opencode-lossless 0.1.2 → 0.1.3

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # opencode-lossless
 
+## 0.1.3
+
+### Patch Changes
+
+- 9c0fdc5: Harden `lossless-gc` against deleting sidecars that are live in another process. Sweeps skip stores active within the last 60 minutes and name them. Bare `--older-than 0` without `--session` is refused. `--session` on a store active within 60 minutes needs `--force`. Candidates younger than 24 hours carry a warning.
+- 470a7b7: Verify file bytes and sha256 against the linked message text before inserting file rows on import. A repeated entry id with different text, or a file row whose text differs from the stored message, also refuses the import without writing. Existing rows stay untouched.
+- 470a7b7: Add a mechanical tier for noisy tools. Name tools in `mechanicalTools` in summarizer-config, `/lcm` config, or the OpenCode plugin options. Their spans compact into deterministic `mechanical` leaves with zero summarizer spend at compaction time. Every message stays stored verbatim and covered, so the integrity coverage check passes, and heal re-derives a skipped leaf from provenance on demand. There is no ingest filtering.
+- 9c0fdc5: Change the default `sidecarDir` to the auto-detected global path. The plugin uses `XDG_DATA_HOME` with a `~/.local/share` fallback, uses `LOCALAPPDATA` with an `APPDATA` fallback and then a `<home>/AppData/Local` fallback on Windows, and uses `./.lossless` when no home resolves. To keep per-project storage, set `"sidecarDir": "./.lossless"`. After upgrading a project that used `./.lossless`, keep that setting to keep its history: `/lossless-migrate` upgrades in place in the configured directory only (dry run by default) and moves nothing, so it cannot recover history left in `./.lossless`. To carry history across, export per session under the old config and import into an empty store under the new one, or stop the server first and copy the `.sqlite`, `-wal`, and `-shm` files across and then migrate. The plugin never moves sidecars.
+- 470a7b7: Report orphan sidecars in doctor. `integritySnapshot` now lists sidecar files and stale `wal` and `shm` files with no live session (`.sqlite` by default, `.db` for Pi). `checkIntegrity` reports them as a read-only `orphan-sidecar` finding through `lcm doctor` and the diagnose bundle. Report only. Deletion stays manual.
+- 470a7b7: Upgrade recall search. `lcm_grep` takes `role`, `date_start`/`date_end`, and `tool_name` filters. Role and time are SQL predicates on the stored columns with a covering index. Tool scope is an FTS rewrite against `[tool:Name]` markers with no new table or index. `lcm_expand` takes an `anchor` entry id that centers the listing window with edge clamping. The recall manifest and the retrieval brief order by stop-word stripped query-word overlap over summary headers. A read-only files view lists each linked file once with an incomplete-coverage flag and a `large-inline` mark. No migration and no new writer.
+- 470a7b7: Add a read-only static sidecar dump. `/lcm dump` and `/lossless-dump` open the session sidecar `queryOnly` and reuse the recall views and metric rows. The dump redacts displayed seams, labels removed rows, and reports old generations as named skips. Output is capped at 16 KB.
+- 0c70748: Ask providers for a whole number of tokens. A leaf target was half of the calibrated chunk budget, so it was fractional whenever that budget was odd, and a provider that validates `max_tokens` as an unsigned integer rejected the call with a 422. The ladder then stored the deterministic truncate: in one week of Pi sessions that was 1,315 of 5,358 summaries, with 540 rejected calls naming values such as `max_tokens: 5543.5`. The request builder now rounds to nearest, never below one, and treats a non-finite budget as that floor, before the reasoning headroom is added. Integer budgets produce the same request as before. No config key, migration or metric row changes.
+
 ## 0.1.2
 
 ### Patch Changes

package/README.md

@@ -2,12 +2,12 @@
 
 **Lossless Context Management (LCM) for OpenCode v2. Long sessions keep working past the point where the model would forget, and every verbatim message stays searchable and readable.**
 
-Install it, and the adapter mirrors every prompt, assistant reply, and tool exchange into a per-session SQLite sidecar. The model reads that history back through `lcm_grep`, `lcm_describe`, and `lcm_expand`; with `assembly` true (the default) it also gets `lcm_expand_query`, which answers through a child session without pulling the originals into the parent. With assembly on, the adapter also owns the context boundary: past the swap point the DAG projection replaces the aged history, and when the host compacts, the adapter hands it the frontier as the checkpoint instead of letting it summarize.
+Install it, and the adapter mirrors every prompt, assistant reply, and tool exchange into a per-session SQLite sidecar. The model reads that history back through `lcm_grep`, `lcm_describe`, and `lcm_expand`. With `assembly` true (the default) it also gets `lcm_expand_query`, which answers through a child session without pulling the originals into the parent. With assembly on, the adapter also owns the context boundary. Past the swap point the DAG projection replaces the aged history, and when the host compacts, the adapter hands it the frontier as the checkpoint instead of letting it summarize.
 
