@retaw106/mmc-oc 2.4.0 → 2.6.0

package/src/shared/model-suggestion-retry.ts

@@ -71,6 +71,8 @@ export interface PromptAttemptInfo {
 export interface PromptRetryOptions {
     transport?: PromptTransport;
     timeoutMs?: number;
+    /** False for callers whose configured model chain must not accept provider suggestions. Defaults to true. */
+    allowModelSuggestions?: boolean;
     /** External abort signal — cancels the in-flight LLM prompt immediately when aborted */
     signal?: AbortSignal;
     /**
@@ -488,6 +490,7 @@ async function attemptOnce(
     callContext: string,
     label: string,
     transport?: PromptTransport,
+    allowModelSuggestions = true,
 ): Promise<void> {
     // Keep this snapshot separate from the object passed to the client. A
     // failed prompt facade may rewrite its request body before rejecting; the
@@ -498,9 +501,8 @@ async function attemptOnce(
         await promptWithTimeout(client, attemptArgs, timeoutMs, signal, transport);
         return;
     } catch (error) {
-        // If non-retryable (abort, overflow, timeout), bubble up immediately.
-        // Don't even try suggestion retry — caller needs the original error.
-        if (isNonRetryable(error, signal)) throw error;
+        // Surface the original error when suggestions are disabled or cannot help.
+        if (isNonRetryable(error, signal) || !allowModelSuggestions) throw error;
 
         const suggestion = parseModelSuggestion(error);
         if (!suggestion || !originalBody.model) {
@@ -576,6 +578,7 @@ export async function promptSyncWithModelSuggestionRetry(
             callContext,
             explicitPrimaryLabel,
             options.transport,
+            options.allowModelSuggestions,
         );
         return;
     } catch (error) {
@@ -620,6 +623,7 @@ export async function promptSyncWithModelSuggestionRetry(
                 callContext,
                 label,
                 options.transport,
+                options.allowModelSuggestions,
             );
             log(
                 `[${callContext}] fallback succeeded with ${label} (attempt ${i + 2}/${fallbacks.length + 1})`,
@@ -665,6 +669,7 @@ async function attemptAndValidate<TOutput, TValidated>(
             callContext,
             attempt.label,
             options.transport,
+            options.allowModelSuggestions,
         );
     } catch (error) {
         throw {

package/src/shared/prompt-surface-a1-golden.md

@@ -1,6 +1,6 @@
 # Magic Context agent-facing surface (exported from source)
 
-Generated by `packages/plugin/scripts/export-agent-surface.ts` at 2026-10-01.
+Generated by `packages/plugin/scripts/export-agent-surface.ts` at 2026-11-01.
 Token counts are Claude BPE estimates on the raw text.
 
 ## 1. System-prompt guidance section
@@ -201,7 +201,7 @@ Finer recovery:
 }
 ```
 
-### mmc_note — description ~319 tokens, params ~203 tokens (total ~522)
+### mmc_note — description ~319 tokens, params ~196 tokens (total ~515)
 
 **Description:**
 
@@ -228,7 +228,7 @@ First line is the title (under 80 chars), followed by detail. Operations:
 ```json
 {
   "action": {
-    "description": "write | read | update | dismiss. Defaults to write when content is given, else read.",
+    "description": "write | read | update | dismiss.",
     "type": "string",
     "enum": [
       "write",
@@ -259,8 +259,7 @@ First line is the title (under 80 chars), followed by detail. Operations:
     "type": "number"
   },
   "note_ids": {
-    "description": "Note ids: one for update, 1–50 for dismiss or read (read returns full bodies). Ignored by write.",
-    "minItems": 1,
+    "description": "Note ids: one for update, 1–50 for dismiss, or 1–50 to read those notes in full. Write and a plain read take an empty list.",
     "maxItems": 50,
     "type": "array",
     "items": {
@@ -272,7 +271,7 @@ First line is the title (under 80 chars), followed by detail. Operations:
 }
 ```
 
-### mmc_memory — description ~279 tokens, params ~172 tokens (total ~451)
+### mmc_memory — description ~279 tokens, params ~175 tokens (total ~454)
 
 **Description:**
 
@@ -310,7 +309,7 @@ Examples: category="CONFIG_VALUES", content="OpenCode source is at ~/Work/OSS/op
     "type": "string"
