@lawaty/lacode 0.1.5 → 0.1.7

package/README.md

@@ -283,6 +283,19 @@ option is optional:
 | `models` | — | An inline slot list. Highest-priority source. |
 | `modelsFile` | — | An explicit slot file; short-circuits the chain below. |
 | `reapMs` | `30000` | Hang-reaper interval. |
+| `selfUpdate` | `true` | Check for a newer release at most once per ~6h and install it in the background; it applies on the next opencode start. `false` — or `LACODE_NO_SELFUPDATE=1` — turns the check off. |
+
+### Staying up to date
+
+opencode's plugin cache is **write-once**: it resolves `@lawaty/lacode` to an
+exact version once and never re-resolves — not on restart, not with
+`opencode plugin -g -f`, not with a range pin, not with a tagged config spec. So
+LaCode keeps itself current instead (US-27): at startup it compares its own
+version to npm's `latest` (at most once per ~6h, silent when offline) and, when
+behind, reinstalls its own cache entry in the background using the opencode
+binary — no npm or bun required. The running session keeps its loaded code; the
+new version takes effect on the next start, and the log says so. Run
+`lacode update` to do it on demand, or `lacode update --check` to just report.
 
 ### Pool preset resolution
 

package/dist/agents.js

@@ -1,25 +1,18 @@
 // src/lib/pool.ts
-import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readdirSync, readFileSync as readFileSync2, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
+import { join as join2 } from "node:path";
+
+// src/lib/package-root.ts
+import { readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-var CLAIM_TTL_MS = 10 * 60 * 1e3;
-var DEAD_FILE_MS = 2 * CLAIM_TTL_MS;
-var ORPHAN_TMP_MS = 60 * 1e3;
-var CATALOG_TTL_MS = 10 * 60 * 1e3;
-var STUCK_MIN_AGE_MS = 5 * 60 * 1e3;
-var STUCK_IDLE_MS = 3 * 60 * 1e3;
-var HANG_COOLDOWN_MS = 10 * 60 * 1e3;
-var UNAVAILABLE_COOLDOWN_MS = 60 * 1e3;
-var MAX_SLOTS = 4;
-var COOLDOWN_BASE_MS = 60 * 1e3;
-var COOLDOWN_MAX_MS = 15 * 60 * 1e3;
-var STRIKE_DECAY_MS = 30 * 60 * 1e3;
+var PACKAGE_NAME = "@lawaty/lacode";
 var findPackageRoot = (start) => {
   let dir = start;
   for (let up = 0; up < 6; up++) {
     try {
-      if (JSON.parse(readFileSync(join(dir, "package.json"), "utf8")).name === "@lawaty/lacode") return dir;
+      if (JSON.parse(readFileSync(join(dir, "package.json"), "utf8")).name === PACKAGE_NAME) return dir;
     } catch {
     }
     const parent = dirname(dir);
@@ -29,11 +22,25 @@ var findPackageRoot = (start) => {
   return join(start, "..", "..");
 };
 var PACKAGE_ROOT = findPackageRoot(dirname(fileURLToPath(import.meta.url)));
-var PRESETS_DIR = join(PACKAGE_ROOT, "presets");
-var DEFAULT_PRESET = join(PRESETS_DIR, "free-tier.json");
-var USER_CONFIG_DIR = join(homedir(), ".config", "lacode");
-var USER_MODELS_PATH = join(USER_CONFIG_DIR, "pool.json");
-var USER_MODELS_TXT = join(USER_CONFIG_DIR, "pool.txt");
+
+// src/lib/pool.ts
+var CLAIM_TTL_MS = 10 * 60 * 1e3;
+var DEAD_FILE_MS = 2 * CLAIM_TTL_MS;
+var ORPHAN_TMP_MS = 60 * 1e3;
+var CATALOG_TTL_MS = 10 * 60 * 1e3;
+var STUCK_MIN_AGE_MS = 5 * 60 * 1e3;
+var STUCK_IDLE_MS = 3 * 60 * 1e3;
+var HANG_COOLDOWN_MS = 10 * 60 * 1e3;
+var UNAVAILABLE_COOLDOWN_MS = 60 * 1e3;
+var MAX_SLOTS = 4;
+var COOLDOWN_BASE_MS = 60 * 1e3;
+var COOLDOWN_MAX_MS = 15 * 60 * 1e3;
+var STRIKE_DECAY_MS = 30 * 60 * 1e3;
+var PRESETS_DIR = join2(PACKAGE_ROOT, "presets");
+var DEFAULT_PRESET = join2(PRESETS_DIR, "free-tier.json");
+var USER_CONFIG_DIR = join2(homedir(), ".config", "lacode");
+var USER_MODELS_PATH = join2(USER_CONFIG_DIR, "pool.json");
+var USER_MODELS_TXT = join2(USER_CONFIG_DIR, "pool.txt");
 
 // src/agents.ts
 var POOLED_BASES = ["explore", "implement", "context"];
@@ -58,13 +65,45 @@ Every question of the form "what does this file do", "where is X handled", or
   ("read src/auth.ts", "grep for 'migration' in *.py", "list the src/
   directory"), one batch per question. Ask for the exact lines or
   file:line references you need, not a survey.
-- **Implementation \u2192 @implement**, with a finalized plan: the exact
-  steps, the files to touch, and the constraints you already learned from the
-  explorers. It edits, writes, and runs tests.
+- **Implementation \u2192 @implement**, one decided unit at a time: the exact
+  steps, the exact files, the design you have already chosen, and the command
+  that proves it. Never one whole refactor handed over in a single piece \u2014
+  see \`# Task size\` below.
 
 The agents you spawn are the pooled \`explore\` / \`implement\` bases \u2014
 spawn the bare name and let the pool route, never a \`-1\`/\`-2\` slot variant.
 
+# Task size
+
+\`@implement\` runs on a cheap pooled model. It can carry out a decision; it
+cannot make one. So what you hand it is always a small ask \u2014 never a mid or
+large task.
+
+A small ask is one change, one concern, already decided by you. Before handing
+it over you should have explored, through \`@explore\`, far enough to know what
+the change is and to have chosen the design: which class or value object, which
+members, what becomes a \`static\`, what gets deleted. \`@implement\` executes that
+choice. It never invents one.
+
+It does not have to arrive fully pre-digested. Letting it find the call sites,
+read the code around them and work out which files it touches is normal and
+expected \u2014 that is exploration an agent should be free to do. What it must never
+be handed is a problem to solve.
+
+Too small is fine and costs little. Too large is the failure: "convert the
+decode modules into named units, decide which are dead, keep the output
+byte-identical, verify conformance and report" is not a task, it is the whole
+project. A cheap agent handed it will improvise a design, skip the verification
+you never spelled out, and return something you cannot trust.
+
+When the work does not divide into small asks it is not implementation work
+yet \u2014 send it to \`@plan\`, or keep it yourself.
+
+Split into one ask per task, spawn independent asks together in a single
+message so they run in parallel, and sequence only what truly depends on what.
+If a returned ask turns out to need a decision you did not make, you make the
+call and hand out a corrected ask.
+
 # What stays yours
 
 \`edit\`, \`write\`, and \`bash\` are available to you. Use them to apply what a
@@ -275,6 +314,25 @@ write, and run code/bash to make the plan's changes real. Work from the plan
 as given \u2014 if it's ambiguous or you believe it's wrong, say so explicitly
 rather than silently improvising a different approach.
 
