@lawaty/lacode 0.4.1 → 0.5.0

package/dist/index.js

@@ -30,6 +30,7 @@ var ORPHAN_TMP_MS = 60 * 1e3;
 var CATALOG_TTL_MS = 10 * 60 * 1e3;
 var STUCK_MIN_AGE_MS = 5 * 60 * 1e3;
 var STUCK_IDLE_MS = 3 * 60 * 1e3;
+var MAX_CLAIM_AGE_MS = 30 * 60 * 1e3;
 var HANG_COOLDOWN_MS = 10 * 60 * 1e3;
 var UNAVAILABLE_COOLDOWN_MS = 60 * 1e3;
 var MAX_WEIGHT = 100;
@@ -48,9 +49,9 @@ var USER_MODELS_PATH = join2(USER_CONFIG_DIR, "pool.json");
 var USER_MODELS_TXT = join2(USER_CONFIG_DIR, "pool.txt");
 var FALLBACK_SLOTS = [
   { index: 1, model: "opencode/space-bunny-free", weight: 3 },
-  { index: 2, model: "opencode-go/step-5-preview-free", weight: 2 },
+  { index: 2, model: "opencode-go/longcat-2.5-preview-free", weight: 2 },
   { index: 3, model: "opencode/big-pickle", weight: 1 },
-  { index: 4, model: "opencode/step-5-preview-free", weight: 1 }
+  { index: 4, model: "opencode/longcat-2.5-preview-free", weight: 1 }
 ];
 function parseSlots(parsed, origin) {
   const problems = [];
@@ -203,6 +204,8 @@ var LIMIT_PATTERNS = [
 ];
 var isLimitText = (text) => LIMIT_PATTERNS.some((re) => re.test(text));
 var isUnavailableText = (text) => UNAVAILABLE_PATTERN.test(text);
+var TRANSIENT_GATEWAY_PATTERNS = [/queue budget/i, /exceeded queue/i, /aborted due to timeout/i, /timeout/i];
+var isTransientGatewayText = (text) => TRANSIENT_GATEWAY_PATTERNS.some((re) => re.test(text));
 var statedCooldown = (text) => {
   const hm = /resets?\s+in\s+(\d+)\s*(?:h|hr|hour)s?\s*(\d+)?\s*(?:m|min|minute)?s?/i.exec(text);
   if (hm) return (Number(hm[1]) * 60 + (hm[2] ? Number(hm[2]) : 0)) * 60 * 1e3;
@@ -291,7 +294,7 @@ function publish(s) {
   if (!s.dirReady) return;
   const now = Date.now();
   const payload = {};
-  for (const [key, claim] of s.own) if (now - claim.t <= CLAIM_TTL_MS) payload[key] = claim;
+  for (const [key, claim] of s.own) if (now - (claim.hb ?? claim.t) <= CLAIM_TTL_MS) payload[key] = claim;
   try {
     writeFileSync(join2(s.dir, `${selfFile(s.id)}.tmp`), JSON.stringify(payload));
     renameSync(join2(s.dir, `${selfFile(s.id)}.tmp`), join2(s.dir, selfFile(s.id)));
@@ -572,12 +575,17 @@ function idleFor(s, claim, now) {
   const seen = s.activity.get(target);
   return seen ? now - seen : Infinity;
 }
+function condemnReason(s, claim, now = Date.now()) {
+  const age = now - claim.t;
+  if (age > MAX_CLAIM_AGE_MS) return "overran";
+  if (age > STUCK_MIN_AGE_MS && idleFor(s, claim, now) >= STUCK_IDLE_MS) return "hung";
+  return void 0;
+}
 function findStuck(s, now = Date.now()) {
   const stuck = [];
   for (const [key, claim] of s.own) {
-    if (now - claim.t <= STUCK_MIN_AGE_MS) continue;
-    if (idleFor(s, claim, now) < STUCK_IDLE_MS) continue;
-    stuck.push({ key, claim });
+    const reason = condemnReason(s, claim, now);
+    if (reason) stuck.push({ key, claim, reason });
   }
   return stuck;
 }
@@ -603,6 +611,9 @@ function coolProvider(s, provider, until, reason) {
   return affected;
 }
 
+// src/lib/manager-directive.ts
+var MANAGER_AGENT_NAME = "manager";
+
 // src/agents.ts
 var POOLED_BASES = ["explore", "implement", "context"];
 var AGENTS = {
@@ -1012,6 +1023,30 @@ You own exactly these five files and nothing else:
   during work that are not already recorded in the project's own decision
   log. Concise; variable length.
 