   },
   "category": {
-    "description": "Kind of fact (required for write; on update/merge optional, omitted keeps the current category).",
+    "description": "Kind of fact (required for write; on update/merge, pass the memory's current category to keep it).",
     "type": "string",
     "enum": [
       "PROJECT_RULES",

package/src/shared/rpc-discovery-cleanup.test.ts

@@ -0,0 +1,125 @@
+import { expect, spyOn, test } from "bun:test";
+import { existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { reapDeadRpcDiscovery } from "./rpc-discovery-cleanup";
+import { MagicContextRpcServer } from "./rpc-server";
+import * as utils from "./rpc-utils";
+import * as storage from "./storage-permissions";
+import { createTestTempDirFromPath } from "./test-temp-dir";
+
+test("RPC startup reaps dead records across projects but keeps live and inconclusive records", async () => {
+    const root = createTestTempDirFromPath(join(tmpdir(), "rpc-reap-"));
+    const server = new MagicContextRpcServer(root, "/current-project");
+    const dir = utils.rpcPortDir(root, "/other-project");
+    const empty = utils.rpcPortDir(root, "/empty-project");
+    mkdirSync(dir, { recursive: true });
+    mkdirSync(empty, { recursive: true });
+    for (const pid of [999999, 888888, process.pid])
+        writeFileSync(
+            join(dir, `port-${pid}.json`),
+            JSON.stringify({ port: 1234, pid, token: "do-not-log" }),
+        );
+    const probe = spyOn(utils, "inspectProcessesAsync").mockResolvedValue({
+        pi: { state: "absent", processIds: [] },
+        evidence: () => ({ processStartTime: null, commandLine: null, imageName: null }),
+        liveness: (pid: number) =>
+            pid === 999999 ? "dead" : pid === 888888 ? "inconclusive" : "alive",
+    } as Awaited<ReturnType<typeof utils.inspectProcessesAsync>>);
+    try {
+        await server.start();
+        expect(readdirSync(dir).sort()).toEqual(
+            [`port-${process.pid}.json`, "port-888888.json"].sort(),
+        );
+        expect(existsSync(empty)).toBe(false);
+    } finally {
+        server.stop();
+        probe.mockRestore();
+        rmSync(root, { recursive: true, force: true });
+    }
+});
+
+test("cleanup keeps changed, malformed and out-of-scope records and requests fresh evidence", async () => {
+    const root = createTestTempDirFromPath(join(tmpdir(), "rpc-reap-race-"));
+    const directory = utils.rpcPortDir(root, "/project");
+    const outside = join(root, "rpc", "not-a-project-hash");
+    mkdirSync(directory, { recursive: true });
+    mkdirSync(outside, { recursive: true });
+    const path = join(directory, "port-999999.json");
+    writeFileSync(path, JSON.stringify({ port: 1234, pid: 999999, token: "old" }));
+    writeFileSync(join(directory, "port-888888.json"), "not json");
+    writeFileSync(join(directory, "unrelated.json"), "keep");
+    mkdirSync(join(directory, "port-777777.json"));
+    writeFileSync(join(outside, "port-999999.json"), "keep");
+    const probe = spyOn(utils, "inspectProcessesAsync").mockImplementation(async (fresh) => {
+        expect(fresh).toBe(true);
+        writeFileSync(path, JSON.stringify({ port: 1234, pid: 999999, token: "new" }));
+        return {
+            pi: { state: "absent", processIds: [] },
+            evidence: () => ({ startTime: null, commandLine: null }),
+            liveness: () => "dead",
+        };
+    });
+    try {
+        await reapDeadRpcDiscovery(root);
+        expect(probe).toHaveBeenCalledTimes(1);
+        expect(readdirSync(directory)).toHaveLength(4);
+        expect(existsSync(join(outside, "port-999999.json"))).toBe(true);
+    } finally {
+        probe.mockRestore();
+        rmSync(root, { recursive: true, force: true });
+    }
+});
+
+test("stop during startup prevents listening and publishing", async () => {
+    const root = createTestTempDirFromPath(join(tmpdir(), "rpc-start-stop-"));
+    const server = new MagicContextRpcServer(root, root);
+    try {
+        const starting = server.start();
+        server.stop();
+        expect(await starting).toBe(0);
+        expect(existsSync(utils.rpcPortDir(root, root))).toBe(false);
+    } finally {
+        server.stop();
