@cortexkit/magic-context 0.42.4 → 0.42.6

package/dist/index.js

@@ -20477,7 +20477,7 @@ function expandConfigPath(value) {
     return `${homedir8()}/${trimmed.slice(2)}`;
   return trimmed;
 }
-var DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE = 65, EXECUTE_THRESHOLD_CAP_MESSAGE = "execute_threshold is capped at 90% for cache safety: output capacity is reserved from the usable context window, and the remaining 10% absorbs mid-turn growth before the absolute 95% emergency wall. Use a value between 20 and 90.", DEFAULT_HISTORIAN_TIMEOUT_MS = 600000, DEFAULT_HISTORY_BUDGET_PERCENTAGE = 0.15, DEFAULT_LOCAL_EMBEDDING_MODEL = "Xenova/all-MiniLM-L6-v2", PiThinkingLevelSchema, OmpThinkingLevelSchema, PiConfigSchema, PromptSurfacePresetSchema, PromptSurfaceModelKeySchema, PromptSurfaceToolKeySchema, PromptSurfaceConfigSchema, PER_HARNESS_MIGRATION_INVENTORY, PER_HARNESS_MODEL_KEYS, OcEntryObjectSchema, OcEntrySchema, PiEntryObjectSchema, PiEntrySchema, OmpEntryObjectSchema, OmpEntrySchema, OpenCodeHarnessBlockSchema, PiHarnessBlockSchema, OmpHarnessBlockSchema, OpenCodeTaskExecutionSchema, PiTaskExecutionSchema, OmpTaskExecutionSchema, DreamerOpenCodeHarnessBlockSchema, DreamerPiHarnessBlockSchema, DreamerOmpHarnessBlockSchema, ProfileOpenCodeModelBlockSchema, ProfilePiModelBlockSchema, ProfileOmpModelBlockSchema, ProfileHistorianSchema, ProfileDreamerSchema, ConfigProfileSchema, ConfigProfilesSchema, CronScheduleSchema, DreamTaskBaseConfigSchema, PromotionThresholdSchema, PrimerPromotionThresholdSchema, DreamTaskConfigSchema, ReviewUserMemoriesTaskConfigSchema, PromotePrimersTaskConfigSchema, DEFAULT_TASK_SCHEDULES2, DreamTasksSchema, AgentMetadataSchema, DreamerConfigSchema, HistorianConfigSchema, EmbeddingFallbackProviderSchema, BaseEmbeddingConfigSchema, EmbeddingConfigSchema, MagicContextConfigSchema;
+var DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE = 65, EXECUTE_THRESHOLD_CAP_MESSAGE = "execute_threshold is capped at 90% for cache safety: output capacity is reserved from the usable context window, and the remaining 10% absorbs mid-turn growth before the absolute 95% emergency wall. Use a value between 20 and 90.", DEFAULT_HISTORIAN_TIMEOUT_MS = 600000, DEFAULT_HISTORY_BUDGET_PERCENTAGE = 0.15, PROTECTED_TOKENS_MIN = 4000, DEFAULT_LOCAL_EMBEDDING_MODEL = "Xenova/all-MiniLM-L6-v2", PiThinkingLevelSchema, OmpThinkingLevelSchema, PiConfigSchema, PromptSurfacePresetSchema, PromptSurfaceModelKeySchema, PromptSurfaceToolKeySchema, PromptSurfaceConfigSchema, PER_HARNESS_MIGRATION_INVENTORY, PER_HARNESS_MODEL_KEYS, OcEntryObjectSchema, OcEntrySchema, PiEntryObjectSchema, PiEntrySchema, OmpEntryObjectSchema, OmpEntrySchema, OpenCodeHarnessBlockSchema, PiHarnessBlockSchema, OmpHarnessBlockSchema, OpenCodeTaskExecutionSchema, PiTaskExecutionSchema, OmpTaskExecutionSchema, DreamerOpenCodeHarnessBlockSchema, DreamerPiHarnessBlockSchema, DreamerOmpHarnessBlockSchema, ProfileOpenCodeModelBlockSchema, ProfilePiModelBlockSchema, ProfileOmpModelBlockSchema, ProfileHistorianSchema, ProfileDreamerSchema, ConfigProfileSchema, ConfigProfilesSchema, CronScheduleSchema, DreamTaskBaseConfigSchema, PromotionThresholdSchema, PrimerPromotionThresholdSchema, DreamTaskConfigSchema, ReviewUserMemoriesTaskConfigSchema, PromotePrimersTaskConfigSchema, DEFAULT_TASK_SCHEDULES2, DreamTasksSchema, AgentMetadataSchema, DreamerConfigSchema, HistorianConfigSchema, EmbeddingFallbackProviderSchema, BaseEmbeddingConfigSchema, EmbeddingConfigSchema, MagicContextConfigSchema;
 var init_magic_context = __esm(() => {
   init_zod();
   init_language_directive();
@@ -20836,8 +20836,8 @@ var init_magic_context = __esm(() => {
     smart_notes: object({
       retina_handoff: boolean2().default(false).describe("When true, dreamer skips smart notes whose surface conditions compiled to retina provider configs at authoring time. Default false keeps both paths active until the retina consumer is deployed.")
     }).default({ retina_handoff: false }).describe("Smart-note ownership transition controls."),
-    cache_ttl: union([string2(), object({ default: string2() }).catchall(string2())]).default("5m").describe(`How long Magic Context assumes the provider's cached prefix stays valid. This is MC's own deferral gate — it does not change the provider's actual cache lifetime. String (e.g. "5m", "1h", "30s") or per-model object ({ default: "5m", "model-id": "10m" }). Set to "never" to mean MC never assumes expiry (for lanes kept warm externally by a cache-keep tool) — disables the idle-TTL heuristic so MC never initiates a rebuild based on elapsed time. Provider-side extended TTL is a separate request-level concern (cache_control: { ttl } in the request body).`),
-    prompt_surface: PromptSurfaceConfigSchema.default({ default: "full" }).describe("Prompt-surface presets: default is full; models use bare model IDs, provider/model, or provider/* routing keys. Guidance and tool-description overrides are user-level only. On OpenCode and Pi, per-model routing applies to the guidance block only: tool descriptions are registered once per process, so they follow the default preset (a v1 plugin-surface limitation; per-model tool descriptions are planned for the OpenCode v2 plugin API once the SDK stabilizes)."),
+    cache_ttl: union([string2(), object({ default: string2() }).catchall(string2())]).default("5m").describe(`How long Magic Context assumes the provider's cached prefix stays valid. This is MC's own deferral gate — it does not change the provider's actual cache lifetime. String (e.g. "5m", "1h", "30s") or per-model object ({ default: "5m", "provider/model": "1h", "provider/*": "never" }); keys resolve most-specific first (exact provider/model, bare model ID, shorter dash-prefixes, then the provider/* wildcard, then default). Set to "never" to mean MC never assumes expiry (for lanes kept warm externally by a cache-keep tool) — disables the idle-TTL heuristic so MC never initiates a rebuild based on elapsed time. Provider-side extended TTL is a separate request-level concern (cache_control: { ttl } in the request body).`),
+    prompt_surface: PromptSurfaceConfigSchema.default({ default: "full" }).describe("Prompt-surface presets: default is full; models use bare model IDs, provider/model, or provider/* routing keys. Guidance and tool-description overrides are user-level only. OpenCode 1.x, Pi, and OMP register tool descriptions once per process (they follow the default preset). OpenCode 2 rewrites the five ctx_* descriptions per request from the draft model."),
     output_reserve: union([
       number2().min(0),
       object({ default: number2().min(0) }).catchall(number2().min(0))
@@ -20853,7 +20853,7 @@ var init_magic_context = __esm(() => {
     execute_threshold_tokens: object({
       default: number2().min(5000).max(2000000).optional()
     }).catchall(number2().min(5000).max(2000000)).optional().describe("Absolute token thresholds per model. When matched, overrides execute_threshold_percentage for that model. Accepts `default` for all models or per-model keys. Values above 90% × context_limit are clamped with a warning log. Min 5_000, max 2_000_000."),
-    protected_tokens: number2().int().min(4000).max(1e6).optional().describe("Positive integer token floor to protect from automatic reclaim (min: 4_000, max: 1_000_000). When omitted, the derived default is clamp(round(0.05 × usableSoft), min(16_000, round(0.08 × usableSoft)), 64_000)."),
+    protected_tokens: number2().int().min(PROTECTED_TOKENS_MIN).max(1e6).optional().describe("Positive integer token floor to protect from automatic reclaim (min: 4_000, max: 1_000_000). When omitted, the derived default is clamp(round(0.05 × usableSoft), min(16_000, round(0.08 × usableSoft)), 64_000)."),
     protected_tags: unknown().optional().describe("Deprecated: number of recent tags to protect. Ignored for behaviour; use protected_tokens instead.").meta({ deprecated: true }),
     clear_reasoning_age: number2().min(10).default(50).describe("Clear reasoning/thinking blocks older than N tags (default: 50)"),
     history_budget_percentage: number2().min(0.05).max(0.5).default(DEFAULT_HISTORY_BUDGET_PERCENTAGE).describe("Fraction of usable context (context_limit × execute_threshold) reserved for the session history block (default: 0.15)"),
@@ -21786,6 +21786,9 @@ function redactConfigValue(value) {
   }
   return typeof value;
 }
+function formatProtectedTokensBelowMinWarning(value) {
+  return `protected_tokens is a token floor (minimum ${PROTECTED_TOKENS_MIN}, default derived from the context window); ${value} looks like the old protected_tags count. Remove the key to use the default, or set a token count such as 16000.`;
+}
 function warnProtectedTagsDeprecationOnce() {
   if (!warnedProtectedTagsDeprecation) {
     warnedProtectedTagsDeprecation = true;
@@ -21876,6 +21879,11 @@ function parsePluginConfig(rawConfig, recoveredTopLevelKeys = []) {
     delete patched[key];
     const defaultVal = defaults[key];
     const reason = customMessagesByKey.get(key);
+    const invalidRawValue = rawConfig[key];
+    if (key === "protected_tokens" && typeof invalidRawValue === "number" && invalidRawValue < PROTECTED_TOKENS_MIN) {
+      warnings.push(formatProtectedTokensBelowMinWarning(invalidRawValue));
+      continue;
+    }
     warnings.push(`"${key}": invalid value (${redactConfigValue(rawConfig[key])}), using default ${JSON.stringify(defaultVal)}.${reason ? ` ${reason}` : ""}`);
   }
   const retryMigrated = migrateLegacyAgentEnabledInMemory(migrateDreamerV2(migrateLegacyExperimental(patched, preMigrationWarnings), preMigrationWarnings), preMigrationWarnings);
