@cortexkit/opencode-magic-context 0.39.0 → 0.40.1

package/dist/{index-k2ts0wk1.js → index-x64cmpej.js}

@@ -398,9 +398,163 @@ function buildPrimaryLanguageDirective(language) {
   return `Use ${target} for your natural-language replies to the user unless the user explicitly asks for another language. Keep code, identifiers, file paths, commands, logs, and quoted text verbatim.`;
 }
 
+// src/shared/redaction.ts
+import { homedir, userInfo } from "node:os";
+function escapeRegex(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+var SECRET_WORDS = [
+  "key",
+  "token",
+  "secret",
+  "password",
+  "auth",
+  "authorization",
+  "bearer",
+  "credential"
+];
+var SECRET_SEGMENT_PATTERN = new RegExp(`^(?:${SECRET_WORDS.map((w) => `${w}s?`).join("|")})$`, "i");
+var TRAILING_DESCRIPTORS = new Set(["id", "ids", "value", "values", "header", "headers"]);
+function redactionTypeForKey(key) {
+  const normalized = key.trim().toLowerCase().replace(/[^a-z0-9_.-]+/g, "_");
+  const suffix = normalized.split(".").filter(Boolean).at(-1) ?? normalized;
+  return suffix || "secret";
+}
+function isNonSecretScalarValue(value) {
+  const v = value.trim();
+  if (v === "true" || v === "false" || v === "null" || v === "undefined")
+    return true;
+  return /^[+-]?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?$/.test(v);
+}
+var SECRET_QUALIFIERS = new Set([
+  "api",
+  "access",
+  "private",
+  "client",
+  "auth",
+  "authorization",
+  "secret",
+  "bearer",
+  "session",
+  "refresh",
+  "service",
+  "x",
+  "openai",
+  "anthropic",
+  "google",
+  "github",
+  "huggingface",
+  "aws",
+  "azure"
+]);
+function sanitizePathString(value) {
+  const home = homedir();
+  const username = userInfo().username;
+  let sanitized = value;
+  if (home) {
+    sanitized = sanitized.replace(new RegExp(escapeRegex(home), "g"), "~");
+  }
+  sanitized = sanitized.replace(/\/Users\/[^/]+\//g, "/Users/<USER>/");
+  sanitized = sanitized.replace(/\/home\/[^/]+\//g, "/home/<USER>/");
+  sanitized = sanitized.replace(/C:\\Users\\[^\\]+\\/g, "C:\\Users\\<USER>\\");
+  if (username) {
+    sanitized = sanitized.replace(new RegExp(escapeRegex(username), "g"), "<USER>");
+  }
+  return sanitized;
+}
+var SECRET_TEXT_PATTERNS = [
+  {
+    pattern: /\bsk-ant-(?:api03-)?[A-Za-z0-9_-]{32,}/g,
+    replacement: "<ANTHROPIC_API_KEY_REDACTED>"
+  },
+  {
+    pattern: /\bsk-(?:proj-)?[A-Za-z0-9_-]{32,}/g,
+    replacement: "<OPENAI_API_KEY_REDACTED>"
+  },
+  {
+    pattern: /\bgithub_pat_[A-Za-z0-9_]{20,}/g,
+    replacement: "<GITHUB_PAT_REDACTED>"
+  },
+  {
+    pattern: /\b(?:gh[opsu]|ghr)_[A-Za-z0-9]{30,}/g,
+    replacement: "<GITHUB_TOKEN_REDACTED>"
+  },
+  {
+    pattern: /\bhf_[A-Za-z0-9]{30,}/g,
+    replacement: "<HUGGINGFACE_TOKEN_REDACTED>"
+  },
+  {
+    pattern: /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g,
+    replacement: "<AWS_ACCESS_KEY_ID_REDACTED>"
+  },
+  {
+    pattern: /\bxox[abprsuvc]-[A-Za-z0-9-]{10,}/g,
+    replacement: "<SLACK_TOKEN_REDACTED>"
+  },
+  {
+    pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g,
+    replacement: "<GOOGLE_API_KEY_REDACTED>"
+  },
+  {
+    pattern: /\b(Authorization\s*:\s*Bearer\s+)([A-Za-z0-9._~+/=-]{8,})/gi,
+    replacement: (_full, prefix) => `${prefix}<REDACTED:bearer>`
+  },
+  {
+    pattern: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g,
+    replacement: "<JWT_REDACTED>"
+  },
+  {
+    pattern: /(["'])([^"']*(?:key|token|secret|password|auth|bearer|credential)[^"']*)\1(\s*:\s*)(["'])([^"']*)\4/gi,
+    replacement: (full, quote, key, separator, valueQuote, value) => isNonSecretScalarValue(value) ? full : `${quote}${key}${quote}${separator}${valueQuote}<REDACTED:${redactionTypeForKey(key)}>${valueQuote}`
+  },
+  {
+    pattern: /\b([A-Za-z0-9_.-]*(?:key|token|secret|password|auth|bearer|credential)[A-Za-z0-9_.-]*)\s*=\s*([^\s'"`]+)/gi,
+    replacement: (full, key, value) => isNonSecretScalarValue(value) ? full : `${key}=<REDACTED:${redactionTypeForKey(key)}>`
+  }
+];
+function redactSecretText(value) {
+  let redacted = value;
+  for (const { pattern, replacement } of SECRET_TEXT_PATTERNS) {
+    if (typeof replacement === "string") {
+      redacted = redacted.replace(pattern, replacement);
+    } else {
+      redacted = redacted.replace(pattern, replacement);
+    }
+  }
+  return redacted;
+}
+function sanitizeDiagnosticText(value) {
+  return redactSecretText(sanitizePathString(value));
+}
+var SHAREABILITY_SENSITIVE_PATTERNS = [
+  /\bC:\/Users\/[^/\s]+/i,
+  /(?:^|\s)~\/[^\s]+/,
+  /\b(?:api[_-]?key|secret|token|password|passwd|pwd|client[_-]?secret|access[_-]?key)\b\s*[:=]\s*\S+/i,
