@cortexkit/opencode-magic-context 0.33.0 → 0.34.0

package/dist/{index-h86twgsp.js → index-s0mdn690.js}

@@ -1,10 +1,9 @@
 import {
   deriveTriggerBudget,
-  modelSupportsVision
-} from "./index-63dq2g4d.js";
-import {
-  AGENTIC_DREAM_TASKS
-} from "./index-anhrfygk.js";
+  modelSupportsVision,
+  piModelRefToCanonical,
+  shouldEnforcePrivateStoragePermissions
+} from "./index-ry8rh8cv.js";
 import {
   parseProviderModel
 } from "./index-td9depx5.js";
@@ -12,18 +11,15 @@ import {
   describeError,
   getErrorMessage,
   sendIgnoredMessage
-} from "./index-y1c9tcm3.js";
+} from "./index-cn960ffd.js";
 import {
-  Database,
   clearCachedM0M1,
   clearCompressionDepth,
   clearCompressionDepthRange,
-  closeQuietly,
   ensureSessionMetaRow,
   estimateTokens,
   getCachedAbsoluteMessageCount,
   getLegacyProtectedTailStartOrdinal,
-  getMessageTimesFromOpenCodeDb,
   getRawSessionMessageCount,
   getRawSessionTagKeysThrough,
   hasMeaningfulUserText,
@@ -32,10 +28,17 @@ import {
   persistCachedM0,
   readRawSessionMessages,
   readSessionChunk,
-  registerPrivilegedWriter,
-  updateSessionMeta,
+  updateSessionMeta
+} from "./index-b563sga5.js";
+import {
+  Database,
+  closeQuietly,
+  getMessageTimesFromOpenCodeDb,
   withPrivilegedWriter
-} from "./index-bmkea2dq.js";
+} from "./index-fcyvznch.js";
+import {
+  pushNotification
+} from "./index-d62ypazr.js";
 import {
   log,
   sessionLog
@@ -376,462 +379,95 @@ function buildPrimaryLanguageDirective(language) {
     return "";
   return `Use ${target} for your natural-language replies to the user unless the user explicitly asks for another language. Keep code, identifiers, file paths, commands, logs, and quoted text verbatim.`;
 }
-// src/features/magic-context/overflow-detection.ts
-var OVERFLOW_PATTERNS = [
-  /prompt is too long/i,
-  /input is too long for requested model/i,
-  /exceeds the context window/i,
-  /input token count.*exceeds the maximum/i,
-  /maximum prompt length is \d+/i,
-  /reduce the length of the messages/i,
-  /maximum context length is \d+ tokens/i,
-  /exceeds the limit of \d+/i,
-  /exceeds the available context size/i,
-  /greater than the context length/i,
-  /context window exceeds limit/i,
-  /exceeded model token limit/i,
-  /context[_ ]length[_ ]exceeded/i,
-  /request entity too large/i,
-  /context length is only \d+ tokens/i,
-  /input length.*exceeds.*context length/i,
-  /prompt too long; exceeded (?:max )?context length/i,
-  /too large for model with \d+ maximum context length/i,
-  /model_context_window_exceeded/i,
-  /context size has been exceeded/i
-];
-var LIMIT_EXTRACTION_PATTERNS = [
-  /maximum prompt length is (\d+)/i,
-  /maximum context length is (\d+) tokens?/i,
-  /context length is only (\d+) tokens?/i,
-  /exceeds the limit of (\d+)/i,
-  /too large for model with (\d+) maximum context length/i,
-  /context size.*(\d+) tokens?/i,
-  /exceeds? the context length of (\d+)/i,
-  />\s*(\d+)\s*(?:tokens?\s*)?(?:maximum|max|limit)\b/i,
-  /max(?:imum)?.*context.*?(\d+)/i
-];
-var MIN_PLAUSIBLE_LIMIT = 1024;
-var MAX_PLAUSIBLE_LIMIT = 1e7;
-function extractErrorMessage(error) {
-  if (!error)
-    return "";
-  if (typeof error === "string")
-    return error;
-  if (typeof error === "object") {
-    const obj = error;
-    const nested = obj.error;
-    if (nested && typeof nested.message === "string" && nested.message.length > 0) {
-      return nested.message;
-    }
-  }
-  if (error instanceof Error)
-    return error.message;
-  if (typeof error === "object") {
-    const obj = error;
-    if (typeof obj.message === "string")
-      return obj.message;
-    if (typeof obj.responseBody === "string")
-      return obj.responseBody;
-    try {
-      return JSON.stringify(error);
-    } catch {
-      return String(error);
-    }
-  }
-  return String(error);
+
+// src/features/magic-context/storage-db.ts
+import {
+  chmodSync,
+  copyFileSync,
+  cpSync,
+  existsSync as existsSync3,
+  mkdirSync,
+  mkdtempSync,
+  readdirSync,
+  readFileSync,
+  unlinkSync
+} from "node:fs";
+import { basename, dirname, join as join3 } from "node:path";
+
+// src/plugin/boot-quiet.ts
+var BOOT_QUIET_MS = 120000;
+var bootQuietUntilMs = 0;
+function beginBootQuietPeriod(now = Date.now()) {
+  if (bootQuietUntilMs === 0)
+    bootQuietUntilMs = now + BOOT_QUIET_MS;
 }
-function detectOverflow(error) {
-  const message = extractErrorMessage(error);
-  if (!message) {
-    return { isOverflow: false };
-  }
-  const hasStatus413 = /\b413\b/.test(message) && /(entity|payload|context|prompt)/i.test(message);
-  let matched;
-  for (const pattern of OVERFLOW_PATTERNS) {
-    if (pattern.test(message)) {
-      matched = pattern;
-      break;
-    }
-  }
-  if (!matched && !hasStatus413) {
-    return { isOverflow: false };
-  }
-  const reportedLimit = parseReportedLimit(message);
-  return {
-    isOverflow: true,
-    reportedLimit,
-    matchedPattern: matched?.source
-  };
+function bootQuietRemainingMs(now = Date.now()) {
+  return Math.max(0, bootQuietUntilMs - now);
 }
-function parseReportedLimit(message) {
-  if (!message)
-    return;
-  for (const pattern of LIMIT_EXTRACTION_PATTERNS) {
-    const match = message.match(pattern);
-    if (!match)
-      continue;
-    const raw = match[1];
-    if (!raw)
-      continue;
-    const value = Number.parseInt(raw, 10);
-    if (!Number.isFinite(value))
-      continue;
-    if (value < MIN_PLAUSIBLE_LIMIT || value > MAX_PLAUSIBLE_LIMIT)
-      continue;
-    return value;
-  }
-  return;
+function scheduleAfterBootQuiet(task, additionalDelayMs = 0) {
+  const timer = setTimeout(task, bootQuietRemainingMs() + Math.max(0, additionalDelayMs));
+  timer.unref?.();
+  return timer;
 }
 
-// src/shared/model-suggestion-retry.ts
-var ABORT_CALL_TIMEOUT_MS = 3000;
-function copyPromptArgs(args, body) {
-  return { ...args, body: { ...body } };
+// src/shared/rpc-utils.ts
+import { createHash } from "node:crypto";
+import { join } from "node:path";
+function projectHash(directory) {
+  const normalized = directory.replace(/\/+$/, "");
+  return createHash("sha256").update(normalized).digest("hex").slice(0, 16);
 }
-function extractMessage(error) {
-  if (typeof error === "string")
-    return error;
-  if (error instanceof Error)
-    return error.message;
-  if (typeof error === "object" && error !== null) {
-    const obj = error;
-    if (typeof obj.message === "string")
-      return obj.message;
-  }
-  try {
-    return JSON.stringify(error);
-  } catch (_error) {
-    return String(error);
-  }
+function rpcPortDir(storageDir, directory) {
+  return join(storageDir, "rpc", projectHash(directory));
 }
-function parseModelSuggestion(error) {
-  if (!error)
-    return null;
-  if (typeof error === "object" && error !== null) {
-    const errObj = error;
-    if (errObj.name === "ProviderModelNotFoundError" && typeof errObj.data === "object" && errObj.data !== null) {
-      const data = errObj.data;
-      const suggestions = data.suggestions;
-      if (Array.isArray(suggestions) && typeof suggestions[0] === "string") {
-        return {
-          providerID: String(data.providerID ?? ""),
-          modelID: String(data.modelID ?? ""),
-          suggestion: suggestions[0]
-        };
-      }
-    }
-    for (const key of ["data", "error", "cause"]) {
-      const nested = errObj[key];
-      if (nested && typeof nested === "object") {
-        const result = parseModelSuggestion(nested);
-        if (result)
-          return result;
-      }
-    }
-  }
-  const message = extractMessage(error);
-  const modelMatch = message.match(/model not found:\s*([^/\s]+)\s*\/\s*([^.,\s]+)/i);
-  const suggestionMatch = message.match(/did you mean:\s*([^,?]+)/i);
-  if (!modelMatch || !suggestionMatch) {
-    return null;
-  }
-  return {
-    providerID: modelMatch[1].trim(),
-    modelID: modelMatch[2].trim(),
-    suggestion: suggestionMatch[1].trim()
-  };
+function rpcPortFilePath(storageDir, directory, pid = process.pid, instanceId) {
+  const suffix = instanceId ? `-${instanceId}` : "";
+  return join(rpcPortDir(storageDir, directory), `port-${pid}${suffix}.json`);
 }
-async function promptWithTimeout(client, args, timeoutMs, signal) {
-  if (signal?.aborted) {
-    throw new Error("prompt aborted by external signal");
-  }
-  const controller = new AbortController;
-  const timeout = setTimeout(() => controller.abort(), timeoutMs);
-  const onExternalAbort = () => controller.abort();
-  signal?.addEventListener("abort", onExternalAbort);
-  try {
-    await client.session.prompt({
-      ...args,
-      signal: controller.signal
-    });
-  } catch (error) {
-    if (signal?.aborted) {
-      await abortChildRun(client, args.path.id);
-      throw new Error("prompt aborted by external signal");
-    }
-    if (controller.signal.aborted) {
-      await abortChildRun(client, args.path.id);
-      throw new Error(`prompt timed out after ${timeoutMs}ms`);
-    }
-    throw error;
-  } finally {
-    clearTimeout(timeout);
-    signal?.removeEventListener("abort", onExternalAbort);
-  }
-}
-async function abortChildRun(client, sessionId) {
+function isPidAlive(pid) {
+  if (!Number.isInteger(pid) || pid <= 0)
+    return false;
   try {
-    await Promise.race([
-      client.session.abort({ path: { id: sessionId } }),
-      new Promise((resolve) => setTimeout(resolve, ABORT_CALL_TIMEOUT_MS))
-    ]);
-  } catch (error) {
-    log(`[model-retry] child session abort failed for ${sessionId}: ${String(error)}`);
-  }
-}
-function isNonRetryable(error, externalSignal) {
-  if (externalSignal?.aborted)
-    return true;
-  if (error instanceof Error) {
-    if (error.name === "AbortError")
-      return true;
-    if (error.message === "prompt aborted by external signal")
-      return true;
-    if (/^prompt timed out after \d+ms$/.test(error.message))
-      return true;
-  }
-  if (detectOverflow(error).isOverflow)
+    process.kill(pid, 0);
     return true;
-  return false;
-}
-function shortErr(error) {
-  if (error instanceof Error) {
-    return error.name && error.name !== "Error" ? `${error.name}: ${error.message}` : error.message;
-  }
-  return extractMessage(error);
-}
-async function attemptOnce(client, args, timeoutMs, signal, callContext, label) {
-  const originalBody = { ...args.body };
-  const attemptArgs = copyPromptArgs(args, originalBody);
-  try {
-    await promptWithTimeout(client, attemptArgs, timeoutMs, signal);
-    return;
-  } catch (error) {
-    if (isNonRetryable(error, signal))
-      throw error;
-    const suggestion = parseModelSuggestion(error);
-    if (!suggestion || !originalBody.model) {
-      throw error;
-    }
-    log(`[${callContext}] ${label}: model not found, retrying with suggestion`, {
-      original: `${suggestion.providerID}/${suggestion.modelID}`,
-      suggested: suggestion.suggestion
-    });
-    await promptWithTimeout(client, copyPromptArgs(args, {
-      ...originalBody,
-      model: {
-        providerID: suggestion.providerID,
-        modelID: suggestion.suggestion
-      }
-    }), timeoutMs, signal);
-  }
-}
-async function promptSyncWithModelSuggestionRetry(client, args, options = {}) {
-  const timeoutMs = options.timeoutMs ?? 300000;
-  const callContext = options.callContext ?? "subagent";
-  const fallbacks = options.fallbackModels ?? [];
-  const baseBody = { ...args.body };
-  const baseArgs = copyPromptArgs(args, baseBody);
-  const explicitPrimaryLabel = baseBody.model?.providerID && baseBody.model.modelID ? `${baseBody.model.providerID}/${baseBody.model.modelID}` : "primary";
-  let lastError = null;
-  try {
-    await attemptOnce(client, baseArgs, timeoutMs, options.signal, callContext, explicitPrimaryLabel);
-    return;
-  } catch (error) {
-    lastError = error;
-    if (isNonRetryable(error, options.signal))
-      throw error;
-    if (fallbacks.length === 0) {
-      throw error;
-    }
-    log(`[${callContext}] primary (${explicitPrimaryLabel}) failed: ${shortErr(error)}; trying ${fallbacks.length} fallback(s)`);
-  }
-  for (let i = 0;i < fallbacks.length; i += 1) {
-    const parsed = parseProviderModel(fallbacks[i]);
-    if (!parsed) {
-      log(`[${callContext}] skipping invalid fallback spec: ${fallbacks[i]}`);
-      continue;
-    }
-    const label = `${parsed.providerID}/${parsed.modelID}`;
-    const attemptArgs = copyPromptArgs(baseArgs, {
-      ...baseBody,
-      model: parsed
-    });
-    try {
-      await attemptOnce(client, attemptArgs, timeoutMs, options.signal, callContext, label);
-      log(`[${callContext}] fallback succeeded with ${label} (attempt ${i + 2}/${fallbacks.length + 1})`);
-      return;
-    } catch (error) {
-      lastError = error;
-      if (isNonRetryable(error, options.signal))
-        throw error;
-      const remaining = fallbacks.length - i - 1;
-      if (remaining > 0) {
-        log(`[${callContext}] ${label} failed: ${shortErr(error)}; ${remaining} fallback(s) left`);
-      }
-    }
+  } catch (err) {
+    return err.code === "EPERM";
   }
-  log(`[${callContext}] all models exhausted; tried: ${[explicitPrimaryLabel, ...fallbacks].join(", ")}; last error: ${shortErr(lastError)}`);
-  throw lastError ?? new Error("All fallback models failed");
 }
-async function attemptAndValidate(client, args, timeoutMs, signal, callContext, attempt, options) {
-  await attemptOnce(client, args, timeoutMs, signal, callContext, attempt.label);
-  const output = await options.fetchOutput(args, attempt);
-  const validated = await options.validateOutput(output, attempt);
-  return { output, validated, attempt };
-}
-async function promptSyncWithValidatedOutputRetry(client, args, options) {
-  const timeoutMs = options.timeoutMs ?? 300000;
-  const callContext = options.callContext ?? "subagent";
-  const fallbacks = options.fallbackModels ?? [];
-  const baseBody = { ...args.body };
-  const baseArgs = copyPromptArgs(args, baseBody);
-  const explicitPrimaryLabel = baseBody.model?.providerID && baseBody.model.modelID ? `${baseBody.model.providerID}/${baseBody.model.modelID}` : "primary";
-  const totalAttempts = fallbacks.length + 1;
-  let firstError = null;
-  let lastError = null;
-  try {
-    return await attemptAndValidate(client, baseArgs, timeoutMs, options.signal, callContext, {
-      label: explicitPrimaryLabel,
-      attemptIndex: 0,
-      isFallback: false,
-      totalAttempts,
-      model: baseBody.model
-    }, options);
-  } catch (error) {
-    firstError = error;
-    lastError = error;
-    if (isNonRetryable(error, options.signal))
-      throw error;
-    if (fallbacks.length === 0) {
-      throw error;
-    }
-    log(`[${callContext}] primary (${explicitPrimaryLabel}) failed validation/prompt: ${shortErr(error)}; trying ${fallbacks.length} fallback(s)`);
-  }
-  for (let i = 0;i < fallbacks.length; i += 1) {
-    const parsed = parseProviderModel(fallbacks[i]);
-    if (!parsed) {
-      log(`[${callContext}] skipping invalid fallback spec: ${fallbacks[i]}`);
-      continue;
-    }
-    const label = `${parsed.providerID}/${parsed.modelID}`;
-    const attemptArgs = copyPromptArgs(baseArgs, {
-      ...baseBody,
-      model: parsed
-    });
-    const attempt = {
-      label,
-      attemptIndex: i + 1,
-      isFallback: true,
-      totalAttempts,
-      model: parsed
-    };
+function parseRpcPortFile(content, fallbackPid = 0) {
+  const trimmed = content.trim();
+  if (!trimmed)
+    return null;
+  if (trimmed.startsWith("{")) {
     try {
-      const result = await attemptAndValidate(client, attemptArgs, timeoutMs, options.signal, callContext, attempt, options);
-      log(`[${callContext}] fallback succeeded with ${label} (attempt ${i + 2}/${fallbacks.length + 1})`);
-      return result;
-    } catch (error) {
-      if (firstError === null)
-        firstError = error;
-      lastError = error;
-      if (isNonRetryable(error, options.signal))
-        throw error;
-      const remaining = fallbacks.length - i - 1;
-      if (remaining > 0) {
-        log(`[${callContext}] ${label} failed validation/prompt: ${shortErr(error)}; ${remaining} fallback(s) left`);
-      }
-    }
-  }
-  log(`[${callContext}] all models exhausted; tried: ${[explicitPrimaryLabel, ...fallbacks].join(", ")}; original error: ${shortErr(firstError)}; last error: ${shortErr(lastError)}`);
-  throw firstError ?? lastError ?? new Error("All fallback models failed validation");
-}
-// src/shared/normalize-sdk-response.ts
-function normalizeSDKResponse(response, fallback, options) {
-  if (response === null || response === undefined) {
-    return fallback;
-  }
-  if (Array.isArray(response)) {
-    return response;
-  }
-  if (typeof response === "object" && "data" in response) {
-    const data = response.data;
-    if (data !== null && data !== undefined) {
-      return data;
-    }
-    if (options?.preferResponseOnMissingData === true) {
-      return response;
+      const parsed = JSON.parse(trimmed);
+      const port2 = Number(parsed.port);
+      const pid = Number(parsed.pid);
+      const startedAt = Number(parsed.started_at);
+      if (!isValidPort(port2) || !Number.isInteger(pid) || pid <= 0)
+        return null;
+      return {
+        port: port2,
+        pid,
+        started_at: Number.isFinite(startedAt) ? startedAt : 0,
+        token: typeof parsed.token === "string" ? parsed.token : undefined,
+        instance_id: typeof parsed.instance_id === "string" ? parsed.instance_id : undefined
+      };
+    } catch {
+      return null;
     }
-    return fallback;
-  }
-  if (options?.preferResponseOnMissingData === true) {
-    return response;
   }
-  return fallback;
-}
-// src/shared/assistant-message-extractor.ts
-function asSessionMessage(value) {
-  if (!isRecord(value))
+  const port = Number.parseInt(trimmed, 10);
+  if (!isValidPort(port))
     return null;
-  const info = value.info;
-  const parts = value.parts;
-  return {
-    info: isRecord(info) ? {
-      role: typeof info.role === "string" ? info.role : undefined,
-      time: isRecord(info.time) ? {
-        created: typeof info.time.created === "number" ? info.time.created : undefined
-      } : undefined
-    } : undefined,
-    parts
-  };
+  return { port, pid: fallbackPid, started_at: 0 };
 }
-function getCreatedTime(message) {
-  return message.info?.time?.created ?? 0;
-}
-function getTextParts(message) {
-  if (!Array.isArray(message.parts))
-    return [];
-  return message.parts.filter((part) => isRecord(part)).map((part) => ({
-    type: typeof part.type === "string" ? part.type : undefined,
-    text: typeof part.text === "string" ? part.text : undefined
-  })).filter((part) => part.type === "text" && Boolean(part.text));
-}
-function extractLatestAssistantText(messages) {
-  if (!Array.isArray(messages) || messages.length === 0)
-    return null;
-  const assistantMessages = messages.map(asSessionMessage).filter((message) => message !== null).filter((message) => message.info?.role === "assistant").sort((a, b) => getCreatedTime(b) - getCreatedTime(a));
-  const latest = assistantMessages[0];
-  if (!latest)
-    return null;
-  return getTextParts(latest).map((part) => part.text).join(`
-`) || null;
-}
-function hasLengthCappedOutput(value) {
-  if (Array.isArray(value))
-    return value.some((item) => hasLengthCappedOutput(item));
-  if (!isRecord(value))
-    return false;
-  if (value.length_capped === true || value.lengthCapped === true)
-    return true;
-  const finishReason = value.finish_reason ?? value.finishReason;
-  if (typeof finishReason === "string") {
-    const normalized = finishReason.toLowerCase();
-    if (normalized === "length" || normalized === "max_tokens" || normalized === "max_output_tokens") {
-      return true;
-    }
-  }
-  return Object.values(value).some((item) => hasLengthCappedOutput(item));
+function isValidPort(port) {
+  return Number.isInteger(port) && port > 0 && port <= 65535;
 }
 
-// src/shared/keep-subagents.ts
-var keepSubagents = false;
-function setKeepSubagents(value) {
-  keepSubagents = value === true;
-}
-function shouldKeepSubagents() {
-  return keepSubagents;
-}
 // src/features/magic-context/context-authority.ts
-import { createHash, randomUUID } from "node:crypto";
+import { createHash as createHash2, randomUUID } from "node:crypto";
 var AUTHORITY_DOMAINS = ["memories", "notes"];
 var moduleNoteEvaluationBridges = new Map;
 function registerModuleNoteEvaluationBridge(projectPath, bridge) {
@@ -963,7 +599,7 @@ function checksumAuthoritySeedRows(rows) {
     const rightId = seedSourceRowId(right) ?? Number.MAX_SAFE_INTEGER;
     return leftId - rightId;
   });
-  return createHash("sha256").update(JSON.stringify(ordered.map(canonicalizeSeedValue))).digest("hex");
+  return createHash2("sha256").update(JSON.stringify(ordered.map(canonicalizeSeedValue))).digest("hex");
 }
 function maxDomainRowId(db, domain, projectPath) {
   const row = domain === "memories" ? db.prepare("SELECT COALESCE(MAX(rowid), 0) AS max_rowid FROM memories WHERE project_path = ?").get(projectPath) : db.prepare(`SELECT COALESCE(MAX(n.rowid), 0) AS max_rowid
@@ -1051,10 +687,14 @@ async function prepareAuthority(args) {
           domain,
           rows: page
         });
-        const identities = (seedResponse.module_row_ids ?? []).map((moduleRowId, index) => ({
-          moduleRowId,
-          sourceRowId: seedSourceRowId(page[index])
-        })).filter((identity) => identity.sourceRowId !== null);
+        const identityByModuleRowId = new Map;
+        for (const [index, moduleRowId] of (seedResponse.module_row_ids ?? []).entries()) {
+          const sourceRowId = seedSourceRowId(page[index]);
+          if (sourceRowId === null)
+            continue;
+          identityByModuleRowId.set(moduleRowId, { moduleRowId, sourceRowId });
+        }
+        const identities = [...identityByModuleRowId.values()];
         if (identities.length > 0) {
           args.db.transaction(() => {
             for (const identity of identities) {
@@ -1955,6 +1595,185 @@ function pullMemoryMirrorOnce(args) {
   mirrorFlights.set(args.module, flight);
   return flight;
 }
+
+// src/hooks/magic-context/compartment-parser.ts
+var COMPARTMENT_REGEX = /<compartment\s+([^>]*?)\s*>(.*?)<\/compartment>/gs;
+var ATTR_START_REGEX = /\bstart="(\d+)"/;
+var ATTR_END_REGEX = /\bend="(\d+)"/;
+var ATTR_TITLE_REGEX = /\btitle="([^"]*)"/;
+var ATTR_EPISODE_REGEX = /\bepisode_type="([^"]*)"/;
+var ATTR_IMPORTANCE_REGEX = /\bimportance="(\d+)"/;
+function makeTierOpenRegex(n) {
+  return new RegExp(`<p${n}\\s*(/?)>`);
+}
+var TIER_OPEN_REGEXES = [
+  makeTierOpenRegex(1),
+  makeTierOpenRegex(2),
+  makeTierOpenRegex(3),
+  makeTierOpenRegex(4)
+];
+var TIER_CLOSE_ANY_REGEX = /<\/p\d/;
+var TIER_OPEN_ANY_REGEX = /<p\d/;
+var CATEGORY_BLOCK_REGEX = /<(PROJECT_RULES|ARCHITECTURE|CONSTRAINTS|CONFIG_VALUES|NAMING)>(.*?)<\/\1>/gs;
+var FACT_ITEM_REGEX = /^\s*\*\s*(.+)$/gm;
+var UNPROCESSED_REGEX = /<unprocessed_from>(\d+)<\/unprocessed_from>/;
+var USER_OBSERVATIONS_REGEX = /<user_observations>(.*?)<\/user_observations>/s;
+var USER_OBS_ITEM_REGEX = /^\s*\*\s*(.+)$/gm;
+var PRIMER_CANDIDATES_REGEX = /<primer_candidates>(.*?)<\/primer_candidates>/s;
+var PRIMER_ELEMENT_REGEX = /<primer\s+at_compartment="(\d+)"\s*>(.*?)<\/primer>/gs;
+var PRIMER_ITEM_REGEX = /^\s*(?:\*|-|\d+\.)\s*(.+)$/gm;
+var FACTS_BLOCK_REGEX = /<facts>(.*?)<\/facts>/s;
+var EVENTS_BLOCK_REGEX = /<events>(.*?)<\/events>/s;
+var EVENT_ELEMENT_REGEX = /<([a-z_]+)\s+at_compartment="(\d+)"\s*>(.*?)<\/\1>/gs;
+var EVENT_FIELD_REGEX = /<([a-z_]+)\s*>(.*?)<\/\1>/gs;
+function extractTier(inner, index) {
+  const openMatch = TIER_OPEN_REGEXES[index].exec(inner);
+  if (!openMatch)
+    return;
+  if (openMatch[1] === "/")
+    return "";
+  const rest = inner.slice(openMatch.index + openMatch[0].length);
+  const closeAt = rest.search(TIER_CLOSE_ANY_REGEX);
+  let body = closeAt === -1 ? rest : rest.slice(0, closeAt);
+  const openInside = body.search(TIER_OPEN_ANY_REGEX);
+  if (openInside !== -1)
+    body = body.slice(0, openInside);
+  return unescapeXml(body.trim());
+}
+function extractTiersFromInner(inner) {
+  return {
+    p1: extractTier(inner, 0),
+    p2: extractTier(inner, 1),
+    p3: extractTier(inner, 2),
+    p4: extractTier(inner, 3)
+  };
+}
+function parseCompartmentOutput(text) {
+  const compartments = [];
+  const facts = [];
+  for (const match of text.matchAll(COMPARTMENT_REGEX)) {
+    const attrs = match[1];
+    const inner = match[2];
+    const startMatch = attrs.match(ATTR_START_REGEX);
+    const endMatch = attrs.match(ATTR_END_REGEX);
+    const titleMatch = attrs.match(ATTR_TITLE_REGEX);
+    if (!startMatch || !endMatch || !titleMatch)
+      continue;
+    const startMessage = parseInt(startMatch[1], 10);
+    const endMessage = parseInt(endMatch[1], 10);
+    const title = unescapeXml(titleMatch[1]);
+    if (Number.isNaN(startMessage) || Number.isNaN(endMessage) || !title)
+      continue;
+    const episodeMatch = attrs.match(ATTR_EPISODE_REGEX);
+    const importanceMatch = attrs.match(ATTR_IMPORTANCE_REGEX);
+    const episodeType = episodeMatch ? unescapeXml(episodeMatch[1]) : undefined;
+    const importance = importanceMatch ? parseInt(importanceMatch[1], 10) : undefined;
+    const p1 = extractTier(inner, 0);
+    if (typeof p1 === "string" && p1.length > 0) {
+      const p2 = extractTier(inner, 1);
+      const p3 = extractTier(inner, 2);
+      const p4 = extractTier(inner, 3);
+      compartments.push({
+        startMessage,
+        endMessage,
+        title,
+        content: p1,
+        p1,
+        p2: typeof p2 === "string" ? p2 : p1,
+        p3: typeof p3 === "string" ? p3 : typeof p2 === "string" ? p2 : p1,
+        p4: typeof p4 === "string" ? p4 : "",
+        importance,
+        episodeType
+      });
+      continue;
+    }
+    const content = unescapeXml(inner.trim());
+    if (content) {
+      compartments.push({
+        startMessage,
+        endMessage,
+        title,
+        content,
+        importance,
+        episodeType
+      });
+    }
+  }
+  const factsBlockMatch = text.match(FACTS_BLOCK_REGEX);
+  const factsScope = factsBlockMatch ? factsBlockMatch[1] : text.replace(EVENTS_BLOCK_REGEX, "").replace(/<compartment\s+[^>]*?\s*>.*?<\/compartment>/gs, "");
+  for (const categoryMatch of factsScope.matchAll(CATEGORY_BLOCK_REGEX)) {
+    const category = categoryMatch[1];
+    const blockContent = categoryMatch[2];
+    for (const itemMatch of blockContent.matchAll(FACT_ITEM_REGEX)) {
+      const content = unescapeXml(itemMatch[1].trim());
+      if (content) {
+        facts.push({ category, content });
+      }
+    }
+  }
+  const unprocessedMatch = text.match(UNPROCESSED_REGEX);
+  const unprocessedFrom = unprocessedMatch ? parseInt(unprocessedMatch[1], 10) : null;
+  const userObservations = [];
+  const userObsMatch = text.match(USER_OBSERVATIONS_REGEX);
+  if (userObsMatch) {
+    for (const itemMatch of userObsMatch[1].matchAll(USER_OBS_ITEM_REGEX)) {
+      const obs = unescapeXml(itemMatch[1].trim());
+      if (obs)
+        userObservations.push(obs);
+    }
+  }
+  const primerCandidates = [];
+  const primerMatch = text.match(PRIMER_CANDIDATES_REGEX);
+  if (primerMatch) {
+    const block = primerMatch[1];
+    let sawElement = false;
+    for (const el of block.matchAll(PRIMER_ELEMENT_REGEX)) {
+      sawElement = true;
+      const question = unescapeXml(el[2].trim());
+      if (question) {
+        primerCandidates.push({
+          question,
+          originCompartmentIndex: Number.parseInt(el[1], 10)
+        });
+      }
+    }
+    if (!sawElement) {
+      for (const itemMatch of block.matchAll(PRIMER_ITEM_REGEX)) {
+        const question = unescapeXml(itemMatch[1].trim());
+        if (question)
+          primerCandidates.push({ question });
+      }
+    }
+  }
+  const events = parseEvents(text);
+  compartments.sort((a, b) => a.startMessage - b.startMessage);
+  return { compartments, facts, events, unprocessedFrom, userObservations, primerCandidates };
+}
+function parseEvents(text) {
+  const blockMatch = text.match(EVENTS_BLOCK_REGEX);
+  if (!blockMatch)
+    return [];
+  const block = blockMatch[1];
+  const events = [];
+  for (const elMatch of block.matchAll(EVENT_ELEMENT_REGEX)) {
+    const kind = elMatch[1];
+    const atRaw = parseInt(elMatch[2], 10);
+    const atCompartment = Number.isNaN(atRaw) ? null : atRaw;
+    const fields = {};
+    for (const fieldMatch of elMatch[3].matchAll(EVENT_FIELD_REGEX)) {
+      const name = fieldMatch[1];
+      const value = unescapeXml(fieldMatch[2].trim());
+      if (value)
+        fields[name] = value;
+    }
+    events.push({ kind, atCompartment, fields });
+  }
+  return events;
+}
+function unescapeXml(s) {
+  return s.replace(/&amp;/g, "&").replace(/&apos;/g, "'").replace(/&quot;/g, '"').replace(/&lt;/g, "<").replace(/&gt;/g, ">");
+}
+
 // src/features/magic-context/storage-schema-helpers.ts
 function ensureColumn(db, table, column, definition) {
   if (!/^[a-z][a-z0-9_]*$/.test(table) || !/^[a-z][a-z0-9_]*$/.test(column) || !/^[A-Z0-9_"'(),[\]\s]+$/i.test(definition)) {
@@ -2047,7 +1866,7 @@ function healMissingMemoryBlockIds(db, columns) {
 }
 
