refactor(tui): simplify rpc failure propagation

Co-authored-by: opencode-agent[bot] <opencode-agent[bot]@users.noreply.github.com>

.github/workflows/publish.yml

@@ -90,6 +90,7 @@ jobs:
         id: build
         run: |
           ./packages/opencode/script/build.ts ${{ (github.ref_name == 'beta' && '--sourcemaps') || '' }}
+          ./packages/cli/script/build.ts ${{ (github.ref_name == 'beta' && '--sourcemaps') || '' }}
         env:
           OPENCODE_VERSION: ${{ needs.version.outputs.version }}
           OPENCODE_RELEASE: ${{ needs.version.outputs.release }}
@@ -107,6 +108,12 @@ jobs:
         with:
           name: opencode-cli-windows
           path: packages/opencode/dist/opencode-windows*
+
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        with:
+          name: opencode-preview-cli
+          path: packages/cli/dist/lildax-*
+
     outputs:
       version: ${{ needs.version.outputs.version }}
 
@@ -446,6 +453,11 @@ jobs:
           name: opencode-cli-signed-windows
           path: packages/opencode/dist
 
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        with:
+          name: opencode-preview-cli
+          path: packages/cli/dist
+
       - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         if: needs.version.outputs.release
         with:

.github/workflows/sync-zed-extension.yml

@@ -1,35 +0,0 @@
-name: "sync-zed-extension"
-
-on:
-  workflow_dispatch:
-  release:
-    types: [published]
-
-jobs:
-  zed:
-    name: Release Zed Extension
-    runs-on: blacksmith-4vcpu-ubuntu-2404
-    steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 0
-
-      - uses: ./.github/actions/setup-bun
-
-      - name: Get version tag
-        id: get_tag
-        run: |
-          if [ "${{ github.event_name }}" = "release" ]; then
-            TAG="${{ github.event.release.tag_name }}"
-          else
-            TAG=$(git tag --list 'v[0-9]*.*' --sort=-version:refname | head -n 1)
-          fi
-          echo "tag=${TAG}" >> $GITHUB_OUTPUT
-          echo "Using tag: ${TAG}"
-
-      - name: Sync Zed extension
-        run: |
-          ./script/sync-zed.ts ${{ steps.get_tag.outputs.tag }}
-        env:
-          ZED_EXTENSIONS_PAT: ${{ secrets.ZED_EXTENSIONS_PAT }}
-          ZED_PR_PAT: ${{ secrets.ZED_PR_PAT }}

.github/workflows/test.yml

@@ -64,7 +64,8 @@ jobs:
             turbo-${{ runner.os }}-
 
       - name: Run unit tests
-        run: bun turbo test:ci
+        timeout-minutes: 20
+        run: bun turbo test:ci --log-order=stream --log-prefix=task
         env:
           OPENCODE_EXPERIMENTAL_DISABLE_FILEWATCHER: ${{ runner.os == 'Windows' && 'true' || 'false' }}
 

.gitignore

@@ -15,6 +15,8 @@ ts-dist
 .turbo
 **/.serena
 .serena/
+**/.omo
+.omo/
 /result
 refs
 Session.vim

.opencode/command/translate.md

@@ -1,6 +1,6 @@
 ---
 description: translate English to other languages
-model: opencode/claude-opus-4-7
+model: opencode/claude-opus-4-8
 ---
 
 run git diff and translate changed english doc and UI copy files to other international languages. Translate all languages in parallel to save time.

AGENTS.md

@@ -138,3 +138,14 @@ const table = sqliteTable("session", {
 ## Type Checking
 
 - Always run `bun typecheck` from package directories (e.g., `packages/opencode`), never `tsc` directly.
+
+## V2 Session Core
+
+- Keep durable prompt admission separate from model execution. `SessionV2.prompt(...)` admits one durable `session_input` row before scheduling advisory `SessionExecution.wake(sessionID)` unless `resume: false` requests admit-only behavior. The serialized runner promotes admitted inputs into visible user messages at safe boundaries.
+- Reusing a Session ID adopts the existing Session. Reusing a prompt message ID reconciles an exact retry only when Session, prompt, and delivery mode match; conflicting reuse fails. Historical projected prompts lazily synthesize promoted inbox records during exact retry.
+- Keep `SessionExecution` process-global and Session-ID based. It discovers placement through the read-side `SessionStore` and `LocationServiceMap.get(session.location)`; no layer should take a Session ID.
+- Keep `SessionRunner`, model resolution, tool registry, permissions, and filesystem Location-scoped. Omitted `Location.workspaceID` means implicit-local placement; explicit workspace identity remains reserved for future placement semantics.
+- Preserve one explicit `llm.stream(request)` call per provider turn and reload projected history before durable continuation. Do not bridge through legacy `SessionPrompt.loop(...)` or delegate orchestration to an in-memory tool loop.
+- Keep local Session drains process-local until clustering is implemented. `SessionRunCoordinator` joins explicit same-Session resumes, coalesces prompt wakeups, and allows different Sessions to run concurrently. Advisory wakes drain eligible durable inbox rows only; post-crash activity recovery requires a separate explicit design before it may retry provider work.
+- Keep delivery vocabulary explicit. Prompts steer by default and coalesce into the active activity at the next safe provider-turn boundary. Explicit `queue` inputs open FIFO future activities one at a time after the active activity settles.
+- Keep EventV2 replay owner claims separate from clustered Session execution ownership.

CONTEXT.md

@@ -0,0 +1,77 @@
+# OpenCode Session Runtime
+
+OpenCode sessions preserve durable conversational history while assembling the runtime context an agent needs to act correctly in its current environment.
+
+## Language
+
+**System Context**:
+The structured collection of contextual facts presented to the model as initial instructions and chronological updates.
+_Avoid_: System prompt
+
+**Context Component**:
+One independently loaded fact within the **System Context**, represented by a stable key and one effectfully loaded baseline/update rendering.
+_Avoid_: Prompt fragment
+
+**Mid-Conversation System Message**:
+A durable chronological instruction that tells the model the newly effective state of a changed **Context Component**.
+_Avoid_: System update, system notification, raw text diff
+
+**Context Epoch**:
+The span during which one initially rendered **System Context** remains immutable, ending at compaction or another baseline-replacing transition.
+
+**Baseline System Context**:
+The full **System Context** rendered at the start of a **Context Epoch**.
+_Avoid_: Live system prompt
+
+**Context Checkpoint**:
+The durable model-hidden comparison state used to detect which **Context Components** changed since context was last admitted to a provider turn.
+
+**Unavailable Context**:
+An expected temporary inability to load a **Context Component** value; the runtime retains its prior effective state and emits no update, or omits it until first successfully loaded.
+
+**Safe Provider-Turn Boundary**:
+The point immediately before a provider call, after durable input promotion and any required tool settlement, where context changes may be admitted chronologically.
+
+## Relationships
+
+- A **System Context** contains one or more **Context Components**.
+- A changed **Context Component** may produce one **Mid-Conversation System Message** containing its newly effective state.
+- A **Mid-Conversation System Message** persists its originating **Context Component** key and the exact rendered text sent to the model.
+- A **Context Checkpoint** advances atomically with the corresponding durable **Mid-Conversation System Message**.
+- A **Context Checkpoint** stores one rendered-content hash per stable **Context Component** key so core and plugin-defined components can evolve independently.
+- Changes from multiple **Context Components** admitted at one safe boundary combine into one **Mid-Conversation System Message**.
+- Context changes are sampled and admitted lazily at a **Safe Provider-Turn Boundary**, never pushed asynchronously when their source changes.
+- At a **Safe Provider-Turn Boundary**, newly promoted user input or settled tool results precede any combined **Mid-Conversation System Message**.
+- The first provider turn renders the latest **Baseline System Context** and initializes its **Context Checkpoint** without emitting a redundant **Mid-Conversation System Message**.
+- Compaction starts a new **Context Epoch** with a freshly rendered **Baseline System Context** and **Context Checkpoint**; prior **Mid-Conversation System Messages** remain durable audit history but leave projected model history.
+- A **Context Checkpoint** is an evolvable component map; a newly registered core or plugin-defined **Context Component** absent from an existing checkpoint emits its current state once at the next **Safe Provider-Turn Boundary**.
+- **Context Component** keys are stable and namespaced; duplicate keys fail assembly. Built-in components preserve declaration order and plugin-defined components append in lexicographic key order so rendered context is deterministic.
+- Each **Context Component** loader returns its model-visible baseline string and absolute current-state update string from one coherent sample; the update string is hashed for change detection.
+- **Unavailable Context** uses stale-while-revalidate semantics and is distinct from a successfully loaded absence, which may emit removal text.
+- Ordinary **Context Component** loaders return values directly; loaders that intentionally use stale-while-revalidate may explicitly return **Unavailable Context**.
+- Nested project instruction files discovered while reading join the effective instructions returned by the instruction service and are admitted durably at the next **Safe Provider-Turn Boundary**.
+- A discovered nested project instruction remains active for the session while it stays in the same location and is folded into later **Baseline System Contexts** after compaction.
+- Location-scoped services naturally re-resolve effective context when a moved session next runs in its destination location.
+- Instruction discovery, source identity, persistence, and file loading belong to the instruction service; the **System Context** abstraction only composes effectful producers and renders loaded values.
+- Plugin-defined **Context Components** register through a scoped replayable registry so plugin hot reload adds and removes components predictably.
+- Context source changes never wake idle sessions; the next naturally scheduled **Safe Provider-Turn Boundary** loads and compares current values lazily.
+- Once admitted, a **Mid-Conversation System Message** remains durable even if the following provider attempt fails and is replayed unchanged on retry.
+- **Mid-Conversation System Messages** remain durable model-projection history but are hidden from normal user-facing transcript surfaces.
+- The date **Context Component** initially preserves host-local calendar-date behavior; a configured user timezone may replace that default later.
+- A **Context Epoch** begins with one immutable **Baseline System Context**.
+- A **Baseline System Context** is stored durably and reused verbatim across process restarts within its **Context Epoch**.
+- A **Baseline System Context** durably preserves deterministic keyed top-level component strings rather than eagerly joining all text; request assembly lowers them into canonical LLM system parts.
+- Compaction or a model/provider switch starts a new **Context Epoch** because the baseline can be replaced without preserving the prior provider cache.
+- A model/provider switch always starts a new **Context Epoch** while preserving chronological conversation history.
+- A **Mid-Conversation System Message** lowers to the provider's native chronological instruction role when supported and to a wrapped chronological fallback otherwise.
+- When an effective instruction file changes, its **Mid-Conversation System Message** includes the complete current contents and supersedes the prior version from that source; when it is removed, the message states that it no longer applies.
+
+## Example dialogue
+
+> **Dev:** "The date changed while the session was active. Should the **Mid-Conversation System Message** say what the old date was?"
+> **Domain expert:** "No. Emit the newly effective date so the agent can act on the current **System Context**."
+
+## Flagged ambiguities
+
+- Legacy `experimental.chat.system.transform` can mutate the assembled baseline system prompt arbitrarily, but V2 plugins do not yet expose an equivalent hook. Decide separately whether to port it, replace dynamic uses with plugin-defined **Context Components**, or narrow its semantics.
+- A location change likely starts a new **Context Epoch** so location-dependent instructions and discovery can be rebuilt cleanly, but implementation should verify whether an append-only update is sufficient and meaningfully preserves cache.

bunfig.toml

@@ -2,7 +2,7 @@
 exact = true
 # Only install newly resolved package versions published at least 3 days ago.
 minimumReleaseAge = 259200
-minimumReleaseAgeExcludes = ["@opentui/core", "@opentui/core-darwin-arm64", "@opentui/core-darwin-x64", "@opentui/core-linux-arm64", "@opentui/core-linux-x64", "@opentui/core-win32-arm64", "@opentui/core-win32-x64", "@opentui/keymap", "@opentui/solid", "gitlab-ai-provider"]
+minimumReleaseAgeExcludes = ["@ai-sdk/amazon-bedrock", "@opentui/core", "@opentui/core-darwin-arm64", "@opentui/core-darwin-x64", "@opentui/core-linux-arm64", "@opentui/core-linux-x64", "@opentui/core-win32-arm64", "@opentui/core-win32-x64", "@opentui/keymap", "@opentui/solid", "gitlab-ai-provider"]
 
 [test]
 root = "./do-not-run-tests-from-root"

nix/hashes.json

@@ -1,8 +1,8 @@
 {
   "nodeModules": {
-    "x86_64-linux": "sha256-rQ8kz/fChREJWnwY2Jp2zp06TYesyd3hia44hdo8l+s=",
-    "aarch64-linux": "sha256-t5WKzAN8NRO/4g2l+4V5SatK/LO3ZPBfmKjJFf/MsD4=",
-    "aarch64-darwin": "sha256-QbNaxGNiKdJ0/mKaTUk392qsOvlRYVi5mTuMmFByEic=",
-    "x86_64-darwin": "sha256-lewm6WvqxphR+rvXz9e7ZKvgu98MH3cxosvQkz3mLuA="
+    "x86_64-linux": "sha256-dvFu5Cbs8MFoSBQXwv4HN2vyh5p20dh6QC5zZiFr0qs=",
+    "aarch64-linux": "sha256-l0xO7Nocl6enQxLQlLB71mG+NuT6I1eQQ1FgLtYGQOg=",
+    "aarch64-darwin": "sha256-WY6Lstxt4n4n63kYZUX09birHx7sNvl0Pegc6L13mGE=",
+    "x86_64-darwin": "sha256-sZdG40TSE9KhrmLQyQMPRugGo6R7AS3wgHiEGYtcXtc="
   }
 }

package.json

@@ -37,6 +37,7 @@
       "@types/bun": "1.3.13",
       "@types/cross-spawn": "6.0.6",
       "@octokit/rest": "22.0.0",
+      "@hono/standard-validator": "0.2.0",
       "@hono/zod-validator": "0.4.2",
       "@opentui/core": "0.3.1",
       "@opentui/keymap": "0.3.1",

packages/app/e2e/regression/prompt-thinking-level.spec.ts

@@ -0,0 +1,86 @@
+import { expect, test, type Page } from "@playwright/test"
+import { base64Encode } from "@opencode-ai/core/util/encode"
+import { mockOpenCodeServer } from "../utils/mock-server"
+
+const directory = "C:/OpenCode/PromptThinkingLevelRegression"
+const projectID = "proj_prompt_thinking_level_regression"
+const sessionID = "ses_prompt_thinking_level_regression"
+
+test("shows the V2 thinking level control while relevant", async ({ page }) => {
+  await mockOpenCodeServer(page, {
+    directory,
+    project: {
+      id: projectID,
+      worktree: directory,
+      vcs: "git",
+      name: "prompt-thinking-level-regression",
+      time: { created: 1700000000000, updated: 1700000000000 },
+      sandboxes: [],
+    },
+    provider: {
+      all: [
+        {
+          id: "opencode",
+          name: "OpenCode",
+          models: {
+            "thinking-model": {
+              id: "thinking-model",
+              name: "Thinking Model",
+              limit: { context: 200_000 },
+              variants: { high: {} },
+            },
+          },
+        },
+      ],
+      connected: ["opencode"],
+      default: { providerID: "opencode", modelID: "thinking-model" },
+    },
+    sessions: [
+      {
+        id: sessionID,
+        slug: "prompt-thinking-level-regression",
+        projectID,
+        directory,
+        title: "Prompt thinking level regression",
+        version: "dev",
+        time: { created: 1700000000000, updated: 1700000000000 },
+      },
+    ],
+    pageMessages: () => ({ items: [] }),
+  })
+  await page.addInitScript(() => {
+    localStorage.setItem("settings.v3", JSON.stringify({ general: { newLayoutDesigns: true } }))
+  })
+
+  await page.goto(`/${base64Encode(directory)}/session/${sessionID}`)
+  const composer = page.locator('[data-component="session-composer"]')
+  const input = composer.locator('[data-component="prompt-input"]')
+  const control = composer.locator('[data-component="prompt-variant-control"]')
+  await expect(composer).toBeVisible()
+
+  await idleComposer(page)
+  await expect(control).toBeHidden()
+
+  await composer.hover()
+  await expect(control).toBeVisible()
+
+  await control.locator('[data-action="prompt-model-variant"]').click()
+  const high = page.getByRole("option", { name: "high" })
+  await expect(high).toBeVisible()
+  await page.mouse.move(0, 0)
+  await expect(control).toBeVisible()
+  await expect(high).toBeVisible()
+  await high.click()
+
+  await idleComposer(page)
+  await input.focus()
+  await expect(control).toBeVisible()
+
+  await idleComposer(page)
+  await expect(control).toBeVisible()
+})
+
+async function idleComposer(page: Page) {
+  await page.mouse.move(0, 0)
+  await page.evaluate(() => (document.activeElement as HTMLElement | null)?.blur())
+}

packages/app/src/components/prompt-input.tsx

@@ -277,6 +277,7 @@ export const PromptInput: Component<PromptInputProps> = (props) => {
     draggingType: "image" | "@mention" | null
     mode: "normal" | "shell"
     applyingHistory: boolean
+    variantOpen: boolean
   }>({
     popover: null,
     historyIndex: -1,
@@ -285,6 +286,7 @@ export const PromptInput: Component<PromptInputProps> = (props) => {
     draggingType: null,
     mode: "normal",
     applyingHistory: false,
+    variantOpen: false,
   })
   const [picker, setPicker] = createStore({
     projectOpen: false,
@@ -1101,6 +1103,8 @@ export const PromptInput: Component<PromptInputProps> = (props) => {
   )
 
   const variants = createMemo(() => ["default", ...local.model.variant.list()])
+  // Check provider variants directly: `variants` also includes the UI-only default option.
+  const showVariantControl = createMemo(() => local.model.variant.list().length > 0)
   const accepting = createMemo(() => {
     const id = params.id
     if (!id) return permission.isAutoAcceptingDirectory(sdk.directory)
@@ -1571,6 +1575,39 @@ export const PromptInput: Component<PromptInputProps> = (props) => {
                     <ComposerPickerTrigger state={newProjectTriggerState()} />
                   </Show>
                   <ComposerModelControl state={modelControlState()} />
+                  <Show when={store.mode !== "shell" && showVariantControl()}>
+                    <div
+                      data-component="prompt-variant-control"
+                      classList={{
+                        "hidden group-hover/prompt-input:block group-focus-within/prompt-input:block":
+                          !local.model.variant.current() && !store.variantOpen,
+                      }}
+                    >
+                      <TooltipKeybind
+                        placement="top"
+                        gutter={4}
+                        title={language.t("command.model.variant.cycle")}
+                        keybind={command.keybind("model.variant.cycle")}
+                      >
+                        <Select
+                          size="normal"
+                          options={variants()}
+                          current={local.model.variant.current() ?? "default"}
+                          label={(x) => (x === "default" ? language.t("common.default") : x)}
+                          onOpenChange={(open) => setStore("variantOpen", open)}
+                          onSelect={(value) => {
+                            local.model.variant.set(value === "default" ? undefined : value)
+                            restoreFocus()
+                          }}
+                          class="capitalize max-w-[160px] justify-start text-v2-text-text-faint"
+                          valueClass="truncate text-[13px] font-[440] leading-5 text-v2-text-text-faint"
+                          triggerStyle={control()}
+                          triggerProps={{ "data-action": "prompt-model-variant" }}
+                          variant="ghost"
+                        />
+                      </TooltipKeybind>
+                    </div>
+                  </Show>
                 </div>
                 <Tooltip placement="top" inactive={!working() && blank()} value={tip()}>
                   <IconButton
@@ -1890,7 +1927,7 @@ export const PromptInput: Component<PromptInputProps> = (props) => {
                             </TooltipKeybind>
                           </Show>
                         </div>
-                        <Show when={variants().length > 2}>
+                        <Show when={showVariantControl()}>
                           <div
                             data-component="prompt-variant-control"
                             style={providersShouldFadeIn() ? { animation: "fade-in 0.3s" } : undefined}

packages/app/src/components/titlebar.tsx

@@ -707,7 +707,9 @@ type TitlebarV2RightState = {
 function TitlebarV2Right(props: { state: TitlebarV2RightState }) {
   return (
     <div class="relative z-20 flex shrink-0 items-center justify-end gap-0 overflow-visible">
-      <TitlebarUpdateIconButton state={props.state.update} />
+      <Show when={props.state.update.visible}>
+        <TitlebarUpdateIconButton state={props.state.update} />
+      </Show>
       <div id="opencode-titlebar-right" class="flex shrink-0 items-center justify-end gap-0" />
     </div>
   )

packages/app/src/pages/layout.tsx

@@ -89,6 +89,7 @@ import {
 } from "./layout/sidebar-workspace"
 import { ProjectDragOverlay, SortableProject, type ProjectSidebarContext } from "./layout/sidebar-project"
 import { SidebarContent } from "./layout/sidebar-shell"
+import { runUpdateAndRestart } from "./layout/update"
 
 export default function Layout(props: ParentProps) {
   const [store, setStore, , ready] = persisted(
@@ -183,11 +184,7 @@ export default function Layout(props: ParentProps) {
     return updateQuery.data.version ?? ""
   }
   const installUpdate = () => {
-    if (!platform.updateAndRestart) return
-    setUpdate("installing", true)
-    void platform.updateAndRestart().catch(() => {
-      setUpdate("installing", false)
-    })
+    runUpdateAndRestart(platform.updateAndRestart, (installing) => setUpdate("installing", installing))
   }
   const titlebarUpdate: TitlebarUpdate = {
     version: updateVersion,

packages/app/src/pages/layout/update.test.ts

@@ -0,0 +1,19 @@
+import { describe, expect, test } from "bun:test"
+import { runUpdateAndRestart } from "./update"
+
+describe("runUpdateAndRestart", () => {
+  test("clears the installing state when restart resolves without exiting", async () => {
+    const states: boolean[] = []
+    await new Promise<void>((resolve) => {
+      runUpdateAndRestart(
+        async () => {},
+        (installing) => {
+          states.push(installing)
+          if (states.length === 2) resolve()
+        },
+      )
+    })
+
+    expect(states).toEqual([true, false])
+  })
+})

packages/app/src/pages/layout/update.ts

@@ -0,0 +1,10 @@
+export function runUpdateAndRestart(
+  updateAndRestart: (() => Promise<void>) | undefined,
+  setInstalling: (installing: boolean) => void,
+) {
+  if (!updateAndRestart) return
+  setInstalling(true)
+  void updateAndRestart()
+    .catch(() => undefined)
+    .finally(() => setInstalling(false))
+}

packages/app/src/pages/session.tsx

@@ -467,8 +467,6 @@ export default function Page() {
     return {
       queryKey: [...vcsKey(), mode] as const,
       enabled,
-      staleTime: Number.POSITIVE_INFINITY,
-      gcTime: 60 * 1000,
       queryFn: mode
         ? () =>
             sdk.client.vcs

packages/cli/bin/lildax.cjs

@@ -0,0 +1,130 @@
+#!/usr/bin/env node
+
+const childProcess = require("child_process")
+const fs = require("fs")
+const path = require("path")
+const os = require("os")
+
+const forwardedSignals = ["SIGINT", "SIGTERM", "SIGHUP"]
+
+function run(target) {
+  const child = childProcess.spawn(target, process.argv.slice(2), { stdio: "inherit" })
+  child.on("error", (error) => {
+    console.error(error.message)
+    process.exit(1)
+  })
+  const forwarders = {}
+  for (const signal of forwardedSignals) {
+    forwarders[signal] = () => {
+      try {
+        child.kill(signal)
+      } catch {}
+    }
+    process.on(signal, forwarders[signal])
+  }
+  child.on("exit", (code, signal) => {
+    for (const forwardedSignal of forwardedSignals) process.removeListener(forwardedSignal, forwarders[forwardedSignal])
+    if (signal) return process.kill(process.pid, signal)
+    process.exit(typeof code === "number" ? code : 0)
+  })
+}
+
+const envPath = process.env.OPENCODE_BIN_PATH
+const scriptDir = path.dirname(fs.realpathSync(__filename))
+const cached = path.join(scriptDir, ".lildax")
+const platform = { darwin: "darwin", linux: "linux", win32: "windows" }[os.platform()] || os.platform()
+const arch = { x64: "x64", arm64: "arm64", arm: "arm" }[os.arch()] || os.arch()
+const base = "@opencode-ai/lildax-" + platform + "-" + arch
+const binary = platform === "windows" ? "lildax.exe" : "lildax"
+
+function supportsAvx2() {
+  if (arch !== "x64") return false
+  if (platform === "linux") {
+    try {
+      return /(^|\s)avx2(\s|$)/i.test(fs.readFileSync("/proc/cpuinfo", "utf8"))
+    } catch {
+      return false
+    }
+  }
+  if (platform === "darwin") {
+    try {
+      const result = childProcess.spawnSync("sysctl", ["-n", "hw.optional.avx2_0"], { encoding: "utf8", timeout: 1500 })
+      return result.status === 0 && (result.stdout || "").trim() === "1"
+    } catch {
+      return false
+    }
+  }
+  if (platform === "windows") {
+    const command =
+      '(Add-Type -MemberDefinition "[DllImport(""kernel32.dll"")] public static extern bool IsProcessorFeaturePresent(int ProcessorFeature);" -Name Kernel32 -Namespace Win32 -PassThru)::IsProcessorFeaturePresent(40)'
+    for (const executable of ["powershell.exe", "pwsh.exe", "pwsh", "powershell"]) {
+      try {
+        const result = childProcess.spawnSync(executable, ["-NoProfile", "-NonInteractive", "-Command", command], {
+          encoding: "utf8",
+          timeout: 3000,
+          windowsHide: true,
+        })
+        if (result.status !== 0) continue
+        const output = (result.stdout || "").trim().toLowerCase()
+        if (output === "true" || output === "1") return true
+        if (output === "false" || output === "0") return false
+      } catch {
+        continue
+      }
+    }
+  }
+  return false
+}
+
+const names = (() => {
+  const baseline = arch === "x64" && !supportsAvx2()
+  if (platform === "linux") {
+    const musl = (() => {
+      try {
+        if (fs.existsSync("/etc/alpine-release")) return true
+        const result = childProcess.spawnSync("ldd", ["--version"], { encoding: "utf8" })
+        return ((result.stdout || "") + (result.stderr || "")).toLowerCase().includes("musl")
+      } catch {
+        return false
+      }
+    })()
+    if (musl)
+      return arch === "x64"
+        ? baseline
+          ? [`${base}-baseline-musl`, `${base}-musl`, `${base}-baseline`, base]
+          : [`${base}-musl`, `${base}-baseline-musl`, base, `${base}-baseline`]
+        : [`${base}-musl`, base]
+    return arch === "x64"
+      ? baseline
+        ? [`${base}-baseline`, base, `${base}-baseline-musl`, `${base}-musl`]
+        : [base, `${base}-baseline`, `${base}-musl`, `${base}-baseline-musl`]
+      : [base, `${base}-musl`]
+  }
+  return arch === "x64" ? (baseline ? [`${base}-baseline`, base] : [base, `${base}-baseline`]) : [base]
+})()
+
+function findBinary(startDir) {
+  let current = startDir
+  for (;;) {
+    const modules = path.join(current, "node_modules")
+    if (fs.existsSync(modules))
+      for (const name of names) {
+        const candidate = path.join(modules, name, "bin", binary)
+        if (fs.existsSync(candidate)) return candidate
+      }
+    const parent = path.dirname(current)
+    if (parent === current) return
+    current = parent
+  }
+}
+
+const resolved = envPath || (fs.existsSync(cached) ? cached : findBinary(scriptDir))
+if (!resolved) {
+  console.error(
+    "It seems that your package manager failed to install the right lildax CLI package. Try manually installing " +
+      names.map((name) => `"${name}"`).join(" or ") +
+      " package",
+  )
+  process.exit(1)
+}
+run(resolved)

packages/cli/package.json

@@ -2,12 +2,14 @@
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode-ai/cli",
   "version": "1.15.13",
-  "private": true,
   "type": "module",
   "license": "MIT",
   "bin": {
-    "opencode": "./src/index.ts"
+    "lildax": "./bin/lildax.cjs"
   },
+  "files": [
+    "bin"
+  ],
   "scripts": {
     "build": "bun run script/build.ts",
     "dev": "bun run src/index.ts",
@@ -16,9 +18,13 @@
   "dependencies": {
     "@effect/platform-node": "catalog:",
     "@opencode-ai/core": "workspace:*",
+    "@opencode-ai/sdk": "workspace:*",
+    "@opencode-ai/server": "workspace:*",
+    "@parcel/watcher": "2.5.1",
     "effect": "catalog:"
   },
   "devDependencies": {
+    "@opencode-ai/script": "workspace:*",
     "@tsconfig/bun": "catalog:",
     "@types/bun": "catalog:",
     "@typescript/native-preview": "catalog:"

packages/cli/script/build.ts

@@ -0,0 +1,103 @@
+#!/usr/bin/env bun
+
+import { rm } from "fs/promises"
+import path from "path"
+import { Script } from "@opencode-ai/script"
+import { modelsData } from "./generate"
+
+const dir = path.resolve(import.meta.dirname, "..")
+const binary = "lildax"
+process.chdir(dir)
+
+await rm("dist", { recursive: true, force: true })
+
+const singleFlag = process.argv.includes("--single")
+const baselineFlag = process.argv.includes("--baseline")
+const sourcemapsFlag = process.argv.includes("--sourcemaps")
+
+const allTargets: {
+  os: string
+  arch: "arm64" | "x64"
+  abi?: "musl"
+  avx2?: false
+}[] = [
+  { os: "linux", arch: "arm64" },
+  { os: "linux", arch: "x64" },
+  { os: "linux", arch: "x64", avx2: false },
+  { os: "linux", arch: "arm64", abi: "musl" },
+  { os: "linux", arch: "x64", abi: "musl" },
+  { os: "linux", arch: "x64", abi: "musl", avx2: false },
+  { os: "darwin", arch: "arm64" },
+  { os: "darwin", arch: "x64" },
+  { os: "darwin", arch: "x64", avx2: false },
+  { os: "win32", arch: "arm64" },
+  { os: "win32", arch: "x64" },
+  { os: "win32", arch: "x64", avx2: false },
+]
+
+const targets = singleFlag
+  ? allTargets.filter((item) => {
+      if (item.os !== process.platform || item.arch !== process.arch) return false
+      if (item.avx2 === false) return baselineFlag
+      return item.abi === undefined
+    })
+  : allTargets
+
+for (const item of targets) {
+  const name = [
+    binary,
+    item.os === "win32" ? "windows" : item.os,
+    item.arch,
+    item.avx2 === false ? "baseline" : undefined,
+    item.abi,
+  ]
+    .filter(Boolean)
+    .join("-")
+  console.log(`building ${name}`)
+  const result = await Bun.build({
+    entrypoints: ["./src/index.ts"],
+    tsconfig: "./tsconfig.json",
+    external: ["node-gyp"],
+    format: "esm",
+    minify: true,
+    sourcemap: sourcemapsFlag ? "linked" : "none",
+    splitting: true,
+    compile: {
+      autoloadBunfig: false,
+      autoloadDotenv: false,
+      autoloadTsconfig: true,
+      autoloadPackageJson: true,
+      target: name.replace(binary, "bun") as Bun.Build.CompileTarget,
+      outfile: `./dist/${name}/bin/${binary}`,
+      execArgv: [`--user-agent=${binary}/${Script.version}`, "--use-system-ca", "--"],
+      windows: {},
+    },
+    define: {
+      OPENCODE_VERSION: `'${Script.version}'`,
+      OPENCODE_CLI_NAME: `'${binary}'`,
+      OPENCODE_MODELS_DEV: modelsData,
+      OPENCODE_CHANNEL: `'${Script.channel}'`,
+      OPENCODE_LIBC: item.os === "linux" ? `'${item.abi ?? "glibc"}'` : "undefined",
+    },
+  })
+
+  if (!result.success) {
+    for (const log of result.logs) console.error(log)
+    process.exit(1)
+  }
+
+  await Bun.write(
+    `./dist/${name}/package.json`,
+    JSON.stringify(
+      {
+        name: `@opencode-ai/${name}`,
+        version: Script.version,
+        license: "MIT",
+        os: [item.os],
+        cpu: [item.arch],
+      },
+      null,
+      2,
+    ),
+  )
+}

packages/cli/script/generate.ts

@@ -0,0 +1,7 @@
+const modelsUrl = process.env.OPENCODE_MODELS_URL || "https://models.dev"
+
+export const modelsData = process.env.MODELS_DEV_API_JSON
+  ? await Bun.file(process.env.MODELS_DEV_API_JSON).text()
+  : await fetch(`${modelsUrl}/api.json`).then((response) => response.text())
+
+console.log("Loaded models.dev snapshot")

