opencode-codeops 2.1.0 → 2.1.1

package/CHANGELOG.md

@@ -2,8 +2,29 @@
 
 All notable changes to CodeOps are recorded here.
 
+## 2.1.1 — 2026-10-09
+
+### Fixes
+
+- plugin: stop deleting the shared scratch directory on unload
+
+### Tests
+
+- plugin: pin the scratch-directory lifecycle contract (red phase)
+
+### Documentation
+
+- changelog: add the 2.1.0 usage notes and complete the feature
+
 ## 2.1.0 — 2026-10-09
 
+### Usage
+
+- Run the `analyze-agents` skill on demand for a project-level specialist check; it records
+  `codeops/specialist-check.json`, and `analyze-project` reports the coverage line.
+- `exec-plan` records each ruling batch in `plans/<plan>/05-findings.md`, which feeds finding-area
+  recurrence in the check.
+
 ### Documentation
 
 - readme: list the analyze-agents skill and the on-demand detection flow

package/README.md

@@ -145,11 +145,11 @@ The plugin also warns (non-blocking) if any tool attempts to edit `codeops/.code
 
 Every session also gets a workspace-hygiene guard: the plugin exports `CODEOPS_TMPDIR`, a scratch
 directory under the OS temp directory that belongs to the running OpenCode plugin instance. Skills
-and agents put temporary files there and delete them when the run completes; the plugin removes the
-directory when it unloads and sweeps directories abandoned by interrupted runs at startup, so
-CodeOps does not accumulate scratch data. Because OpenCode 2 does not expose a session id to shell
-hooks, concurrent sessions served by one instance share this directory. The full protocol is in
-`_shared/workspace-hygiene.md`.
+and agents put temporary files there and delete them when the run completes; the plugin sweeps
+directories abandoned by interrupted runs at startup (older than seven days), so CodeOps does not
+accumulate scratch data. Because OpenCode 2 does not expose a session id to shell hooks, concurrent
+sessions served by one instance share this directory, and no session's scratch is deleted while
+others may still use it. The full protocol is in `_shared/workspace-hygiene.md`.
 
 ## Agent model configuration
 

package/_shared/workspace-hygiene.md

@@ -51,7 +51,9 @@ keep scratch file names specific to the run to avoid collisions.
 
 ## Automatic safety net
 
-The CodeOps plugin exports `$CODEOPS_TMPDIR` for each runtime and removes that runtime's
-directory when the plugin unloads. At startup it also removes CodeOps temp directories older
-than seven days, so an interrupted run cannot leak storage forever. The safety net is a
-fallback, not a substitute: the run itself still performs the cleanup pass above.
+The CodeOps plugin exports `$CODEOPS_TMPDIR` for each runtime. At startup it removes CodeOps
+temp directories older than seven days, so an interrupted run cannot leak storage forever.
+The plugin never deletes a runtime's directory while sessions may still be running — several
+sessions can share one directory, so reclamation happens only through the age-based sweep.
+The safety net is a fallback, not a substitute: the run itself still performs the cleanup
+pass above.

package/bin/lib/tmp-hygiene.d.mts

@@ -33,6 +33,3 @@ export interface CleanStaleTmpDirsOptions {
 
 /** Remove session directories abandoned by interrupted or crashed runs. */
 export declare function cleanStaleTmpDirs(options?: CleanStaleTmpDirsOptions): string[]
-
-/** Remove exactly one session's temp directory. */
-export declare function removeSessionTmpDir(sessionID?: string, base?: string): boolean

package/bin/lib/tmp-hygiene.mjs

@@ -9,8 +9,7 @@
  * - it computes the per-session directory the plugin exports as
  *   `$CODEOPS_TMPDIR`, under a CodeOps-owned root inside the OS temp directory;
  * - it sweeps directories abandoned by interrupted runs once they are older
- *   than a safety cap; and
- * - it removes exactly one session's directory when that session is deleted.
+ *   than a safety cap.
  *
  * Safety is the whole point: every path derives from a sanitized session
  * identifier, the sweep walks only the CodeOps-owned root, symlinked entries
@@ -22,7 +21,7 @@
 
 import { lstatSync, mkdirSync, readdirSync, rmSync } from "node:fs"
 import { tmpdir } from "node:os"
-import { join, resolve, sep } from "node:path"
+import { join, resolve } from "node:path"
 
