@lawaty/lacode 0.8.0 → 0.10.0

package/dist/index.js

@@ -51,10 +51,10 @@ var USER_CONFIG_DIR = join2(homedir(), ".config", "lacode");
 var USER_MODELS_PATH = join2(USER_CONFIG_DIR, "pool.json");
 var USER_MODELS_TXT = join2(USER_CONFIG_DIR, "pool.txt");
 var FALLBACK_SLOTS = [
-  { index: 1, model: "opencode/space-bunny-free", weight: 3 },
-  { index: 2, model: "opencode-go/longcat-2.5-preview-free", weight: 2 },
-  { index: 3, model: "opencode/big-pickle", weight: 1 },
-  { index: 4, model: "opencode/longcat-2.5-preview-free", weight: 1 }
+  { index: 1, model: "opencode/big-pickle", weight: 3 },
+  { index: 2, model: "opencode-go/minimax-m3.1-flash-free", weight: 2 },
+  { index: 3, model: "opencode/deepseek-v4.1-flash-free", weight: 1 },
+  { index: 4, model: "opencode/glm-5.3-flash-free", weight: 1 }
 ];
 function parseSlots(parsed, origin) {
   const problems = [];
@@ -786,8 +786,8 @@ failing, or a runtime message saying no slot is available \u2014 that is not a r
 to do the work yourself, and not a reason to stop and ask.
 
 **Retry.** A refused or cooling slot is transient and costs you nothing but a
-turn. Spawn the bare base again. Do not escalate a \`-N\` variant when a refusal
-names one \u2014 the refusal means the pool has a routing problem, not that you
+turn. Spawn the bare base again. Do not escalate to a numbered variant after a
+refusal \u2014 the refusal means the pool has a routing problem, not that you
 picked the wrong number.
 
 Retry is always available and never wrong, which is why it is the default. But
@@ -1146,7 +1146,7 @@ if the blocker is understanding rather than execution, report that instead.`,
     }
   },
   "context": {
-    "description": "Repository cartographer and memory maintainer. Bootstraps and incrementally maintains .opencode/context/ (architecture, contexts, conventions, workflows, decisions) as a small navigation map for future agents. Runs automatically after sessions that changed files; can also be invoked with /context-init, /context-update, /context-review. Never use it for general coding tasks.",
+    "description": "Repository cartographer and memory maintainer. Bootstraps and incrementally maintains .opencode/context/ (architecture, contexts, conventions, workflows, decisions) as a small navigation map for future agents, and keeps .opencode/context/active.md \u2014 the active backlog of work in flight, grouped by week. Runs automatically after sessions that changed files; can also be invoked with /context-init, /context-update, /context-review. Never use it for general coding tasks.",
     "mode": "subagent",
     "temperature": 0.1,
     prompt: `# Role
@@ -1162,7 +1162,7 @@ map is a derived index of it.
 
 # Owned files
 
-You own exactly these five files and nothing else:
+You own exactly these files and nothing else:
 
 - \`.opencode/context/architecture.md\` \u2014 high-level architecture, major layers,
   boundaries, important entry points, dependency rules. Target 50\u2013150 lines.
@@ -1177,6 +1177,9 @@ You own exactly these five files and nothing else:
 - \`.opencode/context/decisions.md\` \u2014 architectural decisions discovered
   during work that are not already recorded in the project's own decision
   log. Concise; variable length.
+- \`.opencode/context/active.md\` \u2014 the active backlog: work in flight, grouped
+  by the week it was opened. Not part of the navigation map; it is described
+  under "Task backlog" below.
 
 # Current-state only
 
@@ -1216,7 +1219,8 @@ Explore progressively and stop as soon as you have a usable map:
 You are mapping a city, not auditing every house. Do not attempt to
 understand every file.
 
-Then write the five files. For each significant subsystem, give a short
+Then write the five files. Also create \`.opencode/context/active.md\` with its
+heading and no tasks. For each significant subsystem, give a short
 "Start here" list \u2014 at most about five canonical files, each with a one-phrase
 reason. This is the single most valuable thing you produce: where an agent
 should open its editor next.
@@ -1240,7 +1244,7 @@ Trigger: \`.opencode/context/\` exists and work has just been done here.
    - an architectural decision
    - a new dependency between subsystems
    - a renamed or relocated subsystem
-   - a previously undocumented invariant
+    - a previously undocumented invariant
 
 Do not update documentation merely because source files changed. Do not
 rewrite files wholesale. Do not make timestamp-only edits. Do not add a fact
@@ -1248,6 +1252,38 @@ that is already stated in another context file \u2014 one fact has one home, and
 the other files link to it. If nothing material changed, make no edits and
 report "no update needed".
 
