@cortexkit/opencode-magic-context 0.36.1 → 0.37.0

package/src/config/latch-permanence-guard.test.ts

@@ -0,0 +1,218 @@
+import { describe, expect, test } from "bun:test";
+import { readdirSync, readFileSync } from "node:fs";
+import { dirname, join, relative } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const REPOSITORY_ROOT = join(dirname(fileURLToPath(import.meta.url)), "../../../..");
+const SOURCE_ROOTS = ["packages/plugin/src", "packages/pi-plugin/src"] as const;
+
+type Classification = "VERDICT" | "DIAGNOSTIC" | "PUBLICATION";
+
+type KnownSlot = {
+    classification: Classification;
+    reason: string;
+};
+
+/**
+ * Every module-level mutable slot whose name says it can retain a capability,
+ * absence, or failure verdict. A new matching slot must be classified here so
+ * a negative cache cannot quietly become permanent.
+ */
+const KNOWN_SLOTS: Record<string, KnownSlot> = {
+    "packages/plugin/src/features/magic-context/compaction-marker.ts:cachedSchemaCompatible": {
+        classification: "VERDICT",
+        reason: "DEFECT: a transient PRAGMA/read failure is cached as incompatible until the writable DB is closed.",
+    },
+    "packages/plugin/src/features/magic-context/memory/embedding-local.ts:nativeRuntimeMissing": {
+        classification: "VERDICT",
+        reason: "Correct: a missing or unloadable native binding needs an install repair, which this process cannot observe.",
+    },
+    "packages/plugin/src/features/magic-context/memory/embedding-synapse.ts:sharedClientPromise": {
+        classification: "VERDICT",
+        reason: "DEFECT: a rejected connection promise remains shared after the daemon recovers.",
+    },
+    "packages/plugin/src/features/magic-context/memory/embedding-synapse.ts:permanentFailure": {
+        classification: "VERDICT",
+        reason: "DEFECT: a daemon catalog or response classification can be repaired in-process, but the provider then returns null without another probe.",
+    },
+    "packages/plugin/src/features/magic-context/memory/embedding-openai.ts:failureTimes": {
+        classification: "VERDICT",
+        reason: "Correct: circuit state expires and a half-open probe re-evaluates the endpoint.",
+    },
+    "packages/plugin/src/features/magic-context/memory/project-identity.ts:directoryFallbackCache":
+        {
+            classification: "VERDICT",
+            reason: "Saved: each read checks for a newly-created .git directory and deletes the fallback before resolving again.",
+        },
+    "packages/plugin/src/features/magic-context/memory/project-identity.ts:transientFailureCooldown":
+        {
+            classification: "VERDICT",
+            reason: "Saved: getActiveCooldown deletes an expired entry and forces a new git probe after five minutes.",
+        },
+    "packages/plugin/src/features/magic-context/message-index.ts:MESSAGE_HISTORY_ORPHAN_UNAVAILABLE_REPROBE_MS":
+        {
+            classification: "VERDICT",
+            reason: "Saved: source_unavailable persists a future timestamp, then the normal cooldown arithmetic re-probes after one day.",
+        },
+    "packages/plugin/src/features/magic-context/mural/storage-mural-cues.ts:muralCueColumnCache": {
+        classification: "VERDICT",
+        reason: "Correct by scope: the database is fully migrated before this handle reaches cue reads, so its schema cannot gain this column during use.",
+    },
+    "packages/plugin/src/features/magic-context/mural/storage-mural-cues.ts:muralCueRejectionColumnCache":
+        {
+            classification: "VERDICT",
+            reason: "Correct by scope: the database is fully migrated before this handle reaches cue reads, so its schema cannot gain this column during use.",
+        },
+    "packages/plugin/src/features/magic-context/smart-notes/sandbox-runner.ts:asyncModulePromise": {
+        classification: "VERDICT",
+        reason: "DEFECT: a rejected dynamic-import/WASM-init promise is retained for every later smart-note check.",
+    },
+    "packages/plugin/src/features/magic-context/storage-meta-session.ts:sessionMetaSelectColumnsCache":
+        {
+            classification: "VERDICT",
+            reason: "Correct by scope: session_meta migration completes before the first projection is built for this database handle.",
+        },
+    "packages/plugin/src/features/magic-context/memory/storage-memory.ts:memoryImportanceColumnCache":
+        {
+            classification: "VERDICT",
+            reason: "Correct by scope: memory schema migration completes before this database handle serves memory reads.",
+        },
+    "packages/plugin/src/features/magic-context/memory/storage-memory.ts:memoryScopeColumnCache": {
+        classification: "VERDICT",
+        reason: "Correct by scope: memory schema migration completes before this database handle serves memory reads.",
+    },
+    "packages/plugin/src/features/magic-context/memory/storage-memory.ts:memoryShareableColumnCache":
+        {
+            classification: "VERDICT",
+            reason: "Correct by scope: memory schema migration completes before this database handle serves memory reads.",