+  /\b(?:localhost|127\.0\.0\.1|0\.0\.0\.0|\[::1\])(?::\d+)?\b/i,
+  /\b(?:10|127)\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/,
+  /\b192\.168\.\d{1,3}\.\d{1,3}\b/,
+  /\b172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}\b/
+];
+function hasShareabilitySensitiveText(text) {
+  try {
+    if (sanitizeDiagnosticText(text) !== text)
+      return true;
+    return SHAREABILITY_SENSITIVE_PATTERNS.some((pattern) => pattern.test(text));
+  } catch {
+    return true;
+  }
+}
+
 // src/features/magic-context/fail-closed-block.ts
 var FAIL_CLOSED_DOCTOR_COMMAND = "npx @cortexkit/magic-context@latest doctor";
 var FAIL_CLOSED_REPROBE_EVERY_N = 5;
+function attachFailClosedBlockingProcessEvidence(process2, evidence) {
+  Object.defineProperties(process2, {
+    startTime: { configurable: true, value: evidence.startTime },
+    commandLine: { configurable: true, value: evidence.commandLine }
+  });
+  return process2;
+}
 
 class FailClosedBlockingError extends Error {
   code = "FAIL_CLOSED_BLOCKING";
@@ -423,6 +577,7 @@ function isMagicContextHiddenAgentName(agent) {
   return false;
 }
 var MAX_FORMATTED_BLOCKING_PROCESSES = 8;
+var MAX_FORMATTED_COMMAND_LINE_LENGTH = 80;
 function normalizeFailClosedProcessKind(process2) {
   switch (process2.kind) {
     case "OpenCode server":
@@ -445,13 +600,61 @@ function normalizeFailClosedProcessKind(process2) {
       return "process";
   }
 }
+function formatFailClosedProcessStartTime(startTime) {
+  if (!Number.isFinite(startTime) || startTime <= 0)
+    return "unverified";
+  try {
+    const parts = new Intl.DateTimeFormat("en-US", {
+      day: "numeric",
+      hour: "2-digit",
+      minute: "2-digit",
+      month: "short",
+      hour12: false
+    }).formatToParts(new Date(startTime));
+    const values = Object.fromEntries(parts.map(({ type, value }) => [type, value]));
+    if (!values.month || !values.day || !values.hour || !values.minute)
+      return "unverified";
+    return `${values.month} ${values.day} ${values.hour}:${values.minute}`;
+  } catch {
+    return "unverified";
+  }
+}
+function formatFailClosedCommandLine(commandLine) {
+  if (typeof commandLine !== "string" || commandLine.trim().length === 0)
+    return "unverified";
+  try {
+    const normalized = commandLine.replaceAll("\x00", " ").replace(/\s+/g, " ").trim();
+    if (normalized.length === 0)
+      return "unverified";
+    const sanitized = sanitizeDiagnosticText(normalized).trim();
+    if (sanitized.length === 0)
+      return "unverified";
+    return sanitized.length > MAX_FORMATTED_COMMAND_LINE_LENGTH ? `${sanitized.slice(0, MAX_FORMATTED_COMMAND_LINE_LENGTH - 3)}...` : sanitized;
+  } catch {
+    return "unverified";
+  }
+}
 function formatFailClosedBlockingProcesses(processes) {
   const uniqueProcesses = new Map;
   for (const process2 of processes) {
     if (!Number.isInteger(process2.pid) || process2.pid <= 0)
       continue;
-    const kind = normalizeFailClosedProcessKind(process2);
-    uniqueProcesses.set(`${kind}\x00${process2.pid}`, { kind, pid: process2.pid });
+    const candidate = {
+      kind: normalizeFailClosedProcessKind(process2),
+      pid: process2.pid,
+      startTime: process2.startTime,
+      commandLine: process2.commandLine
+    };
+    const previous = uniqueProcesses.get(process2.pid);
+    if (!previous || previous.kind === "process" && candidate.kind !== "process") {
+      uniqueProcesses.set(process2.pid, candidate);
+    } else {
+      uniqueProcesses.set(process2.pid, {
+        ...previous,
+        startTime: previous.startTime ?? candidate.startTime,
+        commandLine: previous.commandLine ?? candidate.commandLine
+      });
+    }
   }
   const entries = [...uniqueProcesses.values()];
   const visible = entries.slice(0, MAX_FORMATTED_BLOCKING_PROCESSES);
@@ -461,10 +664,12 @@ function formatFailClosedBlockingProcesses(processes) {
     rendered.push(`${omitted} more blocking process(es)`);
   if (rendered.length === 0)
     return "a live process";
-  if (rendered.length === 1)
-    return rendered[0];
-  const last = rendered.pop();
-  return `${rendered.join(", ")}, and ${last}`;
+  const summary = rendered.length === 1 ? rendered[0] : `${rendered.slice(0, -1).join(", ")}, and ${rendered.at(-1)}`;
+  const evidence = entries.map(({ kind, pid, startTime, commandLine }) => `- PID ${pid}: ${kind}, started ${formatFailClosedProcessStartTime(startTime)}, cmd: ${formatFailClosedCommandLine(commandLine)}`).join(`
+`);
+  return `${summary}
+Blocking process evidence:
+${evidence}`;
 }
 function formatFailClosedBlockingMessage(reason) {
   if (reason.kind === "migration_guard") {
@@ -687,6 +892,17 @@ function readPsProcessStartTime(pid) {