packages/cli/script/publish.ts

@@ -0,0 +1,52 @@
+#!/usr/bin/env bun
+import { $ } from "bun"
+import pkg from "../package.json"
+import { Script } from "@opencode-ai/script"
+import { fileURLToPath } from "url"
+
+const dir = fileURLToPath(new URL("..", import.meta.url))
+process.chdir(dir)
+
+async function published(name: string, version: string) {
+  return (await $`npm view ${name}@${version} version`.nothrow()).exitCode === 0
+}
+
+async function publish(dir: string, name: string, version: string) {
+  if (process.platform !== "win32") await $`chmod -R 755 .`.cwd(dir)
+  if (await published(name, version)) return console.log(`already published ${name}@${version}`)
+  await $`bun pm pack`.cwd(dir)
+  await $`npm publish *.tgz --access public --tag ${Script.channel}`.cwd(dir)
+}
+
+const binaries: Record<string, string> = {}
+for (const filepath of new Bun.Glob("*/package.json").scanSync({ cwd: "./dist" })) {
+  const item = await Bun.file(`./dist/${filepath}`).json()
+  binaries[item.name] = item.version
+}
+console.log("binaries", binaries)
+const version = Object.values(binaries)[0]
+
+await $`mkdir -p ./dist/${pkg.name}/bin`
+await $`cp ./bin/lildax.cjs ./dist/${pkg.name}/bin/lildax`
+await Bun.file(`./dist/${pkg.name}/package.json`).write(
+  JSON.stringify(
+    {
+      name: pkg.name,
+      bin: { lildax: "./bin/lildax" },
+      version,
+      license: pkg.license,
+      os: ["darwin", "linux", "win32"],
+      cpu: ["arm64", "x64"],
+      optionalDependencies: binaries,
+    },
+    null,
+    2,
+  ),
+)
+
+await Promise.all(
+  Object.entries(binaries).map(([name, version]) =>
+    publish(`./dist/${name.replace("@opencode-ai/", "")}`, name, version),
+  ),
+)
+await publish(`./dist/${pkg.name}`, pkg.name, version)

packages/cli/src/api.ts

@@ -1,12 +0,0 @@
-import { CliApi } from "./cli-api"
-
-export const Api = CliApi.make("opencode", {
-  description: "OpenCode command line interface",
-  commands: [
-    CliApi.make("debug", {
-      description: "Debugging and troubleshooting tools",
-      commands: [CliApi.make("agents", { description: "List all agents" })],
-    }),
-    CliApi.make("migrate", { description: "Migrate v1 data to v2" }),
-  ],
-})

packages/cli/src/commands/commands.ts

@@ -0,0 +1,36 @@
+import { Argument, Flag } from "effect/unstable/cli"
+import { Spec } from "../framework/spec"
+
+declare const OPENCODE_CLI_NAME: string | undefined
+
+export const Commands = Spec.make(typeof OPENCODE_CLI_NAME === "string" ? OPENCODE_CLI_NAME : "opencode", {
+  description: "OpenCode 2.0 preview command line interface",
+  commands: [
+    Spec.make("debug", {
+      description: "Debugging and troubleshooting tools",
+      commands: [Spec.make("agents", { description: "List all agents" })],
+    }),
+    Spec.make("migrate", { description: "Migrate v1 data to v2" }),
+    Spec.make("service", {
+      description: "Manage the background server",
+      commands: [
+        Spec.make("start", { description: "Start the background server" }),
+        Spec.make("restart", { description: "Restart the background server" }),
+        Spec.make("status", { description: "Show background server status" }),
+        Spec.make("stop", { description: "Stop the background server" }),
+        Spec.make("password", {
+          description: "Get or set the server password",
+          params: { value: Argument.string("value").pipe(Argument.optional) },
+        }),
+      ],
+    }),
+    Spec.make("serve", {
+      description: "Start the v2 API server",
+      params: {
+        hostname: Flag.string("hostname").pipe(Flag.withDefault("127.0.0.1")),
+        port: Flag.integer("port").pipe(Flag.optional),
+        register: Flag.boolean("register").pipe(Flag.withDefault(false)),
+      },
+    }),
+  ],
+})

packages/cli/src/commands/handlers/debug/agents.ts

@@ -0,0 +1,21 @@
+import { EOL } from "os"
+import * as Effect from "effect/Effect"
+import { Commands } from "../../commands"
+import { Runtime } from "../../../framework/runtime"
+import { Daemon } from "../../../services/daemon"
+
+export default Runtime.handler(
+  Commands.commands.debug.commands.agents,
+  Effect.fn("cli.debug.agents")(function* () {
+    const daemon = yield* Daemon.Service
+    const client = yield* daemon.client()
+    const response = yield* Effect.promise(() => client.v2.agent.list({ location: { directory: process.cwd() } }))
+    process.stdout.write(
+      JSON.stringify(
+        response.data?.data.toSorted((a, b) => a.id.localeCompare(b.id)),
+        null,
+        2,
+      ) + EOL,
+    )
+  }),
+)

packages/cli/src/commands/handlers/migrate.ts

@@ -0,0 +1,5 @@
+import * as Effect from "effect/Effect"
+import { Commands } from "../commands"
+import { Runtime } from "../../framework/runtime"
+
+export default Runtime.handler(Commands.commands.migrate, (_input) => Effect.log("No migrations to run."))

packages/cli/src/commands/handlers/serve.ts

@@ -0,0 +1,39 @@
+import { NodeHttpServer } from "@effect/platform-node"
+import { Context, Layer, Option } from "effect"
+import * as Effect from "effect/Effect"
+import { HttpRouter, HttpServer } from "effect/unstable/http"
+import { createServer } from "node:http"
+import { createRoutes } from "@opencode-ai/server/routes"
+import { Commands } from "../commands"
+import { Runtime } from "../../framework/runtime"
+import { Daemon } from "../../services/daemon"
+
+export default Runtime.handler(
+  Commands.commands.serve,
+  Effect.fn("cli.serve")(function* (input) {
+    return yield* Effect.scoped(
+      Effect.gen(function* () {
+        const daemon = yield* Daemon.Service
+        const address = yield* listen(input.hostname, input.port, yield* daemon.password())
+        if (input.register) yield* daemon.register(address)
+        console.log(`server listening on ${HttpServer.formatAddress(address)}`)
+        return yield* Effect.never
+      }),
+    )
+  }),
+)
+
+function listen(hostname: string, port: Option.Option<number>, password: string) {
+  if (Option.isSome(port)) return bind(hostname, port.value, password)
+  // Preserve the familiar default when available, but let the OS choose a free
+  // port when another local server already owns 4096.
+  return bind(hostname, 4096, password).pipe(Effect.catch(() => bind(hostname, 0, password)))
+}
+
+function bind(hostname: string, port: number, password: string) {
+  return Layer.build(
+    HttpRouter.serve(createRoutes(password), { disableListenLog: true, disableLogger: true }).pipe(
+      Layer.provideMerge(NodeHttpServer.layer(() => createServer(), { port, host: hostname })),
+    ),
+  ).pipe(Effect.map((context) => Context.get(context, HttpServer.HttpServer).address))
+}

packages/cli/src/commands/handlers/service/password.ts

@@ -0,0 +1,16 @@
+import { EOL } from "os"
+import { Option } from "effect"
+import * as Effect from "effect/Effect"
+import { Commands } from "../../commands"
+import { Runtime } from "../../../framework/runtime"
+import { Daemon } from "../../../services/daemon"
+
+export default Runtime.handler(
+  Commands.commands.service.commands.password,
+  Effect.fn("cli.service.password")(function* (input) {
+    const daemon = yield* Daemon.Service
+    const value = Option.getOrUndefined(input.value)
+    if (value !== undefined) yield* daemon.stop()
+    process.stdout.write((yield* daemon.password(value)) + EOL)
+  }),
+)

packages/cli/src/commands/handlers/service/restart.ts

@@ -0,0 +1,14 @@
+import { EOL } from "os"
+import * as Effect from "effect/Effect"
+import { Commands } from "../../commands"
+import { Runtime } from "../../../framework/runtime"
+import { Daemon } from "../../../services/daemon"
+
+export default Runtime.handler(
+  Commands.commands.service.commands.restart,
+  Effect.fn("cli.service.restart")(function* () {
+    const daemon = yield* Daemon.Service
+    yield* daemon.stop()
+    process.stdout.write((yield* daemon.start()) + EOL)
+  }),
+)

packages/cli/src/commands/handlers/service/start.ts

@@ -0,0 +1,12 @@
+import { EOL } from "os"
+import * as Effect from "effect/Effect"
+import { Commands } from "../../commands"
+import { Runtime } from "../../../framework/runtime"
+import { Daemon } from "../../../services/daemon"
+
+export default Runtime.handler(
+  Commands.commands.service.commands.start,
+  Effect.fn("cli.service.start")(function* () {
+    process.stdout.write((yield* (yield* Daemon.Service).start()) + EOL)
+  }),
+)

packages/cli/src/commands/handlers/service/status.ts

@@ -0,0 +1,13 @@
+import { EOL } from "os"
+import * as Effect from "effect/Effect"
+import { Commands } from "../../commands"
+import { Runtime } from "../../../framework/runtime"
+import { Daemon } from "../../../services/daemon"
+
+export default Runtime.handler(
+  Commands.commands.service.commands.status,
+  Effect.fn("cli.service.status")(function* () {
+    const url = yield* (yield* Daemon.Service).status()
+    process.stdout.write((url ? `running ${url}` : "stopped") + EOL)
+  }),
+)

packages/cli/src/commands/handlers/service/stop.ts

@@ -0,0 +1,11 @@
+import * as Effect from "effect/Effect"
+import { Commands } from "../../commands"
+import { Runtime } from "../../../framework/runtime"
+import { Daemon } from "../../../services/daemon"
+
+export default Runtime.handler(
+  Commands.commands.service.commands.stop,
+  Effect.fn("cli.service.stop")(function* () {
+    yield* (yield* Daemon.Service).stop()
+  }),
+)

packages/cli/src/framework/runtime.ts

@@ -1,19 +1,22 @@
 import * as Effect from "effect/Effect"
 import * as Command from "effect/unstable/cli/Command"
-import { CliApi } from "./cli-api"
+import { Spec } from "./spec"
+import { Daemon } from "../services/daemon"
 
 export type Input<Value> =
-  Value extends CliApi.Node<infer _Name, infer Spec, infer _Commands>
-    ? Input<Spec>
+  Value extends Spec.Node<infer _Name, infer Command, infer _Commands>
+    ? Input<Command>
     : Value extends Command.Command<infer _Name, infer Input, infer _Context, infer _Error, infer _Requirements>
       ? Input
       : never
 
-type RuntimeHandler = (input: unknown) => Effect.Effect<void, unknown>
-type Loader<Node extends CliApi.Any> = () => Promise<{ default: (input: Input<Node>) => Effect.Effect<void, any> }>
-type ProvidedCommand = Command.Command<string, unknown, unknown, unknown, never>
+type RuntimeHandler = (input: unknown) => Effect.Effect<void, unknown, Daemon.Service>
+type Loader<Node extends Spec.Any> = () => Promise<{
+  default: (input: Input<Node>) => Effect.Effect<void, any, Daemon.Service>
+}>
+type ProvidedCommand = Command.Command<string, unknown, unknown, unknown, Daemon.Service>
 
-export type Handlers<Node extends CliApi.Any> = keyof Node["commands"] extends never
+export type Handlers<Node extends Spec.Any> = keyof Node["commands"] extends never
   ? Loader<Node>
   : { readonly $?: Loader<Node> } & { readonly [Key in keyof Node["commands"]]: Handlers<Node["commands"][Key]> }
 
@@ -29,17 +32,17 @@ type RuntimeHandlers =
       readonly [key: string]: RuntimeHandlers | (() => Promise<{ default: RuntimeHandler }>) | undefined
     }
 
-export function handler<const Node extends CliApi.Any, Error>(
+export function handler<const Node extends Spec.Any, Error, Requirements>(
   _node: Node,
-  run: (input: Input<Node>) => Effect.Effect<void, Error>,
+  run: (input: Input<Node>) => Effect.Effect<void, Error, Requirements>,
 ) {
   return run
 }
 
-export function handlers<const Root extends CliApi.Any>(root: Root, handlers: Handlers<Root>) {
+export function handlers<const Root extends Spec.Any>(root: Root, handlers: Handlers<Root>) {
   const result: LazyHandler[] = []
 
-  function add(node: CliApi.Any, value: RuntimeHandlers) {
+  function add(node: Spec.Any, value: RuntimeHandlers) {
     if (typeof value === "function") {
       result.push({ spec: node.spec, load: value as () => Promise<{ default: RuntimeHandler }> })
       return
@@ -52,11 +55,11 @@ export function handlers<const Root extends CliApi.Any>(root: Root, handlers: Ha
   return result
 }
 
-export function run(api: CliApi.Any, handlers: ReadonlyArray<LazyHandler>, options: { readonly version: string }) {
-  return Command.run(provide(api, handlers), options) as Effect.Effect<void, unknown, Command.Environment>
+export function run(commands: Spec.Any, handlers: ReadonlyArray<LazyHandler>, options: { readonly version: string }) {
+  return Command.run(provide(commands, handlers), options) as Effect.Effect<void, unknown, Command.Environment>
 }
 
-function provide(node: CliApi.Any, handlers: ReadonlyArray<LazyHandler>): ProvidedCommand {
+function provide(node: Spec.Any, handlers: ReadonlyArray<LazyHandler>): ProvidedCommand {
   const spec: Command.Command.Any = Object.keys(node.commands).length
     ? (node.spec as Command.Command<string, unknown>).pipe(
         Command.withSubcommands(Object.values(node.commands).map((child) => provide(child, handlers))),
@@ -65,8 +68,12 @@ function provide(node: CliApi.Any, handlers: ReadonlyArray<LazyHandler>): Provid
   const handler = handlers.find((handler) => handler.spec === node.spec)
   if (!handler) return spec as ProvidedCommand
   return spec.pipe(
-    Command.withHandler((input) => Effect.flatMap(Effect.promise(handler.load), (module) => module.default(input))),
+    Command.withHandler((input) =>
+      Effect.gen(function* () {
+        yield* Effect.flatMap(Effect.promise(handler.load), (module) => module.default(input))
+      }),
+    ),
   ) as ProvidedCommand
 }
 
-export * as CliBuilder from "./cli-builder"
+export * as Runtime from "./runtime"

packages/cli/src/framework/spec.ts

@@ -39,4 +39,4 @@ type ChildrenOf<Commands extends ReadonlyArray<Any>> = {
   readonly [Node in Commands[number] as Node["name"]]: Node
 }
 
-export * as CliApi from "./cli-api"
+export * as Spec from "./spec"

packages/cli/src/handlers/debug/agents.ts

@@ -1,30 +0,0 @@
-import { EOL } from "os"
-import { AgentV2 } from "@opencode-ai/core/agent"
-import { LocationServiceMap } from "@opencode-ai/core/location-layer"
-import { PluginBoot } from "@opencode-ai/core/plugin/boot"
-import { AbsolutePath } from "@opencode-ai/core/schema"
-import * as Effect from "effect/Effect"
-import { Api } from "../../api"
-import { CliBuilder } from "../../cli-builder"
-
-export default CliBuilder.handler(
-  Api.commands.debug.commands.agents,
-  Effect.fn("cli.debug.agents")(
-    function* () {
-      const svc = {
-        plugin: yield* PluginBoot.Service,
-        agent: yield* AgentV2.Service,
-      }
-      yield* svc.plugin.wait()
-      process.stdout.write(
-        JSON.stringify(
-          (yield* svc.agent.all()).sort((a, b) => a.id.localeCompare(b.id)),
-          null,
-          2,
-        ) + EOL,
-      )
-    },
-    Effect.provide(LocationServiceMap.get({ directory: AbsolutePath.make(process.cwd()) })),
-    Effect.provide(LocationServiceMap.layer),
-  ),
-)

packages/cli/src/handlers/migrate.ts

@@ -1,5 +0,0 @@
-import * as Effect from "effect/Effect"
-import { Api } from "../api"
-import { CliBuilder } from "../cli-builder"
-
-export default CliBuilder.handler(Api.commands.migrate, (_input) => Effect.log("No migrations to run."))

packages/cli/src/index.ts

@@ -3,17 +3,27 @@
 import * as NodeRuntime from "@effect/platform-node/NodeRuntime"
 import * as NodeServices from "@effect/platform-node/NodeServices"
 import * as Effect from "effect/Effect"
-import { Api } from "./api"
-import { CliBuilder } from "./cli-builder"
+import { Commands } from "./commands/commands"
+import { Runtime } from "./framework/runtime"
+import { Daemon } from "./services/daemon"
 
-const Handlers = CliBuilder.handlers(Api, {
+const Handlers = Runtime.handlers(Commands, {
   debug: {
-    agents: () => import("./handlers/debug/agents"),
+    agents: () => import("./commands/handlers/debug/agents"),
   },
-  migrate: () => import("./handlers/migrate"),
+  migrate: () => import("./commands/handlers/migrate"),
+  service: {
+    start: () => import("./commands/handlers/service/start"),
+    restart: () => import("./commands/handlers/service/restart"),
+    status: () => import("./commands/handlers/service/status"),
+    stop: () => import("./commands/handlers/service/stop"),
+    password: () => import("./commands/handlers/service/password"),
+  },
+  serve: () => import("./commands/handlers/serve"),
 })
 
-CliBuilder.run(Api, Handlers, { version: "local" }).pipe(
+Runtime.run(Commands, Handlers, { version: "local" }).pipe(
+  Effect.provide(Daemon.defaultLayer),
   Effect.provide(NodeServices.layer),
   Effect.scoped,
   NodeRuntime.runMain,

packages/cli/src/services/daemon.ts

@@ -0,0 +1,143 @@
+import { Global } from "@opencode-ai/core/global"
+import { createOpencodeClient } from "@opencode-ai/sdk/v2/client"
+import { ServerAuth } from "@opencode-ai/server/auth"
+import { Context, Effect, FileSystem, Layer, Option, Schedule, Schema, Scope } from "effect"
+import { HttpServer } from "effect/unstable/http"
+import { randomBytes } from "crypto"
+import path from "path"
+
+export interface Interface {
+  readonly client: () => Effect.Effect<ReturnType<typeof createOpencodeClient>, unknown>
+  readonly start: () => Effect.Effect<string, Error>
+  readonly status: () => Effect.Effect<string | undefined>
+  readonly stop: () => Effect.Effect<void, unknown>
+  readonly password: (value?: string) => Effect.Effect<string, unknown>
+  readonly register: (address: HttpServer.Address) => Effect.Effect<void, unknown, Scope.Scope>
+}
+
+export class Service extends Context.Service<Service, Interface>()("@opencode/cli/Daemon") {}
+
+export const layer = Layer.effect(
+  Service,
+  Effect.gen(function* () {
+    const fs = yield* FileSystem.FileSystem
+    const directory = Global.Path.state
+    const file = path.join(directory, "server.json")
+    const passwordFile = path.join(directory, "password")
+    const decodeRegistration = Schema.decodeUnknownEffect(
+      Schema.fromJsonString(Schema.Struct({ url: Schema.String, pid: Schema.Number })),
+    )
+
+    const password = Effect.fn("cli.daemon.password")(function* (value?: string) {
+      const existing = yield* fs.readFileString(passwordFile).pipe(Effect.catch(() => Effect.succeed(undefined)))
+      if (value === undefined && existing) return existing
+
+      // Keep one private credential across server restarts so discovered clients
+      // can reconnect without exposing a password flag or environment variable.
+      const generated = value ?? randomBytes(32).toString("base64url")
+      const temp = passwordFile + ".tmp"
+      yield* fs.makeDirectory(directory, { recursive: true })
+      yield* fs.writeFileString(temp, generated, { mode: 0o600 })
+      yield* fs.rename(temp, passwordFile)
+      return generated
+    })
+
+    const registration = Effect.fnUntraced(function* () {
+      return yield* fs.readFileString(file).pipe(Effect.flatMap(decodeRegistration))
+    })
+
+    const createClient = Effect.fnUntraced(function* (url: string) {
+      return createOpencodeClient({ baseUrl: url, headers: ServerAuth.headers({ password: yield* password() }) })
+    })
+
+    const healthy = Effect.fnUntraced(function* () {
+      const info = yield* registration()
+      const client = yield* createClient(info.url)
+      const response = yield* Effect.tryPromise(() => client.v2.health.get())
+      if (response.data?.healthy === true) return info
+      return yield* Effect.fail(new Error("Registered server is not healthy"))
+    })
+
+    const start = Effect.fn("cli.daemon.start")(function* () {
+      const existing = yield* healthy().pipe(Effect.option)
+      const found = Option.getOrUndefined(existing)
+      if (found) return found.url
+
+      yield* Effect.sync(() => {
+        const compiled = path.basename(process.execPath).replace(/\.exe$/, "") !== "bun"
+        Bun.spawn([process.execPath, ...(compiled ? [] : [Bun.main]), "serve", "--register"], {
+          stdin: "ignore",
+          stdout: "ignore",
+          stderr: "ignore",
+        }).unref()
+      })
+
+      return yield* healthy().pipe(
+        Effect.retry(Schedule.spaced("50 millis").pipe(Schedule.both(Schedule.recurs(100)))),
+        Effect.map((info) => info.url),
+        Effect.mapError(() => new Error("Failed to start server")),
+      )
+    })
+
+    const client = Effect.fn("cli.daemon.client")(function* () {
+      return yield* createClient(yield* start())
+    })
+
+    const status = Effect.fn("cli.daemon.status")(function* () {
+      const existing = yield* healthy().pipe(Effect.option)
+      const found = Option.getOrUndefined(existing)
+      if (found) return found.url
+      yield* fs.remove(file).pipe(Effect.ignore)
+      return undefined
+    })
+
+    const signal = (pid: number, signal: NodeJS.Signals) =>
+      Effect.try({ try: () => process.kill(pid, signal), catch: (cause) => cause }).pipe(Effect.ignore)
+
+    const awaitStopped = Effect.fnUntraced(function* (pid: number) {
+      const running = yield* Effect.try({ try: () => process.kill(pid, 0), catch: () => false }).pipe(
+        Effect.orElseSucceed(() => false),
+      )
+      if (!running) return true
+      return yield* Effect.fail(new Error(`Server process ${pid} is still running`))
+    })
+
+    const stop = Effect.fn("cli.daemon.stop")(function* () {
+      const existing = yield* healthy().pipe(Effect.option)
+      // A stale registration may point at a PID that has since been reused by
+      // another process. Only signal the PID after authenticating the server.
+      if (Option.isNone(existing)) return yield* fs.remove(file).pipe(Effect.ignore)
+      const pid = existing.value.pid
+      yield* signal(pid, "SIGTERM")
+      const stopped = yield* awaitStopped(pid).pipe(
+        Effect.retry(Schedule.spaced("50 millis").pipe(Schedule.both(Schedule.recurs(100)))),
+        Effect.option,
+      )
+      if (Option.isNone(stopped)) {
+        yield* signal(pid, "SIGKILL")
+        yield* awaitStopped(pid).pipe(
+          Effect.retry(Schedule.spaced("50 millis").pipe(Schedule.both(Schedule.recurs(100)))),
+        )
+      }
+      yield* fs.remove(file).pipe(Effect.ignore)
+    })
+
+    const register = Effect.fn("cli.daemon.register")(function* (address: HttpServer.Address) {
+      const temp = file + ".tmp"
+      yield* fs.makeDirectory(directory, { recursive: true })
+      yield* fs.writeFileString(temp, JSON.stringify({ url: HttpServer.formatAddress(address), pid: process.pid }), {
+        mode: 0o600,
+      })
+      yield* fs.rename(temp, file)
+      // The metadata file represents this live listener, not persistent config.
+      // Scope shutdown removes it when the server exits normally.
+      yield* Effect.addFinalizer(() => fs.remove(file).pipe(Effect.ignore))
+    })
+
+    return Service.of({ client, start, status, stop, password, register })
+  }),
+)
+
+export const defaultLayer = layer
+
+export * as Daemon from "./daemon"

packages/cli/tsconfig.json

@@ -2,6 +2,7 @@
   "$schema": "https://json.schemastore.org/tsconfig",
   "extends": "@tsconfig/bun/tsconfig.json",
   "compilerOptions": {
+    "lib": ["ESNext", "DOM", "DOM.Iterable"],
     "noUncheckedIndexedAccess": false
   }
 }

packages/console/app/src/routes/zen/util/handler.ts

@@ -112,6 +112,7 @@ export async function handler(
       client: ocClient,
       user_agent: userAgent,
       "model.variant": variant,
+      "model.tier": opts.modelList === "full" ? "zen" : "go",
     })
     const zenData = ZenData.list(opts.modelList)
     const modelInfo = validateModel(zenData, model)
@@ -678,12 +679,10 @@ export async function handler(
       ...(() => {
         if (data.billing.subscription)
           return {
-            isSubscription: true,
             subscription: data.billing.subscription.plan,
           }
         if (data.billing.lite)
           return {
-            isSubscription: true,
             subscription: "lite",
           }
         return {}

packages/console/function/src/log-processor.ts

@@ -132,7 +132,7 @@ function toLakeEvent(time: string, data: Record<string, unknown>) {
     error_cause2: string(data, "error.cause2"),
     api_key: string(data, "api_key"),
     workspace: string(data, "workspace"),
-    is_subscription: boolean(data, "isSubscription"),
+    is_subscription: boolean(data, "isSubscription"), // removed
     subscription: string(data, "subscription"),
     response_length: integer(data, "response_length"),
     time_to_first_byte: integer(data, "time_to_first_byte"),

packages/core/migration/20260603001617_session_message_projection_indexes/migration.sql

@@ -0,0 +1,5 @@
+DROP INDEX IF EXISTS `session_message_session_idx`;--> statement-breakpoint
+DROP INDEX IF EXISTS `session_message_session_type_idx`;--> statement-breakpoint
+CREATE INDEX `event_aggregate_seq_idx` ON `event` (`aggregate_id`,`seq`);--> statement-breakpoint
+CREATE INDEX `session_message_session_time_created_id_idx` ON `session_message` (`session_id`,`time_created`,`id`);--> statement-breakpoint
+CREATE INDEX `session_message_session_type_time_created_id_idx` ON `session_message` (`session_id`,`type`,`time_created`,`id`);

packages/core/migration/20260603040000_session_message_projection_order/migration.sql

@@ -0,0 +1,6 @@
+DELETE FROM `session_message`;--> statement-breakpoint
+ALTER TABLE `session_message` ADD `seq` integer NOT NULL;--> statement-breakpoint
+DROP INDEX IF EXISTS `session_message_session_time_created_id_idx`;--> statement-breakpoint
+DROP INDEX IF EXISTS `session_message_session_type_time_created_id_idx`;--> statement-breakpoint
+CREATE INDEX `session_message_session_seq_idx` ON `session_message` (`session_id`,`seq`);--> statement-breakpoint
+CREATE INDEX `session_message_session_type_seq_idx` ON `session_message` (`session_id`,`type`,`seq`);

packages/core/migration/20260603141458_session_input_inbox/migration.sql

@@ -0,0 +1,12 @@
+CREATE TABLE `session_input` (
+	`seq` integer PRIMARY KEY AUTOINCREMENT,
+	`id` text NOT NULL UNIQUE,
+	`session_id` text NOT NULL,
+	`prompt` text NOT NULL,
+	`delivery` text NOT NULL,
+	`promoted_seq` integer,
+	`time_created` integer NOT NULL,
+	CONSTRAINT `fk_session_input_session_id_session_id_fk` FOREIGN KEY (`session_id`) REFERENCES `session`(`id`) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE INDEX `session_input_session_pending_seq_idx` ON `session_input` (`session_id`,`promoted_seq`,`seq`);

packages/core/migration/20260603160727_jittery_ezekiel_stane/migration.sql

@@ -0,0 +1,4 @@
+DROP INDEX IF EXISTS `session_input_session_pending_seq_idx`;--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS `event_aggregate_type_seq_idx` ON `event` (`aggregate_id`,`type`,`seq`);--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS `session_input_session_pending_delivery_seq_idx` ON `session_input` (`session_id`,`promoted_seq`,`delivery`,`seq`);--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS `session_message_session_time_created_id_idx` ON `session_message` (`session_id`,`time_created`,`id`);

packages/core/package.json

@@ -17,6 +17,7 @@
     "opencode": "./bin/opencode"
   },
   "exports": {
+    "./session/runner": "./src/session/runner/index.ts",
     "./*": "./src/*.ts"
   },
   "imports": {
@@ -39,6 +40,7 @@
     "@types/npm-package-arg": "6.1.4",
     "@types/npmcli__arborist": "6.3.3",
     "@types/semver": "catalog:",
+    "@types/turndown": "5.0.5",
     "@types/which": "3.0.4",
     "@parcel/watcher-darwin-arm64": "2.5.1",
     "@parcel/watcher-darwin-x64": "2.5.1",
@@ -48,11 +50,12 @@
     "@parcel/watcher-linux-x64-musl": "2.5.1",
     "@parcel/watcher-win32-arm64": "2.5.1",
     "@parcel/watcher-win32-x64": "2.5.1",
+    "@opencode-ai/http-recorder": "workspace:*",
     "drizzle-kit": "catalog:"
   },
   "dependencies": {
     "@ai-sdk/alibaba": "1.0.17",
-    "@ai-sdk/amazon-bedrock": "4.0.107",
+    "@ai-sdk/amazon-bedrock": "4.0.112",
     "@ai-sdk/anthropic": "3.0.71",
     "@ai-sdk/azure": "3.0.49",
     "@ai-sdk/cerebras": "2.0.41",
@@ -71,7 +74,7 @@
     "@ai-sdk/togetherai": "2.0.41",
     "@ai-sdk/vercel": "2.0.39",
     "@ai-sdk/xai": "3.0.82",
-    "@aws-sdk/credential-providers": "3.993.0",
+    "@aws-sdk/credential-providers": "3.1057.0",
     "@effect/opentelemetry": "catalog:",
     "@effect/platform-node": "catalog:",
     "@effect/sql-sqlite-bun": "catalog:",
@@ -80,6 +83,7 @@
     "@npmcli/config": "10.8.1",
     "@opencode-ai/effect-drizzle-sqlite": "workspace:*",
     "@opencode-ai/effect-sqlite-node": "workspace:*",
+    "@opencode-ai/llm": "workspace:*",
     "@opentelemetry/api": "1.9.0",
     "@opentelemetry/context-async-hooks": "2.6.1",
     "@opentelemetry/exporter-trace-otlp-http": "0.214.0",
@@ -96,6 +100,7 @@
     "glob": "13.0.5",
     "google-auth-library": "10.5.0",
     "gray-matter": "4.0.3",
+    "htmlparser2": "8.0.2",
     "immer": "11.1.4",
     "ignore": "7.0.5",
     "jsonc-parser": "3.3.1",
@@ -103,6 +108,7 @@
     "minimatch": "10.2.5",
     "npm-package-arg": "13.0.2",
     "semver": "^7.6.3",
+    "turndown": "7.2.0",
     "venice-ai-sdk-provider": "2.0.2",
     "which": "6.0.1",
     "xdg-basedir": "5.1.0",

packages/core/src/aisdk.ts

@@ -82,7 +82,11 @@ function prepareOptions(model: ModelV2.Info, pkg: string) {
     if (abortSignals.length === 1) opts.signal = abortSignals[0]
     if (abortSignals.length > 1) opts.signal = AbortSignal.any(abortSignals)
 