+        rmSync(root, { recursive: true, force: true });
+    }
+});
+
+test.each(["ENOENT", "EACCES"])("publishing retries only ENOENT (%s)", async (code) => {
+    const root = createTestTempDirFromPath(join(tmpdir(), "rpc-publish-race-"));
+    const server = new MagicContextRpcServer(root, root);
+    const original = storage.writeStorageFileAtomicSync;
+    let calls = 0;
+    const writer = spyOn(storage, "writeStorageFileAtomicSync").mockImplementation((...args) => {
+        if (++calls === 1) throw Object.assign(new Error("publish race"), { code });
+        return original(...args);
+    });
+    try {
+        await server.start();
+        expect(calls).toBe(code === "ENOENT" ? 2 : 1);
+        expect(existsSync(utils.rpcPortDir(root, root))).toBe(code === "ENOENT");
+    } finally {
+        server.stop();
+        writer.mockRestore();
+        rmSync(root, { recursive: true, force: true });
+    }
+});
+
+test("RPC stop removes its empty discovery directory but preserves other instances", async () => {
+    const root = createTestTempDirFromPath(join(tmpdir(), "rpc-stop-reap-"));
+    const first = new MagicContextRpcServer(root, root);
+    const second = new MagicContextRpcServer(root, root);
+    const directory = utils.rpcPortDir(root, root);
+    try {
+        await first.start();
+        await second.start();
+        first.stop();
+        expect(readdirSync(directory)).toHaveLength(1);
+        second.stop();
+        expect(existsSync(directory)).toBe(false);
+    } finally {
+        first.stop();
+        second.stop();
+        rmSync(root, { recursive: true, force: true });
+    }
+});

package/src/shared/rpc-discovery-cleanup.ts

@@ -0,0 +1,57 @@
+import { type Dirent, promises as fs } from "node:fs";
+import { join } from "node:path";
+import { inspectProcessesAsync, parseRpcPortFile } from "./rpc-utils";
+
+/** Reap only records proven dead; live, unreadable and uncertain records stay. */
+export async function reapDeadRpcDiscovery(storageDir: string): Promise<void> {
+    const root = join(storageDir, "rpc");
+    let directories: Dirent[];
+    try {
+        directories = await fs.readdir(root, { withFileTypes: true });
+    } catch {
+        return;
+    }
+    const records: { path: string; content: string; pid: number }[] = [];
+    const projectDirs: string[] = [];
+    for (const entry of directories) {
+        if (!entry.isDirectory() || !/^[0-9a-f]{16}$/.test(entry.name)) continue;
+        const directory = join(root, entry.name);
+        projectDirs.push(directory);
+        try {
+            for (const name of await fs.readdir(directory)) {
+                const match = /^port-(\d+)(?:-[0-9a-f]+)?\.json$/.exec(name);
+                if (!match) continue;
+                const path = join(directory, name);
+                try {
+                    const content = await fs.readFile(path, "utf8");
+                    const record = parseRpcPortFile(content, Number(match[1]));
+                    if (record && record.pid === Number(match[1]))
+                        records.push({ path, content, pid: record.pid });
+                } catch {
+                    // Another host may be publishing or stopping this record.
+                }
+            }
+        } catch {
+            // An inaccessible project must not prevent cleanup of other projects.
+        }
+    }
+    // Read records before a fresh process snapshot so a recently started host
+    // cannot be mistaken for a PID missing from an older cached snapshot.
+    const processes = records.length ? await inspectProcessesAsync(true) : undefined;
+    for (const record of records) {
+        if (processes?.liveness(record.pid) !== "dead") continue;
+        try {
+            if ((await fs.readFile(record.path, "utf8")) === record.content)
+                await fs.unlink(record.path);
+        } catch {
+            // Leave the record for a later pass; never recursively remove its directory.
+        }
+    }
+    for (const directory of projectDirs) {
+        try {
+            await fs.rmdir(directory);
+        } catch {
+            // Leave non-empty directories untouched; their owners may not be proven dead.