     return null;
   }
 }
+function readProcessStartTime(pid) {
+  if (!Number.isInteger(pid) || pid <= 0)
+    return null;
+  return rpcIdentityPlatform === "linux" ? readLinuxProcessStartTime(pid) : rpcIdentityPlatform === "win32" ? null : readPsProcessStartTime(pid);
+}
+function readProcessProbeEvidence(pid) {
+  return {
+    startTime: readProcessStartTime(pid),
+    commandLine: readProcessCommand(pid)
+  };
+}
 function parseCsvLine(line) {
   const fields = [];
   let field = "";
@@ -819,16 +1035,16 @@ function commandLooksLikeOpenCode(command) {
   const normalized = command.toLowerCase();
   return OPEN_CODE_COMMAND_MARKERS.some((marker) => normalized.includes(marker));
 }
-function isPidIdentityPlausible(record) {
+function isPidIdentityPlausible(record, evidence) {
   if (!Number.isInteger(record.pid) || record.pid <= 0)
     return "implausible";
   if (Number.isFinite(record.started_at) && record.started_at > 0) {
-    const processStartTime = rpcIdentityPlatform === "linux" ? readLinuxProcessStartTime(record.pid) : rpcIdentityPlatform === "win32" ? null : readPsProcessStartTime(record.pid);
+    const processStartTime = evidence ? evidence.startTime : readProcessStartTime(record.pid);
     if (processStartTime === null)
       return "inconclusive";
     return processStartTime <= record.started_at + RPC_IDENTITY_SKEW_TOLERANCE_MS ? "plausible" : "implausible";
   }
-  const command = rpcIdentityPlatform === "linux" ? readLinuxProcessCommand(record.pid) : rpcIdentityPlatform === "win32" ? readWindowsProcess(record.pid).command ?? null : readPsProcessCommand(record.pid);
+  const command = evidence ? evidence.commandLine : rpcIdentityPlatform === "linux" ? readLinuxProcessCommand(record.pid) : rpcIdentityPlatform === "win32" ? readWindowsProcess(record.pid).command ?? null : readPsProcessCommand(record.pid);
   if (command === null)
     return "inconclusive";
   return commandLooksLikeOpenCode(command) ? "plausible" : "implausible";
@@ -2407,7 +2623,7 @@ var CATEGORY_DEFAULT_TTL = {
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { createHash as createHash3 } from "node:crypto";
 import { existsSync, realpathSync, statSync } from "node:fs";
-import { homedir } from "node:os";
+import { homedir as homedir2 } from "node:os";
 import path from "node:path";
 var GIT_TIMEOUT_MS = 5000;
 var TRANSIENT_FAILURE_COOLDOWN_MS = 5 * 60 * 1000;
@@ -2421,7 +2637,7 @@ var dubiousOwnershipLoggedDirectories = new Set;
 var dubiousOwnershipWarnedDirectories = new Set;
 var transientGitIdentityReuseLoggedDirectories = new Set;
 var execFileSyncForIdentity = execFileSync2;
-var userHomeDirectoryForIdentity = () => homedir();
+var userHomeDirectoryForIdentity = () => homedir2();
 var nowMs = () => Date.now();
 
 class ProjectIdentityError extends Error {
@@ -5308,7 +5524,7 @@ import { createHash as createHash5 } from "node:crypto";
 // src/hooks/magic-context/read-session-formatting.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, realpathSync as realpathSync2 } from "node:fs";
 import { createRequire } from "node:module";
-import { homedir as homedir2 } from "node:os";
+import { homedir as homedir3 } from "node:os";
 import { dirname, join as join2, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 
@@ -5425,7 +5641,7 @@ var tokenizerLoadPromise;
 var tokenizerWarningSent = false;
 function tokenizerPackageRoots() {
   const cwd = process.cwd();
-  const openCodeCache = join2(process.env.XDG_CACHE_HOME ?? join2(homedir2(), ".cache"), "opencode");
+  const openCodeCache = join2(process.env.XDG_CACHE_HOME ?? join2(homedir3(), ".cache"), "opencode");
   const roots = [cwd, openCodeCache];
   const candidates = [];
   for (const root of roots) {
@@ -6159,8 +6375,8 @@ function classifyDiscoveryRecordKind(record) {
   }
   return null;
 }
-function classifyRpcProcess(record) {
-  return classifyDiscoveryRecordKind(record) ?? classifyProcessKind(readProcessCommand(record.pid));
+function classifyRpcProcess(record, commandLine) {
+  return classifyDiscoveryRecordKind(record) ?? classifyProcessKind(commandLine === undefined ? readProcessProbeEvidence(record.pid).commandLine : commandLine);
 }
 function classifyJunkDiscovery(portFile, raw, staleFiles) {
   let mtimeMs;
@@ -6237,18 +6453,23 @@ function inspectRpcServerDiscovery(storageDir) {
       continue;
     }
     const liveness = isPidAlive(record.pid);
-    const identity = liveness === "dead" ? "implausible" : isPidIdentityPlausible(record);
-    if (liveness === "alive" && identity === "plausible") {
+    if (liveness === "dead") {
+      staleFiles.push(portFile);
+      continue;
+    }