+        },
+    "packages/plugin/src/features/magic-context/memory/storage-memory.ts:memoryClassifiedAtColumnCache":
+        {
+            classification: "VERDICT",
+            reason: "Correct by scope: memory schema migration completes before this database handle serves memory reads.",
+        },
+    "packages/plugin/src/hooks/magic-context/ctx-reduce-availability.ts:ctxReduceRegisteredGlobally":
+        {
+            classification: "VERDICT",
+            reason: "Correct by scope: tool registration is resolved once at plugin boot and cannot change while that instance runs.",
+        },
+    "packages/plugin/src/hooks/magic-context/ctx-reduce-availability.ts:availabilityBySession": {
+        classification: "VERDICT",
+        reason: "Correct by contract: the first persisted user message freezes that session's tool surface.",
+    },
+    "packages/plugin/src/hooks/magic-context/ctx-reduce-availability.ts:permissionDeniedBySession":
+        {
+            classification: "DIAGNOSTIC",
+            reason: "Repeatedly assigned on each cache-busting permission read; later reads replace an earlier denial.",
+        },
+    "packages/plugin/src/hooks/magic-context/read-session-formatting.ts:tokenizerLoadAttempted": {
+        classification: "VERDICT",
+        reason: "DEFECT: a failed tokenizer load permanently selects heuristic token counts even if the package becomes available.",
+    },
+    "packages/plugin/src/hooks/magic-context/module-transport.ts:stateSyncCapabilityCache": {
+        classification: "VERDICT",
+        reason: "Saved: invalidateStateSyncCapabilities runs on NEED_FULL_SYNC and connection invalidation before the next capability probe.",
+    },
+    "packages/plugin/src/plugin/conflict-warning-hook.ts:cachedDesktopStateByDir": {
+        classification: "VERDICT",
+        reason: "Correct by scope: its deciding startup-warning paths run once per plugin boot, so a later Desktop state-file write is not observed by design.",
+    },
+    "packages/plugin/src/plugin/embedding-routing.ts:synapseProbeCache": {
+        classification: "VERDICT",
+        reason: "Saved: the promise has a 60-second TTL, including rejections, and discovery is retried after expiry.",
+    },
+    "packages/plugin/src/shared/models-dev-cache.ts:authRewarmDone": {
+        classification: "VERDICT",
+        reason: "Saved: refreshModelLimitsAfterAuthOnce resets the latch when its warm fails.",
+    },
+    "packages/pi-plugin/src/dreamer/pi-session-api.ts:cachedModulePromise": {
+        classification: "VERDICT",
+        reason: "Saved: promise.catch clears the same rejected promise, allowing the next resolver call to retry.",
+    },
+    "packages/plugin/src/features/magic-context/fail-closed-block.ts:lastHookInitFailure": {
+        classification: "DIAGNOSTIC",
+        reason: "Most-recent boot diagnostic: recordHookInitFailure overwrites it and clearHookInitFailure resets it.",
+    },
+    "packages/plugin/src/hooks/magic-context/read-session-formatting.ts:tokenizerLoadPromise": {
+        classification: "PUBLICATION",
+        reason: "In-flight handle only: finally clears it after the load settles, so it cannot retain a failure verdict.",
+    },
+    "packages/plugin/src/shared/exit-abort-registry.ts:listenerRegistered": {
+        classification: "PUBLICATION",
+        reason: "One-time process exit-listener installation, not a capability or failure verdict.",
+    },
+    "packages/plugin/src/shared/storage-permissions.ts:enforcePrivateStoragePermissions": {
+        classification: "VERDICT",
+        reason: "Repeatedly assigned configuration: the public setter can update it during the process.",
+    },
+    "packages/plugin/src/features/magic-context/storage-db.ts:lastSchemaFenceRejection": {
+        classification: "DIAGNOSTIC",
+        reason: "Most-recent diagnostic: every open attempt clears or overwrites it.",
+    },
+    "packages/plugin/src/features/magic-context/storage-db.ts:lastMigrationOnOpenRefusal": {
+        classification: "DIAGNOSTIC",
+        reason: "Most-recent diagnostic: every open attempt clears or overwrites it.",
+    },
+    "packages/plugin/src/shared/models-dev-cache.ts:apiCache": {
+        classification: "PUBLICATION",
+        reason: "Publishes last-known-good model metadata, not a failure verdict; refresh writes a later successful value.",
+    },
+};
+
+function sourceFiles(directory: string): string[] {
+    const files: string[] = [];
+    for (const entry of readdirSync(directory, { withFileTypes: true })) {
+        const path = join(directory, entry.name);
+        if (entry.isDirectory()) {
+            files.push(...sourceFiles(path));
+        } else if (entry.isFile() && path.endsWith(".ts") && !path.endsWith(".test.ts")) {
+            files.push(path);
+        }
+    }
+    return files;
+}
+
+function declaredOneShotSlots(source: string): string[] {
+    // `let` is deliberate: this targets mutable module state, not constant lookup
+    // tables or prepared-statement handles. The initializer restriction excludes
+    // ordinary counters and per-call scratch values.