+A sixth file sits in the same directory and is not yours:
+\`.opencode/context/manager.md\`. It is the client's own statement of intent
+\u2014 what is being worked on, what comes next, what they have settled, and
+what every agent should keep in mind. It deliberately says nothing about
+where code lives: your five files and the source itself are the only
+authority on that, and this file never contradicts them. It has no fixed
+schema \u2014 read the whole file, because every heading in it is direction.
+
+You never create, edit, rename, or delete it \u2014 not at bootstrap, not in an
+update, not in a review, and not when a run of your own concludes the work
+has moved on. The client edits it, or asks a live agent to edit it on
+their explicit instruction. Either way it is their hand, never yours.
+
+Read it before you write anything. Its \`## Current\` and \`## Next\`
+sections tell you what is actually being worked on, and \`## Confirmed\`
+tells you which of your facts the client has ratified. A fact you are
+writing that appears under \`## Confirmed\` may be stated plainly, without
+a confidence marker; anything else follows your normal rules \u2014 infer
+carefully, mark uncertainty. Never copy its content into the five files.
+
+A missing or empty section is not an instruction. It means the client has
+not said, not that you may assume anything \u2014 proceed exactly as you would
+without the file.
+
 Never create, modify, or delete anything outside \`.opencode/context/\`. The
 \`edit\` permission enforces this. Do not attempt to work around it with bash.
 
@@ -1046,6 +1081,11 @@ Then write the five files. For each significant subsystem, give a short
 reason. This is the single most valuable thing you produce: where an agent
 should open its editor next.
 
+manager.md is created for the client by the plugin, not by you; if it is
+missing anyway, mention once in your final report that they can add it
+themselves to record what is being worked on, what comes next, and what
+they have ratified. Never create it.
+
 # Incremental update
 
 Trigger: \`.opencode/context/\` exists and work has just been done here.
@@ -1073,6 +1113,14 @@ that is already stated in another context file \u2014 one fact has one home, and
 the other files link to it. If nothing material changed, make no edits and
 report "no update needed".
 
+Before editing, re-read manager.md: its \`## Current\` and \`## Next\`
+sections tell you what the client is actually working on, and its
+\`## Confirmed\` section settles which of your facts are ratified. If what
+you are about to write would place the code somewhere the client never
+described, trust the code, make the edit the code justifies, and report
+the gap in your final message \u2014 never reconcile the two sides silently,
+and never edit manager.md to close it.
+
 # Minimal exploration
 
 Default shape:
@@ -1167,9 +1215,14 @@ Audit the five files for:
 - duplicated information \u2014 one canonical place per fact
 - missing canonical entry points for significant subsystems
 - unsupported assumptions \u2014 anything unmarked that you cannot verify
+- manager.md, if present: is \`## Current\` and \`## Next\` still true of
+  recent work, is every \`## Confirmed\` entry still true of the code, has
+  it outgrown roughly 150 lines \u2014 report findings, but never edit, prune,
+  or reorganize it; that is the client's call
 
-Fix problems only in \`.opencode/context/\`. Never modify source code during a
-review. Report what you found, what you fixed, and what you could not verify.
+Fix problems only in the five files you own \u2014 never in manager.md, which
+belongs to the client. Never modify source code during a review. Report
+what you found, what you fixed, and what you could not verify.
 