+    const evidence = readProcessProbeEvidence(record.pid);
+    const identity = isPidIdentityPlausible(record, evidence);
+    if (identity === "plausible") {
       pids.add(record.pid);
-      const detected = {
-        kind: classifyRpcProcess(record),
+      const detected = attachFailClosedBlockingProcessEvidence({
+        kind: classifyRpcProcess(record, evidence.commandLine),
         pid: record.pid
-      };
+      }, evidence);
       const previous = processByPid.get(record.pid);
       if (!previous || previous.kind === "process" && detected.kind !== "process") {
         processByPid.set(record.pid, detected);
       }
-    } else if (liveness === "dead" || identity === "implausible") {
+    } else if (identity === "implausible") {
       staleFiles.push(portFile);
     } else {
       inconclusivePids.add(record.pid);
@@ -6281,6 +6502,9 @@ function inspectRpcServerDiscovery(storageDir) {
   }
   return { state: "stale", serverPids: [], staleFiles };
 }
+function createPiBlockingProcess(pid) {
+  return attachFailClosedBlockingProcessEvidence({ kind: "Pi", pid }, readProcessProbeEvidence(pid));
+}
 function formatInconclusiveOpenCodeMigrationWarning(dbPath, pids) {
   return `[magic-context] storage warning: continuing migration for ${dbPath}; OpenCode server PID ${pids.join(", ")} was not confirmed because its liveness or identity check could not run. This commonly means an OS sandbox denied kill(0) or ps. No live OpenCode server was confirmed.`;
 }
@@ -6322,10 +6546,7 @@ function enforceMigrationOnOpenGuard(db, dbPath, dbDir, latestSupportedVersion)
   const piDiscovery = inspectLivePiProcesses();
   const piPids = migrationBlockingPiPids(dbPath, discovery, piDiscovery.processIds);
   const serverProcesses = discovery.serverProcesses ?? (discovery.state === "live" ? discovery.serverPids.map((pid) => ({ kind: "process", pid })) : []);
-  const blockingProcesses = [
-    ...serverProcesses,
-    ...piPids.map((pid) => ({ kind: "Pi", pid }))
-  ];
+  const blockingProcesses = [...serverProcesses, ...piPids.map(createPiBlockingProcess)];
   if ((discovery.state === "absent" || discovery.state === "stale" || discovery.state === "inconclusive") && piPids.length === 0) {
     lastMigrationOnOpenRefusal = null;
     logInconclusiveMigrationProbes(dbPath, discovery, piDiscovery.state);
@@ -6930,8 +7151,6 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       updated_at INTEGER NOT NULL,
       harness TEXT NOT NULL DEFAULT 'opencode'
     );
-    CREATE INDEX IF NOT EXISTS idx_message_history_index_orphan_sweep
-      ON message_history_index(harness, session_id, updated_at);
 
     CREATE TABLE IF NOT EXISTS message_history_source (
       session_id TEXT NOT NULL,
@@ -7518,6 +7737,10 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
   ensureColumn(db, "recomp_compartments", "harness", "TEXT NOT NULL DEFAULT 'opencode'");
   ensureColumn(db, "recomp_facts", "harness", "TEXT NOT NULL DEFAULT 'opencode'");
   ensureColumn(db, "message_history_index", "harness", "TEXT NOT NULL DEFAULT 'opencode'");
+  db.exec(`
+      CREATE INDEX IF NOT EXISTS idx_message_history_index_orphan_sweep
+        ON message_history_index(harness, session_id, updated_at);
+    `);
   ensureColumn(db, "workspaces", "share_categories", `TEXT NOT NULL DEFAULT '["CONSTRAINTS"]'`);
 }
 var CHANNEL2_CLAIM_TTL_MS = 10 * 60000;
@@ -14380,15 +14603,15 @@ import {
   unlinkSync as unlinkSync2,
   writeFileSync
 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
+import { homedir as homedir4 } from "node:os";
 import { basename as basename2, dirname as dirname3, isAbsolute, join as join5 } from "node:path";
 var CONFIG_FILE_BASENAME = "magic-context";
 var MOVED_MARKER_SUFFIX = ".MOVED_READPLEASE";
 function homeDir() {
   if (process.platform === "win32") {
-    return process.env.USERPROFILE || process.env.HOME || homedir3();
+    return process.env.USERPROFILE || process.env.HOME || homedir4();
   }
-  return process.env.HOME || homedir3();
+  return process.env.HOME || homedir4();
 }
 function configHome() {
   const xdg = process.env.XDG_CONFIG_HOME;
@@ -16927,7 +17150,7 @@ function countSessionCompartmentEmbedCoverage(db, projectPath, sessionId, modelI
 import { createHash as createHash14, randomUUID as randomUUID2 } from "node:crypto";
 
 // src/config/schema/magic-context.ts
-import { homedir as homedir4 } from "node:os";
+import { homedir as homedir5 } from "node:os";
 
 // ../../node_modules/.bun/zod@4.4.3/node_modules/zod/v4/classic/external.js
 var exports_external = {};
@@ -17554,7 +17777,7 @@ __export(exports_util, {
   createTransparentProxy: () => createTransparentProxy,
   defineLazy: () => defineLazy,