+Also keep \`.opencode/context/active.md\` current: record work that is in
+flight, and mark a task finished \u2014 with the date it finished \u2014 when it is.
+
+# Task backlog
+
+\`.opencode/context/active.md\` holds the work in flight. It is a rolling
+window, not a history: it answers "what is open, and what just finished".
+
+Format \u2014 one line per task, under the ISO week the task was opened in:
+
+    ## 2026-W43
+
+    - [ ] Ship the release notes \u2014 opened 2026-W43
+    - [x] Fix the flaky test \u2014 opened 2026-W43, finished 2026-10-19
+
+The rules:
+
+- A task that is not marked \`[x]\` is OPEN. An open task is never removed,
+  however old it is.
+- A task is FINISHED when it is marked \`[x]\` AND carries a \`finished\`
+  date. Record the date it actually finished, as \`YYYY-MM-DD\`.
+- The week is \`YYYY-Www\`, Monday to Sunday. \`date +%G-W%V\` prints it.
+- A finished task is dropped once it is more than a week old. The plugin
+  enforces that: record the finished task with its date and let the window
+  close on its own. Do not delete old finished tasks by hand, and do not
+  keep a finished task back to preserve it \u2014 the file is meant to stay
+  small.
+- Never invent a task. Record work that actually happened, and mark a task
+  finished only once it is finished.
+- Keep the file inside the window. If the backlog has grown past a handful
+  of weeks, that is a signal to close finished tasks, not to add sections.
+
 # Minimal exploration
 
 Default shape:
@@ -1334,7 +1370,7 @@ the lowest-value ones, and link out to authoritative project docs.
 
 Trigger: an explicit review (see the \`context-review\` command).
 
-Audit the five files for:
+Audit the map files and the backlog for:
 
 - stale information \u2014 verify claims against the code
 - contradictions between files, or between the map and the code
@@ -1342,10 +1378,12 @@ Audit the five files for:
 - duplicated information \u2014 one canonical place per fact
 - missing canonical entry points for significant subsystems
 - unsupported assumptions \u2014 anything unmarked that you cannot verify
+- backlog tasks that are finished but carry no date \u2014 the retention window
+  cannot age those out, so they stay forever
 
-Fix problems only in the five files you own. Never modify source code
-during a review. Report what you found, what you fixed, and what you
-could not verify.
+Fix problems only in the files you own. Never modify source code during a
+review. Report what you found, what you fixed, and what you could not
+verify.
 
 # Reporting
 
@@ -1513,7 +1551,28 @@ function buildAgentSet() {
       const variant = {
         ...def,
         description: `Hidden pool variant ${base}-${slot}: slot ${slot}. Its model is NOT set here -- LaCode injects it from the resolved pool preset at config time, so the preset is the only place a pool model is written down. Spawn '${base}' and let the pool route.`,
-        hidden: true
+        hidden: true,
+        // `mode: "primary"` is what keeps a variant OUT of the model's system
+        // prompt. `hidden` cannot do it.
+        //
+        // opencode builds the "Available agent types" block by filtering the
+        // agent registry on `mode !== "primary"` and on the caller's task
+        // permission. It never looks at `hidden`: that flag is honoured only by
+        // the TUI and the @-mention pickers, by the "agent not found" message,
+        // and by default-agent resolution. A variant left as `mode: "subagent"`
+        // is therefore listed to the model under its own name -- "explore-1:
+        // Hidden pool variant explore-1" -- and the model copies that name
+        // straight into its next spawn. The pool then refuses it, because
+        // naming a variant is how a caller would pick the provider and skip the
+        // rotation. The refusal is right; the leak that provokes it is not.
+        //
+        // `mode` is the only field that filter respects, and setting it here is
+        // safe: the task tool never reads an agent's mode -- it resolves the
+        // agent by name and runs it -- and every other place that filters on
+        // `mode !== "primary"` also filters on `!hidden`, which these already
+        // are. opencode uses this same pair for its own compaction, title and
+        // summary agents.
+        mode: "primary"
       };
       delete variant.model;
       set[`${base}-${slot}`] = variant;
@@ -1553,7 +1612,8 @@ your system prompt.
 Otherwise follow the bootstrap procedure in your system prompt: progressive
 exploration (README \u2192 existing docs \u2192 manifests \u2192 top-level structure \u2192 build
 and framework config \u2192 entry points \u2192 selective source), then write the five
-context files inside their size targets.
+context files inside their size targets. Also create
+\`.opencode/context/active.md\` with its heading and no tasks.
 