-    if ((pkg === "@ai-sdk/openai" || pkg === "@ai-sdk/azure") && opts.body && opts.method === "POST") {
+    if (
+      (pkg === "@ai-sdk/openai" || pkg === "@ai-sdk/azure" || pkg === "@ai-sdk/amazon-bedrock/mantle") &&
+      opts.body &&
+      opts.method === "POST"
+    ) {
       const body = JSON.parse(opts.body as string)
       if (body.store !== true && Array.isArray(body.input)) {
         for (const item of body.input) {

packages/core/src/background-job.ts

@@ -0,0 +1,284 @@
+export * as BackgroundJob from "./background-job"
+
+import { Cause, Clock, Context, Deferred, Effect, Exit, Layer, Scope, SynchronizedRef } from "effect"
+import { Identifier } from "./id/id"
+
+export type Status = "running" | "completed" | "error" | "cancelled"
+
+export type Info = {
+  id: string
+  type: string
+  title?: string
+  status: Status
+  started_at: number
+  completed_at?: number
+  output?: string
+  error?: string
+  metadata?: Record<string, unknown>
+}
+
+type Active = {
+  info: Info
+  done: Deferred.Deferred<Info>
+  scope: Scope.Closeable
+  token: object
+  pending: number
+  next: number
+  output?: { sequence: number; text: string }
+}
+
+type State = {
+  jobs: SynchronizedRef.SynchronizedRef<Map<string, Active>>
+  scope: Scope.Scope
+}
+
+type FinishResult = {
+  info?: Info
+  done?: Deferred.Deferred<Info>
+  scope?: Scope.Closeable
+}
+
+type StartResult = { info: Info } | { info: Info; scope: Scope.Closeable; token: object }
+
+type ExtendResult = { extended: false } | { extended: true; scope: Scope.Closeable; token: object; sequence: number }
+
+export type StartInput = {
+  id?: string
+  type: string
+  title?: string
+  metadata?: Record<string, unknown>
+  run: Effect.Effect<string, unknown>
+}
+
+export type ExtendInput = {
+  id: string
+  run: Effect.Effect<string, unknown>
+}
+
+export type WaitInput = {
+  id: string
+  timeout?: number
+}
+
+export type WaitResult = {
+  info?: Info
+  timedOut: boolean
+}
+
+export interface Interface {
+  readonly list: () => Effect.Effect<Info[]>
+  readonly get: (id: string) => Effect.Effect<Info | undefined>
+  readonly start: (input: StartInput) => Effect.Effect<Info>
+  readonly extend: (input: ExtendInput) => Effect.Effect<boolean>
+  readonly wait: (input: WaitInput) => Effect.Effect<WaitResult>
+  readonly cancel: (id: string) => Effect.Effect<Info | undefined>
+}
+
+export class Service extends Context.Service<Service, Interface>()("@opencode/BackgroundJob") {}
+
+function snapshot(job: Active): Info {
+  return {
+    ...job.info,
+    ...(job.info.metadata ? { metadata: { ...job.info.metadata } } : {}),
+  }
+}
+
+function errorText(error: unknown) {
+  if (error instanceof Error) return error.message
+  return String(error)
+}
+
+/**
+ * Makes one scoped, process-local registry. Entries are intentionally not
+ * durable: process restart or owner-scope closure loses status and interrupts
+ * live work. Persisted observation, restart recovery, and remote workers need a
+ * separate durable ownership slice rather than pretending this registry has
+ * those semantics.
+ */
+export const make = Effect.gen(function* () {
+  const state: State = {
+    jobs: yield* SynchronizedRef.make(new Map()),
+    scope: yield* Scope.Scope,
+  }
+
+  const settle = Effect.fn("BackgroundJob.settle")(function* (
+    id: string,
+    token: object,
+    sequence: number,
+    exit: Exit.Exit<string, unknown>,
+  ) {
+    const completed_at = yield* Clock.currentTimeMillis
+    const result = yield* SynchronizedRef.modify(state.jobs, (jobs): readonly [FinishResult, Map<string, Active>] => {
+      const job = jobs.get(id)
+      if (!job) return [{}, jobs]
+      if (job.token !== token) return [{}, jobs]
+      if (job.info.status !== "running") return [{ info: snapshot(job) }, jobs]
+      const pending = job.pending - 1
+      const output =
+        Exit.isSuccess(exit) && (!job.output || sequence > job.output.sequence)
+          ? { sequence, text: exit.value }
+          : job.output
+      if (Exit.isSuccess(exit) && pending > 0) {
+        return [{}, new Map(jobs).set(id, { ...job, pending, output })]
+      }
+      const status: Exclude<Status, "running"> = Exit.isSuccess(exit)
+        ? "completed"
+        : Cause.hasInterruptsOnly(exit.cause)
+          ? "cancelled"
+          : "error"
+      const next = {
+        ...job,
+        pending: 0,
+        output,
+        info: {
+          ...job.info,
+          status,
+          completed_at,
+          ...(output ? { output: output.text } : {}),
+          ...(Exit.isFailure(exit) ? { error: errorText(Cause.squash(exit.cause)) } : {}),
+        },
+      }
+      return [{ info: snapshot(next), done: job.done, scope: job.scope }, new Map(jobs).set(id, next)]
+    })
+    if (result.info && result.done) yield* Deferred.succeed(result.done, result.info).pipe(Effect.ignore)
+    if (result.scope) {
+      yield* Scope.close(result.scope, Exit.void).pipe(Effect.forkIn(state.scope, { startImmediately: true }))
+    }
+    return result.info
+  })
+
+  const fork = Effect.fn("BackgroundJob.fork")(function* (
+    scope: Scope.Scope,
+    id: string,
+    token: object,
+    sequence: number,
+    run: Effect.Effect<string, unknown>,
+  ) {
+    return yield* run.pipe(
+      Effect.matchCauseEffect({
+        onSuccess: (output) => settle(id, token, sequence, Exit.succeed(output)),
+        onFailure: (cause) => settle(id, token, sequence, Exit.failCause(cause)),
+      }),
+      Effect.asVoid,
+      Effect.forkIn(scope, { startImmediately: true }),
+    )
+  })
+
+  const list: Interface["list"] = Effect.fn("BackgroundJob.list")(function* () {
+    return Array.from((yield* SynchronizedRef.get(state.jobs)).values())
+      .map(snapshot)
+      .toSorted((a, b) => a.started_at - b.started_at)
+  })
+
+  const get: Interface["get"] = Effect.fn("BackgroundJob.get")(function* (id) {
+    const job = (yield* SynchronizedRef.get(state.jobs)).get(id)
+    if (!job) return
+    return snapshot(job)
+  })
+
+  const start: Interface["start"] = Effect.fn("BackgroundJob.start")(function* (input) {
+    return yield* Effect.uninterruptibleMask((restore) =>
+      Effect.gen(function* () {
+        const id = input.id ?? Identifier.ascending("job")
+        const started_at = yield* Clock.currentTimeMillis
+        const done = yield* Deferred.make<Info>()
+        const result = yield* SynchronizedRef.modifyEffect(
+          state.jobs,
+          Effect.fnUntraced(function* (jobs) {
+            const existing = jobs.get(id)
+            if (existing?.info.status === "running") {
+              return [{ info: snapshot(existing) }, jobs] as readonly [StartResult, Map<string, Active>]
+            }
+            const scope = yield* Scope.fork(state.scope, "parallel")
+            const token = {}
+            const job = {
+              info: {
+                id,
+                type: input.type,
+                title: input.title,
+                status: "running" as const,
+                started_at,
+                metadata: input.metadata,
+              },
+              done,
+              scope,
+              token,
+              pending: 1,
+              next: 1,
+            }
+            return [{ info: snapshot(job), scope, token }, new Map(jobs).set(id, job)] as readonly [
+              StartResult,
+              Map<string, Active>,
+            ]
+          }),
+        )
+        if ("scope" in result) yield* fork(result.scope, id, result.token, 0, restore(input.run))
+        return result.info
+      }),
+    )
+  })
+
+  const extend: Interface["extend"] = Effect.fn("BackgroundJob.extend")(function* (input) {
+    return yield* Effect.uninterruptibleMask((restore) =>
+      Effect.gen(function* () {
+        const result = yield* SynchronizedRef.modify(
+          state.jobs,
+          (jobs): readonly [ExtendResult, Map<string, Active>] => {
+            const job = jobs.get(input.id)
+            if (!job || job.info.status !== "running") return [{ extended: false }, jobs]
+            return [
+              { extended: true, scope: job.scope, token: job.token, sequence: job.next },
+              new Map(jobs).set(input.id, {
+                ...job,
+                pending: job.pending + 1,
+                next: job.next + 1,
+              }),
+            ]
+          },
+        )
+        if (!result.extended) return false
+        yield* fork(result.scope, input.id, result.token, result.sequence, restore(input.run))
+        return true
+      }),
+    )
+  })
+
+  const wait: Interface["wait"] = Effect.fn("BackgroundJob.wait")(function* (input) {
+    const job = (yield* SynchronizedRef.get(state.jobs)).get(input.id)
+    if (!job) return { timedOut: false }
+    if (job.info.status !== "running") return { info: snapshot(job), timedOut: false }
+    if (input.timeout === undefined) return { info: yield* Deferred.await(job.done), timedOut: false }
+    if (input.timeout <= 0) return { info: snapshot(job), timedOut: true }
+    const info = yield* Deferred.await(job.done).pipe(Effect.timeoutOption(input.timeout))
+    if (info._tag === "Some") return { info: info.value, timedOut: false }
+    return { info: snapshot(job), timedOut: true }
+  })
+
+  const cancel: Interface["cancel"] = Effect.fn("BackgroundJob.cancel")(function* (id) {
+    const completed_at = yield* Clock.currentTimeMillis
+    const result = yield* SynchronizedRef.modify(state.jobs, (jobs): readonly [FinishResult, Map<string, Active>] => {
+      const job = jobs.get(id)
+      if (!job) return [{}, jobs]
+      if (job.info.status !== "running") return [{ info: snapshot(job) }, jobs]
+      const next = {
+        ...job,
+        pending: 0,
+        info: {
+          ...job.info,
+          status: "cancelled" as const,
+          completed_at,
+        },
+      }
+      return [{ info: snapshot(next), done: job.done, scope: job.scope }, new Map(jobs).set(id, next)]
+    })
+    if (result.info && result.done) yield* Deferred.succeed(result.done, result.info).pipe(Effect.ignore)
+    if (result.scope) yield* Scope.close(result.scope, Exit.void)
+    return result.info
+  })
+
+  return Service.of({ list, get, start, extend, wait, cancel })
+})
+
+export const layer = Layer.effect(Service, make)
+
+export const defaultLayer = layer

packages/core/src/command.ts

@@ -0,0 +1,68 @@
+export * as CommandV2 from "./command"
+
+import { Context, Effect, Layer, Schema } from "effect"
+import { castDraft, type Draft } from "immer"
+import { ModelV2 } from "./model"
+import { State } from "./state"
+
+export class Info extends Schema.Class<Info>("CommandV2.Info")({
+  name: Schema.String,
+  template: Schema.String,
+  description: Schema.String.pipe(Schema.optional),
+  agent: Schema.String.pipe(Schema.optional),
+  model: ModelV2.Ref.pipe(Schema.optional),
+  subtask: Schema.Boolean.pipe(Schema.optional),
+}) {}
+
+export type Data = {
+  commands: Map<string, Info>
+}
+
+export type Editor = {
+  list: () => readonly Info[]
+  get: (name: string) => Info | undefined
+  update: (name: string, update: (command: Draft<Info>) => void) => void
+  remove: (name: string) => void
+}
+
+export interface Interface {
+  readonly transform: State.Interface<Data, Editor>["transform"]
+  readonly get: (name: string) => Effect.Effect<Info | undefined>
+  readonly list: () => Effect.Effect<Info[]>
+}
+
+export class Service extends Context.Service<Service, Interface>()("@opencode/v2/Command") {}
+
+export const layer = Layer.effect(
+  Service,
+  Effect.sync(() => {
+    const state = State.create<Data, Editor>({
+      initial: () => ({ commands: new Map() }),
+      editor: (draft) => ({
+        list: () => Array.from(draft.commands.values()) as Info[],
+        get: (name) => draft.commands.get(name),
+        update: (name, update) => {
+          const current = draft.commands.get(name) ?? castDraft(new Info({ name, template: "" }))
+          if (!draft.commands.has(name)) draft.commands.set(name, current)
+          update(current)
+          current.name = name
+        },
+        remove: (name) => {
+          draft.commands.delete(name)
+        },
+      }),
+    })
+
+    return Service.of({
+      transform: state.transform,
+      get: Effect.fn("CommandV2.get")(function* (name) {
+        return state.get().commands.get(name)
+      }),
+      list: Effect.fn("CommandV2.list")(function* () {
+        return Array.from(state.get().commands.values())
+      }),
+    })
+  }),
+)
+
+export const locationLayer = layer

packages/core/src/config.ts

@@ -6,12 +6,13 @@ import { Context, Effect, Layer, Option, Schema } from "effect"
 import { FSUtil } from "./fs-util"
 import { Global } from "./global"
 import { Location } from "./location"
-import { PermissionV2 } from "./permission"
+import { PermissionSchema } from "./permission/schema"
 import { Policy } from "./policy"
 import { AbsolutePath } from "./schema"
 import { ConfigAgent } from "./config/agent"
 import { ConfigAttachments } from "./config/attachments"
 import { ConfigCompaction } from "./config/compaction"
+import { ConfigCommand } from "./config/command"
 import { ConfigExperimental } from "./config/experimental"
 import { ConfigFormatter } from "./config/formatter"
 import { ConfigLSP } from "./config/lsp"
@@ -52,7 +53,7 @@ export class Info extends Schema.Class<Info>("Config.Info")({
   username: Schema.String.pipe(Schema.optional).annotate({
     description: "Username displayed in conversations and used for telemetry identity",
   }),
-  permissions: PermissionV2.Ruleset.pipe(Schema.optional).annotate({
+  permissions: PermissionSchema.Ruleset.pipe(Schema.optional).annotate({
     description: "Ordered tool permission rules applied to agent tool use",
   }),
   agents: Schema.Record(Schema.String, ConfigAgent.Info).pipe(Schema.optional).annotate({
@@ -85,6 +86,9 @@ export class Info extends Schema.Class<Info>("Config.Info")({
   skills: Schema.String.pipe(Schema.Array, Schema.optional).annotate({
     description: "Additional paths or URLs to discover skills from",
   }),
+  commands: Schema.Record(Schema.String, ConfigCommand.Info).pipe(Schema.optional).annotate({
+    description: "Named slash command definitions",
+  }),
   instructions: Schema.String.pipe(Schema.Array, Schema.optional).annotate({
     description: "Additional paths or URLs supplying ambient instructions",
   }),

packages/core/src/config/agent.ts

@@ -1,7 +1,7 @@
 export * as ConfigAgent from "./agent"
 
 import { Schema } from "effect"
-import { PermissionV2 } from "../permission"
+import { PermissionSchema } from "../permission/schema"
 import { ConfigProvider } from "./provider"
 import { PositiveInt } from "../schema"
 
@@ -21,5 +21,5 @@ export class Info extends Schema.Class<Info>("ConfigV2.Agent")({
   color: Color.pipe(Schema.optional),
   steps: PositiveInt.pipe(Schema.optional),
   disabled: Schema.Boolean.pipe(Schema.optional),
-  permissions: PermissionV2.Ruleset.pipe(Schema.optional),
+  permissions: PermissionSchema.Ruleset.pipe(Schema.optional),
 }) {}

packages/core/src/config/command.ts

@@ -0,0 +1,12 @@
+export * as ConfigCommand from "./command"
+
+import { Schema } from "effect"
+
+export class Info extends Schema.Class<Info>("ConfigV2.Command")({
+  template: Schema.String,
+  description: Schema.String.pipe(Schema.optional),
+  agent: Schema.String.pipe(Schema.optional),
+  model: Schema.String.pipe(Schema.optional),
+  variant: Schema.String.pipe(Schema.optional),
+  subtask: Schema.Boolean.pipe(Schema.optional),
+}) {}

packages/core/src/config/plugin/command.ts

@@ -0,0 +1,84 @@
+export * as ConfigCommandPlugin from "./command"
+
+import path from "path"
+import { Effect, Option, Schema } from "effect"
+import { CommandV2 } from "../../command"
+import { Config } from "../../config"
+import { FSUtil } from "../../fs-util"
+import { ModelV2 } from "../../model"
+import { PluginV2 } from "../../plugin"
+import { ConfigCommand } from "../command"
+import { ConfigMarkdown } from "../markdown"
+
+const decodeCommand = Schema.decodeUnknownOption(ConfigCommand.Info)
+
+export const Plugin = PluginV2.define({
+  id: PluginV2.ID.make("config-command"),
+  effect: Effect.gen(function* () {
+    const command = yield* CommandV2.Service
+    const config = yield* Config.Service
+    const fs = yield* FSUtil.Service
+    const transform = yield* command.transform()
+    const documents = yield* Effect.forEach(yield* config.entries(), (entry) => {
+      if (entry.type === "document") return Effect.succeed([{ commands: entry.info.commands }])
+      return loadDirectory(fs, entry.path).pipe(
+        Effect.map((commands) => [
+          { commands: Object.fromEntries(commands.map((command) => [command.name, command.info])) },
+        ]),
+      )
+    }).pipe(Effect.map((documents) => documents.flat()))
+
+    yield* transform((editor) => {
+      for (const document of documents) {
+        for (const [name, command] of Object.entries(document.commands ?? {})) {
+          editor.update(name, (item) => {
+            item.template = command.template
+            if (command.description !== undefined) item.description = command.description
+            if (command.agent !== undefined) item.agent = command.agent
+            if (command.model !== undefined) {
+              const model = ModelV2.parse(command.model)
+              item.model = { id: model.modelID, providerID: model.providerID, variant: item.model?.variant }
+            }
+            if (command.variant !== undefined && item.model !== undefined) {
+              item.model.variant = ModelV2.VariantID.make(command.variant)
+            }
+            if (command.subtask !== undefined) item.subtask = command.subtask
+          })
+        }
+      }
+    })
+  }),
+})
+
+function loadDirectory(fs: FSUtil.Interface, directory: string) {
+  return Effect.gen(function* () {
+    const files = yield* fs
+      .glob("{command,commands}/**/*.md", { cwd: directory, absolute: true, dot: true, symlink: true })
+      .pipe(Effect.catch(() => Effect.succeed([] as string[])))
+    return yield* Effect.forEach(files.toSorted(), (filepath) =>
+      fs.readFileStringSafe(filepath).pipe(
+        Effect.map((content) => (content === undefined ? undefined : decode(directory, filepath, content))),
+        Effect.catch(() => Effect.succeed(undefined)),
+      ),
+    ).pipe(
+      Effect.map((commands) =>
+        commands.filter((command): command is { name: string; info: ConfigCommand.Info } => command !== undefined),
+      ),
+    )
+  })
+}
+
+function decode(directory: string, filepath: string, content: string) {
+  const markdown = ConfigMarkdown.parseOption(content)
+  if (!markdown) return
+  const info = Option.getOrUndefined(decodeCommand({ ...markdown.data, template: markdown.content.trim() }))
+  if (!info) return
+  return {
+    name: path
+      .relative(directory, filepath)
+      .replaceAll("\\", "/")
+      .replace(/^(command|commands)\//, "")
+      .replace(/\.md$/, ""),
+    info,
+  }
+}

packages/core/src/config/plugin/skill.ts

@@ -18,9 +18,18 @@ export const Plugin = PluginV2.define({
     const skill = yield* SkillV2.Service
     const transform = yield* skill.transform()
     const entries = yield* config.entries()
+    const directories = entries.flatMap((entry) => (entry.type === "directory" ? [entry.path] : []))
     const items = entries.flatMap((entry) => (entry.type === "document" ? (entry.info.skills ?? []) : []))
 
     yield* transform((editor) => {
+      for (const directory of directories) {
+        editor.source(
+          new SkillV2.DirectorySource({ type: "directory", path: AbsolutePath.make(path.join(directory, "skill")) }),
+        )
+        editor.source(
+          new SkillV2.DirectorySource({ type: "directory", path: AbsolutePath.make(path.join(directory, "skills")) }),
+        )
+      }
       for (const item of items) {
         if (URL.canParse(item) && /^(https?:)$/.test(new URL(item).protocol)) {
           editor.source(new SkillV2.UrlSource({ type: "url", url: item }))

packages/core/src/database/migration.gen.ts

@@ -27,5 +27,9 @@ export const migrations = (
     import("./migration/20260601202201_amazing_prowler"),
     import("./migration/20260602002951_lowly_union_jack"),
     import("./migration/20260602182828_add_project_directories"),
+    import("./migration/20260603001617_session_message_projection_indexes"),
+    import("./migration/20260603040000_session_message_projection_order"),
+    import("./migration/20260603141458_session_input_inbox"),
+    import("./migration/20260603160727_jittery_ezekiel_stane"),
   ])
 ).map((module) => module.default) satisfies DatabaseMigration.Migration[]

packages/core/src/database/migration.ts

@@ -1,12 +1,13 @@
 export * as DatabaseMigration from "./migration"
 
 import { sql } from "drizzle-orm"
-import { Effect } from "effect"
+import { Effect, Semaphore } from "effect"
 import type { EffectDrizzleSqlite } from "@opencode-ai/effect-drizzle-sqlite"
 import { migrations } from "./migration.gen"
 
 type Database = EffectDrizzleSqlite.EffectSQLiteDatabase
 type Transaction = Parameters<Parameters<Database["transaction"]>[0]>[0]
+const lock = Semaphore.makeUnsafe(1)
 
 export type Migration = {
   id: string
@@ -14,7 +15,7 @@ export type Migration = {
 }
 
 export function apply(db: Database) {
-  return applyOnly(db, migrations)
+  return lock.withPermit(applyOnly(db, migrations))
 }
 
 export function applyOnly(db: Database, input: Migration[]) {

packages/core/src/database/migration/20260603001617_session_message_projection_indexes.ts

@@ -0,0 +1,19 @@
+import { Effect } from "effect"
+import type { DatabaseMigration } from "../migration"
+
+export default {
+  id: "20260603001617_session_message_projection_indexes",
+  up(tx) {
+    return Effect.gen(function* () {
+      yield* tx.run(`DROP INDEX IF EXISTS \`session_message_session_idx\`;`)
+      yield* tx.run(`DROP INDEX IF EXISTS \`session_message_session_type_idx\`;`)
+      yield* tx.run(`CREATE INDEX \`event_aggregate_seq_idx\` ON \`event\` (\`aggregate_id\`,\`seq\`);`)
+      yield* tx.run(
+        `CREATE INDEX \`session_message_session_time_created_id_idx\` ON \`session_message\` (\`session_id\`,\`time_created\`,\`id\`);`,
+      )
+      yield* tx.run(
+        `CREATE INDEX \`session_message_session_type_time_created_id_idx\` ON \`session_message\` (\`session_id\`,\`type\`,\`time_created\`,\`id\`);`,
+      )
+    })
+  },
+} satisfies DatabaseMigration.Migration

packages/core/src/database/migration/20260603040000_session_message_projection_order.ts

@@ -0,0 +1,19 @@
+import { Effect } from "effect"
+import type { DatabaseMigration } from "../migration"
+
+export default {
+  id: "20260603040000_session_message_projection_order",
+  up(tx) {
+    return Effect.gen(function* () {
+      // Pre-launch Session projections were written before durable event persistence
+      // became unconditional, so they cannot be assigned truthful aggregate order.
+      yield* tx.run(`DELETE FROM \`session_message\`;`)
+      yield* tx.run(`ALTER TABLE \`session_message\` ADD COLUMN \`seq\` integer NOT NULL;`)
+      yield* tx.run(`DROP INDEX IF EXISTS \`session_message_session_type_time_created_id_idx\`;`)
+      yield* tx.run(`CREATE INDEX \`session_message_session_seq_idx\` ON \`session_message\` (\`session_id\`,\`seq\`);`)
+      yield* tx.run(
+        `CREATE INDEX \`session_message_session_type_seq_idx\` ON \`session_message\` (\`session_id\`,\`type\`,\`seq\`);`,
+      )
+    })
+  },
+} satisfies DatabaseMigration.Migration

packages/core/src/database/migration/20260603141458_session_input_inbox.ts

@@ -0,0 +1,25 @@
+import { Effect } from "effect"
+import type { DatabaseMigration } from "../migration"
+
+export default {
+  id: "20260603141458_session_input_inbox",
+  up(tx) {
+    return Effect.gen(function* () {
+      yield* tx.run(`
+        CREATE TABLE \`session_input\` (
+          \`seq\` integer PRIMARY KEY AUTOINCREMENT,
+          \`id\` text NOT NULL UNIQUE,
+          \`session_id\` text NOT NULL,
+          \`prompt\` text NOT NULL,
+          \`delivery\` text NOT NULL,
+          \`promoted_seq\` integer,
+          \`time_created\` integer NOT NULL,
+          CONSTRAINT \`fk_session_input_session_id_session_id_fk\` FOREIGN KEY (\`session_id\`) REFERENCES \`session\`(\`id\`) ON DELETE CASCADE
+        );
+      `)
+      yield* tx.run(
+        `CREATE INDEX \`session_input_session_pending_seq_idx\` ON \`session_input\` (\`session_id\`,\`promoted_seq\`,\`seq\`);`,
+      )
+    })
+  },
+} satisfies DatabaseMigration.Migration

packages/core/src/database/migration/20260603160727_jittery_ezekiel_stane.ts

@@ -0,0 +1,20 @@
+import { Effect } from "effect"
+import type { DatabaseMigration } from "../migration"
+
+export default {
+  id: "20260603160727_jittery_ezekiel_stane",
+  up(tx) {
+    return Effect.gen(function* () {
+      yield* tx.run(`DROP INDEX IF EXISTS \`session_input_session_pending_seq_idx\`;`)
+      yield* tx.run(
+        `CREATE INDEX IF NOT EXISTS \`event_aggregate_type_seq_idx\` ON \`event\` (\`aggregate_id\`,\`type\`,\`seq\`);`,
+      )
+      yield* tx.run(
+        `CREATE INDEX IF NOT EXISTS \`session_input_session_pending_delivery_seq_idx\` ON \`session_input\` (\`session_id\`,\`promoted_seq\`,\`delivery\`,\`seq\`);`,
+      )
+      yield* tx.run(
+        `CREATE INDEX IF NOT EXISTS \`session_message_session_time_created_id_idx\` ON \`session_message\` (\`session_id\`,\`time_created\`,\`id\`);`,
+      )
+    })
+  },
+} satisfies DatabaseMigration.Migration

packages/core/src/database/sqlite.bun.ts

@@ -175,8 +175,9 @@ const drizzleLayer = Layer.effect(
   }),
 )
 
-export const layer = (config: Config) =>
-  Layer.merge(
-    nativeLayer(config),
-    Layer.merge(sqliteLayer(config), drizzleLayer).pipe(Layer.provide(nativeLayer(config))),
-  ).pipe(Layer.provide(Reactivity.layer))
+export const layer = (config: Config) => {
+  const native = nativeLayer(config)
+  return Layer.merge(native, Layer.merge(sqliteLayer(config), drizzleLayer).pipe(Layer.provide(native))).pipe(
+    Layer.provide(Reactivity.layer),
+  )
+}

packages/core/src/database/sqlite.node.ts

@@ -170,8 +170,9 @@ const drizzleLayer = Layer.effect(
   }),
 )
 
-export const layer = (config: Config) =>
-  Layer.merge(
-    nativeLayer(config),
-    Layer.merge(sqliteLayer(config), drizzleLayer).pipe(Layer.provide(nativeLayer(config))),
-  ).pipe(Layer.provide(Reactivity.layer))
+export const layer = (config: Config) => {
+  const native = nativeLayer(config)
+  return Layer.merge(native, Layer.merge(sqliteLayer(config), drizzleLayer).pipe(Layer.provide(native))).pipe(
+    Layer.provide(Reactivity.layer),
+  )
+}

packages/core/src/effect/keyed-mutex.ts

@@ -0,0 +1,45 @@
+export * as KeyedMutex from "./keyed-mutex"
+
+import { Effect, Semaphore } from "effect"
+
+export interface KeyedMutex<in Key> {
+  readonly size: Effect.Effect<number>
+  readonly withLock: (key: Key) => <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>
+}
+
+/**
+ * Creates an in-memory mutex with one lock per key. Entries are removed when no
+ * holder or waiter remains.
+ *
+ *   same key      -> queue
+ *   different key -> run independently
+ *
+ * `users` counts holders and waiters so an entry is not removed while a waiter
+ * will reuse it.
+ */
+export const makeUnsafe = <Key>(): KeyedMutex<Key> => {
+  const locks = new Map<Key, { readonly semaphore: Semaphore.Semaphore; users: number }>()
+
+  const withLock =
+    (key: Key) =>
+    <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+      Effect.suspend(() => {
+        const current = locks.get(key)
+        const entry = current ?? { semaphore: Semaphore.makeUnsafe(1), users: 0 }
+        if (!current) locks.set(key, entry)
+        entry.users++
+        return entry.semaphore.withPermit(effect).pipe(
+          Effect.ensuring(
+            Effect.sync(() => {
+              entry.users--
+              if (entry.users === 0) locks.delete(key)
+            }),
+          ),
+        )
+      })
+
+  return { size: Effect.sync(() => locks.size), withLock }
+}
+
+/** Creates an in-memory keyed mutex inside an Effect workflow. */
+export const make = <Key>(): Effect.Effect<KeyedMutex<Key>> => Effect.sync(makeUnsafe<Key>)

packages/core/src/event.ts

@@ -1,19 +1,29 @@
 export * as EventV2 from "./event"
 
 import { Context, Effect, Layer, Option, PubSub, Schema, Stream } from "effect"
-import { eq } from "drizzle-orm"
+import { and, asc, eq, gt } from "drizzle-orm"
 import { Database } from "./database/database"
 import { EventSequenceTable, EventTable } from "./event/sql"
 import { Location } from "./location"
-import { withStatics } from "./schema"
+import { externalID, type ExternalID, NonNegativeInt, withStatics } from "./schema"
 import { Identifier } from "./util/identifier"
 
 export const ID = Schema.String.pipe(
   Schema.brand("Event.ID"),
-  withStatics((schema) => ({ create: () => schema.make("evt_" + Identifier.ascending()) })),
+  withStatics((schema) => ({
+    create: () => schema.make("evt_" + Identifier.ascending()),
+    fromExternal: (input: ExternalID) => schema.make(externalID("evt", input)),
+  })),
 )
 export type ID = typeof ID.Type
 
+/**
+ * Durable aggregate continuation position for embedded replay streams.
+ * TODO: Decide whether a future HTTP / SDK surface should expose an opaque cursor instead.
+ */
+export const Cursor = NonNegativeInt.pipe(Schema.brand("EventV2.Cursor"))
+export type Cursor = typeof Cursor.Type
+
 export type Definition<Type extends string = string, DataSchema extends Schema.Top = Schema.Top> = {
   readonly type: Type
   readonly sync?: {
@@ -29,6 +39,8 @@ export type Payload<D extends Definition = Definition> = {
   readonly id: ID
   readonly type: D["type"]
   readonly data: Data<D>
+  /** Durable aggregate order, populated while synchronized events are projected. */
+  readonly seq?: number
   readonly version?: number
   readonly location?: Location.Ref
   readonly metadata?: Record<string, unknown>
@@ -36,6 +48,7 @@ export type Payload<D extends Definition = Definition> = {
 
 export type Projector<D extends Definition = Definition> = (event: Payload<D>) => Effect.Effect<void>
 type AnyProjector = (event: Payload) => Effect.Effect<void>
+export type CommitGuard = (event: Payload) => Effect.Effect<void>
 export type Listener = (event: Payload) => Effect.Effect<void>
 export type Sync = (event: Payload) => Effect.Effect<void>
 export type Unsubscribe = Effect.Effect<void>
@@ -48,6 +61,11 @@ export type SerializedEvent = {
   readonly data: Record<string, unknown>
 }
 
