+    if (sub !== "setup") {
+      console.error("lacode tunnel: usage: lacode tunnel setup");
+      process.exit(2);
+    }
+    const { user, host, key } = resolveTunnel();
+    const pub = `${key}.pub`;
+    if (!existsSync(key)) {
+      const gen = spawnSync2("ssh-keygen", ["-t", "ed25519", "-N", "", "-C", "lacode-notify", "-f", key], { stdio: ["ignore", "ignore", "inherit"] });
+      if (gen.status !== 0) {
+        console.error("lacode tunnel setup: ssh-keygen failed; create the key by hand and re-run.");
+        process.exit(1);
+      }
+      console.log(`Generated ${key}`);
+    }
+    const pubkey = existsSync(pub) ? readFileSync(pub, "utf8").trim() : "(public key missing)";
+    const self = process.argv[1] ?? "lacode";
+    console.log("\nOn the REMOTE host (where opencode runs), export:");
+    console.log(`  OC_LOCAL_USER=${user || "<desktop-user>"}`);
+    console.log(`  OC_LOCAL_HOST=${host || "<desktop-host>"}`);
+    console.log(`  OC_NOTIFY_KEY=${key}`);
+    console.log("\nAdd ONE line to the DESKTOP's ~/.ssh/authorized_keys (this is the trust boundary):");
+    console.log(`  restrict,command="${self} receive" ${pubkey}`);
+    console.log("\nDirect ssh + ControlPersist: no reverse forward, no systemd unit, no port, nothing to sync.");
+    process.exit(0);
+    break;
+  }
   default:
     console.error(`lacode: unknown command ${JSON.stringify(safeTitle(command))}`);
     console.error(USAGE);

package/dist/pool.js

@@ -10,12 +10,13 @@ var CATALOG_TTL_MS = 10 * 60 * 1e3;
 var STUCK_MIN_AGE_MS = 5 * 60 * 1e3;
 var STUCK_IDLE_MS = 3 * 60 * 1e3;
 var HANG_COOLDOWN_MS = 10 * 60 * 1e3;
+var UNAVAILABLE_COOLDOWN_MS = 60 * 1e3;
 var MAX_WEIGHT = 100;
 var MAX_SLOTS = 4;
 var COOLDOWN_BASE_MS = 60 * 1e3;
 var COOLDOWN_MAX_MS = 15 * 60 * 1e3;
 var STRIKE_DECAY_MS = 30 * 60 * 1e3;
-var BASES = ["explore-fast", "implement-fast", "context-manager"];
+var BASES = ["explore", "implement", "context"];
 var findPackageRoot = (start) => {
   let dir = start;
   for (let up = 0; up < 6; up++) {
@@ -141,6 +142,7 @@ function readWeight(entry, at, model, problems) {
   }
   return weight;
 }
+var UNAVAILABLE_PATTERN = /endpoint\s+is\s+unavailable/i;
 var LIMIT_PATTERNS = [
   /rate[\s_-]?limit/i,
   /usage limit/i,
@@ -148,9 +150,11 @@ var LIMIT_PATTERNS = [
   /\b429\b/,
   /quota/i,
   /freelimiterror/i,
-  /overloaded/i
+  /overloaded/i,
+  UNAVAILABLE_PATTERN
 ];
 var isLimitText = (text) => LIMIT_PATTERNS.some((re) => re.test(text));
+var isUnavailableText = (text) => UNAVAILABLE_PATTERN.test(text);
 var statedCooldown = (text) => {
   const hm = /resets?\s+in\s+(\d+)\s*(?:h|hr|hour)s?\s*(\d+)?\s*(?:m|min|minute)?s?/i.exec(text);
   if (hm) return (Number(hm[1]) * 60 + (hm[2] ? Number(hm[2]) : 0)) * 60 * 1e3;
@@ -332,6 +336,22 @@ function recordStrike(s, model, reason, stated) {
   }
   return strike;
 }
+function coolUnavailable(s, model) {
+  if (!s.dirReady) return;
+  const now = Date.now();
+  const prior = s.cooling.get(model);
+  const until = now + UNAVAILABLE_COOLDOWN_MS;
+  if (prior && prior.until > until) return prior;
+  const strike = { model, until, strikes: 1, reason: "endpoint-unavailable", last: now };
+  s.cooling.set(model, strike);
+  const path = join(s.dir, limitFile(model));
+  try {
+    writeFileSync(`${path}.tmp`, JSON.stringify(strike));
+    renameSync(`${path}.tmp`, path);
+  } catch {
+  }
+  return strike;
+}
 function refreshCatalog(s, serverUrl) {
   if (!serverUrl || Date.now() - s.catalogAt < CATALOG_TTL_MS) return;
   s.catalogAt = Date.now();
@@ -448,6 +468,7 @@ export {
   PRESETS_DIR,
   STUCK_IDLE_MS,
   STUCK_MIN_AGE_MS,
+  UNAVAILABLE_COOLDOWN_MS,
   USER_CONFIG_DIR,
   USER_MODELS_PATH,
   acquire,
@@ -455,6 +476,7 @@ export {
   bindChild,
   claimKey,
   coolProvider,
+  coolUnavailable,
   ensureSlots,
   ensureUserConfigDir,
   findStuck,
@@ -462,6 +484,7 @@ export {
   init,
   isAvailable,
   isLimitText,
+  isUnavailableText,
   noteActivity,
   parseSlots,
   pickSlot,