+# Before you start
+
+The ask you receive is a small one, and it is already decided: the change is
+specified and the design is chosen. Work from it as given rather than silently
+substituting an approach of your own.
+
+Expect to do your own locating. Finding the call sites, reading what you touch
+and working out which files are involved is normal work, not a sign of a bad
+brief \u2014 do it without asking.
+
+What is not yours to do is decide. If the ask asks you to choose an approach,
+pick the right abstraction, settle a judgement call, or work out what the
+requirement even is, stop and report that back instead of improvising. A
+confident wrong design costs more than no change at all.
+
+Size works the same way. A small ask that turns out to be bigger than it looked
+is a signal to come back and say so: complete the part that is decided, and
+report precisely what else needs deciding.
+
 Make changes incrementally where possible, and verify your own work (run
 tests/build/lint if available) before considering a step done.
 

package/dist/index.js

@@ -1,8 +1,29 @@
 // src/lib/pool.ts
-import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readdirSync, readFileSync as readFileSync2, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
+import { join as join2 } from "node:path";
+
+// src/lib/package-root.ts
+import { readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
+var PACKAGE_NAME = "@lawaty/lacode";
+var findPackageRoot = (start) => {
+  let dir = start;
+  for (let up = 0; up < 6; up++) {
+    try {
+      if (JSON.parse(readFileSync(join(dir, "package.json"), "utf8")).name === PACKAGE_NAME) return dir;
+    } catch {
+    }
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return join(start, "..", "..");
+};
+var PACKAGE_ROOT = findPackageRoot(dirname(fileURLToPath(import.meta.url)));
+
+// src/lib/pool.ts
 var CLAIM_TTL_MS = 10 * 60 * 1e3;
 var DEAD_FILE_MS = 2 * CLAIM_TTL_MS;
 var ORPHAN_TMP_MS = 60 * 1e3;
@@ -17,30 +38,16 @@ var COOLDOWN_BASE_MS = 60 * 1e3;
 var COOLDOWN_MAX_MS = 15 * 60 * 1e3;
 var STRIKE_DECAY_MS = 30 * 60 * 1e3;
 var BASES = ["explore", "implement", "context"];
-var findPackageRoot = (start) => {
-  let dir = start;
-  for (let up = 0; up < 6; up++) {
-    try {
-      if (JSON.parse(readFileSync(join(dir, "package.json"), "utf8")).name === "@lawaty/lacode") return dir;
-    } catch {
-    }
-    const parent = dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return join(start, "..", "..");
-};
-var PACKAGE_ROOT = findPackageRoot(dirname(fileURLToPath(import.meta.url)));
-var PRESETS_DIR = join(PACKAGE_ROOT, "presets");
-var DEFAULT_PRESET = join(PRESETS_DIR, "free-tier.json");
-var USER_CONFIG_DIR = join(homedir(), ".config", "lacode");
-var USER_MODELS_PATH = join(USER_CONFIG_DIR, "pool.json");
-var USER_MODELS_TXT = join(USER_CONFIG_DIR, "pool.txt");
+var PRESETS_DIR = join2(PACKAGE_ROOT, "presets");
+var DEFAULT_PRESET = join2(PRESETS_DIR, "free-tier.json");
+var USER_CONFIG_DIR = join2(homedir(), ".config", "lacode");
+var USER_MODELS_PATH = join2(USER_CONFIG_DIR, "pool.json");
+var USER_MODELS_TXT = join2(USER_CONFIG_DIR, "pool.txt");
 var FALLBACK_SLOTS = [
   { index: 1, model: "opencode/space-bunny-free", weight: 3 },
-  { index: 2, model: "openrouter/nvidia/nemotron-3-ultra-550b-a55b:free", weight: 2 },
+  { index: 2, model: "opencode-go/step-5-preview-free", weight: 2 },
   { index: 3, model: "opencode/big-pickle", weight: 1 },
-  { index: 4, model: "openrouter/thinkingmachines/inkling:free", weight: 1 }
+  { index: 4, model: "opencode/step-5-preview-free", weight: 1 }
 ];
 function parseSlots(parsed, origin) {
   const problems = [];
@@ -89,7 +96,7 @@ function parseSlotText(text, origin) {
 }
 var readJSON = (path4) => {
   try {
-    return { ok: true, value: JSON.parse(readFileSync(path4, "utf8")) };
+    return { ok: true, value: JSON.parse(readFileSync2(path4, "utf8")) };
   } catch (error) {
     return { ok: false, error: String(error) };
   }
@@ -105,7 +112,7 @@ function readOptional(path4, origin, problems) {
 function readTextOptional(path4, origin, problems) {
   if (!existsSync(path4)) return void 0;
   try {
-    return readFileSync(path4, "utf8");
+    return readFileSync2(path4, "utf8");
   } catch (error) {
     problems.push(`${origin} unreadable (${String(error)}); trying the next source`);
     return void 0;
@@ -147,7 +154,7 @@ function resolveModels(input = {}) {
 function readSlotFile(path4) {
   let text;
   try {
-    text = readFileSync(path4, "utf8");
+    text = readFileSync2(path4, "utf8");
   } catch (error) {
     return { slots: FALLBACK_SLOTS, problems: [`${path4} unreadable (${String(error)}); using built-in defaults`] };
   }
@@ -215,7 +222,7 @@ var retryAfterMs = (headers) => {
 };
 function state(opts = {}) {
   const id = opts.id ?? String(process.pid);
-  const dir = opts.dir ?? join(homedir(), ".local", "share", "opencode", "agent-pool");
+  const dir = opts.dir ?? join2(homedir(), ".local", "share", "opencode", "agent-pool");
   const modelsFile = opts.modelsFile;
   const models = opts.models;
   const key = /* @__PURE__ */ Symbol.for(`agent-pool:state:${id}:${dir}:${modelsFile ?? ""}:${models === void 0 ? "" : "inline"}`);
@@ -264,7 +271,7 @@ function init(s, onWarn) {
     mkdirSync(s.dir, { recursive: true });
     s.dirReady = true;
     try {
-      unlinkSync(join(s.dir, selfFile(s.id)));
+      unlinkSync(join2(s.dir, selfFile(s.id)));
     } catch {
     }
   } catch {
@@ -281,8 +288,8 @@ function publish(s) {
   const payload = {};
   for (const [key, claim] of s.own) if (now - claim.t <= CLAIM_TTL_MS) payload[key] = claim;
   try {
-    writeFileSync(join(s.dir, `${selfFile(s.id)}.tmp`), JSON.stringify(payload));
-    renameSync(join(s.dir, `${selfFile(s.id)}.tmp`), join(s.dir, selfFile(s.id)));
+    writeFileSync(join2(s.dir, `${selfFile(s.id)}.tmp`), JSON.stringify(payload));
+    renameSync(join2(s.dir, `${selfFile(s.id)}.tmp`), join2(s.dir, selfFile(s.id)));
   } catch {
     s.dirReady = false;
   }
@@ -297,7 +304,7 @@ function readSiblings(s) {
   }
   const now = Date.now();
   for (const entry of entries) {
-    const path4 = join(s.dir, entry);
+    const path4 = join2(s.dir, entry);
     let age;
     try {
       age = now - statSync(path4).mtimeMs;
@@ -321,7 +328,7 @@ function readSiblings(s) {
       continue;
     }
     try {
-      const parsed = JSON.parse(readFileSync(path4, "utf8"));
+      const parsed = JSON.parse(readFileSync2(path4, "utf8"));
       const claims = Object.values(parsed).filter(
         (c) => c && typeof c.v === "string" && typeof c.m === "string" && now - c.t <= CLAIM_TTL_MS
       );
@@ -342,9 +349,9 @@ function readLimits(s) {
   const now = Date.now();
   for (const entry of entries) {
     if (!entry.startsWith("limit.") || !entry.endsWith(".json")) continue;
-    const path4 = join(s.dir, entry);
+    const path4 = join2(s.dir, entry);
     try {
-      const strike = JSON.parse(readFileSync(path4, "utf8"));
+      const strike = JSON.parse(readFileSync2(path4, "utf8"));
       if (typeof strike.until !== "number" || typeof strike.model !== "string") continue;
       if (strike.until > now) cooling.set(strike.model, strike);
       else unlinkSync(path4);
@@ -366,7 +373,7 @@ function recordStrike(s, model, reason, stated) {
   const backoff = Math.min(COOLDOWN_MAX_MS, COOLDOWN_BASE_MS * 2 ** (strikes - 1));
   const strike = { model, until: now + (stated ?? backoff), strikes, reason, last: now };
   s.cooling.set(model, strike);
-  const path4 = join(s.dir, limitFile(model));
+  const path4 = join2(s.dir, limitFile(model));
   try {
     writeFileSync(`${path4}.tmp`, JSON.stringify(strike));
     renameSync(`${path4}.tmp`, path4);
@@ -382,7 +389,7 @@ function coolUnavailable(s, model) {
   if (prior && prior.until > until) return prior;
   const strike = { model, until, strikes: 1, reason: "endpoint-unavailable", last: now };
   s.cooling.set(model, strike);
-  const path4 = join(s.dir, limitFile(model));
+  const path4 = join2(s.dir, limitFile(model));
   try {
     writeFileSync(`${path4}.tmp`, JSON.stringify(strike));
     renameSync(`${path4}.tmp`, path4);
@@ -512,13 +519,45 @@ Every question of the form "what does this file do", "where is X handled", or
   ("read src/auth.ts", "grep for 'migration' in *.py", "list the src/
   directory"), one batch per question. Ask for the exact lines or
   file:line references you need, not a survey.
-- **Implementation \u2192 @implement**, with a finalized plan: the exact
-  steps, the files to touch, and the constraints you already learned from the
-  explorers. It edits, writes, and runs tests.
+- **Implementation \u2192 @implement**, one decided unit at a time: the exact
+  steps, the exact files, the design you have already chosen, and the command
+  that proves it. Never one whole refactor handed over in a single piece \u2014
+  see \`# Task size\` below.
 