 This package is the OpenCode v2 adapter over
 [`lossless-core`](https://npmx.dev/package/lossless-core), the engine that
 ingests the history and builds the summaries. Verified against OpenCode v2 in
-live sessions: the plugin loads from its directory, all mirrored text matches
+live sessions. The plugin loads from its directory, all mirrored text matches
 verbatim, and host compactions store the DAG frontier as their checkpoint.
 
 ## Install
@@ -20,14 +20,16 @@ The equivalent entry in `opencode.json`:
 
 ```json
 {
-  "plugins": [{ "package": "opencode-lossless", "options": { "sidecarDir": "./.lossless" } }]
+  "plugins": [{ "package": "opencode-lossless" }]
 }
 ```
 
+To keep sidecars inside the project, set `sidecarDir` to `"./.lossless"`.
+
 ## Quick start
 
-Zero config required: passive mirroring starts immediately, and swaps begin
-once context crosses the swap point. Ten commands, all `lossless-*`:
+The plugin needs no configuration. Passive mirroring starts immediately, and swaps begin
+once context crosses the swap point. The commands all start with `lossless-*`:
 
 ```sh
 /lossless-status    # message and compaction summary counts per live sidecar
@@ -40,11 +42,14 @@ once context crosses the swap point. Ten commands, all `lossless-*`:
 /lossless-diagnose  # redacted, pasteable diagnostics block; --save writes it at mode 0600
 /lossless-migrate   # upgrade older-schema sidecars in place (dry-run by default)
 /lossless-gc        # list old sidecars, or export and delete them (never the current session)
+/lossless-dump      # read-only dump of this session's sidecar; --include-removed keeps removed rows, --save writes mode 0600
 ```
 
-The model gets four recall tools: `lcm_grep` (search this session, `scope`
-reaches past sessions), `lcm_describe` (inspect one summary without expanding
-it), `lcm_expand` (read the originals a summary covers), and
+The model gets recall tools: `lcm_grep` (search this session, `scope`
+reaches past sessions, `role`, `date_start`, `date_end`, and `tool_name`
+filter rows), `lcm_describe` (inspect one summary without expanding
+it), `lcm_expand` (read the originals a summary covers, `anchor` centers
+the listing on one entry), and
 `lcm_expand_query` (a bounded child session reads and answers, so the
 originals never enter the parent's context).
 