@@ -22122,6 +22130,7 @@ import { homedir as homedir11 } from "node:os";
 import { join as join13 } from "node:path";
 function detectConflicts(directory, options) {
   const compactionEnabled = options?.compactionEnabled ?? true;
+  const hostGeneration = options?.hostGeneration ?? "v1";
   const conflicts = {
     compactionAuto: false,
     compactionPrune: false,
@@ -22131,15 +22140,15 @@ function detectConflicts(directory, options) {
     omoAnthropicRecovery: false
   };
   const reasons = [];
-  let compactionResult = options?.resolvedCompaction ?? checkCompaction(directory);
+  let compactionResult = options?.resolvedCompaction ?? checkCompaction(directory, hostGeneration);
   if (process.env.OPENCODE_DISABLE_AUTOCOMPACT) {
     compactionResult = { auto: false, prune: false };
   }
-  if (compactionEnabled && compactionResult.auto) {
+  if (hostGeneration === "v1" && compactionEnabled && compactionResult.auto) {
     conflicts.compactionAuto = true;
     reasons.push(options?.resolvedCompaction ? "OpenCode auto-compaction is enabled (compaction.auto=true) (resolved config)" : "OpenCode auto-compaction is enabled (compaction.auto=true)");
   }
-  if (compactionEnabled && compactionResult.prune) {
+  if (hostGeneration === "v1" && compactionEnabled && compactionResult.prune) {
     conflicts.compactionPrune = true;
     reasons.push(options?.resolvedCompaction ? "OpenCode prune is enabled (compaction.prune=true) (resolved config)" : "OpenCode prune is enabled (compaction.prune=true)");
   }
@@ -22165,29 +22174,32 @@ function detectConflicts(directory, options) {
     hasConflict: reasons.length > 0,
     reasons,
     conflicts,
-    nativeCompaction: { auto: compactionResult.auto, prune: compactionResult.prune }
+    nativeCompaction: {
+      auto: compactionResult.auto,
+      prune: hostGeneration === "v1" ? compactionResult.prune : false
+    }
   };
 }
-function checkCompaction(directory) {
+function checkCompaction(directory, hostGeneration) {
   if (process.env.OPENCODE_DISABLE_AUTOCOMPACT) {
     return { auto: false, prune: false };
   }
-  const projectResult = readProjectCompaction(directory);
+  const projectResult = readProjectCompaction(directory, hostGeneration);
   if (projectResult.resolved)
     return projectResult;
-  const userResult = readUserCompaction();
+  const userResult = readUserCompaction(hostGeneration);
   if (userResult.resolved)
     return userResult;
   return { auto: true, prune: false };
 }
-function readProjectCompaction(directory) {
+function readProjectCompaction(directory, hostGeneration) {
   const dotOcJsonc = join13(directory, ".opencode", "opencode.jsonc");
   const dotOcJson = join13(directory, ".opencode", "opencode.json");
   const dotOcConfig = readJsoncFile(dotOcJsonc) ?? readJsoncFile(dotOcJson);
   if (dotOcConfig?.compaction) {
     const c = dotOcConfig.compaction;
-    if (c.auto !== undefined || c.prune !== undefined) {
-      return { auto: c.auto === true, prune: c.prune === true, resolved: true };
+    if (c.auto !== undefined || hostGeneration === "v1" && c.prune !== undefined || hostGeneration === "v2" && (c.keep?.tokens !== undefined || c.buffer !== undefined)) {
+      return resolvedCompactionBlock(c, hostGeneration);
     }
   }
   const rootJsonc = join13(directory, "opencode.jsonc");
@@ -22195,25 +22207,37 @@ function readProjectCompaction(directory) {
   const rootConfig = readJsoncFile(rootJsonc) ?? readJsoncFile(rootJson);
   if (rootConfig?.compaction) {
     const c = rootConfig.compaction;
-    if (c.auto !== undefined || c.prune !== undefined) {
-      return { auto: c.auto === true, prune: c.prune === true, resolved: true };
+    if (c.auto !== undefined || hostGeneration === "v1" && c.prune !== undefined || hostGeneration === "v2" && (c.keep?.tokens !== undefined || c.buffer !== undefined)) {
+      return resolvedCompactionBlock(c, hostGeneration);
     }
   }
   return { auto: false, prune: false, resolved: false };
 }
-function readUserCompaction() {
+function readUserCompaction(hostGeneration) {
   try {
     const paths = getOpenCodeConfigPaths({ binary: "opencode" });
     const config = readJsoncFile(paths.configJsonc) ?? readJsoncFile(paths.configJson);
     if (config?.compaction) {
       const c = config.compaction;
-      if (c.auto !== undefined || c.prune !== undefined) {
-        return { auto: c.auto === true, prune: c.prune === true, resolved: true };
+      if (c.auto !== undefined || hostGeneration === "v1" && c.prune !== undefined || hostGeneration === "v2" && (c.keep?.tokens !== undefined || c.buffer !== undefined)) {
+        return resolvedCompactionBlock(c, hostGeneration);
       }
     }
   } catch {}
   return { auto: false, prune: false, resolved: false };
 }
+function resolvedCompactionBlock(block, hostGeneration) {
+  if (hostGeneration === "v2") {
+    return {
+      auto: block.auto !== false,
+      prune: false,
+      resolved: true,
+      ...typeof block.keep?.tokens === "number" ? { keepTokens: block.keep.tokens } : {},
+      ...typeof block.buffer === "number" ? { buffer: block.buffer } : {}
+    };
+  }
+  return { auto: block.auto === true, prune: block.prune === true, resolved: true };
+}
 function checkDcpPlugin(directory) {
   const plugins = collectPluginEntries(directory);
   return plugins.some((p) => matchesPackageName(p, DCP_PACKAGE_NAMES));
@@ -26263,9 +26287,11 @@ class SubcModuleTransport {
         this.wrapupSessions.delete(args.sessionId);
     };
     const laneDeadlineMs = Date.now() + attemptTimeoutMs;
-    let releaseLane;
+    let releaseLane = () => {};
     try {
-      releaseLane = await this.acquireCorrectnessLane(args.sessionId, args.signal, laneDeadlineMs);
+      if (!args.bypassSessionLane) {
+        releaseLane = await this.acquireCorrectnessLane(args.sessionId, args.signal, laneDeadlineMs);
+      }
     } catch (error) {
       finishWrapupTracking();
       if (args.method === "state_sync" && isDeadlineFailure(error)) {
@@ -26367,12 +26393,13 @@ class SubcModuleTransport {
       args.onTimings?.(timings);
     }
   }
-  async authorityRequest(sessionId, projectRoot, method, body) {
+  async authorityRequest(sessionId, projectRoot, method, body, timeoutMs) {
     const response = await this.call({
       sessionId,
       projectRoot,
       method,
-      body: { ...body, method, v: 1 }
+      body: { ...body, method, v: 1 },
+      timeoutMs
     });
     if (isRecord3(response) && isRecord3(response.result))
       return response.result;
@@ -26432,6 +26459,20 @@ class SubcModuleTransport {
       throw new Error("mirror.pull omitted page");
     return { page: response.page };
   }
+  async mirrorMemory(args) {
+    const { projectRoot, ...body } = args;
+    const response = await this.authorityRequest(`mirror-memory:${args.module_row_id}`, projectRoot ?? this.bindRootForAuthority(), "mirror.memory", body, 1900);
+    return {
+      row: isRecord3(response.row) ? response.row : null
+    };
+  }
+  async memoryIdentityAck(args) {
+    const { projectRoot, ...body } = args;
+    const response = await this.authorityRequest(`memory-identity:${args.project}`, projectRoot ?? this.bindRootForAuthority(), "memory.identity.ack", body);
+    return {
+      acknowledged: typeof response.acknowledged === "number" ? response.acknowledged : 0
+    };
+  }
   async deleteSession(sessionId, projectRoot) {
     await this.call({
       sessionId,
@@ -27700,6 +27741,90 @@ function isSqliteLockError(error) {
 function tableExists(db, name) {
   return Boolean(db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name = ?").get(name));
 }
+function tableHasHarnessColumn(db, name) {
+  if (!tableExists(db, name))
+    return false;
+  return db.prepare(`PRAGMA table_info(${name})`).all().some((column) => column.name === "harness");
+}
+function deleteLosingOpenCode2Twin(db, table, joinColumns, newerPredicate) {
+  if (!tableHasHarnessColumn(db, table))
+    return;
+  const naturalJoin = joinColumns.map((column) => `oc.${column} = o2.${column}`).join(" AND ");
+  const o2On = naturalJoin ? `${naturalJoin} AND oc.harness = 'opencode'` : `oc.harness = 'opencode'`;
+  const ocOn = naturalJoin ? `${naturalJoin} AND o2.harness = 'opencode2'` : `o2.harness = 'opencode2'`;
+  db.exec(`
+        DELETE FROM ${table}
+        WHERE rowid IN (
+            SELECT o2.rowid
+            FROM ${table} AS o2
+            JOIN ${table} AS oc
+              ON ${o2On}
+            WHERE o2.harness = 'opencode2'
+              AND NOT (${newerPredicate})
+        );
+        DELETE FROM ${table}
+        WHERE rowid IN (
+            SELECT oc.rowid
+            FROM ${table} AS oc
+            JOIN ${table} AS o2
+              ON ${ocOn}
+            WHERE oc.harness = 'opencode'
+              AND (${newerPredicate})
+        );
+    `);
+}
+function relabelOpenCode2HarnessRows(db) {
+  deleteLosingOpenCode2Twin(db, "session_projects", ["session_id"], "o2.updated_at > oc.updated_at");
+  deleteLosingOpenCode2Twin(db, "primer_candidates", ["project_path", "session_id", "source_start_message_id", "source_end_message_id"], "o2.created_at > oc.created_at");
+  deleteLosingOpenCode2Twin(db, "transform_decisions", ["session_id", "message_id"], "o2.ts_ms > oc.ts_ms");
+  deleteLosingOpenCode2Twin(db, "message_history_orphan_sweep", [], "COALESCE(o2.last_swept_at, -1) > COALESCE(oc.last_swept_at, -1)");
+  if (tableHasHarnessColumn(db, "session_project_backfill_state")) {
+    db.exec(`
+            DELETE FROM session_project_backfill_state