 Remember: write conclusions, not inventories. Link to the project's existing
 documentation instead of duplicating it.
@@ -1590,10 +1650,10 @@ timestamp-only edits. If nothing material changed, make no edits and report
     subtask: true,
     template: `Context review.
 
-Everything outside the five context files is read-only for this run. Do not
+Everything outside \`.opencode/context/\` is read-only for this run. Do not
 modify source code under any circumstances.
 
-Audit the five context files for:
+Audit the context files and the backlog for:
 
 - stale information \u2014 verify claims against the actual code
 - contradictions between context files, or between the map and the code
@@ -1604,6 +1664,8 @@ Audit the five context files for:
 - missing canonical entry points for significant subsystems
 - unsupported assumptions \u2014 anything stated as fact that you cannot verify,
   or that lacks a confidence marker
+- backlog tasks that are finished but carry no date \u2014 the retention window
+  cannot age those out, so they stay forever
 
 Fix what you find in \`.opencode/context/\` only, then report: findings, fixes,
 and anything you could not verify.`
@@ -2096,12 +2158,11 @@ var agentPoolHooks = (async ({ client, serverUrl, directory }, options) => {
       if (typeof requested !== "string") return;
       const manual = manualVariant(requested);
       if (manual) {
-        await log("warn", `refused manual spawn of slot variant ${requested}; spawn "${manual}" instead`, {
-          variant: requested,
+        await log("warn", `refused manual spawn of a pool slot variant; spawn "${manual}" instead`, {
           base: manual
         });
         throw new Error(
-          `${requested} is a pool slot variant and cannot be spawned by name. Naming it lets the caller pick the provider: it skips the round-robin rotation and the slot's ceiling, so one provider takes every concurrent claim. Spawn "${manual}" and let the pool choose the slot.`
+          `That agent is a pool slot variant and cannot be spawned by name. Naming it lets the caller pick the provider: it skips the round-robin rotation and the slot's ceiling, so one provider takes every concurrent claim. Spawn "${manual}" and let the pool choose the slot.`
         );
       }
       try {
@@ -2226,10 +2287,110 @@ round robin in slot order, each slot taking as many turns as its weight says, so
 });
 
 // src/plugins/context-autoupdate.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync as readdirSync2, statSync as statSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync as readdirSync2, readFileSync as readFileSync4, statSync as statSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
 import * as path2 from "node:path";
 
