@cortexkit/magic-context 0.34.1 → 0.35.0

package/dist/index.js

@@ -26716,6 +26716,23 @@ var init_cron = __esm(() => {
   MAX_SEARCH_MS = 4 * 366 * 24 * 60 * MINUTE_MS;
 });
 
+// ../plugin/src/shared/prompt-surface.ts
+function isValidPromptSurfaceModelKey(key) {
+  if (key.length === 0 || key.trim() !== key)
+    return false;
+  const slash = key.indexOf("/");
+  if (slash <= 0 || slash === key.length - 1)
+    return false;
+  const provider = key.slice(0, slash);
+  const modelID = key.slice(slash + 1);
+  if (provider.trim() !== provider || modelID.trim() !== modelID || provider.includes("*") || modelID.includes("*") && modelID !== "*") {
+    return false;
+  }
+  if (modelID === "*")
+    return true;
+  return modelID.length > 0 && !modelID.startsWith("/") && !modelID.endsWith("/") && !modelID.includes("//");
+}
+
 // ../plugin/src/config/schema/agent-overrides.ts
 var PermissionValueSchema, PermissionSchema, AgentOverrideConfigSchema;
 var init_agent_overrides = __esm(() => {
@@ -26764,7 +26781,7 @@ function expandConfigPath(value) {
     return `${homedir6()}/${trimmed.slice(2)}`;
   return trimmed;
 }
-var DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE = 65, EXECUTE_THRESHOLD_CAP_MESSAGE = "execute_threshold is capped at 90% for cache safety: output capacity is reserved from the usable context window, and the remaining 10% absorbs mid-turn growth before the absolute 95% emergency wall. Use a value between 20 and 90.", DEFAULT_HISTORIAN_TIMEOUT_MS = 300000, DEFAULT_HISTORY_BUDGET_PERCENTAGE = 0.15, DEFAULT_LOCAL_EMBEDDING_MODEL = "Xenova/all-MiniLM-L6-v2", PiThinkingLevelSchema, PiConfigSchema, CronScheduleSchema, DreamTaskBaseConfigSchema, PromotionThresholdSchema, PrimerPromotionThresholdSchema, DreamTaskConfigSchema, ReviewUserMemoriesTaskConfigSchema, PromotePrimersTaskConfigSchema, DEFAULT_TASK_SCHEDULES, DreamTasksSchema, DreamerConfigSchema, SidekickConfigSchema, HistorianConfigSchema, EmbeddingFallbackProviderSchema, BaseEmbeddingConfigSchema, EmbeddingConfigSchema, MagicContextConfigSchema;
+var DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE = 65, EXECUTE_THRESHOLD_CAP_MESSAGE = "execute_threshold is capped at 90% for cache safety: output capacity is reserved from the usable context window, and the remaining 10% absorbs mid-turn growth before the absolute 95% emergency wall. Use a value between 20 and 90.", DEFAULT_HISTORIAN_TIMEOUT_MS = 300000, DEFAULT_HISTORY_BUDGET_PERCENTAGE = 0.15, DEFAULT_LOCAL_EMBEDDING_MODEL = "Xenova/all-MiniLM-L6-v2", PiThinkingLevelSchema, PiConfigSchema, PromptSurfacePresetSchema, PromptSurfaceModelKeySchema, PromptSurfaceToolKeySchema, PromptSurfaceConfigSchema, CronScheduleSchema, DreamTaskBaseConfigSchema, PromotionThresholdSchema, PrimerPromotionThresholdSchema, DreamTaskConfigSchema, ReviewUserMemoriesTaskConfigSchema, PromotePrimersTaskConfigSchema, DEFAULT_TASK_SCHEDULES, DreamTasksSchema, DreamerConfigSchema, SidekickConfigSchema, HistorianConfigSchema, EmbeddingFallbackProviderSchema, BaseEmbeddingConfigSchema, EmbeddingConfigSchema, MagicContextConfigSchema;
 var init_magic_context = __esm(() => {
   init_zod();
   init_language_directive();
@@ -26774,6 +26791,23 @@ var init_magic_context = __esm(() => {
   PiConfigSchema = exports_external.object({
     subagent_extensions: exports_external.array(exports_external.string().trim().min(1)).optional().describe("User-only allowlist of Pi extensions for Magic Context subagent children. When set, children use --no-extensions and load only these entries (plus Magic Context's scoped child extension where applicable). Relative paths resolve from ~/.pi/agent, matching Pi's settings.json package location. Unset preserves normal Pi extension discovery.")
   }).optional();
+  PromptSurfacePresetSchema = exports_external.enum(["full", "light"]);
+  PromptSurfaceModelKeySchema = exports_external.string().refine(isValidPromptSurfaceModelKey, {
+    message: "Use a non-empty provider/model key or the literal provider/* wildcard; model IDs may contain additional slashes and matching is case-sensitive."