+    const declarations =
+        /^(?:export\s+)?let\s+([A-Za-z_$][\w$]*)\b[^\n]*(?:=\s*(?:null|false|true)|Promise<)/gm;
+    const verdictName =
+        /(?:attempted|availability|compatible|cooldown|disabled|failed|failure|latch|missing|permission|promise|registered|unavailable)/i;
+    const moduleSlots = [...source.matchAll(declarations)].map((match) => match[1]);
+    // A provider-local permanent failure has the same operational effect as a
+    // module slot: every later provider call short-circuits without re-probing.
+    const providerLatches = [
+        ...source.matchAll(/^\s*private\s+(permanentFailure)\s*=\s*false;/gm),
+    ].map((match) => match[1]);
+    return [...moduleSlots, ...providerLatches].filter(
+        (name): name is string => name !== undefined && verdictName.test(name),
+    );
+}
+
+describe("latch permanence classification guard", () => {
+    test("classifies every production one-shot verdict-shaped slot", () => {
+        const inlineTestBlocks: string[] = [];
+        const discovered = new Set<string>();
+        for (const root of SOURCE_ROOTS) {
+            for (const file of sourceFiles(join(REPOSITORY_ROOT, root))) {
+                const source = readFileSync(file, "utf8");
+                if (/from\s+["']bun:test["']/.test(source)) {
+                    inlineTestBlocks.push(relative(REPOSITORY_ROOT, file));
+                }
+                for (const slot of declaredOneShotSlots(source)) {
+                    discovered.add(`${relative(REPOSITORY_ROOT, file)}:${slot}`);
+                }
+            }
+        }
+
+        expect(inlineTestBlocks).toEqual([]);
+        const unclassified = [...discovered].filter((slot) => !(slot in KNOWN_SLOTS)).sort();
+        expect(
+            unclassified,
+            `Classify each new one-shot verdict-shaped slot in KNOWN_SLOTS: ${unclassified.join(", ")}`,
+        ).toEqual([]);
+        expect(Object.keys(KNOWN_SLOTS).length).toBeGreaterThan(0);
+    });
+});

package/src/config/project-security.ts

@@ -195,7 +195,8 @@ function makeProjectThresholdWarning(field: string, reason: string): string {
  *    loud inoperability gate; only the user may restore silent degrade.
  *  - `allow_home_project` — only the user may opt a home-directory session
  *    into a durable project identity.
- *  - `output_reserve` — only the user may change the process-wide safe input budget.
+ *  - `output_reserve` / `models.window_overlay_path` — only the user may change
+ *    process-wide window geometry inputs.
  *  - `language`: a repo must not inject prompt text through a user preference.