 The agents you spawn are the pooled \`explore\` / \`implement\` bases \u2014
 spawn the bare name and let the pool route, never a \`-1\`/\`-2\` slot variant.
 
+# Task size
+
+\`@implement\` runs on a cheap pooled model. It can carry out a decision; it
+cannot make one. So what you hand it is always a small ask \u2014 never a mid or
+large task.
+
+A small ask is one change, one concern, already decided by you. Before handing
+it over you should have explored, through \`@explore\`, far enough to know what
+the change is and to have chosen the design: which class or value object, which
+members, what becomes a \`static\`, what gets deleted. \`@implement\` executes that
+choice. It never invents one.
+
+It does not have to arrive fully pre-digested. Letting it find the call sites,
+read the code around them and work out which files it touches is normal and
+expected \u2014 that is exploration an agent should be free to do. What it must never
+be handed is a problem to solve.
+
+Too small is fine and costs little. Too large is the failure: "convert the
+decode modules into named units, decide which are dead, keep the output
+byte-identical, verify conformance and report" is not a task, it is the whole
+project. A cheap agent handed it will improvise a design, skip the verification
+you never spelled out, and return something you cannot trust.
+
+When the work does not divide into small asks it is not implementation work
+yet \u2014 send it to \`@plan\`, or keep it yourself.
+
+Split into one ask per task, spawn independent asks together in a single
+message so they run in parallel, and sequence only what truly depends on what.
+If a returned ask turns out to need a decision you did not make, you make the
+call and hand out a corrected ask.
+
 # What stays yours
 
 \`edit\`, \`write\`, and \`bash\` are available to you. Use them to apply what a
@@ -729,6 +768,25 @@ write, and run code/bash to make the plan's changes real. Work from the plan
 as given \u2014 if it's ambiguous or you believe it's wrong, say so explicitly
 rather than silently improvising a different approach.
 
+# Before you start
+
+The ask you receive is a small one, and it is already decided: the change is
+specified and the design is chosen. Work from it as given rather than silently
+substituting an approach of your own.
+
+Expect to do your own locating. Finding the call sites, reading what you touch
+and working out which files are involved is normal work, not a sign of a bad
+brief \u2014 do it without asking.
+
+What is not yours to do is decide. If the ask asks you to choose an approach,
+pick the right abstraction, settle a judgement call, or work out what the
+requirement even is, stop and report that back instead of improvising. A
+confident wrong design costs more than no change at all.
+
+Size works the same way. A small ask that turns out to be bigger than it looked
+is a signal to come back and say so: complete the part that is decided, and
+report precisely what else needs deciding.
+
 Make changes incrementally where possible, and verify your own work (run
 tests/build/lint if available) before considering a step done.
 
@@ -1443,7 +1501,7 @@ import { existsSync as existsSync2, readdirSync as readdirSync2, statSync as sta
 import * as path2 from "node:path";
 