   esc: () => esc,
-  escapeRegex: () => escapeRegex,
+  escapeRegex: () => escapeRegex2,
   explicitlyAborted: () => explicitlyAborted,
   extend: () => extend,
   finalizeIssue: () => finalizeIssue,
@@ -17831,7 +18054,7 @@ var primitiveTypes = /* @__PURE__ */ new Set([
   "symbol",
   "undefined"
 ]);
-function escapeRegex(str) {
+function escapeRegex2(str) {
   return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone(inst, def, params) {
@@ -18541,7 +18764,7 @@ function emoji() {
 var ipv4 = /^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/;
 var ipv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))$/;
 var mac = (delimiter) => {
-  const escapedDelim = escapeRegex(delimiter ?? ":");
+  const escapedDelim = escapeRegex2(delimiter ?? ":");
   return new RegExp(`^(?:[0-9A-F]{2}${escapedDelim}){5}[0-9A-F]{2}$|^(?:[0-9a-f]{2}${escapedDelim}){5}[0-9a-f]{2}$`);
 };
 var cidrv4 = /^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\/([0-9]|[1-2][0-9]|3[0-2])$/;
@@ -19042,7 +19265,7 @@ var $ZodCheckUpperCase = /* @__PURE__ */ $constructor("$ZodCheckUpperCase", (ins
 });
 var $ZodCheckIncludes = /* @__PURE__ */ $constructor("$ZodCheckIncludes", (inst, def) => {
   $ZodCheck.init(inst, def);
-  const escapedRegex = escapeRegex(def.includes);
+  const escapedRegex = escapeRegex2(def.includes);
   const pattern = new RegExp(typeof def.position === "number" ? `^.{${def.position}}${escapedRegex}` : escapedRegex);
   def.pattern = pattern;
   inst._zod.onattach.push((inst2) => {
@@ -19066,7 +19289,7 @@ var $ZodCheckIncludes = /* @__PURE__ */ $constructor("$ZodCheckIncludes", (inst,
 });
 var $ZodCheckStartsWith = /* @__PURE__ */ $constructor("$ZodCheckStartsWith", (inst, def) => {
   $ZodCheck.init(inst, def);
-  const pattern = new RegExp(`^${escapeRegex(def.prefix)}.*`);
+  const pattern = new RegExp(`^${escapeRegex2(def.prefix)}.*`);
   def.pattern ?? (def.pattern = pattern);
   inst._zod.onattach.push((inst2) => {
     const bag = inst2._zod.bag;
@@ -19089,7 +19312,7 @@ var $ZodCheckStartsWith = /* @__PURE__ */ $constructor("$ZodCheckStartsWith", (i
 });
 var $ZodCheckEndsWith = /* @__PURE__ */ $constructor("$ZodCheckEndsWith", (inst, def) => {
   $ZodCheck.init(inst, def);
-  const pattern = new RegExp(`.*${escapeRegex(def.suffix)}$`);
+  const pattern = new RegExp(`.*${escapeRegex2(def.suffix)}$`);
   def.pattern ?? (def.pattern = pattern);
   inst._zod.onattach.push((inst2) => {
     const bag = inst2._zod.bag;
@@ -20736,7 +20959,7 @@ var $ZodEnum = /* @__PURE__ */ $constructor("$ZodEnum", (inst, def) => {
   const values = getEnumValues(def.entries);
   const valuesSet = new Set(values);
   inst._zod.values = valuesSet;
-  inst._zod.pattern = new RegExp(`^(${values.filter((k) => propertyKeyTypes.has(typeof k)).map((o) => typeof o === "string" ? escapeRegex(o) : o.toString()).join("|")})$`);
+  inst._zod.pattern = new RegExp(`^(${values.filter((k) => propertyKeyTypes.has(typeof k)).map((o) => typeof o === "string" ? escapeRegex2(o) : o.toString()).join("|")})$`);
   inst._zod.parse = (payload, _ctx) => {
     const input = payload.value;
     if (valuesSet.has(input)) {
@@ -20758,7 +20981,7 @@ var $ZodLiteral = /* @__PURE__ */ $constructor("$ZodLiteral", (inst, def) => {
   }
   const values = new Set(def.values);
   inst._zod.values = values;
-  inst._zod.pattern = new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex(o) : o ? escapeRegex(o.toString()) : String(o)).join("|")})$`);
+  inst._zod.pattern = new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex2(o) : o ? escapeRegex2(o.toString()) : String(o)).join("|")})$`);
   inst._zod.parse = (payload, _ctx) => {
     const input = payload.value;
     if (values.has(input)) {
@@ -21123,7 +21346,7 @@ var $ZodTemplateLiteral = /* @__PURE__ */ $constructor("$ZodTemplateLiteral", (i
       const end = source.endsWith("$") ? source.length - 1 : source.length;
       regexParts.push(source.slice(start, end));
     } else if (part === null || primitiveTypes.has(typeof part)) {
-      regexParts.push(escapeRegex(`${part}`));
+      regexParts.push(escapeRegex2(`${part}`));
     } else {
       throw new Error(`Invalid template literal part: ${part}`);
     }
@@ -31492,6 +31715,37 @@ var DreamerPiHarnessBlockSchema = exports_external.object({
   thinking_level: PiThinkingLevelSchema.describe("Pi thinking level for the primary entry when it declares none. Fallback entries declare thinking levels per-entry."),
   tasks: exports_external.record(exports_external.string(), PiTaskExecutionSchema).optional().describe("Pi task execution overrides. Each named task accepts only model, fallback_models, thinking_level, and timeout_minutes.")