+export type CursorEvent<E extends Payload = Payload> = {
+  readonly cursor: Cursor
+  readonly event: E
+}
+
 export class InvalidSyncEventError extends Schema.TaggedErrorClass<InvalidSyncEventError>()(
   "EventV2.InvalidSyncEvent",
   {
@@ -61,7 +79,15 @@ export function versionedType(type: string, version: number) {
 }
 
 export const registry = new Map<string, Definition>()
-const syncRegistry = new Map<string, Definition & { readonly sync: NonNullable<Definition["sync"]> }>()
+type SyncDefinition = Definition & {
+  readonly sync: NonNullable<Definition["sync"]>
+  readonly encode: (data: unknown) => unknown
+  readonly decode: (data: unknown) => unknown
+}
+const syncRegistry = new Map<string, SyncDefinition>()
+
+// Synchronized events cross a JSON boundary, so their data schemas must encode and decode without services.
+const syncCodec = (definition: Definition) => definition.data as Schema.Codec<unknown, unknown, never, never>
 
 export function define<const Type extends string, Fields extends Schema.Struct.Fields>(input: {
   readonly type: Type
@@ -93,7 +119,10 @@ export function define<const Type extends string, Fields extends Schema.Struct.F
   if (input.sync)
     syncRegistry.set(
       versionedType(input.type, input.sync.version),
-      definition as Definition & { readonly sync: NonNullable<Definition["sync"]> },
+      Object.assign(definition, {
+        encode: Schema.encodeUnknownSync(syncCodec(definition)),
+        decode: Schema.decodeUnknownSync(syncCodec(definition)),
+      }) as SyncDefinition,
     )
   return definition as Schema.Schema<Payload<Definition<Type, Schema.Struct<Fields>>>> &
     Definition<Type, Schema.Struct<Fields>>
@@ -117,16 +146,21 @@ export interface Interface {
   ) => Effect.Effect<Payload<D>>
   readonly subscribe: <D extends Definition>(definition: D) => Stream.Stream<Payload<D>>
   readonly all: () => Stream.Stream<Payload>
+  readonly aggregateEvents: (input: {
+    readonly aggregateID: string
+    readonly after?: Cursor
+  }) => Stream.Stream<CursorEvent>
   readonly sync: (handler: Sync) => Effect.Effect<Unsubscribe>
   readonly listen: (listener: Listener) => Effect.Effect<Unsubscribe>
+  readonly beforeCommit: (guard: CommitGuard) => Effect.Effect<void>
   readonly project: <D extends Definition>(definition: D, projector: Projector<D>) => Effect.Effect<void>
   readonly replay: (
     event: SerializedEvent,
-    options?: { readonly publish?: boolean; readonly ownerID?: string },
+    options?: { readonly publish?: boolean; readonly ownerID?: string; readonly strictOwner?: boolean },
   ) => Effect.Effect<void>
   readonly replayAll: (
     events: SerializedEvent[],
-    options?: { readonly publish?: boolean; readonly ownerID?: string },
+    options?: { readonly publish?: boolean; readonly ownerID?: string; readonly strictOwner?: boolean },
   ) => Effect.Effect<string | undefined>
   readonly remove: (aggregateID: string) => Effect.Effect<void>
   readonly claim: (aggregateID: string, ownerID: string) => Effect.Effect<void>
@@ -134,261 +168,439 @@ export interface Interface {
 
 export class Service extends Context.Service<Service, Interface>()("@opencode/Event") {}
 
-export const layer = Layer.effect(
-  Service,
-  Effect.gen(function* () {
-    const all = yield* PubSub.unbounded<Payload>()
-    const typed = new Map<string, PubSub.PubSub<Payload>>()
-    const projectors = new Map<string, AnyProjector[]>()
-    const listeners = new Array<Listener>()
-    const syncHandlers = new Array<Sync>()
-    const { db } = yield* Database.Service
+export interface LayerOptions {
+  readonly beforeAggregateRead?: (aggregateID: string) => Effect.Effect<void>
+}
 
-    const getOrCreate = (definition: Definition) =>
-      Effect.gen(function* () {
-        const existing = typed.get(definition.type)
-        if (existing) return existing
-        const pubsub = yield* PubSub.unbounded<Payload>()
-        typed.set(definition.type, pubsub)
-        return pubsub
-      })
+export const layerWith = (options?: LayerOptions) =>
+  Layer.effect(
+    Service,
+    Effect.gen(function* () {
+      const all = yield* PubSub.unbounded<Payload>()
+      const synchronized = new Map<string, Set<PubSub.PubSub<void>>>()
+      const typed = new Map<string, PubSub.PubSub<Payload>>()
+      const projectors = new Map<string, AnyProjector[]>()
+      const commitGuards = new Array<CommitGuard>()
+      const listeners = new Array<Listener>()
+      const syncHandlers = new Array<Sync>()
+      const { db } = yield* Database.Service
 
-    yield* Effect.addFinalizer(() =>
-      Effect.gen(function* () {
-        yield* PubSub.shutdown(all)
-        yield* Effect.forEach(typed.values(), PubSub.shutdown, { discard: true })
-      }),
-    )
+      const getOrCreate = (definition: Definition) =>
+        Effect.gen(function* () {
+          const existing = typed.get(definition.type)
+          if (existing) return existing
+          const pubsub = yield* PubSub.unbounded<Payload>()
+          typed.set(definition.type, pubsub)
+          return pubsub
+        })
 
-    function commitSyncEvent(
-      event: Payload,
-      input?: { readonly seq: number; readonly aggregateID: string; readonly ownerID?: string },
-    ) {
-      return Effect.gen(function* () {
-        const definition = registry.get(event.type)
-        const sync = definition?.sync
-        if (sync) {
-          if (event.version !== sync.version) {
-            yield* Effect.die(
-              new InvalidSyncEventError({
-                type: event.type,
-                message: `Expected event version ${sync.version}, got ${event.version}`,
-              }),
-            )
+      yield* Effect.addFinalizer(() =>
+        Effect.gen(function* () {
+          yield* PubSub.shutdown(all)
+          yield* Effect.forEach(
+            synchronized.values(),
+            (pubsubs) => Effect.forEach(pubsubs, PubSub.shutdown, { discard: true }),
+            { discard: true },
+          )
+          yield* Effect.forEach(typed.values(), PubSub.shutdown, { discard: true })
+        }),
+      )
+
+      function commitSyncEvent(
+        event: Payload,
+        input?: {
+          readonly seq: number
+          readonly aggregateID: string
+          readonly ownerID?: string
+          readonly strictOwner?: boolean
+        },
+      ) {
+        return Effect.gen(function* () {
+          const definition = registry.get(event.type)
+          const sync = definition?.sync
+          if (sync) {
+            if (event.version !== sync.version) {
+              yield* Effect.die(
+                new InvalidSyncEventError({
+                  type: event.type,
+                  message: `Expected event version ${sync.version}, got ${event.version}`,
+                }),
+              )
+            }
+            const aggregateID = (event.data as Record<string, unknown>)[sync.aggregate]
+            if (typeof aggregateID !== "string") {
+              yield* Effect.die(
+                new InvalidSyncEventError({
+                  type: event.type,
+                  message: `Expected string aggregate field ${sync.aggregate}`,
+                }),
+              )
+            } else {
+              if (input && input.aggregateID !== aggregateID) {
+                yield* Effect.die(
+                  new InvalidSyncEventError({
+                    type: event.type,
+                    message: `Aggregate mismatch: expected ${input.aggregateID}, got ${aggregateID}`,
+                  }),
+                )
+              }
+              const list = projectors.get(event.type) ?? []
+              return yield* Effect.uninterruptible(
+                Effect.gen(function* () {
+                  const committed = yield* db
+                    .transaction(
+                      () =>
+                        Effect.gen(function* () {
+                          const row = yield* db
+                            .select({ seq: EventSequenceTable.seq, ownerID: EventSequenceTable.owner_id })
+                            .from(EventSequenceTable)
+                            .where(eq(EventSequenceTable.aggregate_id, aggregateID))
+                            .get()
+                            .pipe(Effect.orDie)
+                          const latest = row?.seq ?? -1
+                          if (input && input.seq <= latest) return
+                          if (input && row?.ownerID && row.ownerID !== input.ownerID) {
+                            if (input.strictOwner) {
+                              yield* Effect.die(
+                                new InvalidSyncEventError({
+                                  type: event.type,
+                                  message: `Replay owner mismatch for aggregate ${aggregateID}: expected ${row.ownerID}, got ${input.ownerID ?? "none"}`,
+                                }),
+                              )
+                            }
+                            return
+                          }
+                          const seq = input?.seq ?? latest + 1
+                          if (input && seq !== latest + 1) {
+                            yield* Effect.die(
+                              new InvalidSyncEventError({
+                                type: event.type,
+                                message: `Sequence mismatch for aggregate ${aggregateID}: expected ${latest + 1}, got ${seq}`,
+                              }),
+                            )
+                          }
+                          for (const guard of commitGuards) {
+                            yield* guard(event)
+                          }
+                          for (const projector of list) {
+                            yield* projector({ ...event, seq } as Payload)
+                          }
+                          const encoded = syncRegistry
+                            .get(versionedType(definition.type, sync.version))!
+                            .encode(event.data)
+                          yield* db
+                            .insert(EventSequenceTable)
+                            .values([{ aggregate_id: aggregateID, seq, owner_id: input?.ownerID }])
+                            .onConflictDoUpdate({
+                              target: EventSequenceTable.aggregate_id,
+                              set: {
+                                seq,
+                                ...(input?.ownerID && row?.ownerID == null ? { owner_id: input.ownerID } : {}),
+                              },
+                            })
+                            .run()
+                            .pipe(Effect.orDie)
+                          yield* db
+                            .insert(EventTable)
+                            .values([
+                              {
+                                id: event.id,
+                                aggregate_id: aggregateID,
+                                seq,
+                                type: versionedType(definition.type, sync.version),
+                                data: encoded as Record<string, unknown>,
+                              },
+                            ])
+                            .run()
+                            .pipe(Effect.orDie)
+                          return { aggregateID, seq }
+                        }),
+                      { behavior: "immediate" },
+                    )
+                    .pipe(Effect.orDie)
+                  if (committed) {
+                    yield* Effect.forEach(
+                      synchronized.get(committed.aggregateID) ?? [],
+                      (pubsub) => PubSub.publish(pubsub, undefined),
+                      { discard: true },
+                    )
+                  }
+                  return committed
+                }),
+              )
+            }
           }
-          const aggregateID = (event.data as Record<string, unknown>)[sync.aggregate]
-          if (typeof aggregateID !== "string") {
+        })
+      }
+
+      function publishEvent<D extends Definition>(event: Payload<D>) {
+        return Effect.gen(function* () {
+          const durable = registry.get(event.type)?.sync !== undefined
+          if (durable) {
+            for (const sync of syncHandlers) {
+              yield* sync(event as Payload)
+            }
+            const committed = yield* commitSyncEvent(event as Payload)
+            if (committed) event = { ...event, seq: committed.seq }
+          }
+          for (const listener of listeners) {
+            yield* listener(event as Payload)
+          }
+          const pubsub = typed.get(event.type)
+          if (pubsub) yield* PubSub.publish(pubsub, event as Payload)
+          yield* PubSub.publish(all, event as Payload)
+          return event
+        })
+      }
+
+      function publish<D extends Definition>(definition: D, data: Data<D>, options?: PublishOptions) {
+        return Effect.gen(function* () {
+          const serviceLocation = Option.getOrUndefined(yield* Effect.serviceOption(Location.Service))
+          const location =
+            options?.location ??
+            (serviceLocation
+              ? { directory: serviceLocation.directory, workspaceID: serviceLocation.workspaceID }
+              : undefined)
+          return yield* publishEvent({
+            id: options?.id ?? ID.create(),
+            ...(options?.metadata ? { metadata: options.metadata } : {}),
+            type: definition.type,
+            ...(definition.sync === undefined ? {} : { version: definition.sync.version }),
+            ...(location ? { location } : {}),
+            data,
+          } as Payload<D>)
+        })
+      }
+
+      function replay(
+        event: SerializedEvent,
+        options?: { readonly publish?: boolean; readonly ownerID?: string; readonly strictOwner?: boolean },
+      ) {
+        return Effect.gen(function* () {
+          const definition = syncRegistry.get(event.type)
+          if (!definition) {
             yield* Effect.die(
-              new InvalidSyncEventError({
-                type: event.type,
-                message: `Expected string aggregate field ${sync.aggregate}`,
-              }),
+              new InvalidSyncEventError({ type: event.type, message: `Unknown sync event type ${event.type}` }),
             )
           } else {
-            const list = projectors.get(event.type) ?? []
-            yield* db
-              .transaction(
-                () =>
-                  Effect.gen(function* () {
-                    const row = yield* db
-                      .select({ seq: EventSequenceTable.seq, ownerID: EventSequenceTable.owner_id })
-                      .from(EventSequenceTable)
-                      .where(eq(EventSequenceTable.aggregate_id, aggregateID))
-                      .get()
-                      .pipe(Effect.orDie)
-                    const latest = row?.seq ?? -1
-                    if (input && input.seq <= latest) return
-                    if (input && row?.ownerID && row.ownerID !== input.ownerID) return
-                    const seq = input?.seq ?? latest + 1
-                    if (input && seq !== latest + 1) {
-                      yield* Effect.die(
-                        new InvalidSyncEventError({
-                          type: event.type,
-                          message: `Sequence mismatch for aggregate ${aggregateID}: expected ${latest + 1}, got ${seq}`,
-                        }),
-                      )
-                    }
-                    for (const projector of list) {
-                      yield* projector(event as Payload)
-                    }
-                    yield* db
-                      .insert(EventSequenceTable)
-                      .values([{ aggregate_id: aggregateID, seq, owner_id: input?.ownerID }])
-                      .onConflictDoUpdate({
-                        target: EventSequenceTable.aggregate_id,
-                        set: { seq },
-                      })
-                      .run()
-                      .pipe(Effect.orDie)
-                    yield* db
-                      .insert(EventTable)
-                      .values([
-                        {
-                          id: event.id,
-                          aggregate_id: aggregateID,
-                          seq,
-                          type: versionedType(definition.type, sync.version),
-                          data: event.data as Record<string, unknown>,
-                        },
-                      ])
-                      .run()
-                      .pipe(Effect.orDie)
-                  }),
-                { behavior: "immediate" },
-              )
-              .pipe(Effect.orDie)
+            const payload = {
+              id: event.id,
+              type: definition.type,
+              version: definition.sync.version,
+              data: definition.decode(event.data),
+            } as Payload
+            const committed = yield* commitSyncEvent(payload, {
+              seq: event.seq,
+              aggregateID: event.aggregateID,
+              ownerID: options?.ownerID,
+              strictOwner: options?.strictOwner,
+            })
+            if (committed && options?.publish) {
+              const published = { ...payload, seq: committed.seq }
+              for (const listener of listeners) {
+                yield* listener(published)
+              }
+              const pubsub = typed.get(payload.type)
+              if (pubsub) yield* PubSub.publish(pubsub, published)
+              yield* PubSub.publish(all, published)
+            }
           }
-        }
-      })
-    }
+        })
+      }
 
-    function publishEvent<D extends Definition>(event: Payload<D>) {
-      return Effect.gen(function* () {
-        for (const sync of syncHandlers) {
-          yield* sync(event as Payload)
-        }
-        yield* commitSyncEvent(event as Payload)
-        for (const listener of listeners) {
-          yield* listener(event as Payload)
-        }
-        const pubsub = typed.get(event.type)
-        if (pubsub) yield* PubSub.publish(pubsub, event as Payload)
-        yield* PubSub.publish(all, event as Payload)
-        return event
-      })
-    }
+      function replayAll(
+        events: SerializedEvent[],
+        options?: { readonly publish?: boolean; readonly ownerID?: string; readonly strictOwner?: boolean },
+      ) {
+        return Effect.gen(function* () {
+          const source = events[0]?.aggregateID
+          if (!source) return undefined
+          if (events.some((event) => event.aggregateID !== source)) {
+            yield* Effect.die(
+              new InvalidSyncEventError({
+                type: events[0]?.type ?? "unknown",
+                message: "Replay events must belong to the same aggregate",
+              }),
+            )
+          }
+          const start = events[0]?.seq ?? 0
+          for (const [index, event] of events.entries()) {
+            const seq = start + index
+            if (event.seq !== seq) {
+              yield* Effect.die(
+                new InvalidSyncEventError({
+                  type: event.type,
+                  message: `Replay sequence mismatch at index ${index}: expected ${seq}, got ${event.seq}`,
+                }),
+              )
+            }
+          }
+          for (const event of events) {
+            yield* replay(event, options)
+          }
+          return source
+        })
+      }
 
-    function publish<D extends Definition>(definition: D, data: Data<D>, options?: PublishOptions) {
-      return Effect.gen(function* () {
-        const serviceLocation = Option.getOrUndefined(yield* Effect.serviceOption(Location.Service))
-        const location =
-          options?.location ??
-          (serviceLocation
-            ? { directory: serviceLocation.directory, workspaceID: serviceLocation.workspaceID }
-            : undefined)
-        return yield* publishEvent({
-          id: options?.id ?? ID.create(),
-          ...(options?.metadata ? { metadata: options.metadata } : {}),
-          type: definition.type,
-          ...(definition.sync === undefined ? {} : { version: definition.sync.version }),
-          ...(location ? { location } : {}),
-          data,
-        } as Payload<D>)
-      })
-    }
+      function remove(aggregateID: string) {
+        return db
+          .transaction(() =>
+            Effect.gen(function* () {
+              yield* db.delete(EventSequenceTable).where(eq(EventSequenceTable.aggregate_id, aggregateID)).run()
+              yield* db.delete(EventTable).where(eq(EventTable.aggregate_id, aggregateID)).run()
+            }),
+          )
+          .pipe(Effect.orDie)
+      }
 
-    function replay(event: SerializedEvent, options?: { readonly publish?: boolean; readonly ownerID?: string }) {
-      return Effect.gen(function* () {
+      function claim(aggregateID: string, ownerID: string) {
+        return db
+          .update(EventSequenceTable)
+          .set({ owner_id: ownerID })
+          .where(eq(EventSequenceTable.aggregate_id, aggregateID))
+          .run()
+          .pipe(Effect.orDie)
+      }
+
+      const subscribe = <D extends Definition>(definition: D): Stream.Stream<Payload<D>> =>
+        Stream.unwrap(getOrCreate(definition).pipe(Effect.map((pubsub) => Stream.fromPubSub(pubsub)))).pipe(
+          Stream.map((event) => event as Payload<D>),
+        )
+
+      const streamAll = (): Stream.Stream<Payload> => Stream.fromPubSub(all)
+
+      const decodeSerializedEvent = (event: SerializedEvent): CursorEvent => {
         const definition = syncRegistry.get(event.type)
         if (!definition) {
-          yield* Effect.die(
-            new InvalidSyncEventError({ type: event.type, message: `Unknown sync event type ${event.type}` }),
-          )
-        } else {
-          const payload = {
+          throw new InvalidSyncEventError({ type: event.type, message: `Unknown sync event type ${event.type}` })
+        }
+        return {
+          cursor: Cursor.make(event.seq),
+          event: {
             id: event.id,
             type: definition.type,
             version: definition.sync.version,
-            data: event.data,
-          } as Payload
-          yield* commitSyncEvent(payload, { seq: event.seq, aggregateID: event.aggregateID, ownerID: options?.ownerID })
-          if (options?.publish) {
-            for (const listener of listeners) {
-              yield* listener(payload)
-            }
-            const pubsub = typed.get(payload.type)
-            if (pubsub) yield* PubSub.publish(pubsub, payload)
-            yield* PubSub.publish(all, payload)
-          }
+            seq: event.seq,
+            data: definition.decode(event.data),
+          },
         }
-      })
-    }
+      }
 
-    function replayAll(events: SerializedEvent[], options?: { readonly publish?: boolean; readonly ownerID?: string }) {
-      return Effect.gen(function* () {
-        const source = events[0]?.aggregateID
-        if (!source) return undefined
-        if (events.some((event) => event.aggregateID !== source)) {
-          yield* Effect.die(
-            new InvalidSyncEventError({
-              type: events[0]?.type ?? "unknown",
-              message: "Replay events must belong to the same aggregate",
-            }),
-          )
-        }
-        const start = events[0]?.seq ?? 0
-        for (const [index, event] of events.entries()) {
-          const seq = start + index
-          if (event.seq !== seq) {
-            yield* Effect.die(
-              new InvalidSyncEventError({
+      const readAfter = (aggregateID: string, after: number) =>
+        (options?.beforeAggregateRead?.(aggregateID) ?? Effect.void).pipe(
+          Effect.andThen(
+            db
+              .select()
+              .from(EventTable)
+              .where(and(eq(EventTable.aggregate_id, aggregateID), gt(EventTable.seq, after)))
+              .orderBy(asc(EventTable.seq))
+              .all(),
+          ),
+          Effect.orDie,
+          Effect.map((rows) =>
+            rows.map((event) =>
+              decodeSerializedEvent({
+                id: event.id,
+                aggregateID: event.aggregate_id,
+                seq: event.seq,
                 type: event.type,
-                message: `Replay sequence mismatch at index ${index}: expected ${seq}, got ${event.seq}`,
+                data: event.data,
               }),
-            )
-          }
-        }
-        for (const event of events) {
-          yield* replay(event, options)
-        }
-        return source
-      })
-    }
+            ),
+          ),
+        )
 
-    function remove(aggregateID: string) {
-      return db
-        .transaction(() =>
+      const subscribeSynchronized = (aggregateID: string) =>
+        Effect.gen(function* () {
+          const pubsub = yield* PubSub.sliding<void>(1)
+          const subscription = yield* PubSub.subscribe(pubsub)
+          yield* Effect.acquireRelease(
+            Effect.sync(() => {
+              const pubsubs = synchronized.get(aggregateID) ?? new Set()
+              pubsubs.add(pubsub)
+              synchronized.set(aggregateID, pubsubs)
+            }),
+            () =>
+              Effect.sync(() => {
+                const pubsubs = synchronized.get(aggregateID)
+                pubsubs?.delete(pubsub)
+                if (pubsubs?.size === 0) synchronized.delete(aggregateID)
+              }).pipe(Effect.andThen(PubSub.shutdown(pubsub))),
+          )
+          return subscription
+        })
+
+      const streamEvents = (input: {
+        readonly aggregateID: string
+        readonly after?: Cursor
+      }): Stream.Stream<CursorEvent> =>
+        Stream.unwrap(
           Effect.gen(function* () {
-            yield* db.delete(EventSequenceTable).where(eq(EventSequenceTable.aggregate_id, aggregateID)).run()
-            yield* db.delete(EventTable).where(eq(EventTable.aggregate_id, aggregateID)).run()
+            const synchronized = yield* subscribeSynchronized(input.aggregateID)
+            let cursor = input.after ?? -1
+            const read = Effect.suspend(() => readAfter(input.aggregateID, cursor)).pipe(
+              Effect.tap((events) =>
+                Effect.sync(() => {
+                  cursor = events.at(-1)?.cursor ?? cursor
+                }),
+              ),
+            )
+            const historical = yield* read
+            const live = Stream.fromSubscription(synchronized).pipe(
+              Stream.mapEffect(() => read),
+              Stream.flattenIterable,
+            )
+            return Stream.concat(Stream.fromIterable(historical), live)
           }),
         )
-        .pipe(Effect.orDie)
-    }
 
-    function claim(aggregateID: string, ownerID: string) {
-      return db
-        .update(EventSequenceTable)
-        .set({ owner_id: ownerID })
-        .where(eq(EventSequenceTable.aggregate_id, aggregateID))
-        .run()
-        .pipe(Effect.orDie)
-    }
-
-    const subscribe = <D extends Definition>(definition: D): Stream.Stream<Payload<D>> =>
-      Stream.unwrap(getOrCreate(definition).pipe(Effect.map((pubsub) => Stream.fromPubSub(pubsub)))).pipe(
-        Stream.map((event) => event as Payload<D>),
-      )
-
-    const streamAll = (): Stream.Stream<Payload> => Stream.fromPubSub(all)
-
-    const listen = (listener: Listener): Effect.Effect<Unsubscribe> =>
-      Effect.sync(() => {
-        listeners.push(listener)
-        return Effect.sync(() => {
-          const index = listeners.indexOf(listener)
-          if (index >= 0) listeners.splice(index, 1)
+      const listen = (listener: Listener): Effect.Effect<Unsubscribe> =>
+        Effect.sync(() => {
+          listeners.push(listener)
+          return Effect.sync(() => {
+            const index = listeners.indexOf(listener)
+            if (index >= 0) listeners.splice(index, 1)
+          })
         })
-      })
 
-    const sync = (handler: Sync): Effect.Effect<Unsubscribe> =>
-      Effect.sync(() => {
-        syncHandlers.push(handler)
-        return Effect.sync(() => {
-          const index = syncHandlers.indexOf(handler)
-          if (index >= 0) syncHandlers.splice(index, 1)
+      const sync = (handler: Sync): Effect.Effect<Unsubscribe> =>
+        Effect.sync(() => {
+          syncHandlers.push(handler)
+          return Effect.sync(() => {
+            const index = syncHandlers.indexOf(handler)
+            if (index >= 0) syncHandlers.splice(index, 1)
+          })
         })
-      })
 
-    const project = <D extends Definition>(definition: D, projector: Projector<D>): Effect.Effect<void> =>
-      Effect.sync(() => {
-        const list = projectors.get(definition.type) ?? []
-        list.push((event) => projector(event as Payload<D>))
-        projectors.set(definition.type, list)
-      })
+      const beforeCommit = (guard: CommitGuard): Effect.Effect<void> =>
+        Effect.sync(() => {
+          commitGuards.push(guard)
+        })
 
-    return Service.of({ publish, subscribe, all: streamAll, sync, listen, project, replay, replayAll, remove, claim })
-  }),
-)
+      const project = <D extends Definition>(definition: D, projector: Projector<D>): Effect.Effect<void> =>
+        Effect.sync(() => {
+          const list = projectors.get(definition.type) ?? []
+          list.push((event) => projector(event as Payload<D>))
+          projectors.set(definition.type, list)
+        })
+
+      return Service.of({
+        publish,
+        subscribe,
+        all: streamAll,
+        aggregateEvents: streamEvents,
+        sync,
+        listen,
+        beforeCommit,
+        project,
+        replay,
+        replayAll,
+        remove,
+        claim,
+      })
+    }),
+  )
+
+export const layer = layerWith()
 
 export const defaultLayer = layer.pipe(Layer.provide(Database.defaultLayer))

packages/core/src/event/sql.ts

@@ -1,4 +1,4 @@
-import { sqliteTable, text, integer } from "drizzle-orm/sqlite-core"
+import { sqliteTable, text, integer, index } from "drizzle-orm/sqlite-core"
 import type { EventV2 } from "../event"
 
 export const EventSequenceTable = sqliteTable("event_sequence", {
@@ -7,12 +7,19 @@ export const EventSequenceTable = sqliteTable("event_sequence", {
   owner_id: text(),
 })
 
-export const EventTable = sqliteTable("event", {
-  id: text().$type<EventV2.ID>().primaryKey(),
-  aggregate_id: text()
-    .notNull()
-    .references(() => EventSequenceTable.aggregate_id, { onDelete: "cascade" }),
-  seq: integer().notNull(),
-  type: text().notNull(),
-  data: text({ mode: "json" }).$type<Record<string, unknown>>().notNull(),
-})
+export const EventTable = sqliteTable(
+  "event",
+  {
+    id: text().$type<EventV2.ID>().primaryKey(),
+    aggregate_id: text()
+      .notNull()
+      .references(() => EventSequenceTable.aggregate_id, { onDelete: "cascade" }),
+    seq: integer().notNull(),
+    type: text().notNull(),
+    data: text({ mode: "json" }).$type<Record<string, unknown>>().notNull(),
+  },
+  (table) => [
+    index("event_aggregate_seq_idx").on(table.aggregate_id, table.seq),
+    index("event_aggregate_type_seq_idx").on(table.aggregate_id, table.type, table.seq),
+  ],
+)

packages/core/src/file-mutation.ts

@@ -0,0 +1,212 @@
+export * as FileMutation from "./file-mutation"
+
+import { Context, Effect, Layer, Schema } from "effect"
+import { dirname } from "path"
+import { KeyedMutex } from "./effect/keyed-mutex"
+import { FSUtil } from "./fs-util"
+import { LocationMutation } from "./location-mutation"
+
+export interface WriteInput {
+  readonly plan: LocationMutation.Plan
+  readonly content: string | Uint8Array
+}
+
+export interface TextWriteInput {
+  readonly plan: LocationMutation.Plan
+  readonly content: string
+}
+
+export interface ConditionalWriteInput extends WriteInput {
+  readonly expected: Uint8Array
+}
+
+export interface RemoveInput {
+  readonly plan: LocationMutation.Plan
+}
+
+export class StaleContentError extends Schema.TaggedErrorClass<StaleContentError>()("FileMutation.StaleContentError", {
+  path: Schema.String,
+}) {}
+
+export class TargetExistsError extends Schema.TaggedErrorClass<TargetExistsError>()("FileMutation.TargetExistsError", {
+  path: Schema.String,
+}) {}
+
+export interface WriteResult {
+  readonly operation: "write"
+  /** Canonical target actually passed to the filesystem mutation. */
+  readonly target: string
+  /** Permission resource captured during planning. */
+  readonly resource: string
+  readonly existed: boolean
+}
+
+export interface RemoveResult {
+  readonly operation: "remove"
+  /** Canonical target actually passed to the filesystem mutation. */
+  readonly target: string
+  /** Permission resource captured during planning. */
+  readonly resource: string
+  readonly existed: boolean
+}
+
+export interface Interface {
+  /** Create only while the planned target remains absent. */
+  readonly create: (
+    input: WriteInput,
+  ) => Effect.Effect<WriteResult, TargetExistsError | LocationMutation.RevalidationError | FSUtil.Error>
+  /** Write after immediately revalidating the planned target. */
+  readonly write: (input: WriteInput) => Effect.Effect<WriteResult, LocationMutation.RevalidationError | FSUtil.Error>
+  /** Write text while retaining an existing UTF-8 BOM and emitting at most one BOM. */
+  readonly writeTextPreservingBom: (
+    input: TextWriteInput,
+  ) => Effect.Effect<WriteResult, LocationMutation.RevalidationError | FSUtil.Error>
+  /** Commit only if an existing target still has the expected bytes. */
+  readonly writeIfUnchanged: (
+    input: ConditionalWriteInput,
+  ) => Effect.Effect<WriteResult, StaleContentError | LocationMutation.RevalidationError | FSUtil.Error>
+  /** Remove after immediately revalidating the planned target. */
+  readonly remove: (
+    input: RemoveInput,
+  ) => Effect.Effect<RemoveResult, LocationMutation.RevalidationError | FSUtil.Error>
+}
+
+export class Service extends Context.Service<Service, Interface>()("@opencode/v2/FileMutation") {}
+
+/**
+ * Commit planned file changes.
+ *
+ *   resolve(path) -> approve -> lock target -> revalidate(plan) -> mutate
+ *
+ * The caller approves the plan first. This service locks the canonical target,
+ * revalidates the plan immediately before the filesystem operation, then mutates.
+ *
+ * `writeIfUnchanged` compares and writes while holding the same in-memory lock,
+ * so cooperating calls in this process cannot overwrite from the same stale
+ * content. Locks apply only within this service layer and only to identical
+ * canonical targets.
+ *
+ * Revalidation reduces the race window but is not atomic with the next
+ * path-based filesystem operation. A hostile local process can still race it.
+ *
+ * TODO: Use descriptor-relative no-follow operations where supported to close
+ * the final race.
+ */
+export const layer = Layer.effect(
+  Service,
+  Effect.gen(function* () {
+    const fs = yield* FSUtil.Service
+    const mutation = yield* LocationMutation.Service
+    const locks = KeyedMutex.makeUnsafe<string>()
+    const withTargetLock =
+      (target: string) =>
+      <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+        locks.withLock(target)(Effect.uninterruptible(effect))
+
+    const withValidatedTarget =
+      (plan: LocationMutation.Plan) =>
+      <A, E, R>(commit: (target: LocationMutation.Target) => Effect.Effect<A, E, R>) =>
+        withTargetLock(plan.target.canonical)(mutation.revalidate(plan).pipe(Effect.flatMap(commit)))
+
+    const writeResult = (target: LocationMutation.Target, existed = target.exists): WriteResult => ({
+      operation: "write",
+      target: target.canonical,
+      resource: target.resource,
+      existed,
+    })
+
+    const removeResult = (target: LocationMutation.Target): RemoveResult => ({
+      operation: "remove",
+      target: target.canonical,
+      resource: target.resource,
+      existed: target.exists,
+    })
+
+    const write = Effect.fn("FileMutation.write")((input: WriteInput) =>
+      withValidatedTarget(input.plan)((target) =>
+        Effect.gen(function* () {
+          yield* fs.writeWithDirs(target.canonical, input.content)
+          return writeResult(target)
+        }),
+      ),
+    )
+
+    const writeTextPreservingBom = Effect.fn("FileMutation.writeTextPreservingBom")((input: TextWriteInput) =>
+      withValidatedTarget(input.plan)((target) =>
+        Effect.gen(function* () {
+          const next = splitBom(input.content)
+          const preserveBom = target.exists && hasUtf8Bom(yield* fs.readFile(target.canonical))
+          yield* fs.writeWithDirs(target.canonical, joinBom(next.text, preserveBom || next.bom))
+          return writeResult(target)
+        }),
+      ),
+    )
+
+    const create = Effect.fn("FileMutation.create")((input: WriteInput) =>
+      withValidatedTarget(input.plan)((target) =>
+        Effect.gen(function* () {
+          if (target.exists) return yield* new TargetExistsError({ path: target.canonical })
+          yield* fs.ensureDir(dirname(target.canonical))
+          if (typeof input.content === "string")
+            yield* fs.writeFileString(target.canonical, input.content, { flag: "wx" })
+          else yield* fs.writeFile(target.canonical, input.content, { flag: "wx" })
+          return writeResult(target, false)
+        }),
+      ),
+    )
+
+    const writeIfUnchanged = Effect.fn("FileMutation.writeIfUnchanged")((input: ConditionalWriteInput) =>
+      withValidatedTarget(input.plan)((target) =>
+        Effect.gen(function* () {
+          const current = yield* fs.readFile(target.canonical)
+          if (!sameBytes(current, input.expected)) return yield* new StaleContentError({ path: target.canonical })
+          yield* fs.writeWithDirs(target.canonical, input.content)
+          return writeResult(target)
+        }),
+      ),
+    )
+
+    const remove = Effect.fn("FileMutation.remove")((input: RemoveInput) =>
+      withValidatedTarget(input.plan)((target) =>
+        Effect.gen(function* () {
+          yield* fs.remove(target.canonical)
+          return removeResult(target)
+        }),
+      ),
+    )
+
+    return Service.of({ create, write, writeTextPreservingBom, writeIfUnchanged, remove })
+  }),
+)
+
+function splitBom(text: string) {
+  const stripped = text.replace(/^\uFEFF+/, "")
+  return { bom: stripped.length !== text.length, text: stripped }
+}
+
+function joinBom(text: string, bom: boolean) {
+  const stripped = splitBom(text).text
+  return bom ? `\uFEFF${stripped}` : stripped
+}
+
+function hasUtf8Bom(content: Uint8Array) {
+  return content[0] === 0xef && content[1] === 0xbb && content[2] === 0xbf
+}
+
+function sameBytes(left: Uint8Array, right: Uint8Array) {
+  if (left.length !== right.length) return false
+  return left.every((byte, index) => byte === right[index])
+}
+
+export const locationLayer = layer
+
+/**
+ * Deferred until the corresponding V2 integrations exist.
+ */
+// TODO: Add formatter integration after V2 formatter runtime exists.
+// TODO: Publish watcher/file-edit events after V2 watcher integration exists.
+// TODO: Add snapshots / undo after V2 snapshot design exists.
+// TODO: Notify LSP and collect diagnostics after V2 LSP runtime exists.
+// TODO: Design multi-file transactions / rollback if apply_patch needs atomic edits.
+// Until then, edits are sequential and report partial application.
+// TODO: Define crash recovery and idempotency for side effects between Tool.Called and durable settlement.