 // src/lib/writer-rule.ts
-import { readFileSync as readFileSync2 } from "node:fs";
+import { readFileSync as readFileSync3 } from "node:fs";
 import * as path from "node:path";
 var CONTEXT_DIR = path.join(".opencode", "context");
 var WRITER = "context";
@@ -1516,7 +1574,7 @@ var evaluatedForm = (mapDir, projectRoot) => {
 var verifyWriterRule = (configPath, mapDir, projectRoot) => {
   let raw;
   try {
-    raw = readFileSync2(configPath, "utf8");
+    raw = readFileSync3(configPath, "utf8");
   } catch {
     return void 0;
   }
@@ -1604,11 +1662,11 @@ var changedSince = (before, dir) => {
   for (const name of before.keys()) if (!after.has(name)) changed++;
   return changed;
 };
-var contextAutoUpdateHooks = (async ({ client, directory }) => {
+var contextAutoUpdateHooks = (async ({ client, directory }, options) => {
   const pending = /* @__PURE__ */ new Set();
   const owned = /* @__PURE__ */ new Map();
   let lastRun = 0;
-  const state2 = state();
+  const state2 = state(options);
   const log = (level, message, extra) => client.app.log({ body: { service: SERVICE2, level, message, extra } }).catch(() => {
   });
   const root = path2.resolve(directory);
@@ -1937,14 +1995,14 @@ var notifyHooks = (async ({ client, directory }, _options, deps = {}) => {
     const info = await client.session.get({ path: { id: sessionID }, query: { directory } }).then((result) => result.data).catch(() => void 0);
     return info;
   };
-  const deliverViaHelper = (title, message, urgency) => new Promise((resolve2) => {
+  const deliverViaHelper = (title, message, urgency) => new Promise((resolve3) => {
     const helper = findHelper();
     if (!helper) {
       if (!warnedHelper) {
         warnedHelper = true;
         void log("warn", "no oc-notify helper found; run 'bin/oc-sync' to install one");
       }
-      resolve2({ ok: false, detail: "no oc-notify helper found" });
+      resolve3({ ok: false, detail: "no oc-notify helper found" });
       return;
     }
     const child = spawn(helper, helperArgv(helper, title, message, urgency, "utilities-terminal"), {
@@ -1957,7 +2015,7 @@ var notifyHooks = (async ({ client, directory }, _options, deps = {}) => {
     });
     child.on("error", (error) => {
       void log("warn", `notification helper failed: ${String(error)}`, { title });
-      resolve2({ ok: false, detail: String(error) });
+      resolve3({ ok: false, detail: String(error) });
     });
     child.on("exit", (code) => {
       const noise = stderr.trim();
@@ -1968,7 +2026,7 @@ var notifyHooks = (async ({ client, directory }, _options, deps = {}) => {
           message
         });
       }
-      resolve2({ ok, detail: noise || void 0 });
+      resolve3({ ok, detail: noise || void 0 });
     });
     child.unref();
   });
@@ -2093,6 +2151,238 @@ var notifyHooks = (async ({ client, directory }, _options, deps = {}) => {
   };
 });
 
+// src/lib/selfupdate.ts
+import { spawn as spawn2 } from "node:child_process";
+import { closeSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync4, renameSync as renameSync2, rmSync, statSync as statSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2, writeSync } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { dirname as dirname3, join as join6, resolve as resolve2 } from "node:path";
+var REGISTRY_LATEST = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
+var CHECK_INTERVAL_MS = 6 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 4e3;
+var INSTALL_TIMEOUT_MS = 12e4;
+var LOCK_STALE_MS = 10 * 60 * 1e3;
+var CHILD_ENV = "LACODE_SELFUPDATE_CHILD";
+var OPT_OUT_ENV = "LACODE_NO_SELFUPDATE";
+var STATE_DIR = join6(homedir2(), ".local", "share", "opencode", "lacode");
+var STATE_PATH = join6(STATE_DIR, "selfupdate.json");
+var LOCK_PATH = join6(STATE_DIR, "selfupdate.lock");
+function compareSemver(a, b) {
+  const parse = (v) => v.split("-")[0].split("+")[0].split(".").map((n) => Number.parseInt(n, 10) || 0);
+  const left = parse(a);
+  const right = parse(b);
+  for (let i = 0; i < 3; i++) {
+    const l = left[i] ?? 0;
+    const r = right[i] ?? 0;
+    if (l !== r) return l > r ? 1 : -1;
+  }
+  return 0;
+}
+function readInstalledVersion(packageRoot) {
+  try {
+    const manifest = JSON.parse(readFileSync4(join6(packageRoot, "package.json"), "utf8"));
+    if (manifest.name !== PACKAGE_NAME) return void 0;
+    return typeof manifest.version === "string" ? manifest.version : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function resolveCacheRoot(packageRoot, exists = (p) => {
+  try {
+    return statSync3(p).isFile();
+  } catch {
+    return false;
+  }
+}) {
+  const tail = join6("node_modules", "@lawaty", "lacode");
+  if (!packageRoot.endsWith(tail)) return void 0;
+  const cacheRoot = resolve2(packageRoot, "..", "..", "..");
+  if (!exists(join6(cacheRoot, "package.json"))) return void 0;
+  return cacheRoot;
+}
+function resolveOpencodeBin(execPath = process.execPath, env = process.env, exists = (p) => {
+  try {
+    return statSync3(p).isFile();
+  } catch {
+    return false;
+  }
+}) {
+  if (execPath && /(^|[\\/])opencode(\.exe)?$/.test(execPath)) return execPath;
+  for (const dir of (env.PATH ?? "").split(":")) {
+    if (!dir) continue;
+    const candidate = join6(dir, "opencode");
+    if (exists(candidate)) return candidate;
+  }
+  const fallback = join6(homedir2(), ".opencode", "bin", "opencode");
+  return exists(fallback) ? fallback : void 0;
+}
+async function fetchLatest(fetchImpl = fetch, timeoutMs = FETCH_TIMEOUT_MS) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const response = await fetchImpl(REGISTRY_LATEST, { signal: controller.signal });
+    if (!response.ok) return void 0;
+    const body = await response.json();
+    return typeof body.version === "string" ? body.version : void 0;
+  } catch {
+    return void 0;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function readState(path4 = STATE_PATH) {
+  try {
+    return JSON.parse(readFileSync4(path4, "utf8"));
+  } catch {
+    return {};
+  }
+}
+function writeState(state2, path4 = STATE_PATH) {
+  try {
+    mkdirSync2(dirname3(path4), { recursive: true });
+    writeFileSync2(path4, JSON.stringify(state2));
+  } catch {
+  }
+}