+  });
+  PromptSurfaceToolKeySchema = exports_external.string().refine((value) => value.trim().length > 0, {
+    message: "tool description keys must not be empty or whitespace-only"
+  });
+  PromptSurfaceConfigSchema = exports_external.object({
+    default: PromptSurfacePresetSchema.default("full").describe('Fallback prompt-surface preset ("full" or "light").'),
+    models: exports_external.record(PromptSurfaceModelKeySchema, PromptSurfacePresetSchema).optional().describe("Literal per-model routing. Keys are provider/model or provider/*; matching is case-sensitive and preserves additional slashes in model IDs."),
+    guidance_override_path: exports_external.string().refine((value) => value.trim().length > 0, {
+      message: "guidance_override_path must not be empty or whitespace-only"
+    }).optional().describe("USER-LEVEL ONLY path to a complete primary guidance section. Relative paths resolve from the user config file."),
+    tool_descriptions: exports_external.record(PromptSurfaceToolKeySchema, exports_external.string().refine((value) => value.trim().length > 0, {
+      message: "tool description values must not be empty or whitespace-only"
+    })).optional().describe("USER-LEVEL ONLY top-level description overrides keyed by ctx_* tool ID; parameter schemas and descriptions are unchanged.")
+  }).describe("Prompt-surface preset routing. Project config may select default/models, while guidance_override_path and tool_descriptions are user-level only.");
   CronScheduleSchema = exports_external.string().refine((s) => s.trim() === "" || isValidCron(s), {
     message: 'Invalid schedule: use a 5-field cron expression (e.g. "0 3 * * *" for 3am daily, "0 3 * * 0" for Sunday 3am, "0 */6 * * *" every 6h) or "" to disable.'
   }).describe('5-field cron schedule (e.g. "0 3 * * *"), or "" to disable this task.');
@@ -26940,6 +26974,7 @@ var init_magic_context = __esm(() => {
     historian: HistorianConfigSchema.describe("Historian agent configuration (model, fallback_models, variant, temperature, maxTokens, permission, two_pass, etc.)"),
     dreamer: DreamerConfigSchema.optional().describe("Dreamer agent + scheduling configuration (model, fallback_models, disable, schedule, tasks, etc.)"),
     cache_ttl: exports_external.union([exports_external.string(), exports_external.object({ default: exports_external.string() }).catchall(exports_external.string())]).default("5m").describe('Cache TTL: string (e.g. "5m", "1h", "30s") or per-model object ({ default: "5m", "model-id": "10m" }). Set to "never" for lanes kept warm by an external keepwarm proxy — disables the idle-TTL heuristic so MC never initiates a rebuild based on elapsed time.'),
+    prompt_surface: PromptSurfaceConfigSchema.default({ default: "full" }).describe("Prompt-surface presets: default is full; models use the literal provider/model or provider/* routing grammar. Guidance and tool-description overrides are user-level only. On OpenCode and Pi, per-model routing applies to the guidance block only: tool descriptions are registered once per process, so they follow the default preset (a v1 plugin-surface limitation; per-model tool descriptions are planned for the OpenCode v2 plugin API once the SDK stabilizes)."),
     output_reserve: exports_external.union([
       exports_external.number().min(0),
       exports_external.object({ default: exports_external.number().min(0) }).catchall(exports_external.number().min(0))
@@ -26988,7 +27023,7 @@ var init_magic_context = __esm(() => {
     keep_subagents: exports_external.boolean().default(false).describe("Debug: keep the child sessions Magic Context spawns for its own subagents (historian, dreamer, sidekick, memory-migration) instead of deleting them on success. Useful for short-term inspection/data collection — their full transcript (prompt, tool calls, token usage, output) stays in the host session store. Kept sessions accumulate until manually cleared; leave false for normal use. Requires a restart to take effect."),
     fail_closed_blocking: exports_external.boolean().default(true).describe("When Magic Context cannot operate (schema fence mismatch, storage open/migration failure), block the primary-session prompt with a loud recovery error instead of silently degrading to native compaction. Default true. Set false only to restore the old degrade-silently behavior (not recommended). USER-LEVEL ONLY — ignored in project config for security. Requires a restart."),
     compaction: exports_external.object({
-      enabled: exports_external.boolean().default(true).describe("When false, Magic Context stops managing the context window and keeps its knowledge layer: memory and docs/user-profile/key-files injection through additive m[0]/m[1], raw-message FTS indexing, dreamer, notes, ctx_search, ctx_expand, ctx_memory, and /ctx-embed remain available. MC's historian/compartment preparation, tagging, markers, pruning, folding, drops, strips, splicing, synthetic context-management todos, temporal markers, nudges, and fail-closed blocking stop; ctx_expand remains a knowledge-surface tool. fail_closed_blocking is inert: a transform failure passes the input messages through without blocking or cancelling. This setting does not enable native compaction: OpenCode's compaction.auto / compaction.prune or Pi's equivalent owns the window, or nothing does. MC's compaction.enabled in magic-context.jsonc is distinct from OpenCode's compaction.auto / compaction.prune in opencode.jsonc; they are different files and different owners. On the first turn after disabling, a long session may trigger one native compaction cycle; MC removes only its own marker boundary, leaves native boundaries and stored compartments intact, and does no pre-trimming mitigation. Marker cleanup is lazy per session, so an unresumed session is cleaned when it is next resumed. If compaction is enabled again, run /ctx-wrapup when the historian is runnable to catch up. OpenCode peer verification against v1.18.4 confirms native compaction covers child sessions: subagents receive additive memory/docs injection and no MC reclaim in this mode, so keep subagent tasks small or leave compaction.enabled on for long subagent runs. If transform_mode is rust, compaction-off resolves to the TypeScript transform and emits one frozen boot warning because there is no Rust reduced-mode contract. This is boot-resolved and requires a process restart; project-tier compaction.enabled is stripped so a cloned repository cannot disable the user's setting. The sidebar reports raw usage as Context: <pct>% · native compaction or Context: <pct>% · no active compaction and does not show an MC execute-threshold fill. /ctx-wrapup, /ctx-recomp, /ctx-flush, and /ctx-session-upgrade refuse without context-management side effects; /ctx-embed remains functional. Raw content hidden by a native boundary before Magic Context's first pass is not retroactively indexed.")