+            WHERE harness = 'opencode2'
+              AND EXISTS (
+                  SELECT 1 FROM session_project_backfill_state WHERE harness = 'opencode'
+              )
+              AND NOT (
+                  (status = 'completed'
+                    AND (SELECT status FROM session_project_backfill_state WHERE harness = 'opencode')
+                        != 'completed')
+                  OR (
+                      status = (SELECT status FROM session_project_backfill_state WHERE harness = 'opencode')
+                      AND COALESCE(started_at, -1) > COALESCE(
+                          (SELECT started_at FROM session_project_backfill_state WHERE harness = 'opencode'),
+                          -1
+                      )
+                  )
+              );
+            DELETE FROM session_project_backfill_state
+            WHERE harness = 'opencode'
+              AND EXISTS (
+                  SELECT 1 FROM session_project_backfill_state WHERE harness = 'opencode2'
+              )
+              AND (
+                  ((SELECT status FROM session_project_backfill_state WHERE harness = 'opencode2') = 'completed'
+                    AND status != 'completed')
+                  OR (
+                      status = (SELECT status FROM session_project_backfill_state WHERE harness = 'opencode2')
+                      AND COALESCE(
+                          (SELECT started_at FROM session_project_backfill_state WHERE harness = 'opencode2'),
+                          -1
+                      ) > COALESCE(started_at, -1)
+                  )
+              );
+        `);
+  }
+  const tables = new Set([
+    ...V85_OPENCODE2_RELABEL_TABLES,
+    ...V85_OPTIONAL_OPENCODE2_RELABEL_TABLES
+  ]);
+  for (const table of tables) {
+    if (!tableHasHarnessColumn(db, table))
+      continue;
+    db.exec(`UPDATE ${table} SET harness = 'opencode' WHERE harness = 'opencode2'`);
+  }
+}
 function healMismatchedTierClose(db, table, hasLegacy) {
   if (!tableExists(db, table))
     return;
@@ -27901,7 +28026,7 @@ function runMigrations(db) {
     log3(`[migrations] upstream migration lane now: ${MIGRATIONS[MIGRATIONS.length - 1].version}`);
   }
 }
-var FORK_MIGRATION_VERSION_FLOOR = 1e4, MigrationLockBusyError, MIGRATIONS, LATEST_MIGRATION_VERSION;
+var FORK_MIGRATION_VERSION_FLOOR = 1e4, MigrationLockBusyError, V85_OPENCODE2_RELABEL_TABLES, V85_OPTIONAL_OPENCODE2_RELABEL_TABLES, MIGRATIONS, LATEST_MIGRATION_VERSION;
 var init_migrations = __esm(() => {
   init_compartment_parser();
   init_logger();
@@ -27913,6 +28038,30 @@ var init_migrations = __esm(() => {
       this.name = "MigrationLockBusyError";
     }
   };
+  V85_OPENCODE2_RELABEL_TABLES = [
+    "tags",
+    "pending_ops",
+    "source_contents",
+    "compartments",
+    "compartment_chunk_embeddings",
+    "session_projects",
+    "compartment_events",
+    "compression_depth",
+    "session_facts",
+    "primer_candidates",
+    "notes",
+    "message_history_index",
+    "message_history_source",
+    "pending_session_cleanup",
+    "message_history_orphan_sweep",
+    "session_meta",
+    "subagent_invocations",
+    "historian_runs",
+    "transform_decisions",
+    "recomp_compartments",
+    "recomp_facts"
+  ];
+  V85_OPTIONAL_OPENCODE2_RELABEL_TABLES = ["session_project_backfill_state"];
   MIGRATIONS = [
     {
       version: 1,
@@ -29975,6 +30124,13 @@ var init_migrations = __esm(() => {
         ensureColumn(db, "session_meta", "protected_tokens_effective", "INTEGER");
         ensureColumn(db, "session_meta", "protected_tokens_pre_snapshot", "TEXT");
       }
+    },
+    {
+      version: 85,
+      description: "relabel OpenCode 1.x mis-tagged opencode2 session rows",
+      up(db) {
+        relabelOpenCode2HarnessRows(db);
+      }
     }
   ];
   LATEST_MIGRATION_VERSION = MIGRATIONS.reduce((max, m) => Math.max(max, m.version), 0);
@@ -30054,15 +30210,20 @@ var init_tool_definition_tokens = __esm(() => {
 import { existsSync as existsSync19, readdirSync as readdirSync2, statSync as statSync9 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
 import { isAbsolute as isAbsolute6, join as join16 } from "node:path";
-function openCodeDataDir() {
-  return join16(process.env.XDG_DATA_HOME ?? join16(homedir13(), ".local", "share"), "opencode");
+function openCodeHostGenerationFromVersion(version) {
+  const major = Number.parseInt(version?.match(/\d+/)?.[0] ?? "", 10);
+  return Number.isFinite(major) && major >= 2 ? "v2" : "v1";
+}
+function openCodeDataDir(env = process.env, dataHome) {
+  return join16(dataHome ?? env.XDG_DATA_HOME ?? join16(homedir13(), ".local", "share"), "opencode");
 }
-function environmentKey(dataDir) {
+function environmentKey(dataDir, hostGeneration, channel, env) {
   return [
+    hostGeneration,
     dataDir,
-    process.env.OPENCODE_DB ?? "",
-    process.env.OPENCODE_DISABLE_CHANNEL_DB ?? "",
-    process.env.OPENCODE_CHANNEL ?? ""
+    env.OPENCODE_DB ?? "",
+    env.OPENCODE_DISABLE_CHANNEL_DB ?? "",
+    channel ?? env.OPENCODE_CHANNEL ?? ""
   ].join("\x00");
 }
 function channelPath(dataDir, channel) {
@@ -30094,8 +30255,8 @@ function discoverOpenCodeDb(dataDir) {
   const channel = name === "opencode.db" ? null : name.slice("opencode-".length, -".db".length) || null;
   return { path: existing.path, source: "discovered", channel };
 }
-function resolveFresh(dataDir) {
-  const explicit = process.env.OPENCODE_DB;
+function resolveV1Fresh(dataDir, env = process.env) {
+  const explicit = env.OPENCODE_DB;
   if (explicit !== undefined && explicit.length > 0) {
     if (explicit === ":memory:") {
       return { path: explicit, source: "OPENCODE_DB", channel: null };
@@ -30106,24 +30267,47 @@ function resolveFresh(dataDir) {
       channel: null
     };
   }
-  const disableChannelDb = process.env.OPENCODE_DISABLE_CHANNEL_DB;
+  const disableChannelDb = env.OPENCODE_DISABLE_CHANNEL_DB;
   if (disableChannelDb === "1" || disableChannelDb === "true") {
     return { path: join16(dataDir, "opencode.db"), source: "default", channel: null };
   }
-  const channel = process.env.OPENCODE_CHANNEL;
+  const channel = env.OPENCODE_CHANNEL;
   if (channel !== undefined && channel.length > 0) {
     return { path: channelPath(dataDir, channel), source: "channel", channel };
   }
   return discoverOpenCodeDb(dataDir);
 }
-function resolveOpenCodeDbPath() {
-  const dataDir = openCodeDataDir();
-  const key = environmentKey(dataDir);
+function sourceOpenCodeDatabaseFilename(hostGeneration, channel, env = process.env) {
+  if (hostGeneration === "v1") {
+    const explicit = env.OPENCODE_DB;
+    if (explicit !== undefined && explicit.length > 0)
+      return explicit;
+    if (env.OPENCODE_DISABLE_CHANNEL_DB === "1" || env.OPENCODE_DISABLE_CHANNEL_DB === "true") {
+      return "opencode.db";
+    }
+    return ["latest", "beta", "prod"].includes(channel) ? "opencode.db" : `opencode-${channel}.db`;
+  }
+  return env.OPENCODE_DB ?? (["latest", "dev", "beta", "next", "prod"].includes(channel) || env.OPENCODE_DISABLE_CHANNEL_DB === "1" || env.OPENCODE_DISABLE_CHANNEL_DB === "true" ? "opencode.db" : `opencode-${channel.replace(/[^a-zA-Z0-9._-]/g, "")}.db`);
+}
+function resolveV2Fresh(dataDir, channel, env) {
+  const filename = sourceOpenCodeDatabaseFilename("v2", channel, env);
+  const explicit = env.OPENCODE_DB !== undefined;
+  return {
+    path: filename === ":memory:" ? filename : join16(dataDir, filename),
+    source: explicit ? "OPENCODE_DB" : env.OPENCODE_CHANNEL ? "channel" : "default",
+    channel: explicit ? null : channel
+  };
+}
+function resolveOpenCodeDbPath(hostGeneration = "v1", options = {}) {
+  const env = options.env ?? process.env;
+  const dataDir = openCodeDataDir(env, options.dataHome);
+  const channel = options.channel ?? env.OPENCODE_CHANNEL;
+  const key = environmentKey(dataDir, hostGeneration, channel, env);
   if (cachedResolution?.key === key && (!cachedResolution.existed || existsSync19(cachedResolution.resolution.path))) {
     if (cachedResolution.existed)
       return cachedResolution.resolution;
   }
-  const resolution = resolveFresh(dataDir);
+  const resolution = hostGeneration === "v2" ? resolveV2Fresh(dataDir, channel ?? "latest", env) : resolveV1Fresh(dataDir, env);
   cachedResolution = {
     key,
     resolution,
@@ -30131,6 +30315,29 @@ function resolveOpenCodeDbPath() {
   };
   return resolution;
 }
+function schemaTableNames(db, schema = "main") {
+  const rows = db.prepare(`SELECT name FROM ${schema}.sqlite_master WHERE type = 'table' AND name IN ('message', 'part', 'session', 'project', 'session_message')`).all();
+  return new Set(rows.flatMap((row) => typeof row.name === "string" ? [row.name] : []));
+}
+function detectOpenCodeStoreGeneration(db, schema = "main") {
+  const tables = schemaTableNames(db, schema);
+  const hasV1Messages = tables.has("message") && tables.has("part");
+  if (hasV1Messages)
+    return "v1";
+  if (tables.has("session_message"))
+    return "v2";
+  if (tables.has("session") || tables.has("project"))
+    return "v1";
+  return "unknown";
+}
+function assertOpenCodeStoreGeneration(db, expected, path, schema = "main") {
+  const actual = detectOpenCodeStoreGeneration(db, schema);
+  if (actual === expected)
+    return;
+  if (actual === "unknown")
+    return;
+  throw new Error(`OpenCode store generation mismatch at ${path}: expected ${expected}, found ${actual}; refusing generation-specific database access`);
+}
 function openCodeDbPathExists(resolution = resolveOpenCodeDbPath()) {