+var isDue = (state2, now, interval = CHECK_INTERVAL_MS) => typeof state2.checkedAt !== "number" || now - state2.checkedAt >= interval;
+function acquireLock(path4 = LOCK_PATH, now = Date.now()) {
+  try {
+    mkdirSync2(dirname3(path4), { recursive: true });
+    const fd = openSync(path4, "wx");
+    writeSync(fd, String(process.pid));
+    closeSync(fd);
+    return () => {
+      try {
+        unlinkSync2(path4);
+      } catch {
+      }
+    };
+  } catch {
+    try {
+      if (now - statSync3(path4).mtimeMs > LOCK_STALE_MS) unlinkSync2(path4);
+    } catch {
+    }
+    return void 0;
+  }
+}
+async function checkForUpdate(opts) {
+  const installed = readInstalledVersion(opts.packageRoot);
+  const latest = await fetchLatest(opts.fetchImpl);
+  return {
+    installed,
+    latest,
+    newer: Boolean(installed && latest && compareSemver(latest, installed) > 0),
+    cacheRoot: resolveCacheRoot(opts.packageRoot, opts.exists),
+    bin: resolveOpencodeBin(opts.execPath, opts.env, opts.exists)
+  };
+}
+async function refreshCache(opts) {
+  const { cacheRoot, bin, latest } = opts;
+  const spawnImpl = opts.spawnImpl ?? spawn2;
+  const timeoutMs = opts.timeoutMs ?? INSTALL_TIMEOUT_MS;
+  const fresh = join6(cacheRoot, "node_modules", "@lawaty", "lacode");
+  const aside = `${cacheRoot}.stale-${Date.now()}`;
+  try {
+    rmSync(aside, { recursive: true, force: true });
+    renameSync2(cacheRoot, aside);
+  } catch (error) {
+    return { ok: false, detail: `could not set the old cache aside: ${String(error)}` };
+  }
+  const exited = await new Promise((settle) => {
+    let done = false;
+    const finish = (value) => {
+      if (done) return;
+      done = true;
+      clearTimeout(timer);
+      settle(value);
+    };
+    const child = spawnImpl(bin, ["plugin", PACKAGE_NAME, "-g"], {
+      env: { ...process.env, [CHILD_ENV]: "1" },
+      stdio: "ignore"
+    });
+    const timer = setTimeout(() => {
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+      finish(false);
+    }, timeoutMs);
+    child.on("error", () => finish(false));
+    child.on("exit", (code) => finish(code === 0));
+  });
+  const installed = readInstalledVersion(fresh);
+  const ok = exited && installed === latest;
+  if (ok) {
+    try {
+      rmSync(aside, { recursive: true, force: true });
+    } catch {
+    }
+  } else {
+    try {
+      renameSync2(aside, cacheRoot);
+    } catch {
+    }
+  }
+  return {
+    ok,
+    detail: ok ? `installed ${installed}` : `installer exited ${exited ? "0" : "non-zero"}, cache now ${installed ?? "missing"}`
+  };
+}
+async function maybeSelfUpdate(opts) {
+  const env = opts.env ?? process.env;
+  if (opts.enabled === false || env[CHILD_ENV] === "1" || env[OPT_OUT_ENV] === "1") {
+    return { action: "disabled" };
+  }
+  const now = (opts.now ?? Date.now)();
+  const statePath = opts.statePath ?? STATE_PATH;
+  const state2 = readState(statePath);
+  if (!isDue(state2, now, opts.intervalMs ?? CHECK_INTERVAL_MS)) return { action: "skipped", detail: "checked recently" };
+  const release2 = acquireLock(opts.lockPath, now);
+  if (!release2) return { action: "skipped", detail: "another process is updating" };
+  try {
+    const check = await checkForUpdate(opts);
+    if (!check.installed) return { action: "skipped", detail: "no installed version" };
+    if (!check.latest) {
+      writeState({ ...state2, checkedAt: now }, statePath);
+      return { action: "skipped", detail: "registry unreachable" };
+    }
+    if (!check.newer) {
+      writeState({ ...state2, checkedAt: now, latest: check.latest }, statePath);
+      return { action: "current", detail: `${check.installed} is current` };
+    }
+    if (!check.cacheRoot) {
+      writeState({ ...state2, checkedAt: now, latest: check.latest }, statePath);
+      return { action: "skipped", detail: "not an opencode cache install" };
+    }
+    if (!check.bin) {
+      writeState({ ...state2, checkedAt: now, latest: check.latest }, statePath);
+      opts.log?.("warn", `LaCode ${check.latest} is available but no opencode binary was found to install it`);
+      return { action: "failed", detail: "no opencode binary" };
+    }
+    const result = await refreshCache({ cacheRoot: check.cacheRoot, bin: check.bin, latest: check.latest, spawnImpl: opts.spawnImpl });
+    if (result.ok) {
+      writeState({ ...state2, checkedAt: now, latest: check.latest, updatedTo: check.latest }, statePath);
+      opts.log?.("info", `LaCode updated ${check.installed} -> ${check.latest}; restart opencode to apply`);
+      return { action: "updated", detail: `${check.installed} -> ${check.latest}` };
+    }
+    writeState({ ...state2, checkedAt: now, latest: check.latest }, statePath);
+    opts.log?.("warn", `LaCode update to ${check.latest} failed: ${result.detail}`);
+    return { action: "failed", detail: result.detail };
+  } finally {
+    release2();
+  }
+}
+
+// src/plugins/selfupdate.ts
+async function selfUpdateHooks(input, options) {
+  const opts = options ?? {};
+  if (opts.enabled === false || opts.selfUpdate === false) return {};
+  const log = (level, message, extra) => input.client.app.log({ body: { service: "lacode", level, message, extra } }).catch(() => {
+  });
+  void maybeSelfUpdate({ packageRoot: PACKAGE_ROOT, enabled: opts.enabled, log }).catch(() => {
+  });
+  return {};
+}
+
 // src/index.ts
 var inertHooks = {
   config: async () => {
@@ -2119,6 +2409,7 @@ var LaCode = (async (input, options) => {
   const pool = await settled("agent-pool", () => agentPoolHooks(input, options)) ?? inertHooks;
   const autoupdate = await settled("context-autoupdate", () => contextAutoUpdateHooks(input, options)) ?? inertHooks;
   const notifier = await settled("notify", () => notifyHooks(input, options)) ?? inertHooks;
+  const selfupdate = await settled("self-update", () => selfUpdateHooks(input, options)) ?? inertHooks;
   const config = async (cfg) => {
     try {
       const injected = applyAgents(cfg, agentSet);
@@ -2159,6 +2450,7 @@ var LaCode = (async (input, options) => {
       await pool.dispose?.();
       await autoupdate.dispose?.();
       await notifier.dispose?.();
+      await selfupdate.dispose?.();
     }
   };
 });