 # Reporting
 
@@ -1187,7 +1240,9 @@ Finish with a short report:
       "edit": {
         "*": "deny",
         "*/.opencode/context/**": "allow",
-        ".opencode/context/**": "allow"
+        ".opencode/context/**": "allow",
+        "*/.opencode/context/manager.md": "deny",
+        ".opencode/context/manager.md": "deny"
       },
       "bash": {
         "*": "deny",
@@ -1235,6 +1290,68 @@ Finish with a short report:
     }
   }
 };
+var MANAGER_AGENT = {
+  description: "Records and edits the client's .opencode/context/manager.md. Run only by the /manager-directive command; no agent or subagent can spawn it.",
+  mode: "subagent",
+  hidden: true,
+  temperature: 0.1,
+  prompt: `# Role
+
+You maintain one file and nothing else: \`.opencode/context/manager.md\`, the
+client's own statement of intent. You are not a coding agent and you touch no
+other path.
+
+You are run only by the \`/manager-directive\` command. The client tells you what
+they want recorded or changed in the file; you apply that to the file and report
+what you changed. You have no permission to edit anything else, and you need
+none.
+
+# The file
+
+It records what is being worked on (\`## Current\`), what comes next
+(\`## Next\`), what the client has ratified (\`## Confirmed\`), and standing
+direction (\`## Instructions\`). The client may use any headings \u2014 every heading
+is direction, and the four above are a convenience, not a schema.
+
+# How to apply a directive
+
+- Do what the client asked. "Append", "rewrite Current", "move X to Confirmed",
+  "add a heading" all mean exactly that; a bare sentence goes under the most
+  fitting existing heading, and you create one only if none fits.
+- Never invent facts, never record your own inference as the client's, and never
+  tidy, reorder or delete content the client did not ask you to touch.
+- \`## Current\` is rewritten, not appended to, so it does not become a running
+  history.
+- Keep the file concise. If it is growing past roughly 150 lines, say so.
+
+# Reporting
+
+Report briefly what you changed and where. Do not edit any other file.`,
+  permission: {
+    // Read is scoped to the one file too: the directive is about manager.md, and
+    // nothing else is any of this agent's business.
+    read: {
+      "*": "deny",
+      ".opencode/context/manager.md": "allow",
+      "*/.opencode/context/manager.md": "allow"
+    },
+    glob: "deny",
+    grep: "deny",
+    list: "deny",
+    edit: {
+      "*": "deny",
+      ".opencode/context/manager.md": "allow",
+      "*/.opencode/context/manager.md": "allow"
+    },
+    bash: "deny",
+    webfetch: "deny",
+    websearch: "deny",
+    question: "allow",
+    task: {
+      "*": "deny"
+    }
+  }
+};
 function buildAgentSet() {
   const set = { ...AGENTS };
   for (const base of POOLED_BASES) {
@@ -1250,6 +1367,7 @@ function buildAgentSet() {
       set[`${base}-${slot}`] = variant;
     }
   }
+  set[MANAGER_AGENT_NAME] = MANAGER_AGENT;
   return set;
 }
 function applyAgents(cfg, agents = buildAgentSet(), opts = {}) {
@@ -1289,7 +1407,13 @@ Remember: write conclusions, not inventories. Link to the project's existing
 documentation instead of duplicating it.
 
 Report what you created or updated, what you deliberately left out, and
-anything that contradicts the code or existing docs.`
+anything that contradicts the code or existing docs.
+
+If \`.opencode/context/manager.md\` does not exist, mention in your final
+report that the client can add it themselves \u2014 their own file with
+\`## Current\`, \`## Next\`, \`## Confirmed\` and \`## Instructions\` \u2014 for what
+is being worked on, what comes next, what they have ratified, and standing
+direction. Never create it.`
   },
   "context-update": {
     description: "Incrementally update .opencode/context/ after recent work via the context agent.",
@@ -1320,8 +1444,9 @@ timestamp-only edits. If nothing material changed, make no edits and report
     subtask: true,
     template: `Context review.
 
-Everything outside \`.opencode/context/\` is read-only for this run. Do not
-modify source code under any circumstances.
+Everything outside the five context files is read-only for this run \u2014
+including \`manager.md\`, which belongs to the client. Do not modify source
+code under any circumstances.
 
 Audit the five context files for:
 
@@ -1334,9 +1459,22 @@ Audit the five context files for:
 - missing canonical entry points for significant subsystems
 - unsupported assumptions \u2014 anything stated as fact that you cannot verify,
   or that lacks a confidence marker
+- \`manager.md\`, if present: is \`## Current\` and \`## Next\` still true of
+  recent work, is every \`## Confirmed\` entry still true of the code, has it
+  outgrown roughly 150 lines \u2014 report findings, but never edit it
 
 Fix what you find in \`.opencode/context/\` only, then report: findings, fixes,
 and anything you could not verify.`
+  },
+  "manager-directive": {
+    description: "Apply a client instruction to .opencode/context/manager.md. Client-only \u2014 runs the manager agent, the only writer of that file.",
+    agent: MANAGER_AGENT_NAME,
+    subtask: true,
+    template: `Apply this instruction to \`.opencode/context/manager.md\`, and edit only that file:
+
+$ARGUMENTS
+
+Follow the rules for the file in your system prompt, then report what you changed.`
   },
   "lacode-doctor": {
     description: "Check the LaCode setup \u2014 pool slots, model resolution, and the OmniRoute gateway. Report only; changes nothing.",
@@ -1364,7 +1502,8 @@ Print one PASS/FAIL line per check below, with the exact fix for any FAIL.
    trap: an id that is a valid gateway route but is NOT in the plugin's
    \`omniroute.models\` allowlist fails with
    \`ProviderModelNotFoundError: Model not found\`; the fix is to add that id to
-   the \`models\` array, or use the always-registered \`auto\`.
+   the \`models\` array, or set it as \`combo\` \u2014 the combo id is registered
+   whether or not the gateway advertises it, so it needs no allowlist entry.
 