packages/core/src/filesystem.ts

@@ -4,7 +4,7 @@ import path from "path"
 import { pathToFileURL } from "url"
 import fuzzysort from "fuzzysort"
 import ignore from "ignore"
-import { Context, Effect, Layer, Schema, Stream } from "effect"
+import { Context, Effect, Layer, Option, Schema, Stream } from "effect"
 import { EventV2 } from "./event"
 import { FSUtil } from "./fs-util"
 import { Global } from "./global"
@@ -16,17 +16,22 @@ import { Ripgrep } from "./filesystem/ripgrep"
 
 export const ReadInput = Schema.Struct({
   path: RelativePath,
-  reference: Schema.String.pipe(Schema.optional),
+  reference: Schema.NonEmptyString.pipe(Schema.optional),
 })
 export type ReadInput = typeof ReadInput.Type
 
-export class TextContent extends Schema.Class<TextContent>("LocationFileSystem.TextContent")({
+export const MAX_READ_LINES = 2_000
+export const MAX_READ_BYTES = 50 * 1024
+const MAX_LINE_LENGTH = 2_000
+const MAX_LINE_SUFFIX = `... (line truncated to ${MAX_LINE_LENGTH} chars)`
+
+export class TextContent extends Schema.Class<TextContent>("FileSystem.TextContent")({
   type: Schema.Literal("text"),
   content: Schema.String,
   mime: Schema.String,
 }) {}
 
-export class BinaryContent extends Schema.Class<BinaryContent>("LocationFileSystem.BinaryContent")({
+export class BinaryContent extends Schema.Class<BinaryContent>("FileSystem.BinaryContent")({
   type: Schema.Literal("binary"),
   content: Schema.String,
   encoding: Schema.Literal("base64"),
@@ -36,19 +41,80 @@ export class BinaryContent extends Schema.Class<BinaryContent>("LocationFileSyst
 export const Content = Schema.Union([TextContent, BinaryContent]).pipe(Schema.toTaggedUnion("type"))
 export type Content = typeof Content.Type
 
+export const TextPageInput = Schema.Struct({
+  offset: PositiveInt.pipe(Schema.optional),
+  limit: PositiveInt.check(Schema.isLessThanOrEqualTo(MAX_READ_LINES)).pipe(Schema.optional),
+})
+export type TextPageInput = typeof TextPageInput.Type
+
+export class TextPage extends Schema.Class<TextPage>("FileSystem.TextPage")({
+  type: Schema.Literal("text-page"),
+  content: Schema.String,
+  mime: Schema.String,
+  offset: PositiveInt,
+  truncated: Schema.Boolean,
+  next: PositiveInt.pipe(Schema.optional),
+}) {}
+
+export class ReadTarget extends Schema.Class<ReadTarget>("FileSystem.ReadTarget")({
+  real: Schema.String,
+  resource: Schema.String,
+  size: NonNegativeInt,
+  dev: Schema.Number,
+  ino: Schema.Number.pipe(Schema.optional),
+}) {}
+
 export const ListInput = Schema.Struct({
   path: RelativePath.pipe(Schema.optional),
-  reference: Schema.String.pipe(Schema.optional),
+  reference: Schema.NonEmptyString.pipe(Schema.optional),
 })
 export type ListInput = typeof ListInput.Type
 
-export class Entry extends Schema.Class<Entry>("LocationFileSystem.Entry")({
+export const ListPageInput = Schema.Struct({
+  ...ListInput.fields,
+  offset: PositiveInt.pipe(Schema.optional),
+  limit: PositiveInt.check(Schema.isLessThanOrEqualTo(2_000)).pipe(Schema.optional),
+})
+export type ListPageInput = typeof ListPageInput.Type
+
+export class ListTarget extends Schema.Class<ListTarget>("FileSystem.ListTarget")({
+  absolute: Schema.String,
+  real: Schema.String,
+  directory: Schema.String,
+  root: Schema.String,
+  resource: Schema.String,
+}) {}
+
+/** Canonical read authority for Location-scoped search and metadata leaves. */
+export class RootTarget extends Schema.Class<RootTarget>("FileSystem.RootTarget")({
+  absolute: Schema.String,
+  real: Schema.String,
+  directory: Schema.String,
+  root: Schema.String,
+  resource: Schema.String,
+  reference: Schema.NonEmptyString.pipe(Schema.optional),
+  type: Schema.Literals(["file", "directory"]),
+  dev: Schema.Number,
+  ino: Schema.Number.pipe(Schema.optional),
+}) {}
+
+export type ReadPathTarget =
+  | { readonly type: "file"; readonly target: ReadTarget }
+  | { readonly type: "directory"; readonly target: ListTarget }
+
+export class Entry extends Schema.Class<Entry>("FileSystem.Entry")({
   path: RelativePath,
   uri: Schema.String,
   type: Schema.Literals(["file", "directory"]),
   mime: Schema.String,
 }) {}
 
+export class ListPage extends Schema.Class<ListPage>("FileSystem.ListPage")({
+  entries: Schema.Array(Entry),
+  truncated: Schema.Boolean,
+  next: PositiveInt.pipe(Schema.optional),
+}) {}
+
 export const FindInput = Schema.Struct({
   query: Schema.String,
   type: Schema.Literals(["file", "directory"]).pipe(Schema.optional),
@@ -63,7 +129,7 @@ export const GrepInput = Schema.Struct({
 })
 export type GrepInput = typeof GrepInput.Type
 
-export class GrepMatch extends Schema.Class<GrepMatch>("LocationFileSystem.GrepMatch")({
+export class GrepMatch extends Schema.Class<GrepMatch>("FileSystem.GrepMatch")({
   path: RelativePath,
   lines: Schema.String,
   line: PositiveInt,
@@ -88,7 +154,21 @@ export const Event = {
 
 export interface Interface {
   readonly read: (input: ReadInput) => Effect.Effect<Content>
+  readonly resolveReadPath: (input: ReadInput) => Effect.Effect<ReadPathTarget>
+  readonly resolveRead: (input: ReadInput) => Effect.Effect<ReadTarget>
+  readonly readResolved: (target: ReadTarget, maximumBytes?: number) => Effect.Effect<Content>
+  readonly readTextPageResolved: (target: ReadTarget, page?: TextPageInput) => Effect.Effect<TextPage>
   readonly list: (input?: ListInput) => Effect.Effect<Entry[]>
+  /** Select a contained canonical read root without asserting leaf policy. */
+  readonly resolveRoot: (input?: ListInput) => Effect.Effect<RootTarget>
+  readonly revalidateRoot: (target: RootTarget) => Effect.Effect<RootTarget>
+  readonly resolveList: (input?: ListInput) => Effect.Effect<ListTarget>
+  readonly listResolved: (target: ListTarget) => Effect.Effect<Entry[]>
+  readonly listPage: (input?: ListPageInput) => Effect.Effect<ListPage>
+  readonly listPageResolved: (
+    target: ListTarget,
+    page?: Pick<ListPageInput, "offset" | "limit">,
+  ) => Effect.Effect<ListPage>
   readonly find: (input: FindInput) => Effect.Effect<Entry[]>
   readonly grep: (input: GrepInput) => Effect.Effect<GrepMatch[]>
   readonly isIgnored: (path: RelativePath, type: "file" | "directory") => boolean
@@ -183,13 +263,36 @@ export const layer = Layer.effect(
       return [...files, ...dirs]
     })
 
-    return Service.of({
-      read: Effect.fn("FileSystem.read")(function* (input) {
-        const file = yield* resolve(input.path, input.reference)
-        const info = yield* fs.stat(file.real).pipe(Effect.orDie)
-        if (info.type !== "File") return yield* Effect.die(new Error("Path is not a file"))
-        const bytes = yield* fs.readFile(file.real).pipe(Effect.orDie)
-        const mime = FSUtil.mimeType(file.real)
+    const resolveReadPath = Effect.fn("FileSystem.resolveReadPath")(function* (input: ReadInput) {
+      const file = yield* resolve(input.path, input.reference)
+      const info = yield* fs.stat(file.real).pipe(Effect.orDie)
+      const relative = path.relative(file.root, file.real).replaceAll("\\", "/")
+      const resource = input.reference === undefined ? relative || "." : `${input.reference}:${relative || "."}`
+      if (info.type === "File") {
+        return {
+          type: "file" as const,
+          target: new ReadTarget({
+            real: file.real,
+            resource,
+            size: Number(info.size),
+            dev: info.dev,
+            ino: Option.getOrUndefined(info.ino),
+          }),
+        }
+      }
+      if (info.type === "Directory") {
+        return { type: "directory" as const, target: new ListTarget({ ...file, resource }) }
+      }
+      return yield* Effect.die(new Error("Path is not a file or directory"))
+    })
+    const resolveRead = Effect.fn("FileSystem.resolveRead")(function* (input: ReadInput) {
+      const resolved = yield* resolveReadPath(input)
+      if (resolved.type !== "file") return yield* Effect.die(new Error("Path is not a file"))
+      return resolved.target
+    })
+    const content = (target: ReadTarget, bytes: Uint8Array) =>
+      Effect.gen(function* () {
+        const mime = FSUtil.mimeType(target.real)
         if (!bytes.includes(0)) {
           const content = yield* Effect.sync(() => new TextDecoder("utf-8", { fatal: true }).decode(bytes)).pipe(
             Effect.option,
@@ -202,25 +305,226 @@ export const layer = Layer.effect(
           encoding: "base64",
           mime,
         })
+      })
+    const readResolved = Effect.fn("FileSystem.readResolved")(function* (target: ReadTarget, maximumBytes?: number) {
+      if (maximumBytes === undefined) return yield* content(target, yield* fs.readFile(target.real).pipe(Effect.orDie))
+      return yield* Effect.scoped(
+        Effect.gen(function* () {
+          const file = yield* fs.open(target.real, { flag: "r" }).pipe(Effect.orDie)
+          const info = yield* file.stat.pipe(Effect.orDie)
+          if (info.type !== "File") return yield* Effect.die(new Error("Path is not a file"))
+          if (info.dev !== target.dev || Option.getOrUndefined(info.ino) !== target.ino)
+            return yield* Effect.die(new Error("File changed after permission approval"))
+          if (info.size > maximumBytes)
+            return yield* Effect.die(new Error(`File exceeds ${maximumBytes} byte read limit`))
+          const bytes = yield* file.readAlloc(maximumBytes + 1).pipe(Effect.orDie)
+          if (bytes._tag === "Some" && bytes.value.length > maximumBytes)
+            return yield* Effect.die(new Error(`File exceeds ${maximumBytes} byte read limit`))
+          return yield* content(target, bytes._tag === "Some" ? bytes.value : new Uint8Array())
+        }),
+      )
+    })
+    const readTextPageResolved = Effect.fn("FileSystem.readTextPageResolved")(function* (
+      target: ReadTarget,
+      page: TextPageInput = {},
+    ) {
+      return yield* Effect.scoped(
+        Effect.gen(function* () {
+          const file = yield* fs.open(target.real, { flag: "r" }).pipe(Effect.orDie)
+          const info = yield* file.stat.pipe(Effect.orDie)
+          if (info.type !== "File") return yield* Effect.die(new Error("Path is not a file"))
+          if (info.dev !== target.dev || Option.getOrUndefined(info.ino) !== target.ino)
+            return yield* Effect.die(new Error("File changed after permission approval"))
+
+          const offset = page.offset ?? 1
+          const limit = Math.min(page.limit ?? MAX_READ_LINES, MAX_READ_LINES)
+          const lines: string[] = []
+          const decoder = new TextDecoder("utf-8", { fatal: true })
+          let pending = ""
+          let discard = false
+          let line = 1
+          let bytes = 0
+          let found = false
+          let truncated = false
+          let next: number | undefined
+
+          const append = (input: string) => {
+            if (line < offset) {
+              line++
+              return true
+            }
+            if (lines.length >= limit) {
+              truncated = true
+              next = line
+              return false
+            }
+            found = true
+            const text = input.length > MAX_LINE_LENGTH ? input.slice(0, MAX_LINE_LENGTH) + MAX_LINE_SUFFIX : input
+            const size = Buffer.byteLength(text, "utf-8") + (lines.length > 0 ? 1 : 0)
+            if (bytes + size > MAX_READ_BYTES) {
+              truncated = true
+              next = line
+              return false
+            }
+            lines.push(text)
+            bytes += size
+            line++
+            return true
+          }
+
+          let done = false
+          while (!done) {
+            const chunk = yield* file.readAlloc(64 * 1024).pipe(Effect.orDie)
+            if (Option.isNone(chunk)) break
+            if (chunk.value.includes(0)) return yield* Effect.die(new Error("Cannot page binary file"))
+            let text = decoder.decode(chunk.value, { stream: true })
+            while (true) {
+              const index = text.indexOf("\n")
+              if (index === -1) {
+                if (!discard) {
+                  pending += text
+                  if (pending.length > MAX_LINE_LENGTH) {
+                    pending = pending.slice(0, MAX_LINE_LENGTH + 1)
+                    discard = true
+                  }
+                }
+                break
+              }
+              const current = pending + (discard ? "" : text.slice(0, index))
+              pending = ""
+              discard = false
+              text = text.slice(index + 1)
+              if (!append(current.endsWith("\r") ? current.slice(0, -1) : current)) {
+                done = true
+                break
+              }
+            }
+          }
+          if (!done) {
+            const tail = decoder.decode()
+            if (!discard) pending += tail
+            if (pending && !append(pending.endsWith("\r") ? pending.slice(0, -1) : pending)) done = true
+          }
+          if (!done && !found && offset !== 1) return yield* Effect.die(new Error(`Offset ${offset} is out of range`))
+
+          return new TextPage({
+            type: "text-page",
+            content: lines.join("\n"),
+            mime: FSUtil.mimeType(target.real),
+            offset,
+            truncated,
+            ...(next === undefined ? {} : { next }),
+          })
+        }),
+      )
+    })
+    const resolveList = Effect.fn("FileSystem.resolveList")(function* (input: ListInput = {}) {
+      const directory = yield* resolve(input.path, input.reference)
+      const info = yield* fs.stat(directory.real).pipe(Effect.orDie)
+      if (info.type !== "Directory") return yield* Effect.die(new Error("Path is not a directory"))
+      const relative = path.relative(directory.root, directory.real).replaceAll("\\", "/") || "."
+      return new ListTarget({
+        ...directory,
+        resource: input.reference === undefined ? relative : `${input.reference}:${relative}`,
+      })
+    })
+    const resolveRoot = Effect.fn("FileSystem.resolveRoot")(function* (input: ListInput = {}) {
+      const target = yield* resolve(input.path, input.reference)
+      const info = yield* fs.stat(target.real).pipe(Effect.orDie)
+      const type = info.type === "File" ? "file" : info.type === "Directory" ? "directory" : undefined
+      if (!type) return yield* Effect.die(new Error("Path is not a file or directory"))
+      const relative = path.relative(target.root, target.real).replaceAll("\\", "/") || "."
+      return new RootTarget({
+        ...target,
+        resource: input.reference === undefined ? relative : `${input.reference}:${relative}`,
+        reference: input.reference,
+        type,
+        dev: info.dev,
+        ino: Option.getOrUndefined(info.ino),
+      })
+    })
+    const revalidateRoot = Effect.fn("FileSystem.revalidateRoot")(function* (target: RootTarget) {
+      const canonical = yield* fs.realPath(target.absolute).pipe(Effect.orDie)
+      if (canonical !== target.real) return yield* Effect.die(new Error("Search root changed after approval"))
+      const info = yield* fs.stat(canonical).pipe(Effect.orDie)
+      if (
+        info.type !== (target.type === "file" ? "File" : "Directory") ||
+        info.dev !== target.dev ||
+        Option.getOrUndefined(info.ino) !== target.ino
+      )
+        return yield* Effect.die(new Error("Search root identity changed after approval"))
+      return target
+    })
+    const listResolved = Effect.fn("FileSystem.listResolved")(function* (directory: ListTarget) {
+      return yield* fs.readDirectoryEntries(directory.real).pipe(
+        Effect.orDie,
+        Effect.flatMap((items) =>
+          Effect.forEach(items, (item) => entry(path.join(directory.absolute, item.name), directory), {
+            concurrency: "unbounded",
+          }),
+        ),
+        Effect.map((items) =>
+          items
+            .filter((item): item is Entry => item !== undefined)
+            .sort((a, b) => (a.type === b.type ? a.path.localeCompare(b.path) : a.type === "directory" ? -1 : 1)),
+        ),
+      )
+    })
+    const listPageResolved = Effect.fn("FileSystem.listPageResolved")(function* (
+      target: ListTarget,
+      page: Pick<ListPageInput, "offset" | "limit"> = {},
+    ) {
+      type Candidate = Entry | { readonly name: string; readonly type: "file" | "directory" }
+      const offset = page.offset ?? 1
+      const limit = Math.min(page.limit ?? 2_000, 2_000)
+      const items = yield* fs.readDirectoryEntries(target.real).pipe(Effect.orDie)
+      const candidates = yield* Effect.forEach(
+        items,
+        (item): Effect.Effect<Candidate | undefined> => {
+          if (item.type === "other") return Effect.succeed(undefined)
+          if (item.type === "symlink") return entry(path.join(target.absolute, item.name), target)
+          return Effect.succeed({ name: item.name, type: item.type } as const)
+        },
+        { concurrency: 16 },
+      ).pipe(Effect.map((items) => items.filter((item): item is Candidate => item !== undefined)))
+      candidates.sort((a, b) => {
+        return a.type === b.type
+          ? (a instanceof Entry ? a.path : a.name).localeCompare(b instanceof Entry ? b.path : b.name)
+          : a.type === "directory"
+            ? -1
+            : 1
+      })
+      const selected = candidates.slice(offset - 1, offset - 1 + limit)
+      const entries = yield* Effect.forEach(
+        selected,
+        (item) => (item instanceof Entry ? Effect.succeed(item) : entry(path.join(target.absolute, item.name), target)),
+        {
+          concurrency: 16,
+        },
+      ).pipe(Effect.map((items) => items.filter((item): item is Entry => item !== undefined)))
+      const truncated = offset - 1 + selected.length < candidates.length
+      return new ListPage({ entries, truncated, ...(truncated ? { next: offset + selected.length } : {}) })
+    })
+
+    return Service.of({
+      read: Effect.fn("FileSystem.read")(function* (input) {
+        return yield* readResolved(yield* resolveRead(input))
       }),
-      list: Effect.fn("FileSystem.list")(function* (input = {}) {
-        const directory = yield* resolve(input.path, input.reference)
-        const info = yield* fs.stat(directory.real).pipe(Effect.orDie)
-        if (info.type !== "Directory") return yield* Effect.die(new Error("Path is not a directory"))
-        return yield* fs.readDirectoryEntries(directory.real).pipe(
-          Effect.orDie,
-          Effect.flatMap((items) =>
-            Effect.forEach(items, (item) => entry(path.join(directory.absolute, item.name), directory), {
-              concurrency: "unbounded",
-            }),
-          ),
-          Effect.map((items) =>
-            items
-              .filter((item): item is Entry => item !== undefined)
-              .sort((a, b) => (a.type === b.type ? a.path.localeCompare(b.path) : a.type === "directory" ? -1 : 1)),
-          ),
-        )
+      resolveReadPath,
+      resolveRead,
+      readResolved,
+      readTextPageResolved,
+      list: Effect.fn("FileSystem.list")(function* (input) {
+        return yield* listResolved(yield* resolveList(input))
       }),
+      resolveRoot,
+      revalidateRoot,
+      resolveList,
+      listResolved,
+      listPage: Effect.fn("FileSystem.listPage")(function* (input) {
+        return yield* listPageResolved(yield* resolveList(input), input)
+      }),
+      listPageResolved,
       find: Effect.fn("FileSystem.find")(function* (input) {
         const items = (yield* scan()).filter((item) => input.type !== "file" || !item.endsWith("/"))
         const filtered = items.filter((item) => input.type !== "directory" || item.endsWith("/"))

packages/core/src/filesystem/ripgrep.ts

@@ -135,6 +135,7 @@ export interface TreeInput {
 }
 
 export interface Interface {
+  readonly filepath: Effect.Effect<string, Error>
   readonly files: (input: FilesInput) => Stream.Stream<string, PlatformError | Error>
   readonly tree: (input: TreeInput) => Effect.Effect<string, PlatformError | Error>
   readonly search: (input: SearchInput) => Effect.Effect<SearchResult, PlatformError | Error>
@@ -471,7 +472,7 @@ export const layer: Layer.Layer<Service, never, FSUtil.Service | ChildProcessSpa
         return lines.join("\n")
       })
 
-      return Service.of({ files, tree, search })
+      return Service.of({ filepath, files, tree, search })
     }),
   )
 

packages/core/src/flag/flag.ts

@@ -1,6 +1,6 @@
 import { Config } from "effect"
 
-function truthy(key: string) {
+export function truthy(key: string) {
   const value = process.env[key]?.toLowerCase()
   return value === "true" || value === "1"
 }

packages/core/src/fs-util.ts

@@ -1,5 +1,5 @@
 import { NodeFileSystem } from "@effect/platform-node"
-import { dirname, join, relative, resolve as pathResolve } from "path"
+import { dirname, isAbsolute, join, relative, resolve as pathResolve, sep } from "path"
 import { realpathSync } from "fs"
 import * as NFS from "fs/promises"
 import { lookup } from "mime-types"
@@ -236,12 +236,11 @@ export namespace FSUtil {
   }
 
   export function overlaps(a: string, b: string) {
-    const relA = relative(a, b)
-    const relB = relative(b, a)
-    return !relA || !relA.startsWith("..") || !relB || !relB.startsWith("..")
+    return contains(a, b) || contains(b, a)
   }
 
   export function contains(parent: string, child: string) {
-    return !relative(parent, child).startsWith("..")
+    const result = relative(parent, child)
+    return result === "" || (!isAbsolute(result) && result !== ".." && !result.startsWith(`..${sep}`))
   }
 }

packages/core/src/location-layer.ts

@@ -4,6 +4,7 @@ import { Policy } from "./policy"
 import { Config } from "./config"
 import { PluginV2 } from "./plugin"
 import { Catalog } from "./catalog"
+import { CommandV2 } from "./command"
 import { AgentV2 } from "./agent"
 import { PluginBoot } from "./plugin/boot"
 import { Project } from "./project"
@@ -16,32 +17,79 @@ import { Global } from "./global"
 import { Database } from "./database/database"
 import { PermissionV2 } from "./permission"
 import { PermissionSaved } from "./permission/saved"
-import { SessionV2 } from "./session"
 import { FileSystem } from "./filesystem"
 import { Watcher } from "./filesystem/watcher"
+import { LocationMutation } from "./location-mutation"
+import { LocationSearch } from "./location-search"
+import { FileMutation } from "./file-mutation"
 import { ProjectReference } from "./project-reference"
 import { RepositoryCache } from "./repository-cache"
 import { Pty } from "./pty"
 import { SkillV2 } from "./skill"
+import { BuiltInTools } from "./tool/builtins"
+import { ToolRegistry } from "./tool-registry"
+import { ToolOutputStore } from "./tool-output-store"
+import { AppProcess } from "./process"
+import { Ripgrep } from "./ripgrep"
+import { SessionStore } from "./session/store"
+import { SessionTodo } from "./session/todo"
+import { QuestionV2 } from "./question"
+import { LLMClient } from "@opencode-ai/llm"
+import { RequestExecutor } from "@opencode-ai/llm/route"
+import * as SessionRunnerLLM from "./session/runner/llm"
+import { SessionRunnerModel } from "./session/runner/model"
+import { SessionRunCoordinator } from "./session/run-coordinator"
+import { FetchHttpClient } from "effect/unstable/http"
 
 export class LocationServiceMap extends LayerMap.Service<LocationServiceMap>()("@opencode/example/LocationServiceMap", {
   lookup: (ref: Location.Ref) => {
     const location = Location.layer(ref)
-    return Layer.mergeAll(
+    const permissionsAndTools = ToolRegistry.layer.pipe(Layer.provideMerge(PermissionV2.locationLayer))
+    const services = Layer.mergeAll(
       location,
       Policy.locationLayer,
       Config.locationLayer,
       ProjectReference.locationLayer,
       PluginV2.locationLayer,
       Catalog.locationLayer,
+      CommandV2.locationLayer,
       AgentV2.locationLayer,
       PluginBoot.locationLayer,
-      PermissionV2.locationLayer,
       FileSystem.locationLayer,
       Watcher.locationLayer,
       Pty.locationLayer,
       SkillV2.locationLayer,
-    ).pipe(Layer.provideMerge(location), Layer.fresh)
+      permissionsAndTools,
+      LocationMutation.locationLayer.pipe(Layer.orDie),
+    ).pipe(Layer.provideMerge(location))
+    const commits = FileMutation.locationLayer.pipe(Layer.provide(services))
+    const searches = LocationSearch.layer.pipe(Layer.provide(Ripgrep.layer), Layer.provide(services))
+    const resources = ToolOutputStore.layer.pipe(Layer.provide(services))
+    const todos = SessionTodo.layer.pipe(Layer.provide(services))
+    const questions = QuestionV2.locationLayer.pipe(Layer.provide(services))
+    const builtInTools = BuiltInTools.locationLayer.pipe(
+      Layer.provide(services),
+      Layer.provide(commits),
+      Layer.provide(searches),
+      Layer.provide(resources),
+      Layer.provide(todos),
+      Layer.provide(questions),
+    )
+    const model = SessionRunnerModel.locationLayer.pipe(Layer.provide(services))
+    const runner = SessionRunnerLLM.defaultLayer.pipe(Layer.provide(services), Layer.provide(model))
+    const coordinator = SessionRunCoordinator.layer.pipe(Layer.provide(runner))
+    return Layer.mergeAll(
+      services,
+      commits,
+      searches,
+      resources,
+      todos,
+      questions,
+      model,
+      runner,
+      coordinator,
+      builtInTools,
+    ).pipe(Layer.fresh)
   },
   idleTimeToLive: "60 minutes",
   dependencies: [
@@ -51,10 +99,14 @@ export class LocationServiceMap extends LayerMap.Service<LocationServiceMap>()("
     Npm.defaultLayer,
     ModelsDev.defaultLayer,
     FSUtil.defaultLayer,
+    AppProcess.defaultLayer,
     Global.defaultLayer,
     Database.defaultLayer,
-    SessionV2.defaultLayer,
+    SessionStore.layer.pipe(Layer.provide(Database.defaultLayer)),
     PermissionSaved.defaultLayer,
     RepositoryCache.defaultLayer,
+    LLMClient.layer.pipe(Layer.provide(RequestExecutor.defaultLayer)),
+    FetchHttpClient.layer,
+    ToolOutputStore.defaultCleanupLayer,
   ],
 }) {}