package/dist/lacode.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 // bin/lacode
-import { fileURLToPath } from "node:url";
-import { existsSync, readFileSync } from "node:fs";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
+import { existsSync, readFileSync as readFileSync3 } from "node:fs";
 import { spawnSync as spawnSync2 } from "node:child_process";
 
 // src/tunnel/index.ts
@@ -189,6 +189,167 @@ function describe(env = process.env, platform = process.platform) {
   };
 }
 
+// src/lib/package-root.ts
+import { readFileSync } from "node:fs";
+import { dirname, join as join2 } from "node:path";
+import { fileURLToPath } from "node:url";
+var PACKAGE_NAME = "@lawaty/lacode";
+var findPackageRoot = (start) => {
+  let dir = start;
+  for (let up = 0; up < 6; up++) {
+    try {
+      if (JSON.parse(readFileSync(join2(dir, "package.json"), "utf8")).name === PACKAGE_NAME) return dir;
+    } catch {
+    }
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return join2(start, "..", "..");
+};
+var PACKAGE_ROOT = findPackageRoot(dirname(fileURLToPath(import.meta.url)));
+
+// src/lib/selfupdate.ts
+import { spawn } from "node:child_process";
+import { closeSync, mkdirSync, openSync, readFileSync as readFileSync2, renameSync, rmSync, statSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { dirname as dirname2, join as join3, resolve } from "node:path";
+var REGISTRY_LATEST = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
+var CHECK_INTERVAL_MS = 6 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 4e3;
+var INSTALL_TIMEOUT_MS = 12e4;
+var LOCK_STALE_MS = 10 * 60 * 1e3;
+var CHILD_ENV = "LACODE_SELFUPDATE_CHILD";
+var STATE_DIR = join3(homedir2(), ".local", "share", "opencode", "lacode");
+var STATE_PATH = join3(STATE_DIR, "selfupdate.json");
+var LOCK_PATH = join3(STATE_DIR, "selfupdate.lock");
+function compareSemver(a, b) {
+  const parse = (v) => v.split("-")[0].split("+")[0].split(".").map((n) => Number.parseInt(n, 10) || 0);
+  const left = parse(a);
+  const right = parse(b);
+  for (let i = 0; i < 3; i++) {
+    const l = left[i] ?? 0;
+    const r = right[i] ?? 0;
+    if (l !== r) return l > r ? 1 : -1;
+  }
+  return 0;
+}
+function readInstalledVersion(packageRoot) {
+  try {
+    const manifest = JSON.parse(readFileSync2(join3(packageRoot, "package.json"), "utf8"));
+    if (manifest.name !== PACKAGE_NAME) return void 0;
+    return typeof manifest.version === "string" ? manifest.version : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function resolveCacheRoot(packageRoot, exists = (p) => {
+  try {
+    return statSync(p).isFile();
+  } catch {
+    return false;
+  }
+}) {
+  const tail = join3("node_modules", "@lawaty", "lacode");
+  if (!packageRoot.endsWith(tail)) return void 0;
+  const cacheRoot = resolve(packageRoot, "..", "..", "..");
+  if (!exists(join3(cacheRoot, "package.json"))) return void 0;
+  return cacheRoot;
+}
+function resolveOpencodeBin(execPath = process.execPath, env = process.env, exists = (p) => {
+  try {
+    return statSync(p).isFile();
+  } catch {
+    return false;
+  }
+}) {
+  if (execPath && /(^|[\\/])opencode(\.exe)?$/.test(execPath)) return execPath;
+  for (const dir of (env.PATH ?? "").split(":")) {
+    if (!dir) continue;
+    const candidate = join3(dir, "opencode");
+    if (exists(candidate)) return candidate;
+  }
+  const fallback = join3(homedir2(), ".opencode", "bin", "opencode");
+  return exists(fallback) ? fallback : void 0;
+}
+async function fetchLatest(fetchImpl = fetch, timeoutMs = FETCH_TIMEOUT_MS) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const response = await fetchImpl(REGISTRY_LATEST, { signal: controller.signal });
+    if (!response.ok) return void 0;
+    const body = await response.json();
+    return typeof body.version === "string" ? body.version : void 0;
+  } catch {
+    return void 0;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function checkForUpdate(opts) {
+  const installed = readInstalledVersion(opts.packageRoot);
+  const latest = await fetchLatest(opts.fetchImpl);
+  return {
+    installed,
+    latest,
+    newer: Boolean(installed && latest && compareSemver(latest, installed) > 0),
+    cacheRoot: resolveCacheRoot(opts.packageRoot, opts.exists),
+    bin: resolveOpencodeBin(opts.execPath, opts.env, opts.exists)
+  };
+}
+async function refreshCache(opts) {
+  const { cacheRoot, bin, latest } = opts;
+  const spawnImpl = opts.spawnImpl ?? spawn;
+  const timeoutMs = opts.timeoutMs ?? INSTALL_TIMEOUT_MS;
+  const fresh = join3(cacheRoot, "node_modules", "@lawaty", "lacode");
+  const aside = `${cacheRoot}.stale-${Date.now()}`;
+  try {
+    rmSync(aside, { recursive: true, force: true });
+    renameSync(cacheRoot, aside);
+  } catch (error) {
+    return { ok: false, detail: `could not set the old cache aside: ${String(error)}` };
+  }
+  const exited = await new Promise((settle) => {
+    let done = false;
+    const finish = (value) => {
+      if (done) return;
+      done = true;
+      clearTimeout(timer);
+      settle(value);
+    };
+    const child = spawnImpl(bin, ["plugin", PACKAGE_NAME, "-g"], {
+      env: { ...process.env, [CHILD_ENV]: "1" },
+      stdio: "ignore"
+    });
+    const timer = setTimeout(() => {
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+      finish(false);
+    }, timeoutMs);
+    child.on("error", () => finish(false));
+    child.on("exit", (code) => finish(code === 0));
+  });
+  const installed = readInstalledVersion(fresh);
+  const ok = exited && installed === latest;
+  if (ok) {
+    try {
+      rmSync(aside, { recursive: true, force: true });
+    } catch {
+    }
+  } else {
+    try {
+      renameSync(aside, cacheRoot);
+    } catch {
+    }
+  }
+  return {
+    ok,
+    detail: ok ? `installed ${installed}` : `installer exited ${exited ? "0" : "non-zero"}, cache now ${installed ?? "missing"}`
+  };
+}
+
 // bin/lacode
 if (!process.features?.typescript) {
   if (process.env.LACODE_STRIP_TYPECHECKED === "1") {
@@ -198,7 +359,7 @@ if (!process.features?.typescript) {
   const { spawnSync: spawnSync3 } = await import("node:child_process");
   const result = spawnSync3(
     process.execPath,
-    ["--experimental-strip-types", "--no-warnings", fileURLToPath(import.meta.url), ...process.argv.slice(2)],
+    ["--experimental-strip-types", "--no-warnings", fileURLToPath2(import.meta.url), ...process.argv.slice(2)],
     { stdio: "inherit", env: { ...process.env, LACODE_STRIP_TYPECHECKED: "1" } }
   );
   process.exit(result.status ?? 1);
@@ -216,6 +377,13 @@ var USAGE = `lacode \u2014 portable notifications and remote exec for LaCode
   lacode doctor
       Print what the environment resolves to. Diagnostics only.
 
+  lacode update [--check]
+      Bring this machine's installed LaCode up to the latest published
+      version. opencode's plugin cache never re-resolves on its own, so
+      this is the manual half of the automatic check the plugin runs at
+      startup. --check only reports; it installs nothing. The new version
+      takes effect on the next opencode start.
+
 Environment:
   OC_LOCAL_USER        desktop user the tunnel authenticates as
   OC_TUNNEL_PORT       reverse-forward listener port (default 10022)
@@ -269,6 +437,40 @@ switch (command) {
     process.exit(0);
     break;
   }
+  case "update": {
+    const checkOnly = argv.includes("--check");
+    const check = await checkForUpdate({ packageRoot: PACKAGE_ROOT });
+    if (!check.installed) {
+      console.error("lacode update: could not read the installed version (run from an installed package).");
+      process.exit(1);
+    }
+    if (!check.latest) {
+      console.error("lacode update: could not reach the npm registry; check your connection and retry.");
+      process.exit(1);
+    }
+    if (!check.newer) {
+      console.log(`lacode ${check.installed} is up to date (latest ${check.latest}).`);
+      process.exit(0);
+    }
+    console.log(`lacode ${check.installed} -> ${check.latest} available.`);
+    if (checkOnly) process.exit(0);
+    if (!check.cacheRoot) {
+      console.error("This is not an opencode cache install; update it with your package manager instead.");
+      process.exit(1);
+    }
+    if (!check.bin) {
+      console.error("lacode update: no opencode binary found to perform the install.");
+      process.exit(1);
+    }
+    const result = await refreshCache({ cacheRoot: check.cacheRoot, bin: check.bin, latest: check.latest });
+    if (!result.ok) {
+      console.error(`lacode update: install failed (${result.detail}).`);
+      process.exit(1);
+    }
+    console.log(`Updated to ${check.latest}. Restart opencode to apply.`);
+    process.exit(0);
+    break;
+  }
   case "receive": {
     const request = parsePayload(process.env.SSH_ORIGINAL_COMMAND ?? "");
     const result = sendLocal(request);
@@ -292,7 +494,7 @@ switch (command) {
       }
       console.log(`Generated ${key}`);
     }
-    const pubkey = existsSync(pub) ? readFileSync(pub, "utf8").trim() : "(public key missing)";
+    const pubkey = existsSync(pub) ? readFileSync3(pub, "utf8").trim() : "(public key missing)";
     const self = process.argv[1] ?? "lacode";
     console.log("\nOn the REMOTE host (where opencode runs), export:");
     console.log(`  OC_LOCAL_USER=${user || "<desktop-user>"}`);