 // src/features/magic-context/workspaces.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 
 // src/features/magic-context/memory/constants.ts
 var V2_MEMORY_CATEGORIES = [
@@ -2101,7 +1920,7 @@ var CATEGORY_DEFAULT_TTL = {
 
 // src/features/magic-context/memory/project-identity.ts
 import { execFileSync } from "node:child_process";
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 import { existsSync, realpathSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import path from "node:path";
@@ -2116,6 +1935,7 @@ var dubiousOwnershipLoggedDirectories = new Set;
 var dubiousOwnershipWarnedDirectories = new Set;
 var transientGitIdentityReuseLoggedDirectories = new Set;
 var execFileSyncForIdentity = execFileSync;
+var userHomeDirectoryForIdentity = () => homedir();
 var nowMs = () => Date.now();
 
 class ProjectIdentityError extends Error {
@@ -2169,7 +1989,7 @@ function getErrorStderr(error) {
 }
 function directoryFallback(directory) {
   const canonical = path.resolve(directory);
-  const hash = createHash2("md5").update(canonical, "utf8").digest("hex").slice(0, 12);
+  const hash = createHash3("md5").update(canonical, "utf8").digest("hex").slice(0, 12);
   return `dir:${hash}`;
 }
 function assertDirectoryUsable(canonicalDirectory, rawDirectory) {
@@ -2320,9 +2140,12 @@ function takeDubiousOwnershipProjectIdentityWarning(directory) {
   dubiousOwnershipWarnedDirectories.add(canonical);
   return formatDubiousOwnershipWarning(canonical);
 }
+function canonicalUserHomeDirectory() {
+  return realpathSync.native(userHomeDirectoryForIdentity());
+}
 function isUserHomeDirectory(directory) {
   try {
-    return realpathSync.native(path.resolve(directory)) === realpathSync.native(homedir());
+    return realpathSync.native(path.resolve(directory)) === canonicalUserHomeDirectory();
   } catch {
     return false;
   }
@@ -2391,22 +2214,52 @@ function hasGitDir(canonical) {
     return false;
   }
 }
-function hasGitDirInAncestorChain(startDirectory) {
+function gitRootInAncestorChain(startDirectory) {
   let current = startDirectory;
   while (true) {
     if (existsSync(path.join(current, ".git"))) {
-      return true;
+      try {
+        return realpathSync.native(current);
+      } catch {
+        return path.resolve(current);
+      }
     }
     const parent = path.dirname(current);
     if (parent === current) {
-      return false;
+      return null;
     }
     current = parent;
   }
 }
-function resolveProjectIdentityForSession(directory) {
-  if (isUserHomeDirectory(directory))
-    return;
+function hasGitDirInAncestorChain(startDirectory) {
+  return gitRootInAncestorChain(startDirectory) !== null;
+}
+function gitRootDirectory(canonical) {
+  const direct = gitRootInAncestorChain(canonical);
+  if (direct)
+    return direct;
+  try {
+    const realCanonical = realpathSync.native(canonical);
+    return realCanonical === canonical ? null : gitRootInAncestorChain(realCanonical);
+  } catch {
+    return null;
+  }
+}
+function resolveProjectIdentityForSession(directory, allowHomeProject = false) {
+  const canonicalHome = canonicalUserHomeDirectory();
+  const canonicalDirectory = (() => {
+    try {
+      return realpathSync.native(path.resolve(directory));
+    } catch {
+      return path.resolve(directory);
+    }
+  })();
+  const inheritsHomeRepository = gitRootDirectory(canonicalDirectory) === canonicalHome;
+  if (canonicalDirectory === canonicalHome || inheritsHomeRepository) {
+    if (!allowHomeProject)
+      return;
+    return directoryFallback(canonicalHome);
+  }
   return resolveProjectIdentityOrFallback(directory);
 }
 function normalizeStoredProjectPath(rawOrStored) {
@@ -2608,7 +2461,7 @@ function computeWorkspaceEpochFingerprint(db, identities) {
   const canonical = uniqueSorted(identities.filter((identity) => identity.length > 0));
   const epochs = getEpochMap(db, canonical);
   const shareCategories = selectWorkspaceShareCategories(db, canonical);
-  const hash = createHash3("sha256");
+  const hash = createHash4("sha256");
   hash.update("share_categories", "utf8");
   hash.update("\x00");
   hash.update(shareCategories === null ? "NO_WORKSPACE" : JSON.stringify(shareCategories), "utf8");
@@ -2704,15 +2557,38 @@ function isSqliteLockError(error) {
 function tableExists2(db, name) {
   return Boolean(db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name = ?").get(name));
 }
+function healMismatchedTierClose(db, table, hasLegacy) {
+  if (!tableExists2(db, table))
+    return;
+  const columns = new Set(db.prepare(`PRAGMA table_info(${table})`).all().map((row) => row.name));
+  for (const required of ["content", "p1", "p2", "p3", "p4"]) {
+    if (!columns.has(required))
+      return;
+  }
+  if (hasLegacy && !columns.has("legacy"))
+    return;
+  const predicate = hasLegacy ? "legacy = 1 AND p1 IS NULL AND content LIKE '%<p1%'" : "p1 IS NULL AND content LIKE '%<p1%'";
+  const rows = db.prepare(`SELECT id, content FROM ${table} WHERE ${predicate}`).all();
+  const update = db.prepare(`UPDATE ${table} SET p1 = ?, p2 = ?, p3 = ?, p4 = ?${hasLegacy ? ", legacy = 0" : ""} WHERE id = ?`);
+  for (const row of rows) {
+    const tiers = extractTiersFromInner(row.content);
+    if (typeof tiers.p1 !== "string" || tiers.p1.length === 0)
+      continue;
+    const p1 = tiers.p1;
+    const p2 = typeof tiers.p2 === "string" ? tiers.p2 : p1;
+    const p3 = typeof tiers.p3 === "string" ? tiers.p3 : p2;
+    const p4 = typeof tiers.p4 === "string" ? tiers.p4 : "";
+    update.run(p1, p2, p3, p4, row.id);
+  }
+}
 function assertForeignKeyIntegrity(db, table) {
   const rows = (table ? db.prepare(`PRAGMA foreign_key_check(${table})`) : db.prepare("PRAGMA foreign_key_check")).all();
   if (rows.length > 0) {
     throw new Error(`foreign_key_check failed after embedding table rebuild${table ? ` (${table})` : ""} (${rows.length} violation(s))`);
   }
 }
-function authorityPrivilegeCheck(db) {
-  const native = db;
-  return typeof native.function === "function" || typeof native.createFunction === "function" ? "mc_privileged_writer() = 0" : "COALESCE((SELECT enabled FROM context_privilege_state WHERE id = 1), 0) = 0";
+function authorityPrivilegeCheck() {
+  return "COALESCE((SELECT enabled FROM context_privilege_state WHERE id = 1), 0) = 0";
 }
 function managedAuthorityNoteRow(row) {
   return `(
@@ -2731,7 +2607,7 @@ function managedAuthorityNoteRow(row) {
     )`;
 }
 function installLatestAuthorityTriggers(db) {
-  const privilegeCheck = authorityPrivilegeCheck(db);
+  const privilegeCheck = authorityPrivilegeCheck();
   if (tableExists2(db, "memories")) {
     db.exec(`
             DROP TRIGGER IF EXISTS memories_authority_guard_insert;
@@ -4657,6 +4533,48 @@ var MIGRATIONS = [
                     ON memory_mutation_log(project_path, target_memory_id, id);
             `);
     }
+  },
+  {
+    version: 70,
+    description: "heal legacy compartments stranded by mismatched tier closing tags (issue #246)",
+    up(db) {
+      healMismatchedTierClose(db, "compartments", true);
+      healMismatchedTierClose(db, "recomp_compartments", false);
+    }
+  },
+  {
+    version: 71,
+    description: "rebuild authority guard triggers to the durable state-table form (issue #253)",
+    up(db) {
+      installLatestAuthorityTriggers(db);
+    }
+  },
+  {
+    version: 72,
+    description: "add per-session compaction mode record column (issue #266)",
+    up(db) {
+      if (tableExists2(db, "session_meta")) {
+        ensureColumn(db, "session_meta", "compaction_mode_record", "TEXT");
+      }
+    }
+  },
+  {
+    version: 73,
+    description: "persist the last successful todowrite permission verdict",
+    up(db) {
+      if (tableExists2(db, "session_meta")) {
+        ensureColumn(db, "session_meta", "todo_permission_denied", "INTEGER NOT NULL DEFAULT 2");
+      }
+    }
+  },
+  {
+    version: 74,
+    description: "persist detected context-limit provenance",
+    up(db) {
+      if (tableExists2(db, "session_meta")) {
+        ensureColumn(db, "session_meta", "detected_context_limit_provenance", "TEXT NOT NULL DEFAULT 'unknown'");
+      }
+    }
   }
 ];
 var LATEST_MIGRATION_VERSION = MIGRATIONS.reduce((max, m) => Math.max(max, m.version), 0);
@@ -4766,151 +4684,6 @@ async function runMigrationsWithRetry(db, options = {}) {
     }
   }
 }
-// src/features/magic-context/project-docs-hash.ts
-import { createHash as createHash4 } from "node:crypto";
-import { lstatSync, readFileSync, statSync as statSync2 } from "node:fs";
-import path2 from "node:path";
-var PROJECT_DOC_FILES = ["ARCHITECTURE.md", "STRUCTURE.md"];
-var PROJECT_DOCS_DELIMITER = `
-
----
-
-`;
-var MAX_PROJECT_DOC_BYTES = 256 * 1024;
-var docsCache = new Map;
-function canonicalizeDocContent(raw) {
-  return raw.replace(/^\uFEFF/, "").replace(/\r\n/g, `
-`).split(`
-`).map((line) => line.replace(/[ \t]+$/, "")).join(`
-`).replace(/\n+$/, "");
-}
-function fingerprintFile(filePath) {
-  try {
-    const stat = lstatSync(filePath);
-    const isReadableDoc = stat.isFile() && stat.size <= MAX_PROJECT_DOC_BYTES;
-    return {
-      exists: isReadableDoc,
-      mtimeMs: stat.mtimeMs,
-      size: stat.size
-    };
-  } catch {
-    return { exists: false, mtimeMs: 0, size: 0 };
-  }
-}
-function readDirectoryMtimeMs(projectDirectory) {
-  try {
-    return statSync2(projectDirectory).mtimeMs;
-  } catch {
-    return 0;
-  }
-}
-function fingerprintsEqual(a, b) {
-  return a?.exists === b.exists && a.mtimeMs === b.mtimeMs && a.size === b.size;
-}
-function cacheFilesEqual(cachedFiles, currentFiles) {
-  for (const [filePath, current] of currentFiles) {
-    if (!fingerprintsEqual(cachedFiles.get(filePath), current)) {
-      return false;
-    }
-  }
-  return true;
-}
-function readCurrentFingerprints(projectDirectory) {
-  const files = new Map;
-  for (const filename of PROJECT_DOC_FILES) {
-    const filePath = path2.join(projectDirectory, filename);
-    files.set(filePath, fingerprintFile(filePath));
-  }
-  return { directoryMtimeMs: readDirectoryMtimeMs(projectDirectory), files };
-}
-function readCanonicalPieces(projectDirectory, files) {
-  const hashPieces = [];
-  const renderedSections = [];
-  for (const filename of PROJECT_DOC_FILES) {
-    const filePath = path2.join(projectDirectory, filename);
-    const fingerprint = files.get(filePath);
-    if (!fingerprint?.exists) {
-      continue;
-    }
-    let safeToRead = false;
-    try {
-      const st = lstatSync(filePath);
-      safeToRead = st.isFile() && st.size <= MAX_PROJECT_DOC_BYTES;
-    } catch {
-      safeToRead = false;
-    }
-    if (!safeToRead) {
-      continue;
-    }
-    const canonicalContent = canonicalizeDocContent(readFileSync(filePath, "utf8"));
-    hashPieces.push(`file:${filename}
-${canonicalContent}`);
-    renderedSections.push(`<file name="${escapeXmlAttr(filename)}">
-${escapeXmlContent(canonicalContent)}
-</file>`);
-  }
-  return { hashPieces, renderedSections };
-}
-function buildRenderedBlock(renderedSections) {
-  if (renderedSections.length === 0) {
-    return "";
-  }
-  return `<project-docs>
-${renderedSections.join(`
-
-`)}
-</project-docs>`;
-}
-function hashCanonicalPieces(hashPieces) {
-  if (hashPieces.length === 0) {
-    return "";
-  }
-  return createHash4("sha256").update(hashPieces.join(PROJECT_DOCS_DELIMITER), "utf8").digest("hex");
-}
-function readProjectDocsCanonical(projectDirectory) {
-  const canonicalDirectory = path2.resolve(projectDirectory);
-  const current = readCurrentFingerprints(canonicalDirectory);
-  const cached = docsCache.get(canonicalDirectory);
-  if (cached && cacheFilesEqual(cached.files, current.files)) {
-    cached.directoryMtimeMs = current.directoryMtimeMs;
-    return {
-      renderedBlock: cached.cachedRendered,
-      canonicalHash: cached.cachedHash
-    };
-  }
-  const { hashPieces, renderedSections } = readCanonicalPieces(canonicalDirectory, current.files);
-  const canonicalHash = hashCanonicalPieces(hashPieces);
-  const renderedBlock = buildRenderedBlock(renderedSections);
-  docsCache.set(canonicalDirectory, {
-    directoryMtimeMs: current.directoryMtimeMs,
-    files: current.files,
-    cachedHash: canonicalHash,
-    cachedRendered: renderedBlock
-  });
-  return { renderedBlock, canonicalHash };
-}
-function computeProjectDocsHash(projectDirectory) {
-  return readProjectDocsCanonical(projectDirectory).canonicalHash;
-}
-// src/features/magic-context/storage-db.ts
-import { chmodSync, copyFileSync, cpSync, existsSync as existsSync3, mkdirSync, mkdtempSync } from "node:fs";
-import { dirname, join as join2 } from "node:path";
-
-// src/plugin/boot-quiet.ts
-var BOOT_QUIET_MS = 120000;
-var bootQuietUntilMs = 0;
-function beginBootQuietPeriod(now = Date.now()) {
-  if (bootQuietUntilMs === 0)
-    bootQuietUntilMs = now + BOOT_QUIET_MS;
-}
-function bootQuietRemainingMs(now = Date.now()) {
-  return Math.max(0, bootQuietUntilMs - now);
-}
-function scheduleAfterBootQuiet(task, additionalDelayMs = 0) {
-  const timer = setTimeout(task, bootQuietRemainingMs() + Math.max(0, additionalDelayMs));
-  timer.unref?.();
-  return timer;
-}
 
 // src/features/magic-context/tool-definition-tokens.ts
 import { createHash as createHash5 } from "node:crypto";
@@ -5024,11 +4797,11 @@ function getMeasuredToolDefinitionTokens(providerID, modelID, agentName) {
 