packages/core/src/location-mutation.ts

@@ -0,0 +1,311 @@
+export * as LocationMutation from "./location-mutation"
+
+import path from "path"
+import { Context, Effect, Layer, Option, Schema } from "effect"
+import { FSUtil } from "./fs-util"
+import { Location } from "./location"
+
+export const Kind = Schema.Literals(["file", "directory"])
+export type Kind = typeof Kind.Type
+
+/**
+ * Mutation paths do not accept project references. Relative paths must stay
+ * inside the active Location. Absolute paths outside it require separate
+ * `external_directory` approval.
+ */
+export const ResolveInput = Schema.Struct({
+  path: Schema.String,
+  /** Selects the external approval boundary; it does not validate the target type. */
+  kind: Kind.pipe(Schema.optional),
+})
+export type ResolveInput = typeof ResolveInput.Type
+
+export class PathError extends Schema.TaggedErrorClass<PathError>()("LocationMutation.PathError", {
+  path: Schema.String,
+  reason: Schema.Literals([
+    "relative_escape",
+    "location_escape",
+    "non_directory_ancestor",
+    "unresolved_symlink",
+    "location_identity_changed",
+  ]),
+}) {}
+
+export class RevalidationError extends Schema.TaggedErrorClass<RevalidationError>()(
+  "LocationMutation.RevalidationError",
+  {
+    path: Schema.String,
+    reason: Schema.String,
+  },
+) {}
+
+export interface Identity {
+  /** Canonical path for this saved filesystem identity. */
+  readonly canonical: string
+  readonly dev: number
+  readonly ino?: number
+}
+
+export interface ExternalDirectoryAuthorization {
+  readonly action: "external_directory"
+  /** Canonical existing directory used as the external approval boundary. */
+  readonly directory: string
+  /** `external_directory` permission resource. */
+  readonly resource: string
+  readonly save: string
+  /** Saved identity checked again after approval to detect swaps. */
+  readonly authority: Identity
+}
+
+/** Build the `external_directory` permission request. */
+export const externalDirectoryPermission = (input: ExternalDirectoryAuthorization) => ({
+  action: input.action,
+  resources: [input.resource],
+  save: [input.save],
+})
+
+export interface Target {
+  /** Canonical existing path, or missing path below a canonical directory. */
+  readonly canonical: string
+  readonly exists: boolean
+  readonly type?:
+    | "File"
+    | "Directory"
+    | "SymbolicLink"
+    | "BlockDevice"
+    | "CharacterDevice"
+    | "FIFO"
+    | "Socket"
+    | "Unknown"
+  /** Permission resource: Location-relative for internal paths, canonical for external paths. */
+  readonly resource: string
+  readonly externalDirectory?: ExternalDirectoryAuthorization
+}
+
+/**
+ * A path checked before permission approval.
+ *
+ *   resolve(path) -> Plan -> approve -> revalidate(plan) -> mutate immediately
+ *
+ * Tools must approve `target.externalDirectory`, when present, and their normal
+ * mutation action before calling `revalidate`. Revalidation rejects escapes,
+ * symlinks in missing suffixes, and changes made while approval is pending. It
+ * cannot be atomic with the next filesystem call, so mutate immediately afterward.
+ */
+export interface Plan {
+  readonly input: ResolveInput
+  readonly target: Target
+  /** Saved identity of the existing target or nearest existing ancestor. */
+  readonly authority: Identity
+}
+
+export interface Interface {
+  /**
+   * Check a path before approval and derive its permission resources. Relative
+   * paths must stay inside the Location. Absolute paths outside it require
+   * separate `external_directory` approval. This does not approve the tool's
+   * mutation action.
+   */
+  readonly resolve: (input: ResolveInput) => Effect.Effect<Plan, PathError | FSUtil.Error>
+  /**
+   * Check the plan again immediately before mutation. Reject changes to the
+   * target, its saved identity, or approval resources. Mutate the returned
+   * target immediately.
+   */
+  readonly revalidate: (plan: Plan) => Effect.Effect<Target, RevalidationError | FSUtil.Error>
+}
+
+export class Service extends Context.Service<Service, Interface>()("@opencode/v2/LocationMutation") {}
+
+interface ResolvedPath {
+  readonly canonical: string
+  readonly exists: boolean
+  readonly type?: Target["type"]
+  readonly authority: Identity
+}
+
+const slash = (value: string) => value.replaceAll("\\", "/")
+
+export const layer = Layer.effect(
+  Service,
+  Effect.gen(function* () {
+    const fs = yield* FSUtil.Service
+    const location = yield* Location.Service
+    const locationRoot = yield* fs.realPath(location.directory)
+    const locationAuthority = yield* identity(locationRoot)
+
+    function identityFrom(canonical: string, info: Effect.Success<ReturnType<typeof fs.stat>>): Identity {
+      return {
+        canonical,
+        dev: info.dev,
+        ino: Option.getOrUndefined(info.ino),
+      }
+    }
+
+    function identity(canonical: string) {
+      return fs.stat(canonical).pipe(Effect.map((info) => identityFrom(canonical, info)))
+    }
+
+    function notFound<A>(effect: Effect.Effect<A, FSUtil.Error>) {
+      return effect.pipe(Effect.catchReason("PlatformError", "NotFound", () => Effect.succeed(undefined)))
+    }
+
+    function sameIdentity(left: Identity, right: Identity) {
+      return left.canonical === right.canonical && left.dev === right.dev && left.ino === right.ino
+    }
+
+    /** Check whether a saved path still points to the same filesystem object. */
+    const assertIdentity = Effect.fnUntraced(function* (expected: Identity) {
+      const canonical = yield* notFound(fs.realPath(expected.canonical))
+      if (canonical === undefined) return false
+      const actual = yield* notFound(identity(canonical))
+      if (actual === undefined) return false
+      return canonical === expected.canonical && sameIdentity(expected, actual)
+    })
+
+    const assertLocationIdentity = Effect.fnUntraced(function* (requested: string) {
+      if (yield* assertIdentity(locationAuthority)) return
+      return yield* new PathError({ path: requested, reason: "location_identity_changed" })
+    })
+
+    const hasUnresolvedSymlink = Effect.fnUntraced(function* (anchor: string, suffix: string) {
+      let current = anchor
+      for (const part of suffix.split(path.sep)) {
+        if (!part) continue
+        current = path.join(current, part)
+        if (
+          yield* fs.readLink(current).pipe(
+            Effect.as(true),
+            Effect.catch(() => Effect.succeed(false)),
+          )
+        )
+          return true
+      }
+      return false
+    })
+
+    /**
+     * Resolve a path to a canonical target and save an existing filesystem
+     * identity for later revalidation.
+     *
+     *   existing path -> save target identity
+     *   missing path  -> save nearest existing directory identity
+     *
+     * Missing suffixes must not contain symlinks.
+     */
+    const resolvePath = Effect.fnUntraced(function* (absolute: string) {
+      const existing = yield* notFound(fs.realPath(absolute))
+      if (existing !== undefined) {
+        const info = yield* fs.stat(existing)
+        return {
+          canonical: existing,
+          exists: true,
+          type: info.type,
+          authority: identityFrom(existing, info),
+        } satisfies ResolvedPath
+      }
+
+      let anchor = path.dirname(absolute)
+      while (true) {
+        const canonical = yield* notFound(fs.realPath(anchor))
+        if (canonical !== undefined) {
+          const info = yield* fs.stat(canonical)
+          if (info.type !== "Directory")
+            return yield* new PathError({ path: absolute, reason: "non_directory_ancestor" })
+          const suffix = path.relative(anchor, absolute)
+          if (yield* hasUnresolvedSymlink(anchor, suffix)) {
+            return yield* new PathError({ path: absolute, reason: "unresolved_symlink" })
+          }
+          return {
+            canonical: path.resolve(canonical, suffix),
+            exists: false,
+            authority: identityFrom(canonical, info),
+          } satisfies ResolvedPath
+        }
+        const parent = path.dirname(anchor)
+        if (parent === anchor) return yield* new PathError({ path: absolute, reason: "non_directory_ancestor" })
+        anchor = parent
+      }
+    })
+
+    /**
+     * Choose the existing directory used for separate external approval.
+     *
+     *   existing directory target -> "<target>/*"
+     *   file or missing target    -> "<nearest existing parent>/*"
+     */
+    const externalDirectory = Effect.fnUntraced(function* (resolved: ResolvedPath, kind: Kind) {
+      const candidate =
+        kind === "directory" && resolved.type === "Directory" ? resolved.canonical : path.dirname(resolved.canonical)
+      const boundary = yield* resolvePath(candidate)
+      const directory =
+        boundary.exists && boundary.type === "Directory" ? boundary.canonical : boundary.authority.canonical
+      const resource = slash(path.join(directory, "*"))
+      return {
+        action: "external_directory" as const,
+        directory,
+        resource,
+        save: resource,
+        authority: boundary.authority,
+      }
+    })
+
+    const resolve = Effect.fn("LocationMutation.resolve")(function* (input: ResolveInput) {
+      yield* assertLocationIdentity(input.path)
+      const relative = !path.isAbsolute(input.path)
+      const absolute = path.resolve(location.directory, input.path)
+      const lexicallyInternal = FSUtil.contains(location.directory, absolute)
+      if (relative && !lexicallyInternal) return yield* new PathError({ path: input.path, reason: "relative_escape" })
+
+      const resolved = yield* resolvePath(absolute)
+      if (lexicallyInternal && !FSUtil.contains(locationRoot, resolved.canonical)) {
+        return yield* new PathError({ path: input.path, reason: "location_escape" })
+      }
+
+      const external = !lexicallyInternal
+      const resource = external
+        ? slash(resolved.canonical)
+        : slash(path.relative(locationRoot, resolved.canonical) || ".")
+      const target: Target = {
+        canonical: resolved.canonical,
+        exists: resolved.exists,
+        type: resolved.type,
+        resource,
+        externalDirectory: external ? yield* externalDirectory(resolved, input.kind ?? "file") : undefined,
+      }
+      return { input, target, authority: resolved.authority } satisfies Plan
+    })
+
+    /**
+     * Re-resolve a plan immediately before mutation and reject any changed
+     * identity, target, or approval resource. This reduces the race window but
+     * cannot make the next filesystem call atomic.
+     */
+    const revalidate = Effect.fn("LocationMutation.revalidate")(function* (plan: Plan) {
+      const invalid = (reason: string) => new RevalidationError({ path: plan.input.path, reason })
+      const fresh = yield* resolve(plan.input).pipe(
+        Effect.mapError((error) => (error instanceof PathError ? invalid(error.reason) : error)),
+      )
+      if (!sameIdentity(fresh.authority, plan.authority)) return yield* invalid("mutation authority changed")
+      if (fresh.target.canonical !== plan.target.canonical) return yield* invalid("canonical mutation target changed")
+      if (fresh.target.resource !== plan.target.resource) return yield* invalid("mutation resource changed")
+      if (Boolean(fresh.target.externalDirectory) !== Boolean(plan.target.externalDirectory)) {
+        return yield* invalid("external directory authority changed")
+      }
+      if (
+        fresh.target.externalDirectory &&
+        plan.target.externalDirectory &&
+        (fresh.target.externalDirectory.directory !== plan.target.externalDirectory.directory ||
+          fresh.target.externalDirectory.resource !== plan.target.externalDirectory.resource ||
+          !sameIdentity(fresh.target.externalDirectory.authority, plan.target.externalDirectory.authority))
+      ) {
+        return yield* invalid("external directory authority changed")
+      }
+      return fresh.target
+    })
+
+    return Service.of({ resolve, revalidate })
+  }),
+)
+
+export const locationLayer = layer

packages/core/src/location-search.ts

@@ -0,0 +1,198 @@
+export * as LocationSearch from "./location-search"
+
+import path from "path"
+import { Context, Effect, Layer, Option, Schema } from "effect"
+import { FileSystem } from "./filesystem"
+import { FSUtil } from "./fs-util"
+import { Ripgrep } from "./ripgrep"
+import { NonNegativeInt, PositiveInt, RelativePath } from "./schema"
+
+/**
+ * Location-scoped raw search substrate. Search authority is selected only by
+ * FileSystem, preserving Location-relative paths and named read
+ * references. Model formatting, leaf-tool permissions, and HTTP transport stay
+ * outside this service so future GlobTool, GrepTool, and HTTP consumers can
+ * share the same bounded filesystem behavior.
+ *
+ * TODO: Expose this substrate through HTTP fs.search/fs.grep endpoints.
+ * TODO: Reuse this substrate for instruction and skill discovery where suitable.
+ */
+
+export const DEFAULT_RESULT_LIMIT = 100
+export const MAX_RESULT_LIMIT = 100
+export const MAX_LINE_PREVIEW_LENGTH = 2_000
+
+export const ResultLimit = PositiveInt.check(Schema.isLessThanOrEqualTo(MAX_RESULT_LIMIT))
+
+const RootInput = {
+  path: RelativePath.pipe(Schema.optional),
+  reference: Schema.NonEmptyString.pipe(Schema.optional),
+}
+
+export const FilesInput = Schema.Struct({
+  pattern: Schema.String,
+  ...RootInput,
+  limit: ResultLimit.pipe(Schema.optional),
+})
+export type FilesInput = typeof FilesInput.Type & { readonly signal?: AbortSignal }
+
+export const GrepInput = Schema.Struct({
+  pattern: Schema.String,
+  include: Schema.String.pipe(Schema.optional),
+  ...RootInput,
+  limit: ResultLimit.pipe(Schema.optional),
+})
+export type GrepInput = typeof GrepInput.Type & { readonly signal?: AbortSignal }
+
+export class File extends Schema.Class<File>("LocationSearch.File")({
+  path: RelativePath,
+  canonical: Schema.String,
+  resource: Schema.String,
+  mtime: Schema.Number,
+}) {}
+
+export class Submatch extends Schema.Class<Submatch>("LocationSearch.Submatch")({
+  text: Schema.String,
+  start: NonNegativeInt,
+  end: NonNegativeInt,
+}) {}
+
+export class Match extends Schema.Class<Match>("LocationSearch.Match")({
+  path: RelativePath,
+  canonical: Schema.String,
+  resource: Schema.String,
+  lines: Schema.String,
+  linePreviewTruncated: Schema.Boolean,
+  line: PositiveInt,
+  offset: NonNegativeInt,
+  submatches: Schema.Array(Submatch),
+  mtime: Schema.Number,
+}) {}
+
+export class FilesResult extends Schema.Class<FilesResult>("LocationSearch.FilesResult")({
+  items: Schema.Array(File),
+  truncated: Schema.Boolean,
+  partial: Schema.Boolean,
+}) {}
+
+export class GrepResult extends Schema.Class<GrepResult>("LocationSearch.GrepResult")({
+  items: Schema.Array(Match),
+  truncated: Schema.Boolean,
+  partial: Schema.Boolean,
+}) {}
+
+export interface Interface {
+  readonly files: (input: FilesInput, root?: FileSystem.RootTarget) => Effect.Effect<FilesResult, Ripgrep.Error>
+  readonly grep: (
+    input: GrepInput,
+    root?: FileSystem.RootTarget,
+  ) => Effect.Effect<GrepResult, Ripgrep.Error | Ripgrep.InvalidPatternError>
+}
+
+export class Service extends Context.Service<Service, Interface>()("@opencode/v2/LocationSearch") {}
+
+const slash = (value: string) => value.replaceAll("\\", "/")
+const cap = (limit?: number) => Math.min(limit ?? DEFAULT_RESULT_LIMIT, MAX_RESULT_LIMIT)
+
+export const layer = Layer.effect(
+  Service,
+  Effect.gen(function* () {
+    const fs = yield* FSUtil.Service
+    const filesystem = yield* FileSystem.Service
+    const ripgrep = yield* Ripgrep.Service
+
+    const candidate = Effect.fnUntraced(function* (root: FileSystem.RootTarget, cwd: string, value: string) {
+      const absolute = path.resolve(cwd, value)
+      const lexicallyContained =
+        root.type === "directory" ? FSUtil.contains(root.real, absolute) : absolute === root.real
+      if (!lexicallyContained) return
+      const canonical = yield* fs.realPath(absolute).pipe(Effect.catch(() => Effect.void))
+      if (!canonical || !FSUtil.contains(root.root, canonical)) return
+      const info = yield* fs.stat(canonical).pipe(Effect.catch(() => Effect.void))
+      if (!info || info.type !== "File") return
+      const relative = slash(path.relative(root.root, canonical))
+      return {
+        path: RelativePath.make(relative),
+        canonical,
+        resource: root.reference === undefined ? relative : `${root.reference}:${relative}`,
+        mtime: info.mtime.pipe(
+          Option.map((date) => date.getTime()),
+          Option.getOrElse(() => 0),
+        ),
+      }
+    })
+
+    return Service.of({
+      files: Effect.fn("LocationSearch.files")(function* (input, approvedRoot) {
+        const root = yield* filesystem.revalidateRoot(approvedRoot ?? (yield* filesystem.resolveRoot(input)))
+        if (root.type !== "directory")
+          return yield* Effect.die(new globalThis.Error("Files search path must be a directory"))
+        const result = yield* ripgrep.files({
+          cwd: root.real,
+          pattern: input.pattern,
+          limit: cap(input.limit),
+          signal: input.signal,
+        })
+        const mapped = yield* Effect.forEach(result.items, (item) => candidate(root, root.real, item), {
+          concurrency: 16,
+        })
+        const items = mapped.filter((item): item is File => item !== undefined).map((item) => new File(item))
+        // TODO: Decide result ordering policy: V1 mtime sorting versus stable path ordering.
+        // TODO: Report inaccessible paths discovered after bounded ripgrep termination when practical.
+        return new FilesResult({
+          items,
+          truncated: result.truncated,
+          partial: result.partial || items.length !== result.items.length,
+        })
+      }),
+      grep: Effect.fn("LocationSearch.grep")(function* (input, approvedRoot) {
+        const root = yield* filesystem.revalidateRoot(approvedRoot ?? (yield* filesystem.resolveRoot(input)))
+        const cwd = root.type === "directory" ? root.real : path.dirname(root.real)
+        const result = yield* ripgrep.grep({
+          cwd,
+          pattern: input.pattern,
+          include: input.include,
+          file: root.type === "file" ? path.basename(root.real) : undefined,
+          limit: cap(input.limit),
+          signal: input.signal,
+        })
+        const candidates = new Map<string, ReturnType<typeof candidate>>()
+        for (const item of result.items) {
+          if (!candidates.has(item.path.text)) {
+            candidates.set(item.path.text, yield* Effect.cached(candidate(root, cwd, item.path.text)))
+          }
+        }
+        const mapped = yield* Effect.forEach(
+          result.items,
+          (item) =>
+            candidates.get(item.path.text)!.pipe(
+              Effect.map(
+                (file) =>
+                  file &&
+                  new Match({
+                    ...file,
+                    lines: item.lines.text.slice(0, MAX_LINE_PREVIEW_LENGTH),
+                    linePreviewTruncated: item.lines.text.length > MAX_LINE_PREVIEW_LENGTH,
+                    line: item.line_number,
+                    offset: item.absolute_offset,
+                    submatches: item.submatches.map(
+                      (submatch) =>
+                        new Submatch({ text: submatch.match.text, start: submatch.start, end: submatch.end }),
+                    ),
+                  }),
+              ),
+            ),
+          { concurrency: 16 },
+        )
+        const items = mapped.filter((item): item is Match => item !== undefined)
+        // TODO: Decide result ordering policy: V1 mtime sorting versus stable path ordering.
+        // TODO: Report inaccessible paths discovered after bounded ripgrep termination when practical.
+        return new GrepResult({
+          items,
+          truncated: result.truncated,
+          partial: result.partial || items.length !== result.items.length,
+        })
+      }),
+    })
+  }),
+)

packages/core/src/location.ts

@@ -1,25 +1,33 @@
 import { Context, Effect, Layer, Schema } from "effect"
 import { Project } from "./project"
 import { AbsolutePath } from "./schema"
+import { WorkspaceV2 } from "./workspace"
 
 export * as Location from "./location"
 
 export const Ref = Schema.Struct({
   directory: AbsolutePath,
-  workspaceID: Schema.optional(Schema.String),
+  workspaceID: Schema.optional(WorkspaceV2.ID),
 }).annotate({ identifier: "Location.Ref" })
 export type Ref = typeof Ref.Type
 
-export interface Interface {
-  readonly directory: AbsolutePath
-  readonly workspaceID?: string
-  readonly project: {
-    readonly id: Project.ID
-    readonly directory: AbsolutePath
-  }
+export class Info extends Schema.Class<Info>("Location.Info")({
+  directory: AbsolutePath,
+  workspaceID: WorkspaceV2.ID.pipe(Schema.optional),
+  project: Schema.Struct({
+    id: Project.ID,
+    directory: AbsolutePath,
+  }),
+}) {}
+
+export interface Interface extends Info {
   readonly vcs?: Project.Vcs
 }
 
+export function response<S extends Schema.Top>(data: S) {
+  return Schema.Struct({ location: Info, data })
+}
+
 export class Service extends Context.Service<Service, Interface>()("@opencode/Location") {}
 
 export const layer = (ref: Ref) =>

packages/core/src/markdown.d.ts

@@ -0,0 +1,4 @@
+declare module "*.md" {
+  const content: string
+  export default content
+}

packages/core/src/opencode.ts

@@ -0,0 +1,39 @@
+export * as OpenCode from "./opencode"
+
+import { Context, Effect, Layer } from "effect"
+import { Database } from "./database/database"
+import { EventV2 } from "./event"
+import { LocationServiceMap } from "./location-layer"
+import { ProjectV2 } from "./project"
+import { SessionV2 } from "./session"
+import { SessionProjector } from "./session/projector"
+import * as SessionExecutionLocal from "./session/execution/local"
+import { SessionStore } from "./session/store"
+
+export interface Interface {
+  readonly sessions: SessionV2.Interface
+}
+
+/** Public embedded OpenCode API for Effect-native applications. */
+export class Service extends Context.Service<Service, Interface>()("@opencode/OpenCode") {}
+
+const DefaultSessions = SessionV2.layer.pipe(
+  Layer.provide(SessionProjector.layer),
+  Layer.provide(SessionExecutionLocal.layer),
+  Layer.provide(LocationServiceMap.layer),
+  Layer.provide(SessionStore.layer),
+  Layer.provide(EventV2.layer),
+  Layer.provide(Database.defaultLayer),
+  Layer.provide(ProjectV2.defaultLayer),
+  Layer.orDie,
+)
+
+// TODO: Accept explicit storage so tests and embeddings can select disposable or application-owned persistence.
+export const layer = Layer.effect(
+  Service,
+  Effect.gen(function* () {
+    return Service.of({ sessions: yield* SessionV2.Service })
+  }),
+).pipe(Layer.provide(DefaultSessions))
+
+// TODO: Add OpenCode.create(...) as the Promise facade over the same embedded API semantics.

packages/core/src/patch.ts

@@ -0,0 +1,197 @@
+export * as Patch from "./patch"
+
+export type Hunk =
+  | { readonly type: "add"; readonly path: string; readonly contents: string }
+  | { readonly type: "delete"; readonly path: string }
+  | {
+      readonly type: "update"
+      readonly path: string
+      readonly movePath?: string
+      readonly chunks: ReadonlyArray<UpdateFileChunk>
+    }
+
+export interface UpdateFileChunk {
+  readonly oldLines: ReadonlyArray<string>
+  readonly newLines: ReadonlyArray<string>
+  readonly changeContext?: string
+  readonly endOfFile?: boolean
+}
+
+export interface FileUpdate {
+  readonly content: string
+  readonly bom: boolean
+}
+
+export function parse(patchText: string): ReadonlyArray<Hunk> {
+  const lines = stripHeredoc(patchText.trim()).split("\n")
+  const begin = lines.findIndex((line) => line.trim() === "*** Begin Patch")
+  const end = lines.findIndex((line) => line.trim() === "*** End Patch")
+  if (begin === -1 || end === -1 || begin >= end) throw new Error("Invalid patch format: missing Begin/End markers")
+
+  const hunks: Hunk[] = []
+  let index = begin + 1
+  while (index < end) {
+    const line = lines[index]!
+    if (line.startsWith("*** Add File:")) {
+      const path = line.slice("*** Add File:".length).trim()
+      if (!path) throw new Error("Invalid add file path")
+      const parsed = parseAdd(lines, index + 1)
+      hunks.push({ type: "add", path, contents: parsed.content })
+      index = parsed.next
+      continue
+    }
+    if (line.startsWith("*** Delete File:")) {
+      const path = line.slice("*** Delete File:".length).trim()
+      if (!path) throw new Error("Invalid delete file path")
+      hunks.push({ type: "delete", path })
+      index++
+      continue
+    }
+    if (line.startsWith("*** Update File:")) {
+      const path = line.slice("*** Update File:".length).trim()
+      if (!path) throw new Error("Invalid update file path")
+      let next = index + 1
+      let movePath: string | undefined
+      if (lines[next]?.startsWith("*** Move to:")) {
+        movePath = lines[next]!.slice("*** Move to:".length).trim()
+        if (!movePath) throw new Error("Invalid move file path")
+        next++
+      }
+      const parsed = parseUpdate(lines, next)
+      if (parsed.chunks.length === 0) throw new Error(`Invalid update hunk for ${path}: expected at least one @@ chunk`)
+      hunks.push({ type: "update", path, movePath, chunks: parsed.chunks })
+      index = parsed.next
+      continue
+    }
+    throw new Error(`Invalid patch line: ${line}`)
+  }
+  return hunks
+}
+
+export function derive(path: string, chunks: ReadonlyArray<UpdateFileChunk>, original: string): FileUpdate {
+  const source = splitBom(original)
+  const lines = source.text.split("\n")
+  if (lines.at(-1) === "") lines.pop()
+  const replacements = computeReplacements(lines, path, chunks)
+  const updated = [...lines]
+  for (const [start, remove, insert] of replacements.toReversed()) updated.splice(start, remove, ...insert)
+  if (updated.at(-1) !== "") updated.push("")
+  const next = splitBom(updated.join("\n"))
+  return { content: next.text, bom: source.bom || next.bom }
+}
+
+export function joinBom(text: string, bom: boolean) {
+  const stripped = splitBom(text).text
+  return bom ? `\uFEFF${stripped}` : stripped
+}
+
+function parseAdd(lines: ReadonlyArray<string>, start: number) {
+  const content: string[] = []
+  let index = start
+  while (index < lines.length && !lines[index]!.startsWith("***")) {
+    if (!lines[index]!.startsWith("+")) throw new Error(`Invalid add file line: ${lines[index]}`)
+    content.push(lines[index]!.slice(1))
+    index++
+  }
+  return { content: content.join("\n"), next: index }
+}
+
+function parseUpdate(lines: ReadonlyArray<string>, start: number) {
+  const chunks: UpdateFileChunk[] = []
+  let index = start
+  while (index < lines.length && !lines[index]!.startsWith("***")) {
+    if (!lines[index]!.startsWith("@@")) {
+      throw new Error(`Invalid update file line: ${lines[index]}`)
+    }
+    const changeContext = lines[index]!.slice(2).trim() || undefined
+    const oldLines: string[] = []
+    const newLines: string[] = []
+    let endOfFile = false
+    index++
+    while (index < lines.length && !lines[index]!.startsWith("@@")) {
+      const line = lines[index]!
+      if (line === "*** End of File") {
+        endOfFile = true
+        index++
+        break
+      }
+      if (line.startsWith("***")) break
+      if (line.startsWith(" ")) {
+        oldLines.push(line.slice(1))
+        newLines.push(line.slice(1))
+      } else if (line.startsWith("-")) oldLines.push(line.slice(1))
+      else if (line.startsWith("+")) newLines.push(line.slice(1))
+      else throw new Error(`Invalid update chunk line: ${line}`)
+      index++
+    }
+    chunks.push({ oldLines, newLines, changeContext, endOfFile: endOfFile || undefined })
+  }
+  return { chunks, next: index }
+}
+
+function computeReplacements(lines: ReadonlyArray<string>, path: string, chunks: ReadonlyArray<UpdateFileChunk>) {
+  const replacements: Array<readonly [start: number, remove: number, insert: ReadonlyArray<string>]> = []
+  let lineIndex = 0
+  for (const chunk of chunks) {
+    if (chunk.changeContext) {
+      const context = seek(lines, [chunk.changeContext], lineIndex)
+      if (context === -1) throw new Error(`Failed to find context '${chunk.changeContext}' in ${path}`)
+      lineIndex = context + 1
+    }
+    if (chunk.oldLines.length === 0) {
+      replacements.push([lines.length, 0, chunk.newLines])
+      continue
+    }
+    let oldLines = chunk.oldLines
+    let newLines = chunk.newLines
+    let found = seek(lines, oldLines, lineIndex, chunk.endOfFile)
+    if (found === -1 && oldLines.at(-1) === "") {
+      oldLines = oldLines.slice(0, -1)
+      if (newLines.at(-1) === "") newLines = newLines.slice(0, -1)
+      found = seek(lines, oldLines, lineIndex, chunk.endOfFile)
+    }
+    if (found === -1) throw new Error(`Failed to find expected lines in ${path}:\n${chunk.oldLines.join("\n")}`)
+    replacements.push([found, oldLines.length, newLines])
+    lineIndex = found + oldLines.length
+  }
+  return replacements.toSorted((left, right) => left[0] - right[0])
+}
+
+function seek(lines: ReadonlyArray<string>, pattern: ReadonlyArray<string>, start: number, eof = false) {
+  if (pattern.length === 0) return -1
+  for (const compare of [exact, rstrip, trim, normalized]) {
+    if (eof) {
+      const offset = lines.length - pattern.length
+      if (offset >= start && matches(lines, pattern, offset, compare)) return offset
+    }
+    for (let offset = start; offset <= lines.length - pattern.length; offset++) {
+      if (matches(lines, pattern, offset, compare)) return offset
+    }
+  }
+  return -1
+}
+
+function matches(
+  lines: ReadonlyArray<string>,
+  pattern: ReadonlyArray<string>,
+  offset: number,
+  compare: (left: string, right: string) => boolean,
+) {
+  return pattern.every((line, index) => compare(lines[offset + index]!, line))
+}
+
+const exact = (left: string, right: string) => left === right
+const rstrip = (left: string, right: string) => left.trimEnd() === right.trimEnd()
+const trim = (left: string, right: string) => left.trim() === right.trim()
+const normalized = (left: string, right: string) => normalize(left.trim()) === normalize(right.trim())
+const normalize = (value: string) =>
+  value
+    .replace(/[‘’‚‛]/g, "'")
+    .replace(/[“”„‟]/g, '"')
+    .replace(/[‐‑‒–—―]/g, "-")
+    .replace(/…/g, "...")
+    .replace(/ /g, " ")
+const splitBom = (text: string) =>
+  text.startsWith("\uFEFF") ? { bom: true, text: text.slice(1) } : { bom: false, text }
+const stripHeredoc = (input: string) =>
+  input.match(/^(?:cat\s+)?<<['"]?(\w+)['"]?\s*\n([\s\S]*?)\n\1\s*$/)?.[2] ?? input

packages/core/src/permission.ts

@@ -5,6 +5,7 @@ import { EventV2 } from "./event"
 import { Location } from "./location"
 import { AgentV2 } from "./agent"
 import { SessionV2 } from "./session"
+import { SessionStore } from "./session/store"
 import { withStatics } from "./schema"
 import { Identifier } from "./util/identifier"
 import { Wildcard } from "./util/wildcard"
@@ -135,7 +136,7 @@ export const layer = Layer.effect(
     const events = yield* EventV2.Service
     const location = yield* Location.Service
     const agents = yield* AgentV2.Service
-    const sessions = yield* SessionV2.Service
+    const sessions = yield* SessionStore.Service
     const saved = yield* PermissionSaved.Service
     const pending = new Map<ID, Pending>()
 
@@ -159,8 +160,8 @@ export const layer = Layer.effect(
 
     const configured = EffectRuntime.fn("PermissionV2.configured")(function* (sessionID: SessionV2.ID) {
       const session = yield* sessions.get(sessionID)
-      if (!session.agent) return []
-      return (yield* agents.get(AgentV2.ID.make(session.agent)))?.permissions ?? []
+      if (!session) return yield* new SessionV2.NotFoundError({ sessionID })
+      return (yield* agents.get(AgentV2.ID.make(session.agent ?? "build")))?.permissions ?? []
     })
 
     function denied(input: AssertInput, rules: Ruleset) {
@@ -192,13 +193,19 @@ export const layer = Layer.effect(
       }
     }
 
-    const create = EffectRuntime.fnUntraced(function* (request: Request) {
-      const deferred = yield* Deferred.make<void, RejectedError | CorrectedError>()
-      const item = { request, deferred }
-      pending.set(request.id, item)
-      yield* events.publish(Event.Asked, request)
-      return item
-    })
+    const create = (request: Request) =>
+      EffectRuntime.uninterruptible(
+        EffectRuntime.gen(function* () {
+          const deferred = yield* Deferred.make<void, RejectedError | CorrectedError>()
+          const item = { request, deferred }
+          if (pending.has(request.id)) return yield* EffectRuntime.die(`Duplicate pending permission ID: ${request.id}`)
+          pending.set(request.id, item)
+          yield* events
+            .publish(Event.Asked, request)
+            .pipe(EffectRuntime.onError(() => EffectRuntime.sync(() => pending.delete(request.id))))
+          return item
+        }),
+      )
 
     const ask = EffectRuntime.fn("PermissionV2.ask")(function* (input: AssertInput) {
       const result = yield* evaluateInput(input)
@@ -207,86 +214,95 @@ export const layer = Layer.effect(
       return { id: value.id, effect: result.effect }
     })
 