 }).strict().describe("Strict Pi dreamer model-resolution block. It accepts no OpenCode vocabulary.");
+var ProfileOpenCodeModelBlockSchema = exports_external.object({
+  model: OcEntrySchema.optional().describe("Primary OpenCode model entry."),
+  fallback_models: exports_external.array(OcEntrySchema).optional().describe("Ordered fallback OpenCode model entries."),
+  variant: exports_external.string().optional().describe("OpenCode reasoning variant for the primary model entry.")
+}).strict().describe("Strict profile-only OpenCode model-selection block.");
+var ProfilePiModelBlockSchema = exports_external.object({
+  model: PiEntrySchema.optional().describe("Primary Pi model entry."),
+  fallback_models: exports_external.array(PiEntrySchema).optional().describe("Ordered fallback Pi model entries."),
+  thinking_level: PiThinkingLevelSchema.describe("Pi thinking level for the primary model entry.")
+}).strict().describe("Strict profile-only Pi model-selection block.");
+var ProfileHistorianSchema = exports_external.object({
+  opencode: ProfileOpenCodeModelBlockSchema.optional(),
+  pi: ProfilePiModelBlockSchema.optional()
+}).strict();
+var ProfileDreamerSchema = exports_external.object({
+  opencode: ProfileOpenCodeModelBlockSchema.optional(),
+  pi: ProfilePiModelBlockSchema.optional()
+}).strict();
+var ProfileSidekickSchema = AgentOverrideConfigSchema.pick({
+  model: true,
+  fallback_models: true,
+  variant: true
+}).extend({
+  thinking_level: PiThinkingLevelSchema.describe("Pi thinking level for the sidekick model selection.")
+}).strict();
+var ConfigProfileSchema = exports_external.object({
+  historian: ProfileHistorianSchema.optional(),
+  dreamer: ProfileDreamerSchema.optional(),
+  sidekick: ProfileSidekickSchema.optional()
+}).strict().describe("User-owned model-selection overlay. Only historian/dreamer harness model blocks and sidekick model-selection fields are allowed.");
+var ConfigProfilesSchema = exports_external.record(exports_external.string().trim().min(1, "Profile names must not be empty or whitespace-only."), ConfigProfileSchema);
 var CronScheduleSchema = exports_external.string().refine((s) => s.trim() === "" || isValidCron(s), {
   message: 'Invalid schedule: use a 5-field cron expression (e.g. "0 3 * * *" for 3am daily, "0 3 * * 0" for Sunday 3am, "0 */6 * * *" every 6h) or "" to disable.'