 // src/features/magic-context/tool-owner-backfill.ts
 import { existsSync as existsSync2 } from "node:fs";
-import { join } from "node:path";
+import { join as join2 } from "node:path";
 var LEASE_DURATION_MS = 5 * 60 * 1000;
 var LEASE_RENEWAL_MS = 60 * 1000;
 function resolveOpencodeDbPath() {
-  return join(getDataDir(), "opencode", "opencode.db");
+  return join2(getDataDir(), "opencode", "opencode.db");
 }
 function ensureBackfillStateTable(db) {
   db.exec(`
@@ -5283,30 +5056,40 @@ var persistenceByDatabase = new WeakMap;
 var persistenceErrorByDatabase = new WeakMap;
 var pathByDatabase = new WeakMap;
 var lastSchemaFenceRejection = null;
+var lastMigrationOnOpenRefusal = null;
 function getSchemaFenceRejection() {
   return lastSchemaFenceRejection;
 }
-var LATEST_SUPPORTED_VERSION = 69;
+function getMigrationOnOpenRefusal() {
+  return lastMigrationOnOpenRefusal;
+}
+var LATEST_SUPPORTED_VERSION = 74;
 var PERMISSIONS_ENFORCEABLE = process.platform !== "win32";
+var defaultStoragePermissionFs = { chmodSync, mkdirSync };
+var storagePermissionFs = defaultStoragePermissionFs;
 function ensureSecureStorageDir(dir) {
-  mkdirSync(dir, { recursive: true, mode: 448 });
+  if (!shouldEnforcePrivateStoragePermissions()) {
+    storagePermissionFs.mkdirSync(dir, { recursive: true });
+    return;
+  }
+  storagePermissionFs.mkdirSync(dir, { recursive: true, mode: 448 });
   if (!PERMISSIONS_ENFORCEABLE)
     return;
   try {
-    chmodSync(dir, 448);
+    storagePermissionFs.chmodSync(dir, 448);
   } catch (error) {
     log(`[magic-context] could not restrict storage dir permissions on ${dir}: ${getErrorMessage(error)}`);
   }
 }
 function restrictDatabaseFilePermissions(dbPath) {
-  if (!PERMISSIONS_ENFORCEABLE)
+  if (!PERMISSIONS_ENFORCEABLE || !shouldEnforcePrivateStoragePermissions())
     return;
   for (const suffix of ["", "-wal", "-shm"]) {
     const file = `${dbPath}${suffix}`;
     if (!existsSync3(file))
       continue;
     try {
-      chmodSync(file, 384);
+      storagePermissionFs.chmodSync(file, 384);
     } catch (error) {
       log(`[magic-context] could not restrict DB file permissions on ${file}: ${getErrorMessage(error)}`);
     }
@@ -5318,12 +5101,12 @@ function resolveDatabasePath(dbPathOverride) {
   }
   const testDataDir = process.env.MAGIC_CONTEXT_TEST_DATA_DIR;
   if (testDataDir && !process.env.XDG_DATA_HOME) {
-    const dbDir2 = join2(testDataDir, "cortexkit", "magic-context");
-    return { dbDir: dbDir2, dbPath: join2(dbDir2, "context.db") };
+    const dbDir2 = join3(testDataDir, "cortexkit", "magic-context");
+    return { dbDir: dbDir2, dbPath: join3(dbDir2, "context.db") };
   }
   if (false) {}
   const dbDir = getMagicContextStorageDir();
-  return { dbDir, dbPath: join2(dbDir, "context.db") };
+  return { dbDir, dbPath: join3(dbDir, "context.db") };
 }
 function getDatabasePath(db) {
   return pathByDatabase.get(db) ?? null;
@@ -5332,7 +5115,7 @@ function migrateLegacyStorageIfNeeded(targetDbPath, targetDbDir) {
   if (existsSync3(targetDbPath))
     return;
   const legacyDir = getLegacyOpenCodeMagicContextStorageDir();
-  const legacyDbPath = join2(legacyDir, "context.db");
+  const legacyDbPath = join3(legacyDir, "context.db");
   if (!existsSync3(legacyDbPath))
     return;
   log(`[magic-context] migrating legacy plugin storage: ${legacyDir} -> ${targetDbDir} (legacy left in place as backup)`);
@@ -5349,7 +5132,7 @@ function migrateLegacyStorageIfNeeded(targetDbPath, targetDbDir) {
   }
   for (const suffix of ["", "-wal", "-shm"]) {
     const src = `${legacyDbPath}${suffix}`;
-    const dst = join2(targetDbDir, `context.db${suffix}`);
+    const dst = join3(targetDbDir, `context.db${suffix}`);
     if (existsSync3(src)) {
       try {
         copyFileSync(src, dst);
@@ -5358,8 +5141,8 @@ function migrateLegacyStorageIfNeeded(targetDbPath, targetDbDir) {
       }
     }
   }
-  const legacyModelsDir = join2(legacyDir, "models");
-  const targetModelsDir = join2(targetDbDir, "models");
+  const legacyModelsDir = join3(legacyDir, "models");
+  const targetModelsDir = join3(targetDbDir, "models");
   if (existsSync3(legacyModelsDir) && !existsSync3(targetModelsDir)) {
     try {
       cpSync(legacyModelsDir, targetModelsDir, { recursive: true });
@@ -5376,6 +5159,9 @@ function getPersistedSchemaVersion(db) {
   const row = db.prepare("SELECT MAX(version) AS version FROM schema_migrations").get();
   return row?.version ?? 0;
 }
+function formatSchemaFenceBootLog(persistedVersion, supportedVersion) {
+  return `[magic-context] storage schema at boot: database=v${persistedVersion}, supported_fence=v${supportedVersion}`;
+}
 function getRuntimeLatestSupportedVersion(options) {
   if (options?.latestSupportedVersion !== undefined) {
     return options.latestSupportedVersion;
@@ -5392,12 +5178,109 @@ function getRuntimeLatestSupportedVersion(options) {
 function enforceSchemaFence(db, dbPath, latestSupportedVersion) {
   const persistedVersion = getPersistedSchemaVersion(db);
   if (persistedVersion <= latestSupportedVersion) {
+    lastSchemaFenceRejection = null;
     return true;
   }
   lastSchemaFenceRejection = { persistedVersion, supportedVersion: latestSupportedVersion };
   log(`[magic-context] storage fatal: refusing to open ${dbPath}; database schema v${persistedVersion} is newer than this binary supports (max v${latestSupportedVersion}). A pinned or stale plugin is likely sharing this database with a newer instance; update or unpin Magic Context with 'npx @cortexkit/magic-context@latest doctor --force', then restart.`);
   return false;
 }
+function unreadableDiscovery(path2) {
+  return {
+    state: "unreadable",
+    serverPids: [],
+    staleFiles: [],
+    unreadableFile: path2
+  };
+}
+function inspectRpcServerDiscovery(storageDir) {
+  const rpcRoot = join3(storageDir, "rpc");
+  let projectEntries;
+  try {
+    projectEntries = readdirSync(rpcRoot, { withFileTypes: true });
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { state: "absent", serverPids: [], staleFiles: [] };
+    }
+    return unreadableDiscovery(rpcRoot);
+  }
+  const portFiles = [];
+  for (const projectEntry of projectEntries) {
+    if (!projectEntry.isDirectory())
+      continue;
+    const projectDir = join3(rpcRoot, projectEntry.name);
+    let entries;
+    try {
+      entries = readdirSync(projectDir);
+    } catch {
+      return unreadableDiscovery(projectDir);
+    }
+    for (const entry of entries) {
+      if (entry === "port" || entry.startsWith("port-") && entry.endsWith(".json")) {
+        portFiles.push(join3(projectDir, entry));
+      }
+    }
+  }
+  if (portFiles.length === 0) {
+    return { state: "absent", serverPids: [], staleFiles: [] };
+  }
+  const pids = new Set;
+  const staleFiles = [];
+  for (const portFile of portFiles) {
+    let raw;
+    try {
+      raw = readFileSync(portFile, "utf8");
+    } catch {
+      return unreadableDiscovery(portFile);
+    }
+    const filename = basename(portFile);
+    const pidFromName = /^port-(\d+)/.exec(filename)?.[1];
+    const record = parseRpcPortFile(raw, pidFromName ? Number(pidFromName) : 0);
+    if (!record || !Number.isInteger(record.pid) || record.pid <= 0) {
+      return unreadableDiscovery(portFile);
+    }
+    if (isPidAlive(record.pid))
+      pids.add(record.pid);
+    else
+      staleFiles.push(portFile);
+  }
+  const serverPids = [...pids].sort((a, b) => a - b);
+  if (serverPids.length > 0) {
+    return { state: "live", serverPids, staleFiles };
+  }
+  for (const staleFile of staleFiles) {
+    try {
+      unlinkSync(staleFile);
+    } catch {
+      return unreadableDiscovery(staleFile);
+    }
+  }
+  return { state: "stale", serverPids: [], staleFiles };
+}
+function enforceMigrationOnOpenGuard(db, dbPath, dbDir, latestSupportedVersion) {
+  const persistedVersion = getPersistedSchemaVersion(db);
+  if (persistedVersion >= latestSupportedVersion) {
+    lastMigrationOnOpenRefusal = null;
+    return true;
+  }
+  const discovery = inspectRpcServerDiscovery(dbDir);
+  if (discovery.state === "absent" || discovery.state === "stale") {
+    lastMigrationOnOpenRefusal = null;
+    return true;
+  }
+  lastMigrationOnOpenRefusal = {
+    persistedVersion,
+    supportedVersion: latestSupportedVersion,
+    serverPids: discovery.serverPids,
+    ...discovery.unreadableFile ? { unreadableFile: discovery.unreadableFile } : {}
+  };
+  if (discovery.state === "unreadable") {
+    log(`[magic-context] storage fatal: refusing to migrate ${dbPath} from schema v${persistedVersion} to v${latestSupportedVersion} because RPC discovery file ${discovery.unreadableFile ?? "<unknown>"} is unreadable or invalid, so the absence of a live OpenCode server cannot be proven. Restart OpenCode, remove or repair the named discovery file, then retry this process.`);
+  } else {
+    log(`[magic-context] storage fatal: refusing to migrate ${dbPath} from schema v${persistedVersion} to v${latestSupportedVersion} while live OpenCode server PID(s) ${discovery.serverPids.join(", ")} may still use the old plugin build. Restart OpenCode, then retry this process.`);
+  }
+  return false;
+}
 var sqlitePragmaConfig = {
   cacheSizeMb: 64,
   mmapSizeMb: 0
@@ -5442,6 +5325,9 @@ function finishDatabaseOpen(db, dbPath, explicitDbPath, latestSupportedVersion)
   pathByDatabase.set(db, dbPath);
   persistenceByDatabase.set(db, true);
   persistenceErrorByDatabase.delete(db);
+  if (!explicitDbPath) {
+    log(formatSchemaFenceBootLog(getPersistedSchemaVersion(db), latestSupportedVersion));
+  }
   return db;
 }
 function initializeDatabase(db) {
@@ -6042,12 +5928,14 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       note_nudge_anchors TEXT NOT NULL DEFAULT '[]',
       auto_search_hint_decisions TEXT NOT NULL DEFAULT '[]',
       last_todo_state TEXT DEFAULT '',
+      todo_permission_denied INTEGER NOT NULL DEFAULT 2,
       todo_synthetic_call_id TEXT DEFAULT '',
       todo_synthetic_anchor_message_id TEXT DEFAULT '',
       todo_synthetic_state_json TEXT DEFAULT '',
       is_subagent INTEGER DEFAULT 0,
       last_context_percentage REAL DEFAULT 0,
       last_input_tokens INTEGER DEFAULT 0,
+      detected_context_limit_provenance TEXT NOT NULL DEFAULT 'unknown',
       observed_safe_input_tokens INTEGER NOT NULL DEFAULT 0,
       cache_alert_sent INTEGER NOT NULL DEFAULT 0,
       times_execute_threshold_reached INTEGER DEFAULT 0,
@@ -6102,6 +5990,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       emergency_drain_active INTEGER NOT NULL DEFAULT 0,
       historian_drain_failure_at INTEGER NOT NULL DEFAULT 0,
       wrapup_in_progress_state TEXT,
+      compaction_mode_record TEXT,
       cached_m0_materialized_at INTEGER,
       cached_m0_session_facts_version INTEGER,
       cached_m0_upgrade_state TEXT,
@@ -6301,6 +6190,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
   ensureColumn(db, "session_meta", "note_nudge_anchors", "TEXT NOT NULL DEFAULT '[]'");
   ensureColumn(db, "session_meta", "auto_search_hint_decisions", "TEXT NOT NULL DEFAULT '[]'");
   ensureColumn(db, "session_meta", "last_todo_state", "TEXT DEFAULT ''");
+  ensureColumn(db, "session_meta", "todo_permission_denied", "INTEGER NOT NULL DEFAULT 2");
   ensureColumn(db, "session_meta", "todo_synthetic_call_id", "TEXT DEFAULT ''");
   ensureColumn(db, "session_meta", "todo_synthetic_anchor_message_id", "TEXT DEFAULT ''");
   ensureColumn(db, "session_meta", "todo_synthetic_state_json", "TEXT DEFAULT ''");
@@ -6357,6 +6247,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
   ensureColumn(db, "session_meta", "recomp_partial_range_end", "INTEGER DEFAULT 0");
   ensureColumn(db, "session_meta", "detected_context_limit", "INTEGER DEFAULT 0");
   ensureColumn(db, "session_meta", "detected_context_limit_model_key", "TEXT");
+  ensureColumn(db, "session_meta", "detected_context_limit_provenance", "TEXT NOT NULL DEFAULT 'unknown'");
   ensureColumn(db, "session_meta", "needs_emergency_recovery", "INTEGER DEFAULT 0");
   ensureColumn(db, "session_meta", "emergency_recovery_origin", "TEXT DEFAULT ''");
   ensureColumn(db, "session_meta", "pending_compaction_marker_state", "TEXT");
@@ -6407,6 +6298,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
   ensureColumn(db, "session_meta", "emergency_drain_active", "INTEGER NOT NULL DEFAULT 0");
   ensureColumn(db, "session_meta", "historian_drain_failure_at", "INTEGER NOT NULL DEFAULT 0");
   ensureColumn(db, "session_meta", "wrapup_in_progress_state", "TEXT");
+  ensureColumn(db, "session_meta", "compaction_mode_record", "TEXT");
   ensureColumn(db, "session_meta", "cached_m0_materialized_at", "INTEGER");
   ensureColumn(db, "session_meta", "cached_m0_session_facts_version", "INTEGER");
   ensureColumn(db, "session_meta", "cached_m0_upgrade_state", "TEXT");
@@ -6546,12 +6438,13 @@ function openDatabase(dbPathOrOptions) {
   const explicitDbPath = options?.dbPath !== undefined;
   const { dbDir, dbPath } = resolveDatabasePath(options?.dbPath);
   const latestSupportedVersion = getRuntimeLatestSupportedVersion(options);
+  lastSchemaFenceRejection = null;
+  lastMigrationOnOpenRefusal = null;
   const existing = databases.get(dbPath);
   if (existing) {
     if (!enforceSchemaFence(existing, dbPath, latestSupportedVersion)) {
       return null;
     }
-    registerPrivilegedWriter(existing);
     if (!persistenceByDatabase.has(existing)) {
       persistenceByDatabase.set(existing, true);
     }
@@ -6564,11 +6457,14 @@ function openDatabase(dbPathOrOptions) {
     }
     ensureSecureStorageDir(dbDir);
     const db = new Database(dbPath);
-    registerPrivilegedWriter(db);
     if (!enforceSchemaFence(db, dbPath, latestSupportedVersion)) {
       closeQuietly(db);
       return null;
     }
+    if (!enforceMigrationOnOpenGuard(db, dbPath, dbDir, latestSupportedVersion)) {
+      closeQuietly(db);
+      return null;
+    }
     initializeDatabase(db);
     runMigrations(db);
     ensureContextStoreUuid(db);
@@ -6584,6 +6480,8 @@ async function openDatabaseAsync(dbPathOrOptions) {
   const explicitDbPath = options?.dbPath !== undefined;
   const { dbDir, dbPath } = resolveDatabasePath(options?.dbPath);
   const latestSupportedVersion = getRuntimeLatestSupportedVersion(options);
+  lastSchemaFenceRejection = null;
+  lastMigrationOnOpenRefusal = null;
   const existing = databases.get(dbPath);
   if (existing) {
     if (!enforceSchemaFence(existing, dbPath, latestSupportedVersion))
@@ -6603,11 +6501,14 @@ async function openDatabaseAsync(dbPathOrOptions) {
         migrateLegacyStorageIfNeeded(dbPath, dbDir);
       ensureSecureStorageDir(dbDir);
       db = new Database(dbPath);
-      registerPrivilegedWriter(db);
       if (!enforceSchemaFence(db, dbPath, latestSupportedVersion)) {
         closeQuietly(db);
         return null;
       }
+      if (!enforceMigrationOnOpenGuard(db, dbPath, dbDir, latestSupportedVersion)) {
+        closeQuietly(db);
+        return null;
+      }
       initializeDatabase(db);
       await runMigrationsWithRetry(db);
       ensureContextStoreUuid(db);
@@ -6638,11 +6539,188 @@ function getDatabasePersistenceError(db) {
     return null;
   return persistenceErrorByDatabase.get(db) ?? null;
 }
-// src/features/magic-context/storage-embedding-measurements.ts
+
+// src/features/magic-context/schema-fence-probe.ts
+var STALE_CHILD_SPAWN_FAILURE = "stale_schema_fence";
+var STALE_CHILD_SPAWN_LATCH_THRESHOLD = 2;
+var state = {
+  consecutiveFailures: 0,
+  totalFailures: 0,
+  latched: false,
+  noticeEmitted: false,
+  failure: null
+};
+function recordStaleFence(persistedVersion, supportedVersion) {
+  state.consecutiveFailures += 1;
+  state.totalFailures += 1;
+  const latched = state.consecutiveFailures >= STALE_CHILD_SPAWN_LATCH_THRESHOLD;
+  state.latched ||= latched;
+  const failure = {
+    failureClass: STALE_CHILD_SPAWN_FAILURE,
+    persistedVersion,
+    supportedVersion,
+    consecutiveFailures: state.consecutiveFailures,
+    totalFailures: state.totalFailures,
+    latched: state.latched
+  };
+  state.failure = failure;
+  const shouldSurface = state.latched && !state.noticeEmitted;
+  if (shouldSurface)
+    state.noticeEmitted = true;
+  return { allowSpawn: false, failure, shouldSurface };
+}
+function probeChildSpawnFence(db) {
+  if (!db) {
+    const knownRejection = getSchemaFenceRejection();
+    if (knownRejection) {
+      return recordStaleFence(knownRejection.persistedVersion, knownRejection.supportedVersion);
+    }
+    return { allowSpawn: true };
+  }
+  try {
+    const persistedVersion = getPersistedSchemaVersion(db);
+    if (persistedVersion > LATEST_SUPPORTED_VERSION) {
+      return recordStaleFence(persistedVersion, LATEST_SUPPORTED_VERSION);
+    }
+  } catch {
+    return { allowSpawn: true };
+  }
+  state.consecutiveFailures = 0;
+  state.latched = false;
+  state.noticeEmitted = false;
+  return { allowSpawn: true };
+}
+// src/features/magic-context/project-docs-hash.ts
 import { createHash as createHash6 } from "node:crypto";
+import { lstatSync, readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
+import path2 from "node:path";
+var PROJECT_DOC_FILES = ["ARCHITECTURE.md", "STRUCTURE.md"];
+var PROJECT_DOCS_DELIMITER = `
+
+---
+
+`;
+var MAX_PROJECT_DOC_BYTES = 256 * 1024;
+var docsCache = new Map;
+function canonicalizeDocContent(raw) {
+  return raw.replace(/^\uFEFF/, "").replace(/\r\n/g, `
+`).split(`
+`).map((line) => line.replace(/[ \t]+$/, "")).join(`
+`).replace(/\n+$/, "");
+}
+function fingerprintFile(filePath) {
+  try {
+    const stat = lstatSync(filePath);
+    const isReadableDoc = stat.isFile() && stat.size <= MAX_PROJECT_DOC_BYTES;
+    return {
+      exists: isReadableDoc,
+      mtimeMs: stat.mtimeMs,
+      size: stat.size
+    };
+  } catch {
+    return { exists: false, mtimeMs: 0, size: 0 };
+  }
+}
+function readDirectoryMtimeMs(projectDirectory) {
+  try {
+    return statSync2(projectDirectory).mtimeMs;
+  } catch {
+    return 0;
+  }
+}
+function fingerprintsEqual(a, b) {
+  return a?.exists === b.exists && a.mtimeMs === b.mtimeMs && a.size === b.size;
+}
+function cacheFilesEqual(cachedFiles, currentFiles) {
+  for (const [filePath, current] of currentFiles) {
+    if (!fingerprintsEqual(cachedFiles.get(filePath), current)) {
+      return false;
+    }
+  }
+  return true;
+}
+function readCurrentFingerprints(projectDirectory) {
+  const files = new Map;
+  for (const filename of PROJECT_DOC_FILES) {
+    const filePath = path2.join(projectDirectory, filename);
+    files.set(filePath, fingerprintFile(filePath));
+  }
+  return { directoryMtimeMs: readDirectoryMtimeMs(projectDirectory), files };
+}
+function readCanonicalPieces(projectDirectory, files) {
+  const hashPieces = [];
+  const renderedSections = [];
+  for (const filename of PROJECT_DOC_FILES) {
+    const filePath = path2.join(projectDirectory, filename);
+    const fingerprint = files.get(filePath);
+    if (!fingerprint?.exists) {
+      continue;
+    }
+    let safeToRead = false;
+    try {
+      const st = lstatSync(filePath);
+      safeToRead = st.isFile() && st.size <= MAX_PROJECT_DOC_BYTES;
+    } catch {
+      safeToRead = false;
+    }
+    if (!safeToRead) {
+      continue;
+    }
+    const canonicalContent = canonicalizeDocContent(readFileSync2(filePath, "utf8"));
+    hashPieces.push(`file:${filename}
+${canonicalContent}`);
+    renderedSections.push(`<file name="${escapeXmlAttr(filename)}">
+${escapeXmlContent(canonicalContent)}
+</file>`);
+  }
+  return { hashPieces, renderedSections };
+}
+function buildRenderedBlock(renderedSections) {
+  if (renderedSections.length === 0) {
+    return "";
+  }
+  return `<project-docs>
+${renderedSections.join(`
+
+`)}
+</project-docs>`;
+}
+function hashCanonicalPieces(hashPieces) {
+  if (hashPieces.length === 0) {
+    return "";
+  }
+  return createHash6("sha256").update(hashPieces.join(PROJECT_DOCS_DELIMITER), "utf8").digest("hex");
+}
+function readProjectDocsCanonical(projectDirectory) {
+  const canonicalDirectory = path2.resolve(projectDirectory);
+  const current = readCurrentFingerprints(canonicalDirectory);
+  const cached = docsCache.get(canonicalDirectory);
+  if (cached && cacheFilesEqual(cached.files, current.files)) {
+    cached.directoryMtimeMs = current.directoryMtimeMs;
+    return {
+      renderedBlock: cached.cachedRendered,
+      canonicalHash: cached.cachedHash
+    };
+  }
+  const { hashPieces, renderedSections } = readCanonicalPieces(canonicalDirectory, current.files);
+  const canonicalHash = hashCanonicalPieces(hashPieces);
+  const renderedBlock = buildRenderedBlock(renderedSections);
+  docsCache.set(canonicalDirectory, {
+    directoryMtimeMs: current.directoryMtimeMs,
+    files: current.files,
+    cachedHash: canonicalHash,
+    cachedRendered: renderedBlock
+  });
+  return { renderedBlock, canonicalHash };
+}
+function computeProjectDocsHash(projectDirectory) {
+  return readProjectDocsCanonical(projectDirectory).canonicalHash;
+}
+// src/features/magic-context/storage-embedding-measurements.ts
+import { createHash as createHash7 } from "node:crypto";
 function normalizedQueryHash(query) {
   const normalized = query.trim().replace(/\s+/g, " ").toLowerCase();
-  return createHash6("sha256").update(normalized).digest("hex");
+  return createHash7("sha256").update(normalized).digest("hex");
 }
 var MEASUREMENT_CORPUS_SESSION_ROW_CAP = 2000;
 function recordEmbeddingMeasurement(db, input) {
@@ -6858,7 +6936,7 @@ function getMemoryMutationsForRenderByIdentitySet(db, projectPaths, afterId, ren
       }
       visited.add(terminal);
       const next = byTarget.get(terminal);
-      if (!next || next.mutationType !== "superseded")
+      if (next?.mutationType !== "superseded")
         break;
       if (depth >= MAX_MEMORY_REPLACEMENT_DEPTH - 1) {
         terminal = null;
@@ -6892,6 +6970,24 @@ function getMaxMemoryMutationIdForProjects(db, projectPaths) {
               WHERE project_path IN (${placeholders2(identities)})`).get(...identities);
   return row?.max_id ?? null;
 }
+// src/shared/context-limit-provenance.ts
+function normalizeContextLimitProvenance(value) {
+  if (value === "prompt_only" || value === "combined")
+    return value;
+  return "unknown";
+}
+
+// src/shared/escalation-bands.ts
+var MAX_EXECUTE_THRESHOLD = 90;
+var ABSOLUTE_EMERGENCY_PERCENTAGE = 95;
+function escalationBands(effectiveThresholdPercentage) {
+  const threshold = Number.isFinite(effectiveThresholdPercentage) ? Math.min(effectiveThresholdPercentage, MAX_EXECUTE_THRESHOLD) : 65;
+  return {
+    forceMaterializationPercentage: Math.max(85, threshold + 2),
+    emergencyPercentage: ABSOLUTE_EMERGENCY_PERCENTAGE
+  };
+}
+
 // src/features/magic-context/storage-meta-persisted.ts
 var emergencyRecoveryArmedSessions = new Set;
 var providerOverflowReconfirmedSessions = new Set;
@@ -7113,11 +7209,11 @@ function readRawWrapupState(db, sessionId) {
   return parseWrapupState(row?.wrapup_in_progress_state);
 }
 function getWrapupInProgressState(db, sessionId, now = Date.now()) {
-  const state = readRawWrapupState(db, sessionId);
-  if (!state)
+  const state2 = readRawWrapupState(db, sessionId);
+  if (!state2)
     return null;
-  if (state.expiresAt > now)
-    return state;
+  if (state2.expiresAt > now)
+    return state2;
   try {
     db.exec("BEGIN IMMEDIATE");
   } catch {
@@ -7143,10 +7239,10 @@ function getWrapupInProgressState(db, sessionId, now = Date.now()) {
 function isWrapupInProgress(db, sessionId, now = Date.now()) {
   return getWrapupInProgressState(db, sessionId, now) !== null;
 }
-function acquireWrapupInProgress(db, sessionId, state, now = Date.now()) {
+function acquireWrapupInProgress(db, sessionId, state2, now = Date.now()) {
   const acquiredAt = now;
   const next = {
-    ...state,
+    ...state2,
     acquiredAt,
     expiresAt: acquiredAt + WRAPUP_IN_PROGRESS_TTL_MS,
     updatedAt: acquiredAt
@@ -7156,7 +7252,7 @@ function acquireWrapupInProgress(db, sessionId, state, now = Date.now()) {
   try {
     ensureSessionMetaRow(db, sessionId);
     const current = readRawWrapupState(db, sessionId);
-    if (current && current.expiresAt > now && current.holderId !== state.holderId) {
+    if (current && current.expiresAt > now && current.holderId !== state2.holderId) {
       db.exec("COMMIT");
       finished = true;
       return { ok: false, state: current };
@@ -7220,6 +7316,45 @@ function releaseWrapupInProgress(db, sessionId, holderId) {
     }
   }
 }
+var COMPACTION_MODE_RECORD_VALUES = new Set([
+  "on",
+  "off",
+  "on_notice_pending",
+  "off_notice_pending",
+  "off_cleanup_pending"
+]);
+function normalizeCompactionModeRecord(value) {
+  if (value === null || value === undefined)
+    return null;
+  if (typeof value === "string" && COMPACTION_MODE_RECORD_VALUES.has(value)) {
+    return value;
+  }
+  return null;
+}
+function resolveCompactionModeRecord(record) {
+  switch (record) {
+    case "on":
+    case "on_notice_pending":
+      return "on";
+    case "off":
+    case "off_notice_pending":
+    case "off_cleanup_pending":
+      return "off";
+    default:
+      return null;
+  }
+}
+function getCompactionModeRecord(db, sessionId) {
+  const row = db.prepare("SELECT compaction_mode_record FROM session_meta WHERE session_id = ?").get(sessionId);
+  return normalizeCompactionModeRecord(row?.compaction_mode_record);
+}
+function setCompactionModeRecord(db, sessionId, value) {
+  if (value !== null && !COMPACTION_MODE_RECORD_VALUES.has(value)) {
+    throw new Error(`Invalid compaction_mode_record value: ${String(value)} (expected a supported compaction mode record or null)`);
+  }
+  ensureSessionMetaRow(db, sessionId);
+  db.prepare("UPDATE session_meta SET compaction_mode_record = ? WHERE session_id = ?").run(value, sessionId);
+}
 function protectedTailWindowBudget(usagePercentage, usable, perRunCap) {
   if (usagePercentage >= 95)
     return Math.min(1e6, Math.max(4 * perRunCap, Math.round(0.5 * usable)));
@@ -7227,7 +7362,6 @@ function protectedTailWindowBudget(usagePercentage, usable, perRunCap) {
     return Math.min(750000, Math.max(3 * perRunCap, Math.round(0.35 * usable)));
   return Math.min(500000, Math.max(perRunCap, Math.round(0.2 * usable)));
 }
-var EMERGENCY_DRAIN_ENTER_PERCENTAGE = 95;
 var EMERGENCY_DRAIN_EXIT_MARGIN = 10;
 var EMERGENCY_DRAIN_FALLBACK_EXIT_PERCENTAGE = 55;
 var EMERGENCY_DRAIN_FAILURE_BACKOFF_MS = 60000;
@@ -7262,7 +7396,8 @@ function reserveProtectedTailDrainTokens(args) {
     }
     const exitThreshold = emergencyDrainExitThreshold(args.executeThresholdPercentage);
     let latchActiveSince = meta.emergencyDrainActive;
-    if (args.usagePercentage >= EMERGENCY_DRAIN_ENTER_PERCENTAGE) {
+    const { forceMaterializationPercentage } = escalationBands(args.executeThresholdPercentage);
+    if (args.usagePercentage >= forceMaterializationPercentage) {
       if (latchActiveSince <= 0)
         latchActiveSince = now;
     } else if (latchActiveSince > 0) {
@@ -7414,13 +7549,20 @@ function getChannel2NudgeState(db, sessionId) {
 function getChannel2NudgeClaim(db, sessionId) {
   const result = db.prepare("SELECT channel2_nudge_state, channel2_nudge_claimed_at, channel2_nudge_claim_token FROM session_meta WHERE session_id = ?").get(sessionId);
   const rawState = typeof result?.channel2_nudge_state === "string" ? result.channel2_nudge_state : "";
-  const state = rawState === "pending" || rawState === "claimed" || rawState === "delivered" ? rawState : "";
+  const state2 = rawState === "pending" || rawState === "claimed" || rawState === "delivered" ? rawState : "";
   return {
-    state,
+    state: state2,
     claimedAt: typeof result?.channel2_nudge_claimed_at === "number" ? result.channel2_nudge_claimed_at : 0,
     claimToken: typeof result?.channel2_nudge_claim_token === "string" ? result.channel2_nudge_claim_token : ""
   };
 }
+function setChannel2NudgeState(db, sessionId, state2) {
+  db.transaction(() => {
+    ensureSessionMetaRow(db, sessionId);
+    const claimedAt = state2 === "claimed" ? Date.now() : 0;
+    db.prepare("UPDATE session_meta SET channel2_nudge_state = ?, channel2_nudge_claimed_at = ?, channel2_nudge_claim_token = '' WHERE session_id = ?").run(state2, claimedAt, sessionId);
+  })();
+}
 function casChannel2NudgeState(db, sessionId, from, to) {
   let changed = false;
   db.transaction(() => {
@@ -7600,6 +7742,18 @@ function removeAutoSearchHintDecisionByMessageId(db, sessionId, messageId) {
   }, { ensureRow: false });
   return ok && removed;
 }
+function getPersistedTodoPermissionDenied(db, sessionId) {
+  const row = db.prepare("SELECT todo_permission_denied FROM session_meta WHERE session_id = ?").get(sessionId);
+  if (row?.todo_permission_denied === 1)
+    return true;
+  if (row?.todo_permission_denied === 0)
+    return false;
+  return null;
+}
+function setPersistedTodoPermissionDenied(db, sessionId, denied) {
+  ensureSessionMetaRow(db, sessionId);
+  db.prepare("UPDATE session_meta SET todo_permission_denied = ? WHERE session_id = ?").run(denied ? 1 : 0, sessionId);
+}
 function getPersistedTodoSyntheticAnchor(db, sessionId) {
   const result = db.prepare("SELECT todo_synthetic_call_id, todo_synthetic_anchor_message_id, todo_synthetic_state_json FROM session_meta WHERE session_id = ?").get(sessionId);
   if (!isPersistedTodoSyntheticAnchorRow(result)) {
@@ -7676,17 +7830,19 @@ function normalizeEmergencyRecoveryOrigin(value) {
   return value === "provider_overflow" || value === "proactive_model_shrink" ? value : null;
 }
 function getOverflowState(db, sessionId, modelKey) {
-  const result = db.prepare("SELECT detected_context_limit, detected_context_limit_model_key, needs_emergency_recovery, emergency_recovery_origin FROM session_meta WHERE session_id = ?").get(sessionId);
+  const result = db.prepare("SELECT detected_context_limit, detected_context_limit_model_key, detected_context_limit_provenance, needs_emergency_recovery, emergency_recovery_origin FROM session_meta WHERE session_id = ?").get(sessionId);
   if (!result) {
     return {
       detectedContextLimit: 0,
       detectedContextLimitModelKey: null,
+      detectedContextLimitProvenance: "unknown",
       needsEmergencyRecovery: false,
       emergencyRecoveryOrigin: null
     };
   }
   const storedModelKey = normalizeDetectedLimitModelKey(result.detected_context_limit_model_key);
   const requestedModelKey = normalizeDetectedLimitModelKey(modelKey);
+  const provenance = normalizeContextLimitProvenance(result.detected_context_limit_provenance);
   const limit = typeof result.detected_context_limit === "number" && result.detected_context_limit > 0 ? result.detected_context_limit : 0;
   const modelMatches = limit > 0 && requestedModelKey && storedModelKey ? requestedModelKey === storedModelKey : true;
   const needs = typeof result.needs_emergency_recovery === "number" && result.needs_emergency_recovery > 0;
@@ -7695,11 +7851,12 @@ function getOverflowState(db, sessionId, modelKey) {
   return {
     detectedContextLimit: modelMatches ? limit : 0,
     detectedContextLimitModelKey: storedModelKey,
+    detectedContextLimitProvenance: provenance,
     needsEmergencyRecovery: needs,
     emergencyRecoveryOrigin: recoveryOrigin
   };
 }
-function recordOverflowDetected(db, sessionId, reportedLimit, modelKey, origin = "provider_overflow") {
+function recordOverflowDetected(db, sessionId, reportedLimit, modelKey, origin = "provider_overflow", provenance = "unknown") {
   emergencyRecoveryArmedSessions.add(sessionId);
   db.transaction(() => {
     ensureSessionMetaRow(db, sessionId);
@@ -7708,18 +7865,18 @@ function recordOverflowDetected(db, sessionId, reportedLimit, modelKey, origin =
       providerOverflowReconfirmedSessions.add(sessionId);
     }
     if (typeof reportedLimit === "number" && reportedLimit > 0) {
-      db.prepare("UPDATE session_meta SET detected_context_limit = ?, detected_context_limit_model_key = ?, needs_emergency_recovery = 1, emergency_recovery_origin = ?, observed_safe_input_tokens = 0, cache_alert_sent = 0 WHERE session_id = ?").run(reportedLimit, normalizeDetectedLimitModelKey(modelKey), origin, sessionId);
+      db.prepare("UPDATE session_meta SET detected_context_limit = ?, detected_context_limit_model_key = ?, detected_context_limit_provenance = ?, needs_emergency_recovery = 1, emergency_recovery_origin = ?, observed_safe_input_tokens = 0, cache_alert_sent = 0 WHERE session_id = ?").run(reportedLimit, normalizeDetectedLimitModelKey(modelKey), normalizeContextLimitProvenance(provenance), origin, sessionId);
     } else {
       db.prepare("UPDATE session_meta SET needs_emergency_recovery = 1, emergency_recovery_origin = ?, observed_safe_input_tokens = 0, cache_alert_sent = 0 WHERE session_id = ?").run(origin, sessionId);
     }
   })();
 }
-function recordDetectedContextLimit(db, sessionId, reportedLimit, modelKey) {
+function recordDetectedContextLimit(db, sessionId, reportedLimit, modelKey, provenance = "unknown") {
   if (!(reportedLimit > 0))
     return;
   db.transaction(() => {
     ensureSessionMetaRow(db, sessionId);
-    db.prepare("UPDATE session_meta SET detected_context_limit = ?, detected_context_limit_model_key = ?, observed_safe_input_tokens = 0, cache_alert_sent = 0 WHERE session_id = ?").run(reportedLimit, normalizeDetectedLimitModelKey(modelKey), sessionId);
+    db.prepare("UPDATE session_meta SET detected_context_limit = ?, detected_context_limit_model_key = ?, detected_context_limit_provenance = ?, observed_safe_input_tokens = 0, cache_alert_sent = 0 WHERE session_id = ?").run(reportedLimit, normalizeDetectedLimitModelKey(modelKey), normalizeContextLimitProvenance(provenance), sessionId);
   })();
 }
 function clearEmergencyRecovery(db, sessionId) {
@@ -7737,7 +7894,7 @@ function clearEmergencyRecovery(db, sessionId) {
 function clearDetectedContextLimit(db, sessionId) {
   db.transaction(() => {
     ensureSessionMetaRow(db, sessionId);
-    db.prepare("UPDATE session_meta SET detected_context_limit = 0, detected_context_limit_model_key = NULL WHERE session_id = ?").run(sessionId);
+    db.prepare("UPDATE session_meta SET detected_context_limit = 0, detected_context_limit_model_key = NULL, detected_context_limit_provenance = 'unknown' WHERE session_id = ?").run(sessionId);
   })();
 }
 function getPersistedCompactionMarkerState(db, sessionId) {
@@ -7757,10 +7914,10 @@ function getPersistedCompactionMarkerState(db, sessionId) {
   } catch {}
   return null;
 }
-function setPersistedCompactionMarkerState(db, sessionId, state) {
+function setPersistedCompactionMarkerState(db, sessionId, state2) {
   ensureSessionMetaRow(db, sessionId);
-  const json = state ? JSON.stringify(state) : "";
-  db.prepare("UPDATE session_meta SET compaction_marker_state = ?, compaction_marker_target_end_message_id = ? WHERE session_id = ?").run(json, state?.targetEndMessageId ?? null, sessionId);
+  const json = state2 ? JSON.stringify(state2) : "";
+  db.prepare("UPDATE session_meta SET compaction_marker_state = ?, compaction_marker_target_end_message_id = ? WHERE session_id = ?").run(json, state2?.targetEndMessageId ?? null, sessionId);
 }
 function getStrippedPlaceholderIds(db, sessionId) {
   const row = db.prepare("SELECT stripped_placeholder_ids FROM session_meta WHERE session_id = ?").get(sessionId);
@@ -7892,9 +8049,9 @@ function getPendingCompactionMarkerState(db, sessionId) {
   } catch {}
   return null;
 }
-function setPendingCompactionMarkerState(db, sessionId, state) {
+function setPendingCompactionMarkerState(db, sessionId, state2) {
   ensureSessionMetaRow(db, sessionId);
-  const blob = state ? stableStringify(state) : null;
+  const blob = state2 ? stableStringify(state2) : null;
   db.prepare("UPDATE session_meta SET pending_compaction_marker_state = ? WHERE session_id = ?").run(blob, sessionId);
 }
 function clearPendingCompactionMarkerStateIf(db, sessionId, expected) {
@@ -8165,6 +8322,14 @@ function getPendingOpsStatement(db) {
   }
   return stmt;
 }
+function getClearPendingOpsStatement(db) {
+  let stmt = clearPendingOpsStatements.get(db);
+  if (!stmt) {
+    stmt = db.prepare("DELETE FROM pending_ops WHERE session_id = ?");
+    clearPendingOpsStatements.set(db, stmt);
+  }
+  return stmt;
+}
 function getRemovePendingOpStatement(db) {
   let stmt = removePendingOpStatements.get(db);
   if (!stmt) {
@@ -8199,6 +8364,9 @@ function getPendingOps(db, sessionId) {
   const rows = getPendingOpsStatement(db).all(sessionId).filter(isPendingOpRow);
   return rows.map(toPendingOp).filter((op) => op !== null);
 }
+function clearPendingOps(db, sessionId) {
+  getClearPendingOpsStatement(db).run(sessionId);
+}
 function removePendingOp(db, sessionId, tagId) {
   getRemovePendingOpStatement(db).run(sessionId, tagId);
 }
@@ -8394,11 +8562,11 @@ function bumpProjectMemoryEpoch(db, projectPath, now = Date.now()) {
          ON CONFLICT(project_path) DO UPDATE SET
             project_memory_epoch = project_memory_epoch + 1,
             updated_at = excluded.updated_at`).run(projectPath, now);
-  const state = getProjectState(db, projectPath);
-  if (!state) {
+  const state2 = getProjectState(db, projectPath);
+  if (!state2) {
     throw new Error(`Failed to bump project memory epoch for ${projectPath}`);
   }
-  return state;
+  return state2;
 }
 function bumpProjectUserProfileVersion(db, projectPath = GLOBAL_USER_PROFILE_PROJECT_PATH, now = Date.now()) {
   db.prepare(`INSERT INTO project_state
@@ -8407,11 +8575,11 @@ function bumpProjectUserProfileVersion(db, projectPath = GLOBAL_USER_PROFILE_PRO
          ON CONFLICT(project_path) DO UPDATE SET
             project_user_profile_version = project_user_profile_version + 1,
             updated_at = excluded.updated_at`).run(projectPath, now);
-  const state = getProjectState(db, projectPath);
-  if (!state) {
+  const state2 = getProjectState(db, projectPath);
+  if (!state2) {
     throw new Error(`Failed to bump project user profile version for ${projectPath}`);
   }
-  return state;
+  return state2;
 }
 // src/features/magic-context/storage-source.ts
 function isSourceContentRow(row) {
@@ -9001,6 +9169,518 @@ var ERROR_CLASSES = new Set([
   "permission_denied",
   "unknown"
 ]);
+// src/hooks/magic-context/child-session-spawn.ts
+var STALE_PLUGIN_RESTART_NOTICE = "Magic Context: plugin build is older than its database — restart OpenCode";
+async function surfaceStalePluginBuild(args) {
+  if (!args.parentSessionId)
+    return;
+  try {
+    if (args.db) {
+      updateSessionMeta(args.db, args.parentSessionId, {
+        lastTransformError: STALE_PLUGIN_RESTART_NOTICE
+      });
+    }
+    pushNotification("toast", {
+      title: "Magic Context",
+      message: STALE_PLUGIN_RESTART_NOTICE,
+      variant: "error",
+      duration: 1e4
+    }, args.parentSessionId);
+    pushNotification("action", { action: "refresh-sidebar" }, args.parentSessionId);
+    await sendIgnoredMessage(args.client, args.parentSessionId, STALE_PLUGIN_RESTART_NOTICE, args.notificationParams ?? {}, true);
+  } catch (error) {
+    sessionLog(args.parentSessionId, `stale plugin-build warning delivery failed: ${error instanceof Error ? error.message : String(error)}`);
+  }
+}
+async function createChildSessionWithFence(args) {
+  const verdict = probeChildSpawnFence(args.db);
+  if (!verdict.allowSpawn) {
+    if (args.parentSessionId) {
+      sessionLog(args.parentSessionId, `child session skipped (${verdict.failure.failureClass}): database=v${verdict.failure.persistedVersion}, supported_fence=v${verdict.failure.supportedVersion}, consecutive=${verdict.failure.consecutiveFailures}, total=${verdict.failure.totalFailures}`);
+    }
+    if (verdict.shouldSurface) {
+      if (args.onFenceLatched)
+        await args.onFenceLatched(verdict.failure);
+      else
+        await surfaceStalePluginBuild(args);
+    }
+    return null;
+  }
+  return args.client.session.create({
+    body: {
+      ...args.parentSessionId ? { parentID: args.parentSessionId } : {},
+      title: args.title
+    },
+    query: { directory: args.directory }
+  });
+}
+// src/features/magic-context/overflow-detection.ts
+var OVERFLOW_PATTERNS = [
+  /prompt is too long/i,
+  /input is too long for requested model/i,
+  /exceeds the context window/i,
+  /input token count.*exceeds the maximum/i,
+  /maximum prompt length is \d+/i,
+  /reduce the length of the messages/i,
+  /maximum context length is \d+ tokens/i,
+  /maximum model length is \d+/i,
+  /exceeds the limit of \d+/i,
+  /exceeds the available context size/i,
+  /greater than the context length/i,
+  /context window exceeds limit/i,
+  /exceeded model token limit/i,
+  /context[_ ]length[_ ]exceeded/i,
+  /request entity too large/i,
+  /context length is only \d+ tokens/i,
+  /input length.*exceeds.*context length/i,
+  /prompt too long; exceeded (?:max )?context length/i,
+  /too large for model with \d+ maximum context length/i,
+  /model_context_window_exceeded/i,
+  /context size has been exceeded/i
+];
+var LIMIT_EXTRACTION_PATTERNS = [
+  { pattern: /maximum prompt length is (\d+)/i, provenance: "prompt_only" },
+  {
+    pattern: /maximum context length is (\d+) tokens?/i,
+    provenance: "combined"
+  },
+  { pattern: /maximum model length is (\d+)/i, provenance: "combined" },
+  { pattern: /context length is only (\d+) tokens?/i, provenance: "combined" },
+  { pattern: /exceeds the limit of (\d+)/i, provenance: "unknown" },
+  {
+    pattern: /too large for model with (\d+) maximum context length/i,
+    provenance: "combined"
+  },
+  { pattern: /context size.*(\d+) tokens?/i, provenance: "combined" },
+  { pattern: /exceeds? the context length of (\d+)/i, provenance: "combined" },
+  {
+    pattern: />\s*(\d+)\s*(?:tokens?\s*)?(?:maximum|max|limit)\b/i,
+    provenance: "prompt_only"
+  },
+  { pattern: /max(?:imum)?.*context.*?(\d+)/i, provenance: "unknown" }
+];
+var MIN_PLAUSIBLE_LIMIT = 1024;
+var MAX_PLAUSIBLE_LIMIT = 1e7;
+function extractErrorMessage(error) {
+  if (!error)
+    return "";
+  if (typeof error === "string")
+    return error;
+  if (typeof error === "object") {
+    const obj = error;
+    const nested = obj.error;
+    if (nested && typeof nested.message === "string" && nested.message.length > 0) {
+      return nested.message;
+    }
+  }
+  if (error instanceof Error)
+    return error.message;
+  if (typeof error === "object") {
+    const obj = error;
+    if (typeof obj.message === "string")
+      return obj.message;
+    if (typeof obj.responseBody === "string")
+      return obj.responseBody;
+    try {
+      return JSON.stringify(error);
+    } catch {
+      return String(error);
+    }
+  }
+  return String(error);
+}
+function detectOverflow(error) {
+  const message = extractErrorMessage(error);
+  if (!message) {
+    return { isOverflow: false };
+  }
+  const hasStatus413 = /\b413\b/.test(message) && /(entity|payload|context|prompt)/i.test(message);
+  let matched;
+  for (const pattern of OVERFLOW_PATTERNS) {
+    if (pattern.test(message)) {
+      matched = pattern;
+      break;
+    }
+  }
+  if (!matched && !hasStatus413) {
+    return { isOverflow: false };
+  }
+  const reportedLimit = parseReportedLimit(message);
+  return {
+    isOverflow: true,
+    reportedLimit: reportedLimit?.value,
+    reportedLimitProvenance: reportedLimit?.provenance,
+    matchedPattern: matched?.source
+  };
+}
+function parseReportedLimit(message) {
+  if (!message)
+    return;
+  for (const { pattern, provenance } of LIMIT_EXTRACTION_PATTERNS) {
+    const match = message.match(pattern);
+    if (!match)
+      continue;
+    const raw = match[1];
+    if (!raw)
+      continue;
+    const value = Number.parseInt(raw, 10);
+    if (!Number.isFinite(value))
+      continue;
+    if (value < MIN_PLAUSIBLE_LIMIT || value > MAX_PLAUSIBLE_LIMIT)
+      continue;
+    return { value, provenance };
+  }
+  return;
+}
+
+// src/shared/model-suggestion-retry.ts
+var ABORT_CALL_TIMEOUT_MS = 3000;
+function copyPromptArgs(args, body) {
+  return { ...args, body: { ...body } };
+}
+function extractMessage(error) {
+  if (typeof error === "string")
+    return error;
+  if (error instanceof Error)
+    return error.message;
+  if (typeof error === "object" && error !== null) {
+    const obj = error;
+    if (typeof obj.message === "string")
+      return obj.message;
+  }
+  try {
+    return JSON.stringify(error);
+  } catch (_error) {
+    return String(error);
+  }
+}
+function parseModelSuggestion(error) {
+  if (!error)
+    return null;
+  if (typeof error === "object" && error !== null) {
+    const errObj = error;
+    if (errObj.name === "ProviderModelNotFoundError" && typeof errObj.data === "object" && errObj.data !== null) {
+      const data = errObj.data;
+      const suggestions = data.suggestions;
+      if (Array.isArray(suggestions) && typeof suggestions[0] === "string") {
+        return {
+          providerID: String(data.providerID ?? ""),
+          modelID: String(data.modelID ?? ""),
+          suggestion: suggestions[0]
+        };
+      }
+    }
+    for (const key of ["data", "error", "cause"]) {
+      const nested = errObj[key];
+      if (nested && typeof nested === "object") {
+        const result = parseModelSuggestion(nested);
+        if (result)
+          return result;
+      }
+    }
+  }
+  const message = extractMessage(error);
+  const modelMatch = message.match(/model not found:\s*([^/\s]+)\s*\/\s*([^.,\s]+)/i);
+  const suggestionMatch = message.match(/did you mean:\s*([^,?]+)/i);
+  if (!modelMatch || !suggestionMatch) {
+    return null;
+  }
+  return {
+    providerID: modelMatch[1].trim(),
+    modelID: modelMatch[2].trim(),
+    suggestion: suggestionMatch[1].trim()
+  };
+}
+async function promptWithTimeout(client, args, timeoutMs, signal) {
+  if (signal?.aborted) {
+    throw new Error("prompt aborted by external signal");
+  }
+  const controller = new AbortController;
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+  const onExternalAbort = () => controller.abort();
+  signal?.addEventListener("abort", onExternalAbort);
+  try {
+    await client.session.prompt({
+      ...args,
+      signal: controller.signal
+    });
+  } catch (error) {
+    if (signal?.aborted) {
+      await abortChildRun(client, args.path.id);
+      throw new Error("prompt aborted by external signal");
+    }
+    if (controller.signal.aborted) {
+      await abortChildRun(client, args.path.id);
+      throw new Error(`prompt timed out after ${timeoutMs}ms`);
+    }
+    throw error;
+  } finally {
+    clearTimeout(timeout);
+    signal?.removeEventListener("abort", onExternalAbort);
+  }
+}
+async function abortChildRun(client, sessionId) {
+  try {
+    await Promise.race([
+      client.session.abort({ path: { id: sessionId } }),
+      new Promise((resolve) => setTimeout(resolve, ABORT_CALL_TIMEOUT_MS))
+    ]);
+  } catch (error) {
+    log(`[model-retry] child session abort failed for ${sessionId}: ${String(error)}`);
+  }
+}
+function isNonRetryable(error, externalSignal) {
+  if (externalSignal?.aborted)
+    return true;
+  if (error instanceof Error) {
+    if (error.name === "AbortError")
+      return true;
+    if (error.message === "prompt aborted by external signal")
+      return true;
+    if (/^prompt timed out after \d+ms$/.test(error.message))
+      return true;
+  }
+  if (detectOverflow(error).isOverflow)
+    return true;
+  return false;
+}
+function shortErr(error) {
+  if (error instanceof Error) {
+    return error.name && error.name !== "Error" ? `${error.name}: ${error.message}` : error.message;
+  }
+  return extractMessage(error);
+}
+async function attemptOnce(client, args, timeoutMs, signal, callContext, label) {
+  const originalBody = { ...args.body };
+  const attemptArgs = copyPromptArgs(args, originalBody);
+  try {
+    await promptWithTimeout(client, attemptArgs, timeoutMs, signal);
+    return;
+  } catch (error) {
+    if (isNonRetryable(error, signal))
+      throw error;
+    const suggestion = parseModelSuggestion(error);
+    if (!suggestion || !originalBody.model) {
+      throw error;
+    }
+    log(`[${callContext}] ${label}: model not found, retrying with suggestion`, {
+      original: `${suggestion.providerID}/${suggestion.modelID}`,
+      suggested: suggestion.suggestion
+    });
+    await promptWithTimeout(client, copyPromptArgs(args, {
+      ...originalBody,
+      model: {
+        providerID: suggestion.providerID,
+        modelID: suggestion.suggestion
+      }
+    }), timeoutMs, signal);
+  }
+}
+async function promptSyncWithModelSuggestionRetry(client, args, options = {}) {
+  const timeoutMs = options.timeoutMs ?? 300000;
+  const callContext = options.callContext ?? "subagent";
+  const fallbacks = options.fallbackModels ?? [];
+  const baseBody = { ...args.body };
+  const baseArgs = copyPromptArgs(args, baseBody);
+  const explicitPrimaryLabel = baseBody.model?.providerID && baseBody.model.modelID ? `${baseBody.model.providerID}/${baseBody.model.modelID}` : "primary";
+  let lastError = null;
+  try {
+    await attemptOnce(client, baseArgs, timeoutMs, options.signal, callContext, explicitPrimaryLabel);
+    return;
+  } catch (error) {
+    lastError = error;
+    if (isNonRetryable(error, options.signal))
+      throw error;
+    if (fallbacks.length === 0) {
+      throw error;
+    }
+    log(`[${callContext}] primary (${explicitPrimaryLabel}) failed: ${shortErr(error)}; trying ${fallbacks.length} fallback(s)`);
+  }
+  for (let i = 0;i < fallbacks.length; i += 1) {
+    const parsed = parseProviderModel(fallbacks[i]);
+    if (!parsed) {
+      log(`[${callContext}] skipping invalid fallback spec: ${fallbacks[i]}`);
+      continue;
+    }
+    const label = `${parsed.providerID}/${parsed.modelID}`;
+    const attemptArgs = copyPromptArgs(baseArgs, {
+      ...baseBody,
+      model: parsed
+    });
+    try {
+      await attemptOnce(client, attemptArgs, timeoutMs, options.signal, callContext, label);
+      log(`[${callContext}] fallback succeeded with ${label} (attempt ${i + 2}/${fallbacks.length + 1})`);
+      return;
+    } catch (error) {
+      lastError = error;
+      if (isNonRetryable(error, options.signal))
+        throw error;
+      const remaining = fallbacks.length - i - 1;
+      if (remaining > 0) {
+        log(`[${callContext}] ${label} failed: ${shortErr(error)}; ${remaining} fallback(s) left`);
+      }
+    }
+  }
+  log(`[${callContext}] all models exhausted; tried: ${[explicitPrimaryLabel, ...fallbacks].join(", ")}; last error: ${shortErr(lastError)}`);
+  throw lastError ?? new Error("All fallback models failed");
+}
+async function attemptAndValidate(client, args, timeoutMs, signal, callContext, attempt, options) {
+  await attemptOnce(client, args, timeoutMs, signal, callContext, attempt.label);
+  const output = await options.fetchOutput(args, attempt);
+  const validated = await options.validateOutput(output, attempt);
+  return { output, validated, attempt };
+}
+async function promptSyncWithValidatedOutputRetry(client, args, options) {
+  const timeoutMs = options.timeoutMs ?? 300000;
+  const callContext = options.callContext ?? "subagent";
+  const fallbacks = options.fallbackModels ?? [];
+  const baseBody = { ...args.body };
+  const baseArgs = copyPromptArgs(args, baseBody);
+  const explicitPrimaryLabel = baseBody.model?.providerID && baseBody.model.modelID ? `${baseBody.model.providerID}/${baseBody.model.modelID}` : "primary";
+  const totalAttempts = fallbacks.length + 1;
+  let firstError = null;
+  let lastError = null;
+  try {
+    return await attemptAndValidate(client, baseArgs, timeoutMs, options.signal, callContext, {
+      label: explicitPrimaryLabel,
+      attemptIndex: 0,
+      isFallback: false,
+      totalAttempts,
+      model: baseBody.model
+    }, options);
+  } catch (error) {
+    firstError = error;
+    lastError = error;
+    if (isNonRetryable(error, options.signal))
+      throw error;
+    if (fallbacks.length === 0) {
+      throw error;
+    }
+    log(`[${callContext}] primary (${explicitPrimaryLabel}) failed validation/prompt: ${shortErr(error)}; trying ${fallbacks.length} fallback(s)`);
+  }
+  for (let i = 0;i < fallbacks.length; i += 1) {
+    const parsed = parseProviderModel(fallbacks[i]);
+    if (!parsed) {
+      log(`[${callContext}] skipping invalid fallback spec: ${fallbacks[i]}`);
+      continue;
+    }
+    const label = `${parsed.providerID}/${parsed.modelID}`;
+    const attemptArgs = copyPromptArgs(baseArgs, {
+      ...baseBody,
+      model: parsed
+    });
+    const attempt = {
+      label,
+      attemptIndex: i + 1,
+      isFallback: true,
+      totalAttempts,
+      model: parsed
+    };
+    try {
+      const result = await attemptAndValidate(client, attemptArgs, timeoutMs, options.signal, callContext, attempt, options);
+      log(`[${callContext}] fallback succeeded with ${label} (attempt ${i + 2}/${fallbacks.length + 1})`);
+      return result;
+    } catch (error) {
+      if (firstError === null)
+        firstError = error;
+      lastError = error;
+      if (isNonRetryable(error, options.signal))
+        throw error;
+      const remaining = fallbacks.length - i - 1;
+      if (remaining > 0) {
+        log(`[${callContext}] ${label} failed validation/prompt: ${shortErr(error)}; ${remaining} fallback(s) left`);
+      }
+    }
+  }
+  log(`[${callContext}] all models exhausted; tried: ${[explicitPrimaryLabel, ...fallbacks].join(", ")}; original error: ${shortErr(firstError)}; last error: ${shortErr(lastError)}`);
+  throw firstError ?? lastError ?? new Error("All fallback models failed validation");
+}
+// src/shared/normalize-sdk-response.ts
+function normalizeSDKResponse(response, fallback, options) {
+  if (response === null || response === undefined) {
+    return fallback;
+  }
+  if (Array.isArray(response)) {
+    return response;
+  }
+  if (typeof response === "object" && "data" in response) {
+    const data = response.data;
+    if (data !== null && data !== undefined) {
+      return data;
+    }
+    if (options?.preferResponseOnMissingData === true) {
+      return response;
+    }
+    return fallback;
+  }
+  if (options?.preferResponseOnMissingData === true) {
+    return response;
+  }
+  return fallback;
+}
+// src/shared/assistant-message-extractor.ts
+function asSessionMessage(value) {
+  if (!isRecord(value))
+    return null;
+  const info = value.info;
+  const parts = value.parts;
+  return {
+    info: isRecord(info) ? {
+      role: typeof info.role === "string" ? info.role : undefined,
+      time: isRecord(info.time) ? {
+        created: typeof info.time.created === "number" ? info.time.created : undefined
+      } : undefined
+    } : undefined,
+    parts
+  };
+}
+function getCreatedTime(message) {
+  return message.info?.time?.created ?? 0;
+}
+function getTextParts(message) {
+  if (!Array.isArray(message.parts))
+    return [];
+  return message.parts.filter((part) => isRecord(part)).map((part) => ({
+    type: typeof part.type === "string" ? part.type : undefined,
+    text: typeof part.text === "string" ? part.text : undefined
+  })).filter((part) => part.type === "text" && Boolean(part.text));
+}
+function extractLatestAssistantText(messages) {
+  if (!Array.isArray(messages) || messages.length === 0)
+    return null;
+  const assistantMessages = messages.map(asSessionMessage).filter((message) => message !== null).filter((message) => message.info?.role === "assistant").sort((a, b) => getCreatedTime(b) - getCreatedTime(a));
+  const latest = assistantMessages[0];
+  if (!latest)
+    return null;
+  return getTextParts(latest).map((part) => part.text).join(`
+`) || null;
+}
+function hasLengthCappedOutput(value) {
+  if (Array.isArray(value))
+    return value.some((item) => hasLengthCappedOutput(item));
+  if (!isRecord(value))
+    return false;
+  if (value.length_capped === true || value.lengthCapped === true)
+    return true;
+  const finishReason = value.finish_reason ?? value.finishReason;
+  if (typeof finishReason === "string") {
+    const normalized = finishReason.toLowerCase();
+    if (normalized === "length" || normalized === "max_tokens" || normalized === "max_output_tokens") {
+      return true;
+    }
+  }
+  return Object.values(value).some((item) => hasLengthCappedOutput(item));
+}
+
+// src/shared/keep-subagents.ts
+var keepSubagents = false;
+function setKeepSubagents(value) {
+  keepSubagents = value === true;
+}
+function shouldKeepSubagents() {
+  return keepSubagents;
+}
+
 // src/features/magic-context/user-memory/storage-user-memory.ts
 var USER_MEMORY_CANDIDATE_TTL_MS = 30 * 24 * 60 * 60 * 1000;
 function insertUserMemoryCandidates(db, candidates) {
@@ -9068,9 +9748,9 @@ function parseUserMemoryRow(row) {
 }
 