package/dist/tunnel.js

@@ -14,6 +14,7 @@ function resolveTunnel(env = process.env) {
   const port = Number(env.OC_TUNNEL_PORT);
   return {
     user: env.OC_LOCAL_USER ?? "",
+    host: env.OC_LOCAL_HOST ?? "",
     port: Number.isFinite(port) && port > 0 ? port : 10022,
     key: env.OC_NOTIFY_KEY ?? join(homedir(), ".ssh", "lacode_notify"),
     connectTimeoutMs: Number(env.OC_CONNECT_TIMEOUT_MS) || 5e3
@@ -36,6 +37,15 @@ var safeText = (raw, fallback, max) => {
 var safeTitle = (raw) => safeText(raw ?? "", "LaCode", 120);
 var safeMessage = (raw) => safeText(raw ?? "", "", 400);
 var FIELD_SEPARATOR = "\n";
+function parsePayload(raw) {
+  const [title, message, urgency, icon] = raw.split(FIELD_SEPARATOR);
+  return {
+    title: safeTitle(title),
+    message: safeMessage(message),
+    urgency: normalizeUrgency(urgency),
+    icon: normalizeIcon(icon)
+  };
+}
 var encodePayload = (request) => [
   safeTitle(request.title),
   safeMessage(request.message),
@@ -54,6 +64,14 @@ var SSH_OPTS = [
   "-o",
   "StrictHostKeyChecking=accept-new"
 ];
+var CONTROL_OPTS = [
+  "-o",
+  "ControlMaster=auto",
+  "-o",
+  "ControlPersist=300",
+  "-o",
+  `ControlPath=${join(homedir(), ".ssh", "lacode-cm-%C")}`
+];
 var run = (command, args, timeout) => {
   try {
     const result = spawnSync(command, args, { timeout, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
@@ -115,19 +133,20 @@ function sendLocal(request, platform = process.platform) {
 }
 function sendRemote(request, tunnel) {
   if (!tunnel.user) return { ok: false, detail: "OC_LOCAL_USER is unset; the desktop user for the tunnel is unknown", transport: "remote" };
-  const args = [
-    ...SSH_OPTS,
-    "-o",
-    `ConnectTimeout=${Math.max(1, Math.round(tunnel.connectTimeoutMs / 1e3))}`,
-    "-i",
-    tunnel.key,
-    "-p",
-    String(tunnel.port),
-    `${tunnel.user}@localhost`,
-    "--",
-    encodePayload(request)
-  ];
-  const result = run("ssh", args, tunnel.connectTimeoutMs + 2e3);
+  const connect = ["-o", `ConnectTimeout=${Math.max(1, Math.round(tunnel.connectTimeoutMs / 1e3))}`];
+  if (tunnel.host) {
+    const result2 = run(
+      "ssh",
+      [...SSH_OPTS, ...CONTROL_OPTS, ...connect, "-i", tunnel.key, `${tunnel.user}@${tunnel.host}`, "--", encodePayload(request)],
+      tunnel.connectTimeoutMs + 2e3
+    );
+    return { ok: result2.ok, detail: result2.ok ? void 0 : result2.stderr || result2.detail, transport: "remote" };
+  }
+  const result = run(
+    "ssh",
+    [...SSH_OPTS, ...connect, "-i", tunnel.key, "-p", String(tunnel.port), `${tunnel.user}@localhost`, "--", encodePayload(request)],
+    tunnel.connectTimeoutMs + 2e3
+  );
   return { ok: result.ok, detail: result.ok ? void 0 : result.stderr || result.detail, transport: "remote" };
 }
 function notify(request, env = process.env, platform = process.platform) {
@@ -153,6 +172,7 @@ function describe(env = process.env, platform = process.platform) {
   return {
     running: isRemote(env) ? "remote (over ssh)" : "local",
     user: tunnel.user || "(unset)",
+    host: tunnel.host || "(unset)",
     port: tunnel.port,
     key: tunnel.key,
     channel: localChannel(platform),
@@ -172,6 +192,7 @@ export {
   normalizeIcon,
   normalizeUrgency,
   notify,
+  parsePayload,
   resolveTunnel,
   safeMessage,
   safeTitle,