  *  - `sqlite` — `sqlite.cache_size_mb` / `mmap_size_mb` become PRAGMAs on the
  *    process-global shared DB handle (one connection across every project in the
@@ -268,6 +269,14 @@ export function stripUnsafeProjectConfigFields(projectRaw: Record<string, unknow
         );
     }
 
+    const models = projectRaw.models;
+    if (isPlainObject(models) && "window_overlay_path" in models) {
+        delete models.window_overlay_path;
+        warnings.push(
+            "Ignoring models.window_overlay_path from project config (security: only user-level config may select model geometry metadata).",
+        );
+    }
+
     if ("language" in projectRaw) {
         delete projectRaw.language;
         warnings.push(

package/src/config/schema/magic-context.ts

@@ -479,6 +479,8 @@ export interface MagicContextConfig {
     prompt_surface: PromptSurfaceConfig;
     /** User-only output-token reservation override. Zero disables reservation. */
     output_reserve?: number | { default: number; [modelKey: string]: number };
+    /** User-only model metadata inputs. */
+    models?: { window_overlay_path?: string };
     /** TUI toast lifetime in milliseconds for Magic Context notifications. Default: 5000. */
     toast_duration_ms?: number;
     execute_threshold_percentage: number | { default: number; [modelKey: string]: number };
@@ -721,6 +723,14 @@ export const MagicContextConfigSchema = z
             .describe(
                 'User-only output-token reservation override. Number or per-model object ({ default: 16384, "provider/model": 8192 }); 0 disables reservation. When unset, Magic Context reserves the catalog output limit (capped at 25% of context) for shared-window providers and keeps proven separate-quota Google/Gemini windows unchanged.',
             ),
+        models: z
+            .object({
+                window_overlay_path: z.string().trim().min(1).optional(),
+            })
+            .optional()
+            .describe(
+                "User-only Fusiform window-overlay settings. The path defaults to <dataDir>/fusiform/window-overlay.json.",
+            ),
         toast_duration_ms: z
             .number()
             .min(0)

package/src/shared/__fixtures__/window-overlay.v1.json

@@ -0,0 +1,337 @@
+{
+  "schema": "fusiform-window-overlay/v1",
+  "generated_at": "2026-08-13T15:12:00Z",
+  "batch": "1 of N \u2014 the geometry spec's measured rows, transcribed",
+  "minted_provider_ids": [
+    "openai-chatgpt-oauth"
+  ],
+  "relay_note": "Cells whose source_ref names mc-geometry-spec are RELAYED: the grade records the evidence class that document assigns, not evidence this seat verified independently. Where a primary source was on disk it was read directly and the source_ref names it instead.",
+  "cells": [
+    {
+      "provider_id": "openai-chatgpt-oauth",
+      "model_id": "gpt-5.6",
+      "facts": {
+        "window.enforced": {
+          "value": {
+            "kind": "bracket",
+            "at_least": 340000
+          },
+          "grade": "measured",
+          "units": "estimate",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#measured-per-model-findings:gpt-5.6-oauth (operator-confirmed live)",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "window.advertised": {
+          "value": {
+            "kind": "unknown",
+            "why": "never_measured"
+          },
+          "grade": "unknown",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "codex-rs@32f4687b8c:models-manager/src/model_info.rs:125",
+          "observed_at": "2026-08-13T15:12:00Z"
+        },
+        "output.advertised": {
+          "value": {
+            "kind": "unknown",
+            "why": "never_measured"
+          },
+          "grade": "unknown",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "codex-rs@32f4687b8c:protocol/src/openai_models.rs:409",
+          "observed_at": "2026-08-13T15:12:00Z"
+        }
+      },
+      "note": "window.advertised is UNKNOWN rather than 272000. The seed spec reads the 272k in codex-rs as a server-delivered advertisement; the source has it only in model_info_from_slug, the fallback for unrecognised slugs, beside used_fallback_model_metadata: true. Every other occurrence is a test fixture inheriting it. The server may also send 272k; the source does not establish that. output.advertised is unknown because ModelInfo carries no output field at all, so the client cannot request a cap and nothing states one."