-    const assert = EffectRuntime.fn("PermissionV2.assert")(function* (input: AssertInput) {
-      const result = yield* evaluateInput(input)
-      if (result.effect === "deny") {
-        return yield* new DeniedError({
-          rules: relevant(input, result.rules),
-        })
-      }
-      if (result.effect === "allow") return
-      const item = yield* create(request(input))
-      return yield* Deferred.await(item.deferred).pipe(
-        EffectRuntime.ensuring(
-          EffectRuntime.sync(() => {
-            pending.delete(item.request.id)
-          }),
-        ),
-      )
-    })
-
-    const reply = EffectRuntime.fn("PermissionV2.reply")(function* (input: ReplyInput) {
-      const existing = pending.get(input.requestID)
-      if (!existing) return yield* new NotFoundError({ requestID: input.requestID })
-      pending.delete(input.requestID)
-      yield* events.publish(Event.Replied, {
-        sessionID: existing.request.sessionID,
-        requestID: existing.request.id,
-        reply: input.reply,
-      })
-
-      if (input.reply === "reject") {
-        yield* Deferred.fail(
-          existing.deferred,
-          input.message ? new CorrectedError({ feedback: input.message }) : new RejectedError(),
-        )
-        for (const [id, item] of pending) {
-          if (item.request.sessionID !== existing.request.sessionID) continue
-          pending.delete(id)
-          yield* events.publish(Event.Replied, {
-            sessionID: item.request.sessionID,
-            requestID: item.request.id,
-            reply: "reject",
-          })
-          yield* Deferred.fail(item.deferred, new RejectedError())
-        }
-        return
-      }
-
-      if (input.reply === "always" && existing.request.save?.length) {
-        yield* saved.add({
-          projectID: location.project.id,
-          action: existing.request.action,
-          resources: existing.request.save,
-        })
-      }
-      yield* Deferred.succeed(existing.deferred, undefined)
-      if (input.reply !== "always" || !existing.request.save?.length) return
-
-      const rememberedRules = yield* savedRules()
-      for (const [id, item] of pending) {
-        const input = { ...item.request }
-        const rules = yield* configured(item.request.sessionID).pipe(
-          EffectRuntime.catchTag("Session.NotFoundError", () => EffectRuntime.succeed(undefined)),
-        )
-        if (!rules) continue
-        if (denied(input, rules)) continue
-        const effective = [...rules, ...rememberedRules]
-        if (
-          !item.request.resources.every(
-            (resource) => evaluate(item.request.action, resource, effective).effect === "allow",
+    const assert = EffectRuntime.fn("PermissionV2.assert")((input: AssertInput) =>
+      EffectRuntime.uninterruptibleMask((restore) =>
+        EffectRuntime.gen(function* () {
+          const result = yield* evaluateInput(input)
+          if (result.effect === "deny") {
+            return yield* new DeniedError({
+              rules: relevant(input, result.rules),
+            })
+          }
+          if (result.effect === "allow") return
+          const item = yield* create(request(input))
+          return yield* restore(Deferred.await(item.deferred)).pipe(
+            EffectRuntime.ensuring(
+              EffectRuntime.sync(() => {
+                pending.delete(item.request.id)
+              }),
+            ),
           )
-        )
-          continue
-        pending.delete(id)
-        yield* events.publish(Event.Replied, {
-          sessionID: item.request.sessionID,
-          requestID: item.request.id,
-          reply: "always",
-        })
-        yield* Deferred.succeed(item.deferred, undefined)
-      }
-    })
+        }),
+      ),
+    )
+
+    const reply = EffectRuntime.fn("PermissionV2.reply")((input: ReplyInput) =>
+      EffectRuntime.uninterruptible(
+        EffectRuntime.gen(function* () {
+          const existing = pending.get(input.requestID)
+          if (!existing) return yield* new NotFoundError({ requestID: input.requestID })
+          yield* events.publish(Event.Replied, {
+            sessionID: existing.request.sessionID,
+            requestID: existing.request.id,
+            reply: input.reply,
+          })
+
+          if (input.reply === "reject") {
+            yield* Deferred.fail(
+              existing.deferred,
+              input.message ? new CorrectedError({ feedback: input.message }) : new RejectedError(),
+            )
+            pending.delete(input.requestID)
+            for (const [id, item] of pending) {
+              if (item.request.sessionID !== existing.request.sessionID) continue
+              yield* events.publish(Event.Replied, {
+                sessionID: item.request.sessionID,
+                requestID: item.request.id,
+                reply: "reject",
+              })
+              yield* Deferred.fail(item.deferred, new RejectedError())
+              pending.delete(id)
+            }
+            return
+          }
+
+          if (input.reply === "always" && existing.request.save?.length) {
+            yield* saved.add({
+              projectID: location.project.id,
+              action: existing.request.action,
+              resources: existing.request.save,
+            })
+          }
+          yield* Deferred.succeed(existing.deferred, undefined)
+          pending.delete(input.requestID)
+          if (input.reply !== "always" || !existing.request.save?.length) return
+
+          const rememberedRules = yield* savedRules()
+          for (const [id, item] of pending) {
+            const input = { ...item.request }
+            const rules = yield* configured(item.request.sessionID).pipe(
+              EffectRuntime.catchTag("Session.NotFoundError", () => EffectRuntime.succeed(undefined)),
+            )
+            if (!rules) continue
+            if (denied(input, rules)) continue
+            const effective = [...rules, ...rememberedRules]
+            if (
+              !item.request.resources.every(
+                (resource) => evaluate(item.request.action, resource, effective).effect === "allow",
+              )
+            )
+              continue
+            yield* events.publish(Event.Replied, {
+              sessionID: item.request.sessionID,
+              requestID: item.request.id,
+              reply: "always",
+            })
+            yield* Deferred.succeed(item.deferred, undefined)
+            pending.delete(id)
+          }
+        }),
+      ),
+    )
 
     const list = EffectRuntime.fn("PermissionV2.list")(function* () {
       return Array.from(pending.values(), (item) => item.request)

packages/core/src/plugin.ts

@@ -6,6 +6,7 @@ import { Context, Effect, Exit, Layer, Schema, Scope } from "effect"
 import type { ModelV2 } from "./model"
 import type { Catalog } from "./catalog"
 import { EventV2 } from "./event"
+import { KeyedMutex } from "./effect/keyed-mutex"
 
 export const ID = Schema.String.pipe(Schema.brand("Plugin.ID"))
 export type ID = typeof ID.Type
@@ -105,29 +106,36 @@ export const layer = Layer.effect(
       scope: Scope.Closeable
     }[] = []
     const events = yield* EventV2.Service
+    const scope = yield* Scope.Scope
+    const locks = KeyedMutex.makeUnsafe<ID>()
 
     const svc = Service.of({
       add: Effect.fn("Plugin.add")(function* (input) {
-        const existing = hooks.find((item) => item.id === input.id)
-        if (existing) yield* Scope.close(existing.scope, Exit.void).pipe(Effect.ignore)
-        const scope = yield* Scope.make()
-        const result = yield* input.effect.pipe(
-          Scope.provide(scope),
-          Effect.withSpan("Plugin.load", {
-            attributes: {
-              "plugin.id": input.id,
-            },
+        yield* locks.withLock(input.id)(
+          Effect.gen(function* () {
+            const existing = hooks.find((item) => item.id === input.id)
+            if (existing) yield* Scope.close(existing.scope, Exit.void).pipe(Effect.ignore)
+            const childScope = yield* Scope.fork(scope)
+            const result = yield* input.effect.pipe(
+              Scope.provide(childScope),
+              Effect.withSpan("Plugin.load", {
+                attributes: {
+                  "plugin.id": input.id,
+                },
+              }),
+              Effect.onExit((exit) => (Exit.isFailure(exit) ? Scope.close(childScope, exit) : Effect.void)),
+            )
+            hooks = [
+              ...hooks.filter((item) => item.id !== input.id),
+              {
+                id: input.id,
+                hooks: result ?? {},
+                scope: childScope,
+              },
+            ]
+            yield* events.publish(Event.Added, { id: input.id })
           }),
         )
-        hooks = [
-          ...hooks.filter((item) => item.id !== input.id),
-          {
-            id: input.id,
-            hooks: result ?? {},
-            scope,
-          },
-        ]
-        yield* events.publish(Event.Added, { id: input.id })
       }),
       trigger: Effect.fn("Plugin.trigger")(function* (name, input, output) {
         return yield* svc.triggerFor(ID.make("*"), name, input, output)
@@ -167,9 +175,13 @@ export const layer = Layer.effect(
         return event as any
       }),
       remove: Effect.fn("Plugin.remove")(function* (id) {
-        const existing = hooks.find((item) => item.id === id)
-        hooks = hooks.filter((item) => item.id !== id)
-        if (existing) yield* Scope.close(existing.scope, Exit.void).pipe(Effect.ignore)
+        yield* locks.withLock(id)(
+          Effect.gen(function* () {
+            const existing = hooks.find((item) => item.id === id)
+            hooks = hooks.filter((item) => item.id !== id)
+            if (existing) yield* Scope.close(existing.scope, Exit.void).pipe(Effect.ignore)
+          }),
+        )
       }),
     })
     return svc

packages/core/src/plugin/agent.ts

@@ -21,7 +21,6 @@ Guidelines:
 - Use Glob for broad file pattern matching
 - Use Grep for searching file contents with regex
 - Use Read when you know the specific file path you need to read
-- Use Bash for file operations like copying, moving, or listing directory contents
 - Adapt your search approach based on the thoroughness level specified by the caller
 - Return file paths as absolute paths in your final response
 - For clear communication, avoid using emojis
@@ -171,8 +170,6 @@ export const Plugin = PluginV2.define({
               { action: "*", resource: "*", effect: "deny" },
               { action: "grep", resource: "*", effect: "allow" },
               { action: "glob", resource: "*", effect: "allow" },
-              { action: "list", resource: "*", effect: "allow" },
-              { action: "bash", resource: "*", effect: "allow" },
               { action: "webfetch", resource: "*", effect: "allow" },
               { action: "websearch", resource: "*", effect: "allow" },
               { action: "read", resource: "*", effect: "allow" },

packages/core/src/plugin/boot.ts

@@ -4,8 +4,10 @@ import { Context, Deferred, Effect, Layer } from "effect"
 import { Auth } from "../auth"
 import { AgentV2 } from "../agent"
 import { Catalog } from "../catalog"
+import { CommandV2 } from "../command"
 import { Config } from "../config"
 import { ConfigAgentPlugin } from "../config/plugin/agent"
+import { ConfigCommandPlugin } from "../config/plugin/command"
 import { ConfigSkillPlugin } from "../config/plugin/skill"
 import { EventV2 } from "../event"
 import { FSUtil } from "../fs-util"
@@ -16,6 +18,8 @@ import { Npm } from "../npm"
 import { PluginV2 } from "../plugin"
 import { AccountPlugin } from "./account"
 import { AgentPlugin } from "./agent"
+import { CommandPlugin } from "./command"
+import { SkillPlugin } from "./skill"
 import { ConfigProviderPlugin } from "../config/plugin/provider"
 import { EnvPlugin } from "./env"
 import { ModelsDevPlugin } from "./models-dev"
@@ -26,6 +30,7 @@ type Plugin = {
   id: PluginV2.ID
   effect: PluginV2.Effect<
     | Catalog.Service
+    | CommandV2.Service
     | Auth.Service
     | AgentV2.Service
     | Npm.Service
@@ -50,6 +55,7 @@ export const layer = Layer.effect(
   Service,
   Effect.gen(function* () {
     const catalog = yield* Catalog.Service
+    const commands = yield* CommandV2.Service
     const plugin = yield* PluginV2.Service
     const accounts = yield* Auth.Service
     const agents = yield* AgentV2.Service
@@ -68,6 +74,7 @@ export const layer = Layer.effect(
         id: input.id,
         effect: input.effect.pipe(
           Effect.provideService(Catalog.Service, catalog),
+          Effect.provideService(CommandV2.Service, commands),
           Effect.provideService(Auth.Service, accounts),
           Effect.provideService(AgentV2.Service, agents),
           Effect.provideService(Config.Service, config),
@@ -87,12 +94,15 @@ export const layer = Layer.effect(
       yield* add(EnvPlugin)
       yield* add(AccountPlugin)
       yield* add(AgentPlugin.Plugin)
+      yield* add(CommandPlugin.Plugin)
+      yield* add(SkillPlugin.Plugin)
       for (const item of ProviderPlugins) {
         yield* add(item)
       }
       yield* add(ModelsDevPlugin)
       yield* add(ConfigProviderPlugin.Plugin)
       yield* add(ConfigAgentPlugin.Plugin)
+      yield* add(ConfigCommandPlugin.Plugin)
       yield* add(ConfigSkillPlugin.Plugin)
     }).pipe(Effect.withSpan("PluginBoot.boot"))
 
@@ -110,6 +120,7 @@ export const layer = Layer.effect(
 
 export const locationLayer = layer.pipe(
   Layer.provideMerge(Catalog.locationLayer),
+  Layer.provideMerge(CommandV2.locationLayer),
   Layer.provideMerge(Config.locationLayer),
   Layer.provideMerge(AgentV2.locationLayer),
   Layer.provideMerge(SkillV2.locationLayer),

packages/core/src/plugin/command.ts

@@ -0,0 +1,29 @@
+export * as CommandPlugin from "./command"
+
+import { Effect } from "effect"
+import { CommandV2 } from "../command"
+import { Location } from "../location"
+import { PluginV2 } from "../plugin"
+import PROMPT_INITIALIZE from "./command/initialize.txt"
+import PROMPT_REVIEW from "./command/review.txt"
+
+export const Plugin = PluginV2.define({
+  id: PluginV2.ID.make("command"),
+  effect: Effect.gen(function* () {
+    const command = yield* CommandV2.Service
+    const location = yield* Location.Service
+    const transform = yield* command.transform()
+
+    yield* transform((editor) => {
+      editor.update("init", (command) => {
+        command.template = PROMPT_INITIALIZE.replace("${path}", location.project.directory)
+        command.description = "guided AGENTS.md setup"
+      })
+      editor.update("review", (command) => {
+        command.template = PROMPT_REVIEW.replace("${path}", location.project.directory)
+        command.description = "review changes [commit|branch|pr], defaults to uncommitted"
+        command.subtask = true
+      })
+    })
+  }),
+})

packages/core/src/plugin/command/initialize.txt

@@ -0,0 +1,65 @@
+Create or update `AGENTS.md` for this repository.
+
+The goal is a compact instruction file that helps future OpenCode sessions avoid mistakes and ramp up quickly. Every line should answer: "Would an agent likely miss this without help?" If not, leave it out.
+
+User-provided focus or constraints (honor these):
+$ARGUMENTS
+
+## How to investigate
+
+Read the highest-value sources first:
+- `README*`, root manifests, workspace config, lockfiles
+- build, test, lint, formatter, typecheck, and codegen config
+- CI workflows and pre-commit / task runner config
+- existing instruction files (`AGENTS.md`, `CLAUDE.md`, `.cursor/rules/`, `.cursorrules`, `.github/copilot-instructions.md`)
+- repo-local OpenCode config such as `opencode.json`
+
+If architecture is still unclear after reading config and docs, inspect a small number of representative code files to find the real entrypoints, package boundaries, and execution flow. Prefer reading the files that explain how the system is wired together over random leaf files.
+
+Prefer executable sources of truth over prose. If docs conflict with config or scripts, trust the executable source and only keep what you can verify.
+
+## What to extract
+
+Look for the highest-signal facts for an agent working in this repo:
+- exact developer commands, especially non-obvious ones
+- how to run a single test, a single package, or a focused verification step
+- required command order when it matters, such as `lint -> typecheck -> test`
+- monorepo or multi-package boundaries, ownership of major directories, and the real app/library entrypoints
+- framework or toolchain quirks: generated code, migrations, codegen, build artifacts, special env loading, dev servers, infra deploy flow
+- testing quirks: fixtures, integration test prerequisites, snapshot workflows, required services, flaky or expensive suites
+- important constraints from existing instruction files worth preserving
+
+Good `AGENTS.md` content is usually hard-earned context that took reading multiple files to infer.
+
+## Questions
+
+Only ask the user questions if the repo cannot answer something important. Use the `question` tool for one short batch at most.
+
+Good questions:
+- undocumented team conventions
+- branch / PR / release expectations
+- missing setup or test prerequisites that are known but not written down
+
+Do not ask about anything the repo already makes clear.
+
+## Writing rules
+
+Include only high-signal, repo-specific guidance such as:
+- exact commands and shortcuts the agent would otherwise guess wrong
+- architecture notes that are not obvious from filenames
+- conventions that differ from language or framework defaults
+- setup requirements, environment quirks, and operational gotchas
+- references to existing instruction sources that matter
+
+Exclude:
+- generic software advice
+- long tutorials or exhaustive file trees
+- obvious language conventions
+- speculative claims or anything you could not verify
+- content better stored in another file referenced via `opencode.json` `instructions`
+
+When in doubt, omit.
+
+Prefer short sections and bullets. If the repo is simple, keep the file simple. If the repo is large, summarize the few structural facts that actually change how an agent should work.
+
+If `AGENTS.md` already exists at `${path}`, improve it in place rather than rewriting blindly. Preserve verified useful guidance, delete fluff or stale claims, and reconcile it with the current codebase.

packages/core/src/plugin/command/review.txt

@@ -0,0 +1,100 @@
+You are a code reviewer. Your job is to review code changes and provide actionable feedback.
+
+---
+
+Input: $ARGUMENTS
+
+---
+
+## Determining What to Review
+
+Based on the input provided, determine which type of review to perform:
+
+1. **No arguments (default)**: Review all uncommitted changes
+   - Run: `git diff` for unstaged changes
+   - Run: `git diff --cached` for staged changes
+   - Run: `git status --short` to identify untracked (net new) files
+
+2. **Commit hash** (40-char SHA or short hash): Review that specific commit
+   - Run: `git show $ARGUMENTS`
+
+3. **Branch name**: Compare current branch to the specified branch
+   - Run: `git diff $ARGUMENTS...HEAD`
+
+4. **PR URL or number** (contains "github.com" or "pull" or looks like a PR number): Review the pull request
+   - Run: `gh pr view $ARGUMENTS` to get PR context
+   - Run: `gh pr diff $ARGUMENTS` to get the diff
+
+Use best judgement when processing input.
+
+---
+
+## Gathering Context
+
+**Diffs alone are not enough.** After getting the diff, read the entire file(s) being modified to understand the full context. Code that looks wrong in isolation may be correct given surrounding logic—and vice versa.
+
+- Use the diff to identify which files changed
+- Use `git status --short` to identify untracked files, then read their full contents
+- Read the full file to understand existing patterns, control flow, and error handling
+- Check for existing style guide or conventions files (CONVENTIONS.md, AGENTS.md, .editorconfig, etc.)
+
+---
+
+## What to Look For
+
+**Bugs** - Your primary focus.
+- Logic errors, off-by-one mistakes, incorrect conditionals
+- If-else guards: missing guards, incorrect branching, unreachable code paths
+- Edge cases: null/empty/undefined inputs, error conditions, race conditions
+- Security issues: injection, auth bypass, data exposure
+- Broken error handling that swallows failures, throws unexpectedly or returns error types that are not caught.
+
+**Structure** - Does the code fit the codebase?
+- Does it follow existing patterns and conventions?
+- Are there established abstractions it should use but doesn't?
+- Excessive nesting that could be flattened with early returns or extraction
+
+**Performance** - Only flag if obviously problematic.
+- O(n²) on unbounded data, N+1 queries, blocking I/O on hot paths
+
+**Behavior Changes** - If a behavioral change is introduced, raise it (especially if it's possibly unintentional).
+
+---
+
+## Before You Flag Something
+
+**Be certain.** If you're going to call something a bug, you need to be confident it actually is one.
+
+- Only review the changes - do not review pre-existing code that wasn't modified
+- Don't flag something as a bug if you're unsure - investigate first
+- Don't invent hypothetical problems - if an edge case matters, explain the realistic scenario where it breaks
+- If you need more context to be sure, use the tools below to get it
+
+**Don't be a zealot about style.** When checking code against conventions:
+
+- Verify the code is *actually* in violation. Don't complain about else statements if early returns are already being used correctly.
+- Some "violations" are acceptable when they're the simplest option. A `let` statement is fine if the alternative is convoluted.
+- Excessive nesting is a legitimate concern regardless of other style choices.
+
+---
+
+## Tools
+
+Use these to inform your review:
+
+- **Explore agent** - Find how existing code handles similar problems. Check patterns, conventions, and prior art before claiming something doesn't fit.
+- **Exa Code Context** - Verify correct usage of libraries/APIs before flagging something as wrong.
+- **Web Search** - Research best practices if you're unsure about a pattern.
+
+If you're uncertain about something and can't verify it with these tools, say "I'm not sure about X" rather than flagging it as a definite issue.
+
+---
+
+## Output
+
+1. If there is a bug, be direct and clear about why it is a bug.
+2. Clearly communicate severity of issues. Do not overstate severity.
+3. Critiques should clearly and explicitly communicate the scenarios, environments, or inputs that are necessary for the bug to arise. The comment should immediately indicate that the issue's severity depends on these factors.
+4. Your tone should be matter-of-fact and not accusatory or overly positive. It should read as a helpful AI assistant suggestion without sounding too much like a human reviewer.
+5. Write so the reader can quickly understand the issue without reading too closely.
+6. AVOID flattery, do not give any comments that are not helpful to the reader.

packages/core/src/plugin/provider/amazon-bedrock.ts

@@ -1,7 +1,14 @@
 import { Effect } from "effect"
+import type { LanguageModelV3 } from "@ai-sdk/provider"
 import { PluginV2 } from "../../plugin"
 import { ProviderV2 } from "../../provider"
 
+type MantleSDK = {
+  languageModel: (modelID: string) => LanguageModelV3
+  chat: (modelID: string) => LanguageModelV3
+  responses: (modelID: string) => LanguageModelV3
+}
+
 // Bedrock cross-region inference profiles require regional prefixes only for
 // specific model/region combinations. Keep the mapping narrow and avoid
 // double-prefixing model IDs that models.dev already marks as global/us/eu/etc.
@@ -46,6 +53,12 @@ function resolveModelID(modelID: string, region: string | undefined) {
     : modelID
 }
 
+function selectMantleModel(sdk: MantleSDK, modelID: string) {
+  if (modelID === "openai.gpt-oss-safeguard-20b" || modelID === "openai.gpt-oss-safeguard-120b")
+    return sdk.chat(modelID)
+  return sdk.responses(modelID)
+}
+
 export const AmazonBedrockPlugin = PluginV2.define({
   id: PluginV2.ID.make("amazon-bedrock"),
   effect: Effect.gen(function* () {
@@ -65,7 +78,7 @@ export const AmazonBedrockPlugin = PluginV2.define({
         }
       }),
       "aisdk.sdk": Effect.fn(function* (evt) {
-        if (evt.package !== "@ai-sdk/amazon-bedrock") return
+        if (!["@ai-sdk/amazon-bedrock", "@ai-sdk/amazon-bedrock/mantle"].includes(evt.package)) return
         const options = { ...evt.options }
         const profile = typeof options.profile === "string" ? options.profile : process.env.AWS_PROFILE
         const region = typeof options.region === "string" ? options.region : (process.env.AWS_REGION ?? "us-east-1")
@@ -86,11 +99,21 @@ export const AmazonBedrockPlugin = PluginV2.define({
           options.credentialProvider = fromNodeProviderChain(profile ? { profile } : {})
         }
 
+        if (evt.package === "@ai-sdk/amazon-bedrock/mantle") {
+          const mod = yield* Effect.promise(() => import("@ai-sdk/amazon-bedrock/mantle"))
+          evt.sdk = mod.createBedrockMantle(options)
+          return
+        }
+
         const mod = yield* Effect.promise(() => import("@ai-sdk/amazon-bedrock"))
         evt.sdk = mod.createAmazonBedrock(options)
       }),
       "aisdk.language": Effect.fn(function* (evt) {
         if (evt.model.providerID !== ProviderV2.ID.amazonBedrock) return
+        if (evt.model.api.type === "aisdk" && evt.model.api.package === "@ai-sdk/amazon-bedrock/mantle") {
+          evt.language = selectMantleModel(evt.sdk, evt.model.api.id)
+          return
+        }
         const region = typeof evt.options.region === "string" ? evt.options.region : process.env.AWS_REGION
         evt.language = evt.sdk.languageModel(resolveModelID(evt.model.api.id, region))
       }),

packages/core/src/plugin/skill.ts

@@ -0,0 +1,34 @@
+/// <reference path="../markdown.d.ts" />
+
+export * as SkillPlugin from "./skill"
+
+import { Effect } from "effect"
+import { PluginV2 } from "../plugin"
+import { AbsolutePath } from "../schema"
+import { SkillV2 } from "../skill"
+import customizeOpencodeContent from "./skill/customize-opencode.md" with { type: "text" }
+
+export const CustomizeOpencodeContent = customizeOpencodeContent
+
+export const Plugin = PluginV2.define({
+  id: PluginV2.ID.make("skill"),
+  effect: Effect.gen(function* () {
+    const skill = yield* SkillV2.Service
+    const transform = yield* skill.transform()
+
+    yield* transform((editor) => {
+      editor.source(
+        new SkillV2.EmbeddedSource({
+          type: "embedded",
+          skill: new SkillV2.Info({
+            name: "customize-opencode",
+            description:
+              "Use ONLY when the user is editing or creating opencode's own configuration: opencode.json, opencode.jsonc, files under .opencode/, or files under ~/.config/opencode/. Also use when creating or fixing opencode agents, subagents, skills, plugins, MCP servers, or permission rules. Do not use for the user's own application code, or for any project that is not configuring opencode itself.",
+            location: AbsolutePath.make("/builtin/customize-opencode.md"),
+            content: CustomizeOpencodeContent,
+          }),
+        }),
+      )
+    })
+  }),
+})

packages/core/src/plugin/skill/customize-opencode.md

@@ -1,6 +1,6 @@
 <!--
   Built-in skill. Name and description are registered in code at
-  packages/opencode/src/skill/index.ts (see CUSTOMIZE_OPENCODE_SKILL_NAME
+  packages/core/src/plugin/skill.ts
   and CUSTOMIZE_OPENCODE_SKILL_DESCRIPTION). The body below becomes the
   skill's content.
 -->

packages/core/src/process.ts

@@ -79,7 +79,7 @@ const describeCommand = (command: ChildProcess.Command): string => {
 const wrapError = (description: string, cause: unknown): AppProcessError =>
   cause instanceof AppProcessError ? cause : new AppProcessError({ command: description, cause })
 
-const abortError = (signal: AbortSignal): Error => {
+export const abortError = (signal: AbortSignal): Error => {
   const reason = signal.reason
   if (reason instanceof Error) return reason
   const err = new Error("Aborted")
@@ -87,7 +87,7 @@ const abortError = (signal: AbortSignal): Error => {
   return err
 }
 
-const waitForAbort = (signal: AbortSignal) =>
+export const waitForAbort = (signal: AbortSignal) =>
   Effect.callback<never, Error>((resume) => {
     if (signal.aborted) {
       resume(Effect.fail(abortError(signal)))
@@ -107,7 +107,7 @@ const normalizeStdin = (
       ? Stream.make(input)
       : input
 
-const collectStream = (stream: Stream.Stream<Uint8Array, PlatformError>, maxOutputBytes: number | undefined) =>
+export const collectStream = (stream: Stream.Stream<Uint8Array, PlatformError>, maxOutputBytes: number | undefined) =>
   Stream.runFold(
     stream,
     () => ({ chunks: [] as Uint8Array[], bytes: 0, truncated: false }),

packages/core/src/provider.ts

@@ -22,9 +22,6 @@ export const ID = Schema.String.pipe(
 )
 export type ID = typeof ID.Type
 
-export const ModelID = Schema.String.pipe(Schema.brand("ModelID"))
-export type ModelID = typeof ModelID.Type
-
 export const AISDK = Schema.Struct({
   type: Schema.Literal("aisdk"),
   package: Schema.String,

packages/core/src/question.ts

@@ -0,0 +1,198 @@
+export * as QuestionV2 from "./question"
+
+import { Context, Deferred, Effect, Layer, Schema } from "effect"
+import { EventV2 } from "./event"
+import { Identifier } from "./id/id"
+import { withStatics } from "./schema"
+import { SessionSchema } from "./session/schema"
+
+export const ID = Schema.String.check(Schema.isStartsWith("que")).pipe(
+  Schema.brand("QuestionV2.ID"),
+  withStatics((schema) => ({ ascending: (id?: string) => schema.make(Identifier.ascending("question", id)) })),
+)
+export type ID = typeof ID.Type
+
+export const Option = Schema.Struct({
+  label: Schema.String.annotate({ description: "Display text (1-5 words, concise)" }),
+  description: Schema.String.annotate({ description: "Explanation of choice" }),
+}).annotate({ identifier: "QuestionV2.Option" })
+export type Option = typeof Option.Type
+
+const base = {
+  question: Schema.String.annotate({ description: "Complete question" }),
+  header: Schema.String.annotate({ description: "Very short label (max 30 chars)" }),
+  options: Schema.Array(Option).annotate({ description: "Available choices" }),
+  multiple: Schema.Boolean.pipe(Schema.optional).annotate({ description: "Allow selecting multiple choices" }),
+}
+
+export const Info = Schema.Struct({
+  ...base,
+  custom: Schema.Boolean.pipe(Schema.optional).annotate({
+    description: "Allow typing a custom answer (default: true)",
+  }),
+}).annotate({ identifier: "QuestionV2.Info" })
+export type Info = typeof Info.Type
+
+export const Prompt = Schema.Struct(base).annotate({ identifier: "QuestionV2.Prompt" })
+export type Prompt = typeof Prompt.Type
+
+export const Tool = Schema.Struct({
+  messageID: Schema.String,
+  callID: Schema.String,
+}).annotate({ identifier: "QuestionV2.Tool" })
+export type Tool = typeof Tool.Type
+
+export const Request = Schema.Struct({
+  id: ID,
+  sessionID: SessionSchema.ID,
+  questions: Schema.Array(Info).annotate({ description: "Questions to ask" }),
+  tool: Tool.pipe(Schema.optional),
+}).annotate({ identifier: "QuestionV2.Request" })
+export type Request = typeof Request.Type
+
+export const Answer = Schema.Array(Schema.String).annotate({ identifier: "QuestionV2.Answer" })
+export type Answer = typeof Answer.Type
+
+export const Reply = Schema.Struct({
+  answers: Schema.Array(Answer).annotate({
+    description: "User answers in order of questions (each answer is an array of selected labels)",
+  }),
+}).annotate({ identifier: "QuestionV2.Reply" })
+export type Reply = typeof Reply.Type
+
+export const Event = {
+  Asked: EventV2.define({ type: "question.v2.asked", schema: Request.fields }),
+  Replied: EventV2.define({
+    type: "question.v2.replied",
+    schema: {
+      sessionID: SessionSchema.ID,
+      requestID: ID,
+      answers: Schema.Array(Answer),
+    },
+  }),
+  Rejected: EventV2.define({
+    type: "question.v2.rejected",
+    schema: {
+      sessionID: SessionSchema.ID,
+      requestID: ID,
+    },
+  }),
+}
+
+export class RejectedError extends Schema.TaggedErrorClass<RejectedError>()("QuestionV2.RejectedError", {}) {
+  override get message() {
+    return "The user dismissed this question"
+  }
+}
+
+export class NotFoundError extends Schema.TaggedErrorClass<NotFoundError>()("QuestionV2.NotFoundError", {
+  requestID: ID,
+}) {}
+
+export interface AskInput {
+  readonly sessionID: SessionSchema.ID
+  readonly questions: ReadonlyArray<Info>
+  readonly tool?: Tool
+}
+
+export interface ReplyInput {
+  readonly requestID: ID
+  readonly answers: ReadonlyArray<Answer>
+}
+
+export interface Interface {
+  readonly ask: (input: AskInput) => Effect.Effect<ReadonlyArray<Answer>, RejectedError>
+  readonly reply: (input: ReplyInput) => Effect.Effect<void, NotFoundError>
+  readonly reject: (requestID: ID) => Effect.Effect<void, NotFoundError>
+  readonly list: () => Effect.Effect<ReadonlyArray<Request>>
+}
+
+export class Service extends Context.Service<Service, Interface>()("@opencode/v2/Question") {}
+
+interface Pending {
+  readonly request: Request
+  readonly deferred: Deferred.Deferred<ReadonlyArray<Answer>, RejectedError>
+}
+
+/**
+ * Location-owned pending prompts. The Location layer map must materialize this
+ * layer once per embedded Location so replies cannot settle another Location's
+ * deferred request.
+ */
+export const layer = Layer.effect(
+  Service,
+  Effect.gen(function* () {
+    const events = yield* EventV2.Service
+    const pending = new Map<ID, Pending>()
+
+    yield* Effect.addFinalizer(() =>
+      Effect.forEach(pending.values(), (item) => Deferred.fail(item.deferred, new RejectedError()), {
+        discard: true,
+      }).pipe(
+        Effect.ensuring(
+          Effect.sync(() => {
+            pending.clear()
+          }),
+        ),
+      ),
+    )
+
+    const ask = Effect.fn("QuestionV2.ask")((input: AskInput) =>
+      Effect.uninterruptibleMask((restore) =>
+        Effect.gen(function* () {
+          const id = ID.ascending()
+          const deferred = yield* Deferred.make<ReadonlyArray<Answer>, RejectedError>()
+          const request: Request = { id, ...input }
+          pending.set(id, { request, deferred })
+          return yield* events.publish(Event.Asked, request).pipe(
+            Effect.andThen(restore(Deferred.await(deferred))),
+            Effect.ensuring(
+              Effect.sync(() => {
+                pending.delete(id)
+              }),
+            ),
+          )
+        }),
+      ),
+    )
+
+    const reply = Effect.fn("QuestionV2.reply")((input: ReplyInput) =>
+      Effect.uninterruptible(
+        Effect.gen(function* () {
+          const existing = pending.get(input.requestID)
+          if (!existing) return yield* new NotFoundError({ requestID: input.requestID })
+          yield* events.publish(Event.Replied, {
+            sessionID: existing.request.sessionID,
+            requestID: existing.request.id,
+            answers: input.answers.map((answer) => [...answer]),
+          })
+          yield* Deferred.succeed(existing.deferred, input.answers)
+          pending.delete(input.requestID)
+        }),
+      ),
+    )
+
+    const reject = Effect.fn("QuestionV2.reject")((requestID: ID) =>
+      Effect.uninterruptible(
+        Effect.gen(function* () {
+          const existing = pending.get(requestID)
+          if (!existing) return yield* new NotFoundError({ requestID })
+          yield* events.publish(Event.Rejected, {
+            sessionID: existing.request.sessionID,
+            requestID: existing.request.id,
+          })
+          yield* Deferred.fail(existing.deferred, new RejectedError())
+          pending.delete(requestID)
+        }),
+      ),
+    )
+
+    const list = Effect.fn("QuestionV2.list")(function* () {
+      return Array.from(pending.values(), (item) => item.request)
+    })
+
+    return Service.of({ ask, reply, reject, list })
+  }),
+)
+
+export const locationLayer = layer