 // src/features/magic-context/mural/storage-mural-cues.ts
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 function computeCueContentHash(content) {
-  return createHash7("sha256").update(content).digest("hex");
+  return createHash8("sha256").update(content).digest("hex");
 }
 var muralCueColumnCache = new WeakMap;
 function hasMuralCueColumns(db) {
@@ -9096,10 +9776,10 @@ function getMuralCueState(db, memoryIds) {
   }
   return out;
 }
-function memoryNeedsCue(state, currentContent) {
-  if (!state || state.cue === null || state.hash === null)
+function memoryNeedsCue(state2, currentContent) {
+  if (!state2 || state2.cue === null || state2.hash === null)
     return true;
-  return state.hash !== computeCueContentHash(currentContent);
+  return state2.hash !== computeCueContentHash(currentContent);
 }
 function setMuralCue(db, projectPath, id, cue, contentHash) {
   if (!hasMuralCueColumns(db))
@@ -9121,7 +9801,6 @@ var deleteEmbeddingStatements = new WeakMap;
 var getStoredModelIdStatements = new WeakMap;
 var clearAllEmbeddingsStatements = new WeakMap;
 var clearModelEmbeddingsStatements = new WeakMap;
-var getDistinctStoredModelIdsStatements = new WeakMap;
 function isEmbeddingBlob(value) {
   return value instanceof Uint8Array || value instanceof ArrayBuffer;
 }
@@ -9238,13 +9917,13 @@ function invalidateMemory(projectPath, memoryId) {
 }
 
 // src/features/magic-context/memory/normalize-hash.ts
-import { createHash as createHash8 } from "node:crypto";
+import { createHash as createHash9 } from "node:crypto";
 function normalizeMemoryContent(content) {
   return content.toLowerCase().replace(/\s+/g, " ").trim();
 }
 function computeNormalizedHash(content) {
   const normalized = normalizeMemoryContent(content);
-  return createHash8("md5").update(normalized).digest("hex");
+  return createHash9("md5").update(normalized).digest("hex");
 }
 
 // src/features/magic-context/memory/visibility.ts
@@ -9636,7 +10315,6 @@ class ModuleMemoryAuthorityError extends Error {
   }
 }
 function assertTsMemoryWriteAllowed(db, projectPath) {
-  registerPrivilegedWriter(db);
   try {
     const managed = db.prepare("SELECT 1 FROM authority_managed WHERE project_path = ? UNION SELECT 1 FROM authority_repair_pending WHERE project_path = ? LIMIT 1").get(projectPath, projectPath);
     if (managed)
@@ -10109,9 +10787,12 @@ async function runMemoryMigration(deps) {
       const modelOverride = modelId ? parseProviderModel(modelId) : null;
       await cleanupChildSession(agentSessionId);
       agentSessionId = null;
-      const createResponse = await client.session.create({
-        body: { parentID: parentSessionId, title: "magic-context-memory-migration" },
-        query: { directory }
+      const createResponse = await createChildSessionWithFence({
+        client,
+        db,
+        parentSessionId,
+        title: "magic-context-memory-migration",
+        directory
       });
       const created = normalizeSDKResponse(createResponse, null, {
         preferResponseOnMissingData: true
@@ -10211,7 +10892,7 @@ async function runMemoryMigration(deps) {
 }
 
 // src/features/magic-context/compartment-chunk-embedding.ts
-import { createHash as createHash9 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 
 // src/features/magic-context/recursive-text-splitter.ts
 var DEFAULT_SEPARATORS = [`
@@ -10306,9 +10987,6 @@ var existingHashStatements = new WeakMap;
 var existingHashByProjectStatements = new WeakMap;
 var deleteByCompartmentStatements = new WeakMap;
 var insertEmbeddingStatements = new WeakMap;
-var distinctModelStatements = new WeakMap;
-var clearProjectStatements = new WeakMap;
-var clearProjectModelStatements = new WeakMap;
 var searchRowsStatements = new WeakMap;
 var searchRowsByModelStatements = new WeakMap;
 var searchPoolProbeStatements = new WeakMap;
@@ -10499,7 +11177,7 @@ function parseCanonicalLineRange(line) {
   return { start, end };
 }
 function hashChunkText(text) {
-  return createHash9("sha256").update(text).digest("hex");
+  return createHash10("sha256").update(text).digest("hex");
 }
 function vectorBlob2(vector) {
   return new Uint8Array(vector.buffer, vector.byteOffset, vector.byteLength);
@@ -10890,7 +11568,7 @@ function countSessionCompartmentEmbedCoverage(db, projectPath, sessionId, modelI
 }
 
 // src/features/magic-context/project-embedding-registry.ts
-import { createHash as createHash11, randomUUID as randomUUID2 } from "node:crypto";
+import { createHash as createHash12, randomUUID as randomUUID2 } from "node:crypto";
 
 // src/config/schema/magic-context.ts
 import { homedir as homedir2 } from "node:os";
@@ -25342,12 +26020,11 @@ var AgentOverrideConfigSchema = exports_external.object({
 