+      enabled: exports_external.boolean().default(true).describe("When false, Magic Context stops managing the context window and keeps its knowledge layer: memory and docs/user-profile/key-files injection through additive m[0]/m[1], raw-message FTS indexing, dreamer, notes, ctx_search, ctx_expand, ctx_memory, and /ctx-embed remain available. MC's historian/compartment preparation, tagging, markers, pruning, folding, drops, strips, splicing, synthetic context-management todos, temporal markers, nudges, and fail-closed blocking stop; ctx_expand remains a knowledge-surface tool. fail_closed_blocking is inert: a transform failure passes the input messages through without blocking or cancelling. This setting does not enable native compaction: OpenCode's compaction.auto / compaction.prune or Pi's equivalent owns the window, or nothing does. MC's compaction.enabled in magic-context.jsonc is distinct from OpenCode's compaction.auto / compaction.prune in opencode.jsonc; they are different files and different owners. On the first turn after disabling, a long session may trigger one native compaction cycle; MC removes only its own marker boundary, leaves native boundaries and stored compartments intact, and does no pre-trimming mitigation. Marker cleanup is lazy per session, so an unresumed session is cleaned when it is next resumed. If compaction is enabled again, run /ctx-wrapup when the historian is runnable to catch up. OpenCode peer verification against v1.18.4 confirms native compaction covers child sessions: subagents receive additive memory/docs injection and no MC reclaim in this mode, so keep subagent tasks small or leave compaction.enabled on for long subagent runs. This is boot-resolved and requires a process restart; project-tier compaction.enabled is stripped so a cloned repository cannot disable the user's setting. The sidebar reports raw usage as Context: <pct>% · native compaction or Context: <pct>% · no active compaction and does not show an MC execute-threshold fill. /ctx-wrapup, /ctx-recomp, /ctx-flush, and /ctx-session-upgrade refuse without context-management side effects; /ctx-embed remains functional. Raw content hidden by a native boundary before Magic Context's first pass is not retroactively indexed.")
     }).default({ enabled: true }).describe("Compaction-off mode gate. Default true (MC manages the context window as today). Set compaction.enabled=false to keep the knowledge layer while letting native compaction (or nothing) own the window. Boot-resolved; requires a restart to change."),
     todowrite: exports_external.object({
       enabled: exports_external.boolean().default(true).describe("Pi only: register Magic Context's todowrite task-list tool. Disable if you use your own todo extension. OpenCode ships its own built-in todowrite; this setting has no effect there."),
@@ -27163,6 +27198,19 @@ function stripUnsafeProjectConfigFields(projectRaw) {
     delete storage.enforce_private_permissions;
     warnings.push("Ignoring storage.enforce_private_permissions from project config (security: only user-level config may opt into externally managed shared storage permissions).");
   }
+  const promptSurface = projectRaw.prompt_surface;
+  if (isPlainObject2(promptSurface)) {
+    const removed = [];
+    for (const field of PROMPT_SURFACE_USER_ONLY_FIELDS) {
+      if (field in promptSurface) {
+        delete promptSurface[field];
+        removed.push(field);
+      }
+    }
+    if (removed.length > 0) {
+      warnings.push(`Ignoring prompt_surface.${removed.join("/")} from project config (security: repositories may select prompt presets but only user config may provide guidance or tool-description text).`);
+    }
+  }
   const pi = projectRaw.pi;
   if (isPlainObject2(pi) && "subagent_extensions" in pi) {
     delete pi.subagent_extensions;
@@ -27357,11 +27405,12 @@ function dropInheritedEmbeddingKeyOnRedirect(projectRaw, mergedRaw, userRaw) {
     "Dropped inherited user embedding api_key because project config redirected " + "embedding.endpoint without supplying its own key (security: prevents key " + "exfiltration to a repository-chosen endpoint)."