packages/core/src/ripgrep.ts

@@ -0,0 +1,192 @@
+export * as Ripgrep from "./ripgrep"
+
+import { Context, Effect, Fiber, Layer, Schema, Stream } from "effect"
+import { ChildProcess } from "effect/unstable/process"
+import { Ripgrep as FileSystemRipgrep } from "./filesystem/ripgrep"
+import { AppProcess, collectStream, waitForAbort } from "./process"
+import { NonNegativeInt, PositiveInt } from "./schema"
+
+/**
+ * Small core-owned ripgrep execution adapter. It deliberately exposes raw
+ * process-oriented rows, not model text or permission behavior. LocationSearch
+ * supplies read authority and bounded substrate results; future leaf tools own
+ * presentation and permission prompts.
+ */
+
+const ERROR_BYTES = 8 * 1024
+export const MAX_RECORD_BYTES = 64 * 1024
+export const MAX_SUBMATCHES = 100
+
+const RawMatch = Schema.Struct({
+  type: Schema.Literal("match"),
+  data: Schema.Struct({
+    path: Schema.Struct({ text: Schema.String }),
+    lines: Schema.Struct({ text: Schema.String }),
+    line_number: PositiveInt,
+    absolute_offset: NonNegativeInt,
+    submatches: Schema.Array(
+      Schema.Struct({
+        match: Schema.Struct({ text: Schema.String }),
+        start: NonNegativeInt,
+        end: NonNegativeInt,
+      }),
+    ),
+  }),
+})
+
+export type Match = (typeof RawMatch.Type)["data"]
+
+export class Error extends Schema.TaggedErrorClass<Error>()("Ripgrep.Error", {
+  message: Schema.String,
+  cause: Schema.optional(Schema.Defect),
+}) {}
+
+export class InvalidPatternError extends Schema.TaggedErrorClass<InvalidPatternError>()("Ripgrep.InvalidPatternError", {
+  pattern: Schema.String,
+  message: Schema.String,
+}) {}
+
+export interface Result<A> {
+  readonly items: A[]
+  readonly truncated: boolean
+  readonly partial: boolean
+}
+
+export interface FilesInput {
+  readonly cwd: string
+  readonly pattern: string
+  readonly limit: number
+  readonly signal?: AbortSignal
+}
+
+export interface GrepInput {
+  readonly cwd: string
+  readonly pattern: string
+  readonly file?: string
+  readonly include?: string
+  readonly limit: number
+  readonly signal?: AbortSignal
+}
+
+export interface Interface {
+  readonly files: (input: FilesInput) => Effect.Effect<Result<string>, Error>
+  readonly grep: (input: GrepInput) => Effect.Effect<Result<Match>, Error | InvalidPatternError>
+}
+
+export class Service extends Context.Service<Service, Interface>()("@opencode/v2/Ripgrep") {}
+
+const failure = (message: string, cause?: unknown) => new Error({ message, cause })
+
+const isInvalidPattern = (stderr: string) =>
+  stderr.includes("regex parse error") || stderr.includes("error parsing regex")
+
+export const layer = Layer.effect(
+  Service,
+  Effect.gen(function* () {
+    const process = yield* AppProcess.Service
+    const binary = yield* FileSystemRipgrep.Service
+
+    const run = <A>(input: {
+      readonly cwd: string
+      readonly args: string[]
+      readonly limit: number
+      readonly signal?: AbortSignal
+      readonly parse: (line: string) => Effect.Effect<A | undefined, Error>
+      readonly pattern?: string
+    }) => {
+      const program = Effect.scoped(
+        Effect.gen(function* () {
+          const handle = yield* process.spawn(
+            ChildProcess.make(yield* binary.filepath, input.args, { cwd: input.cwd, extendEnv: true, stdin: "ignore" }),
+          )
+          const stderrFiber = yield* collectStream(handle.stderr, ERROR_BYTES).pipe(
+            Effect.map((output) => output.buffer.toString("utf8")),
+            Effect.forkScoped,
+          )
+          const rows = yield* Stream.decodeText(handle.stdout).pipe(
+            Stream.splitLines,
+            Stream.filter((line) => line.length > 0),
+            Stream.mapEffect(input.parse),
+            Stream.filter((row): row is A => row !== undefined),
+            Stream.take(input.limit + 1),
+            Stream.runCollect,
+            Effect.map((chunk) => [...chunk]),
+          )
+          const truncated = rows.length > input.limit
+          if (truncated) return { items: rows.slice(0, input.limit), truncated, partial: false }
+
+          const code = yield* handle.exitCode
+          const stderr = yield* Fiber.join(stderrFiber)
+          if (input.pattern && code === 2 && isInvalidPattern(stderr)) {
+            return yield* new InvalidPatternError({ pattern: input.pattern, message: stderr.trim() })
+          }
+          if (code !== 0 && code !== 1 && code !== 2) {
+            return yield* failure(stderr.trim() || `ripgrep failed with code ${code}`)
+          }
+          return { items: code === 1 ? [] : rows, truncated: false, partial: code === 2 }
+        }),
+      )
+      const abortable = input.signal ? program.pipe(Effect.raceFirst(waitForAbort(input.signal))) : program
+      return abortable.pipe(
+        Effect.mapError((cause) =>
+          cause instanceof Error || cause instanceof InvalidPatternError
+            ? cause
+            : failure("ripgrep execution failed", cause),
+        ),
+      )
+    }
+
+    return Service.of({
+      files: (input) =>
+        run<string>({
+          ...input,
+          args: [
+            "--no-config",
+            "--files",
+            "--glob=!.git/*", // TODO: Review .git exclusion policy before leaf tool exposure.
+            `--glob=${input.pattern}`,
+            "--glob=!.*",
+            "--glob=!**/.*",
+            ".",
+          ],
+          parse: (line) => Effect.succeed(line.replace(/^\.\//, "")),
+        }).pipe(Effect.catchTag("Ripgrep.InvalidPatternError", (cause) => Effect.fail(failure(cause.message, cause)))),
+      grep: (input) =>
+        run<Match>({
+          ...input,
+          args: [
+            "--no-config",
+            "--json",
+            "--glob=!.git/*", // TODO: Review .git exclusion policy before leaf tool exposure.
+            "--no-messages",
+            ...(input.include ? [`--glob=${input.include}`] : []),
+            "--glob=!.*",
+            "--glob=!**/.*",
+            "--",
+            input.pattern,
+            input.file ?? ".",
+          ],
+          parse: (line) =>
+            (Buffer.byteLength(line, "utf8") > MAX_RECORD_BYTES
+              ? Effect.fail(failure(`Ripgrep JSON record exceeded ${MAX_RECORD_BYTES} bytes`))
+              : Effect.try({
+                  try: () => JSON.parse(line) as unknown,
+                  catch: (cause) => failure("Invalid ripgrep JSON output", cause),
+                })
+            ).pipe(
+              Effect.flatMap((json) => {
+                if (!json || typeof json !== "object" || !("type" in json) || json.type !== "match")
+                  return Effect.succeed(undefined)
+                return Schema.decodeUnknownEffect(RawMatch)(json).pipe(
+                  Effect.map((match) => ({
+                    ...match.data,
+                    submatches: match.data.submatches.slice(0, MAX_SUBMATCHES),
+                  })),
+                  Effect.mapError((cause) => failure("Invalid ripgrep match output", cause)),
+                )
+              }),
+            ),
+        }),
+    })
+  }),
+).pipe(Layer.provide(FileSystemRipgrep.defaultLayer))

packages/core/src/schema.ts

@@ -1,4 +1,13 @@
 import { Option, Schema, SchemaGetter } from "effect"
+import { Hash } from "./util/hash"
+
+export type ExternalID = {
+  readonly namespace: string
+  readonly key: string
+}
+
+export const externalID = (prefix: string, input: ExternalID) =>
+  `${prefix}_${Hash.sha256(JSON.stringify([input.namespace, input.key]))}`
 
 /**
  * Integer greater than zero.

packages/core/src/session-system-context.ts

@@ -0,0 +1,54 @@
+export * as SessionSystemContext from "./session-system-context"
+
+import { Context, DateTime, Effect, Layer } from "effect"
+import { Location } from "./location"
+import { SystemContext } from "./system-context"
+
+export interface Interface {
+  readonly load: () => Effect.Effect<SystemContext.Snapshot>
+}
+
+export class Service extends Context.Service<Service, Interface>()("@opencode/v2/SessionSystemContext") {}
+
+export const layer = Layer.effect(
+  Service,
+  Effect.gen(function* () {
+    const location = yield* Location.Service
+    const environment = [
+      "<env>",
+      `  Working directory: ${location.directory}`,
+      `  Workspace root folder: ${location.project.directory}`,
+      `  Is directory a git repo: ${location.vcs?.type === "git" ? "yes" : "no"}`,
+      `  Platform: ${process.platform}`,
+      "</env>",
+    ].join("\n")
+    const context = SystemContext.struct({
+      environment: SystemContext.value({
+        key: SystemContext.Key.make("core/environment"),
+        load: Effect.succeed({
+          baseline: ["Here is some useful information about the environment you are running in:", environment].join(
+            "\n",
+          ),
+          update: ["The environment you are running in is now:", environment].join("\n"),
+        }),
+      }),
+      date: SystemContext.value({
+        key: SystemContext.Key.make("core/date"),
+        load: DateTime.nowAsDate.pipe(
+          Effect.map((date) => ({
+            baseline: `Today's date: ${date.toDateString()}`,
+            update: `Today's date is now: ${date.toDateString()}`,
+          })),
+        ),
+      }),
+    })
+
+    return Service.of({
+      load: Effect.fn("SessionSystemContext.load")(function* () {
+        return yield* SystemContext.load(context)
+      }),
+    })
+  }),
+)
+
+export const locationLayer = layer

packages/core/src/session.ts

@@ -1,14 +1,14 @@
 export * as SessionV2 from "./session"
 export * from "./session/schema"
 
-import { DateTime, Effect, Layer, Schema, Context } from "effect"
-import { and, asc, desc, eq, gt, gte, like, lt, or, type SQL } from "drizzle-orm"
+import { Cause, DateTime, Effect, Layer, Schema, Context, Stream } from "effect"
+import { and, asc, desc, eq, gt, like, lt, or, type SQL } from "drizzle-orm"
 import { ProjectV2 } from "./project"
 import { WorkspaceV2 } from "./workspace"
 import { ModelV2 } from "./model"
 import { Location } from "./location"
 import { SessionMessage } from "./session/message"
-import type { Prompt } from "./session/prompt"
+import { Prompt } from "./session/prompt"
 import { EventV2 } from "./event"
 import { ProviderV2 } from "./provider"
 import { Database } from "./database/database"
@@ -17,6 +17,18 @@ import { SessionMessageTable, SessionTable } from "./session/sql"
 import { SessionSchema } from "./session/schema"
 import { AbsolutePath, PositiveInt, RelativePath } from "./schema"
 import { AgentV2 } from "./agent"
+import { SessionV1 } from "./v1/session"
+import { InstallationVersion } from "./installation/version"
+import { Slug } from "./util/slug"
+import { ProjectTable } from "./project/sql"
+import path from "path"
+import { fromRow } from "./session/info"
+import { SessionRunner } from "./session/runner/index"
+import { SessionStore } from "./session/store"
+import { SessionExecution } from "./session/execution"
+import { MessageDecodeError } from "./session/error"
+import { SessionEvent } from "./session/event"
+import { SessionInput } from "./session/input"
 
 // get project -> project.locations
 //
@@ -60,7 +72,7 @@ export type ListInput = typeof ListInput.Type
 
 type CreateInput = {
   id?: SessionSchema.ID
-  agent?: string
+  agent?: AgentV2.ID
   model?: ModelV2.Ref
   location: Location.Ref
 }
@@ -82,21 +94,23 @@ export class NotFoundError extends Schema.TaggedErrorClass<NotFoundError>()("Ses
 export class OperationUnavailableError extends Schema.TaggedErrorClass<OperationUnavailableError>()(
   "Session.OperationUnavailableError",
   {
-    operation: Schema.Literals(["prompt", "compact", "wait"]),
+    operation: Schema.Literals(["move", "shell", "skill", "switchAgent", "switchModel", "compact", "wait"]),
   },
 ) {}
 
-export class MessageDecodeError extends Schema.TaggedErrorClass<MessageDecodeError>()("Session.MessageDecodeError", {
+export { MessageDecodeError } from "./session/error"
+
+export class PromptConflictError extends Schema.TaggedErrorClass<PromptConflictError>()("Session.PromptConflictError", {
   sessionID: SessionSchema.ID,
   messageID: SessionMessage.ID,
 }) {}
 
-export type Error = NotFoundError | MessageDecodeError | OperationUnavailableError
+export type Error = NotFoundError | MessageDecodeError | OperationUnavailableError | PromptConflictError
 
 export interface Interface {
   readonly list: (input?: ListInput) => Effect.Effect<SessionSchema.Info[]>
-  readonly create: (input?: CreateInput) => Effect.Effect<SessionSchema.Info>
-  readonly move: (input: MoveInput) => Effect.Effect<void, NotFoundError>
+  readonly create: (input: CreateInput) => Effect.Effect<SessionSchema.Info>
+  readonly move: (input: MoveInput) => Effect.Effect<void, NotFoundError | OperationUnavailableError>
   readonly get: (sessionID: SessionSchema.ID) => Effect.Effect<SessionSchema.Info, NotFoundError>
   readonly messages: (input: {
     sessionID: SessionSchema.ID
@@ -104,85 +118,80 @@ export interface Interface {
     order?: "asc" | "desc"
     cursor?: {
       id: SessionMessage.ID
-      time: number
       direction: "previous" | "next"
     }
   }) => Effect.Effect<SessionMessage.Message[], NotFoundError | MessageDecodeError>
+  readonly message: (input: {
+    sessionID: SessionSchema.ID
+    messageID: SessionMessage.ID
+  }) => Effect.Effect<SessionMessage.Message | undefined>
   readonly context: (
     sessionID: SessionSchema.ID,
   ) => Effect.Effect<SessionMessage.Message[], NotFoundError | MessageDecodeError>
-  readonly switchAgent: (input: { sessionID: SessionSchema.ID; agent: string }) => Effect.Effect<void, never>
-  readonly switchModel: (input: { sessionID: SessionSchema.ID; model: ModelV2.Ref }) => Effect.Effect<void, never>
+  readonly events: (input: {
+    sessionID: SessionSchema.ID
+    after?: EventV2.Cursor
+  }) => Stream.Stream<EventV2.CursorEvent<SessionEvent.DurableEvent>, NotFoundError>
+  readonly switchAgent: (input: {
+    sessionID: SessionSchema.ID
+    agent: string
+  }) => Effect.Effect<void, OperationUnavailableError>
+  readonly switchModel: (input: {
+    sessionID: SessionSchema.ID
+    model: ModelV2.Ref
+  }) => Effect.Effect<void, OperationUnavailableError>
   readonly prompt: (input: {
-    id?: EventV2.ID
+    id?: SessionMessage.ID
     sessionID: SessionSchema.ID
     prompt: Prompt
-    delivery?: SessionSchema.Delivery
+    delivery?: SessionInput.Delivery
     resume?: boolean
-  }) => Effect.Effect<SessionMessage.User, NotFoundError | OperationUnavailableError>
+  }) => Effect.Effect<SessionMessage.User, NotFoundError | PromptConflictError>
   readonly shell: (input: {
     id?: EventV2.ID
     sessionID: SessionSchema.ID
     command: string
-    delivery?: SessionSchema.Delivery
     resume?: boolean
-  }) => Effect.Effect<void, never>
+  }) => Effect.Effect<void, OperationUnavailableError>
   readonly skill: (input: {
     id?: EventV2.ID
     sessionID: SessionSchema.ID
     skill: string
-    delivery?: SessionSchema.Delivery
     resume?: boolean
-  }) => Effect.Effect<void, never>
+  }) => Effect.Effect<void, OperationUnavailableError>
   readonly compact: (input: CompactInput) => Effect.Effect<void, NotFoundError | OperationUnavailableError>
   readonly wait: (id: SessionSchema.ID) => Effect.Effect<void, NotFoundError | OperationUnavailableError>
-  readonly resume: (sessionID: SessionSchema.ID) => Effect.Effect<void>
+  readonly resume: (sessionID: SessionSchema.ID) => Effect.Effect<void, NotFoundError | SessionRunner.RunError>
 }
 
 export class Service extends Context.Service<Service, Interface>()("@opencode/v2/Session") {}
 
-function fromRow(row: typeof SessionTable.$inferSelect): SessionSchema.Info {
-  return SessionSchema.Info.make({
-    id: SessionSchema.ID.make(row.id),
-    projectID: ProjectV2.ID.make(row.project_id),
-    title: row.title,
-    parentID: row.parent_id ? SessionSchema.ID.make(row.parent_id) : undefined,
-    agent: row.agent ? AgentV2.ID.make(row.agent) : undefined,
-    model: row.model
-      ? {
-          id: ModelV2.ID.make(row.model.id),
-          providerID: ProviderV2.ID.make(row.model.providerID),
-          variant: ModelV2.VariantID.make(row.model.variant ?? "default"),
-        }
-      : undefined,
-    cost: row.cost,
-    tokens: {
-      input: row.tokens_input,
-      output: row.tokens_output,
-      reasoning: row.tokens_reasoning,
-      cache: {
-        read: row.tokens_cache_read,
-        write: row.tokens_cache_write,
-      },
-    },
-    location: Location.Ref.make({
-      directory: AbsolutePath.make(row.directory),
-      workspaceID: row.workspace_id ? WorkspaceV2.ID.make(row.workspace_id) : undefined,
-    }),
-    subpath: row.path ? RelativePath.make(row.path) : undefined,
-    time: {
-      created: DateTime.makeUnsafe(row.time_created),
-      updated: DateTime.makeUnsafe(row.time_updated),
-      archived: row.time_archived ? DateTime.makeUnsafe(row.time_archived) : undefined,
-    },
-  })
-}
-
 export const layer = Layer.effect(
   Service,
   Effect.gen(function* () {
     const db = (yield* Database.Service).db
+    const events = yield* EventV2.Service
+    const projects = yield* ProjectV2.Service
+    const execution = yield* SessionExecution.Service
+    const store = yield* SessionStore.Service
     const decodeMessage = Schema.decodeUnknownEffect(SessionMessage.Message)
+    const isDurableSessionEvent = Schema.is(SessionEvent.Durable)
+    const scope = yield* Effect.scope
+
+    const enqueueWake = (sessionID: SessionSchema.ID) =>
+      execution.wake(sessionID).pipe(
+        Effect.tapCause((cause) =>
+          Cause.hasInterruptsOnly(cause)
+            ? Effect.void
+            : Effect.logError("Failed to wake Session").pipe(
+                Effect.annotateLogs("sessionID", sessionID),
+                Effect.annotateLogs("cause", cause),
+              ),
+        ),
+        Effect.ignore,
+        Effect.forkIn(scope, { startImmediately: true }),
+        Effect.asVoid,
+      )
 
     const decode = (row: typeof SessionMessageTable.$inferSelect) =>
       decodeMessage({ ...row.data, id: row.id, type: row.type }).pipe(
@@ -195,14 +204,80 @@ export const layer = Layer.effect(
         ),
       )
 
+    const findExistingPrompt = Effect.fnUntraced(function* (input: {
+      sessionID: SessionSchema.ID
+      messageID: SessionMessage.ID
+      prompt: Prompt
+      delivery: SessionInput.Delivery
+    }) {
+      const stored = yield* SessionInput.find(db, input.messageID)
+      if (!stored) return yield* SessionInput.reconcileProjected(db, { id: input.messageID, ...input })
+      if (!SessionInput.equivalent(stored, input)) {
+        return yield* new PromptConflictError({ sessionID: input.sessionID, messageID: input.messageID })
+      }
+      return stored
+    })
+
     const result = Service.of({
-      create: Effect.fn("V2Session.create")(function* () {
-        return {} as SessionSchema.Info
+      create: Effect.fn("V2Session.create")(function* (input) {
+        const sessionID = input.id ?? SessionSchema.ID.create()
+        const recorded = yield* store.get(sessionID)
+        if (recorded) return recorded
+        const project = yield* projects.resolve(input.location.directory)
+        yield* db
+          .insert(ProjectTable)
+          .values({ id: project.id, worktree: project.directory, vcs: project.vcs?.type, sandboxes: [] })
+          .onConflictDoNothing()
+          .run()
+          .pipe(Effect.orDie)
+        const now = Date.now()
+        const info = SessionV1.SessionInfo.make({
+          id: sessionID,
+          slug: Slug.create(),
+          version: InstallationVersion,
+          projectID: project.id,
+          directory: input.location.directory,
+          path: path.relative(project.directory, input.location.directory).replaceAll("\\", "/"),
+          workspaceID: input.location.workspaceID ? WorkspaceV2.ID.make(input.location.workspaceID) : undefined,
+          title: `New session - ${new Date(now).toISOString()}`,
+          agent: input.agent,
+          model: input.model
+            ? {
+                id: ModelV2.ID.make(input.model.id),
+                providerID: input.model.providerID,
+                variant: input.model.variant,
+              }
+            : undefined,
+          cost: 0,
+          tokens: { input: 0, output: 0, reasoning: 0, cache: { read: 0, write: 0 } },
+          time: { created: now, updated: now },
+        })
+        const projected = yield* events
+          .publish(SessionV1.Event.Created, { sessionID, info }, { location: input.location })
+          .pipe(
+            Effect.as({ type: "created" } as const),
+            Effect.catchDefect((defect) => {
+              if (!(defect instanceof SessionProjector.SessionAlreadyProjected)) {
+                return Effect.die(defect)
+              }
+              // Concurrent creation lost the projection race. The existing Session identity wins.
+              return store
+                .get(sessionID)
+                .pipe(
+                  Effect.flatMap((session) =>
+                    session ? Effect.succeed({ type: "existing", session } as const) : Effect.die(defect),
+                  ),
+                )
+            }),
+          )
+        if (projected.type === "existing") return projected.session
+        // TODO: Restore recorded sessions onto replacement synchronized workspaces in a future API slice.
+        return yield* result.get(sessionID).pipe(Effect.orDie)
       }),
       get: Effect.fn("V2Session.get")(function* (sessionID) {
-        const row = yield* db.select().from(SessionTable).where(eq(SessionTable.id, sessionID)).get().pipe(Effect.orDie)
-        if (!row) return yield* new NotFoundError({ sessionID })
-        return fromRow(row)
+        const session = yield* store.get(sessionID)
+        if (!session) return yield* new NotFoundError({ sessionID })
+        return session
       }),
       list: Effect.fn("V2Session.list")(function* (input = {}) {
         const direction = input.anchor?.direction ?? "next"
@@ -245,22 +320,21 @@ export const layer = Layer.effect(
         const direction = input.cursor?.direction ?? "next"
         const requestedOrder = input.order ?? "desc"
         const order = direction === "previous" ? (requestedOrder === "asc" ? "desc" : "asc") : requestedOrder
-        const boundary = input.cursor
+        const anchor = input.cursor
+          ? yield* db
+              .select({ seq: SessionMessageTable.seq })
+              .from(SessionMessageTable)
+              .where(
+                and(eq(SessionMessageTable.session_id, input.sessionID), eq(SessionMessageTable.id, input.cursor.id)),
+              )
+              .get()
+              .pipe(Effect.orDie)
+          : undefined
+        if (input.cursor && !anchor) return []
+        const boundary = anchor
           ? order === "asc"
-            ? or(
-                gt(SessionMessageTable.time_created, input.cursor.time),
-                and(
-                  eq(SessionMessageTable.time_created, input.cursor.time),
-                  gt(SessionMessageTable.id, input.cursor.id),
-                ),
-              )
-            : or(
-                lt(SessionMessageTable.time_created, input.cursor.time),
-                and(
-                  eq(SessionMessageTable.time_created, input.cursor.time),
-                  lt(SessionMessageTable.id, input.cursor.id),
-                ),
-              )
+            ? gt(SessionMessageTable.seq, anchor.seq)
+            : lt(SessionMessageTable.seq, anchor.seq)
           : undefined
         const where = boundary
           ? and(eq(SessionMessageTable.session_id, input.sessionID), boundary)
@@ -269,55 +343,68 @@ export const layer = Layer.effect(
           .select()
           .from(SessionMessageTable)
           .where(where)
-          .orderBy(
-            order === "asc" ? asc(SessionMessageTable.time_created) : desc(SessionMessageTable.time_created),
-            order === "asc" ? asc(SessionMessageTable.id) : desc(SessionMessageTable.id),
-          )
+          .orderBy(order === "asc" ? asc(SessionMessageTable.seq) : desc(SessionMessageTable.seq))
         const rows = yield* (input.limit === undefined ? query.all() : query.limit(input.limit).all()).pipe(
           Effect.orDie,
         )
         return yield* Effect.forEach(direction === "previous" ? rows.toReversed() : rows, decode)
       }),
+      message: Effect.fn("V2Session.message")(function* (input) {
+        const stored = yield* store.message(input.messageID)
+        return stored?.sessionID === input.sessionID ? stored.message : undefined
+      }),
       context: Effect.fn("V2Session.context")(function* (sessionID) {
         yield* result.get(sessionID)
-        const compaction = yield* db
-          .select()
-          .from(SessionMessageTable)
-          .where(and(eq(SessionMessageTable.session_id, sessionID), eq(SessionMessageTable.type, "compaction")))
-          .orderBy(desc(SessionMessageTable.time_created), desc(SessionMessageTable.id))
-          .limit(1)
-          .get()
-          .pipe(Effect.orDie)
-        const rows = yield* db
-          .select()
-          .from(SessionMessageTable)
-          .where(
-            and(
-              eq(SessionMessageTable.session_id, sessionID),
-              compaction
-                ? or(
-                    gt(SessionMessageTable.time_created, compaction.time_created),
-                    and(
-                      eq(SessionMessageTable.time_created, compaction.time_created),
-                      gte(SessionMessageTable.id, compaction.id),
-                    ),
-                  )
-                : undefined,
-            ),
-          )
-          .orderBy(asc(SessionMessageTable.time_created), asc(SessionMessageTable.id))
-          .all()
-          .pipe(Effect.orDie)
-        return yield* Effect.forEach(rows, decode)
+        return yield* store.context(sessionID)
       }),
-      prompt: Effect.fn("V2Session.prompt")(function* (input) {
-        yield* result.get(input.sessionID)
-        return yield* Effect.fail(new OperationUnavailableError({ operation: "prompt" }))
+      events: (input) =>
+        Stream.unwrap(
+          result
+            .get(input.sessionID)
+            .pipe(Effect.as(events.aggregateEvents({ aggregateID: input.sessionID, after: input.after }))),
+        ).pipe(
+          Stream.filter((event): event is EventV2.CursorEvent<SessionEvent.DurableEvent> =>
+            isDurableSessionEvent(event.event),
+          ),
+        ),
+      prompt: Effect.fn("V2Session.prompt")((input) =>
+        Effect.uninterruptible(
+          Effect.gen(function* () {
+            yield* result.get(input.sessionID)
+            const returnPrompt = Effect.fnUntraced(function* (admitted: SessionInput.Admitted) {
+              if (input.resume !== false) yield* enqueueWake(input.sessionID)
+              return SessionInput.toMessage(admitted)
+            }, Effect.uninterruptible)
+            const messageID = input.id ?? SessionMessage.ID.create()
+            const delivery = input.delivery ?? "steer"
+            const expected = { sessionID: input.sessionID, messageID, prompt: input.prompt, delivery }
+            const existing = yield* findExistingPrompt(expected)
+            if (existing) return yield* returnPrompt(existing)
+            const admitted = yield* SessionInput.admit(db, {
+              id: messageID,
+              sessionID: input.sessionID,
+              prompt: input.prompt,
+              delivery,
+            })
+            if (!admitted) return yield* new PromptConflictError({ sessionID: input.sessionID, messageID })
+            if (!SessionInput.equivalent(admitted, expected))
+              return yield* new PromptConflictError({ sessionID: input.sessionID, messageID })
+            return yield* returnPrompt(admitted)
+          }),
+        ),
+      ),
+      shell: Effect.fn("V2Session.shell")(function* () {
+        return yield* new OperationUnavailableError({ operation: "shell" })
+      }),
+      skill: Effect.fn("V2Session.skill")(function* () {
+        return yield* new OperationUnavailableError({ operation: "skill" })
+      }),
+      switchAgent: Effect.fn("V2Session.switchAgent")(function* () {
+        return yield* new OperationUnavailableError({ operation: "switchAgent" })
+      }),
+      switchModel: Effect.fn("V2Session.switchModel")(function* () {
+        return yield* new OperationUnavailableError({ operation: "switchModel" })
       }),
-      shell: Effect.fn("V2Session.shell")(function* () {}),
-      skill: Effect.fn("V2Session.skill")(function* () {}),
-      switchAgent: Effect.fn("V2Session.switchAgent")(function* () {}),
-      switchModel: Effect.fn("V2Session.switchModel")(function* () {}),
       compact: Effect.fn("V2Session.compact")(function* (input) {
         yield* result.get(input.sessionID)
         return yield* new OperationUnavailableError({ operation: "compact" })
@@ -326,16 +413,33 @@ export const layer = Layer.effect(
         yield* result.get(sessionID)
         return yield* new OperationUnavailableError({ operation: "wait" })
       }),
-      resume: Effect.fn("V2Session.resume")(function* () {}),
-      move: Effect.fn("V2Session.move")(function* () {}),
+      resume: Effect.fn("V2Session.resume")(function* (sessionID) {
+        yield* result.get(sessionID)
+        yield* execution.resume(sessionID)
+      }),
+      move: Effect.fn("V2Session.move")(function* () {
+        return yield* new OperationUnavailableError({ operation: "move" })
+      }),
     })
 
     return result
   }),
 )
 
+const DefaultDatabase = Database.defaultLayer
+const DefaultEvents = EventV2.layer.pipe(Layer.provide(DefaultDatabase))
+const DefaultProjector = SessionProjector.layer.pipe(Layer.provide(DefaultEvents), Layer.provide(DefaultDatabase))
+const DefaultStore = SessionStore.layer.pipe(Layer.provide(DefaultDatabase))
 export const defaultLayer = layer.pipe(
-  Layer.provide(SessionProjector.defaultLayer),
-  Layer.provide(Database.defaultLayer),
+  Layer.provide(
+    Layer.mergeAll(
+      DefaultDatabase,
+      DefaultEvents,
+      DefaultProjector,
+      DefaultStore,
+      SessionExecution.noopLayer,
+      ProjectV2.defaultLayer,
+    ),
+  ),
   Layer.orDie,
 )

packages/core/src/session/context.ts

@@ -0,0 +1,47 @@
+import { and, asc, desc, eq, gt, gte, or } from "drizzle-orm"
+import { Effect, Schema } from "effect"
+import { Database } from "../database/database"
+import { MessageDecodeError } from "./error"
+import { SessionMessage } from "./message"
+import { SessionSchema } from "./schema"
+import { SessionMessageTable } from "./sql"
+
+type DatabaseService = Database.Interface["db"]
+
+const decode = Schema.decodeUnknownEffect(SessionMessage.Message)
+
+export const load = Effect.fn("SessionContext.load")(function* (db: DatabaseService, sessionID: SessionSchema.ID) {
+  const compaction = yield* db
+    .select()
+    .from(SessionMessageTable)
+    .where(and(eq(SessionMessageTable.session_id, sessionID), eq(SessionMessageTable.type, "compaction")))
+    .orderBy(desc(SessionMessageTable.seq))
+    .limit(1)
+    .get()
+    .pipe(Effect.orDie)
+  const rows = yield* db
+    .select()
+    .from(SessionMessageTable)
+    .where(
+      and(
+        eq(SessionMessageTable.session_id, sessionID),
+        compaction ? or(gte(SessionMessageTable.seq, compaction.seq)) : undefined,
+      ),
+    )
+    .orderBy(asc(SessionMessageTable.seq))
+    .all()
+    .pipe(Effect.orDie)
+  return yield* Effect.forEach(rows, (row) =>
+    decode({ ...row.data, id: row.id, type: row.type }).pipe(
+      Effect.mapError(
+        () =>
+          new MessageDecodeError({
+            sessionID: SessionSchema.ID.make(row.session_id),
+            messageID: SessionMessage.ID.make(row.id),
+          }),
+      ),
+    ),
+  )
+})
+
+export * as SessionContext from "./context"