package/dist/pool.js

@@ -1,8 +1,29 @@
 // src/lib/pool.ts
-import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readdirSync, readFileSync as readFileSync2, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
+import { join as join2 } from "node:path";
+
+// src/lib/package-root.ts
+import { readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
+var PACKAGE_NAME = "@lawaty/lacode";
+var findPackageRoot = (start) => {
+  let dir = start;
+  for (let up = 0; up < 6; up++) {
+    try {
+      if (JSON.parse(readFileSync(join(dir, "package.json"), "utf8")).name === PACKAGE_NAME) return dir;
+    } catch {
+    }
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return join(start, "..", "..");
+};
+var PACKAGE_ROOT = findPackageRoot(dirname(fileURLToPath(import.meta.url)));
+
+// src/lib/pool.ts
 var CLAIM_TTL_MS = 10 * 60 * 1e3;
 var DEAD_FILE_MS = 2 * CLAIM_TTL_MS;
 var ORPHAN_TMP_MS = 60 * 1e3;
@@ -17,30 +38,16 @@ var COOLDOWN_BASE_MS = 60 * 1e3;
 var COOLDOWN_MAX_MS = 15 * 60 * 1e3;
 var STRIKE_DECAY_MS = 30 * 60 * 1e3;
 var BASES = ["explore", "implement", "context"];
-var findPackageRoot = (start) => {
-  let dir = start;
-  for (let up = 0; up < 6; up++) {
-    try {
-      if (JSON.parse(readFileSync(join(dir, "package.json"), "utf8")).name === "@lawaty/lacode") return dir;
-    } catch {
-    }
-    const parent = dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return join(start, "..", "..");
-};
-var PACKAGE_ROOT = findPackageRoot(dirname(fileURLToPath(import.meta.url)));
-var PRESETS_DIR = join(PACKAGE_ROOT, "presets");
-var DEFAULT_PRESET = join(PRESETS_DIR, "free-tier.json");
-var USER_CONFIG_DIR = join(homedir(), ".config", "lacode");
-var USER_MODELS_PATH = join(USER_CONFIG_DIR, "pool.json");
-var USER_MODELS_TXT = join(USER_CONFIG_DIR, "pool.txt");
+var PRESETS_DIR = join2(PACKAGE_ROOT, "presets");
+var DEFAULT_PRESET = join2(PRESETS_DIR, "free-tier.json");
+var USER_CONFIG_DIR = join2(homedir(), ".config", "lacode");
+var USER_MODELS_PATH = join2(USER_CONFIG_DIR, "pool.json");
+var USER_MODELS_TXT = join2(USER_CONFIG_DIR, "pool.txt");
 var FALLBACK_SLOTS = [
   { index: 1, model: "opencode/space-bunny-free", weight: 3 },
-  { index: 2, model: "openrouter/nvidia/nemotron-3-ultra-550b-a55b:free", weight: 2 },
+  { index: 2, model: "opencode-go/step-5-preview-free", weight: 2 },
   { index: 3, model: "opencode/big-pickle", weight: 1 },
-  { index: 4, model: "openrouter/thinkingmachines/inkling:free", weight: 1 }
+  { index: 4, model: "opencode/step-5-preview-free", weight: 1 }
 ];
 function parseSlots(parsed, origin) {
   const problems = [];
@@ -89,7 +96,7 @@ function parseSlotText(text, origin) {
 }
 var readJSON = (path) => {
   try {
-    return { ok: true, value: JSON.parse(readFileSync(path, "utf8")) };
+    return { ok: true, value: JSON.parse(readFileSync2(path, "utf8")) };
   } catch (error) {
     return { ok: false, error: String(error) };
   }
@@ -105,7 +112,7 @@ function readOptional(path, origin, problems) {
 function readTextOptional(path, origin, problems) {
   if (!existsSync(path)) return void 0;
   try {
-    return readFileSync(path, "utf8");
+    return readFileSync2(path, "utf8");
   } catch (error) {
     problems.push(`${origin} unreadable (${String(error)}); trying the next source`);
     return void 0;
@@ -147,7 +154,7 @@ function resolveModels(input = {}) {
 function readSlotFile(path) {
   let text;
   try {
-    text = readFileSync(path, "utf8");
+    text = readFileSync2(path, "utf8");
   } catch (error) {
     return { slots: FALLBACK_SLOTS, problems: [`${path} unreadable (${String(error)}); using built-in defaults`] };
   }
@@ -215,7 +222,7 @@ var retryAfterMs = (headers) => {
 };
 function state(opts = {}) {
   const id = opts.id ?? String(process.pid);
-  const dir = opts.dir ?? join(homedir(), ".local", "share", "opencode", "agent-pool");
+  const dir = opts.dir ?? join2(homedir(), ".local", "share", "opencode", "agent-pool");
   const modelsFile = opts.modelsFile;
   const models = opts.models;
   const key = /* @__PURE__ */ Symbol.for(`agent-pool:state:${id}:${dir}:${modelsFile ?? ""}:${models === void 0 ? "" : "inline"}`);
@@ -264,7 +271,7 @@ function init(s, onWarn) {
     mkdirSync(s.dir, { recursive: true });
     s.dirReady = true;
     try {
-      unlinkSync(join(s.dir, selfFile(s.id)));
+      unlinkSync(join2(s.dir, selfFile(s.id)));
     } catch {
     }
   } catch {
@@ -281,8 +288,8 @@ function publish(s) {
   const payload = {};
   for (const [key, claim] of s.own) if (now - claim.t <= CLAIM_TTL_MS) payload[key] = claim;
   try {
-    writeFileSync(join(s.dir, `${selfFile(s.id)}.tmp`), JSON.stringify(payload));
-    renameSync(join(s.dir, `${selfFile(s.id)}.tmp`), join(s.dir, selfFile(s.id)));
+    writeFileSync(join2(s.dir, `${selfFile(s.id)}.tmp`), JSON.stringify(payload));
+    renameSync(join2(s.dir, `${selfFile(s.id)}.tmp`), join2(s.dir, selfFile(s.id)));
   } catch {
     s.dirReady = false;
   }
@@ -297,7 +304,7 @@ function readSiblings(s) {
   }
   const now = Date.now();
   for (const entry of entries) {
-    const path = join(s.dir, entry);
+    const path = join2(s.dir, entry);
     let age;
     try {
       age = now - statSync(path).mtimeMs;
@@ -321,7 +328,7 @@ function readSiblings(s) {
       continue;
     }
     try {
-      const parsed = JSON.parse(readFileSync(path, "utf8"));
+      const parsed = JSON.parse(readFileSync2(path, "utf8"));
       const claims = Object.values(parsed).filter(
         (c) => c && typeof c.v === "string" && typeof c.m === "string" && now - c.t <= CLAIM_TTL_MS
       );
@@ -342,9 +349,9 @@ function readLimits(s) {
   const now = Date.now();
   for (const entry of entries) {
     if (!entry.startsWith("limit.") || !entry.endsWith(".json")) continue;
-    const path = join(s.dir, entry);
+    const path = join2(s.dir, entry);
     try {
-      const strike = JSON.parse(readFileSync(path, "utf8"));
+      const strike = JSON.parse(readFileSync2(path, "utf8"));
       if (typeof strike.until !== "number" || typeof strike.model !== "string") continue;
       if (strike.until > now) cooling.set(strike.model, strike);
       else unlinkSync(path);
@@ -366,7 +373,7 @@ function recordStrike(s, model, reason, stated) {
   const backoff = Math.min(COOLDOWN_MAX_MS, COOLDOWN_BASE_MS * 2 ** (strikes - 1));
   const strike = { model, until: now + (stated ?? backoff), strikes, reason, last: now };
   s.cooling.set(model, strike);
-  const path = join(s.dir, limitFile(model));
+  const path = join2(s.dir, limitFile(model));
   try {
     writeFileSync(`${path}.tmp`, JSON.stringify(strike));
     renameSync(`${path}.tmp`, path);
@@ -382,7 +389,7 @@ function coolUnavailable(s, model) {
   if (prior && prior.until > until) return prior;
   const strike = { model, until, strikes: 1, reason: "endpoint-unavailable", last: now };
   s.cooling.set(model, strike);
-  const path = join(s.dir, limitFile(model));
+  const path = join2(s.dir, limitFile(model));
   try {
     writeFileSync(`${path}.tmp`, JSON.stringify(strike));
     renameSync(`${path}.tmp`, path);