 Change nothing. Print a final one-line summary of failures.`
   }
@@ -1383,22 +1522,43 @@ function applyCommands(cfg, commands = COMMANDS) {
   }
   return { added, kept };
 }
+var INSTRUCTION_MARKER = "<!-- lacode:context-map-instruction:v1 -->";
+var INSTRUCTION_OPT_OUT = "<!-- lacode:context-map-instruction:off -->";
 var STANDING_INSTRUCTION = `## Repository context map
 
 This project may keep a navigation map in \`.opencode/context/\`. Before broad
 exploration, check whether it exists (\`ls .opencode/context\` \u2014 never the \`glob\`
-tool, which skips hidden directories). If it does, read only the file relevant to
-the task \u2014 architecture.md, contexts.md, conventions.md, workflows.md,
-decisions.md \u2014 then start from the canonical entry points it lists.
-
-Source code is authoritative: if the map disagrees with the code, trust the code,
-say so, and never edit source to match the map. Never edit \`.opencode/context/\`
-yourself \u2014 the context agent owns it. Say in your final report if your
-work revealed something that belongs in the map.`;
+tool, which skips hidden directories). If \`manager.md\` exists there, read it
+first: it is the client's own statement of intent \u2014 what is being worked on,
+what comes next, \`## Confirmed\` lists what the client has ratified, and
+\`## Instructions\` holds standing managerial directions. It outranks every
+other context file and every inference of yours about what matters right now.
+It says nothing about where code lives, so it cannot contradict the code;
+treat its \`## Confirmed\` entries as settled decisions, not as a licence to
+skip reading the code. Any heading in it is direction, so read the whole
+file rather than only the sections above. The rest of the map remains usable,
+just unratified where \`## Confirmed\` does not cover it. Then read only the
+file relevant to the task \u2014 \`architecture.md\`, \`contexts.md\`,
+\`conventions.md\`, \`workflows.md\`, \`decisions.md\` \u2014 and start from the
+canonical entry points it lists.
+
+Source code is authoritative: if the map disagrees with the code,
+trust the code and say so; never edit source to match it.
+Never edit the five context files yourself \u2014 the context agent owns them.
+\`manager.md\` is the client's own file and the context agent is explicitly
+permission-denied from writing it. You may write it only when the client
+explicitly asks you to in this conversation, and then only what they asked
+for; never on your own initiative, and never to "keep it up to date". Say in
+your final report if your work revealed something that belongs to the map, or
+if \`manager.md\` and the code disagree.`;
 function applyInstructions(cfg) {
-  const existing = cfg.instructions;
-  if (Array.isArray(existing) && existing.length > 0) return { added: false };
-  cfg.instructions = [STANDING_INSTRUCTION];
+  const existing = Array.isArray(cfg.instructions) ? cfg.instructions : [];
+  const texts = existing.filter((e) => typeof e === "string");
+  if (texts.some((e) => e.includes(INSTRUCTION_OPT_OUT))) return { added: false };
+  if (texts.some((e) => e.includes(INSTRUCTION_MARKER))) return { added: false };
+  cfg.instructions = [...existing, `${INSTRUCTION_MARKER}
+
+${STANDING_INSTRUCTION}`];
   return { added: true };
 }
 