+// src/lib/active-backlog.ts
+var ACTIVE_BACKLOG_FILE = "active.md";
+var RETENTION_DAYS = 7;
+var DAY_MS = 24 * 60 * 60 * 1e3;
+var HEADER = `# Active backlog
+
+Tasks in flight, grouped by the week they were opened. A finished task stays
+here for a week after it was finished and is then dropped; an open task stays
+however long it takes. Add a line under the right week, and give a finished
+task its date: \`- [x] Title \u2014 opened 2026-W43, finished 2026-10-19\`.`;
+var TASK_LINE = /^\s*(?:[-*+]|\d+[.)])\s*\[([ xX])\]\s*(.*)$/;
+var META = /(?:—|–|-)\s*opened\s+(\d{4}-W(?:0[1-9]|[1-4]\d|5[0-3]))|[,—–-]\s*finished\s+(\d{4}-\d{2}-\d{2})/gi;
+var isCalendarDate = (s) => {
+  const at = Date.parse(`${s}T00:00:00Z`);
+  return Number.isFinite(at) && new Date(at).toISOString().slice(0, 10) === s;
+};
+var parseBacklog = (text) => {
+  const entries = [];
+  for (const raw of text.split(/\r?\n/)) {
+    const line = TASK_LINE.exec(raw);
+    if (!line) continue;
+    const finished = line[1] !== " ";
+    let week;
+    let finishedAt;
+    const stripped = line[2].replace(META, (fragment, openedWeek, finishedDate) => {
+      if (openedWeek !== void 0) {
+        week ??= openedWeek.toUpperCase();
+        return "";
+      }
+      if (finishedDate !== void 0 && isCalendarDate(finishedDate)) {
+        finishedAt ??= finishedDate;
+        return "";
+      }
+      return fragment;
+    });
+    const title = stripped.replace(/^[\s—–-]+|[\s—–-]+$/g, "");
+    if (!title) continue;
+    entries.push({ title, ...week ? { week } : {}, finished, ...finishedAt ? { finishedAt } : {} });
+  }
+  return entries;
+};
+var ISO_WEEK = /^(\d{4})-W(\d{2})$/i;
+var newestFirst = (a, b) => {
+  const ma = ISO_WEEK.exec(a);
+  const mb = ISO_WEEK.exec(b);
+  if (ma && mb) return Number(mb[1]) - Number(ma[1]) || Number(mb[2]) - Number(ma[2]);
+  if (ma) return -1;
+  if (mb) return 1;
+  return a < b ? 1 : a > b ? -1 : 0;
+};
+var renderLine = (entry) => {
+  const box = entry.finished ? "[x]" : "[ ]";
+  const meta = [];
+  if (entry.week) meta.push(`opened ${entry.week}`);
+  if (entry.finished && entry.finishedAt) meta.push(`finished ${entry.finishedAt}`);
+  const head = `- ${box} ${entry.title}`;
+  if (meta.length === 0) return head;
+  return entry.week ? `${head} \u2014 ${meta.join(", ")}` : `${head}, ${meta.join(", ")}`;
+};
+var renderBacklog = (entries) => {
+  const buckets = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    const key = entry.week ? entry.week : null;
+    const bucket = buckets.get(key);
+    if (bucket) bucket.push(entry);
+    else buckets.set(key, [entry]);
+  }
+  const weeks = [...buckets.keys()].filter((week) => week !== null).sort(newestFirst);
+  let out = HEADER;
+  for (const week of weeks) out += `
+
+## ${week}
+
+${buckets.get(week).map(renderLine).join("\n")}`;
+  const unscheduled = buckets.get(null);
+  if (unscheduled) out += `
+
+## Unscheduled
+
+${unscheduled.map(renderLine).join("\n")}`;
+  return `${out}
+`;
+};
+var normalizeBacklog = (text, now = Date.now()) => {
+  const entries = parseBacklog(text);
+  const kept = [];
+  const removed = [];
+  for (const entry of entries) {
+    if (entry.finished && entry.finishedAt) {
+      const at = Date.parse(`${entry.finishedAt}T00:00:00Z`);
+      if (Number.isFinite(at) && now - at > RETENTION_DAYS * DAY_MS) {
+        removed.push(entry.title);
+        continue;
+      }
+    }
+    kept.push(entry);
+  }
+  return { text: renderBacklog(kept), removed };
+};
+
 // src/lib/jsonc.ts
 var stripJsonc = (raw) => {
   let out = "";
@@ -2437,7 +2598,7 @@ var changedSince = (before, dir) => {
 };
 var RETAIN_TRANSCRIPTS = 20;
 var transcriptDir = () => process.env.LACODE_TRANSCRIPT_DIR ?? path2.join(homedir2(), ".local", "share", "opencode", "lacode", "cartographer");
-var retireSession = async (client, directory, sessionID, mode) => {
+var retireSession = async (client, directory, sessionID, mode, log) => {
   try {
     const transcript = await client.session.messages({ path: { id: sessionID }, query: { directory } }).then((r) => r.data).catch(() => void 0);
     const dir = transcriptDir();
@@ -2446,8 +2607,18 @@ var retireSession = async (client, directory, sessionID, mode) => {
     const file = path2.join(dir, `${stamp}-${mode}.json`);
     writeFileSync2(file, JSON.stringify({ sessionID, mode, messages: transcript ?? null }, null, 2));
     pruneTranscripts(dir);
+    const gone = async () => await client.session.get({ path: { id: sessionID }, query: { directory } }).then((r) => r.data).catch(() => void 0) === void 0;
     await client.session.delete({ path: { id: sessionID }, query: { directory } }).catch(() => void 0);
-  } catch {
+    if (await gone()) return;
+    await new Promise((resolve3) => setTimeout(resolve3, 500));
+    await client.session.delete({ path: { id: sessionID }, query: { directory } }).catch(() => void 0);
+    if (await gone()) return;
+    await log?.("warn", "the cartographer's session could not be removed from the session list; it stays as an empty entry", {
+      sessionID,
+      mode
+    });
+  } catch (error) {
+    await log?.("warn", `could not retire the cartographer's session: ${String(error)}`, { sessionID, mode });