   ];
 }
-var HIDDEN_AGENT_KEYS, HISTORIAN_USER_ONLY_FIELDS, AGENT_ESCALATION_FIELDS, EMBEDDING_DESTINATION_FIELDS, PERCENTAGE_THRESHOLD_REASON = "security: a repository may only raise compaction thresholds above the user's effective value; it cannot force earlier historian work or cloned-repo cost escalation.", TOKEN_THRESHOLD_REASON = "security: a repository may only raise execute_threshold_tokens above the user's trusted token threshold; it cannot force earlier historian work or cloned-repo cost escalation.", TOKEN_THRESHOLD_INTRODUCTION_REASON = "security: a repository cannot introduce a new execute_threshold_tokens override when the user has no trusted token threshold for that key; that could force earlier historian work or cloned-repo cost escalation.";
+var HIDDEN_AGENT_KEYS, HISTORIAN_USER_ONLY_FIELDS, PROMPT_SURFACE_USER_ONLY_FIELDS, AGENT_ESCALATION_FIELDS, EMBEDDING_DESTINATION_FIELDS, PERCENTAGE_THRESHOLD_REASON = "security: a repository may only raise compaction thresholds above the user's effective value; it cannot force earlier historian work or cloned-repo cost escalation.", TOKEN_THRESHOLD_REASON = "security: a repository may only raise execute_threshold_tokens above the user's trusted token threshold; it cannot force earlier historian work or cloned-repo cost escalation.", TOKEN_THRESHOLD_INTRODUCTION_REASON = "security: a repository cannot introduce a new execute_threshold_tokens override when the user has no trusted token threshold for that key; that could force earlier historian work or cloned-repo cost escalation.";
 var init_project_security = __esm(() => {
   init_magic_context();
   HIDDEN_AGENT_KEYS = ["historian", "dreamer", "sidekick"];
   HISTORIAN_USER_ONLY_FIELDS = ["model", "fallback_models"];
+  PROMPT_SURFACE_USER_ONLY_FIELDS = ["guidance_override_path", "tool_descriptions"];
   AGENT_ESCALATION_FIELDS = ["prompt", "permission", "tools", "system_prompt"];
   EMBEDDING_DESTINATION_FIELDS = ["endpoint", "provider", "fallback_provider"];
 });
@@ -27823,6 +27872,7 @@ function loadPluginConfigDetailed(directory) {
   };
   return {
     config: config2,
+    registrationPromptSurface: trustedBaseConfig.prompt_surface,
     loadOutcome: combinedOutcome({ sources, substitutionFailures, recoveredTopLevelKeys }),
     sources,
     substitutionFailures,
@@ -29696,9 +29746,10 @@ function prepareMirrorPageStatements(db) {
     memoryById: db.prepare(`SELECT project_path, category, content, normalized_hash, importance, scope, shareable,
                     source_session_id, source_type, seen_count, retrieval_count, first_seen_at,
                     created_at, updated_at, last_seen_at, last_retrieved_at, status, expires_at,
-                    verification_status, verified_at, classified_at, superseded_by_memory_id,
-                    merged_from, metadata_json
-               FROM memories WHERE id = ?`),
+                     verification_status, verified_at, classified_at, superseded_by_memory_id,
+                     merged_from, metadata_json, mural_cue, mural_cue_hash, mural_cue_at,
+                     mural_cue_rejection_count
+                FROM memories WHERE id = ?`),
     memoryIdByStoreId: db.prepare("SELECT id FROM memories WHERE id = ? AND project_path = ?"),
     memoryCandidates: db.prepare("SELECT id FROM memories WHERE project_path = ? AND category = ? AND normalized_hash = ? ORDER BY id"),
     insertMemory: db.prepare("INSERT INTO memories (project_path, category, content, normalized_hash, first_seen_at, created_at, updated_at, last_seen_at) VALUES (?, ?, '', '', 0, 0, 0, 0)"),
@@ -29719,8 +29770,9 @@ function prepareMirrorPageStatements(db) {
              importance = ?, scope = ?, shareable = ?, source_session_id = ?, source_type = ?,
              seen_count = ?, retrieval_count = ?, first_seen_at = ?, created_at = ?, updated_at = ?,
              last_seen_at = ?, last_retrieved_at = ?, status = ?, expires_at = ?,
-             verification_status = ?, verified_at = ?, classified_at = ?, superseded_by_memory_id = ?,
-             merged_from = ?, metadata_json = ? WHERE id = ?`),
+              verification_status = ?, verified_at = ?, classified_at = ?, superseded_by_memory_id = ?,
+              merged_from = ?, metadata_json = ?, mural_cue = ?, mural_cue_hash = ?, mural_cue_at = ?,
+              mural_cue_rejection_count = ? WHERE id = ?`),
     updateSuperseded: db.prepare("UPDATE memories SET superseded_by_memory_id = ? WHERE id = ?"),
     deletePendingReference: db.prepare("DELETE FROM mirror_pending_references WHERE domain = 'memories' AND module_project = ? AND module_row_id = ?"),
     upsertPendingReference: db.prepare("INSERT INTO mirror_pending_references(domain, module_project, module_row_id, target_module_row_id) VALUES ('memories', ?, ?, ?) ON CONFLICT(domain, module_project, module_row_id) DO UPDATE SET target_module_row_id = excluded.target_module_row_id"),
@@ -29884,7 +29936,7 @@ function applyMemoryRow(db, feed, statements) {
   const nullableString = (key, previous) => has(key) ? rowNullableString(row, key) : previous ?? null;
   const hasSuperseded = has("superseded_by_memory_id");