 // src/config/schema/magic-context.ts
 var DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE = 65;
-var EXECUTE_THRESHOLD_CAP_MESSAGE = "execute_threshold is capped at 80% for cache safety: a single large agent step can overflow the context window before Magic Context can compact between turns, forcing OpenCode's native compaction (hard to recover from). 80% also leaves headroom below the 85%/95% emergency bands. Use a value between 20 and 80.";
+var EXECUTE_THRESHOLD_CAP_MESSAGE = "execute_threshold is capped at 90% for cache safety: output capacity is reserved from the usable context window, and the remaining 10% absorbs mid-turn growth before the absolute 95% emergency wall. Use a value between 20 and 90.";
 var DEFAULT_HISTORIAN_TIMEOUT_MS = 300000;
 var DEFAULT_HISTORY_BUDGET_PERCENTAGE = 0.15;
 var DEFAULT_LOCAL_EMBEDDING_MODEL = "Xenova/all-MiniLM-L6-v2";
-var DreamingTaskSchema = exports_external.enum(AGENTIC_DREAM_TASKS);
-var PiThinkingLevelSchema = exports_external.enum(["off", "minimal", "low", "medium", "high", "xhigh"]).optional();
+var PiThinkingLevelSchema = exports_external.enum(["off", "minimal", "low", "medium", "high", "xhigh", "max"]).optional();
 var PiConfigSchema = exports_external.object({
   subagent_extensions: exports_external.array(exports_external.string().trim().min(1)).optional().describe("User-only allowlist of Pi extensions for Magic Context subagent children. When set, children use --no-extensions and load only these entries (plus Magic Context's scoped child extension where applicable). Relative paths resolve from ~/.pi/agent, matching Pi's settings.json package location. Unset preserves normal Pi extension discovery.")
 }).optional();
@@ -25420,7 +26097,7 @@ var SidekickConfigSchema = AgentOverrideConfigSchema.extend({
 }).optional();
 var HistorianConfigSchema = AgentOverrideConfigSchema.extend({
   two_pass: exports_external.boolean().default(false).describe("Run a second editor pass over historian output to clean low-signal U: lines and cross-compartment duplicates. Adds ~1 extra API call and ~1.3x cost per historian run. Useful for models without extended thinking support. (default: false)"),
-  thinking_level: PiThinkingLevelSchema.describe("Pi only: explicit thinking level passed as --thinking <level> to Pi historian subagent invocations. Required when using reasoning models (e.g. github-copilot/gpt-5.4) because Pi's default thinking-level resolution can pick a value the provider rejects. OpenCode users set variant instead. Valid: off | minimal | low | medium | high | xhigh"),
+  thinking_level: PiThinkingLevelSchema.describe("Pi only: explicit thinking level passed as --thinking <level> to Pi historian subagent invocations. Required when using reasoning models (e.g. github-copilot/gpt-5.4) because Pi's default thinking-level resolution can pick a value the provider rejects. OpenCode users set variant instead. Valid: off | minimal | low | medium | high | xhigh | max"),
   disallowed_tools: exports_external.array(exports_external.enum(["*", "read", "aft_outline", "aft_zoom", "aft_search"])).default([]).describe(`OpenCode only. Tools to REMOVE from the historian's default allow-list [read, aft_outline, aft_zoom, aft_search]. Applies to both historian and historian-editor agents. Use ["*"] to strip all tool definitions from the model request — this prevents weak instruction-following models (e.g. mistral-small-latest) from entering tool-calling loops. Individual tool names remove just that tool. Note: a user-supplied historian.permission override can re-allow a tool that disallowed_tools removed — disallowed_tools sets the baseline, permission overrides take precedence. (default: [])`)
 }).optional();
 var EmbeddingFallbackProviderSchema = exports_external.enum(["local", "openai-compatible", "off"]);
@@ -25441,7 +26118,22 @@ var BaseEmbeddingConfigSchema = exports_external.object({
   input_type: exports_external.string().optional().describe("Default input_type for stored/indexed (passage) embeddings in the request body. Required by some openai-compatible providers (e.g. NVIDIA NIM). Omitted from the request when unset."),
   query_input_type: exports_external.string().optional().describe("Optional input_type for query (search) embeddings on asymmetric models (e.g. NVIDIA NIM 'query'). When unset, query embeddings use embedding.input_type. Passage/stored content always uses embedding.input_type."),
   truncate: exports_external.string().optional().describe("Optional truncate mode sent in the embedding request body (e.g. NVIDIA NIM accepts 'NONE' | 'START' | 'END'). Omitted from the request when unset."),
-  max_input_tokens: exports_external.number().int().positive().optional().describe("Optional maximum input tokens for chunk embeddings. Defaults conservatively to 512 when omitted.")
+  max_input_tokens: exports_external.number().int().positive().optional().describe("Optional maximum input tokens for chunk embeddings. Defaults conservatively to 512 when omitted."),
+  local_dtype: exports_external.enum([
+    "auto",
+    "fp32",
+    "fp16",
+    "q8",
+    "int8",
+    "uint8",
+    "q4",
+    "bnb4",
+    "q4f16",
+    "q2",
+    "q2f16",
+    "q1",
+    "q1f16"
+  ]).optional().describe("Local provider only: ONNX model dtype passed to the transformers.js feature-extraction pipeline. Accepts the @huggingface/transformers DataType strings (auto, fp32, fp16, q8, int8, uint8, q4, bnb4, q4f16, q2, q2f16, q1, q1f16). Omitted keeps today's behavior (fp32). A non-default value changes the produced vectors and folds into the embedding model identity, so switching dtype re-embeds rather than mixing vector spaces. Useful for selecting a quantized variant (e.g. q8) of a larger multilingual model to cut memory and CPU cost; see issue #259.")
 }).superRefine((data, ctx) => {
   const validationProvider = data.provider === "synapse" ? data.fallback_provider : data.provider;
   if (validationProvider === "openai-compatible" && !data.endpoint?.trim()) {
@@ -25483,7 +26175,8 @@ var EmbeddingConfigSchema = BaseEmbeddingConfigSchema.transform((data) => {
     return {
       provider: "local",
       model: data.model?.trim() || DEFAULT_LOCAL_EMBEDDING_MODEL,
-      ...data.max_input_tokens ? { max_input_tokens: data.max_input_tokens } : {}
+      ...data.max_input_tokens ? { max_input_tokens: data.max_input_tokens } : {},
+      ...data.local_dtype ? { local_dtype: data.local_dtype } : {}
     };
   }
   if (data.provider === "openai-compatible") {
@@ -25506,6 +26199,7 @@ var EmbeddingConfigSchema = BaseEmbeddingConfigSchema.transform((data) => {
 });
 var MagicContextConfigSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).describe("Enable magic context (default: true)"),
+  allow_home_project: exports_external.boolean().default(false).describe("Allow Magic Context sessions launched from the exact canonical home directory. The home session uses its deterministic dir: identity so pre-gate memories reconnect. USER-LEVEL ONLY: project config is ignored. The home identity is excluded from registry seed exports, never resolves descendants by containment, and cannot join a workspace."),
   experimental: exports_external.object({
     mural: exports_external.object({
       enabled: exports_external.boolean().default(false),
@@ -25517,15 +26211,19 @@ var MagicContextConfigSchema = exports_external.object({
   language: exports_external.string().trim().toLowerCase().refine((s) => isValidLanguageCode(s), 'language must be a 2-letter ISO 639-1 code (e.g. "tr", "es", "de")').optional().describe("Output language for Magic Context's generated content and guidance, as a " + '2-letter ISO 639-1 code (e.g. "tr", "es", "de", "ja", "pt"). When set, the ' + "historian, dreamer, sidekick, and the agent-guidance block instruct the model to " + "write its PROSE in this language while keeping all structural tokens (XML tags, " + "the five memory category names, code identifiers, file paths) in English. " + "USER-LEVEL ONLY (ignored in project config for security). Unset = today's " + "behavior (model mirrors the conversation; English scaffolding). Changing it " + "triggers one cache re-materialization; existing compartments/memories keep their " + "original language until naturally rewritten."),
   historian: HistorianConfigSchema.describe("Historian agent configuration (model, fallback_models, variant, temperature, maxTokens, permission, two_pass, etc.)"),
   dreamer: DreamerConfigSchema.optional().describe("Dreamer agent + scheduling configuration (model, fallback_models, disable, schedule, tasks, etc.)"),
-  cache_ttl: exports_external.union([exports_external.string(), exports_external.object({ default: exports_external.string() }).catchall(exports_external.string())]).default("5m").describe('Cache TTL: string (e.g. "5m") or per-model object ({ default: "5m", "model-id": "10m" })'),
+  cache_ttl: exports_external.union([exports_external.string(), exports_external.object({ default: exports_external.string() }).catchall(exports_external.string())]).default("5m").describe('Cache TTL: string (e.g. "5m", "1h", "30s") or per-model object ({ default: "5m", "model-id": "10m" }). Set to "never" for lanes kept warm by an external keepwarm proxy — disables the idle-TTL heuristic so MC never initiates a rebuild based on elapsed time.'),
+  output_reserve: exports_external.union([
+    exports_external.number().min(0),
+    exports_external.object({ default: exports_external.number().min(0) }).catchall(exports_external.number().min(0))
+  ]).optional().describe('User-only output-token reservation override. Number or per-model object ({ default: 16384, "provider/model": 8192 }); 0 disables reservation. When unset, Magic Context reserves the catalog output limit (capped at 25% of context) for shared-window providers and keeps proven separate-quota Google/Gemini windows unchanged.'),
   toast_duration_ms: exports_external.number().min(0).max(60000).default(5000).describe("TUI toast lifetime in milliseconds for Magic Context notifications. Set to 0 to disable Magic Context toasts entirely (min: 0, max: 60000, default: 5000)"),
   execute_threshold_percentage: exports_external.union([
-    exports_external.number().min(20).max(80, EXECUTE_THRESHOLD_CAP_MESSAGE),
-    exports_external.object({ default: exports_external.number().min(20).max(80, EXECUTE_THRESHOLD_CAP_MESSAGE) }).catchall(exports_external.number().min(20).max(80, EXECUTE_THRESHOLD_CAP_MESSAGE))
-  ]).default(DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE).describe('Context percentage that forces queued operations to execute. Number or per-model object ({ default: 65, "provider/model": 45 }). Values above 80 are rejected because the runtime caps at 80% for cache safety (MAX_EXECUTE_THRESHOLD). Default: DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE'),
+    exports_external.number().min(20).max(90, EXECUTE_THRESHOLD_CAP_MESSAGE),
+    exports_external.object({ default: exports_external.number().min(20).max(90, EXECUTE_THRESHOLD_CAP_MESSAGE) }).catchall(exports_external.number().min(20).max(90, EXECUTE_THRESHOLD_CAP_MESSAGE))
+  ]).default(DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE).describe('Context percentage that forces queued operations to execute. Number or per-model object ({ default: 65, "provider/model": 45 }). Values above 90 are rejected because the runtime caps at 90% of the output-reserved safe window (MAX_EXECUTE_THRESHOLD). Default: DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE'),
   execute_threshold_tokens: exports_external.object({
     default: exports_external.number().min(5000).max(2000000).optional()
-  }).catchall(exports_external.number().min(5000).max(2000000)).optional().describe("Absolute token thresholds per model. When matched, overrides execute_threshold_percentage for that model. Accepts `default` for all models or per-model keys. Values above 80% × context_limit are clamped with a warning log. Min 5_000, max 2_000_000."),
+  }).catchall(exports_external.number().min(5000).max(2000000)).optional().describe("Absolute token thresholds per model. When matched, overrides execute_threshold_percentage for that model. Accepts `default` for all models or per-model keys. Values above 90% × context_limit are clamped with a warning log. Min 5_000, max 2_000_000."),
   protected_tags: exports_external.number().min(1).max(100).optional().describe("Number of recent tags to protect from dropping (min: 1, max: 100, default: 20)"),
   clear_reasoning_age: exports_external.number().min(10).default(50).describe("Clear reasoning/thinking blocks older than N tags (default: 50)"),
   history_budget_percentage: exports_external.number().min(0.05).max(0.5).default(DEFAULT_HISTORY_BUDGET_PERCENTAGE).describe("Fraction of usable context (context_limit × execute_threshold) reserved for the session history block (default: 0.15)"),
@@ -25545,6 +26243,9 @@ var MagicContextConfigSchema = exports_external.object({
     cache_size_mb: exports_external.number().min(2).max(2048).default(64).describe("Page-cache size in MiB per connection (PRAGMA cache_size). Larger keeps more hot pages resident, cutting re-reads on repeated full-table scans. (min 2, max 2048, default 64)"),
     mmap_size_mb: exports_external.number().min(0).max(8192).default(0).describe("Memory-mapped I/O size in MiB (PRAGMA mmap_size). 0 disables mmap (SQLite default). Raising it can cut read overhead on large DBs at the cost of address space. (min 0, max 8192, default 0)")
   }).default({ cache_size_mb: 64, mmap_size_mb: 0 }).describe("SQLite connection tuning for Magic Context's own context.db. These are per-connection PRAGMAs applied at open; they do not change the schema or what is stored."),
+  storage: exports_external.object({
+    enforce_private_permissions: exports_external.boolean().default(true).describe("When true (default), Magic Context creates and re-tightens its storage directories to owner-only 0700 and storage files to owner-only 0600. Set false only for a deliberate trusted-group deployment whose operator manages directory, database, WAL/SHM, cache, and RPC file permissions externally; Magic Context then never chmods or supplies restrictive creation modes. USER-LEVEL ONLY — ignored in project config for security. On Windows, POSIX chmod modes are already meaningless, so this setting is a no-op.")
+  }).default({ enforce_private_permissions: true }).describe("Storage permission policy. The default keeps session content and memories owner-private. Disabling enforcement is for trusted shared-group storage managed externally; every group member able to read the storage can read all stored session content and memories."),
   embedding: EmbeddingConfigSchema.default({
     provider: "local",
     model: DEFAULT_LOCAL_EMBEDDING_MODEL
@@ -25558,6 +26259,9 @@ var MagicContextConfigSchema = exports_external.object({
   temporal_awareness: exports_external.boolean().default(true).describe('Inject wall-clock gap markers (<!-- +Xm -->) between user messages where > 5 min elapsed since the previous message, and add compact date ranges to compartment headings. Gives the agent a sense of session pacing and "how long ago" across multi-day sessions. Graduated from experimental.temporal_awareness; default: true (set false to opt out).'),
   keep_subagents: exports_external.boolean().default(false).describe("Debug: keep the child sessions Magic Context spawns for its own subagents (historian, dreamer, sidekick, memory-migration) instead of deleting them on success. Useful for short-term inspection/data collection — their full transcript (prompt, tool calls, token usage, output) stays in the host session store. Kept sessions accumulate until manually cleared; leave false for normal use. Requires a restart to take effect."),
   fail_closed_blocking: exports_external.boolean().default(true).describe("When Magic Context cannot operate (schema fence mismatch, storage open/migration failure), block the primary-session prompt with a loud recovery error instead of silently degrading to native compaction. Default true. Set false only to restore the old degrade-silently behavior (not recommended). USER-LEVEL ONLY — ignored in project config for security. Requires a restart."),
+  compaction: exports_external.object({
+    enabled: exports_external.boolean().default(true).describe("When false, Magic Context stops managing the context window and keeps its knowledge layer: memory and docs/user-profile/key-files injection through additive m[0]/m[1], raw-message FTS indexing, dreamer, notes, ctx_search, ctx_expand, ctx_memory, and /ctx-embed remain available. MC's historian/compartment preparation, tagging, markers, pruning, folding, drops, strips, splicing, synthetic context-management todos, temporal markers, nudges, and fail-closed blocking stop; ctx_expand remains a knowledge-surface tool. fail_closed_blocking is inert: a transform failure passes the input messages through without blocking or cancelling. This setting does not enable native compaction: OpenCode's compaction.auto / compaction.prune or Pi's equivalent owns the window, or nothing does. MC's compaction.enabled in magic-context.jsonc is distinct from OpenCode's compaction.auto / compaction.prune in opencode.jsonc; they are different files and different owners. On the first turn after disabling, a long session may trigger one native compaction cycle; MC removes only its own marker boundary, leaves native boundaries and stored compartments intact, and does no pre-trimming mitigation. Marker cleanup is lazy per session, so an unresumed session is cleaned when it is next resumed. If compaction is enabled again, run /ctx-wrapup when the historian is runnable to catch up. OpenCode peer verification against v1.18.4 confirms native compaction covers child sessions: subagents receive additive memory/docs injection and no MC reclaim in this mode, so keep subagent tasks small or leave compaction.enabled on for long subagent runs. If transform_mode is rust, compaction-off resolves to the TypeScript transform and emits one frozen boot warning because there is no Rust reduced-mode contract. This is boot-resolved and requires a process restart; project-tier compaction.enabled is stripped so a cloned repository cannot disable the user's setting. The sidebar reports raw usage as Context: <pct>% · native compaction or Context: <pct>% · no active compaction and does not show an MC execute-threshold fill. /ctx-wrapup, /ctx-recomp, /ctx-flush, and /ctx-session-upgrade refuse without context-management side effects; /ctx-embed remains functional. Raw content hidden by a native boundary before Magic Context's first pass is not retroactively indexed.")
+  }).default({ enabled: true }).describe("Compaction-off mode gate. Default true (MC manages the context window as today). Set compaction.enabled=false to keep the knowledge layer while letting native compaction (or nothing) own the window. Boot-resolved; requires a restart to change."),
   todowrite: exports_external.object({
     enabled: exports_external.boolean().default(true).describe("Pi only: register Magic Context's todowrite task-list tool. Disable if you use your own todo extension. OpenCode ships its own built-in todowrite; this setting has no effect there."),
     overlay: exports_external.boolean().default(true).describe("Pi only: show the persistent todo overlay above the editor while tasks are active.")
@@ -25604,9 +26308,6 @@ var saveStatements = new WeakMap;
 var loadProjectStatements = new WeakMap;
 var loadUnembeddedStatements = new WeakMap;
 var countEmbeddedStatements = new WeakMap;
-var clearProjectStatements2 = new WeakMap;
-var clearProjectModelStatements2 = new WeakMap;
-var distinctModelIdStatements = new WeakMap;
 function getSaveStatement(db) {
   let stmt = saveStatements.get(db);
   if (!stmt) {
@@ -25677,7 +26378,6 @@ function countEmbeddedCommits(db, projectPath, modelId) {
 var insertStatements = new WeakMap;
 var existingShasStatements = new WeakMap;
 var projectCountStatements = new WeakMap;
-var evictStatements = new WeakMap;
 var evictOverflowStatements = new WeakMap;
 var latestCommitTimeStatements = new WeakMap;
 function getInsertStatement(db) {
@@ -25919,7 +26619,7 @@ function releaseGitSweepLease(db, projectPath, holderId) {
 }
 
 // src/features/magic-context/memory/embedding-synapse.ts
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 
 // ../../node_modules/.bun/@cortexkit+subc-client@0.4.1/node_modules/@cortexkit/subc-client/dist/client.js
 import { promises as fs2 } from "node:fs";
@@ -28132,7 +28832,7 @@ function wait(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
 function sha256(value) {
-  return createHash10("sha256").update(value).digest("hex");
+  return createHash11("sha256").update(value).digest("hex");
 }
 function stableJson(value) {
   if (Array.isArray(value))
@@ -28180,7 +28880,7 @@ function extractCatalogEntries(value) {
     const batchRecord = asRecord(rawBatch);
     const recommendedBatch = typeof rawBatch === "number" ? rawBatch : batchRecord ? batchRecord.rows : undefined;
     const recommendedTokenBudget = batchRecord ? batchRecord.token_budget : undefined;
-    const state = typeof record2.state === "string" ? record2.state : undefined;
+    const state2 = typeof record2.state === "string" ? record2.state : undefined;
     return [
       {
         model,
@@ -28191,7 +28891,7 @@ function extractCatalogEntries(value) {
         ...typeof recommendedTokenBudget === "number" && recommendedTokenBudget > 0 ? { recommended_token_budget: Math.floor(recommendedTokenBudget) } : {},
         ...record2.provenance !== undefined ? { provenance: record2.provenance } : {},
         ...typeof record2.certified === "boolean" ? { certified: record2.certified } : {},
-        ...typeof record2.status === "string" ? { status: record2.status } : state ? { status: state } : {}
+        ...typeof record2.status === "string" ? { status: record2.status } : state2 ? { status: state2 } : {}
       }
     ];
   });
@@ -28577,6 +29277,7 @@ function getEmbeddingProviderIdentity(config2) {
     throw new Error("Unknown embedding provider");
   }
   const truncate = config2.provider === "openai-compatible" ? config2.truncate?.trim() : undefined;
+  const localDtype = config2.provider === "local" && config2.local_dtype && config2.local_dtype !== "fp32" ? config2.local_dtype : undefined;
   const identityInput = config2.provider === "openai-compatible" ? {
     provider: "openai-compatible",
     model: config2.model.trim(),
@@ -28588,7 +29289,8 @@ function getEmbeddingProviderIdentity(config2) {
     provider: "local",
     model: config2.model?.trim() || DEFAULT_LOCAL_EMBEDDING_MODEL,
     endpoint: "",
-    apiKeyPresent: false
+    apiKeyPresent: false,
+    ...localDtype ? { localDtype } : {}
   };
   return `embedding-provider:${computeNormalizedHash(JSON.stringify(identityInput))}`;
 }
@@ -28596,7 +29298,7 @@ function getEmbeddingProviderIdentity(config2) {
 // src/features/magic-context/memory/embedding-local.ts
 import { chmodSync as chmodSync2, mkdirSync as mkdirSync2 } from "node:fs";
 import { open, stat, unlink, writeFile } from "node:fs/promises";
-import { dirname as dirname2, join as join3 } from "node:path";
+import { dirname as dirname2, join as join4 } from "node:path";
 import { pathToFileURL } from "node:url";
 var LOCK_POLL_MS = 150;
 var STALE_LOCK_MS = 3 * 60000;
@@ -28676,6 +29378,7 @@ async function injectWasmOrtForElectron() {
     return false;
   }
 }
+var DEFAULT_LOCAL_DTYPE = "fp32";
 async function withQuietConsole(fn) {
   const origWarn = console.warn;
   const origError = console.error;
@@ -28752,16 +29455,22 @@ class LocalEmbeddingProvider {
   modelId;
   maxInputTokens;
   model;
+  dtype;
   pipeline = null;
   initPromise = null;
   inFlight = 0;
   disposing = false;
   disposePromise = null;
   inFlightWaiters = [];
-  constructor(model = DEFAULT_LOCAL_EMBEDDING_MODEL, maxInputTokens = 512) {
+  constructor(model = DEFAULT_LOCAL_EMBEDDING_MODEL, maxInputTokens = 512, dtype = DEFAULT_LOCAL_DTYPE) {
     this.model = model;
     this.maxInputTokens = maxInputTokens;
-    this.modelId = getEmbeddingProviderIdentity({ provider: "local", model });
+    this.dtype = dtype || DEFAULT_LOCAL_DTYPE;
+    this.modelId = getEmbeddingProviderIdentity({
+      provider: "local",
+      model,
+      ...dtype && dtype !== DEFAULT_LOCAL_DTYPE ? { local_dtype: dtype } : {}
+    });
   }
   async initialize() {
     if (this.disposing) {
@@ -28790,20 +29499,24 @@ class LocalEmbeddingProvider {
         if (LogLevel && "ERROR" in LogLevel) {
           env.logLevel = LogLevel.ERROR;
         }
-        const modelCacheDir = join3(getMagicContextStorageDir(), "models");
+        const modelCacheDir = join4(getMagicContextStorageDir(), "models");
         try {
-          mkdirSync2(modelCacheDir, { recursive: true, mode: 448 });
-          if (process.platform !== "win32") {
-            try {
-              chmodSync2(modelCacheDir, 448);
-            } catch {}
+          if (shouldEnforcePrivateStoragePermissions()) {
+            mkdirSync2(modelCacheDir, { recursive: true, mode: 448 });
+            if (process.platform !== "win32") {
+              try {
+                chmodSync2(modelCacheDir, 448);
+              } catch {}
+            }
+          } else {
+            mkdirSync2(modelCacheDir, { recursive: true });
           }
           env.cacheDir = modelCacheDir;
         } catch {
           log("[magic-context] could not create model cache dir, using library default");
         }
         const createPipeline = transformersModule.pipeline;
-        const lockPath = join3(modelCacheDir, ".load.lock");
+        const lockPath = join4(modelCacheDir, ".load.lock");
         const releaseLock = await acquireModelLoadLock(lockPath);
         const stopHeartbeat = startLockHeartbeat(lockPath);
         try {
@@ -28812,7 +29525,7 @@ class LocalEmbeddingProvider {
           for (let attempt = 1;attempt <= MAX_ATTEMPTS; attempt++) {
             try {
               const pipeline = await withQuietConsole(() => createPipeline("feature-extraction", this.model, {
-                dtype: "fp32",
+                dtype: this.dtype,
                 ...injectedWasmOrt ? { device: "auto" } : {}
               }));
               if (this.disposing) {
@@ -29376,6 +30089,9 @@ var shadowWorker = null;
 var SHADOW_MAX_ITEMS_PER_TICK = 64;
 var SHADOW_MAX_BYTES_PER_TICK = 512 * 1024;
 var SHADOW_MAX_WALL_CLOCK_MS = 2000;
+var pendingShadowBackfills = new Map;
+var shadowBackfillLastIds = new Map;
+var shadowBackfillStopReasons = new Map;
 var loadUnembeddedMemoriesStatements = new WeakMap;
 var upsertActiveIdentityStatements = new WeakMap;
 var backfillActiveIdentityStatements = new Map;
@@ -29460,7 +30176,8 @@ function resolveEmbeddingConfig(config2) {
       model: config2?.model?.trim() || DEFAULT_LOCAL_EMBEDDING_MODEL,
       ...config2?.max_input_tokens ? {
         max_input_tokens: normalizeCompartmentChunkMaxInputTokens(config2.max_input_tokens)
-      } : {}
+      } : {},
+      ...config2?.local_dtype ? { local_dtype: config2.local_dtype } : {}
     };
   }
   if (config2.provider === "openai-compatible") {
@@ -29519,7 +30236,7 @@ function createProvider(config2, context) {
     });
   }
   if (config2.provider === "local") {
-    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens);
+    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens, config2.local_dtype);
   }
   if (config2.provider === "synapse") {
     const synapse = config2;
@@ -29548,10 +30265,10 @@ function stableStringify2(value) {
   return JSON.stringify(value);
 }
 function sha256Prefix(value, length = 16) {
-  return createHash11("sha256").update(value).digest("hex").slice(0, length);
+  return createHash12("sha256").update(value).digest("hex").slice(0, length);
 }
 function contentSha256(value) {
-  return createHash11("sha256").update(value).digest("hex");
+  return createHash12("sha256").update(value).digest("hex");
 }
 function getRuntimeFingerprint(config2) {
   if (config2.provider === "off") {
@@ -29910,6 +30627,7 @@ function registerProjectShadowEmbedding(db, projectIdentity, config2, sourceDire
     recordScopeActiveIdentity(db, projectIdentity, "chunk", registration.chunkModelId, now);
     persistShadowDescriptor(db, registration);
   })();
+  maybeArmShadowBackfill(db, projectIdentity, registration);
   return {
     projectIdentity,
     sourceDirectory,
@@ -29930,7 +30648,7 @@ function startShadowWorker() {
     return;
   shadowWorker = runShadowWorker().finally(() => {
     shadowWorker = null;
-    if (shadowQueue.length > 0)
+    if (shadowQueue.length > 0 || hasPendingShadowBackfill())
       startShadowWorker();
   });
 }
@@ -29977,6 +30695,117 @@ function enqueueShadowEmbeddingItems(projectIdentity, scope, ids) {
   shadowQueue.push({ projectIdentity, scope, ids: [...ids] });
   startShadowWorker();
 }
+function shadowBackfillMissingBase(scope, primaryModelId, shadowModelId, projectIdentity) {
+  if (scope === "memory") {
+    return {
+      sql: `SELECT m.id AS id
+                  FROM memories m
+                  JOIN memory_embeddings mp ON mp.memory_id = m.id AND mp.model_id = ?
+                  LEFT JOIN memory_embeddings ms ON ms.memory_id = m.id AND ms.model_id = ?
+                  WHERE m.project_path = ? AND m.status = 'active' AND ms.memory_id IS NULL`,
+      params: [primaryModelId, shadowModelId, projectIdentity],
+      orderBy: " ORDER BY m.id"
+    };
+  }
+  if (scope === "commit") {
+    return {
+      sql: `SELECT gc.sha AS id
+                  FROM git_commits gc
+                  JOIN git_commit_embeddings gp ON gp.sha = gc.sha AND gp.model_id = ?
+                  LEFT JOIN git_commit_embeddings gs ON gs.sha = gc.sha AND gs.model_id = ?
+                  WHERE gc.project_path = ? AND gs.sha IS NULL`,
+      params: [primaryModelId, shadowModelId, projectIdentity],
+      orderBy: " ORDER BY gc.committed_at DESC, gc.sha"
+    };
+  }
+  return {
+    sql: `SELECT DISTINCT cp.compartment_id AS id
+              FROM compartment_chunk_embeddings cp
+              WHERE cp.project_path = ? AND cp.model_id = ?
+                AND NOT EXISTS (
+                    SELECT 1 FROM compartment_chunk_embeddings cs
+                    WHERE cs.compartment_id = cp.compartment_id AND cs.model_id = ?
+                )`,
+    params: [projectIdentity, primaryModelId, shadowModelId],
+    orderBy: " ORDER BY cp.compartment_id"
+  };
+}
+function shadowBackfillMissingIds(db, projectIdentity, scope, primaryModelId, shadowModelId, limit) {
+  const { sql, params, orderBy } = shadowBackfillMissingBase(scope, primaryModelId, shadowModelId, projectIdentity);
+  const rows = db.prepare(`${sql}${orderBy} LIMIT ?`).all(...params, limit);
+  return rows.map((row) => String(row.id));
+}
+function shadowModelIdForScope(registration, scope) {
+  return scope === "chunk" ? registration.chunkModelId : registration.modelId;
+}
+function hasPendingShadowBackfill(projectIdentity) {
+  if (projectIdentity === undefined)
+    return pendingShadowBackfills.size > 0;
+  const scopes = pendingShadowBackfills.get(projectIdentity);
+  return scopes !== undefined && scopes.size > 0;
+}
+function pumpShadowBackfill() {
+  for (const [projectIdentity, scopes] of pendingShadowBackfills) {
+    const db = dbForShadowQueue.get(projectIdentity);
+    const shadow = shadowRegistrations.get(projectIdentity);
+    const primary = projectRegistrations.get(projectIdentity);
+    if (!db || !shadow || !primary) {
+      pendingShadowBackfills.delete(projectIdentity);
+      continue;
+    }
+    for (const scope of [...scopes]) {
+      const primaryModelId = shadowModelIdForScope(primary, scope);
+      const shadowModelId = shadowModelIdForScope(shadow, scope);
+      const stallKey = `${projectIdentity}:${scope}`;
+      if (primaryModelId === "off" || shadowModelId === "off") {
+        scopes.delete(scope);
+        shadowBackfillLastIds.delete(stallKey);
+        continue;
+      }
+      const ids = shadowBackfillMissingIds(db, projectIdentity, scope, primaryModelId, shadowModelId, SHADOW_MAX_ITEMS_PER_TICK);
+      if (ids.length === 0) {
+        shadowBackfillStopReasons.set(stallKey, "drained");
+        scopes.delete(scope);
+        shadowBackfillLastIds.delete(stallKey);
+        continue;
+      }
+      const signature = ids.join(",");
+      if (shadowBackfillLastIds.get(stallKey) === signature) {
+        shadowBackfillStopReasons.set(stallKey, "stalled_no_progress");
+        log(`[shadow] backfill scope ${scope} for ${projectIdentity} retired without progress — ` + `the last batch produced no writes (provider failure or timeout is the usual cause); ` + `${ids.length}+ items remain and retry on the next registration or manual --shadow run`);
+        scopes.delete(scope);
+        shadowBackfillLastIds.delete(stallKey);
+        continue;
+      }
+      shadowBackfillLastIds.set(stallKey, signature);
+      shadowQueue.push({ projectIdentity, scope, ids });
+    }
+    if (scopes.size === 0)
+      pendingShadowBackfills.delete(projectIdentity);
+  }
+}
+function maybeArmShadowBackfill(db, projectIdentity, shadow) {
+  if (untrustedLoadProjects.has(projectIdentity))
+    return;
+  const primary = projectRegistrations.get(projectIdentity);
+  if (!primary)
+    return;
+  const pending = new Set;
+  for (const scope of ["memory", "commit", "chunk"]) {
+    const primaryModelId = shadowModelIdForScope(primary, scope);
+    const shadowModelId = shadowModelIdForScope(shadow, scope);
+    if (primaryModelId === "off" || shadowModelId === "off")
+      continue;
+    const probe = shadowBackfillMissingIds(db, projectIdentity, scope, primaryModelId, shadowModelId, 1);
+    if (probe.length > 0)
+      pending.add(scope);
+  }
+  if (pending.size === 0)
+    return;
+  pendingShadowBackfills.set(projectIdentity, pending);
+  pumpShadowBackfill();
+  startShadowWorker();
+}
 async function embedShadowItems(registration, items, db, scope) {
   const raw = registration.config;
   const fingerprint = typeof raw.synapse_fingerprint === "string" ? raw.synapse_fingerprint : "";
@@ -30100,7 +30929,15 @@ async function runShadowWorker() {
   const startedAt = Date.now();
   let processed = 0;
   let processedBytes = 0;
-  while (shadowQueue.length > 0 && processed < SHADOW_MAX_ITEMS_PER_TICK && Date.now() - startedAt < SHADOW_MAX_WALL_CLOCK_MS) {
+  for (;; ) {
+    if (shadowQueue.length === 0) {
+      pumpShadowBackfill();
+      if (shadowQueue.length === 0)
+        break;
+    }
+    if (processed >= SHADOW_MAX_ITEMS_PER_TICK || Date.now() - startedAt >= SHADOW_MAX_WALL_CLOCK_MS) {
+      break;
+    }
     const item = shadowQueue.shift();
     if (!item)
       break;
@@ -30706,12 +31543,12 @@ function parseFields(json2) {
 }
 
 // src/hooks/magic-context/historian-state-file.ts
-import { mkdirSync as mkdirSync3, unlinkSync, writeFileSync } from "node:fs";
+import { mkdirSync as mkdirSync3, unlinkSync as unlinkSync2, writeFileSync } from "node:fs";
 function cleanupHistorianStateFile(path3) {
   if (!path3)
     return;
   try {
-    unlinkSync(path3);
+    unlinkSync2(path3);
   } catch {}
 }
 // src/features/magic-context/memory/cosine-similarity.ts
@@ -30754,7 +31591,7 @@ function createProvider2(config2) {
     });
   }
   if (config2.provider === "local") {
-    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens);
+    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens, config2.local_dtype);
   }
   if (config2.provider === "synapse") {
     const synapse = config2;
@@ -31026,8 +31863,8 @@ function getMemoryVerifications(db, memoryIds) {
     existing.mappedAt = Math.max(existing.mappedAt, row.mapped_at ?? 0);
     result.set(row.memory_id, existing);
   }
-  for (const state of result.values()) {
-    state.files.sort();
+  for (const state2 of result.values()) {
+    state2.files.sort();
   }
   return result;
 }
@@ -31264,18 +32101,18 @@ function tallyFactsByCategory(facts) {
 }
 
 // src/hooks/magic-context/compaction-marker-manager.ts
-import { join as join5 } from "node:path";
+import { join as join6 } from "node:path";
 