 }).describe('5-field cron schedule (e.g. "0 3 * * *"), or "" to disable this task.');
@@ -31579,9 +31833,9 @@ var EmbeddingFallbackProviderSchema = exports_external.enum(["local", "openai-co
 function expandConfigPath(value) {
   const trimmed = value.trim();
   if (trimmed === "~")
-    return homedir4();
+    return homedir5();
   if (trimmed.startsWith("~/"))
-    return `${homedir4()}/${trimmed.slice(2)}`;
+    return `${homedir5()}/${trimmed.slice(2)}`;
   return trimmed;
 }
 var BaseEmbeddingConfigSchema = exports_external.object({
@@ -31682,6 +31936,8 @@ var MagicContextConfigSchema = exports_external.object({
   transform_mode: exports_external.enum(["ts", "rust"]).default("ts").describe('Experimental: routes the entire Magic Context runtime for the project through the ck-mc Rust module over subc (requires user-level `subc` config); "ts" is the current TypeScript pipeline.'),
   auto_update: exports_external.boolean().optional().describe("Enable automatic npm self-update checks for the OpenCode plugin. Security: USER-only in config loader, so hostile project configs cannot suppress updates."),
   language: exports_external.string().trim().toLowerCase().refine((s) => isValidLanguageCode(s), 'language must be a 2-letter ISO 639-1 code (e.g. "tr", "es", "de")').optional().describe("Output language for Magic Context's generated content and guidance, as a " + '2-letter ISO 639-1 code (e.g. "tr", "es", "de", "ja", "pt"). When set, the ' + "historian, dreamer, sidekick, and the agent-guidance block instruct the model to " + "write its PROSE in this language while keeping all structural tokens (XML tags, " + "the five memory category names, code identifiers, file paths) in English. " + "USER-LEVEL ONLY (ignored in project config for security). Unset = today's " + "behavior (model mirrors the conversation; English scaffolding). Changing it " + "triggers one cache re-materialization; existing compartments/memories keep their " + "original language until naturally rewritten."),
+  profile: exports_external.string().trim().min(1).optional().describe("Select a named user-owned model profile. A valid project name overrides this user default; an empty string, null, or other non-string project value is ignored with a warning so the user selection still applies. Unknown names warn and use the base configuration."),
+  profiles: ConfigProfilesSchema.optional().describe("User-level named model profiles. A profile may contain only historian/dreamer model, fallback_models, OpenCode variant, and Pi thinking_level fields plus sidekick model-selection fields; task execution policy (including timeout_minutes) is excluded. Project configs may select a name but cannot define profiles."),
   historian: HistorianConfigSchema.describe("Historian metadata plus independent strict OpenCode and Pi execution blocks. Retained metadata stays at historian; model, fallback_models, variant, and thinking_level belong only in historian.opencode or historian.pi."),
   dreamer: DreamerConfigSchema.optional().describe("Dreamer metadata and scheduling plus independent strict OpenCode and Pi execution blocks. schedule and promotion_threshold stay at dreamer.tasks; model, fallback_models, variant, thinking_level, and timeout_minutes belong only in the matching harness block."),
   smart_notes: exports_external.object({
@@ -32098,6 +32354,25 @@ function releaseGitSweepLease(db, projectPath, holderId) {
   });
 }
 
+// src/features/magic-context/memory/embedding-failure.ts
+function dominantEmbeddingFailure(failures) {
+  const counts = new Map;
+  for (const failure of failures) {
+    const key = `${failure.class}\x00${failure.reason}`;
+    const current = counts.get(key);
+    if (current)
+      current.count += 1;
+    else
+      counts.set(key, { failure, count: 1 });
+  }
+  let dominant;
+  for (const candidate of counts.values()) {
+    if (!dominant || candidate.count > dominant.count)
+      dominant = candidate;
+  }
+  return dominant?.failure;
+}
+
 // src/features/magic-context/memory/embedding-synapse.ts
 import { createHash as createHash13 } from "node:crypto";
 
@@ -34046,33 +34321,123 @@ function startLockHeartbeat(lockPath) {
   timer.unref?.();
   return () => clearInterval(timer);
 }
-async function injectWasmOrtForElectron() {
-  if (typeof process === "undefined" || !process.versions?.electron) {
+var localEmbeddingRuntimeMode = "native";
+var wasmRuntimeInjected = false;
+var isElectronForRuntime = () => typeof process !== "undefined" && Boolean(process.versions?.electron);
+var importWasmOrtForRuntime = async () => {
+  const ortWebSpec = `onnxruntime-${"web"}`;
+  return await import(ortWebSpec);
+};
+var importTransformersForRuntime = async () => {
+  const transformersSpec = "@huggingface/transformers";
+  return await import(transformersSpec);
+};
+var importTransformersWasmFallbackForRuntime = async () => {
+  const { createRequire: createRequireFn } = await import("node:module");
+  const requireFn = createRequireFn(import.meta.url);
+  const nodeEntry = requireFn.resolve("@huggingface/transformers");
+  const webEntry = pathToFileURL2(join6(dirname5(nodeEntry), "transformers.web.js")).href;
+  return await import(webEntry);
+};
+var modelCacheDirForRuntime = () => join6(getMagicContextStorageDir(), "models");
+var logForRuntime = log;
+var injectWasmOrtForRuntime = injectWasmOrt;
+async function ensureWasmOrtInjected() {
+  if (wasmRuntimeInjected)
+    return true;
+  if (!await injectWasmOrtForRuntime())
     return false;
-  }
+  wasmRuntimeInjected = true;