package/docs/CONTEXT.md

@@ -69,14 +69,14 @@ something has gone wrong.
 
 ## How it stays current
 
-The `context-manager` agent maintains the map. It runs in two ways: on its own,
+The `context` agent maintains the map. It runs in two ways: on its own,
 after a session that changed something, and on demand through the three
 commands — both of which go through the same agent, so they behave the same way.
 
 ### Automatically
 
 After a **root** session goes idle, and only if that session edited a file
-inside the project, LaCode starts a `context-manager` run:
+inside the project, LaCode starts a `context` run:
 
 1. It collects the paths the session touched, dropping anything generated,
    vendored or outside the project (`node_modules`, `dist`, `coverage`,
@@ -123,7 +123,7 @@ as you wrote it — the same merge-without-clobber rule the agents follow.
 
 ## One writer
 
-Only `context-manager` writes the map. Every other agent is told never to edit
+Only `context` writes the map. Every other agent is told never to edit
 it, and to say in its final report if its work revealed something that belongs
 in there. The cartographer, in turn, is denied permission to write anything
 outside the map — not by convention, but by an `edit` rule that allows
@@ -199,7 +199,7 @@ thing to check is that permission rule, not the map's content.
 | `auto update finished without changing the map` | Nothing landed. Either nothing needed saying, or the cartographer could not write. |
 | `auto update failed: …` | The run errored. The paths it was given are queued again for the next window, so the work is not lost. |
 | `context map is not writable: …` | Your config's one-writer rule does not match the path opencode evaluates. Nothing will update until you fix it. |
-| `context map has more than one writer: …` | An agent other than `context-manager` would be granted the map. The offending agent and the winning rule are named. |
+| `context map has more than one writer: …` | An agent other than `context` would be granted the map. The offending agent and the winning rule are named. |
 