 // src/features/magic-context/compaction-marker.ts
-import { createHash as createHash12 } from "node:crypto";
+import { createHash as createHash13 } from "node:crypto";
 import { existsSync as existsSync5 } from "node:fs";
-import { join as join4 } from "node:path";
+import { join as join5 } from "node:path";
 var BASE62_CHARS = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
 var ID_PREFIX_HEX_LENGTH = 12;
 var ID_SUFFIX_LENGTH = 14;
 var ID_PREFIX_MASK = (1n << BigInt(ID_PREFIX_HEX_LENGTH * 4)) - 1n;
 function deterministicBase62(seed, length) {
-  let value = BigInt(`0x${createHash12("sha256").update(seed).digest("hex")}`);
+  let value = BigInt(`0x${createHash13("sha256").update(seed).digest("hex")}`);
   const chars = Array(length);
   for (let index = length - 1;index >= 0; index -= 1) {
     chars[index] = BASE62_CHARS[Number(value % 62n)];
@@ -31295,7 +32132,7 @@ function generatePartId(timestampMs, counter = 0n, identity = "") {
   return generateId("prt", timestampMs, counter, identity);
 }
 function getOpenCodeDbPath() {
-  return join4(getDataDir(), "opencode", "opencode.db");
+  return join5(getDataDir(), "opencode", "opencode.db");
 }
 var cachedWriteDb = null;
 var REQUIRED_MESSAGE_COLUMNS = ["id", "session_id", "time_created", "time_updated", "data"];
@@ -31508,13 +32345,223 @@ function injectCompactionMarker(args) {
     return null;
   }
 }
-function removeCompactionMarker(state) {
+function listSessionCompactionMarkers(sessionId) {
+  const db = getWritableOpenCodeDb();
+  const partRows = db.prepare(`SELECT id, message_id
+             FROM part
+             WHERE session_id = ?
+               AND COALESCE(json_extract(data, '$.type'), '') = 'compaction'`).all(sessionId);
+  const markers = [];
+  const summaryStmt = db.prepare(`SELECT id
+         FROM message
+         WHERE session_id = ?
+           AND COALESCE(json_extract(data, '$.parentID'), '') = ?
+           AND COALESCE(json_extract(data, '$.summary'), 0) = 1
+           AND COALESCE(json_extract(data, '$.finish'), '') = 'stop'
+           AND COALESCE(json_extract(data, '$.providerID'), '') = 'magic-context'`);
+  for (const row of partRows) {
+    if (typeof row.id !== "string" || typeof row.message_id !== "string")
+      continue;
+    const summaryRows = summaryStmt.all(sessionId, row.message_id);
+    const summaryMessageIds = summaryRows.flatMap((summaryRow) => typeof summaryRow.id === "string" ? [summaryRow.id] : []);
+    markers.push({
+      compactionPartId: row.id,
+      boundaryMessageId: row.message_id,
+      summaryMessageIds
+    });
+  }
+  return markers;
+}
+function removeForeignCompactionMarker(sessionId, marker, protectedSummaryMessageId) {
   try {
     const db = getWritableOpenCodeDb();
     db.transaction(() => {
-      db.prepare("DELETE FROM part WHERE id = ?").run(state.summaryPartId);
-      db.prepare("DELETE FROM message WHERE id = ?").run(state.summaryMessageId);
-      db.prepare("DELETE FROM part WHERE id = ?").run(state.compactionPartId);
+      const deletePartsOfMessage = db.prepare("DELETE FROM part WHERE session_id = ? AND message_id = ?");
+      const deleteMessage = db.prepare("DELETE FROM message WHERE session_id = ? AND id = ?");
+      for (const summaryMessageId of marker.summaryMessageIds) {
+        if (summaryMessageId === protectedSummaryMessageId)
+          continue;
+        deletePartsOfMessage.run(sessionId, summaryMessageId);
+        deleteMessage.run(sessionId, summaryMessageId);
+      }
+      db.prepare("DELETE FROM part WHERE session_id = ? AND id = ?").run(sessionId, marker.compactionPartId);
+    })();
+    return true;
+  } catch (error51) {
+    log(`[magic-context] compaction-marker: foreign-marker removal failed (${sessionId}, part ${marker.compactionPartId}): ${error51 instanceof Error ? error51.message : String(error51)}`);
+    return false;
+  }
+}
+function dataReferencesTailStart(data) {
+  if (typeof data !== "object" || data === null)
+    return null;
+  const record2 = data;
+  if (typeof record2.tail_start_id === "string" && record2.tail_start_id.length > 0) {
+    return record2.tail_start_id;
+  }
+  const nested = record2.compaction;
+  if (typeof nested === "object" && nested !== null) {
+    const nestedTail = nested.tail_start_id;
+    if (typeof nestedTail === "string" && nestedTail.length > 0)
+      return nestedTail;
+  }
+  return null;
+}
+function isMcCanonicalCompactionPartData(data) {
+  if (typeof data !== "object" || data === null || Array.isArray(data))
+    return false;
+  const record2 = data;
+  const keys = Object.keys(record2).sort();
+  return keys.length === 2 && keys[0] === "auto" && keys[1] === "type" && record2.type === "compaction" && record2.auto === true;
+}
+function removeMcOwnedCompactionMarkers(sessionId, summaryText) {
+  const db = getWritableOpenCodeDb();
+  if (!isOpenCodeSchemaCompatible(db, getOpenCodeDbPath())) {
+    return {
+      verified: false,
+      removedLineages: 0,
+      removedRows: 0,
+      retainedLineages: 0
+    };
+  }
+  const canonicalSummaries = db.prepare(`SELECT id, COALESCE(json_extract(data, '$.parentID'), '') AS parent_id
+             FROM message
+             WHERE session_id = ?
+               AND COALESCE(json_extract(data, '$.summary'), 0) = 1
+               AND COALESCE(json_extract(data, '$.finish'), '') = 'stop'
+               AND COALESCE(json_extract(data, '$.providerID'), '') = 'magic-context'`).all(sessionId);
+  const legacySummaries = db.prepare(`SELECT m.id, COALESCE(json_extract(m.data, '$.parentID'), '') AS parent_id
+             FROM message m
+             WHERE m.session_id = ?
+               AND COALESCE(json_extract(m.data, '$.summary'), 0) = 1
+               AND COALESCE(json_extract(m.data, '$.finish'), '') = 'stop'
+               AND COALESCE(json_extract(m.data, '$.providerID'), '') <> 'magic-context'
+               AND EXISTS (
+                   SELECT 1
+                   FROM part p
+                   WHERE p.session_id = m.session_id
+                     AND p.message_id = m.id
+                     AND COALESCE(json_extract(p.data, '$.type'), '') = 'text'
+                     AND COALESCE(json_extract(p.data, '$.text'), '') = ?
+               )`).all(sessionId, summaryText);
+  const summariesByBoundary = new Map;
+  const orphanSummaryIds = new Set;
+  for (const row of [...canonicalSummaries, ...legacySummaries]) {
+    if (typeof row.id !== "string")
+      continue;
+    if (typeof row.parent_id === "string" && row.parent_id.length > 0) {
+      const set2 = summariesByBoundary.get(row.parent_id) ?? new Set;
+      set2.add(row.id);
+      summariesByBoundary.set(row.parent_id, set2);
+    } else {
+      orphanSummaryIds.add(row.id);
+    }
+  }
+  const compactionParts = db.prepare(`SELECT id, message_id, data
+             FROM part
+             WHERE session_id = ?
+               AND COALESCE(json_extract(data, '$.type'), '') = 'compaction'`).all(sessionId);
+  const parsedParts = [];
+  for (const part of compactionParts) {
+    if (typeof part.id !== "string" || typeof part.message_id !== "string")
+      continue;
+    let data;
+    try {
+      data = typeof part.data === "string" ? JSON.parse(part.data) : part.data;
+    } catch {
+      data = null;
+    }
+    parsedParts.push({
+      id: part.id,
+      messageId: part.message_id,
+      data,
+      tailStartId: dataReferencesTailStart(data)
+    });
+  }
+  const messageTailRefs = db.prepare(`SELECT id, data
+             FROM message
+             WHERE session_id = ?
+               AND json_extract(data, '$.compaction.tail_start_id') IS NOT NULL`).all(sessionId);
+  const messageTailStartIds = new Set;
+  for (const row of messageTailRefs) {
+    if (typeof row.id !== "string")
+      continue;
+    let data;
+    try {
+      data = typeof row.data === "string" ? JSON.parse(row.data) : row.data;
+    } catch {
+      data = null;
+    }
+    const ref = dataReferencesTailStart(data);
+    if (ref)
+      messageTailStartIds.add(ref);
+  }
+  let removedLineages = 0;
+  let removedRows = 0;
+  let retainedLineages = 0;
+  const deletePartsOfMessage = db.prepare("DELETE FROM part WHERE session_id = ? AND message_id = ?");
+  const deleteMessage = db.prepare("DELETE FROM message WHERE session_id = ? AND id = ?");
+  const deletePart = db.prepare("DELETE FROM part WHERE session_id = ? AND id = ?");
+  const deleteSummaries = (summaryIds) => {
+    let rows = 0;
+    for (const summaryId of summaryIds) {
+      rows += deletePartsOfMessage.run(sessionId, summaryId).changes;
+      rows += deleteMessage.run(sessionId, summaryId).changes;
+    }
+    return rows;
+  };
+  for (const [boundaryMessageId, summaryIds] of summariesByBoundary) {
+    const boundaryParts = parsedParts.filter((part) => part.messageId === boundaryMessageId);
+    const mcPartIds = boundaryParts.filter((part) => isMcCanonicalCompactionPartData(part.data)).map((part) => part.id);
+    const rowsToDelete = new Set([...summaryIds, ...mcPartIds]);
+    const survivingPartsReferenceDeletion = parsedParts.some((part) => !mcPartIds.includes(part.id) && part.tailStartId !== null && rowsToDelete.has(part.tailStartId));
+    const messageFieldReferencesDeletion = [...rowsToDelete].some((id) => messageTailStartIds.has(id));
+    if (survivingPartsReferenceDeletion || messageFieldReferencesDeletion) {
+      retainedLineages += 1;
+      log(`[magic-context] compaction-marker: flip-off cleanup RETAINED lineage at boundary ${boundaryMessageId} — a surviving tail_start_id references a row the deletion would remove`);
+      continue;
+    }
+    const rows = db.transaction(() => {
+      let changed = deleteSummaries(summaryIds);
+      for (const partId of mcPartIds) {
+        changed += deletePart.run(sessionId, partId).changes;
+      }
+      return changed;
+    })();
+    if (rows > 0 || summaryIds.size > 0 || mcPartIds.length > 0) {
+      removedLineages += 1;
+      removedRows += rows;
+    }
+  }
+  if (orphanSummaryIds.size > 0) {
+    const rowsToDelete = new Set(orphanSummaryIds);
+    const survivingPartsReferenceDeletion = parsedParts.some((part) => part.tailStartId !== null && rowsToDelete.has(part.tailStartId));
+    const messageFieldReferencesDeletion = [...rowsToDelete].some((id) => messageTailStartIds.has(id));
+    if (survivingPartsReferenceDeletion || messageFieldReferencesDeletion) {
+      retainedLineages += 1;
+    } else {
+      const rows = db.transaction(() => deleteSummaries(orphanSummaryIds))();
+      removedLineages += 1;
+      removedRows += rows;
+    }
+  }
+  if (removedLineages > 0 || retainedLineages > 0) {
+    log(`[magic-context] compaction-marker: flip-off cleanup for ${sessionId} removed ${removedLineages} lineage(s) (${removedRows} rows), retained ${retainedLineages}`);
+  }
+  return {
+    verified: retainedLineages === 0,
+    removedLineages,
+    removedRows,
+    retainedLineages
+  };
+}
+function removeCompactionMarker(state2) {
+  try {
+    const db = getWritableOpenCodeDb();
+    db.transaction(() => {
+      db.prepare("DELETE FROM part WHERE id = ?").run(state2.summaryPartId);
+      db.prepare("DELETE FROM message WHERE id = ?").run(state2.summaryMessageId);
+      db.prepare("DELETE FROM part WHERE id = ?").run(state2.compactionPartId);
     })();
     return true;
   } catch (error51) {
@@ -31530,9 +32577,9 @@ function dropMarkerSummaryTag(db, sessionId, summaryMessageId) {
   if (tagNumber !== null)
     updateTagStatus(db, sessionId, tagNumber, "dropped");
 }
-function persistMarkerStateAndDropReplacedTag(db, sessionId, state, replacedSummaryMessageId) {
+function persistMarkerStateAndDropReplacedTag(db, sessionId, state2, replacedSummaryMessageId) {
   db.transaction(() => {
-    setPersistedCompactionMarkerState(db, sessionId, state);
+    setPersistedCompactionMarkerState(db, sessionId, state2);
     if (replacedSummaryMessageId !== null) {
       dropMarkerSummaryTag(db, sessionId, replacedSummaryMessageId);
     }
@@ -31708,8 +32755,52 @@ function removeCompactionMarkerForSession(db, sessionId) {
     }
   }
 }
+function reconcileForkOrphanedCompactionMarkers(db, sessionId) {
+  if (getHarness() !== "opencode") {
+    return { removed: 0, failed: false };
+  }
+  try {
+    const owned = getPersistedCompactionMarkerState(db, sessionId);
+    if (!owned) {
+      return { removed: 0, failed: false };
+    }
+    const markers = listSessionCompactionMarkers(sessionId);
+    let removed = 0;
+    let failed = false;
+    for (const marker of markers) {
+      if (marker.compactionPartId === owned.compactionPartId) {
+        continue;
+      }
+      if (marker.summaryMessageIds.length === 0) {
+        continue;
+      }
+      const ordering = compareOpenCodeMessagesByCanonicalOrder(sessionId, marker.boundaryMessageId, owned.boundaryMessageId);
+      if (ordering === null || ordering <= 0) {
+        continue;
+      }
+      const currentOwned = getPersistedCompactionMarkerState(db, sessionId);
+      if (!currentOwned || marker.compactionPartId === currentOwned.compactionPartId) {
+        continue;
+      }
+      const ok = removeForeignCompactionMarker(sessionId, marker, currentOwned.summaryMessageId);
+      if (ok) {
+        removed += 1;
+        sessionLog(sessionId, `compaction-marker hygiene: removed fork-orphaned marker part=${marker.compactionPartId} boundary=${marker.boundaryMessageId} (outranked owned boundary ${currentOwned.boundaryMessageId})`);
+      } else {
+        failed = true;
+      }
+    }
+    if (removed > 0) {
+      log(`[magic-context][${sessionId}] compaction-marker hygiene: removed ${removed} fork-orphaned marker(s); filterCompacted will now stop at this session's own marker`);
+    }
+    return { removed, failed };
+  } catch (error51) {
+    sessionLog(sessionId, "compaction-marker hygiene: scan failed (will retry on next degraded pass):", error51);
+    return { removed: 0, failed: true };
+  }
+}
 function checkCompactionMarkerConsistency(db) {
-  const opencodeDbPath = join5(getDataDir(), "opencode", "opencode.db");
+  const opencodeDbPath = join6(getDataDir(), "opencode", "opencode.db");
   let opencodeDb;
   try {
     opencodeDb = new Database(opencodeDbPath, { readonly: true });
@@ -31725,19 +32816,19 @@ function checkCompactionMarkerConsistency(db) {
     const checkPart = opencodeDb.prepare("SELECT 1 FROM part WHERE id = ? LIMIT 1");
     let reconciledCount = 0;
     for (const row of persistedRows) {
-      const state = getPersistedCompactionMarkerState(db, row.session_id);
-      if (!state)
+      const state2 = getPersistedCompactionMarkerState(db, row.session_id);
+      if (!state2)
         continue;
-      const boundaryExists = checkMessage.get(state.boundaryMessageId) != null;
-      const summaryMessageExists = checkMessage.get(state.summaryMessageId) != null;
-      const compactionPartExists = checkPart.get(state.compactionPartId) != null;
-      const summaryPartExists = checkPart.get(state.summaryPartId) != null;
+      const boundaryExists = checkMessage.get(state2.boundaryMessageId) != null;
+      const summaryMessageExists = checkMessage.get(state2.summaryMessageId) != null;
+      const compactionPartExists = checkPart.get(state2.compactionPartId) != null;
+      const summaryPartExists = checkPart.get(state2.summaryPartId) != null;
       const allPresent = boundaryExists && summaryMessageExists && compactionPartExists && summaryPartExists;
       if (allPresent)
         continue;
       let removedOk = false;
       try {
-        removedOk = removeCompactionMarker(state);
+        removedOk = removeCompactionMarker(state2);
       } catch (error51) {
         sessionLog(row.session_id, "compaction-marker consistency: partial cleanup of half-written marker failed:", error51);
       }
@@ -32468,6 +33559,8 @@ If no candidates, omit the \`<primer_candidates>\` section entirely.
 
 Output valid XML only in this shape:
 
+Closing tags must match their opening tier tag (e.g. \`<p1>...</p1>\`, never \`<p1>...</p2>\`).
+
 \`\`\`xml
 <output>
 <compartments>
@@ -32685,8 +33778,8 @@ function queueDropsForCompartmentalizedMessages(db, sessionId, upToMessageIndex)
 }
 
 // src/hooks/magic-context/compartment-runner-historian.ts
-import { mkdirSync as mkdirSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join6 } from "node:path";
+import { mkdirSync as mkdirSync4, unlinkSync as unlinkSync3, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join7 } from "node:path";
 
 // src/features/magic-context/subagent-token-capture.ts
 function asNumber(value) {
@@ -32778,161 +33871,6 @@ function recordChildInvocation(input) {
   }
 }
 
-// src/hooks/magic-context/compartment-parser.ts
-var COMPARTMENT_REGEX = /<compartment\s+([^>]*?)\s*>(.*?)<\/compartment>/gs;
-var ATTR_START_REGEX = /\bstart="(\d+)"/;
-var ATTR_END_REGEX = /\bend="(\d+)"/;
-var ATTR_TITLE_REGEX = /\btitle="([^"]*)"/;
-var ATTR_EPISODE_REGEX = /\bepisode_type="([^"]*)"/;
-var ATTR_IMPORTANCE_REGEX = /\bimportance="(\d+)"/;
-function makeTierRegex(n) {
-  return new RegExp(`<p${n}\\s*/>|<p${n}\\s*>(.*?)</p${n}>`, "s");
-}
-var TIER_REGEXES = [makeTierRegex(1), makeTierRegex(2), makeTierRegex(3), makeTierRegex(4)];
-var CATEGORY_BLOCK_REGEX = /<(PROJECT_RULES|ARCHITECTURE|CONSTRAINTS|CONFIG_VALUES|NAMING)>(.*?)<\/\1>/gs;
-var FACT_ITEM_REGEX = /^\s*\*\s*(.+)$/gm;
-var UNPROCESSED_REGEX = /<unprocessed_from>(\d+)<\/unprocessed_from>/;
-var USER_OBSERVATIONS_REGEX = /<user_observations>(.*?)<\/user_observations>/s;
-var USER_OBS_ITEM_REGEX = /^\s*\*\s*(.+)$/gm;
-var PRIMER_CANDIDATES_REGEX = /<primer_candidates>(.*?)<\/primer_candidates>/s;
-var PRIMER_ELEMENT_REGEX = /<primer\s+at_compartment="(\d+)"\s*>(.*?)<\/primer>/gs;
-var PRIMER_ITEM_REGEX = /^\s*(?:\*|-|\d+\.)\s*(.+)$/gm;
-var FACTS_BLOCK_REGEX = /<facts>(.*?)<\/facts>/s;
-var EVENTS_BLOCK_REGEX = /<events>(.*?)<\/events>/s;
-var EVENT_ELEMENT_REGEX = /<([a-z_]+)\s+at_compartment="(\d+)"\s*>(.*?)<\/\1>/gs;
-var EVENT_FIELD_REGEX = /<([a-z_]+)\s*>(.*?)<\/\1>/gs;
-function extractTier(inner, index) {
-  const m = inner.match(TIER_REGEXES[index]);
-  if (!m)
-    return;
-  return unescapeXml((m[1] ?? "").trim());
-}
-function parseCompartmentOutput(text) {
-  const compartments = [];
-  const facts = [];
-  for (const match of text.matchAll(COMPARTMENT_REGEX)) {
-    const attrs = match[1];
-    const inner = match[2];
-    const startMatch = attrs.match(ATTR_START_REGEX);
-    const endMatch = attrs.match(ATTR_END_REGEX);
-    const titleMatch = attrs.match(ATTR_TITLE_REGEX);
-    if (!startMatch || !endMatch || !titleMatch)
-      continue;
-    const startMessage = parseInt(startMatch[1], 10);
-    const endMessage = parseInt(endMatch[1], 10);
-    const title = unescapeXml(titleMatch[1]);
-    if (Number.isNaN(startMessage) || Number.isNaN(endMessage) || !title)
-      continue;
-    const episodeMatch = attrs.match(ATTR_EPISODE_REGEX);
-    const importanceMatch = attrs.match(ATTR_IMPORTANCE_REGEX);
-    const episodeType = episodeMatch ? unescapeXml(episodeMatch[1]) : undefined;
-    const importance = importanceMatch ? parseInt(importanceMatch[1], 10) : undefined;
-    const p1 = extractTier(inner, 0);
-    if (typeof p1 === "string" && p1.length > 0) {
-      const p2 = extractTier(inner, 1);
-      const p3 = extractTier(inner, 2);
-      const p4 = extractTier(inner, 3);
-      compartments.push({
-        startMessage,
-        endMessage,
-        title,
-        content: p1,
-        p1,
-        p2: typeof p2 === "string" ? p2 : p1,
-        p3: typeof p3 === "string" ? p3 : typeof p2 === "string" ? p2 : p1,
-        p4: typeof p4 === "string" ? p4 : "",
-        importance,
-        episodeType
-      });
-      continue;
-    }
-    const content = unescapeXml(inner.trim());
-    if (content) {
-      compartments.push({
-        startMessage,
-        endMessage,
-        title,
-        content,
-        importance,
-        episodeType
-      });
-    }
-  }
-  const factsBlockMatch = text.match(FACTS_BLOCK_REGEX);
-  const factsScope = factsBlockMatch ? factsBlockMatch[1] : text.replace(EVENTS_BLOCK_REGEX, "").replace(/<compartment\s+[^>]*?\s*>.*?<\/compartment>/gs, "");
-  for (const categoryMatch of factsScope.matchAll(CATEGORY_BLOCK_REGEX)) {
-    const category = categoryMatch[1];
-    const blockContent = categoryMatch[2];
-    for (const itemMatch of blockContent.matchAll(FACT_ITEM_REGEX)) {
-      const content = unescapeXml(itemMatch[1].trim());
-      if (content) {
-        facts.push({ category, content });
-      }
-    }
-  }
-  const unprocessedMatch = text.match(UNPROCESSED_REGEX);
-  const unprocessedFrom = unprocessedMatch ? parseInt(unprocessedMatch[1], 10) : null;
-  const userObservations = [];
-  const userObsMatch = text.match(USER_OBSERVATIONS_REGEX);
-  if (userObsMatch) {
-    for (const itemMatch of userObsMatch[1].matchAll(USER_OBS_ITEM_REGEX)) {
-      const obs = unescapeXml(itemMatch[1].trim());
-      if (obs)
-        userObservations.push(obs);
-    }
-  }
-  const primerCandidates = [];
-  const primerMatch = text.match(PRIMER_CANDIDATES_REGEX);
-  if (primerMatch) {
-    const block = primerMatch[1];
-    let sawElement = false;
-    for (const el of block.matchAll(PRIMER_ELEMENT_REGEX)) {
-      sawElement = true;
-      const question = unescapeXml(el[2].trim());
-      if (question) {
-        primerCandidates.push({
-          question,
-          originCompartmentIndex: Number.parseInt(el[1], 10)
-        });
-      }
-    }
-    if (!sawElement) {
-      for (const itemMatch of block.matchAll(PRIMER_ITEM_REGEX)) {
-        const question = unescapeXml(itemMatch[1].trim());
-        if (question)
-          primerCandidates.push({ question });
-      }
-    }
-  }
-  const events = parseEvents(text);
-  compartments.sort((a, b) => a.startMessage - b.startMessage);
-  return { compartments, facts, events, unprocessedFrom, userObservations, primerCandidates };
-}
-function parseEvents(text) {
-  const blockMatch = text.match(EVENTS_BLOCK_REGEX);
-  if (!blockMatch)
-    return [];
-  const block = blockMatch[1];
-  const events = [];
-  for (const elMatch of block.matchAll(EVENT_ELEMENT_REGEX)) {
-    const kind = elMatch[1];
-    const atRaw = parseInt(elMatch[2], 10);
-    const atCompartment = Number.isNaN(atRaw) ? null : atRaw;
-    const fields = {};
-    for (const fieldMatch of elMatch[3].matchAll(EVENT_FIELD_REGEX)) {
-      const name = fieldMatch[1];
-      const value = unescapeXml(fieldMatch[2].trim());
-      if (value)
-        fields[name] = value;
-    }
-    events.push({ kind, atCompartment, fields });
-  }
-  return events;
-}
-function unescapeXml(s) {
-  return s.replace(/&amp;/g, "&").replace(/&apos;/g, "'").replace(/&quot;/g, '"').replace(/&lt;/g, "<").replace(/&gt;/g, ">");
-}
-
 // src/hooks/magic-context/compartment-runner-mapping.ts
 function tierFieldsOf(c) {
   return {
@@ -33137,6 +34075,24 @@ function historianResponseDumpDir(directory) {
   return getProjectMagicContextHistorianDir(directory);
 }
 var MAX_HISTORIAN_RETRIES = 2;
+var HISTORIAN_REASONING_PART_TYPES = new Set(["reasoning", "thinking", "redacted_thinking"]);
+function extractLatestHistorianReasoning(messages) {
+  if (!Array.isArray(messages))
+    return null;
+  const latest = messages.filter((message) => isRecord(message) && isRecord(message.info) && message.info.role === "assistant").sort((left, right) => historianMessageCreatedAt(right) - historianMessageCreatedAt(left))[0];
+  if (!latest || !Array.isArray(latest.parts))
+    return null;
+  return latest.parts.filter(isHistorianReasoningPart).map((part) => part.text).join(`
+`) || null;
+}
+function isHistorianReasoningPart(part) {
+  return isRecord(part) && typeof part.type === "string" && HISTORIAN_REASONING_PART_TYPES.has(part.type) && typeof part.text === "string" && part.text.length > 0;
+}
+function historianMessageCreatedAt(message) {
+  if (!isRecord(message.info) || !isRecord(message.info.time))
+    return 0;
+  return typeof message.info.time.created === "number" ? message.info.time.created : 0;
+}
 async function runValidatedHistorianPass(args) {
   const firstRun = await runHistorianPrompt({
     ...args,
@@ -33202,6 +34158,7 @@ async function runEditorPassOrFallback(args) {
   sessionLog(args.parentSessionId, "historian two-pass: running editor on draft");
   const editorRun = await runHistorianPrompt({
     client: args.client,
+    db: args.db,
     parentSessionId: args.parentSessionId,
     sessionDirectory: args.sessionDirectory,
     prompt: buildHistorianEditorPrompt(args.draftXml),
@@ -33228,6 +34185,7 @@ async function runEditorPassOrFallback(args) {
 async function runHistorianPrompt(args) {
   const {
     client,
+    db,
     parentSessionId,
     sessionDirectory,
     prompt,
@@ -33261,12 +34219,12 @@ async function runHistorianPrompt(args) {
   };
   try {
     sessionLog(parentSessionId, `historian: creating child session (agent=${agentId}, model=${modelOverride ? `${modelOverride.providerID}/${modelOverride.modelID}` : `agent:${agentId}`})`);
-    const createResponse = await client.session.create({
-      body: {
-        parentID: parentSessionId,
-        title: "magic-context-compartment"
-      },
-      query: { directory: sessionDirectory }
+    const createResponse = await createChildSessionWithFence({
+      client,
+      db,
+      parentSessionId,
+      title: "magic-context-compartment",
+      directory: sessionDirectory
     });
     const createdSession = normalizeSDKResponse(createResponse, null, { preferResponseOnMissingData: true });
     agentSessionId = typeof createdSession?.id === "string" ? createdSession.id : null;
@@ -33314,7 +34272,18 @@ async function runHistorianPrompt(args) {
       preferResponseOnMissingData: true
     });
     const invocationId = recordInvocation({ status: "completed", messages });
-    const result = extractLatestAssistantText(messages);
+    const lengthCapped = hasLengthCappedOutput(messages);
+    const textResult = extractLatestAssistantText(messages);
+    const reasoningResult = textResult ? null : extractLatestHistorianReasoning(messages);
+    if (!textResult && reasoningResult && lengthCapped) {
+      const outputTokens = sumTokensFromChildMessages(messages).output;
+      return {
+        ok: false,
+        error: `historian output length-capped at ${outputTokens} tokens (all reasoning, no text) — set historian.maxTokens or route historian.model to a low-reasoning lane/variant`,
+        invocationId: invocationId ?? undefined
+      };
+    }
+    const result = textResult ?? reasoningResult;
     if (!result) {
       return {
         ok: false,
@@ -33366,6 +34335,7 @@ async function runFallbackHistorianPass(args) {
     args.callbacks?.onModelFallback?.(modelId, i + 1, chain.length);
     const fallbackRun = await runHistorianPrompt({
       client: args.client,
+      db: args.db,
       parentSessionId: args.parentSessionId,
       sessionDirectory: args.sessionDirectory,
       prompt: args.prompt,
@@ -33427,7 +34397,7 @@ function cleanupHistorianDump(sessionId, dumpPath) {
   if (!dumpPath)
     return;
   try {
-    unlinkSync2(dumpPath);
+    unlinkSync3(dumpPath);
   } catch (error51) {
     sessionLog(sessionId, "compartment agent: failed to remove historian response dump", {
       dumpPath,
@@ -33442,7 +34412,7 @@ function dumpHistorianResponse(sessionId, directory, label, text) {
     ensureCortexKitArtifactGitignore(directory);
     const safeSessionId = sanitizeDumpName(sessionId);
     const safeLabel = sanitizeDumpName(label);
-    const dumpPath = join6(dumpDir, `${safeSessionId}-${safeLabel}-${Date.now()}.xml`);
+    const dumpPath = join7(dumpDir, `${safeSessionId}-${safeLabel}-${Date.now()}.xml`);
     writeFileSync2(dumpPath, text, "utf8");
     sessionLog(sessionId, "compartment agent: historian response dumped", {
       label,
@@ -33465,26 +34435,7 @@ function sanitizeDumpName(value) {
 import { Buffer as Buffer3 } from "node:buffer";
 
 // src/features/magic-context/mural/render-trigger.ts
-import { createHash as createHash13 } from "node:crypto";
-
-// src/shared/harness-provider-map.ts
-var PI_TO_CANONICAL_PROVIDER = {
-  "openai-codex": "openai",
-  "google-antigravity": "google"
-};
-function remapProviderPrefix(ref, map2) {
-  if (typeof ref !== "string")
-    return ref;
-  const slash = ref.indexOf("/");
-  if (slash <= 0)
-    return ref;
-  const provider2 = ref.slice(0, slash);
-  const mapped = map2[provider2];
-  return mapped ? `${mapped}${ref.slice(slash)}` : ref;
-}
-function piModelRefToCanonical(ref) {
-  return remapProviderPrefix(ref, PI_TO_CANONICAL_PROVIDER);
-}
+import { createHash as createHash14 } from "node:crypto";
 