@@ -58,12 +63,12 @@ originals never enter the parent's context).
 }
 ```
 
-`sidecarDir` holds one SQLite file per session (0700 dir, 0600 files; delete
-one to forget that session). `assembly: false` leaves compaction to the host
-and drops `/lossless-pass` and `lcm_expand_query`. Every other key (thresholds,
-summarizer chain and budgets, heal window, reader timeout) lives on the
+The example stores sidecars in the project. Without `sidecarDir`, the plugin uses the global auto-detected path, which holds sessions from every project. The [config reference](https://stainless-code.com/lossless/reference/opencode/config) lists the exact default paths. `sidecarDir` holds one SQLite file per session (0700 dir, 0600 files).
+Delete one file to forget that session. `assembly: false` leaves compaction to the host
+and drops `/lossless-pass` and `lcm_expand_query`. The
 [config reference](https://stainless-code.com/lossless/reference/opencode/config)
-with its default.
+documents every other key and its default: thresholds,
+summarizer chain and budgets, heal window, and reader timeout.
 
 ## Verify
 

package/dist/index.d.mts

@@ -252,91 +252,44 @@ interface OpencodeContext {
   readonly generate?: GenerateText;
   readonly model?: ModelDomain;
 }
-/** Options read from the plugin's `plugins[].options` entry. Every field is
- * optional; an unknown or malformed value keeps its default rather than
- * failing the plugin load. */
 interface OpencodeLosslessOptions {
-  /** Master flag. Nothing registers, mirrors, or mounts until true, unless
-   * the flag is absent, in which case listing the plugin is intent enough.
-   * @default true */
+  /** @default true */
   readonly enabled?: boolean;
-  /** Directory for one sidecar file per session. Created when missing.
-   * @default "./.lossless" (resolved from the server working directory) */
+  /** @default global sidecar dir, `./.lossless` only as fallback */
   readonly sidecarDir?: string;
-  /** Wire the context projection, the blocking checkpoint, the reader, and the
-   * on-demand `lossless-pass` command. `false` leaves compaction to the host and
-   * registers only the mirror, the three recall tools, and the commands.
-   * @default true
+  /** @default true
    * @example { assembly: false } */
   readonly assembly?: boolean;
-  /** Models the pass tries for its summaries, in order. `auto` is the session
-   * model; this host has no synchronous model lookup, so a concrete id falls
-   * back to the session model.
-   * @default "auto" */
+  /** @default "auto" */
   readonly summarizer?: string | string[];
-  /** Tokens one summarizer request may cost, estimate plus output cap, before
-   * it is refused rather than paid for.
-   * @default 60000 */
+  /** @default 60000 */
   readonly summarizerTokensPerCall?: number;
-  /** Tokens one pass may spend across all of its calls, counted from what the
-   * provider reported.
-   * @default 250000 */
+  /** @default 250000 */
   readonly summarizerTokensPerPass?: number;
-  /** Tokens one `/lossless-heal --apply` run may spend across all of its calls.
-   * A dry run spends nothing.
-   * @default 120000 */
+  /** @default 120000 */
   readonly summarizerTokensPerHeal?: number;
-  /** The occupancy share at which a request swaps in the projection. The
-   * engine clamps it to 0.9 of the window.
-   * @default 0.7 */
+  /** @default [] */
+  readonly mechanicalTools?: readonly string[];
+  /** @default 0.7 */
   readonly swapAtRatio?: number;
-  /** The occupancy share at which a new cut replaces the pinned one.
-   * @default 0.85 */
+  /** @default 0.85 */
   readonly recutAtRatio?: number;
-  /** Absolute token count where model quality starts to degrade, used in
-   * place of `swapAtRatio`. The recut is derived from it.
-   * @default unset */
+  /** @default unset */
   readonly smartZone?: number;
-  /** Per-model threshold overrides, keyed `provider/model`. */
   readonly zones?: Readonly<Record<string, ThresholdConfig>>;
-  /** Tokens the projection keeps verbatim after the cut.
-   * @default 20000 */
+  /** @default 20000 */
   readonly keepRecentTokens?: number;
-  /** Tokens one summary aims for.
-   * @default 1500 */
+  /** @default 1500 */
   readonly summaryTokens?: number;
-  /** Estimated tokens one heal node may read as source. Defaults to
-   * `8 * summaryTokens`, clamped to 3,000 through 24,000 and to
-   * `summarizerTokensPerCall`. It is a whole-node window, not a per-message
-   * clip. Raise it to repair summaries over unusually large source messages.
-   * @default 8 x summaryTokens, clamped 3000..24000 */
+  /** @default 8 x summaryTokens, clamped 3000..24000 */
   readonly healSourceTokens?: number;
-  /** Window used when the host catalogue cannot name this model's limit.
-   * @default 128000 */
+  /** @default 128000 */
   readonly contextWindow?: number;
-  /** How long one `lcm_expand_query` child may run before it is interrupted.
-   * @default 120000 */
+  /** @default 120000 */
   readonly readerTimeoutMs?: number;
 }
-/** Wire lossless memory into an OpenCode v2 plugin context: mirror prompts,
- * assistant text, tool traffic, and compaction boundaries into per-session
- * sidecars, and register the recall tools plus the `/lossless-status`,
- * `/lossless-report`, `/lossless-pass`, and `/lossless-heal` commands. With
- * `assembly` (the default), also register the context projection and the blocking checkpoint
- * (`session.compaction`); `/lossless-pass` runs one DAG pass over the session's
- * stored span on demand. The host stops summarizing for itself once the sidecar
- * covers the aged span: it stores the DAG frontier as its checkpoint, and the
- * next request's projection continues from it. The sidecar keeps every address
- * the reader can name. Resolves to the cleanup that unregisters everything and
- * closes the sidecars. The context is the local structural subset
- * (`./host.ts`), so the real host context flows in without the bundle naming
- * the host SDK. `rawOptions` is validated at runtime; a malformed value
- * degrades to defaults rather than throwing into the host load. */
+/** Wire lossless memory into an OpenCode v2 plugin context: mirror traffic into per-session sidecars and register recall tools plus lifecycle commands. Resolves to the cleanup that unregisters everything and closes the sidecars. */
 export declare function setupOpencodeLossless(ctx: OpencodeContext, rawOptions?: unknown): Promise<() => Promise<void>>;
-/** The plugin definition the host loads. Options come from the config entry,
- * so the default export reads them late, at setup time. The setup parameter
- * is the local context subset; the host's richer context satisfies it, which
- * `test/host-compat.test.ts` pins against the real host types. */
 declare const definition: {
   id: string;
   setup: (ctx: OpencodeContext) => Promise<() => Promise<void>>;