   return resolution.path !== ":memory:" && existsSync19(resolution.path);
 }
@@ -30415,7 +30622,7 @@ function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
       tag_id INTEGER,
       session_id TEXT,
       content TEXT,
-      created_at INTEGER,
+      created_at INTEGER, -- epoch ms; Date.now() on source writes, preserved on session clones
       harness TEXT NOT NULL DEFAULT 'opencode',
       PRIMARY KEY(session_id, tag_id)
     );
@@ -30439,7 +30646,7 @@ function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
       p1_embedding BLOB,
       p1_embedding_model_id TEXT,
       legacy INTEGER NOT NULL DEFAULT 0,
-      created_at INTEGER NOT NULL,
+      created_at INTEGER NOT NULL, -- epoch ms (Date.now())
       harness TEXT NOT NULL DEFAULT 'opencode',
       UNIQUE(session_id, sequence)
     );
@@ -30458,7 +30665,7 @@ function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
       model_id TEXT NOT NULL,
       dims INTEGER NOT NULL,
       vector BLOB NOT NULL,
-      created_at INTEGER NOT NULL,
+      created_at INTEGER NOT NULL, -- epoch ms (Date.now())
       UNIQUE(compartment_id, model_id, window_index)
     );
     CREATE INDEX IF NOT EXISTS idx_cce_session ON compartment_chunk_embeddings(session_id);
@@ -30481,7 +30688,7 @@ function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
       kind TEXT NOT NULL,
       at_compartment INTEGER,
       fields_json TEXT NOT NULL DEFAULT '{}',
-      created_at INTEGER NOT NULL,
+      created_at INTEGER NOT NULL, -- epoch ms (Date.now())
       harness TEXT NOT NULL DEFAULT 'opencode'
     );
     CREATE INDEX IF NOT EXISTS idx_compartment_events_session
@@ -30510,7 +30717,7 @@ function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
       session_id TEXT NOT NULL,
       category TEXT NOT NULL,
       content TEXT NOT NULL,
-      created_at INTEGER NOT NULL,
+      created_at INTEGER NOT NULL, -- epoch ms (Date.now())
       updated_at INTEGER NOT NULL,
       harness TEXT NOT NULL DEFAULT 'opencode'
     );
@@ -30529,7 +30736,7 @@ function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
       source_message_time INTEGER NOT NULL,
       question_embedding BLOB,
       question_embedding_model_id TEXT,
-      created_at INTEGER NOT NULL,
+      created_at INTEGER NOT NULL, -- epoch ms (Date.now())
       UNIQUE(project_path, harness, session_id, source_start_message_id, source_end_message_id)
     );
     CREATE INDEX IF NOT EXISTS idx_primer_candidates_project_time
@@ -30552,7 +30759,7 @@ function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
       answer_refreshed_at INTEGER,
       source_candidate_ids TEXT NOT NULL DEFAULT '[]',
       source_candidate_provenance TEXT,
-      created_at INTEGER NOT NULL,
+      created_at INTEGER NOT NULL, -- epoch ms (Date.now())
       updated_at INTEGER NOT NULL
     );
     CREATE INDEX IF NOT EXISTS idx_primers_project_status_observed
@@ -30665,7 +30872,7 @@ function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
       job_id TEXT,
       cursor TEXT,
       status TEXT NOT NULL DEFAULT 'pending',
-      created_at INTEGER NOT NULL DEFAULT 0,
+      created_at INTEGER NOT NULL DEFAULT 0, -- epoch ms (Date.now())
       updated_at INTEGER NOT NULL DEFAULT 0,
       UNIQUE(session_id, request_key)
     );
@@ -30706,7 +30913,7 @@ function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
       shadow_epoch INTEGER NOT NULL DEFAULT 0,
       corpus_hash TEXT NOT NULL DEFAULT '',
       coverage_json TEXT NOT NULL DEFAULT '{}',
-      created_at INTEGER NOT NULL DEFAULT 0,
+      created_at INTEGER NOT NULL DEFAULT 0, -- epoch ms (Date.now())
       UNIQUE(dedup_key, cohort_key)
     );
     CREATE INDEX IF NOT EXISTS idx_embedding_measurement_session
@@ -31129,7 +31336,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       importance_avg REAL,
       discarded_last INTEGER NOT NULL DEFAULT 0,
       legacy INTEGER NOT NULL DEFAULT 0,
-      created_at INTEGER NOT NULL
+      created_at INTEGER NOT NULL -- epoch ms (Date.now())
     );
     CREATE INDEX IF NOT EXISTS idx_historian_runs_session
       ON historian_runs(session_id, created_at DESC);
@@ -31182,7 +31389,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       importance INTEGER NOT NULL DEFAULT 50,
       episode_type TEXT,
       pass_number INTEGER NOT NULL,
-      created_at INTEGER NOT NULL,
+      created_at INTEGER NOT NULL, -- epoch ms (Date.now())
       harness TEXT NOT NULL DEFAULT 'opencode',
       UNIQUE(session_id, sequence)
     );
@@ -31193,7 +31400,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       category TEXT NOT NULL,
       content TEXT NOT NULL,
       pass_number INTEGER NOT NULL,
-      created_at INTEGER NOT NULL,
+      created_at INTEGER NOT NULL, -- epoch ms (Date.now())
       harness TEXT NOT NULL DEFAULT 'opencode'
     );
 
@@ -31526,7 +31733,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
     `);
   ensureColumn(db, "workspaces", "share_categories", `TEXT NOT NULL DEFAULT '["CONSTRAINTS"]'`);
 }
-var databases, pendingAsyncOpens, persistenceByDatabase, persistenceErrorByDatabase, pathByDatabase, LATEST_SUPPORTED_VERSION = 84, BOOT_SQLITE_BUSY_TIMEOUT_MS = 5000, PERMISSIONS_ENFORCEABLE, RPC_DISCOVERY_PARSE_GRACE_MS, defaultRpcDiscoveryFs, rpcDiscoveryFs, sqlitePragmaConfig, CHANNEL2_CLAIM_TTL_MS;
+var databases, pendingAsyncOpens, persistenceByDatabase, persistenceErrorByDatabase, pathByDatabase, LATEST_SUPPORTED_VERSION = 85, BOOT_SQLITE_BUSY_TIMEOUT_MS = 5000, PERMISSIONS_ENFORCEABLE, RPC_DISCOVERY_PARSE_GRACE_MS, defaultRpcDiscoveryFs, rpcDiscoveryFs, sqlitePragmaConfig, CHANNEL2_CLAIM_TTL_MS;
 var init_storage_db = __esm(async () => {
   init_data_path();
   init_logger();
@@ -32683,6 +32890,81 @@ var init_doctor_repair_db = __esm(async () => {
   ];
 });
 
+// src/commands/doctor-hidden-sessions.ts
+function parseMetadata(value) {
+  if (value && typeof value === "object" && !Array.isArray(value)) {
+    return value;
+  }
+  if (typeof value !== "string")
+    return null;
+  try {
+    const parsed = JSON.parse(value);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+function listHiddenSessionsFromDatabase(database) {
+  const columns = new Set(database.prepare("PRAGMA table_info(session)").all().flatMap((row) => row && typeof row === "object" && typeof row.name === "string" ? [row.name] : []));
+  if (!columns.has("metadata"))
+    return [];
+  const title = columns.has("title") ? "title" : "'' AS title";
+  const directory = columns.has("directory") ? "directory" : "'' AS directory";
+  const updatedAt = columns.has("time_updated") ? "time_updated" : columns.has("updated_at") ? "updated_at AS time_updated" : "NULL AS time_updated";
+  const rows = database.prepare(`SELECT id, ${title}, ${directory}, ${updatedAt}, metadata
+             FROM session
+             WHERE metadata IS NOT NULL
+             ORDER BY time_updated DESC, id ASC`).all();
+  return rows.flatMap((row) => {
+    const metadata = parseMetadata(row.metadata);
+    if (metadata?.magic_context !== "hidden-run" || typeof row.id !== "string")
+      return [];
+    const role = metadata.role;
+    return [
+      {
+        id: row.id,
+        title: typeof row.title === "string" ? row.title : "",
+        directory: typeof row.directory === "string" ? row.directory : "",
+        role: role === "historian" || role === "dreamer" ? role : "unknown",
+        updatedAt: typeof row.time_updated === "number" ? row.time_updated : null
+      }
+    ];
+  });
+}
+async function runListHiddenSessions() {
+  const resolution = resolveOpenCodeDbPath("v2");
+  if (!openCodeDbPathExists(resolution)) {
+    console.log(`No OpenCode 2 session database found at ${resolution.path}.`);
+    return 0;
+  }
+  const db = openExistingDatabase(resolution.path, { readonly: true });
+  if (!db) {
+    console.log(`No OpenCode 2 session database found at ${resolution.path}.`);
+    return 0;
+  }
+  try {
+    assertOpenCodeStoreGeneration(db, "v2", resolution.path);
+    const sessions = listHiddenSessionsFromDatabase(db);
+    if (sessions.length === 0) {
+      console.log("No Magic Context hidden-run sessions found.");
+      return 0;
+    }
+    console.log(`Magic Context hidden-run sessions (${sessions.length}):`);
+    for (const session of sessions) {
+      const location = session.directory ? `  ${session.directory}` : "";
+      console.log(`- ${session.id}  ${session.role}  ${session.title}${location}`);
+    }
+    console.log("These are visible OpenCode 2 root sessions and are never deleted by Magic Context. Remove unwanted sessions manually in OpenCode.");
+    return 0;
+  } finally {
+    db.close();
+  }
+}
+var init_doctor_hidden_sessions = __esm(async () => {
+  init_opencode_db_path();
+  await init_database_access();
+});
+
 // src/lib/migration-paths.ts
 function getOpenCodeDatabasePath() {
   return resolveOpenCodeDbPath().path;
@@ -33291,6 +33573,7 @@ function migrateOpenCodeSessionToPi(opts) {
   if (db === null) {
     throw new Error(`OpenCode database not found at ${opencodeDbPath}; nothing to migrate.`);
   }
+  assertOpenCodeStoreGeneration(db, "v1", opencodeDbPath);
   let cortexkitDb;
   let ownsCortexkitDb = false;
   let cortexkitSchemaVersionBefore = null;
@@ -33560,6 +33843,7 @@ var DEFAULT_PROVIDER = "openai-codex", DEFAULT_MODEL = "gpt-5.5", MIGRATION_COMP
           FROM migration_pending WHERE migration_key = ?`;
 var init_migrate = __esm(async () => {
   init_data_path();
+  init_opencode_db_path();
   init_atomic_write();
   init_migration_paths();
   init_paths();