 ## Reference
 

package/docs/TUNNEL.md

@@ -19,7 +19,15 @@ gets it back.
   └──────────────────┘                          └────────────────────────┘
 ```
 
-Two things are load-bearing here.
+**Direct ssh (the default).** Set `OC_LOCAL_HOST` and the hop is a plain `ssh`
+to the desktop with `ControlMaster=auto` + `ControlPersist`, so one warm
+connection carries every notification. There is no reverse forward, no listening
+port, no systemd unit and nothing to sync: the plugin owns the transport. The
+desktop needs one `authorized_keys` line, which `lacode tunnel setup` prints. The
+reverse-forward description below is the legacy path, used only when
+`OC_LOCAL_HOST` is unset.
+
+**Reverse forward (legacy).** Two things are load-bearing here.
 
 **The reverse forward.** The remote opens an SSH connection to *your* machine
 and asks sshd on the desktop to listen on a port. A notification is then an ssh
@@ -74,7 +82,8 @@ useful on a Mac rather than reporting only whether a Linux binary is installed.
 
 | Variable | Default | Meaning |
 | --- | --- | --- |
-| `OC_LOCAL_USER` | *(unset)* | The desktop user the tunnel authenticates as. **Required for the remote hop.** |
+| `OC_LOCAL_USER` | *(unset)* | The desktop user the hop authenticates as. **Required for the remote hop.** |
+| `OC_LOCAL_HOST` | *(unset)* | Desktop hostname for the **direct ssh** hop. Set it and the reverse forward/port/systemd unit are not used at all. |
 | `OC_TUNNEL_PORT` | `10022` | Reverse-forward listener port on the desktop. Give each remote host its own. |
 | `OC_NOTIFY_KEY` | `~/.ssh/lacode_notify` | The dedicated key. Never a personal key. |
 | `OC_CONNECT_TIMEOUT_MS` | `5000` | Ceiling on the hop. |

package/docs/USER-STORIES.md

@@ -16,7 +16,7 @@ document; everything here is testable offline with a stub client and a
 `mkdtempSync` state directory.
 
 **Terminology.** A *slot* is one entry in `presets/free-tier.json`, carrying a
-model and a `weight`. A *base* is a pooled agent type (`explore-fast`), and its slot
+model and a `weight`. A *base* is a pooled agent type (`explore`), and its slot
 holders are `<base>-<slot>`, hidden in `opencode.jsonc`. A *claim* is a running
 spawn recorded in `claims.<pid>.json`. A *context map* is the five-file
 `.opencode/context/` codemap described in Epic G.
@@ -45,7 +45,7 @@ spawn recorded in `claims.<pid>.json`. A *context map* is the five-file
 **Story ID(s) for tests:** US-1
 **Acceptance criteria:**
 - [ ] Given the root agent `build` with read/glob/grep denied, When a read-family tool is invoked, Then the call is denied and the agent is pointed at an exploration base rather than executing inline.
-- [ ] Given a pooled base such as `explore-fast` is spawned, When the plugin rewrites the spawn, Then the concrete model selected is a slot declared in `presets/free-tier.json`.
+- [ ] Given a pooled base such as `explore` is spawned, When the plugin rewrites the spawn, Then the concrete model selected is a slot declared in `presets/free-tier.json`.
 - [ ] Given a pool whose slots are all zero-cost, When N exploration spawns run, Then none of them is dispatched to a paid model.
 
 ### US-2: One knob selects the exploration/implementation model
@@ -125,9 +125,9 @@ The reconciliation with US-7 is that **acceptance and endorsement are different
 - [ ] Given a slot names a paid model, When the pool loads, Then the slot is accepted and routed to without a free-tier filter rejecting it.
 - [ ] Given a model id contains a vendor prefix with slashes (e.g. `openrouter/nvidia/model:free`), When it is split into provider and model id, Then the split is on the first slash only and the id tail is preserved.
 - [ ] Given more slots are declared than the pool allows, When the pool loads, Then the surplus entries are dropped with a warning naming the cap.
-- [ ] Given a provider configured with **no** `whitelist` key, When the config hook binds a slot or a `deepModel` on that provider, Then no `whitelist` is written for it, because an absent whitelist already allows every model the provider offers.
-- [ ] Given a provider the pool never names a slot or a `deepModel` on, When the config hook runs, Then that provider entry is left exactly as it was, with no `whitelist` key added.
-- [ ] Given a provider that already carries a `whitelist`, When the config hook binds a slot model or a `deepModel` on it, Then the model id is appended and every entry the user wrote is preserved in order.
+- [ ] Given a provider configured with **no** `whitelist` key, When the config hook binds a slot on that provider, Then no `whitelist` is written for it, because an absent whitelist already allows every model the provider offers.
+- [ ] Given a provider the pool never names a slot on, When the config hook runs, Then that provider entry is left exactly as it was, with no `whitelist` key added.
+- [ ] Given a provider that already carries a `whitelist`, When the config hook binds a slot model on it, Then the model id is appended and every entry the user wrote is preserved in order.
 - [ ] Given any provider after the config hook has run, When its whitelist is inspected, Then it is either absent or non-empty, because an empty allowlist names no model at all and opencode deletes the provider outright.
 