+    },
+    {
+      "provider_id": "openai",
+      "model_id": "gpt-5.6",
+      "facts": {
+        "window.advertised": {
+          "value": {
+            "kind": "stated",
+            "value": 1050000
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#measured-per-model-findings:gpt-5.6-platform",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "output.advertised": {
+          "value": {
+            "kind": "stated",
+            "value": 128000
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#measured-per-model-findings:gpt-5.6-platform",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "geometry": {
+          "value": {
+            "kind": "stated",
+            "value": "shared_upfront"
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "https://platform.openai.com/docs/guides/conversation-state (read 2026-08-13) \u2014 'The context window is the maximum number of tokens that can be used in a single request. This max tokens number includes input, output, and reasoning tokens.'",
+          "observed_at": "2026-08-13T12:54:15Z"
+        }
+      },
+      "note": "GEOMETRY VERIFIED AGAINST OPENAI'S OWN DOCS 2026-08-13: 'The context window is the maximum number of tokens that can be used in a single request. This max tokens number includes input, output, and reasoning tokens.' That establishes the wall COUNTS the combined total, which is the half of shared_upfront this cell asserts. WHAT THE DOC DOES NOT ESTABLISH is the other half \u2014 whether an over-window request is rejected up front or truncated. The seed spec attributes rejection to `truncation: disabled`, implying the same endpoint truncates when truncation is enabled, and this page does not mention truncation at all (the API reference that would is behind a 403 from here). So shared_upfront is correct for the truncation-disabled path and is NOT established as a property of the provider. See the design note's section 12: the combined-and-truncating combination has no enum value, and this is the request mode that reaches it. The window and output numbers are relayed from the seed spec; the catalog agrees with both for this path, which is exactly why the access-path split matters \u2014 the same catalog row is right here and wrong for openai-chatgpt-oauth."
+    },
+    {
+      "provider_id": "anthropic",
+      "model_id": "claude-opus-5",
+      "facts": {
+        "window.advertised": {
+          "value": {
+            "kind": "stated",
+            "value": 1000000
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "https://docs.claude.com/en/docs/build-with-claude/context-windows (read 2026-08-13) \u2014 'Claude Opus 5 ... has a 1M-token context window on the Claude API, Amazon Bedrock, Google Cloud, and Microsoft Foundry'",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "output.advertised": {
+          "value": {
+            "kind": "stated",
+            "value": 128000
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "https://docs.claude.com/en/docs/build-with-claude/context-windows (read 2026-08-13) \u2014 'a request to any model with a 1M-token context window can generate up to 128k output tokens (max_tokens)'",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "geometry": {
+          "value": {
+            "kind": "stated",
+            "value": "shared_truncating"
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Asserted",
+          "source_ref": "https://docs.claude.com/en/docs/build-with-claude/context-windows (read 2026-08-13) \u2014 'Context window overflow behavior'",
+          "observed_at": "2026-08-13T12:54:15Z"
+        }
+      },
+      "note": "VERIFIED AGAINST THE PRIMARY SOURCE 2026-08-13, replacing the seed spec as source_ref. The doc names Opus 5 explicitly in a list of 1M-window models, and states the 128k output cap as a property of any 1M-window model rather than of this model. NO access-path id minted: the window holds on the Claude API, Bedrock, Google Cloud and Microsoft Foundry alike, so by mint-on-divergence there is nothing to fork. GEOMETRY IS THE INTERESTING PART AND IT SPLITS. The prompt-only wall is universal: 'if the input alone already exceeds the model's context window, the API returns a 400 invalid_request_error (prompt is too long) ON EVERY MODEL'. What happens to over-window OUTPUT is version-gated AND header-controlled: 4.5+ accepts the request and stops with stop_reason model_context_window_exceeded, earlier models return a validation error, and earlier models can OPT IN to the newer behaviour with the model-context-window-exceeded-2025-08-26 beta header. So a pre-4.5 model's geometry depends on a request header \u2014 the second instance of the request-dependence recorded in the design note's section 12, and the first with a named mechanism. shared_truncating is correct for Opus 5 and must not be inherited by an older Claude."