 /**
  * Age after which a session directory is treated as abandoned.
@@ -147,34 +146,3 @@ export function cleanStaleTmpDirs({
 
   return removed
 }
-
-/**
- * Remove exactly one session's temp directory.
- *
- * Used when a session is deleted: its scratch can no longer be needed. The
- * removal refuses anything that is not a regular directory strictly inside
- * the CodeOps temp root, so a symlink or an unexpected path is left alone.
- *
- * @param sessionID - Session identifier whose directory should be removed
- * @param base - Base temp directory (injectable for tests)
- * @returns True when the directory was removed
- */
-export function removeSessionTmpDir(sessionID, base = tmpdir()) {
-  const root = resolve(codeopsTmpRoot(base))
-  const dir = sessionTmpDir(sessionID, base)
-
-  if (!resolve(dir).startsWith(root + sep)) return false
-
-  try {
-    if (!lstatSync(dir).isDirectory()) return false
-  } catch {
-    return false
-  }
-
-  try {
-    rmSync(dir, { recursive: true, force: true })
-    return true
-  } catch {
-    return false
-  }
-}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-codeops",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "Specification-first engineering for complex systems — CodeOps plugin for OpenCode",
   "type": "module",
   "engines": {

package/plugin/index.ts

@@ -8,7 +8,6 @@ import { fileURLToPath } from "node:url"
 import {
   cleanStaleTmpDirs,
   ensureSessionTmpDir,
-  removeSessionTmpDir,
 } from "../bin/lib/tmp-hygiene.mjs"
 import {
   appendEffortTrace,
@@ -70,9 +69,9 @@ const standardsText = `${codingStandards}\n\n${outputStyle}`
 // OpenCode 2 does not expose a session identifier to shell hooks, so the plugin
 // owns one scratch directory per plugin runtime instead of one per session.
 // Skills and subagents still receive it as CODEOPS_TMPDIR and delete their own
-// scratch; the plugin removes the runtime directory on unload and sweeps
-// directories abandoned by earlier runs. Two sessions served by the same
-// runtime share this directory; see _shared/workspace-hygiene.md.
+// scratch; the startup sweep reclaims directories abandoned by earlier runs.
+// Several sessions can share one runtime directory, so the plugin must never
+// delete it on unload; see _shared/workspace-hygiene.md.
 // ---------------------------------------------------------------------------
 const runtimeID = `runtime-${randomUUID()}`
 
@@ -386,16 +385,12 @@ export default Plugin.define({
     })
 
     // ---------------------------------------------------------------------
-    // Plugin cleanup: stop listening for events and remove the runtime's
-    // scratch directory. Both are best effort.
+    // Plugin cleanup: stop listening for events. The runtime's scratch
+    // directory is deliberately left in place — other sessions may still be
+    // using it — and the startup sweep reclaims abandoned directories.
     // ---------------------------------------------------------------------
     return () => {
       controller.abort()
-      try {
-        removeSessionTmpDir(runtimeID)
-      } catch {
-        // Best effort only.
-      }
     }
   },
 })

package/plugin/temp-lifecycle.spec.test.mjs

@@ -0,0 +1,55 @@
+/**
+ * Specification tests for the scratch-directory lifecycle.
+ *
+ * The plugin exports one scratch directory (`$CODEOPS_TMPDIR`) per plugin
+ * runtime, and every session served by that runtime shares it. Deleting the
+ * directory when a plugin instance unloads destroys in-flight scratch files of
+ * sessions that are still running, so the contract is: the plugin never
+ * deletes the shared directory; the age-based sweep reclaims abandoned
+ * directories instead.
+ *
+ * This is the regression oracle for that contract: a failure here means the
+ * repository reintroduced early deletion, never that the test is wrong.
+ *
+ * @module temp-lifecycle.spec.test
+ */
+
+import assert from "node:assert/strict"
+import { readFileSync } from "node:fs"
+import { dirname, join, resolve } from "node:path"
+import { describe, it } from "node:test"
+import { fileURLToPath } from "node:url"
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..")
+
+/**
+ * Read a repository file as UTF-8 text.
+ * @param {string} relativePath - Path relative to the repository root.
+ * @returns {string} The file contents.
+ */
+function read(relativePath) {
+  return readFileSync(join(ROOT, relativePath), "utf8")
+}
+
+describe("scratch-directory lifecycle", () => {
+  it("keeps the plugin free of scratch-directory deletion", () => {
+    const plugin = read("plugin/index.ts")
+    assert.doesNotMatch(plugin, /removeSessionTmpDir/)
+    assert.match(plugin, /cleanStaleTmpDirs\(\)/)
+    assert.match(plugin, /controller\.abort\(\)/)
+  })
+
+  it("keeps the temp hygiene module free of exact-directory deletion", () => {
+    assert.doesNotMatch(read("bin/lib/tmp-hygiene.mjs"), /removeSessionTmpDir/)
+    assert.doesNotMatch(read("bin/lib/tmp-hygiene.d.mts"), /removeSessionTmpDir/)
+  })
+
+  it("documents the age-based sweep as the automatic cleanup", () => {
+    const hygiene = read("_shared/workspace-hygiene.md")
+    assert.doesNotMatch(hygiene, /removes that runtime's\s+directory when the plugin unloads/i)
+    assert.match(hygiene, /seven days/i)
+    const readme = read("README.md")
+    assert.doesNotMatch(readme, /removes the\s+directory when it unloads/i)
+    assert.match(readme, /sweeps\s+directories abandoned/i)
+  })
+})