@@ -33969,6 +34253,7 @@ async function runMigrateSessionCli(args) {
     if (opencodeDb === null) {
       throw new Error(`OpenCode database not found at ${opencodeDbPath}; nothing to migrate.`);
     }
+    assertOpenCodeStoreGeneration(opencodeDb, "v1", opencodeDbPath);
     contextDb = dryRun ? openExistingContextDatabase(contextDbPath, { readonly: true }) : openExistingContextDatabaseForMutation(contextDbPath);
     if (contextDb === null) {
       throw new Error(`Magic Context database not found at ${contextDbPath}; nothing to migrate.`);
@@ -34089,6 +34374,7 @@ var init_migrate_session = __esm(async () => {
   init_storage_project_state();
   init_module_transport();
   init_data_path();
+  init_opencode_db_path();
   init_migration_paths();
   init_prompts();
   await __promiseAll([
@@ -34561,6 +34847,11 @@ function parsePiConfig(rawConfig, recoveredTopLevelKeys = []) {
     }
     delete patched[key];
     const defaultValue = defaults[key];
+    const invalidRawValue = rawConfig[key];
+    if (key === "protected_tokens" && typeof invalidRawValue === "number" && invalidRawValue < PROTECTED_TOKENS_MIN) {
+      warnings.push(`protected_tokens is a token floor (minimum ${PROTECTED_TOKENS_MIN}, default derived from the context window); ${invalidRawValue} looks like the old protected_tags count. Remove the key to use the default, or set a token count such as 16000.`);
+      continue;
+    }
     warnings.push(`"${key}": invalid value (${redactConfigValue2(rawConfig[key])}), using default ${JSON.stringify(defaultValue)}.`);
   }
   const retryParsed = MagicContextConfigSchema.safeParse(patched);
@@ -36384,12 +36675,43 @@ function listShadowBackfillStalls(db, projectIdentity) {
 }
 var SHADOW_BACKFILL_PROVENANCE_KEY = "_magicContextShadowBackfill";
 
+// ../plugin/src/shared/auto-update-provenance.ts
+import { existsSync as existsSync28, readFileSync as readFileSync17 } from "node:fs";
+function readAutoUpdateCheckState(path) {
+  if (!existsSync28(path))
+    return null;
+  try {
+    const value = JSON.parse(readFileSync17(path, "utf-8"));
+    if (!value || typeof value !== "object" || Array.isArray(value))
+      return null;
+    const raw = value;
+    const state = {};
+    if (typeof raw.lastCheckedMs === "number" && Number.isFinite(raw.lastCheckedMs)) {
+      state.lastCheckedMs = raw.lastCheckedMs;
+    }
+    if (typeof raw.updaterPinnedSpec === "string" && raw.updaterPinnedSpec.length > 0) {
+      state.updaterPinnedSpec = raw.updaterPinnedSpec;
+    }
+    if (typeof raw.updaterPinnedAt === "number" && Number.isFinite(raw.updaterPinnedAt)) {
+      state.updaterPinnedAt = raw.updaterPinnedAt;
+    }
+    return state;
+  } catch {
+    return null;
+  }
+}
+function isUpdaterPinnedSpec(state, configuredSpec) {
+  return state?.updaterPinnedSpec === configuredSpec && typeof state.updaterPinnedAt === "number" && Number.isFinite(state.updaterPinnedAt);
+}
+var AUTO_UPDATE_CHECK_STATE_FILENAME = "last-update-check.json";
+var init_auto_update_provenance = () => {};
+
 // ../plugin/src/shared/tui-config.ts
 import {
   chmodSync as chmodSync5,
-  existsSync as existsSync28,
+  existsSync as existsSync29,
   mkdirSync as mkdirSync9,
-  readFileSync as readFileSync17,
+  readFileSync as readFileSync18,
   renameSync as renameSync6,
   statSync as statSync13,
   writeFileSync as writeFileSync6
@@ -36437,9 +36759,9 @@ function resolveTuiConfigPath(configDirOverride) {
   const configDir = configDirOverride ?? getOpenCodeConfigPaths({ binary: "opencode" }).configDir;
   const jsoncPath = join24(configDir, "tui.jsonc");
   const jsonPath = join24(configDir, "tui.json");
-  if (existsSync28(jsoncPath))
+  if (existsSync29(jsoncPath))
     return jsoncPath;
-  if (existsSync28(jsonPath))
+  if (existsSync29(jsonPath))
     return jsonPath;
   return jsoncPath;
 }
@@ -36447,8 +36769,8 @@ function ensureTuiPluginEntry(options = {}) {
   try {
     const configPath = resolveTuiConfigPath(options.configDir);
     let config = {};
-    if (existsSync28(configPath)) {
-      const raw = readFileSync17(configPath, "utf-8");
+    if (existsSync29(configPath)) {
+      const raw = readFileSync18(configPath, "utf-8");
       config = import_comment_json8.parse(raw) ?? {};
     }
     const plugins = Array.isArray(config.plugin) ? [...config.plugin] : [];
@@ -36500,7 +36822,7 @@ var init_tui_config = __esm(() => {
 });
 
 // src/lib/diagnostics-opencode.ts
-import { existsSync as existsSync29, readdirSync as readdirSync4, readFileSync as readFileSync18, statSync as statSync14 } from "node:fs";
+import { existsSync as existsSync30, readdirSync as readdirSync4, readFileSync as readFileSync19, statSync as statSync14 } from "node:fs";
 import { createRequire as createRequire4 } from "node:module";
 import { join as join25 } from "node:path";
 function getSelfVersion() {
@@ -36520,8 +36842,8 @@ function getPluginCacheInfo() {
   let cached;
   for (const installedPkgPath of getOpenCodePluginPackageJsonPaths()) {
     try {
-      if (existsSync29(installedPkgPath)) {
-        const pkg = JSON.parse(readFileSync18(installedPkgPath, "utf-8"));
+      if (existsSync30(installedPkgPath)) {
+        const pkg = JSON.parse(readFileSync19(installedPkgPath, "utf-8"));
         cached = typeof pkg.version === "string" ? pkg.version : undefined;
         if (cached)
           break;
@@ -36537,7 +36859,7 @@ function getStorageResolution() {
 }
 function fileSize(path) {
   try {
-    return existsSync29(path) ? statSync14(path).size : 0;
+    return existsSync30(path) ? statSync14(path).size : 0;
   } catch {
     return 0;
   }
@@ -36549,10 +36871,10 @@ function sanitizeValue(value) {
   return sanitizeConfigValue(value);
 }
 function readConfig3(path) {
-  if (!existsSync29(path))
+  if (!existsSync30(path))
     return { value: null };
   try {
-    const raw = readFileSync18(path, "utf-8");
+    const raw = readFileSync19(path, "utf-8");
     const value = import_comment_json9.parse(raw);
     return { value };
   } catch (error) {
@@ -36577,7 +36899,7 @@ function configHasPluginEntry(config) {
 }
 function parseHistorianDumpMeta(path) {
   try {
-    const xml = readFileSync18(path, "utf-8");
+    const xml = readFileSync19(path, "utf-8");
     const parsed = parseCompartmentOutput(xml);
     const factCountByCategory = {};
     for (const fact of parsed.facts) {
@@ -36610,7 +36932,7 @@ function parseHistorianDumpMeta(path) {
   }
 }
 function listDumpsInDir(dir, limit) {
-  if (!existsSync29(dir))
+  if (!existsSync30(dir))
     return { count: 0, recent: [] };
   try {
     const entries = readdirSync4(dir).filter((name) => name.endsWith(".xml")).map((name) => {
@@ -36733,7 +37055,7 @@ function collectRecentSessionsFromDatabase(database) {
     return [{ sessionId, title, directory, lastActiveAt, parentSessionId }];
   });
 }
-async function collectRecentSessions(resolution) {
+async function collectRecentSessions(resolution, hostGeneration) {
   const opencodeDbPath = resolution.path;
   if (!openCodeDbPathExists(resolution))
     return [];
@@ -36750,6 +37072,7 @@ async function collectRecentSessions(resolution) {
   let db = null;
   try {
     db = new DatabaseClass(opencodeDbPath, { readonly: true });
+    assertOpenCodeStoreGeneration(db, hostGeneration, opencodeDbPath);
     return collectRecentSessionsFromDatabase(db);
   } catch {
     return [];
@@ -36761,7 +37084,7 @@ async function collectRecentSessions(resolution) {
 }
 async function collectHistorianFailures(storageDirPath) {
   const contextDbPath = join25(storageDirPath, "context.db");
-  if (!existsSync29(contextDbPath))
+  if (!existsSync30(contextDbPath))
     return [];
   if (typeof globalThis.Bun === "undefined") {
     return [];
@@ -36795,7 +37118,7 @@ async function collectHistorianFailures(storageDirPath) {
 }
 async function collectHistorianRuns(storageDirPath) {
   const contextDbPath = join25(storageDirPath, "context.db");
-  if (!existsSync29(contextDbPath))
+  if (!existsSync30(contextDbPath))
     return [];
   if (typeof globalThis.Bun === "undefined")
     return [];
@@ -36874,11 +37197,12 @@ async function collectDiagnostics() {
   } catch (error) {
     console.warn(`[magic-context] Could not load Magic Context config to resolve compaction mode; ` + `preserving existing native compaction fields. ` + `(${error instanceof Error ? error.message : String(error)})`);
   }
-  const conflictResult = detectConflicts(process.cwd(), { compactionEnabled });
-  const openCodeDatabaseResolution = resolveOpenCodeDbPath();
-  const recentSessions = await collectRecentSessions(openCodeDatabaseResolution);
   const opencodeInstallations = describeOpenCodeInstallations(detectOpenCodeInstallations());
   const activeInstallation = opencodeInstallations[0];
+  const hostGeneration = openCodeHostGenerationFromVersion(activeInstallation?.version);
+  const conflictResult = detectConflicts(process.cwd(), { compactionEnabled, hostGeneration });
+  const openCodeDatabaseResolution = resolveOpenCodeDbPath(hostGeneration);
+  const recentSessions = await collectRecentSessions(openCodeDatabaseResolution, hostGeneration);
   let openCodeInstallKind = "none";
   if (activeInstallation)
     openCodeInstallKind = activeInstallation.kind;
@@ -36896,7 +37220,7 @@ async function collectDiagnostics() {
     opencodeConfigHasPlugin: configHasPluginEntry(opencodeConfig.value),
     tuiConfigHasPlugin: configHasPluginEntry(tuiConfig.value),
     magicContextConfig: {
-      exists: existsSync29(configPaths.magicContextConfig),
+      exists: existsSync30(configPaths.magicContextConfig),