+    },
+    {
+      "provider_id": "xai",
+      "model_id": "grok-4.6",
+      "facts": {
+        "window.enforced": {
+          "value": {
+            "kind": "stated",
+            "value": 500000
+          },
+          "grade": "measured",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#measured-per-model-findings:grok-4.6",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "output.default": {
+          "value": {
+            "kind": "stated",
+            "value": 128000
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#measured-per-model-findings:grok-4.6",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "geometry": {
+          "value": {
+            "kind": "stated",
+            "value": "shared_truncating"
+          },
+          "grade": "measured",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#provider-geometry-classes:xai (error text 'maximum prompt length is N' is a prompt-only wall)",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "window.advertised": {
+          "value": {
+            "kind": "stated",
+            "value": 500000
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "https://docs.x.ai/developers/models/grok-4.6.md (read 2026-08-13) \u2014 'Context window: 500,000 tokens'",
+          "observed_at": "2026-08-13T16:30:00Z"
+        }
+      },
+      "note": "No output.enforced cell: the documented behaviour is no fixed cap, with the ceiling being window minus prompt. That is a FUNCTION of the request, not a constant, and this schema has no shape for it \u2014 geometry plus window is what a consumer needs to derive it. Writing a number here would state a constant that does not exist. The catalog's output=500000 equals its context and is a placeholder by the spec's own rule. This model arrived AFTER the embedded seed snapshot (seed fetched 2026-08-12T10:07:29Z, model first observed 16:12:49Z), so it cannot be join-checked against the seed; post_seed records how its existence was verified instead. ADVERTISED ADDED FROM XAI'S OWN MODEL PAGE 2026-08-13, and it AGREES with the measured enforced wall. That is the dataset's first corroboration rather than a correction, and it is worth recording as such: the advertised/enforced split exists because they CAN differ, not because they always do, and a split that only ever shows divergence would be evidence the measurement is biased toward cases someone went looking at. Two independent sources, one number. Note the two facts remain separate cells rather than being collapsed: they agree today, and collapsing them would destroy the ability to notice when they stop. The page states no output cap at all, which is consistent with the spec's 'no fixed cap' but does not establish it \u2014 an absent statement is not a statement of absence.",
+      "post_seed": {
+        "verified_at": "2026-08-13T15:12:00Z",
+        "evidence": "fusiform era history: existence observed present at 2026-08-12T16:12:49Z, changed between 15:42:49Z and 16:12:49Z",
+        "catalog_limit_at_verification": {
+          "context": 500000,
+          "output": 500000
+        }
+      }
+    },
+    {
+      "provider_id": "ollama-cloud",
+      "model_id": "deepseek-v4-flash",
+      "facts": {
+        "window.enforced": {
+          "value": {
+            "kind": "stated",
+            "value": 1048576
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#measured-per-model-findings:deepseek-v4-flash-ollama-cloud",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "output.enforced": {
+          "value": {
+            "kind": "stated",
+            "value": 65536
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "https://github.com/ollama/ollama/issues/16890",
+          "observed_at": "2026-08-13T12:54:15Z"
+        }
+      },
+      "note": "The catalog row is wrong twice over here, which is why this cell leads the batch: output equals context so it is a placeholder by the spec's rule, AND the real cap is 16x smaller. A consumer trusting the row reserves 1M against a 64k wall and gets an HTTP 400. NOT written as a provider-wide wildcard: the evidence names this model, and asserting it for all 20 ollama-cloud models would manufacture a claim from absence. If the cap is genuinely path-wide, one report naming a second model promotes it."
+    },
+    {
+      "provider_id": "moonshotai",
+      "model_id": "kimi-k3",
+      "facts": {
+        "window.advertised": {
+          "value": {
+            "kind": "stated",
+            "value": 1048576
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#measured-per-model-findings:kimi-k3",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "output.default": {
+          "value": {
+            "kind": "stated",
+            "value": 131072
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#measured-per-model-findings:kimi-k3",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "output.advertised": {
+          "value": {
+            "kind": "stated",
+            "value": 1048576
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#measured-per-model-findings:kimi-k3",
+          "observed_at": "2026-08-13T12:54:15Z"
+        }
+      },
+      "note": "The clearest case for output.default existing as its own fact. models.dev publishes output=131072 for this model, and 131072 is the DEFAULT you get without asking \u2014 the cap is 1M, configurable. Some aggregators read the same 131k as the context window. One number, three wrong readings, and the split is what stops a consumer from inheriting any of them."
+    },
+    {
+      "provider_id": "google",
+      "model_id": "gemini-3.5-flash",
+      "facts": {
+        "window.advertised": {
+          "value": {
+            "kind": "stated",
+            "value": 1048576
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#measured-per-model-findings:gemini-3.5-flash",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "output.advertised": {
+          "value": {
+            "kind": "stated",
+            "value": 65536
+          },
+          "grade": "provider_asserted_doc",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "mc-geometry-spec@06a0e5ac#measured-per-model-findings:gemini-3.5-flash",
+          "observed_at": "2026-08-13T12:54:15Z"
+        },
+        "geometry": {
+          "value": {
+            "kind": "unknown",
+            "why": "never_measured"
+          },
+          "grade": "unknown",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "https://ai.google.dev/gemini-api/docs/tokens (contradicts itself; see note)",
+          "observed_at": "2026-08-13T16:05:00Z"
+        }
+      },
+      "note": "NO antigravity id minted: 1M input and 65k output on both the Antigravity and generateContent paths, so nothing has diverged. Antigravity's self-compaction around 135k is harness behaviour, not a window, and does not belong in this dataset. Separate geometry means a smaller output request buys no input headroom \u2014 the input_token_limit is the usable input, full stop. GEOMETRY DOWNGRADED TO UNKNOWN 2026-08-13 after reading the primary source. The seed spec classifies Gemini as `separate` citing input_token_limit and output_token_limit as independent model constants. Those fields are real (https://ai.google.dev/api/models: 'Maximum number of input tokens allowed', 'Maximum number of output tokens available'), but the same docs page that demonstrates them states the opposite about the wall: 'The context window defines the combined limit of input and output tokens.' Two field constants and a combined wall are not contradictory \u2014 the fields can be per-side caps INSIDE a shared budget \u2014 so the field names do not establish `separate`. Neither reading is established by documentation alone; only a request that trades output for input can settle it."