@@ -1443,6 +1603,19 @@ var agentPoolHooks = (async ({ client, serverUrl }, options) => {
     const strike = recordStrike(s, claim.m, "hang", HANG_FALLBACK_MS);
     if (strike) await log2("warn", `cooling ${claim.m} for ${Math.round((strike.until - now) / 1e3)}s (hang)`);
   };
+  const failOver = async (sessionID, model, reason) => {
+    if (!sessionID) return;
+    const entry = [...s.own.entries()].find(([, claim2]) => claim2.g === sessionID);
+    if (!entry) return;
+    const [key, claim] = entry;
+    const kill = await abortSession(sessionID);
+    release(s, key);
+    await log(
+      "warn",
+      kill.ok ? `limit (${reason}) on ${model}; aborted in-flight ${claim.v} session ${sessionID} to fail over now` : `limit (${reason}) on ${model}; released in-flight ${claim.v} claim after a failed abort (${kill.why})`,
+      { base: claim.v, model: claim.m, slot: claim.k, session: sessionID, aborted: kill.ok, reason }
+    );
+  };
   const reapStuck = async () => {
     if (s.reaping) return;
     s.reaping = true;
@@ -1451,7 +1624,7 @@ var agentPoolHooks = (async ({ client, serverUrl }, options) => {
       const stuck = findStuck(s);
       if (stuck.length === 0) return;
       const released = [];
-      for (const { key, claim } of stuck) {
+      for (const { key, claim, reason } of stuck) {
         if (!claim.g) backfillChild(s, claim);
         const idle = idleFor(s, claim, Date.now());
         const since = Number.isFinite(idle) ? `${Math.round(idle / 1e3)}s of silence` : "no child session ever bound";
@@ -1463,7 +1636,7 @@ var agentPoolHooks = (async ({ client, serverUrl }, options) => {
             s.reaped++;
             await log(
               "warn",
-              `hung ${claim.v} on ${claim.m} after ${age}s with ${since}; aborted session ${claim.g}`,
+              reason === "overran" ? `overran ${claim.v} on ${claim.m} after ${age}s; aborted session ${claim.g}` : `hung ${claim.v} on ${claim.m} after ${age}s with ${since}; aborted session ${claim.g}`,
               { base: claim.v, model: claim.m, slot: claim.k, session: claim.g, aborted: true }
             );
             await coolForHang(claim, log);
@@ -1510,7 +1683,7 @@ var agentPoolHooks = (async ({ client, serverUrl }, options) => {
   timer.unref?.();
   void log(
     "info",
-    `reaper armed: every ${Math.round(reapMs / 1e3)}s, aborts a claim older than ${Math.round(STUCK_MIN_AGE_MS / 6e4)}m whose target has been silent ${Math.round(STUCK_IDLE_MS / 6e4)}m`
+    `reaper armed: every ${Math.round(reapMs / 1e3)}s, aborts a claim older than ${Math.round(STUCK_MIN_AGE_MS / 6e4)}m whose target has been silent ${Math.round(STUCK_IDLE_MS / 6e4)}m, or any claim past the ${Math.round(MAX_CLAIM_AGE_MS / 6e4)}m ceiling however chatty`
   );
   return {
     config: async (cfg) => {
@@ -1558,18 +1731,21 @@ var agentPoolHooks = (async ({ client, serverUrl }, options) => {
       try {
         const props = event.properties ?? {};
         if (event.type === "session.status") {
+          const sessionID = typeof props.sessionID === "string" ? props.sessionID : void 0;
           const status2 = props.status;
-          if (status2?.type === "retry" && status2.action?.reason === "free_tier_limit" && status2.action.provider) {
+          const reason2 = status2?.action?.reason ?? "";
+          if (status2?.type === "retry" && status2.action?.provider && (reason2 === "free_tier_limit" || isLimitText(reason2))) {
             const provider = status2.action.provider;
             const until = typeof status2.next === "number" && status2.next > Date.now() ? status2.next : Date.now() + HANG_FALLBACK_MS;
-            const cooled = coolProvider(s, provider, until, "free_tier_limit");
+            const cooled = coolProvider(s, provider, until, reason2 || "rate-limited");
             if (cooled.length > 0) {
-              await log("warn", `free tier exhausted on provider ${provider}; cooling ${cooled.length} slot(s) until ${new Date(until).toISOString().slice(11, 19)}Z`, {