       ...magicContextConfig.error ? { parseError: magicContextConfig.error } : {},
       flags: sanitizeValue(magicContextConfig.value ?? {}) ?? {}
     },
@@ -36904,7 +37228,7 @@ async function collectDiagnostics() {
     storageDir: {
       path: storageDirPath,
       source: storageResolution.source,
-      exists: existsSync29(storageDirPath),
+      exists: existsSync30(storageDirPath),
       contextDbSizeBytes: fileSize(contextDbPath)
     },
     openCodeDatabase: {
@@ -37131,7 +37455,7 @@ var init_embedding_local = __esm(() => {
 
 // src/lib/embedding-runtime.ts
 import { spawnSync as spawnSync6 } from "node:child_process";
-import { existsSync as existsSync30, readFileSync as readFileSync19 } from "node:fs";
+import { existsSync as existsSync31, readFileSync as readFileSync20 } from "node:fs";
 import { createRequire as createRequire5 } from "node:module";
 import { dirname as dirname16, join as join26, sep } from "node:path";
 function describeError(error) {
@@ -37278,7 +37602,7 @@ function expectedBinaryRelPath(platform, arch) {
 }
 function onnxRuntimeNodeVersion(packageDir) {
   try {
-    const parsed = JSON.parse(readFileSync19(join26(packageDir, "package.json"), "utf8"));
+    const parsed = JSON.parse(readFileSync20(join26(packageDir, "package.json"), "utf8"));
     return typeof parsed.version === "string" ? parsed.version : undefined;
   } catch {
     return;
@@ -37327,7 +37651,7 @@ function formatLocalEmbeddingRuntimeWasmSelected(status) {
 function requireNodeWasmBundle(probe, candidates) {
   if (probe.state === "failed")
     return probe;
-  const bundlePath = candidates.find((candidate) => existsSync30(candidate));
+  const bundlePath = candidates.find((candidate) => existsSync31(candidate));
   return bundlePath ? probe : {
     state: "failed",
     reason: `functional Node WASM Transformers bundle is missing (checked ${candidates.join(", ")})`
@@ -37352,7 +37676,7 @@ function checkLocalEmbeddingRuntimeAt(installRoot, platform = process.platform,
   }
   const packageDir = join26(installRoot, "node_modules", "onnxruntime-node");
   let native;
-  if (!existsSync30(join26(packageDir, "package.json"))) {
+  if (!existsSync31(join26(packageDir, "package.json"))) {
     native = { state: "package-missing", packageDir };
   } else {
     const rel = expectedBinaryRelPath(platform, arch);
@@ -37363,7 +37687,7 @@ function checkLocalEmbeddingRuntimeAt(installRoot, platform = process.platform,
       };
     } else {
       const binaryPath = join26(packageDir, rel);
-      native = existsSync30(binaryPath) ? probeOnnxRuntimeNodeLoad(packageDir) ?? { state: "ok", binaryPath } : {
+      native = existsSync31(binaryPath) ? probeOnnxRuntimeNodeLoad(packageDir) ?? { state: "ok", binaryPath } : {
         state: "binary-missing",
         packageDir,
         expectedBinary: binaryPath,
@@ -37374,7 +37698,7 @@ function checkLocalEmbeddingRuntimeAt(installRoot, platform = process.platform,
   return withWasmFallback(native, () => probeWasmRuntimeAt(installRoot));
 }
 function checkLocalEmbeddingRuntime(installRoots, platform = process.platform, arch = process.arch, runtimePreference = "auto", host) {
-  const existing = installRoots.filter((root) => existsSync30(root));
+  const existing = installRoots.filter((root) => existsSync31(root));
   if (existing.length === 0) {
     return {
       state: "unknown",
@@ -37421,7 +37745,7 @@ function probeWasmRuntimeByResolution(pluginDir) {
   }
 }
 function checkLocalEmbeddingRuntimeByResolution(pluginDir, platform = process.platform, arch = process.arch, runtimePreference = "auto", host) {
-  if (!existsSync30(join26(pluginDir, "package.json"))) {
+  if (!existsSync31(join26(pluginDir, "package.json"))) {
     return { state: "unknown", reason: "plugin package dir not found" };
   }
   const selectedRuntime = resolveLocalEmbeddingRuntime(runtimePreference, host);
@@ -37463,7 +37787,7 @@ function checkLocalEmbeddingRuntimeByResolution(pluginDir, platform = process.pl
     native = probeOnnxRuntimeNodeLoad(onnxDir) ?? { state: "ok", binaryPath: onnxDir };
   } else {
     const binaryPath = join26(onnxDir, rel);
-    native = existsSync30(binaryPath) ? probeOnnxRuntimeNodeLoad(onnxDir) ?? { state: "ok", binaryPath } : {
+    native = existsSync31(binaryPath) ? probeOnnxRuntimeNodeLoad(onnxDir) ?? { state: "ok", binaryPath } : {
       state: "binary-missing",
       packageDir: onnxDir,
       expectedBinary: binaryPath,
@@ -38023,9 +38347,9 @@ var init_types = __esm(() => {
 // ../plugin/src/hooks/auto-update-checker/checker.ts
 import {
   accessSync as accessSync2,
-  existsSync as existsSync31,
+  existsSync as existsSync32,
   constants as fsConstants,
-  readFileSync as readFileSync20,
+  readFileSync as readFileSync21,
   renameSync as renameSync7,
   statSync as statSync15,
   writeFileSync as writeFileSync8
@@ -38077,9 +38401,9 @@ function getWinningConfig(directory, surface) {
   let winner = null;
   for (const path of getSurfaceConfigPaths(directory, surface)) {
     try {
-      if (!existsSync31(path))
+      if (!existsSync32(path))
         continue;
-      const parsed = parseJsonConfig(readFileSync20(path, "utf-8"));
+      const parsed = parseJsonConfig(readFileSync21(path, "utf-8"));
       const entries = getPluginEntries(parsed);
       if (entries.some((entry) => entry === PACKAGE_NAME || entry.startsWith(`${PACKAGE_NAME}@`))) {
         if (winner) {
@@ -38115,14 +38439,14 @@ var init_checker = __esm(() => {
 });
 
 // src/lib/opencode-plugin-schema-fence.ts
-import { existsSync as existsSync32, readdirSync as readdirSync5, readFileSync as readFileSync21 } from "node:fs";
+import { existsSync as existsSync33, readdirSync as readdirSync5, readFileSync as readFileSync22 } from "node:fs";
 import { join as join30 } from "node:path";
 import { gunzipSync } from "node:zlib";
 function readPackageVersion(packageJsonPath) {
   try {
-    if (!existsSync32(packageJsonPath))
+    if (!existsSync33(packageJsonPath))
       return null;
-    const packageJson = JSON.parse(readFileSync21(packageJsonPath, "utf-8"));
+    const packageJson = JSON.parse(readFileSync22(packageJsonPath, "utf-8"));
     if (packageJson.name !== OPENCODE_PLUGIN_NAME || typeof packageJson.version !== "string") {
       return null;
     }
@@ -38142,7 +38466,7 @@ function readFenceValue(text) {
 }
 function readFenceFromDist(packageDirectory) {
   const distDirectory = join30(packageDirectory, "dist");
-  if (!existsSync32(distDirectory))
+  if (!existsSync33(distDirectory))
     return null;
   const pending = [distDirectory];
   const fenceValues = new Set;
@@ -38159,7 +38483,7 @@ function readFenceFromDist(packageDirectory) {
         }
         if (!entry.isFile() || !/\.(?:[cm]?js|ts)$/.test(entry.name))
           continue;
-        const fence = readFenceValue(readFileSync21(path, "utf-8"));
+        const fence = readFenceValue(readFileSync22(path, "utf-8"));
         if (fence !== null)
           fenceValues.add(fence);
       }
@@ -38376,14 +38700,53 @@ var init_storage_versions = __esm(async () => {
   await init_storage_db();
 });
 
+// src/commands/doctor-compartment-boundaries.ts
+function listDanglingCompartmentBoundaries(contextDb, openCodeDb) {
+  const generation = detectOpenCodeStoreGeneration(openCodeDb);
+  if (generation === "unknown") {
+    throw new Error("OpenCode session database has an unrecognized schema");
+  }
+  const rows = contextDb.prepare(`SELECT c.session_id, c.sequence, c.start_message_id, c.end_message_id
+               FROM compartments AS c
+               LEFT JOIN session_meta AS sm ON sm.session_id = c.session_id
+              WHERE sm.harness IS NULL OR sm.harness IN ('opencode', 'opencode2')
+              ORDER BY c.session_id ASC, c.sequence ASC`).all();
+  const statement = openCodeDb.prepare(generation === "v2" ? "SELECT 1 AS found FROM session_message WHERE session_id = ? AND id = ? LIMIT 1" : "SELECT 1 AS found FROM message WHERE session_id = ? AND id = ? LIMIT 1");
+  const exists = (sessionId, messageId) => statement.get(sessionId, messageId) != null;
+  return rows.flatMap((row) => {
+    const missingStart = !exists(row.session_id, row.start_message_id);
+    const missingEnd = !exists(row.session_id, row.end_message_id);
+    if (!missingStart && !missingEnd)
+      return [];
+    return [
+      {
+        sessionId: row.session_id,
+        sequence: row.sequence,
+        missingStartMessageId: missingStart ? row.start_message_id : null,
+        missingEndMessageId: missingEnd ? row.end_message_id : null
+      }
+    ];
+  });
+}
+function formatDanglingCompartmentBoundary(boundary) {
+  const missing = [
+    boundary.missingStartMessageId ? `start_message_id=${boundary.missingStartMessageId}` : null,
+    boundary.missingEndMessageId ? `end_message_id=${boundary.missingEndMessageId}` : null
+  ].filter((value) => value !== null);
+  return `session=${boundary.sessionId} sequence=${boundary.sequence} missing ${missing.join(" ")}`;
+}
+var init_doctor_compartment_boundaries = __esm(() => {
+  init_opencode_db_path();
+});
+
 // src/commands/doctor-opencode-cache.ts
-import { existsSync as existsSync33, readFileSync as readFileSync22, rmSync as rmSync3 } from "node:fs";
+import { existsSync as existsSync34, readFileSync as readFileSync23, rmSync as rmSync3 } from "node:fs";
 function readCachedPluginVersion(pluginCacheDir) {
   try {
     const installedPkgPath = getOpenCodePluginPackageJsonPath(pluginCacheDir);
-    if (!existsSync33(installedPkgPath))
+    if (!existsSync34(installedPkgPath))
       return;