 // src/features/magic-context/mural/mural-selection.ts
 var DEFAULT_MURAL_MEMORY_BUDGET = 8000;
@@ -33687,6 +34638,8 @@ function naturalLineLengths(entries, roomWidth) {
   let currentCategory = null;
   for (let index = 0;index < entries.length; index++) {
     const entry = entries[index];
+    if (!entry)
+      continue;
     if (entry.category !== currentCategory) {
       currentCategory = entry.category;
       lengths.push(codepoints(` <${entry.category}> `));
@@ -33719,6 +34672,8 @@ function planLines(entries, roomWidth) {
   let currentCategory = null;
   for (let index = 0;index < entries.length; index++) {
     const entry = entries[index];
+    if (!entry)
+      continue;
     if (entry.category !== currentCategory) {
       currentCategory = entry.category;
       lines.push({
@@ -33782,8 +34737,11 @@ function renderLayout(entries, plan, roomWidth, columnCount) {
   const usage = {};
   let filledLineCount = 0;
   for (const [column, columnPlan] of splitPlan(plan, columnCount).entries()) {
+    const columnGrid = grid[column];
+    if (!columnGrid)
+      continue;
     for (const [row, line] of columnPlan.entries()) {
-      grid[column][row] = line.text;
+      columnGrid[row] = line.text;
       filledLineCount += 1;
       usage[line.category] = (usage[line.category] ?? 0) + 1;
       const placementLine = row + 1;
@@ -33894,6 +34852,7 @@ function glyph(character) {
 }
 function drawGlyph(pixels, width, height, x, y, character, color) {
   const glyphData = glyph(character);
+  const [red, green, blue] = color;
   for (let row = 0;row < MURAL_CELL_HEIGHT; row++) {
     const pattern = glyphData.rows[row] ?? 0;
     for (let column = 0;column < glyphData.width; column++) {
@@ -33904,9 +34863,9 @@ function drawGlyph(pixels, width, height, x, y, character, color) {
       if (px < 0 || py < 0 || px >= width || py >= height)
         continue;
       const offset = (py * width + px) * 3;
-      pixels[offset] = color[0];
-      pixels[offset + 1] = color[1];
-      pixels[offset + 2] = color[2];
+      pixels[offset] = red;
+      pixels[offset + 1] = green;
+      pixels[offset + 2] = blue;
     }
   }
 }
@@ -33918,6 +34877,7 @@ function drawText(pixels, width, height, x, y, text, color) {
   }
 }
 function fillRect(pixels, canvasWidth, canvasHeight, x, y, width, height, color) {
+  const [red, green, blue] = color;
   const left = Math.max(0, x);
   const top = Math.max(0, y);
   const right = Math.min(canvasWidth, x + width);
@@ -33925,9 +34885,9 @@ function fillRect(pixels, canvasWidth, canvasHeight, x, y, width, height, color)
   for (let py = top;py < bottom; py++) {
     for (let px = left;px < right; px++) {
       const offset = (py * canvasWidth + px) * 3;
-      pixels[offset] = color[0];
-      pixels[offset + 1] = color[1];
-      pixels[offset + 2] = color[2];
+      pixels[offset] = red;
+      pixels[offset + 1] = green;
+      pixels[offset + 2] = blue;
     }
   }
 }
@@ -33954,6 +34914,9 @@ function renderMural(entries) {
   });
   const fittingCandidates = candidates.filter((candidate) => candidate.layout.droppedIds.length === 0);
   const candidatesToCompare = fittingCandidates.length > 0 ? fittingCandidates : candidates;
+  const firstCandidate = candidatesToCompare[0];
+  if (!firstCandidate)
+    throw new Error("mural layout candidate list is empty");
   const selected = candidatesToCompare.reduce((best, candidate) => {
     if (!best)
       return candidate;
@@ -33964,7 +34927,7 @@ function renderMural(entries) {
       return candidate.tileArea < best.tileArea ? candidate : best;
     }
     return candidate.requestedColumnCount < best.requestedColumnCount ? candidate : best;
-  }, candidatesToCompare[0]);
+  }, firstCandidate);
   const { layout, width, height } = selected;
   const pixels = new Uint8Array(width * height * 3).fill(255);
   const contentWidth = layout.columnCount === 0 ? 0 : layout.columnCount * roomWidth * MURAL_CELL_WIDTH + MURAL_COLUMN_GAP * (layout.columnCount - 1) * MURAL_CELL_WIDTH;
@@ -34008,8 +34971,8 @@ function getMuralCoverage(db, projectIdentity) {
   const cueState = getMuralCueState(db, memories.map((memory) => memory.id));
   let cuedMemoryCount = 0;
   for (const memory of memories) {
-    const state = cueState.get(memory.id);
-    if (state && typeof state.cue === "string" && state.cue.trim() !== "" && state.hash !== null && state.hash === computeCueContentHash(memory.content)) {
+    const state2 = cueState.get(memory.id);
+    if (state2 && typeof state2.cue === "string" && state2.cue.trim() !== "" && state2.hash !== null && state2.hash === computeCueContentHash(memory.content)) {
       cuedMemoryCount += 1;
     }
   }
@@ -34023,16 +34986,16 @@ function resolveMural(db, projectIdentity, budgetTokens = DEFAULT_MURAL_MEMORY_B
   const cueState = getMuralCueState(db, overflow.map((memory) => memory.id));
   const entries = [];
   for (const memory of overflow) {
-    const state = cueState.get(memory.id);
-    if (!state || state.cue === null || state.hash === null)
+    const state2 = cueState.get(memory.id);
+    if (!state2 || state2.cue === null || state2.hash === null)
       continue;
-    if (state.hash !== computeCueContentHash(memory.content))
+    if (state2.hash !== computeCueContentHash(memory.content))
       continue;
     entries.push({
       id: memory.id,
       category: memory.category,
       importance: memory.importance ?? 50,
-      cue: state.cue
+      cue: state2.cue
     });
   }
   entries.sort(compareMuralEntries);
@@ -34098,7 +35061,7 @@ function ensureMuralRendered(db, projectIdentity, budgetTokens = DEFAULT_MURAL_M
     return { hasMural: false, rerendered: false };
   }
   const rendered = renderMural(entries);
-  const textHash = createHash13("sha256").update(rendered.sha256Input).digest("hex");
+  const textHash = createHash14("sha256").update(rendered.sha256Input).digest("hex");
   const existing = getMural(db, projectIdentity);
   if (existing && existing.contentHash === textHash && existing.width === rendered.width && existing.height === rendered.height) {
     return {
@@ -34540,6 +35503,38 @@ var INJECTION_CACHE_MAX = 100;
 var injectionCache = new BoundedSessionMap(INJECTION_CACHE_MAX);
 function clearInjectionCache(sessionId) {
   injectionCache.delete(sessionId);
+  resetDegradedReanchorState(sessionId);
+}
+var degradedRebuildCountBySession = new BoundedSessionMap(INJECTION_CACHE_MAX);
+var reAnchorLoggedBySession = new BoundedSessionMap(INJECTION_CACHE_MAX);
+var REANCHOR_MIN_DEGRADED_PASSES = 2;
+function resetDegradedReanchorState(sessionId) {
+  degradedRebuildCountBySession.delete(sessionId);
+  reAnchorLoggedBySession.delete(sessionId);
+}
+function noteDegradedRebuild(sessionId) {
+  const next = (degradedRebuildCountBySession.get(sessionId) ?? 0) + 1;
+  degradedRebuildCountBySession.set(sessionId, next);
+  return next;
+}
+function clearDegradedRebuild(sessionId) {
+  degradedRebuildCountBySession.delete(sessionId);
+  reAnchorLoggedBySession.delete(sessionId);
+}
+function logReanchorOnce(sessionId, message) {
+  if (reAnchorLoggedBySession.get(sessionId))
+    return;
+  reAnchorLoggedBySession.set(sessionId, true);
+  sessionLog(sessionId, message);
+}
+function findVisibleReanchorIndex(compartments, visibleMessageIds) {
+  for (let index = compartments.length - 1;index >= 0; index -= 1) {
+    const endMessageId = compartments[index]?.endMessageId;
+    if (typeof endMessageId === "string" && endMessageId.length > 0 && visibleMessageIds.has(endMessageId)) {
+      return index;
+    }
+  }
+  return -1;
 }
 function getVisibleMemoryIds(db, sessionId) {
   try {
@@ -34729,24 +35724,63 @@ function prepareCompartmentInjection(db, sessionId, messages, isCacheBusting, pr
     return result2;
   }
   let skippedVisibleMessages = 0;
+  let needsFreshMaterialization = false;
+  let resultEndMessage = lastEnd;
+  let resultEndMessageId = null;
   const cutoffIndex = messages.findIndex((message) => message.info.id === trimEndMessageId);
   if (cutoffIndex >= 0) {
+    clearDegradedRebuild(sessionId);
     skippedVisibleMessages = cutoffIndex + 1;
     const remaining = messages.slice(cutoffIndex + 1);
     messages.splice(0, messages.length, ...remaining);
+    resultEndMessageId = trimEndMessageId;
   } else {
-    sessionLog(sessionId, `compartment injection entering degraded mode: boundary ${trimEndMessageId} not in visible messages`);
+    const degradedCount = noteDegradedRebuild(sessionId);
+    if (degradedCount === 1) {
+      reconcileForkOrphanedCompactionMarkers(db, sessionId);
+    }
+    let reAnchored = false;
+    if (degradedCount >= REANCHOR_MIN_DEGRADED_PASSES && isCacheBusting) {
+      const visibleMessageIds = new Set;
+      for (const message of messages) {
+        if (typeof message.info.id === "string")
+          visibleMessageIds.add(message.info.id);
+      }
+      const reAnchorIndex = findVisibleReanchorIndex(compartments, visibleMessageIds);
+      if (reAnchorIndex >= 0) {
+        const reAnchorCompartment = compartments[reAnchorIndex];
+        const reAnchorCutoff = messages.findIndex((message) => message.info.id === reAnchorCompartment.endMessageId);
+        if (reAnchorCutoff >= 0) {
+          skippedVisibleMessages = reAnchorCutoff + 1;
+          const remaining = messages.slice(reAnchorCutoff + 1);
+          messages.splice(0, messages.length, ...remaining);
+          resultEndMessage = reAnchorCompartment.endMessage;
+          resultEndMessageId = reAnchorCompartment.endMessageId;
+          reAnchored = true;
+          logReanchorOnce(sessionId, `compartment injection re-anchored: natural boundary ${trimEndMessageId} not visible for ${degradedCount} passes; splicing at visible compartment boundary ${resultEndMessageId} (ordinal ${resultEndMessage})`);
+        }
+      }
+      if (!reAnchored) {
+        needsFreshMaterialization = true;
+        logReanchorOnce(sessionId, `compartment injection degraded: boundary ${trimEndMessageId} not visible for ${degradedCount} passes and no compartment boundary is visible; requesting fresh materialization to re-cut the baseline`);
+      }
+    } else {
+      sessionLog(sessionId, `compartment injection entering degraded mode: boundary ${trimEndMessageId} not in visible messages (consecutive degraded passes: ${degradedCount})`);
+    }
   }
   const result = {
     block,
-    compartmentEndMessage: lastEnd,
-    compartmentEndMessageId: cutoffIndex >= 0 ? trimEndMessageId : null,
+    compartmentEndMessage: resultEndMessage,
+    compartmentEndMessageId: resultEndMessageId,
     compartmentCount: compartments.length,
     skippedVisibleMessages,
     factCount: facts.length,
     memoryCount,
     rebuiltFromDb: true
   };
+  if (needsFreshMaterialization) {
+    result.needsFreshMaterialization = true;
+  }
   injectionCache.set(sessionId, { kind: "populated", injection: result });
   return result;
 }
@@ -35152,41 +36186,41 @@ function readCurrentM0SnapshotMarkers(args) {
   });
   return fresh.markers;
 }
-function snapshotMarkersFromCachedM0(state) {
-  if (!state.cachedM0Bytes)
+function snapshotMarkersFromCachedM0(state2) {
+  if (!state2.cachedM0Bytes)
     return null;
-  const cachedUpgradeIdentity = decodeCachedM0UpgradeIdentity(state.cachedM0UpgradeState);
-  if (state.cachedM0ProjectMemoryEpoch === null)
+  const cachedUpgradeIdentity = decodeCachedM0UpgradeIdentity(state2.cachedM0UpgradeState);
+  if (state2.cachedM0ProjectMemoryEpoch === null)
     return null;
-  if (state.cachedM0ProjectUserProfileVersion === null)
+  if (state2.cachedM0ProjectUserProfileVersion === null)
     return null;
-  if (state.cachedM0MaxCompartmentSeq === null)
+  if (state2.cachedM0MaxCompartmentSeq === null)
     return null;
-  if (state.cachedM0MaxMemoryId === null)
+  if (state2.cachedM0MaxMemoryId === null)
     return null;
-  if (state.cachedM0MaxMutationId === null)
+  if (state2.cachedM0MaxMutationId === null)
     return null;
-  if (state.cachedM0MaxMemoryMutationId === null)
+  if (state2.cachedM0MaxMemoryMutationId === null)
     return null;
-  if (state.cachedM0SessionFactsVersion === null)
+  if (state2.cachedM0SessionFactsVersion === null)
     return null;
   return {
-    projectMemoryEpoch: state.cachedM0ProjectMemoryEpoch,
-    workspaceFingerprint: state.cachedM0WorkspaceFingerprint,
-    projectUserProfileVersion: state.cachedM0ProjectUserProfileVersion,
-    maxCompartmentSeq: state.cachedM0MaxCompartmentSeq,
-    maxMemoryId: state.cachedM0MaxMemoryId,
-    maxMutationId: state.cachedM0MaxMutationId,
-    maxMemoryMutationId: state.cachedM0MaxMemoryMutationId,
-    projectDocsHash: state.cachedM0ProjectDocsHash ?? "",
-    materializedAt: state.cachedM0MaterializedAt ?? 0,
-    sessionFactsVersion: state.cachedM0SessionFactsVersion,
+    projectMemoryEpoch: state2.cachedM0ProjectMemoryEpoch,
+    workspaceFingerprint: state2.cachedM0WorkspaceFingerprint,
+    projectUserProfileVersion: state2.cachedM0ProjectUserProfileVersion,
+    maxCompartmentSeq: state2.cachedM0MaxCompartmentSeq,
+    maxMemoryId: state2.cachedM0MaxMemoryId,
+    maxMutationId: state2.cachedM0MaxMutationId,
+    maxMemoryMutationId: state2.cachedM0MaxMemoryMutationId,
+    projectDocsHash: state2.cachedM0ProjectDocsHash ?? "",
+    materializedAt: state2.cachedM0MaterializedAt ?? 0,
+    sessionFactsVersion: state2.cachedM0SessionFactsVersion,
     upgradeState: cachedUpgradeIdentity.upgradeState,
     compartmentRenderEpoch: cachedUpgradeIdentity.compartmentRenderEpoch,
-    systemHash: state.cachedM0SystemHash ?? "",
-    modelKey: state.cachedM0ModelKey ?? "",
-    projectIdentity: state.cachedM0ProjectIdentity ?? null,
-    muralHash: state.cachedM0MuralHash ?? null
+    systemHash: state2.cachedM0SystemHash ?? "",
+    modelKey: state2.cachedM0ModelKey ?? "",
+    projectIdentity: state2.cachedM0ProjectIdentity ?? null,
+    muralHash: state2.cachedM0MuralHash ?? null
   };
 }
 function mustMaterialize(args) {
@@ -35502,26 +36536,26 @@ ${sessionHistory}
 
 `).trim();
 }
-function applyMarkersToState(state, m0Bytes, markers, m1Bytes) {
-  state.cachedM0Bytes = m0Bytes;
+function applyMarkersToState(state2, m0Bytes, markers, m1Bytes) {
+  state2.cachedM0Bytes = m0Bytes;
   if (m1Bytes)
-    state.cachedM1Bytes = m1Bytes;
-  state.cachedM0ProjectMemoryEpoch = markers.projectMemoryEpoch;
-  state.cachedM0WorkspaceFingerprint = markers.workspaceFingerprint;
-  state.cachedM0ProjectUserProfileVersion = markers.projectUserProfileVersion;
-  state.cachedM0MaxCompartmentSeq = markers.maxCompartmentSeq;
-  state.cachedM0MaxMemoryId = markers.maxMemoryId;
-  state.cachedM0MaxMutationId = markers.maxMutationId;
-  state.cachedM0MaxMemoryMutationId = markers.maxMemoryMutationId;
-  state.cachedM0ProjectDocsHash = markers.projectDocsHash;
-  state.cachedM0MaterializedAt = markers.materializedAt;
-  state.cachedM0SessionFactsVersion = markers.sessionFactsVersion;
-  state.cachedM0UpgradeState = encodeCachedM0UpgradeIdentity(markers.upgradeState, markers.compartmentRenderEpoch);
-  state.cachedM0SystemHash = markers.systemHash;
-  state.cachedM0ModelKey = markers.modelKey;
-  state.cachedM0ProjectIdentity = markers.projectIdentity;
-  state.cachedM0MuralHash = markers.muralHash ?? null;
-  state.snapshotMarkers = markers;
+    state2.cachedM1Bytes = m1Bytes;
+  state2.cachedM0ProjectMemoryEpoch = markers.projectMemoryEpoch;
+  state2.cachedM0WorkspaceFingerprint = markers.workspaceFingerprint;
+  state2.cachedM0ProjectUserProfileVersion = markers.projectUserProfileVersion;
+  state2.cachedM0MaxCompartmentSeq = markers.maxCompartmentSeq;
+  state2.cachedM0MaxMemoryId = markers.maxMemoryId;
+  state2.cachedM0MaxMutationId = markers.maxMutationId;
+  state2.cachedM0MaxMemoryMutationId = markers.maxMemoryMutationId;
+  state2.cachedM0ProjectDocsHash = markers.projectDocsHash;
+  state2.cachedM0MaterializedAt = markers.materializedAt;
+  state2.cachedM0SessionFactsVersion = markers.sessionFactsVersion;
+  state2.cachedM0UpgradeState = encodeCachedM0UpgradeIdentity(markers.upgradeState, markers.compartmentRenderEpoch);
+  state2.cachedM0SystemHash = markers.systemHash;
+  state2.cachedM0ModelKey = markers.modelKey;
+  state2.cachedM0ProjectIdentity = markers.projectIdentity;
+  state2.cachedM0MuralHash = markers.muralHash ?? null;
+  state2.snapshotMarkers = markers;
 }
 function historySliceTokens(m0Text) {
   const slice = extractM0Block(m0Text, "session-history");
@@ -35571,7 +36605,7 @@ function materializeM0(options) {
     });
     docs = readProjectDocsForM0(projectDirectory, options.injectDocs);
     snapshotMarkers.projectDocsHash = docs.canonicalHash;
-    compartments = readM0Compartments(options.db, options.sessionId);
+    compartments = options.compactionOff ? [] : readM0Compartments(options.db, options.sessionId);
     facts = [];
     memories = projectPath ? workspace.isWorkspaced ? getMemoriesByProjects(options.db, workspace.expandedIdentities, ["active", "permanent"], foldMaterializedAt, workspace.ownIdentities, workspace.shareCategories) : getMemoriesByProject(options.db, projectPath, ["active", "permanent"], foldMaterializedAt) : [];
     userMemories = safeGetActiveUserMemories(options.db);
@@ -35936,39 +36970,39 @@ function markersFromCachedRow(row) {
     muralHash: row.cached_m0_mural_hash ?? null
   };
 }
-function cachedRowMatchesState(row, state) {
-  return bufferEqualsNullable(row.cached_m0_bytes, state.cachedM0Bytes) && (row.cached_m0_mural_data_url ?? null) === (state.cachedM0MuralDataUrl ?? null) && (row.cached_m0_mural_hash ?? null) === (state.cachedM0MuralHash ?? null) && row.cached_m0_project_memory_epoch === state.cachedM0ProjectMemoryEpoch && (row.cached_m0_workspace_fingerprint ?? null) === (state.cachedM0WorkspaceFingerprint ?? null) && row.cached_m0_project_user_profile_version === state.cachedM0ProjectUserProfileVersion && row.cached_m0_max_compartment_seq === state.cachedM0MaxCompartmentSeq && row.cached_m0_max_memory_id === state.cachedM0MaxMemoryId && row.cached_m0_max_mutation_id === state.cachedM0MaxMutationId && row.cached_m0_max_memory_mutation_id === state.cachedM0MaxMemoryMutationId && row.cached_m0_materialized_at === state.cachedM0MaterializedAt && row.cached_m0_session_facts_version === state.cachedM0SessionFactsVersion && (row.cached_m0_upgrade_state ?? null) === (state.cachedM0UpgradeState ?? null) && (row.cached_m0_system_hash ?? "") === (state.cachedM0SystemHash ?? "") && (row.cached_m0_model_key ?? "") === (state.cachedM0ModelKey ?? "") && (row.cached_m0_project_identity ?? null) === (state.cachedM0ProjectIdentity ?? null);
+function cachedRowMatchesState(row, state2) {
+  return bufferEqualsNullable(row.cached_m0_bytes, state2.cachedM0Bytes) && (row.cached_m0_mural_data_url ?? null) === (state2.cachedM0MuralDataUrl ?? null) && (row.cached_m0_mural_hash ?? null) === (state2.cachedM0MuralHash ?? null) && row.cached_m0_project_memory_epoch === state2.cachedM0ProjectMemoryEpoch && (row.cached_m0_workspace_fingerprint ?? null) === (state2.cachedM0WorkspaceFingerprint ?? null) && row.cached_m0_project_user_profile_version === state2.cachedM0ProjectUserProfileVersion && row.cached_m0_max_compartment_seq === state2.cachedM0MaxCompartmentSeq && row.cached_m0_max_memory_id === state2.cachedM0MaxMemoryId && row.cached_m0_max_mutation_id === state2.cachedM0MaxMutationId && row.cached_m0_max_memory_mutation_id === state2.cachedM0MaxMemoryMutationId && row.cached_m0_materialized_at === state2.cachedM0MaterializedAt && row.cached_m0_session_facts_version === state2.cachedM0SessionFactsVersion && (row.cached_m0_upgrade_state ?? null) === (state2.cachedM0UpgradeState ?? null) && (row.cached_m0_system_hash ?? "") === (state2.cachedM0SystemHash ?? "") && (row.cached_m0_model_key ?? "") === (state2.cachedM0ModelKey ?? "") && (row.cached_m0_project_identity ?? null) === (state2.cachedM0ProjectIdentity ?? null);
 }
-function applyCachedRowToState(state, row) {
+function applyCachedRowToState(state2, row) {
   const markers = markersFromCachedRow(row);
   if (!row.cached_m0_bytes || !row.cached_m1_bytes || !markers) {
-    throw new RenderM1InvalidMarkersError(state.sessionId);
-  }
-  state.cachedM0Bytes = toBuffer(row.cached_m0_bytes);
-  state.cachedM0MuralDataUrl = row.cached_m0_mural_data_url ?? null;
-  state.cachedM0MuralHash = row.cached_m0_mural_hash ?? null;
-  state.cachedM1Bytes = toBuffer(row.cached_m1_bytes);
-  state.cachedM0ProjectMemoryEpoch = markers.projectMemoryEpoch;
-  state.cachedM0WorkspaceFingerprint = markers.workspaceFingerprint;
-  state.cachedM0ProjectUserProfileVersion = markers.projectUserProfileVersion;
-  state.cachedM0MaxCompartmentSeq = markers.maxCompartmentSeq;
-  state.cachedM0MaxMemoryId = markers.maxMemoryId;
-  state.cachedM0MaxMutationId = markers.maxMutationId;
-  state.cachedM0MaxMemoryMutationId = markers.maxMemoryMutationId;
-  state.cachedM0ProjectDocsHash = markers.projectDocsHash;
-  state.cachedM0MaterializedAt = markers.materializedAt;
-  state.cachedM0SessionFactsVersion = markers.sessionFactsVersion;
-  state.cachedM0UpgradeState = encodeCachedM0UpgradeIdentity(markers.upgradeState, markers.compartmentRenderEpoch);
-  state.cachedM0SystemHash = markers.systemHash;
-  state.cachedM0ModelKey = markers.modelKey;
-  state.cachedM0ProjectIdentity = markers.projectIdentity;
-  state.snapshotMarkers = markers;
-}
-function replayCachedM1(state) {
-  if (!state.cachedM1Bytes) {
-    throw new RenderM1InvalidMarkersError(state.sessionId);
-  }
-  return decodeM0Bytes(state.cachedM1Bytes) ?? M1_EMPTY_PLACEHOLDER;
+    throw new RenderM1InvalidMarkersError(state2.sessionId);
+  }
+  state2.cachedM0Bytes = toBuffer(row.cached_m0_bytes);
+  state2.cachedM0MuralDataUrl = row.cached_m0_mural_data_url ?? null;
+  state2.cachedM0MuralHash = row.cached_m0_mural_hash ?? null;
+  state2.cachedM1Bytes = toBuffer(row.cached_m1_bytes);
+  state2.cachedM0ProjectMemoryEpoch = markers.projectMemoryEpoch;
+  state2.cachedM0WorkspaceFingerprint = markers.workspaceFingerprint;
+  state2.cachedM0ProjectUserProfileVersion = markers.projectUserProfileVersion;
+  state2.cachedM0MaxCompartmentSeq = markers.maxCompartmentSeq;
+  state2.cachedM0MaxMemoryId = markers.maxMemoryId;
+  state2.cachedM0MaxMutationId = markers.maxMutationId;
+  state2.cachedM0MaxMemoryMutationId = markers.maxMemoryMutationId;
+  state2.cachedM0ProjectDocsHash = markers.projectDocsHash;
+  state2.cachedM0MaterializedAt = markers.materializedAt;
+  state2.cachedM0SessionFactsVersion = markers.sessionFactsVersion;
+  state2.cachedM0UpgradeState = encodeCachedM0UpgradeIdentity(markers.upgradeState, markers.compartmentRenderEpoch);
+  state2.cachedM0SystemHash = markers.systemHash;
+  state2.cachedM0ModelKey = markers.modelKey;
+  state2.cachedM0ProjectIdentity = markers.projectIdentity;
+  state2.snapshotMarkers = markers;
+}
+function replayCachedM1(state2) {
+  if (!state2.cachedM1Bytes) {
+    throw new RenderM1InvalidMarkersError(state2.sessionId);
+  }
+  return decodeM0Bytes(state2.cachedM1Bytes) ?? M1_EMPTY_PLACEHOLDER;
 }
 function softRefreshCachedM1(options) {
   options.db.exec("BEGIN IMMEDIATE");
@@ -36052,7 +37086,7 @@ function renderFreshM0NonPersisted(options) {
   const docs = readProjectDocsForM0(projectDirectory ?? "", options.injectDocs);
   snapshotMarkers.projectDocsHash = docs.canonicalHash;
   snapshotMarkers.materializedAt = options.state.cachedM0MaterializedAt ?? 0;
-  const compartments = withCompartmentDates(options.sessionId, readM0Compartments(options.db, options.sessionId), options.temporalAwareness);
+  const compartments = options.compactionOff ? [] : withCompartmentDates(options.sessionId, readM0Compartments(options.db, options.sessionId), options.temporalAwareness);
   const memories = projectPath ? workspace.isWorkspaced ? getMemoriesByProjects(options.db, workspace.expandedIdentities, ["active", "permanent"], snapshotMarkers.materializedAt, workspace.ownIdentities, workspace.shareCategories) : getMemoriesByProject(options.db, projectPath, ["active", "permanent"], snapshotMarkers.materializedAt) : [];
   const userMemories = safeGetActiveUserMemories(options.db);
   const memoryBudget = options.memoryInjectionBudgetTokens ?? DEFAULT_MEMORY_BUDGET_TOKENS;
@@ -36130,7 +37164,7 @@ function injectM0M1(options) {
     m0Bytes: options.state.cachedM0Bytes,
     m1Text: null
   };
-  if (options.state.isSubagent)
+  if (options.state.isSubagent && !options.compactionOff)
     return skipped;
   const decision = mustMaterialize({
     db: options.db,
@@ -36259,14 +37293,14 @@ function onNoteTrigger(db, sessionId, trigger) {
   sessionLog(sessionId, `note-nudge: trigger fired (${trigger}), triggerPending=true`);
 }
 function peekNoteNudgeText(db, sessionId, currentUserMessageId, projectIdentity, noteReadStillVisible) {
-  const state = getPersistedNoteNudge(db, sessionId);
-  if (!state.triggerPending)
+  const state2 = getPersistedNoteNudge(db, sessionId);
+  if (!state2.triggerPending)
     return null;
-  if (!state.triggerMessageId && currentUserMessageId) {
+  if (!state2.triggerMessageId && currentUserMessageId) {
     setPersistedNoteNudgeTriggerMessageId(db, sessionId, currentUserMessageId);
-    state.triggerMessageId = currentUserMessageId;
+    state2.triggerMessageId = currentUserMessageId;
   }
-  if (state.triggerMessageId && currentUserMessageId && state.triggerMessageId === currentUserMessageId) {
+  if (state2.triggerMessageId && currentUserMessageId && state2.triggerMessageId === currentUserMessageId) {
     sessionLog(sessionId, `note-nudge: deferring — current user message ${currentUserMessageId} is same as trigger-time message`);
     return null;
   }
@@ -36468,29 +37502,29 @@ function callIdFromPart(part) {
   const direct = firstStringField(part, ["callID", "callId", "toolCallId", "tool_call_id", "id"]);
   if (direct)
     return direct;
-  const state = isRecord(part.state) ? part.state : null;
-  return state ? firstStringField(state, ["callID", "callId", "toolCallId", "tool_call_id", "id"]) ?? "" : "";
+  const state2 = isRecord(part.state) ? part.state : null;
+  return state2 ? firstStringField(state2, ["callID", "callId", "toolCallId", "tool_call_id", "id"]) ?? "" : "";
 }
 function toolSignalFromPart(part) {
   if (!isRecord(part))
     return null;
   const type = partType(part);
-  const state = isRecord(part.state) ? part.state : null;
+  const state2 = isRecord(part.state) ? part.state : null;
   const callId = callIdFromPart(part);
   if (!callId && type !== "tool")
     return null;
   if (type === "tool") {
-    const hasInput = state !== null && hasOwn(state, "input");
-    const outputKey = state ? hasOwn(state, "output") ? "output" : hasOwn(state, "error") ? "error" : hasOwn(state, "result") ? "result" : null : null;
+    const hasInput = state2 !== null && hasOwn(state2, "input");
+    const outputKey = state2 ? hasOwn(state2, "output") ? "output" : hasOwn(state2, "error") ? "error" : hasOwn(state2, "result") ? "result" : null : null;
     const hasOutput = outputKey !== null;
-    const outputValue = outputKey && state ? state[outputKey] : undefined;
+    const outputValue = outputKey && state2 ? state2[outputKey] : undefined;
     const providerExecuted = part.providerExecuted === true;
     const openInvocation = !providerExecuted && !hasOutput;
     return {
       callId,
       hasInput: hasInput || openInvocation,
       hasOutput,
-      inputText: hasInput && state ? stringValue(state.input) : "",
+      inputText: hasInput && state2 ? stringValue(state2.input) : "",
       outputText: hasOutput ? stringValue(outputValue) : ""
     };
   }
@@ -36718,24 +37752,27 @@ function tokenForMessage(message, options) {
 function buildTrueRawTokenIndex(sessionId, messages, options) {
   const ordered = [...messages].sort((a, b) => a.ordinal - b.ordinal);
   const sliceCount = ordered.length;
-  const maxOrdinal = ordered.length > 0 ? ordered[ordered.length - 1].ordinal : 0;
-  const rawMessageCount = Math.max(sliceCount, maxOrdinal, options.absoluteMessageCount ?? sliceCount);
+  const firstOrdinal = ordered.length > 0 ? ordered[0].ordinal : 1;
+  const terminalOrdinal = ordered.length > 0 ? ordered[ordered.length - 1].ordinal : 0;
+  const rawMessageCount = Math.max(sliceCount, terminalOrdinal, options.absoluteMessageCount ?? sliceCount);
+  const ordinalSpan = terminalOrdinal >= firstOrdinal ? terminalOrdinal - firstOrdinal + 1 : 0;
   const tokensByOrdinal = new Map;
   const idsByOrdinal = new Map;
-  const prefix = new Array(rawMessageCount + 1).fill(0);
+  const prefix = new Array(ordinalSpan + 1).fill(0);
   for (const message of ordered) {
     const stored = options.storedTotalForMessage?.(message);
     const total = stored !== undefined && stored !== null ? stored : tokenForMessage(message, options).total;
     tokensByOrdinal.set(message.ordinal, total);
     idsByOrdinal.set(message.ordinal, message.id);
-    if (message.ordinal >= 1 && message.ordinal <= rawMessageCount) {
-      prefix[message.ordinal] = total;
+    const relative = message.ordinal - firstOrdinal + 1;
+    if (relative >= 1 && relative <= ordinalSpan) {
+      prefix[relative] = total;
     }
   }
-  for (let k = 1;k <= rawMessageCount; k += 1) {
+  for (let k = 1;k <= ordinalSpan; k += 1) {
     prefix[k] += prefix[k - 1];
   }
-  const ordinalToIndex = (ordinal) => Math.max(0, Math.min(rawMessageCount, ordinal - 1));
+  const ordinalToIndex = (ordinal) => Math.max(0, Math.min(ordinalSpan, ordinal - firstOrdinal));
   return {
     sessionId,
     providerShapeVersion: options.providerShapeVersion,
@@ -36747,27 +37784,27 @@ function buildTrueRawTokenIndex(sessionId, messages, options) {
       return idsByOrdinal.get(ordinal) ?? null;
     },
     suffixTokensFromOrdinal(ordinal) {
-      if (ordinal <= 1)
-        return prefix[rawMessageCount];
-      if (ordinal > rawMessageCount)
+      if (ordinal <= firstOrdinal)
+        return prefix[ordinalSpan];
+      if (ordinal > terminalOrdinal)
         return 0;
-      return prefix[rawMessageCount] - prefix[ordinalToIndex(ordinal)];
+      return prefix[ordinalSpan] - prefix[ordinalToIndex(ordinal)];
     },
     rangeTokens(startInclusive, endExclusive) {
-      const start = Math.max(1, startInclusive);
-      const end = Math.max(start, Math.min(rawMessageCount + 1, endExclusive));
-      return prefix[end - 1] - prefix[start - 1];
+      const start = Math.max(firstOrdinal, startInclusive);
+      const end = Math.max(start, Math.min(terminalOrdinal + 1, endExclusive));
+      return prefix[end - firstOrdinal] - prefix[start - firstOrdinal];
     },
     findSuffixStartForTokens(tokens) {
       if (!Number.isFinite(tokens) || tokens <= 0)
-        return rawMessageCount + 1;
+        return terminalOrdinal + 1;
       const target = Math.max(0, Math.floor(tokens));
-      const total = prefix[rawMessageCount];
+      const total = prefix[ordinalSpan];
       if (total < target)
-        return 1;
+        return firstOrdinal;
       const cut = total - target;
       let lo = 0;
-      let hi = rawMessageCount;
+      let hi = ordinalSpan;
       let best = 0;
       while (lo <= hi) {
         const mid = lo + hi >> 1;
@@ -36778,29 +37815,31 @@ function buildTrueRawTokenIndex(sessionId, messages, options) {
           hi = mid - 1;
         }
       }
-      return best + 1;
+      return firstOrdinal + best;
     },
     findHeadEndForCap(startInclusive, endExclusive, capTokens) {
-      const start = Math.max(1, Math.min(rawMessageCount + 1, startInclusive));
-      const end = Math.max(start, Math.min(rawMessageCount + 1, endExclusive));
+      const start = Math.max(firstOrdinal, Math.min(terminalOrdinal + 1, startInclusive));
+      const end = Math.max(start, Math.min(terminalOrdinal + 1, endExclusive));
       if (!Number.isFinite(capTokens) || capTokens <= 0)
         return start;
-      const startPrefix = prefix[start - 1];
-      const cut = startPrefix + Math.floor(capTokens);
-      let lo = start;
-      let hi = end - 1;
-      let bestEnd = start;
+      const startIndex = start - firstOrdinal;
+      const endIndex = end - firstOrdinal;
+      const cut = prefix[startIndex] + Math.floor(capTokens);
+      let lo = startIndex + 1;
+      let hi = endIndex;
+      let bestEndIndex = startIndex;
       while (lo <= hi) {
         const mid = lo + hi >> 1;
         if (prefix[mid] <= cut) {
-          bestEnd = mid + 1;
+          bestEndIndex = mid;
           lo = mid + 1;
         } else {
           hi = mid - 1;
         }
       }
+      let bestEnd = firstOrdinal + bestEndIndex;
       if (bestEnd === start && start < end)
-        return start + 1;
+        bestEnd = start + 1;
       return Math.min(bestEnd, end);
     }
   };
@@ -37117,7 +38156,8 @@ function resolveProtectedTailBoundary(ctx) {
   if (ctx.migrationFloorActive)
     runtimeFloor = Math.max(runtimeFloor, ctx.priorBoundaryOrdinal);
   let protectedTailStart = Math.max(boundary, runtimeFloor);
-  if (!ctx.emergencyTailScale && usagePercentage < 80) {
+  const forceMaterializationPercentage = escalationBands(ctx.executeThresholdPercentage).forceMaterializationPercentage;
+  if (!ctx.emergencyTailScale && usagePercentage < forceMaterializationPercentage) {
     let lastMeaningfulUserOrdinal = 0;
     for (let i = messages.length - 1;i >= 0; i--) {
       const message = messages[i];
@@ -37358,7 +38398,8 @@ function getRawHistoryEligibility(db, sessionId) {
 function hasRunnableCompartmentWindow(snapshot) {
   if (snapshot.offset >= snapshot.protectedTailStart)
     return false;
-  if (snapshot.usagePercentage >= 80 || snapshot.emergencyTailScale) {
+  const forceMaterializationPercentage = escalationBands(snapshot.executeThresholdPercentage).forceMaterializationPercentage;
+  if (snapshot.usagePercentage >= forceMaterializationPercentage || snapshot.emergencyTailScale) {
     return snapshot.trueRawEligibleTokens >= deriveMinForceEligibleTokens(snapshot.N) || snapshot.eligibleEndOrdinal > snapshot.offset;
   }
   return snapshot.eligibleEndOrdinal > snapshot.offset;
@@ -37421,8 +38462,10 @@ function validateBoundarySnapshot(args) {
   return { ok: true };
 }
 function recordHighPressureNoEligibleHead(db, snapshot) {
-  if (snapshot.usagePercentage < 80 && !snapshot.emergencyTailScale)
+  const forceMaterializationPercentage = escalationBands(snapshot.executeThresholdPercentage).forceMaterializationPercentage;
+  if (snapshot.usagePercentage < forceMaterializationPercentage && !snapshot.emergencyTailScale) {
     return 0;
+  }
   return recordProtectedTailNoEligibleHead(db, snapshot.sessionId);
 }
 