   }
 };
 var pruneTranscripts = (dir) => {
@@ -2471,6 +2642,7 @@ var contextAutoUpdateHooks = (async ({ client, directory }, options) => {
   });
   const root = path2.resolve(directory);
   const contextAbs = path2.join(root, CONTEXT_DIR2);
+  const activeBacklogPath = path2.join(contextAbs, ACTIVE_BACKLOG_FILE);
   const config = findProjectConfig();
   const writerProblem = config ? verifyWriterRule(config, contextAbs, root) : void 0;
   if (writerProblem) void log("error", writerProblem);
@@ -2480,6 +2652,23 @@ var contextAutoUpdateHooks = (async ({ client, directory }, options) => {
     if (absolute === contextAbs || absolute.startsWith(contextAbs + path2.sep)) return false;
     return !toPosix2(absolute).split("/").some((segment) => IGNORED_SEGMENTS.has(segment));
   };
+  const normalizeActiveBacklog = async () => {
+    try {
+      if (!existsSync2(activeBacklogPath)) return { removed: 0 };
+      const before = readFileSync4(activeBacklogPath, "utf8");
+      const { text, removed } = normalizeBacklog(before);
+      if (text !== before) writeFileSync2(activeBacklogPath, text);
+      if (removed.length > 0) {
+        await log("info", `active backlog: dropped ${removed.length} task(s) finished more than a week ago`, {
+          removed: removed.length
+        });
+      }
+      return { removed: removed.length };
+    } catch {
+      return { removed: 0 };
+    }
+  };
+  void normalizeActiveBacklog();
   const listed = (files) => {
     const shown = files.slice(0, MAX_FILES_LISTED);
     const rest = files.length - shown.length;
@@ -2497,7 +2686,7 @@ var contextAutoUpdateHooks = (async ({ client, directory }, options) => {
     "",
     NO_BULK_READS,
     "",
-    "Follow the bootstrap procedure in your system prompt: progressive exploration, then write the five context files within their size targets. When the project already has architecture or decision documentation, link to it instead of duplicating it. Write conclusions, not inventories."
+    "Follow the bootstrap procedure in your system prompt: progressive exploration, then write the five context files within their size targets. Also create `.opencode/context/active.md` with its heading and no tasks. When the project already has architecture or decision documentation, link to it instead of duplicating it. Write conclusions, not inventories."
   ].join("\n") : [
     "Incremental context update. Project root: " + directory,
     "",
@@ -2506,13 +2695,18 @@ var contextAutoUpdateHooks = (async ({ client, directory }, options) => {
     "",
     NO_BULK_READS,
     "",
-    'Follow the incremental-update procedure in your system prompt. Update a context file only if this work introduced or revealed information that will materially help future agents: a new boundary or module, a new or moved canonical entry point, a changed workflow, a new convention, an architectural decision, a new dependency between subsystems, a renamed or moved subsystem, or a previously undocumented invariant. Do not edit documentation merely because source files changed. If nothing material changed, make no edits and report "no update needed".'
+    'Follow the incremental-update procedure in your system prompt. Update a context file only if this work introduced or revealed information that will materially help future agents: a new boundary or module, a new or moved canonical entry point, a changed workflow, a new convention, an architectural decision, a new dependency between subsystems, a renamed or moved subsystem, or a previously undocumented invariant. Do not edit documentation merely because source files changed. If nothing material changed, make no edits and report "no update needed". Also keep `.opencode/context/active.md` current: record work that is in flight, and mark a task finished \u2014 with the date it finished \u2014 when it is.'
   ].join("\n");
   return {
     event: async ({ event }) => {
       try {
         if (event.type === "file.edited") {
-          if (isTracked(event.properties.file)) pending.add(event.properties.file);
+          const file = event.properties.file;
+          if (path2.resolve(root, file) === activeBacklogPath) {
+            await normalizeActiveBacklog();
+            return;
+          }
+          if (isTracked(file)) pending.add(file);
           return;
         }
         if (event.type !== "session.idle") return;
@@ -2551,22 +2745,36 @@ var contextAutoUpdateHooks = (async ({ client, directory }, options) => {
           return;
         }
         const claimKey2 = claimKey(target, "context-autoupdate");
-        acquire(state2, "context", slot, target, claimKey2, target);
-        await log("info", `borrowed pool slot ${slot.index} (${slot.model}, w${slot.weight}) for auto ${mode}`, {
-          slot: slot.index,
-          weight: slot.weight,
-          model: slot.model
-        });
-        lastRun = Date.now();
-        owned.set(target, Date.now());
-        const before = snapshotMap(contextAbs);
-        client.session.prompt({
-          path: { id: target },
-          query: { directory },