   const previousHash = existing?.normalized_hash;
-  statements.updateMemory.run(has("project_path") ? rowString(row, "project_path") : existing?.project_path ?? moduleProject, has("category") ? rowString(row, "category", "CONSTRAINTS") : existing?.category ?? "CONSTRAINTS", has("content") ? rowString(row, "content") : existing?.content ?? "", has("normalized_hash") ? rowString(row, "normalized_hash") : existing?.normalized_hash ?? "", has("importance") ? typeof row.importance === "number" && Number.isFinite(row.importance) ? row.importance : null : existing?.importance ?? null, has("scope") ? rowString(row, "scope", "project") : existing?.scope ?? "project", has("shareable") ? rowNumber(row, "shareable") : existing?.shareable ?? 0, nullableString("source_session_id", existing?.source_session_id), nullableString("source_type", existing?.source_type), has("seen_count") ? rowNumber(row, "seen_count", 1) : existing?.seen_count ?? 1, has("retrieval_count") ? rowNumber(row, "retrieval_count") : existing?.retrieval_count ?? 0, has("first_seen_at") ? rowNumber(row, "first_seen_at") : existing?.first_seen_at ?? 0, has("created_at") ? rowNumber(row, "created_at") : existing?.created_at ?? 0, has("updated_at") ? rowNumber(row, "updated_at") : existing?.updated_at ?? 0, has("last_seen_at") ? rowNumber(row, "last_seen_at") : existing?.last_seen_at ?? 0, nullableNumber("last_retrieved_at", existing?.last_retrieved_at), has("status") ? rowString(row, "status", "active") : existing?.status ?? "active", nullableNumber("expires_at", existing?.expires_at), has("verification_status") ? rowString(row, "verification_status", "unverified") : existing?.verification_status ?? "unverified", nullableNumber("verified_at", existing?.verified_at), nullableNumber("classified_at", existing?.classified_at), hasSuperseded ? null : existing?.superseded_by_memory_id ?? null, nullableString("merged_from", existing?.merged_from), nullableString("metadata_json", existing?.metadata_json), contextId);
+  statements.updateMemory.run(has("project_path") ? rowString(row, "project_path") : existing?.project_path ?? moduleProject, has("category") ? rowString(row, "category", "CONSTRAINTS") : existing?.category ?? "CONSTRAINTS", has("content") ? rowString(row, "content") : existing?.content ?? "", has("normalized_hash") ? rowString(row, "normalized_hash") : existing?.normalized_hash ?? "", has("importance") ? typeof row.importance === "number" && Number.isFinite(row.importance) ? row.importance : null : existing?.importance ?? null, has("scope") ? rowString(row, "scope", "project") : existing?.scope ?? "project", has("shareable") ? rowNumber(row, "shareable") : existing?.shareable ?? 0, nullableString("source_session_id", existing?.source_session_id), nullableString("source_type", existing?.source_type), has("seen_count") ? rowNumber(row, "seen_count", 1) : existing?.seen_count ?? 1, has("retrieval_count") ? rowNumber(row, "retrieval_count") : existing?.retrieval_count ?? 0, has("first_seen_at") ? rowNumber(row, "first_seen_at") : existing?.first_seen_at ?? 0, has("created_at") ? rowNumber(row, "created_at") : existing?.created_at ?? 0, has("updated_at") ? rowNumber(row, "updated_at") : existing?.updated_at ?? 0, has("last_seen_at") ? rowNumber(row, "last_seen_at") : existing?.last_seen_at ?? 0, nullableNumber("last_retrieved_at", existing?.last_retrieved_at), has("status") ? rowString(row, "status", "active") : existing?.status ?? "active", nullableNumber("expires_at", existing?.expires_at), has("verification_status") ? rowString(row, "verification_status", "unverified") : existing?.verification_status ?? "unverified", nullableNumber("verified_at", existing?.verified_at), nullableNumber("classified_at", existing?.classified_at), hasSuperseded ? null : existing?.superseded_by_memory_id ?? null, nullableString("merged_from", existing?.merged_from), nullableString("metadata_json", existing?.metadata_json), nullableString("mural_cue", existing?.mural_cue), nullableString("mural_cue_hash", existing?.mural_cue_hash), nullableNumber("mural_cue_at", existing?.mural_cue_at), has("mural_cue_rejection_count") ? rowNumber(row, "mural_cue_rejection_count") : existing?.mural_cue_rejection_count ?? 0, contextId);
   if (hasSuperseded && typeof row.superseded_by_memory_id === "number") {
     const translated = mirrorIdentity(db, "memories", moduleProject, row.superseded_by_memory_id, statements);
     if (translated) {
@@ -30175,7 +30227,11 @@ var init_context_authority = __esm(async () => {
     "merged_from",
     "metadata_json",
     "context_store_uuid",
-    "context_row_id"
+    "context_row_id",
+    "mural_cue",
+    "mural_cue_hash",
+    "mural_cue_at",
+    "mural_cue_rejection_count"
   ];
   mirrorFlights = new WeakMap;
 });
@@ -32897,6 +32953,14 @@ class SubcModuleTransport {
       throw new Error("mirror.pull omitted page");
     return { page: response.page };
   }
+  async deleteSession(sessionId, projectRoot) {
+    await this.call({
+      sessionId,
+      projectRoot,
+      method: "session.delete",
+      body: { method: "session.delete", v: 1, session_id: sessionId }
+    });
+  }