+        }
+    }
+}

package/src/shared/rpc-server.ts

@@ -1,7 +1,8 @@
 import { randomBytes, timingSafeEqual } from "node:crypto";
-import { readdirSync, readFileSync, unlinkSync } from "node:fs";
+import { readdirSync, readFileSync, rmdirSync, unlinkSync } from "node:fs";
 import type { Server, ServerWebSocket } from "bun";
 import { log } from "./logger";
+import { reapDeadRpcDiscovery } from "./rpc-discovery-cleanup";
 import {
     acknowledgeNotifications,
     drainNotifications,
@@ -82,6 +83,7 @@ export class MagicContextRpcServer {
     private portFilePath: string;
     private portDir: string;
     private startedAt = Date.now();
+    private stopped = false;
     private readonly instanceId = randomBytes(8).toString("hex");
     private unregisterOwnInstance: (() => void) | null = null;
     /** Every authenticated WS socket, so dispose can close them all. */
@@ -93,7 +95,10 @@ export class MagicContextRpcServer {
     // discovers/guesses the port.
     private readonly token = randomBytes(32).toString("hex");
 
-    constructor(storageDir: string, directory: string) {
+    constructor(
+        private storageDir: string,
+        directory: string,
+    ) {
         this.portFilePath = rpcPortFilePath(storageDir, directory, process.pid, this.instanceId);
         this.portDir = rpcPortDir(storageDir, directory);
     }
@@ -131,6 +136,9 @@ export class MagicContextRpcServer {
             log("rpc server skipped: Bun runtime not available (no TUI consumer)");
             return 0;
         }
+        this.stopped = false;
+        await reapDeadRpcDiscovery(this.storageDir);
+        if (this.stopped) return 0;
         this.startedAt = Date.now();
         const self = this;
         const server = Bun.serve<WsData>({
@@ -170,17 +178,26 @@ export class MagicContextRpcServer {
             // The discovery file carries the RPC bearer token. The shared writer
             // creates its directory and temporary file with owner-only modes.
             this.unregisterOwnInstance ??= registerOwnRpcServerInstance(this.instanceId);
-            writeStorageFileAtomicSync(
-                this.portFilePath,
-                JSON.stringify({
-                    port: this.port,
-                    pid: process.pid,
-                    started_at: this.startedAt,
-                    kind: "OpenCode server",
-                    token: this.token,
-                    instance_id: this.instanceId,
-                }),
-            );
+            const publish = () =>
+                writeStorageFileAtomicSync(
+                    this.portFilePath,
+                    JSON.stringify({
+                        port: this.port,
+                        pid: process.pid,
+                        started_at: this.startedAt,
+                        kind: "OpenCode server",
+                        token: this.token,
+                        instance_id: this.instanceId,
+                    }),
+                );
+            try {
+                publish();
+            } catch (error) {
+                // An empty-directory reaper can race the writer before its temp
+                // file exists. Recreate the directory and retry that case only.
+                if ((error as NodeJS.ErrnoException).code !== "ENOENT") throw error;
+                publish();
+            }
             log(`[rpc] server listening on 127.0.0.1:${this.port}`);
         } catch (err) {
             log(`[rpc] failed to write port file: ${err}`);
@@ -191,6 +208,7 @@ export class MagicContextRpcServer {
 
     /** Stop the server: close every socket, stop accepting, remove port file. */
     stop(): void {
+        this.stopped = true;
         for (const ws of this.sockets) {
             try {
                 if (ws.data.authTimer) clearTimeout(ws.data.authTimer);
@@ -211,6 +229,11 @@ export class MagicContextRpcServer {
         } catch {
             // Intentional: port file may already be gone
         }
+        try {
+            rmdirSync(this.portDir);
+        } catch {
+            // Other instances' discovery records must survive this server's stop.