-          body: { agent, parts: [{ type: "text", text: compose(mode, files) }] }
-        }).then(async (result) => {
+        let claimed = false;
+        let before;
+        let started;
+        try {
+          acquire(state2, "context", slot, target, claimKey2, target);
+          claimed = true;
+          await log("info", `borrowed pool slot ${slot.index} (${slot.model}, w${slot.weight}) for auto ${mode}`, {
+            slot: slot.index,
+            weight: slot.weight,
+            model: slot.model
+          });
+          lastRun = Date.now();
+          owned.set(target, Date.now());
+          before = snapshotMap(contextAbs);
+          started = client.session.prompt({
+            path: { id: target },
+            query: { directory },
+            body: { agent, parts: [{ type: "text", text: compose(mode, files) }] }
+          });
+        } catch (error) {
+          if (claimed) release(state2, claimKey2);
+          owned.delete(target);
+          await retireSession(client, directory, target, mode, log);
+          requeue();
+          await log("error", `auto ${mode} could not start: ${String(error)}`);
+          return;
+        }
+        started.then(async (result) => {
           release(state2, claimKey2);
-          await retireSession(client, directory, target, mode);
+          await retireSession(client, directory, target, mode, log);
           const failure = result.error ?? result.data?.info?.error;
           if (failure) {
             requeue();
@@ -2590,7 +2798,7 @@ var contextAutoUpdateHooks = (async ({ client, directory }, options) => {
           }
         }).catch(async (error) => {
           release(state2, claimKey2);
-          await retireSession(client, directory, target, mode);
+          await retireSession(client, directory, target, mode, log);
           requeue();
           await log("error", `auto ${mode} failed: ${String(error)}`);
         });
@@ -2624,6 +2832,8 @@ var helperArgv = (helper, title, message, urgency, icon, sound) => {
   const name = helper.split(/[\\/]/).pop() ?? "";
   return name === "lacode" || name === "lacode.js" ? ["notify", title, message, urgency, icon, sound] : [title, message, urgency, icon, sound];
 };
+var PERMISSION_REPLIES = ["once", "always", "reject"];
+var REQUEST_ID_ENV = "LACODE_REQUEST_ID";
 var safeStringify = (value) => {
   try {
     return JSON.stringify(value) ?? void 0;
@@ -2693,12 +2903,16 @@ var shouldNotify = (input) => {
   if (outcome === "done" && input.awaitingResponse) {
     return { notify: false, reason: "awaiting your response" };
   }
-  return {
+  const notification = {
     notify: true,
     title: `opencode \u2014 ${title}`,
     message: notifyMessage(outcome, detail),
     urgency: outcome === "error" ? "critical" : "normal"
   };
+  if (outcome === "permission" && input.requestID) {
+    return { ...notification, actionable: { requestID: input.requestID } };
+  }
+  return notification;
 };
 var questionHeadline = (questions) => {
   const first = questions?.find((entry) => typeof entry?.question === "string" && entry.question.trim());
@@ -2779,6 +2993,7 @@ var SERVICE3 = "notify";
 var COOLDOWN_MS2 = 5e3;
 var MAX_INFLIGHT_HELPERS = 4;
 var HELPER_TIMEOUT_MS = 3e4;
+var ACTION_TIMEOUT_MS = 10 * 6e4 + 3e4;
 var MAX_TRACKED_SESSIONS = 500;
 var SOUND_ENV = "LACODE_SOUND";
 var SOUND_OFF_VALUES = ["0", "false", "off", "no"];
@@ -2818,11 +3033,50 @@ var notifyHooks = (async ({ client, directory }, options, deps = {}) => {
   };
   const log = (level, message, extra) => client.app.log({ body: { service: SERVICE3, level, message, extra } }).catch(() => {
   });
+  const answerPermission = async (sessionID, requestID, action) => {
+    const response = PERMISSION_REPLIES.find((candidate) => candidate === action);
+    if (!response) {
+      void log("warn", `notification action ignored: ${JSON.stringify(action)} is not a permission reply`, {
+        sessionID,
+        requestID
+      });
+      return;
+    }
+    const errorStatus = (error) => {
+      const candidate = error;
+      const status2 = candidate?.response?.status ?? candidate?.cause?.status ?? candidate?.status;
+      return typeof status2 === "number" ? status2 : void 0;
+    };
+    const reply = await client.postSessionIdPermissionsPermissionId({
+      path: { id: sessionID, permissionID: requestID },
+      body: { response }
+    }).then((result) => ({ result })).catch((error) => ({ error }));
+    const status = "result" in reply ? reply.result.response?.status : errorStatus(reply.error);
+    if (status === 404) {
+      void log("debug", "permission already answered", { sessionID, requestID });
+      return;
+    }
+    if ("error" in reply) {
+      void log("warn", `permission reply failed: ${errorDetail(reply.error) ?? String(reply.error)}`, {
+        sessionID,
+        requestID
+      });
+      return;
+    }
+    if (reply.result.error) {
+      void log("warn", `permission reply failed: ${errorDetail(reply.result.error) ?? String(reply.result.error)}`, {
+        sessionID,
+        requestID
+      });
+      return;
+    }
+    void log("info", "permission answered from the notification", { sessionID, requestID, response });