   closeSession(sessionId) {
     const client = this.client;
     const prefix = `${sessionId}\x00`;
@@ -35523,6 +35587,15 @@ var init_migrations = __esm(() => {
           ensureColumn(db, "session_meta", "detected_context_limit_provenance", "TEXT NOT NULL DEFAULT 'unknown'");
         }
       }
+    },
+    {
+      version: 75,
+      description: "persist mural cue validation rejection latches",
+      up(db) {
+        if (!tableExists(db, "memories"))
+          return;
+        ensureColumn(db, "memories", "mural_cue_rejection_count", "INTEGER NOT NULL DEFAULT 0");
+      }
     }
   ];
   LATEST_MIGRATION_VERSION = MIGRATIONS.reduce((max, m3) => Math.max(max, m3.version), 0);
@@ -168015,6 +168088,7 @@ import {
   mkdtempSync,
   readdirSync as readdirSync2,
   readFileSync as readFileSync10,
+  statSync as statSync7,
   unlinkSync as unlinkSync2
 } from "node:fs";
 import { basename as basename3, dirname as dirname10, join as join12 } from "node:path";
@@ -168026,24 +168100,57 @@ function getPersistedSchemaVersion(db) {
   const row = db.prepare("SELECT COALESCE(MAX(version), 0) AS version FROM schema_migrations WHERE version < ?").get(FORK_MIGRATION_VERSION_FLOOR);
   return row?.version ?? 0;
 }
-function unreadableDiscovery(path4) {
+function unreadableDiscovery(path4, arm) {
   return {
     state: "unreadable",
     serverPids: [],
     staleFiles: [],
-    unreadableFile: path4
+    unreadableFile: path4,
+    unreadableArm: arm
   };
 }
+function invalidDiscoveryReason(raw) {
+  const trimmed = raw.trim();
+  if (trimmed.startsWith("{")) {
+    try {
+      const parsed = JSON.parse(trimmed);
+      if ("pid" in parsed) {
+        const pid = Number(parsed.pid);
+        if (!Number.isInteger(pid) || pid <= 0)
+          return "invalid-pid";
+      }
+    } catch {}
+  }
+  return "parse-invalid";
+}
+function classifyJunkDiscovery(portFile, raw, staleFiles) {
+  let mtimeMs;
+  try {
+    mtimeMs = rpcDiscoveryFs.statSync(portFile).mtimeMs;
+  } catch (error51) {
+    if (error51.code === "ENOENT")
+      return null;
+    return unreadableDiscovery(portFile, "io");
+  }
+  const ageMs = Date.now() - mtimeMs;
+  if (!Number.isFinite(ageMs) || ageMs < RPC_DISCOVERY_PARSE_GRACE_MS) {
+    return unreadableDiscovery(portFile, "parse");
+  }
+  staleFiles.push(portFile);
+  const reason = invalidDiscoveryReason(raw);
+  log3(`[magic-context] removing stale RPC discovery file ${portFile}: ${reason} record older than 10 minutes`);
+  return null;
+}
 function inspectRpcServerDiscovery(storageDir) {
   const rpcRoot = join12(storageDir, "rpc");
   let projectEntries;
   try {
-    projectEntries = readdirSync2(rpcRoot, { withFileTypes: true });
+    projectEntries = rpcDiscoveryFs.readdirSync(rpcRoot, { withFileTypes: true });
   } catch (error51) {
     if (error51.code === "ENOENT") {
       return { state: "absent", serverPids: [], staleFiles: [] };
     }
-    return unreadableDiscovery(rpcRoot);
+    return unreadableDiscovery(rpcRoot, "io");
   }
   const portFiles = [];
   for (const projectEntry of projectEntries) {
@@ -168052,9 +168159,11 @@ function inspectRpcServerDiscovery(storageDir) {
     const projectDir = join12(rpcRoot, projectEntry.name);
     let entries;
     try {
-      entries = readdirSync2(projectDir);
-    } catch {
-      return unreadableDiscovery(projectDir);
+      entries = rpcDiscoveryFs.readdirSync(projectDir);
+    } catch (error51) {
+      if (error51.code === "ENOENT")
+        continue;
+      return unreadableDiscovery(projectDir, "io");
     }
     for (const entry of entries) {
       if (entry === "port" || entry.startsWith("port-") && entry.endsWith(".json")) {
@@ -168070,15 +168179,21 @@ function inspectRpcServerDiscovery(storageDir) {
   for (const portFile of portFiles) {
     let raw;
     try {
-      raw = readFileSync10(portFile, "utf8");
-    } catch {
-      return unreadableDiscovery(portFile);
+      raw = rpcDiscoveryFs.readFileSync(portFile, "utf8");
+    } catch (error51) {
+      if (error51.code === "ENOENT")
+        continue;
+      return unreadableDiscovery(portFile, "io");
     }
     const filename = basename3(portFile);
     const pidFromName = /^port-(\d+)/.exec(filename)?.[1];
-    const record2 = parseRpcPortFile(raw, pidFromName ? Number(pidFromName) : 0);
+    const fallbackPid = pidFromName ? Number(pidFromName) : 0;
+    const record2 = parseRpcPortFile(raw, fallbackPid);
     if (!record2 || !Number.isInteger(record2.pid) || record2.pid <= 0) {
-      return unreadableDiscovery(portFile);
+      const junk = classifyJunkDiscovery(portFile, raw, staleFiles);
+      if (junk)
+        return junk;
+      continue;
     }
     if (isPidAlive(record2.pid) && isPidIdentityPlausible(record2))
       pids.add(record2.pid);
@@ -168087,9 +168202,9 @@ function inspectRpcServerDiscovery(storageDir) {
   }
   for (const staleFile of staleFiles) {
     try {
-      unlinkSync2(staleFile);
+      rpcDiscoveryFs.unlinkSync(staleFile);
     } catch {
-      return unreadableDiscovery(staleFile);
+      return unreadableDiscovery(staleFile, "io");
     }
   }
   const serverPids = [...pids].sort((a3, b2) => a3 - b2);