+              await log("warn", `limit on provider ${provider} (${reason2 || "rate-limited"}); cooling ${cooled.length} slot(s) until ${new Date(until).toISOString().slice(11, 19)}Z`, {
                 provider,
                 until,
                 models: cooled.map((c) => c.model)
               });
             }
+            await failOver(sessionID, provider, reason2 || "rate-limited");
           }
           return;
         }
@@ -1589,9 +1765,12 @@ var agentPoolHooks = (async ({ client, serverUrl }, options) => {
         if (!info || info.role !== "assistant" || !info.error) return;
         const haystack = JSON.stringify(info.error) ?? "";
         const status = typeof info.error.data?.statusCode === "number" ? info.error.data.statusCode : void 0;
-        if (!isLimitText(haystack) && status !== 429) return;
+        const limited = isLimitText(haystack) || status === 429;
+        const gateway5xx = status !== void 0 && status >= 500 && status <= 599;
+        const transientGateway = gateway5xx || isTransientGatewayText(haystack);
+        if (!limited && !transientGateway) return;
         const model = `${info.providerID ?? "?"}/${info.modelID ?? "?"}`;
-        if (isUnavailableText(haystack)) {
+        if (isUnavailableText(haystack) || !limited && transientGateway) {
           const transient = coolUnavailable(s, model);
           if (transient) await log("warn", `cooling ${model} for ${Math.round((transient.until - Date.now()) / 1e3)}s (${transient.reason})`);
           return;
@@ -1600,6 +1779,7 @@ var agentPoolHooks = (async ({ client, serverUrl }, options) => {
         const reason = haystack.match(/rate[\s_-]?limit|usage limit|too many requests|quota|freelimiterror|overloaded/i)?.[0]?.toLowerCase().replace(/[\s_]/g, "-");
         const strike = recordStrike(s, model, reason ?? "rate-limited", stated);
         if (strike) await log("warn", `cooling ${model} for ${Math.round((strike.until - Date.now()) / 1e3)}s (${reason ?? "rate-limited"}, strike ${strike.strikes})`);
+        await failOver(info.sessionID, model, reason ?? "rate-limited");
       } catch (error) {
         await log("error", `limit detection failed: ${String(error)}`);
       }
@@ -1683,7 +1863,9 @@ var agentPoolHooks = (async ({ client, serverUrl }, options) => {
           };
           const total = [...snap.counts.values()].reduce((sum, n) => sum + n, 0);
           const coolingNow = [...snap.cooling.entries()].filter(([, st]) => st.until > now);
-          const hung = [...snap.own.values()].filter((c) => now - c.t > STUCK_MIN_AGE_MS && idleFor(s, c, now) >= STUCK_IDLE_MS).length;
+          const verdicts = [...snap.own.values()].map((claim) => condemnReason(s, claim, now));
+          const hung = verdicts.filter((verdict) => verdict === "hung").length;
+          const overran = verdicts.filter((verdict) => verdict === "overran").length;
           return {
             title: `agent-pool: ${total} task(s) in flight, ${coolingNow.length} model(s) cooling`,
             output: [
@@ -1697,6 +1879,7 @@ round robin in slot order, each slot taking as many turns as its weight says, so
               "",
               `${total} claim(s) in flight across ${snap.siblings.length + 1} process(es).`,
               `hung past ${Math.round(STUCK_MIN_AGE_MS / 6e4)}min with ${Math.round(STUCK_IDLE_MS / 6e4)}min silence: ${hung} (auto-aborted); reaped total: ${s.reaped}.`,
+              `overran past ${Math.round(MAX_CLAIM_AGE_MS / 6e4)}min: ${overran} (auto-aborted).`,
               `watchdog alive: last sweep ${s.lastSweep ? `${Math.max(0, Math.round((now - s.lastSweep) / 1e3))}s ago` : "never"} (every ${Math.round(reapMs / 1e3)}s).`,
               coolingNow.length === 0 ? "no models cooling down." : `cooling: ${coolingNow.map(([m, st]) => `${m} for ${Math.ceil((st.until - now) / 1e3)}s`).join(", ")}`
             ].join("\n")
@@ -1713,28 +1896,10 @@ round robin in slot order, each slot taking as many turns as its weight says, so
 });
 