@@ -39453,6 +40496,7 @@ ${chunkText}`,
     retainDrainReservationForRetryThrottle = true;
     const validatedPass = await runValidatedHistorianPass({
       client,
+      db,
       parentSessionId: sessionId,
       sessionDirectory,
       prompt,
@@ -39913,6 +40957,7 @@ Historian pass ${passCount + 1}, attempt ${passAttempt} started for messages ${c
       emitProgress(`Running historian (pass ${passCount + 1})…`);
       const validatedPass = await runValidatedHistorianPass({
         client,
+        db,
         parentSessionId: sessionId,
         sessionDirectory,
         prompt,
@@ -40332,6 +41377,7 @@ ${chunk.text}`,
 Historian pass ${passCount + 1}, attempt ${passAttempt} started for messages ${chunk.startIndex}-${chunk.endIndex}.`, notifParams());
       const validatedPass = await runValidatedHistorianPass({
         client,
+        db,
         parentSessionId: sessionId,
         sessionDirectory,
         prompt,
@@ -40583,7 +41629,7 @@ async function executeContextRecomp(deps, options = {}) {
 }
 
 // src/hooks/magic-context/lkg-slot.ts
-import { createHash as createHash14 } from "node:crypto";
+import { createHash as createHash15 } from "node:crypto";
 var LKG_TOTAL_BYTES = 64 * 1024 * 1024;
 var LKG_SINGLE_SLOT_BYTES = 24 * 1024 * 1024;
 var LKG_METADATA_BYTES = 256;
@@ -40594,7 +41640,7 @@ function slotBytes(slot) {
   return 2 * slot.jsonPrefix.length + digestBytes + LKG_METADATA_BYTES;
 }
 function lkgContentDigest(message) {
-  const hash2 = createHash14("sha256");
+  const hash2 = createHash15("sha256");
   const seen = new WeakSet;
   const visit = (value) => {
     if (value === null) {
@@ -40960,4 +42006,4 @@ async function runUpgradeMemoryMigration(ctx, sessionId, migrationDirectory) {
   }
 }
 
-export { withContentLanguageDirective, buildPrimaryLanguageDirective, exports_external, DEFAULT_PROTECTED_TAGS, parseCron, nextOccurrence, nextDueAtMs, DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE, DEFAULT_HISTORIAN_TIMEOUT_MS, DEFAULT_LOCAL_EMBEDDING_MODEL, MagicContextConfigSchema, getOpenCodeDbPath, ProjectIdentityError, resolveProjectIdentityStrict, takeDubiousOwnershipProjectIdentityWarning, resolveProjectIdentity, resolveProjectIdentityForSession, normalizeStoredProjectPath, storedPathBelongsToIdentity, recordSessionProjectIdentity, detectOverflow, promptSyncWithValidatedOutputRetry, normalizeSDKResponse, extractLatestAssistantText, hasLengthCappedOutput, setKeepSubagents, shouldKeepSubagents, COMPARTMENT_LEASE_RENEWAL_MS, acquireCompartmentLease, renewCompartmentLease, releaseCompartmentLease, getCompartments, getLastCompartmentEndMessage, getLastCompartmentEndMessageId, clearRecompStaging, registerModuleNoteEvaluationBridge, getModuleNoteEvaluationBridge, getContextStoreUuid, ensureContextStoreUuid, getAuthorityManagedMarker, reconcileAuthorityProject, checksumAuthoritySeedRows, prepareAuthority, drainAuthority, getMirrorCursor, applyMirrorPage, pullMemoryMirrorOnce, V2_MEMORY_CATEGORIES, CATEGORY_PRIORITY, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, resolveStoredPathWorkspaceIdentity, storedPathBelongsToWorkspace, sourceNameForMemory, computeWorkspaceEpochFingerprint, beginBootQuietPeriod, bootQuietRemainingMs, scheduleAfterBootQuiet, recordToolDefinition, getMeasuredToolDefinitionTokens, getSchemaFenceRejection, getDatabasePath, setSqlitePragmaConfig, runSqliteOptimize, openDatabase, openDatabaseAsync, isDatabasePersisted, getDatabasePersistenceError, recordEmbeddingMeasurement, getMaxM0MutationId, queueMemoryMutation, getMemoryMutationsForRenderByProjects, getMaxMemoryMutationIdForProjects, isEmergencyRecoveryArmed, isProviderOverflowReconfirmed, loadPersistedUsage, loadProtectedTailMeta, resetProtectedTailNoEligibleHead, getWrapupInProgressState, acquireWrapupInProgress, updateWrapupInProgress, releaseWrapupInProgress, getPersistedReasoningWatermark, setPersistedReasoningWatermark, clearPersistedReasoningWatermark, getEmergencyInputSample, setEmergencyDropSample, clearEmergencyDropSample, getLastNudgeUndropped, setLastNudgeUndropped, getLastNudgeLevel, setLastNudgeLevel, resetLastNudgeCycle, resetLastNudgeCycleIfTailShrank, getChannel2NudgeState, getChannel2NudgeClaim, casChannel2NudgeState, claimChannel2NudgeState, casChannel2NudgeClaim, getPersistedNoteNudge, getNoteNudgeAnchors, getAutoSearchHintDecisions, appendAutoSearchHintDecision, pruneNoteNudgeAnchors, pruneAutoSearchHintDecisions, removeNoteNudgeAnchorByMessageId, removeAutoSearchHintDecisionByMessageId, getPersistedTodoSyntheticAnchor, setPersistedTodoSyntheticAnchor, clearPersistedTodoSyntheticAnchor, setNoteLastReadAt, getHistorianFailureState, clearHistorianFailureState, getOverflowState, recordOverflowDetected, recordDetectedContextLimit, clearEmergencyRecovery, clearDetectedContextLimit, getPersistedCompactionMarkerState, getStrippedPlaceholderIds, applyStrippedPlaceholderDelta, removeStrippedPlaceholderId, getStaleReduceStrippedIds, addStaleReduceStrippedIds, getProcessedImageStrippedIds, addProcessedImageStrippedIds, getPendingCompactionMarkerState, clearPendingCompactionMarkerStateIf, peekDeferredExecutePending, setDeferredExecutePendingIfAbsent, clearDeferredExecutePendingIfMatches, getSessionsWithPendingMarker, setSessionWorkMetrics, getNotes, addNote, getSessionNotes, getPendingSmartNotes, getReadySmartNotes, updateNote, dismissNote, markNoteReady, markNoteChecked, queuePendingOp, getPendingOps, removePendingOp, PRIMER_CANDIDATE_TTL_MS, PRIMER_CANDIDATE_MAX_AGE_MS, primerOccurrenceKey, primerOccurrenceUtcDay, updatePrimerCandidateEmbedding, getPrimerCandidatesByIds, getPrimerCandidatesForPromotion, countPrimerCandidatesForProject, getActivePrimers, createPrimer, updatePrimerSupport, updatePrimerAnswer, GLOBAL_USER_PROFILE_PROJECT_PATH, getProjectState, bumpProjectMemoryEpoch, bumpProjectUserProfileVersion, saveSourceContent, replaceSourceContent, getSourceContents, getActiveTagTokenAggregate, AGE_RECLAIM_MIN_TOKENS, getOldestActiveUnprotectedToolTags, getActiveToolTagsForAgeReclaim, getTriggerTagTokenUpperBound, getActiveTagTokenTotalsByMessage, tagTokenCountIsNull, backfillTagTokenCounts, insertTag, updateTagStatus, updateTagDropMode, updateCavemanDepth, updateTagMessageId, deleteTagsByMessageId, getMaxTagNumberBySession, getTagNumberByMessageId, deriveTagLoadFloor, getTagsBySession, getActiveTagsBySession, getDroppedTagsBySession, getTagsByNumbers, getMaxDroppedTagNumber, getToolTagNumberByOwner, getNullOwnerToolTag, adoptNullOwnerToolTag, getCandidateToolOwners, pickNearestPriorOwner, recordChildInvocation, COMPARTMENT_AGENT_SYSTEM_PROMPT, HISTORIAN_EDITOR_SYSTEM_PROMPT, COMPARTMENT_STRUCTURAL_SYSTEM_PROMPT, Priority, AdmissionClass, StaleRouteHandleError, SocketClosedError, SocketTimeoutError, SubcClient, isConsumerReconnectTransient, getCompartmentEvents, loadCompartmentChunkEmbeddingsForSearch, cosineSimilarity, SYNAPSE_DEFAULT_MODEL, SynapseEmbeddingProvider, computeNormalizedHash, saveCommitEmbedding, loadProjectCommitEmbeddings, loadUnembeddedCommits, countEmbeddedCommits, upsertCommits, getLatestIndexedCommitTimeMs, enforceProjectCap, GIT_SWEEP_LEASE_RENEWAL_MS, acquireGitSweepLease, renewGitSweepLease, markGitSweepSuccessAndRelease, parkGitSweepNonIndexable, releaseGitSweepLease, saveEmbeddingIfHashMatches, getProjectEmbeddings, peekProjectEmbeddings, invalidateProject, invalidateMemory, markProjectLoadUntrusted, contentSha256, sweepStaleEmbeddingIdentitiesForProject, registerProjectEmbedding, registerProjectShadowEmbedding, getShadowEmbeddingMeasurementCohort, getPrimaryEmbeddingMeasurementCohort, embedShadowTextForProject, enqueueShadowEmbeddingItems, registerProjectInObservationMode, getProjectEmbeddingSnapshot, embedTextForProject, embedBatchForProject, embedItemsForProject, embedUnembeddedMemoriesForProject, drainCommitBacklogForProject, embedSessionCompartmentChunks, getEmbeddingCoverageStatus, isEmbeddingEnabled, embedText, ensureMemoryEmbeddings, computeCueContentHash, getMuralCueState, memoryNeedsCue, setMuralCue, hasMemoryShareableColumn, hasMemoryClassifiedAtColumn, getUnclassifiedMemoryIds, ModuleMemoryAuthorityError, insertMemory, insertMemoryIdempotent, getMemoryByHash, getMemoriesByProject, buildWorkspaceMemorySqlFilter, getMemoriesByProjects, getMaxMemoryIdForProjects, readNewMemoriesForM1Union, getMemoryById, getMemoriesByIds, updateMemorySeenCount, updateMemoryRetrievalCount, setMemoryClassification, supersededMemory, mergeMemoryStats, archiveMemory, getMemoryCountsByStatus, sanitizeFtsQuery, searchMemoriesFTS, searchMemoriesFTSUnion, recordMemoryMapping, recordMemoryVerifications, getUnmappedMemoryIds, clearMemoryVerifications, getMemoryVerifications, resolveGitTopLevel, readGitHead, readGitChangedFilesSince, readGitFileChangeTimesSince, verificationFileExists, normalizeVerificationFiles, USER_MEMORY_CANDIDATE_TTL_MS, insertUserMemoryCandidates, getUserMemoryCandidates, deleteUserMemoryCandidates, pruneExpiredUserMemoryCandidates, insertUserMemory, getActiveUserMemories, updateUserMemoryContent, dismissUserMemory, MARKER_SUMMARY_TEXT, applyDeferredCompactionMarker, removeCompactionMarkerForSession, checkCompactionMarkerConsistency, getMural, BoundedSessionMap, extractM0Block, formatDate, injectTemporalMarkers, clearInjectionCache, getVisibleMemoryIds, prepareCompartmentInjection, renderCompartmentInjection, mustMaterialize, trimMemoriesToBudgetV2, renderMemoryBlockV2, injectM0M1, onNoteTrigger, peekNoteNudgeText, markNoteNudgeDelivered, clearNoteNudgeTriggerAndCooldown, resetNoteNudgeCooldownOnly, clearNoteNudgeTriggerOnly, estimateTrueRawMessageTokens, invalidateTrueRawTokenCache, RECOVERY_NO_HEAD_LIMIT, resolveOpenCodeProtectedTailBoundary, resolveWrapupProtectedTailBoundary, getRawHistoryEligibility, hasRunnableCompartmentWindow, recordHighPressureNoEligibleHead, runCompartmentAgent, snapRangeToCompartments, lkgContentDigest, captureSlot, getSlot, dropSlot, noteEntry, getActiveCompartmentRun, markActiveCompartmentRunPublished, registerActiveCompartmentRun, startCompartmentAgent, isRecompFailure, isRecompSkip, isRecompComplete, extractRecompReason, contextualizeUpgradeReason, setRecompStarting, setRecompNote, setRecompTerminal, runManagedRecomp, runManagedUpgrade };
+export { withContentLanguageDirective, buildPrimaryLanguageDirective, exports_external, DEFAULT_PROTECTED_TAGS, parseCron, nextOccurrence, nextDueAtMs, DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE, DEFAULT_HISTORIAN_TIMEOUT_MS, DEFAULT_LOCAL_EMBEDDING_MODEL, MagicContextConfigSchema, getOpenCodeDbPath, removeMcOwnedCompactionMarkers, ProjectIdentityError, resolveProjectIdentityStrict, takeDubiousOwnershipProjectIdentityWarning, resolveProjectIdentity, resolveProjectIdentityForSession, normalizeStoredProjectPath, storedPathBelongsToIdentity, recordSessionProjectIdentity, beginBootQuietPeriod, bootQuietRemainingMs, scheduleAfterBootQuiet, rpcPortDir, rpcPortFilePath, isPidAlive, parseRpcPortFile, registerModuleNoteEvaluationBridge, getModuleNoteEvaluationBridge, getContextStoreUuid, ensureContextStoreUuid, getAuthorityManagedMarker, reconcileAuthorityProject, checksumAuthoritySeedRows, prepareAuthority, drainAuthority, getMirrorCursor, applyMirrorPage, pullMemoryMirrorOnce, V2_MEMORY_CATEGORIES, CATEGORY_PRIORITY, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, resolveStoredPathWorkspaceIdentity, storedPathBelongsToWorkspace, sourceNameForMemory, computeWorkspaceEpochFingerprint, recordToolDefinition, getMeasuredToolDefinitionTokens, getSchemaFenceRejection, getMigrationOnOpenRefusal, LATEST_SUPPORTED_VERSION, getDatabasePath, getPersistedSchemaVersion, setSqlitePragmaConfig, runSqliteOptimize, openDatabase, openDatabaseAsync, isDatabasePersisted, getDatabasePersistenceError, COMPARTMENT_LEASE_RENEWAL_MS, acquireCompartmentLease, renewCompartmentLease, releaseCompartmentLease, getCompartments, getLastCompartmentEndMessage, getLastCompartmentEndMessageId, clearRecompStaging, recordEmbeddingMeasurement, getMaxM0MutationId, queueMemoryMutation, getMemoryMutationsForRenderByProjects, getMaxMemoryMutationIdForProjects, MAX_EXECUTE_THRESHOLD, escalationBands, isEmergencyRecoveryArmed, isProviderOverflowReconfirmed, loadPersistedUsage, loadProtectedTailMeta, resetProtectedTailNoEligibleHead, getWrapupInProgressState, acquireWrapupInProgress, updateWrapupInProgress, releaseWrapupInProgress, resolveCompactionModeRecord, getCompactionModeRecord, setCompactionModeRecord, getPersistedReasoningWatermark, setPersistedReasoningWatermark, clearPersistedReasoningWatermark, getEmergencyInputSample, setEmergencyDropSample, clearEmergencyDropSample, getLastNudgeUndropped, setLastNudgeUndropped, getLastNudgeLevel, setLastNudgeLevel, resetLastNudgeCycle, resetLastNudgeCycleIfTailShrank, getChannel2NudgeState, getChannel2NudgeClaim, setChannel2NudgeState, casChannel2NudgeState, claimChannel2NudgeState, casChannel2NudgeClaim, getPersistedNoteNudge, getNoteNudgeAnchors, getAutoSearchHintDecisions, appendAutoSearchHintDecision, pruneNoteNudgeAnchors, pruneAutoSearchHintDecisions, removeNoteNudgeAnchorByMessageId, removeAutoSearchHintDecisionByMessageId, getPersistedTodoPermissionDenied, setPersistedTodoPermissionDenied, getPersistedTodoSyntheticAnchor, setPersistedTodoSyntheticAnchor, clearPersistedTodoSyntheticAnchor, setNoteLastReadAt, getHistorianFailureState, clearHistorianFailureState, getOverflowState, recordOverflowDetected, recordDetectedContextLimit, clearEmergencyRecovery, clearDetectedContextLimit, getPersistedCompactionMarkerState, setPersistedCompactionMarkerState, getStrippedPlaceholderIds, applyStrippedPlaceholderDelta, removeStrippedPlaceholderId, getStaleReduceStrippedIds, addStaleReduceStrippedIds, getProcessedImageStrippedIds, addProcessedImageStrippedIds, getPendingCompactionMarkerState, clearPendingCompactionMarkerStateIf, peekDeferredExecutePending, setDeferredExecutePendingIfAbsent, clearDeferredExecutePendingIfMatches, getSessionsWithPendingMarker, setSessionWorkMetrics, getNotes, addNote, getSessionNotes, getPendingSmartNotes, getReadySmartNotes, updateNote, dismissNote, markNoteReady, markNoteChecked, queuePendingOp, getPendingOps, clearPendingOps, removePendingOp, PRIMER_CANDIDATE_TTL_MS, PRIMER_CANDIDATE_MAX_AGE_MS, primerOccurrenceKey, primerOccurrenceUtcDay, updatePrimerCandidateEmbedding, getPrimerCandidatesByIds, getPrimerCandidatesForPromotion, countPrimerCandidatesForProject, getActivePrimers, createPrimer, updatePrimerSupport, updatePrimerAnswer, GLOBAL_USER_PROFILE_PROJECT_PATH, getProjectState, bumpProjectMemoryEpoch, bumpProjectUserProfileVersion, saveSourceContent, replaceSourceContent, getSourceContents, getActiveTagTokenAggregate, AGE_RECLAIM_MIN_TOKENS, getOldestActiveUnprotectedToolTags, getActiveToolTagsForAgeReclaim, getTriggerTagTokenUpperBound, getActiveTagTokenTotalsByMessage, tagTokenCountIsNull, backfillTagTokenCounts, insertTag, updateTagStatus, updateTagDropMode, updateCavemanDepth, updateTagMessageId, deleteTagsByMessageId, getMaxTagNumberBySession, getTagNumberByMessageId, deriveTagLoadFloor, getTagsBySession, getActiveTagsBySession, getDroppedTagsBySession, getTagsByNumbers, getMaxDroppedTagNumber, getToolTagNumberByOwner, getNullOwnerToolTag, adoptNullOwnerToolTag, getCandidateToolOwners, pickNearestPriorOwner, createChildSessionWithFence, detectOverflow, promptSyncWithValidatedOutputRetry, normalizeSDKResponse, extractLatestAssistantText, hasLengthCappedOutput, setKeepSubagents, shouldKeepSubagents, recordChildInvocation, COMPARTMENT_AGENT_SYSTEM_PROMPT, HISTORIAN_EDITOR_SYSTEM_PROMPT, COMPARTMENT_STRUCTURAL_SYSTEM_PROMPT, Priority, AdmissionClass, StaleRouteHandleError, SocketClosedError, SocketTimeoutError, SubcClient, isConsumerReconnectTransient, getCompartmentEvents, loadCompartmentChunkEmbeddingsForSearch, cosineSimilarity, SYNAPSE_DEFAULT_MODEL, SynapseEmbeddingProvider, computeNormalizedHash, saveCommitEmbedding, loadProjectCommitEmbeddings, loadUnembeddedCommits, countEmbeddedCommits, upsertCommits, getLatestIndexedCommitTimeMs, enforceProjectCap, GIT_SWEEP_LEASE_RENEWAL_MS, acquireGitSweepLease, renewGitSweepLease, markGitSweepSuccessAndRelease, parkGitSweepNonIndexable, releaseGitSweepLease, saveEmbeddingIfHashMatches, getProjectEmbeddings, peekProjectEmbeddings, invalidateProject, invalidateMemory, markProjectLoadUntrusted, contentSha256, sweepStaleEmbeddingIdentitiesForProject, registerProjectEmbedding, registerProjectShadowEmbedding, getShadowEmbeddingMeasurementCohort, getPrimaryEmbeddingMeasurementCohort, embedShadowTextForProject, enqueueShadowEmbeddingItems, registerProjectInObservationMode, getProjectEmbeddingSnapshot, embedTextForProject, embedBatchForProject, embedItemsForProject, embedUnembeddedMemoriesForProject, drainCommitBacklogForProject, embedSessionCompartmentChunks, getEmbeddingCoverageStatus, isEmbeddingEnabled, embedText, ensureMemoryEmbeddings, computeCueContentHash, getMuralCueState, memoryNeedsCue, setMuralCue, hasMemoryShareableColumn, hasMemoryClassifiedAtColumn, getUnclassifiedMemoryIds, ModuleMemoryAuthorityError, insertMemory, insertMemoryIdempotent, getMemoryByHash, getMemoriesByProject, buildWorkspaceMemorySqlFilter, getMemoriesByProjects, getMaxMemoryIdForProjects, readNewMemoriesForM1Union, getMemoryById, getMemoriesByIds, updateMemorySeenCount, updateMemoryRetrievalCount, setMemoryClassification, supersededMemory, mergeMemoryStats, archiveMemory, getMemoryCountsByStatus, sanitizeFtsQuery, searchMemoriesFTS, searchMemoriesFTSUnion, recordMemoryMapping, recordMemoryVerifications, getUnmappedMemoryIds, clearMemoryVerifications, getMemoryVerifications, resolveGitTopLevel, readGitHead, readGitChangedFilesSince, readGitFileChangeTimesSince, verificationFileExists, normalizeVerificationFiles, USER_MEMORY_CANDIDATE_TTL_MS, insertUserMemoryCandidates, getUserMemoryCandidates, deleteUserMemoryCandidates, pruneExpiredUserMemoryCandidates, insertUserMemory, getActiveUserMemories, updateUserMemoryContent, dismissUserMemory, MARKER_SUMMARY_TEXT, applyDeferredCompactionMarker, removeCompactionMarkerForSession, checkCompactionMarkerConsistency, getMural, BoundedSessionMap, extractM0Block, formatDate, injectTemporalMarkers, clearInjectionCache, getVisibleMemoryIds, prepareCompartmentInjection, renderCompartmentInjection, mustMaterialize, trimMemoriesToBudgetV2, renderMemoryBlockV2, injectM0M1, onNoteTrigger, peekNoteNudgeText, markNoteNudgeDelivered, clearNoteNudgeTriggerAndCooldown, resetNoteNudgeCooldownOnly, clearNoteNudgeTriggerOnly, estimateTrueRawMessageTokens, invalidateTrueRawTokenCache, RECOVERY_NO_HEAD_LIMIT, resolveOpenCodeProtectedTailBoundary, resolveWrapupProtectedTailBoundary, getRawHistoryEligibility, hasRunnableCompartmentWindow, recordHighPressureNoEligibleHead, runCompartmentAgent, snapRangeToCompartments, lkgContentDigest, captureSlot, getSlot, dropSlot, noteEntry, getActiveCompartmentRun, markActiveCompartmentRunPublished, registerActiveCompartmentRun, startCompartmentAgent, isRecompFailure, isRecompSkip, isRecompComplete, extractRecompReason, contextualizeUpgradeReason, setRecompStarting, setRecompNote, setRecompTerminal, runManagedRecomp, runManagedUpgrade };