@@ -168104,7 +168219,7 @@ function getLiveMigrationBlockingProcesses(storageDir) {
     return [];
   return discovery.serverPids.map((pid) => ({ harness: "OpenCode server", pid }));
 }
-var databases, pendingAsyncOpens, persistenceByDatabase, persistenceErrorByDatabase, pathByDatabase, LATEST_SUPPORTED_VERSION = 74, PERMISSIONS_ENFORCEABLE;
+var databases, pendingAsyncOpens, persistenceByDatabase, persistenceErrorByDatabase, pathByDatabase, LATEST_SUPPORTED_VERSION = 75, PERMISSIONS_ENFORCEABLE, RPC_DISCOVERY_PARSE_GRACE_MS, defaultRpcDiscoveryFs, rpcDiscoveryFs;
 var init_storage_db = __esm(async () => {
   init_data_path();
   init_logger();
@@ -168122,6 +168237,14 @@ var init_storage_db = __esm(async () => {
   persistenceErrorByDatabase = new WeakMap;
   pathByDatabase = new WeakMap;
   PERMISSIONS_ENFORCEABLE = process.platform !== "win32";
+  RPC_DISCOVERY_PARSE_GRACE_MS = 10 * 60 * 1000;
+  defaultRpcDiscoveryFs = {
+    readdirSync: (path4, options) => options?.withFileTypes ? readdirSync2(path4, { withFileTypes: true }) : readdirSync2(path4),
+    readFileSync: (path4, encoding) => String(readFileSync10(path4, encoding)),
+    statSync: (path4) => ({ mtimeMs: statSync7(path4).mtimeMs }),
+    unlinkSync: (path4) => unlinkSync2(path4)
+  };
+  rpcDiscoveryFs = defaultRpcDiscoveryFs;
 });
 
 // src/lib/database-access.ts
@@ -170141,7 +170264,7 @@ import {
   mkdirSync as mkdirSync8,
   readFileSync as readFileSync11,
   renameSync as renameSync3,
-  statSync as statSync7,
+  statSync as statSync8,
   writeFileSync as writeFileSync6
 } from "node:fs";
 import { dirname as dirname11, join as join17 } from "node:path";
@@ -170177,8 +170300,8 @@ function writeTuiConfigAtomic(configPath, config2) {
   const tmpPath = `${configPath}.tmp`;
   writeFileSync6(tmpPath, body);
   try {
-    if (statSync7(configPath, { throwIfNoEntry: false })?.isFile()) {
-      chmodSync3(tmpPath, statSync7(configPath).mode & 511);
+    if (statSync8(configPath, { throwIfNoEntry: false })?.isFile()) {
+      chmodSync3(tmpPath, statSync8(configPath).mode & 511);
     }
   } catch {}
   renameSync3(tmpPath, configPath);
@@ -170458,7 +170581,7 @@ var init_redaction2 = __esm(() => {
 });
 
 // src/lib/diagnostics-opencode.ts
-import { existsSync as existsSync20, readdirSync as readdirSync3, readFileSync as readFileSync12, statSync as statSync8 } from "node:fs";
+import { existsSync as existsSync20, readdirSync as readdirSync3, readFileSync as readFileSync12, statSync as statSync9 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
 import { homedir as homedir14 } from "node:os";
 import { join as join18 } from "node:path";
@@ -170497,7 +170620,7 @@ function getStorageDir() {
 }
 function fileSize(path6) {
   try {
-    return existsSync20(path6) ? statSync8(path6).size : 0;
+    return existsSync20(path6) ? statSync9(path6).size : 0;
   } catch {
     return 0;
   }
@@ -170574,7 +170697,7 @@ function listDumpsInDir(dir, limit) {
     return { count: 0, recent: [] };
   try {
     const entries = readdirSync3(dir).filter((name2) => name2.endsWith(".xml")).map((name2) => {
-      const stat = statSync8(join18(dir, name2));
+      const stat = statSync9(join18(dir, name2));
       return {
         name: name2,
         mtime: stat.mtimeMs,
@@ -170780,7 +170903,7 @@ async function collectDiagnostics() {
   const storageDirPath = getStorageDir();
   const contextDbPath = join18(storageDirPath, "context.db");
   const logPath = getMagicContextLogPath2("opencode");
-  const logFileSize = existsSync20(logPath) ? statSync8(logPath).size : 0;
+  const logFileSize = existsSync20(logPath) ? statSync9(logPath).size : 0;
   let compactionEnabled = false;
   try {
     compactionEnabled = isCompactionEnabled(loadPluginConfig(process.cwd()));
@@ -171679,6 +171802,15 @@ function formatFailClosedBlockingProcesses(processes) {
 }
 function formatFailClosedBlockingMessage(reason) {
   if (reason.kind === "migration_guard") {
+    if (reason.unreadableFile) {
+      const arm = reason.unreadableArm ?? "io";
+      const recovery = arm === "io" ? `If no OpenCode server is running, it is safe to delete ${reason.unreadableFile} and retry.` : `The file may be a recent incomplete write; retry after the file is older than the ten-minute grace window, or stop OpenCode before deleting it.`;
+      return [
+        `Magic Context cannot migrate the shared database because RPC discovery file ${reason.unreadableFile} is uncertain (${arm} arm), so the absence of a live OpenCode server cannot be proven.`,
+        recovery,
+        `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
+      ].join(" ");
+    }
     return [
       `Magic Context cannot migrate the shared database because ${formatFailClosedBlockingProcesses(reason.blockingProcesses)} may be running an older Magic Context build that would fail against the migrated database.`,
       "Restart the blocking process (it will pick up the new build and migrate on start), or shut it down and retry.",
@@ -171836,7 +171968,7 @@ var init_doctor_opencode_cache = __esm(() => {
 
 // src/commands/doctor-opencode.ts