 // src/plugins/context-autoupdate.ts
-import { existsSync as existsSync2, readdirSync as readdirSync2, statSync as statSync2 } from "node:fs";
+import { existsSync as existsSync2, readdirSync as readdirSync2, statSync as statSync2, mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import * as path2 from "node:path";
 
-// src/lib/writer-rule.ts
-import { readFileSync as readFileSync3 } from "node:fs";
-import * as path from "node:path";
-var CONTEXT_DIR = path.join(".opencode", "context");
-var WRITER = "context";
-var toPosix = (value) => value.split(path.sep).join("/");
-var compilePattern = (pattern) => {
-  const escaped = toPosix(pattern).replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
-  return new RegExp(`^${escaped}$`, "s");
-};
-var winningRule = (rule, file) => {
-  if (typeof rule === "string") return { pattern: "<whole tool>", action: rule };
-  if (!rule || typeof rule !== "object") return void 0;
-  let winner;
-  for (const [pattern, action] of Object.entries(rule)) {
-    if (compilePattern(pattern).test(file)) winner = { pattern, action: String(action) };
-  }
-  return winner;
-};
+// src/lib/jsonc.ts
 var stripJsonc = (raw) => {
   let out = "";
   let i = 0;
@@ -1773,9 +1938,37 @@ var stripJsonc = (raw) => {
   }
   return out.replace(/,(\s*[}\]])/g, "$1");
 };
+var parseJsonc = (raw) => {
+  try {
+    return JSON.parse(stripJsonc(raw));
+  } catch {
+    return void 0;
+  }
+};
+
+// src/lib/writer-rule.ts
+import { readFileSync as readFileSync3 } from "node:fs";
+import * as path from "node:path";
+var CONTEXT_DIR = path.join(".opencode", "context");
+var WRITER = "context";
+var MANAGER_WRITER = MANAGER_AGENT_NAME;
+var toPosix = (value) => value.split(path.sep).join("/");
+var compilePattern = (pattern) => {
+  const escaped = toPosix(pattern).replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
+  return new RegExp(`^${escaped}$`, "s");
+};
+var winningRule = (rule, file) => {
+  if (typeof rule === "string") return { pattern: "<whole tool>", action: rule };
+  if (!rule || typeof rule !== "object") return void 0;
+  let winner;
+  for (const [pattern, action] of Object.entries(rule)) {
+    if (compilePattern(pattern).test(file)) winner = { pattern, action: String(action) };
+  }
+  return winner;
+};
 var readAgents = (raw) => {
   try {
-    const agents = JSON.parse(stripJsonc(raw)).agent;
+    const agents = parseJsonc(raw).agent;
     if (agents && typeof agents === "object" && !Array.isArray(agents)) return agents;
     return {};
   } catch {
@@ -1787,6 +1980,10 @@ var evaluatedForm = (mapDir, projectRoot) => {
   const absolute = toPosix(path.join(mapDir, "architecture.md"));
   return projectRoot ? toPosix(path.relative(projectRoot, absolute)) : absolute;
 };
+var managerForm = (mapDir, projectRoot) => {
+  const absolute = toPosix(path.join(mapDir, "manager.md"));
+  return projectRoot ? toPosix(path.relative(projectRoot, absolute)) : absolute;
+};
 var verifyWriterRule = (configPath, mapDir, projectRoot) => {
   let raw;
   try {
@@ -1818,6 +2015,19 @@ var verifyWriterRule = (configPath, mapDir, projectRoot) => {
       return `context map has more than one writer: ${offenders.join(", ")} would be granted the map by permission, evaluating "${form}". Only ${WRITER} may write the map. Narrow the grant and put the deny LAST -- opencode takes the LAST matching rule, so "${CONTEXT_DIR}/**": "deny" written after "*": "allow" is what denies it: "*": "allow", "*/${CONTEXT_DIR}/**": "deny", "${CONTEXT_DIR}/**": "deny". Both spellings are required because the evaluated path depends on the project root.`;
     }
   }
+  const managerPath = managerForm(mapDir, projectRoot);
+  const agentDefs = readAgents(raw);
+  if (agentDefs) {
+    const writers = [];
+    for (const [name, def] of Object.entries(agentDefs)) {
+      if (name === MANAGER_WRITER) continue;
+      const win = winningRule(permissionOf(def), managerPath);
+      if (win?.action === "allow") writers.push(`${name} (edit rule "${win.pattern}": "${win.action}")`);
+    }
+    if (writers.length > 0) {
+      return `${CONTEXT_DIR}/manager.md is writable by permission: ${writers.join(", ")}. It is the client's own file \u2014 what they are working on, what is ratified, what every agent must respect \u2014 and only the \`${MANAGER_WRITER}\` agent (run solely by /manager-directive) may write it. Deny it LAST on every other agent, after any broad allow, because opencode takes the LAST matching rule: "*": "allow", "*/${CONTEXT_DIR}/manager.md": "deny", "${CONTEXT_DIR}/manager.md": "deny". Declare this on every agent above, including \`${WRITER}\`: an agent you define yourself replaces the shipped one wholesale, permission and all.`;
+    }
+  }
   return void 0;
 };
 