-    const pkg = JSON.parse(readFileSync22(installedPkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync23(installedPkgPath, "utf-8"));
     return typeof pkg.version === "string" ? pkg.version : undefined;
   } catch {
     return;
@@ -38392,7 +38755,7 @@ function readCachedPluginVersion(pluginCacheDir) {
 async function clearPluginCache(options = {}, deps = {}) {
   const remove = deps.remove ?? ((path) => rmSync3(path, { recursive: true, force: true }));
   const pluginCacheRoots = getOpenCodePluginCacheRoots();
-  const existingRoots = pluginCacheRoots.filter((root) => existsSync33(root));
+  const existingRoots = pluginCacheRoots.filter((root) => existsSync34(root));
   if (existingRoots.length === 0) {
     return { action: "not_found", path: pluginCacheRoots[0] ?? "" };
   }
@@ -38460,7 +38823,7 @@ var init_doctor_opencode_cache = __esm(() => {
 
 // src/commands/doctor-opencode.ts
 import { spawnSync as spawnSync7 } from "node:child_process";
-import { existsSync as existsSync34, readFileSync as readFileSync23 } from "node:fs";
+import { existsSync as existsSync35, readFileSync as readFileSync24 } from "node:fs";
 import { createRequire as createRequire6 } from "node:module";
 import { homedir as homedir16 } from "node:os";
 import { join as join31 } from "node:path";
@@ -38566,6 +38929,13 @@ function isPinnedOpenCodePluginSpecifier(specifier) {
     return false;
   return specifier.startsWith(`${OPENCODE_PLUGIN_NAME}@`);
 }
+function describeAutoUpdateStall(specifier, autoUpdateEnabled, storageDir = getMagicContextStorageDir()) {
+  if (!autoUpdateEnabled || !isPinnedOpenCodePluginSpecifier(specifier))
+    return null;
+  const state = readAutoUpdateCheckState(join31(storageDir, AUTO_UPDATE_CHECK_STATE_FILENAME));
+  const owner = isUpdaterPinnedSpec(state, specifier) ? "updater" : "you";
+  return `auto-update: stalled — config pinned to ${specifier} (by ${owner})`;
+}
 function getUserNpmrcPath() {
   const custom = process.env.NPM_CONFIG_USERCONFIG?.trim();
   if (custom)
@@ -38576,10 +38946,10 @@ function getUserNpmrcPath() {
 function collectNpmReleaseAgeWarnings() {
   const ageWarnings = [];
   const npmrcPath = getUserNpmrcPath();
-  if (!existsSync34(npmrcPath))
+  if (!existsSync35(npmrcPath))
     return ageWarnings;
   try {
-    const npmrc = readFileSync23(npmrcPath, "utf-8");
+    const npmrc = readFileSync24(npmrcPath, "utf-8");
     for (const line of npmrc.split(`
 `)) {
       const trimmed = line.trim();
@@ -38713,7 +39083,7 @@ function checkLocalEmbeddingRuntimeForDoctor(runtimePreference = "auto") {
   return { issues: 0 };
 }
 async function checkEmbeddingConfig(magicContextConfigPath) {
-  if (!existsSync34(magicContextConfigPath)) {
+  if (!existsSync35(magicContextConfigPath)) {
     return checkLocalEmbeddingRuntimeForDoctor();
   }
   let rawText;
@@ -38935,11 +39305,42 @@ async function runDoctor2(options = {}) {
   } else {
     pass(installationReports.length > 1 ? `OpenCode ${activeInstallation.version} installed (active install marked above)` : `OpenCode ${activeInstallation.version} installed`);
   }
-  const openCodeDbCheck = describeOpenCodeDatabaseDoctorCheck(resolveOpenCodeDbPath());
+  const hostGeneration = openCodeHostGenerationFromVersion(activeInstallation.version);
+  const openCodeDbResolution = resolveOpenCodeDbPath(hostGeneration);
+  const openCodeDbCheck = describeOpenCodeDatabaseDoctorCheck(openCodeDbResolution);
   if (openCodeDbCheck.ok)
     pass(openCodeDbCheck.message);
   else
     fail(openCodeDbCheck.message);
+  if (openCodeDbCheck.ok) {
+    let contextDb = null;
+    let sessionDb = null;
+    try {
+      contextDb = openExistingContextDatabase(authorityDbPath, { readonly: true });
+      if (contextDb) {
+        sessionDb = new Database(openCodeDbResolution.path, {
+          readonly: true,
+          fileMustExist: true
+        });
+        const dangling = listDanglingCompartmentBoundaries(contextDb, sessionDb);
+        if (dangling.length === 0) {
+          pass("Compartment boundary ids resolve in the OpenCode session store");
+        } else {
+          warn(`${dangling.length} compartment(s) have dangling OpenCode boundary ids`);
+          for (const boundary of dangling) {
+            log2.warn(`  ${formatDanglingCompartmentBoundary(boundary)}`);
+          }
+        }
+      } else {
+        log2.info("Compartment boundary check: no context database found");
+      }
+    } catch (error) {
+      warn(`Compartment boundary check unavailable: ${error instanceof Error ? error.message : String(error)}`);
+    } finally {
+      sessionDb?.close();
+      contextDb?.close();
+    }
+  }
   const selfVersion = getSelfVersion2();
   const [npmLatest, pluginNpmLatest] = await Promise.all([
     fetchNpmLatest(CLI_PACKAGE_NAME),
@@ -38958,7 +39359,8 @@ async function runDoctor2(options = {}) {
   } else {
     pass(`OpenCode config: ${paths.opencodeConfig}`);
   }
-  if (existsSync34(paths.magicContextConfig)) {
+  let autoUpdateEnabled = true;
+  if (existsSync35(paths.magicContextConfig)) {
     pass(`Magic Context config: ${paths.magicContextConfig}`);
     try {
       const raw = loadRawConfigFile({ configPath: paths.magicContextConfig, tier: "user" });
@@ -38979,6 +39381,7 @@ async function runDoctor2(options = {}) {
     }
     try {
       const result = loadPluginConfig(process.cwd());
+      autoUpdateEnabled = result.auto_update !== false;
       const warnings = result.configWarnings ?? [];
       if (warnings.length > 0) {
         warn(`Magic Context config has ${warnings.length} warning(s) — see 'magic-context doctor --issue' for details`);
@@ -38992,7 +39395,7 @@ async function runDoctor2(options = {}) {
     warn(`No magic-context.jsonc found — using defaults`);
     log2.info("  Run 'setup' to create one with model recommendations");
   }
-  if (existsSync34(paths.magicContextConfig)) {
+  if (existsSync35(paths.magicContextConfig)) {
     try {
       const raw = loadRawConfigFile({ configPath: paths.magicContextConfig, tier: "user" });
       if (!raw)
@@ -39112,9 +39515,17 @@ async function runDoctor2(options = {}) {
       log2.warn("Could not migrate deprecated config keys in magic-context.jsonc");
     }
   }
+  const reportedAutoUpdateStalls = new Set;
+  const reportAutoUpdateStall = (specifier) => {
+    const message = describeAutoUpdateStall(specifier, autoUpdateEnabled);
+    if (!message || reportedAutoUpdateStalls.has(message))
+      return;
+    reportedAutoUpdateStalls.add(message);
+    warn(message);
+  };
   if (paths.opencodeConfigFormat !== "none") {
     try {
-      const raw = readFileSync23(paths.opencodeConfig, "utf-8");
+      const raw = readFileSync24(paths.opencodeConfig, "utf-8");
       const config = import_comment_json11.parse(raw);
       const rawPlugins = Array.isArray(config?.plugin) ? config.plugin : [];
       const existingIdx = rawPlugins.findIndex((entry) => matchesPluginEntry(entry, OPENCODE_PLUGIN_NAME) || isDevPathPluginEntry(entry));
@@ -39139,6 +39550,7 @@ async function runDoctor2(options = {}) {
         } else {
           const isPinned = isPinnedOpenCodePluginSpecifier(oldEntryStr);
           if (isPinned && !options.force) {
+            reportAutoUpdateStall(oldEntryStr);
             warn(`Plugin pinned to ${oldEntryStr} in ${configName} — use 'doctor --force' to upgrade`);
           } else {
             if (Array.isArray(oldEntry) && oldEntry.length >= 1) {
@@ -39199,9 +39611,9 @@ async function runDoctor2(options = {}) {
     pass("Added TUI sidebar plugin to tui.json");
     warn("Restart OpenCode to see the sidebar");
     fixed++;
-  } else if (existsSync34(paths.tuiConfig)) {
+  } else if (existsSync35(paths.tuiConfig)) {
     try {
-      const tuiRaw = readFileSync23(paths.tuiConfig, "utf-8");
+      const tuiRaw = readFileSync24(paths.tuiConfig, "utf-8");
       const tuiConfig = import_comment_json11.parse(tuiRaw);
       const tuiRawPlugins = Array.isArray(tuiConfig?.plugin) ? tuiConfig.plugin : [];
       const tuiIdx = tuiRawPlugins.findIndex((entry) => matchesPluginEntry(entry, OPENCODE_PLUGIN_NAME) || isDevPathPluginEntry(entry));
@@ -39223,6 +39635,7 @@ async function runDoctor2(options = {}) {
         } else {
           const tuiPinned = isPinnedOpenCodePluginSpecifier(tuiEntryStr);
           if (tuiPinned && !options.force) {
+            reportAutoUpdateStall(tuiEntryStr);
             warn(`TUI plugin pinned to ${tuiEntryStr} — use 'doctor --force' to upgrade`);
           } else if (tuiPinned && options.force) {
             if (Array.isArray(tuiEntry) && tuiEntry.length >= 1) {
@@ -39250,7 +39663,7 @@ async function runDoctor2(options = {}) {
   } else {
     fail("Could not create or verify the TUI sidebar config");
   }
-  if (existsSync34(paths.magicContextConfig)) {
+  if (existsSync35(paths.magicContextConfig)) {
     try {
       const raw = loadRawConfigFile({ configPath: paths.magicContextConfig, tier: "user" });
       if (!raw)
@@ -39274,7 +39687,7 @@ async function runDoctor2(options = {}) {
   const storage = getMagicContextStorageResolution();
   const dbPath = join31(storage.path, "context.db");
   log2.info(`Shared storage: ${storage.path} (source: ${storage.source})`);
-  if (!existsSync34(dbPath)) {
+  if (!existsSync35(dbPath)) {
     log2.info(`Shared context DB not yet created at ${dbPath} (will be created on first run)`);
   } else {
     log2.info(`Shared context DB exists at ${dbPath}`);
@@ -39454,6 +39867,7 @@ var init_doctor_opencode = __esm(async () => {
   init_removed_agent_config();