+        }
         this.unregisterOwnInstance?.();
         this.unregisterOwnInstance = null;
     }

package/src/shared/search-text.test.ts

@@ -0,0 +1,30 @@
+import { expect, test } from "bun:test";
+import { cleanSearchText, keywordRelevance, matchedSearchSnippet } from "./search-text";
+
+test("notification trees never contribute relevance or display text", () => {
+    expect(
+        cleanSearchText(
+            '<task_cohort id="parent"><task>hidden</task>status</task_cohort> actual answer',
+        ),
+    ).toBe("actual answer");
+    expect(cleanSearchText("kept <task>hidden </task_cohort> still hidden</task> kept")).toBe(
+        "kept kept",
+    );
+    expect(cleanSearchText('<task id="truncated">background result…')).toBe("");
+    expect(keywordRelevance("historian cache wiring", "<task>historian cache wiring</task>")).toBe(
+        0,
+    );
+});
+
+test("keyword relevance measures distinct coverage rather than rank", () => {
+    expect(keywordRelevance("explain historian cache wiring", "cache icons")).toBeCloseTo(0.2);
+    expect(keywordRelevance("historian cache wiring", "historian cache wiring")).toBeCloseTo(0.8);
+});
+
+test("snippets prefer dense passages over an irrelevant header", () => {
+    const content = `Header cache. ${"padding ".repeat(150)}Historian cache wiring uses incremental pools. ${"trailing ".repeat(100)}`;
+    const snippet = matchedSearchSnippet(content, "historian cache wiring", 80);
+    expect(snippet).toContain("Historian cache wiring");
+    expect(snippet).not.toContain("Header");
+    expect(matchedSearchSnippet(content, "unrelated deployment")).toBe("");
+});

package/src/shared/search-text.ts

@@ -0,0 +1,62 @@
+import { removeNestedBlocks } from "./system-directive";
+
+export function removeTaskNotifications(text: string): string {
+    return removeNestedBlocks(text, ["task", "task_cohort"]);
+}
+
+/** Remove injected notifications before scoring or rendering; saved hints replay unchanged. */
+export function cleanSearchText(text: string): string {
+    return removeNestedBlocks(text, ["system-reminder", "task", "task_cohort"])
+        .replace(/\s+/g, " ")
+        .trim();
+}
+
+const QUERY_STOP_WORDS = new Set(
+    "a an and are as at be been by can could did do does for from how i in is it me my of on or our please should that the their them there these they this to us was we were what when where which who why will with would you your".split(
+        " ",
+    ),
+);
+
+function terms(text: string): string[] {
+    return [
+        ...new Set(
+            (text.toLowerCase().match(/[\p{L}\p{N}_]+/gu) ?? []).filter(
+                (term) => !QUERY_STOP_WORDS.has(term),
+            ),
+        ),
+    ];
+}
+
+/** Score distinct query coverage independently of other results. */
+export function keywordRelevance(query: string, content: string): number {
+    const needles = terms(query);
+    if (needles.length === 0) return 0;
+    const words = new Set(terms(cleanSearchText(content)));
+    return (0.8 * needles.filter((term) => words.has(term)).length) / needles.length;
+}
+
+/** Pick the densest matching passage before compression discards matched words. */
+export function matchedSearchSnippet(content: string, query: string, cap = 220): string {
+    const text = cleanSearchText(content);
+    const needles = new Set(terms(query));
+    const matches = [...text.matchAll(/[\p{L}\p{N}_]+/gu)].filter((match) =>
+        needles.has(match[0].toLowerCase()),
+    );
+    if (matches.length === 0) return "";
+    let bestStart = matches[0].index;
+    let bestCoverage = -1;
+    for (const match of matches) {
+        const start = Math.max(0, match.index - Math.floor(cap / 5));
+        const coverage = keywordRelevance(query, text.slice(start, start + cap));
+        if (coverage > bestCoverage) {
+            bestStart = start;
+            bestCoverage = coverage;
+        }
+    }
+    if (bestStart > 0) {
+        const boundary = text.indexOf(" ", bestStart);
+        if (boundary >= 0 && boundary < matches[matches.length - 1].index) bestStart = boundary + 1;
+    }
+    const passage = text.slice(bestStart, bestStart + cap).trim();
+    return `${bestStart > 0 ? "…" : ""}${passage}${bestStart + cap < text.length ? "…" : ""}`;
+}

package/src/shared/sqlite-transaction-mode-guard.test.ts

@@ -27,6 +27,8 @@ const READ_ONLY_DEFERRED_TRANSACTIONS: Record<string, string> = {
         "pins one read snapshot so the session's rowid coverage proof and the filtered message search see the same rows; never writes (read-only connections use it too)",
     "packages/plugin/src/hooks/magic-context/lkg-persist.ts#loadPersistedLkgSlot":
         "reads an LKG slot row and its prefix slices as one consistent snapshot even while another connection saves the slot; never writes (a failed verification clear opens its own transaction)",
+    "packages/plugin/src/hooks/magic-context/compaction-marker-manager.ts#reconcileForkOrphanedCompactionMarkers":
+        "reads publication intent and finalized ownership as one context.db snapshot while host-order probes use the already-open host connection; never writes context.db",
 };
 
 const REPOSITORY_ROOT = resolve(import.meta.dir, "../../../..");