@@ -1844,6 +2054,51 @@ var IGNORED_SEGMENTS = /* @__PURE__ */ new Set([
   ".cache",
   ".git"
 ]);
+var MANAGER_TEMPLATE = `# Managerial directions
+
+This file is yours. No agent writes it: the context agent is explicitly denied
+permission to touch this path, and nothing changes it except you, or an agent
+acting on your explicit instruction in that conversation.
+
+It records what you want done and how you want it approached \u2014 what is being
+worked on, what comes next, what you have settled, and what every agent should
+keep in mind. It deliberately says nothing about where code lives: the source
+and the five generated context files are the only authority on that, so this
+file can never contradict the code.
+
+Add any headings you like. The four below are a convenience, not a schema \u2014
+every heading in this file is direction.
+
+## Current
+
+<!-- What is being worked on right now. Rewrite it; do not append a history. -->
+
+## Next
+
+<!-- What comes next, in order. -->
+
+## Confirmed
+
+<!-- What you have personally ratified. Nothing enters or leaves this list
+     except by your hand \u2014 no agent promotes, prunes or rewrites it. -->
+
+## Instructions
+
+<!-- Standing direction that applies beyond the current task: priorities, things
+     to care about, constraints that are not obvious from the code. -->`;
+var ensureManagerFile = (root) => {
+  try {
+    const target = path2.join(root, ".opencode", "context", "manager.md");
+    if (existsSync2(target)) return { created: false };
+    mkdirSync2(path2.dirname(target), { recursive: true });
+    writeFileSync2(target, MANAGER_TEMPLATE, { flag: "wx" });
+    return { created: true };
+  } catch (error) {
+    if (error?.code === "EEXIST") return { created: false };
+    console.warn(`[context-autoupdate] ensureManagerFile failed: ${error}`);
+    return { created: false };
+  }
+};
 var toPosix2 = (value) => value.split(path2.sep).join("/");
 var findProjectConfig = () => {
   let dir = import.meta.dir ?? path2.dirname(new URL(import.meta.url).pathname);
@@ -1887,6 +2142,7 @@ var contextAutoUpdateHooks = (async ({ client, directory }, options) => {
   });
   const root = path2.resolve(directory);
   const contextAbs = path2.join(root, CONTEXT_DIR2);
+  if (ensureManagerFile(root).created) void log("info", `created ${CONTEXT_DIR2}/manager.md`);
   const config = findProjectConfig();
   const writerProblem = config ? verifyWriterRule(config, contextAbs, root) : void 0;
   if (writerProblem) void log("error", writerProblem);
@@ -1946,7 +2202,7 @@ var contextAutoUpdateHooks = (async ({ client, directory }, options) => {
         const requeue = () => {
           for (const file of files) pending.add(file);
         };
-        const mode = existsSync2(contextAbs) ? "update" : "bootstrap";
+        const mode = existsSync2(path2.join(contextAbs, "contexts.md")) ? "update" : "bootstrap";
         init(state2, (m) => void log("warn", m));
         const snap = snapshot(state2);
         const slot = pickSlot(state2, snap);
@@ -2846,7 +3102,7 @@ var omniRouteHooks = async (input, options, deps = {}) => {
 
 // src/lib/selfupdate.ts
 import { spawn as spawn2 } from "node:child_process";
-import { closeSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync4, renameSync as renameSync2, rmSync, statSync as statSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2, writeSync } from "node:fs";
+import { closeSync, mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync4, renameSync as renameSync2, rmSync, statSync as statSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3, writeSync } from "node:fs";
 import { homedir as homedir2 } from "node:os";
 import { dirname as dirname3, join as join6, resolve as resolve2 } from "node:path";
 var REGISTRY_LATEST = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
@@ -2871,9 +3127,17 @@ function compareSemver(a, b) {
   }
   return 0;
 }
-function readInstalledVersion(packageRoot) {
+function readInstalledVersion(packageRoot, read = (path4) => {
+  try {
+    return readFileSync4(path4, "utf8");
+  } catch {
+    return void 0;
+  }
+}) {
   try {
-    const manifest = JSON.parse(readFileSync4(join6(packageRoot, "package.json"), "utf8"));
+    const raw = read(join6(packageRoot, "package.json"));
+    if (raw === void 0) return void 0;
+    const manifest = JSON.parse(raw);
     if (manifest.name !== PACKAGE_NAME) return void 0;
     return typeof manifest.version === "string" ? manifest.version : void 0;
   } catch {
@@ -2932,8 +3196,8 @@ function readState(path4 = STATE_PATH) {
 }
 function writeState(state2, path4 = STATE_PATH) {
   try {
-    mkdirSync2(dirname3(path4), { recursive: true });
-    writeFileSync2(path4, JSON.stringify(state2));
+    mkdirSync3(dirname3(path4), { recursive: true });
+    writeFileSync3(path4, JSON.stringify(state2));
   } catch {
   }
 }
@@ -2959,7 +3223,7 @@ function acquireLock(path4 = LOCK_PATH, now = Date.now()) {
     };
   };
   try {
-    mkdirSync2(dirname3(path4), { recursive: true });
+    mkdirSync3(dirname3(path4), { recursive: true });
     return claim();
   } catch {
     let orphaned = false;
@@ -3148,7 +3412,7 @@ var LaCode = (async (input, options) => {
         await log("info", `commands: added ${cmds.added.join(", ")}; kept ${cmds.kept.join(", ") || "none"} already defined`);
       }
       if (applyInstructions(cfg).added) {
-        await log("info", "instructions: added the standing context-map rule (no user instructions were present)");
+        await log("info", "instructions: ensured the standing context-map rule is present");
       }
       await omniroute.config?.(cfg);
       await pool.config?.(cfg);