   init_variable();
   init_embedding_synapse();
+  init_auto_update_provenance();
   init_conflict_detector();
   init_conflict_fixer();
   init_data_path();
@@ -39476,9 +39890,11 @@ var init_doctor_opencode = __esm(async () => {
   init_paths();
   init_prompts();
   init_redaction2();
+  init_doctor_compartment_boundaries();
   init_doctor_opencode_cache();
   await __promiseAll([
     init_storage_db(),
+    init_sqlite(),
     init_database_access(),
     init_storage_versions(),
     init_v22_backfill_commands(),
@@ -39488,7 +39904,7 @@ var init_doctor_opencode = __esm(async () => {
 });
 
 // src/lib/diagnostics-pi.ts
-import { existsSync as existsSync35, readdirSync as readdirSync6, readFileSync as readFileSync24, statSync as statSync16 } from "node:fs";
+import { existsSync as existsSync36, readdirSync as readdirSync6, readFileSync as readFileSync25, statSync as statSync16 } from "node:fs";
 import { createRequire as createRequire7 } from "node:module";
 import { join as join32 } from "node:path";
 function getSelfVersion3() {
@@ -39505,7 +39921,7 @@ function getSelfVersion3() {
 }
 function fileSize2(path) {
   try {
-    return existsSync35(path) ? statSync16(path).size : 0;
+    return existsSync36(path) ? statSync16(path).size : 0;
   } catch {
     return 0;
   }
@@ -39517,11 +39933,11 @@ function sanitizeValue2(value) {
   return sanitizeConfigValue(value);
 }
 function readJsonc(path) {
-  if (!existsSync35(path))
+  if (!existsSync36(path))
     return { value: {} };
   try {
     return {
-      value: import_comment_json12.parse(readFileSync24(path, "utf-8"))
+      value: import_comment_json12.parse(readFileSync25(path, "utf-8"))
     };
   } catch (error) {
     return {
@@ -39537,7 +39953,7 @@ function readConfigDiagnostic(path) {
   const parsed = readJsonc(path);
   return {
     path,
-    exists: existsSync35(path),
+    exists: existsSync36(path),
     ...parsed.parseError ? { parseError: parsed.parseError } : {},
     flags: sanitizeValue2(parsed.value)
   };
@@ -39555,7 +39971,7 @@ function reverseSlugToDirectory(slug) {
 }
 function collectPiRecentSessions() {
   const sessionsRoot = getPiSessionsRoot();
-  if (!existsSync35(sessionsRoot))
+  if (!existsSync36(sessionsRoot))
     return [];
   try {
     const slugs = readdirSync6(sessionsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
@@ -39591,7 +40007,7 @@ function collectPiRecentSessions() {
 }
 function parseHistorianDumpMeta2(path) {
   try {
-    const xml = readFileSync24(path, "utf-8");
+    const xml = readFileSync25(path, "utf-8");
     const parsed = parseCompartmentOutput(xml);
     const factCountByCategory = {};
     for (const fact of parsed.facts) {
@@ -39624,7 +40040,7 @@ function parseHistorianDumpMeta2(path) {
   }
 }
 function listDumpsInDir2(dir, limit) {
-  if (!existsSync35(dir))
+  if (!existsSync36(dir))
     return { count: 0, recent: [] };
   try {
     const entries = readdirSync6(dir).filter((name) => name.endsWith(".xml")).map((name) => {
@@ -39718,7 +40134,7 @@ async function collectDiagnostics2(cwd = process.cwd()) {
     piVersion: pi ? getPiVersion(pi.path) : null,
     settings: {
       path: settingsPath,
-      exists: existsSync35(settingsPath),
+      exists: existsSync36(settingsPath),
       ...settingsParsed.parseError ? { parseError: settingsParsed.parseError } : {},
       hasMagicContextPackage: hasPiMagicContextPackage(packages),
       packages: sanitizeValue2(packages)
@@ -39735,7 +40151,7 @@ async function collectDiagnostics2(cwd = process.cwd()) {
     storageDir: {
       path: storageDirPath,
       source: storageResolution.source,
-      exists: existsSync35(storageDirPath),
+      exists: existsSync36(storageDirPath),
       contextDbSizeBytes: fileSize2(dbPath)
     },
     conflicts: {
@@ -39929,7 +40345,7 @@ var init_logs_pi = __esm(() => {
 
 // src/commands/doctor-pi.ts
 import { execFileSync as execFileSync6, spawnSync as spawnSync8 } from "node:child_process";
-import { existsSync as existsSync36, mkdirSync as mkdirSync11, readdirSync as readdirSync7, readFileSync as readFileSync25, rmSync as rmSync4, statSync as statSync17 } from "node:fs";
+import { existsSync as existsSync37, mkdirSync as mkdirSync11, readdirSync as readdirSync7, readFileSync as readFileSync26, rmSync as rmSync4, statSync as statSync17 } from "node:fs";
 import { createRequire as createRequire8 } from "node:module";
 import { homedir as homedir17 } from "node:os";
 import { dirname as dirname19, isAbsolute as isAbsolute8, join as join34 } from "node:path";
@@ -40023,7 +40439,7 @@ function summarize(results) {
 function readJsonc2(path) {
   try {
     return {
-      value: import_comment_json13.parse(readFileSync25(path, "utf-8"))
+      value: import_comment_json13.parse(readFileSync26(path, "utf-8"))
     };
   } catch (error) {
     return {
@@ -40075,13 +40491,13 @@ function piPluginDirCandidates(packages, cwd) {
   }
   dirs.push(join34(agentDir, "npm", "node_modules", PACKAGE_NAME2));
   dirs.push(join34(cwd, ".pi", "npm", "node_modules", PACKAGE_NAME2));
-  return dirs.filter((dir) => existsSync36(join34(dir, "package.json")));
+  return dirs.filter((dir) => existsSync37(join34(dir, "package.json")));
 }
 function projectConfigPath(cwd) {
   return resolveCortexKitProjectConfigPath(cwd);
 }
 function readConfigForEmbedding(path, isProjectConfig) {
-  if (!existsSync36(path))
+  if (!existsSync37(path))
     return null;
   try {
     const raw = loadRawConfigFile({
@@ -40182,7 +40598,7 @@ function cacheRoots(cwd) {
 function findPiMagicContextCacheDirs(cwd, expectedVersion, force = false) {
   const found = new Map;
   const visit = (path, depth) => {
-    if (depth < 0 || !existsSync36(path))
+    if (depth < 0 || !existsSync37(path))
       return;
     let stat;
     try {
@@ -40193,9 +40609,9 @@ function findPiMagicContextCacheDirs(cwd, expectedVersion, force = false) {
     if (!stat.isDirectory())
       return;
     const packageJson = join34(path, "package.json");
-    if (existsSync36(packageJson)) {
+    if (existsSync37(packageJson)) {
       try {
-        const pkg = JSON.parse(readFileSync25(packageJson, "utf-8"));
+        const pkg = JSON.parse(readFileSync26(packageJson, "utf-8"));
         const name = typeof pkg.name === "string" ? pkg.name : "";
         const version = typeof pkg.version === "string" ? pkg.version : undefined;
         if (name === PACKAGE_NAME2) {
@@ -40260,7 +40676,7 @@ async function runHealthChecks2(options) {
   }
   const settingsPath = getPiUserExtensionsPath();
   let packages = [];
-  if (!existsSync36(settingsPath)) {
+  if (!existsSync37(settingsPath)) {
     add2(results, "fail", `Pi settings not found at ${settingsPath}`);
     repairPlan.addPackageEntry = true;
   } else {
@@ -40284,7 +40700,7 @@ async function runHealthChecks2(options) {
     ["user", userConfigPath, true],
     ["project", projectPath, false]
   ]) {
-    if (!existsSync36(path)) {
+    if (!existsSync37(path)) {
       if (required) {
         add2(results, "warn", `No ${label} magic-context.jsonc found at ${path}`);
         if (userConfigMigrationRefused) {
@@ -40326,7 +40742,7 @@ async function runHealthChecks2(options) {
   const storageDir = storage.path;
   const dbPath = join34(storageDir, "context.db");
   add2(results, "info", `Shared storage: ${storageDir} (source: ${storage.source})`);
-  const existedBeforeOpen = existsSync36(dbPath);
+  const existedBeforeOpen = existsSync37(dbPath);
   if (existedBeforeOpen)
     add2(results, "pass", `Shared context DB exists at ${dbPath}`);
   else
@@ -40561,7 +40977,7 @@ function repair2(plan, prompts) {
   }
   if (plan.writeUserConfig) {
     const configPath = getPiUserConfigPath();
-    if (!existsSync36(configPath)) {
+    if (!existsSync37(configPath)) {
       try {
         writeDefaultMagicContextConfig(configPath);
         prompts.log.success(`Wrote default Magic Context config to ${configPath}`);
@@ -40812,7 +41228,7 @@ var init_doctor_pi = __esm(async () => {
 });
 
 // src/commands/doctor.ts
-import { existsSync as existsSync37, rmSync as rmSync5 } from "node:fs";
+import { existsSync as existsSync38, rmSync as rmSync5 } from "node:fs";
 import { join as join35 } from "node:path";
 async function runDoctor4(options) {
   if (options.clear)
@@ -40943,7 +41359,7 @@ async function runClear() {
     const s = spinner2();
     s.start(`Clearing ${item.path}`);
     try {
-      if (existsSync37(item.path)) {
+      if (existsSync38(item.path)) {
         rmSync5(item.path, { recursive: true, force: true });
       }
       s.stop(`Cleared ${item.path}`);
@@ -41049,6 +41465,7 @@ function printUsage() {
   console.log("    doctor migrate-session   Re-home an OpenCode session to another directory");
   console.log("    doctor merge-identity   Merge project rows (--from ID --to ID [--dry-run] [--yes])");
   console.log("    doctor repair-db   Back up and salvage a corrupted shared database");
+  console.log("    doctor list-hidden-sessions   List Magic Context OpenCode 2 roots");
   console.log("");
   console.log("  Harness selection:");
   console.log("    --harness opencode    Target OpenCode only");
@@ -41105,6 +41522,10 @@ async function main(argv = process.argv.slice(2)) {
         await init_doctor_repair_db();
         return runRepairDbCli(rest.slice(1));
       }
+      if (rest[0] === "list-hidden-sessions") {
+        await init_doctor_hidden_sessions();
+        return runListHiddenSessions();
+      }
       if (rest[0] === "migrate") {
         await init_migrate();
         return runMigrateCli(rest.slice(1));