+  };
   const fetchInfo = async (sessionID) => {
     const info = await client.session.get({ path: { id: sessionID }, query: { directory } }).then((result) => result.data).catch(() => void 0);
     return info;
   };
-  const deliverViaHelper = (title, message, urgency, sound) => new Promise((resolve3) => {
+  const deliverViaHelper = (title, message, urgency, sound, requestID) => new Promise((resolve3) => {
     if (inflight >= maxInflight) {
       void log("warn", `notification dropped: ${inflight} helpers already in flight`, { title });
       resolve3({ ok: false, detail: `too many notification helpers in flight (${inflight})` });
@@ -2837,7 +3091,13 @@ var notifyHooks = (async ({ client, directory }, options, deps = {}) => {
       resolve3({ ok: false, detail: "no oc-notify helper found" });
       return;
     }
-    const child = spawn(helper, helperArgv(helper, title, message, urgency, "utilities-terminal", sound), {
+    const actionable = Boolean(requestID);
+    const timeoutMs = actionable ? ACTION_TIMEOUT_MS : helperTimeoutMs;
+    const child = actionable ? spawn(helper, helperArgv(helper, title, message, urgency, "utilities-terminal", sound), {
+      stdio: ["ignore", "pipe", "pipe"],
+      detached: false,
+      env: { ...process.env, [REQUEST_ID_ENV]: requestID }
+    }) : spawn(helper, helperArgv(helper, title, message, urgency, "utilities-terminal", sound), {
       stdio: ["ignore", "ignore", "pipe"],
       detached: true
     });
@@ -2856,11 +3116,15 @@ var notifyHooks = (async ({ client, directory }, options, deps = {}) => {
         child.kill("SIGKILL");
       } catch {
       }
-      void log("warn", `notification helper timed out after ${helperTimeoutMs}ms`, { title });
-      finish({ ok: false, detail: `helper timed out after ${helperTimeoutMs}ms` });
-    }, helperTimeoutMs);
+      void log("warn", `notification helper timed out after ${timeoutMs}ms`, { title });
+      finish({ ok: false, detail: `helper timed out after ${timeoutMs}ms` });
+    }, timeoutMs);
     timer.unref?.();
+    let stdout = "";
     let stderr = "";
+    child.stdout?.on("data", (chunk) => {
+      if (stdout.length < 400) stdout += String(chunk);
+    });
     child.stderr?.on("data", (chunk) => {
       if (stderr.length < 400) stderr += String(chunk);
     });
@@ -2877,12 +3141,13 @@ var notifyHooks = (async ({ client, directory }, options, deps = {}) => {
           message
         });
       }
-      finish({ ok, detail: noise || void 0 });
+      const action = actionable ? stdout.trim() : "";
+      finish({ ok, detail: noise || void 0, ...action ? { action } : {} });
     });
-    child.unref();
+    if (!actionable) child.unref();
   });
   const deliver = deps.deliver ?? deliverViaHelper;
-  const announce = async (sessionID, outcome, detail) => {
+  const announce = async (sessionID, outcome, detail, requestID) => {
     try {
       const info = await fetchInfo(sessionID);
       if (!info) {
@@ -2898,7 +3163,8 @@ var notifyHooks = (async ({ client, directory }, options, deps = {}) => {
         sawMessage: active.has(sessionID),
         // Either kind of block suppresses the idle event's "finished": a session
         // parked on a permission prompt has not finished, it is waiting.
-        awaitingResponse: pending.has(sessionID) || permissions.has(sessionID)
+        awaitingResponse: pending.has(sessionID) || permissions.has(sessionID),
+        requestID
       });
       if (!decision.notify) {
         void log("debug", `suppressed: ${decision.reason}`, { sessionID });
@@ -2916,8 +3182,10 @@ var notifyHooks = (async ({ client, directory }, options, deps = {}) => {
       }
       const message = isRemote ? `${decision.message} (remote)` : decision.message;
       const sound = soundOn && NOTIFY_OUTCOMES.includes(outcome) ? outcome : "none";
-      const sent = await deliver(decision.title, message, decision.urgency, sound);
-      void log(sent.ok ? "info" : "error", sent.ok ? "notified" : "notification failed", {
+      const sent = await deliver(decision.title, message, decision.urgency, sound, requestID);
+      if (sent.action && requestID) await answerPermission(sessionID, requestID, sent.action);
+      const answered = Boolean(sent.action);
+      void log(answered || sent.ok ? "info" : "error", answered ? "permission answered from the notification" : sent.ok ? "notified" : "notification failed", {
         sessionID,
         outcome,
         title: decision.title,
@@ -2961,7 +3229,8 @@ var notifyHooks = (async ({ client, directory }, options, deps = {}) => {
           if (!sessionID2) return;
           permissions.add(sessionID2);
           rememberActive(sessionID2);
-          void announce(sessionID2, "permission", permissionHeadline(properties) || void 0);
+          const requestID = typeof properties?.id === "string" && properties.id ? properties.id : void 0;
+          void announce(sessionID2, "permission", permissionHeadline(properties) || void 0, requestID);
           return;
         }
         if (event.type === "permission.replied") {
@@ -3487,7 +3756,7 @@ var omniRouteHooks = async (input, options, deps = {}) => {
 