 `provider.<name>.whitelist` is an **allowlist**, not a to-do list: opencode
@@ -183,7 +183,8 @@ does not.
 **Story ID(s) for tests:** US-11
 **Acceptance criteria:**
 - [ ] Given a session went busy and is now idle, When the idle event fires, Then a `done` notification is delivered.
-- [ ] Given a session errors, When the error event fires, Then an `error` notification is delivered and it bypasses the duplicate-suppression cooldown.
+- [ ] Given a session ends with an unrecognized error, When the error event fires, Then an `error` notification is delivered, it bypasses the duplicate-suppression cooldown, and it carries the error's own message.
+- [ ] Given a recognized rate-limit or quota error, or a user abort, When a session error event fires, Then no failure notification is raised — the pool already handles the former and the user already knows the latter.
 - [ ] Given a session that never went busy, When it goes idle, Then no notification is sent.
 - [ ] Given a subagent session or a cartographer session, When it goes idle, Then it is suppressed.
 - [ ] Given the notify helper exits non-zero or writes to stderr, When the result is evaluated, Then the delivery is reported as failed rather than sent.
@@ -329,17 +330,17 @@ makes agents read it before they explore, then keeps it current on its own.
 
 **Story ID(s) for tests:** US-19
 **Acceptance criteria:**
-- [ ] Given a config that defines none of LaCode's agents, When the config hook runs, Then a `context-manager` subagent is injected, and it carries no model of its own, because the pool is the only thing that decides which model runs it.
-- [ ] Given the injected agent set, When the slot variants are built, Then a hidden `context-manager-<slot>` variant exists for every slot the pool can hand out, so a cartography run borrows shared capacity instead of a dedicated model.
+- [ ] Given a config that defines none of LaCode's agents, When the config hook runs, Then a `context` subagent is injected, and it carries no model of its own, because the pool is the only thing that decides which model runs it.
+- [ ] Given the injected agent set, When the slot variants are built, Then a hidden `context-<slot>` variant exists for every slot the pool can hand out, so a cartography run borrows shared capacity instead of a dedicated model.
 - [ ] Given a user config with no `instructions` array, When the config hook runs, Then the standing context-map rule is injected, naming all five map files, telling the agent to check with `ls` and never the `glob` tool, to read only the file relevant to the task, and to start from the canonical entry points the map lists.
-- [ ] Given the injected `context-manager`, When its prompt is inspected, Then it names the five files it owns, requires a short "Start here" list of canonical files per significant subsystem, and forbids file inventories — the map answers "what should I look at first?", never "tell me everything".
+- [ ] Given the injected `context`, When its prompt is inspected, Then it names the five files it owns, requires a short "Start here" list of canonical files per significant subsystem, and forbids file inventories — the map answers "what should I look at first?", never "tell me everything".
 
 ### US-20: The map stays current without being asked
 **As a** user, **I want** the map refreshed automatically after a session that edited code, **so that** agents are never misled by stale documentation.
 
 **Story ID(s) for tests:** US-20
 **Acceptance criteria:**
-- [ ] Given a file inside the project was edited, When the root session next goes idle, Then a `context-manager` session is created and prompted with the edited paths listed, rather than nothing happening.
+- [ ] Given a file inside the project was edited, When the root session next goes idle, Then a `context` session is created and prompted with the edited paths listed, rather than nothing happening.
 - [ ] Given `.opencode/context/` does not exist, When the automatic run fires, Then it is told to bootstrap the map; given that the directory exists, Then it is told to make an incremental update.
 - [ ] Given an idle event with no pending edit, or one from a subagent session, or one following an edit inside the map itself or inside a build directory, Then no cartographer is spawned.
 - [ ] Given an automatic run borrowed a pool slot, When it completes, Then the slot is released and the cartographer session going idle does not spawn a second run.
@@ -351,15 +352,15 @@ makes agents read it before they explore, then keeps it current on its own.
 
 **Story ID(s) for tests:** US-21
 
-Enforcement is split deliberately, and the split matters: **what the permission table enforces** is that `context-manager` can write the map and that *no other agent can*; **what the prompt enforces** is that every other agent knows to report map-relevant findings instead of making them. The permission half is the load-bearing one — it holds regardless of what the model decides to do — but it cannot tell an agent what it *should* have done, so the instruction is not redundant and is not going away.