+    },
+    {
+      "provider_id": "deepseek",
+      "model_id": "*",
+      "facts": {
+        "geometry": {
+          "value": {
+            "kind": "unknown",
+            "why": "never_measured"
+          },
+          "grade": "unknown",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "magic-context@5ac4408d:packages/plugin/src/features/magic-context/overflow-detection.ts:68 \u2014 pattern tagged `combined`, attribution confirmed by MC 2026-08-13 as observed-emitting-the-string only",
+          "observed_at": "2026-08-13T17:05:00Z"
+        }
+      },
+      "note": "AN EXPLICIT REFUSAL, minted because a specific wrong inference is available. DeepSeek appears in MC's overflow table under the pattern `maximum context length is (N) tokens`, tagged `combined`. MC confirmed 2026-08-13 that the tag was assigned ONCE for the pattern, reasoned from OpenAI's documented semantics, and inherited by every provider observed emitting that string \u2014 so the per-provider evidence establishes that DeepSeek EMITS the text, not that its wall counts combined. Without this cell a future transcriber mining that table would mint `combined` for DeepSeek with an honest-looking source_ref, which is the inference this dataset exists to refuse. Wildcard because the claim is about the provider's wall and nothing model-specific is known."
+    },
+    {
+      "provider_id": "openrouter",
+      "model_id": "*",
+      "facts": {
+        "geometry": {
+          "value": {
+            "kind": "unknown",
+            "why": "not_single_valued_at_key"
+          },
+          "grade": "measured",
+          "units": "provider",
+          "boundary": "Observed",
+          "source_ref": "models.dev@2026-08-13: openrouter carries 348 models spanning other providers' catalogs; MC confirmed 2026-08-13 that the wall which fires belongs to whichever upstream served the request",
+          "observed_at": "2026-08-13T17:05:00Z"
+        }
+      },
+      "note": "NOT AN ABSENCE OF EVIDENCE \u2014 a positive, evidenced claim that this KEY cannot hold a single geometry. OpenRouter routes to heterogeneous backends, so the wall that fires belongs to whichever upstream served the request; measuring once yields a value correct for that routing decision and wrong for the next. GRADE IS `measured`, NOT `unknown`: the claim rests on evidence (the catalog shows 348 models spanning other providers' offerings; MC confirmed the routing behaviour), and a grade of unknown would say nobody has established it, which is false. This is the first cell where kind=unknown and grade!=unknown, and the two fields are doing different jobs exactly as designed: the VALUE is unknown, the CLAIM ABOUT WHY is measured. The reason value forbids promoting any measured report into a stated or bracket cell at this key without a routing discriminant \u2014 that clause is what makes it load-bearing rather than decorative."
+    }
+  ],
+  "source_revision_note": "Cells transcribed from mc-geometry-spec were read at c6a85d85 and their source_ref names 06a0e5ac, the current revision. The bump is verified rather than assumed: every row transcribed here is byte-identical between the two revisions (checked per row with git show). The Codex row DID change between them, and no cell here cites the spec for Codex \u2014 those cells cite codex-rs directly. Pointing at the newer revision matters because c6a85d85 carried a misattributed Codex number, and a reader resolving a source_ref should land on a document without a known bad row in it.",
+  "additive_note": "The reason value `not_single_valued_at_key` was added 2026-08-13 WITHOUT a schema version bump, deliberately. Bumping would trigger the file-level refusal rule and cost a consumer all 9 cells over one additive value affecting 1. Unbumped, a consumer that does not know the value skips that single cell and merges the other 8 \u2014 which is the correct degradation for an addition."
+}