 // src/lib/selfupdate.ts
 import { spawn as spawn2 } from "node:child_process";
-import { closeSync, mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync4, renameSync as renameSync2, rmSync, statSync as statSync3, unlinkSync as unlinkSync3, writeFileSync as writeFileSync3, writeSync } from "node:fs";
+import { closeSync, mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync5, renameSync as renameSync2, rmSync, statSync as statSync3, unlinkSync as unlinkSync3, writeFileSync as writeFileSync3, writeSync } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { dirname as dirname3, join as join6, resolve as resolve2 } from "node:path";
 var REGISTRY_LATEST = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
@@ -3514,7 +3783,7 @@ function compareSemver(a, b) {
 }
 function readInstalledVersion(packageRoot, read = (path4) => {
   try {
-    return readFileSync4(path4, "utf8");
+    return readFileSync5(path4, "utf8");
   } catch {
     return void 0;
   }
@@ -3574,7 +3843,7 @@ async function fetchLatest(fetchImpl = fetch, timeoutMs = FETCH_TIMEOUT_MS) {
 }
 function readState(path4 = STATE_PATH) {
   try {
-    return JSON.parse(readFileSync4(path4, "utf8"));
+    return JSON.parse(readFileSync5(path4, "utf8"));
   } catch {
     return {};
   }
@@ -3613,7 +3882,7 @@ function acquireLock(path4 = LOCK_PATH, now = Date.now()) {
   } catch {
     let orphaned = false;
     try {
-      const pid = Number.parseInt(readFileSync4(path4, "utf8").trim(), 10);
+      const pid = Number.parseInt(readFileSync5(path4, "utf8").trim(), 10);
       orphaned = !Number.isFinite(pid) || pid <= 0 || !isProcessAlive(pid);
     } catch {
       orphaned = true;