+Enforcement is split deliberately, and the split matters: **what the permission table enforces** is that `context` can write the map and that *no other agent can*; **what the prompt enforces** is that every other agent knows to report map-relevant findings instead of making them. The permission half is the load-bearing one — it holds regardless of what the model decides to do — but it cannot tell an agent what it *should* have done, so the instruction is not redundant and is not going away.
 
 **Acceptance criteria:**
-- [ ] Given the injected agent set, When every agent's `edit` permission is evaluated against a path inside `.opencode/context/`, Then `context-manager` is the only agent whose winning rule for that path is `allow`, and every agent that may otherwise write files carries a `deny` on both spellings of the map path — so the map is closed to non-cartographers by permission, not only by instruction.
+- [ ] Given the injected agent set, When every agent's `edit` permission is evaluated against a path inside `.opencode/context/`, Then `context` is the only agent whose winning rule for that path is `allow`, and every agent that may otherwise write files carries a `deny` on both spellings of the map path — so the map is closed to non-cartographers by permission, not only by instruction.
 - [ ] Given an agent's `edit` rules are evaluated the way opencode evaluates them, When the narrow map `deny` is declared before a broad `"*": "allow"`, Then the broad rule wins and the agent is reported as a second writer; so the deny is required to be the LAST entry, and the shipped table must be declared in that order.
-- [ ] Given the `context-manager` permission rule, When it is evaluated for a normally-rooted project and for a project rooted at `/`, Then both spellings of the map path are allowed, because opencode evaluates file permissions relative to the project root.
+- [ ] Given the `context` permission rule, When it is evaluated for a normally-rooted project and for a project rooted at `/`, Then both spellings of the map path are allowed, because opencode evaluates file permissions relative to the project root.
 - [ ] Given a config whose one-writer rule allows neither spelling, When the writer rule is verified, Then it reports which rules it saw, that the map is not writable, and that both forms are required — instead of leaving a map that silently never updates.
 - [ ] Given a config in which a non-cartographer agent would be granted the map, When the writer rule is verified, Then it reports that agent by name together with the rule that wins for it, and the report is silent once the deny is narrowed and placed last.
-- [ ] Given an agent other than `context-manager` finishes work, When the standing rule reaches it, Then it is told never to edit the map itself and to report what belongs in it instead, so that a denied agent knows what to do rather than only that it was refused.
+- [ ] Given an agent other than `context` finishes work, When the standing rule reaches it, Then it is told never to edit the map itself and to report what belongs in it instead, so that a denied agent knows what to do rather than only that it was refused.
 - [ ] Given `edit` is denied for the map, When the same agents read the map, Then reading is unaffected: the rule narrows the `edit` tool only, so the map stays readable by exactly the agents that are told to check it.
 
 ### US-22: On-demand map operations
@@ -367,7 +368,7 @@ Enforcement is split deliberately, and the split matters: **what the permission
 
 **Story ID(s) for tests:** US-22
 **Acceptance criteria:**
-- [ ] Given a config that defines none of LaCode's commands, When the config hook runs, Then `/context-init`, `/context-update` and `/context-review` are injected, each targeting `context-manager` as a subtask.
+- [ ] Given a config that defines none of LaCode's commands, When the config hook runs, Then `/context-init`, `/context-update` and `/context-review` are injected, each targeting `context` as a subtask.
 - [ ] Given an injected command template, When opencode substitutes `$ARGUMENTS`, Then `/context-update` carries the user's focus text in the placeholder's place and the procedure around it is unchanged.
 - [ ] Given the three commands have been injected, When their templates are inspected, Then each names the procedure it delegates to (bootstrap, incremental update, or review) and none carries an unsubstituted placeholder other than `/context-update`'s single `$ARGUMENTS`.
 - [ ] Given the user's config already defines one of the three commands, When the config hook runs, Then that command is left byte-identical while the other two are still added.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lawaty/lacode",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Ultimate opencode setup for Go users — cost-controlled pooled subagents, hang recovery, and notifications for opencode.",
   "license": "MIT",
   "type": "module",

package/presets/free-tier.json

@@ -4,7 +4,7 @@
     "plugin options -> ~/.config/lacode/pool.json -> this file -> a built-in fallback.",
     "",
     "src/lib/pool.ts reads it at config time and rewrites every pooled variant agent",
-    "(explore-fast-N, implement-fast-N, context-manager-N) plus the provider whitelists",
+    "(explore-N, implement-N, context-N) plus the provider whitelists",
     "to match, so no model is written down next to an agent anywhere.",
     "Slot N is the same model for every base agent, which is what makes load shared.",
     "",