package/docs/USER-STORIES.md

@@ -317,6 +317,25 @@ The pain: LaCode once shipped a `tools: { "playwright_*": true }` grant on its f
 
 ---
 
+### US-27: The package keeps itself current, without npm and without being asked
+**As a** user who installed LaCode once, **I want** each new release to reach my machine automatically, **so that** I never have to learn that opencode freezes the plugin version and hand-clear a cache to upgrade.
+
+The pain: opencode's plugin cache is **write-once**. It resolves `@lawaty/lacode` to an exact version once and never re-resolves — not on restart, not with `opencode plugin -g -f`, not with a range pin, not with a tagged config spec (all four verified against opencode 1.18.34). A published release therefore reaches a client only when something installs it into that cache again, and nothing in opencode ever does. The plugin has to do it itself, and it may assume only one tool: the opencode binary the code already runs inside.
+
+**Story ID(s) for tests:** US-27
+**Acceptance criteria:**
+- [ ] Given a client runs the plugin and the registry reports a newer version, When the check runs, Then the plugin reinstalls its own cache entry in the background and logs one line naming the old and new version, and startup is never blocked on the registry.
+- [ ] Given the check ran recently, When the plugin loads again within the interval, Then the registry is consulted at most once per interval, so a session start never waits on npm and npm is not hammered.
+- [ ] Given a machine with neither npm nor bun, When an update runs, Then it is performed by the opencode binary alone, because that is the one tool every client is guaranteed to have.
+- [ ] Given an update is installed, When the running session continues, Then it keeps its loaded code and the new version takes effect on the next start, and the log line says exactly that.
+- [ ] Given two opencode processes start together and both find an update, When they race, Then a cross-process lock ensures only one performs the install.
+- [ ] Given `selfUpdate: false` in the plugin options or `LACODE_NO_SELFUPDATE=1` in the environment, When the plugin loads, Then it performs no check at all.
+- [ ] Given the registry is unreachable, When the check runs, Then it is silent, records nothing that would suppress a later retry forever, and never throws into opencode.
+- [ ] Given a plain source checkout rather than an opencode cache install, When the check runs, Then it does not attempt to reinstall, so a development tree is never overwritten.
+- [ ] Given `lacode update` or `lacode update --check`, When it is run, Then it reports (or installs) the update for this machine and exits non-zero only on a real failure — a missing registry, no cache to update, or a failed install.
+
+---
+
 ## Epic G — Context and cost (a maintained map instead of cold exploration)
 
 The pain: every task opened by exploring the repository from scratch. The same
@@ -408,6 +427,7 @@ table was filled in.
 | US-16 | F | `tests/stories/f-adoption-safety.test.mjs` |
 | US-17 | F | `tests/stories/f-adoption-safety.test.mjs` |
 | US-24 | F | `tests/stories/f-adoption-safety.test.mjs` |
+| US-27 | F | `tests/stories/h-self-update.test.mjs` |
 | US-19 | G | `tests/stories/g-context-management.test.mjs` |
 | US-20 | G | `tests/stories/g-context-management.test.mjs` |
 | US-21 | G | `tests/stories/g-context-management.test.mjs`, `tests/permission-test.mjs` |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lawaty/lacode",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "Ultimate opencode setup for Go users — cost-controlled pooled subagents, hang recovery, and notifications for opencode.",
   "license": "MIT",
   "type": "module",

package/presets/README.md

@@ -36,10 +36,10 @@ in place, no JSON and no objects:
 
 ```text
 # provider/model-id                       weight
-opencode-go/longcat-2.5-preview-free      3
+opencode-go/step-5-preview-free           3
 opencode/space-bunny-free                 2
 opencode/big-pickle                       1
-opencode/longcat-2.5-preview-free         1
+opencode/step-5-preview-free              1
 ```
 
 `#` starts a comment (whole-line or trailing), blank lines are ignored, and the

package/presets/free-tier.json

@@ -20,8 +20,8 @@
     "  3. once EVERY slot is at its ceiling, the overflow goes to the least loaded slot,",
     "     so a burst past the summed ceilings degrades to even spreading and never blocks",
     "",
-    "With this file: longcat (opencode-go) takes 3 sessions to itself, then space-bunny",
-    "takes 2, then big-pickle and longcat (Zen) take 1 each -- sequence 1,1,1,2,2,3,4,...",
+    "With this file: space-bunny takes 3 sessions to itself, then step-5-preview",
+    "(opencode-go) takes 2, then big-pickle and step-5-preview (Zen) take 1 each -- sequence 1,1,1,2,2,3,4,...",
     "Equal weights give a plain round robin in list order. 2,2,1,1 reproduces the old",
     "primary/overflow cycle exactly, which is why the old tier values still work.",
     "",
@@ -53,8 +53,8 @@
   ],
   "slots": [
     { "model": "opencode/space-bunny-free", "weight": 3 },
-    { "model": "opencode-go/longcat-2.5-preview-free", "weight": 2 },
+    { "model": "opencode-go/step-5-preview-free", "weight": 2 },
     { "model": "opencode/big-pickle", "weight": 1 },
-    { "model": "opencode/longcat-2.5-preview-free", "weight": 1 }
+    { "model": "opencode/step-5-preview-free", "weight": 1 }
   ]
 }