 import { execSync as execSync2, spawnSync as spawnSync3 } from "node:child_process";
-import { existsSync as existsSync23, readFileSync as readFileSync15, statSync as statSync9 } from "node:fs";
+import { existsSync as existsSync23, readFileSync as readFileSync15, statSync as statSync10 } from "node:fs";
 import { createRequire as createRequire4 } from "node:module";
 import { homedir as homedir15 } from "node:os";
 import { join as join21 } from "node:path";
@@ -172704,7 +172836,7 @@ async function runDoctor(options = {}) {
   }
   const logPath = getMagicContextLogPath2("opencode");
   if (existsSync23(logPath)) {
-    const logStat = statSync9(logPath);
+    const logStat = statSync10(logPath);
     const sizeKb = (logStat.size / 1024).toFixed(0);
     log2.info(`Log file: ${logPath} (${sizeKb} KB)`);
   } else {
@@ -172989,6 +173121,7 @@ function loadPiConfig(opts = {}) {
   warnings.push(...parsed.warnings.map((warning) => `[merged config] ${warning}`));
   return {
     config: parsed.config,
+    registrationPromptSurface: trustedBaseConfig.prompt_surface,
     warnings,
     loadedFromPaths: loadedFiles.map((loaded) => loaded.path)
   };
@@ -173007,7 +173140,7 @@ var init_config2 = __esm(() => {
 
 // src/lib/diagnostics-pi.ts
 import { createHash as createHash4 } from "node:crypto";
-import { existsSync as existsSync25, readdirSync as readdirSync4, readFileSync as readFileSync17, statSync as statSync10 } from "node:fs";
+import { existsSync as existsSync25, readdirSync as readdirSync4, readFileSync as readFileSync17, statSync as statSync11 } from "node:fs";
 import { createRequire as createRequire5 } from "node:module";
 import { homedir as homedir16, userInfo as userInfo2 } from "node:os";
 import { join as join22 } from "node:path";
@@ -173025,7 +173158,7 @@ function getSelfVersion3() {
 }
 function fileSize2(path6) {
   try {
-    return existsSync25(path6) ? statSync10(path6).size : 0;
+    return existsSync25(path6) ? statSync11(path6).size : 0;
   } catch {
     return 0;
   }
@@ -173133,7 +173266,7 @@ function collectPiRecentSessions() {
       }
       for (const file2 of files) {
         try {
-          const mtime = statSync10(join22(slugDir, file2)).mtimeMs;
+          const mtime = statSync11(join22(slugDir, file2)).mtimeMs;
           const sessionId = file2.replace(/\.jsonl$/, "");
           candidates.push({ sessionId, directory, mtime });
         } catch {}
@@ -173188,7 +173321,7 @@ function listDumpsInDir2(dir, limit) {
     return { count: 0, recent: [] };
   try {
     const entries = readdirSync4(dir).filter((name2) => name2.endsWith(".xml")).map((name2) => {
-      const stat = statSync10(join22(dir, name2));
+      const stat = statSync11(join22(dir, name2));
       return {
         name: name2,
         mtime: stat.mtimeMs,
@@ -173262,7 +173395,7 @@ async function collectDiagnostics2(cwd = process.cwd()) {
   const storageDirPath = getMagicContextStorageDir();
   const dbPath = join22(storageDirPath, "context.db");
   const logPath = getMagicContextLogPath2("pi");
-  const logFileSize = existsSync25(logPath) ? statSync10(logPath).size : 0;
+  const logFileSize = existsSync25(logPath) ? statSync11(logPath).size : 0;
   const otherPiExtensions = packages.filter((entry) => !isPiMagicContextPackageEntry(entry)).map(describePiPackageEntry);
   const recentSessions = collectPiRecentSessions();
   const historianDumps = collectPiHistorianDumps(recentSessions);
@@ -173474,7 +173607,7 @@ var init_logs_pi = __esm(() => {
 
 // src/commands/doctor-pi.ts
 import { execFileSync as execFileSync5, spawnSync as spawnSync4 } from "node:child_process";
-import { existsSync as existsSync26, mkdirSync as mkdirSync9, readdirSync as readdirSync5, readFileSync as readFileSync19, rmSync as rmSync3, statSync as statSync11 } from "node:fs";
+import { existsSync as existsSync26, mkdirSync as mkdirSync9, readdirSync as readdirSync5, readFileSync as readFileSync19, rmSync as rmSync3, statSync as statSync12 } from "node:fs";
 import { createRequire as createRequire6 } from "node:module";
 import { homedir as homedir17 } from "node:os";
 import { dirname as dirname13, isAbsolute as isAbsolute4, join as join24 } from "node:path";
@@ -173690,7 +173823,7 @@ function findPiMagicContextCacheDirs(cwd, expectedVersion, force = false) {
       return;
     let stat;
     try {
-      stat = statSync11(path6);
+      stat = statSync12(path6);
     } catch {
       return;
     }
@@ -173953,7 +174086,7 @@ async function runHealthChecks(options) {
   }
   const logPath = getMagicContextLogPath2("pi");
   if (existsSync26(logPath)) {
-    const stat = statSync11(logPath);
+    const stat = statSync12(logPath);
     const sizeKb = (stat.size / 1024).toFixed(0);
     const lines = readFileSync19(logPath, "utf-8").split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
     add(results, "info", `Log file: ${logPath} (${sizeKb} KB)`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/magic-context",
-  "version": "0.34.1",
+  "version": "0.35.0",
   "description": "Unified CLI for Magic Context — setup, doctor, and migration across OpenCode and Pi",
   "keywords": [
     "opencode",