+  return true;
+}
+async function injectWasmOrt() {
+  if (wasmRuntimeInjected)
+    return true;
   try {
-    const ortWebSpec = `onnxruntime-${"web"}`;
-    const ortWeb = await import(ortWebSpec);
+    const ortWeb = await importWasmOrtForRuntime();
     try {
       const { createRequire: createRequireFn } = await import("node:module");
       const requireFn = createRequireFn(import.meta.url);
       const mainEntry = requireFn.resolve("onnxruntime-web");
       const distDir = dirname5(mainEntry);
-      const wasmPathsPrefix = `${pathToFileURL2(distDir).href}/`;
       if (ortWeb.env?.wasm) {
-        ortWeb.env.wasm.wasmPaths = wasmPathsPrefix;
+        ortWeb.env.wasm.wasmPaths = `${pathToFileURL2(distDir).href}/`;
       }
     } catch (pathError) {
       log("[magic-context] could not resolve local onnxruntime-web/dist, falling back to default WASM paths:", pathError instanceof Error ? pathError.message : String(pathError));
     }
     globalThis[Symbol.for("onnxruntime")] = ortWeb;
-    log("[magic-context] Electron detected — using onnxruntime-web (WASM) for embeddings (bypasses onnxruntime-node native load)");
+    wasmRuntimeInjected = true;
     return true;
   } catch (error51) {
-    log("[magic-context] failed to inject onnxruntime-web for Electron — letting transformers fall back to native:", error51 instanceof Error ? error51.message : String(error51));
+    log("[magic-context] failed to inject onnxruntime-web:", error51 instanceof Error ? error51.message : String(error51));
     return false;
   }
 }
+function likelyMuslHint() {
+  if (process.platform !== "linux" || typeof process.report?.getReport !== "function")
+    return "";
+  try {
+    const report = process.report.getReport();
+    return typeof report.header?.glibcVersionRuntime === "string" ? "" : " Linux process report has no glibc runtime version (musl likely).";
+  } catch {
+    return "";
+  }
+}
+function localEmbeddingRuntimeIsDisabled() {
+  return localEmbeddingRuntimeMode === "disabled";
+}
+function disableLocalEmbeddingsAfterRuntimeFailure(detail) {
+  localEmbeddingRuntimeMode = "disabled";
+  logForRuntime(`[magic-context] local embeddings are disabled because both the onnxruntime-node native binding and the onnxruntime-web (WASM) fallback failed to load. Native failure: ${detail}. Run \`npx @cortexkit/magic-context@latest doctor\` for repair guidance (use \`doctor --force\` to reinstall cached plugin packages), or configure an \`openai-compatible\` embedding HTTP endpoint. Existing memories are unaffected.`);
+}
+async function loadTransformersForLocalEmbedding() {
+  if (localEmbeddingRuntimeMode === "disabled") {
+    throw new Error("local embedding runtime is disabled");
+  }
+  if (localEmbeddingRuntimeMode === "wasm") {
+    if (!await ensureWasmOrtInjected()) {
+      disableLocalEmbeddingsAfterRuntimeFailure("the previously selected WASM runtime is unavailable");
+      throw new Error("onnxruntime-web failed to load");
+    }
+    try {
+      return { module: await importTransformersWasmFallbackForRuntime(), usesWasm: true };
+    } catch (wasmError) {
+      disableLocalEmbeddingsAfterRuntimeFailure("the previously selected WASM runtime failed to load");
+      throw wasmError;
+    }
+  }
+  const electron = isElectronForRuntime();
+  if (electron) {
+    const wasInjected = wasmRuntimeInjected;
+    if (await ensureWasmOrtInjected()) {
+      if (!wasInjected) {
+        logForRuntime("[magic-context] Electron detected — using onnxruntime-web (WASM) for embeddings (bypasses onnxruntime-node native load)");
+      }
+      return { module: await importTransformersForRuntime(), usesWasm: true };
+    }
+  }
+  try {
+    return { module: await importTransformersForRuntime(), usesWasm: false };
+  } catch (nativeError) {
+    if (!isNativeRuntimeMissingError(nativeError) || electron) {
+      throw nativeError;
+    }
+    if (!await ensureWasmOrtInjected()) {
+      disableLocalEmbeddingsAfterRuntimeFailure(nativeError instanceof Error ? nativeError.message : String(nativeError));
+      throw nativeError;
+    }
+    localEmbeddingRuntimeMode = "wasm";
+    try {
+      const module = await importTransformersWasmFallbackForRuntime();
+      logForRuntime("[magic-context] onnxruntime-node failed to load; using onnxruntime-web (WASM) for local embeddings. WASM inference is slower than native; a remote `openai-compatible` provider may be faster." + likelyMuslHint());
+      return { module, usesWasm: true };
+    } catch (wasmError) {
+      disableLocalEmbeddingsAfterRuntimeFailure(nativeError instanceof Error ? nativeError.message : String(nativeError));
+      throw wasmError;
+    }
+  }
+}
 var DEFAULT_LOCAL_DTYPE = "fp32";
 async function withQuietConsole(fn) {
   const origWarn = console.warn;
@@ -34090,7 +34455,6 @@ async function withQuietConsole(fn) {
     console.error = origError;
   }
 }
-var nativeRuntimeMissing = false;
 function isNativeRuntimeMissingError(error51) {
   const message = error51 instanceof Error ? error51.message : String(error51 ?? "");
   const lower = message.toLowerCase();
@@ -34174,7 +34538,7 @@ class LocalEmbeddingProvider {
     if (this.pipeline) {
       return true;
     }
-    if (nativeRuntimeMissing) {
+    if (localEmbeddingRuntimeMode === "disabled") {
       return false;
     }
     if (this.initPromise) {
@@ -34186,15 +34550,13 @@ class LocalEmbeddingProvider {
         if (this.disposing) {
           return;
         }
-        const injectedWasmOrt = await injectWasmOrtForElectron();
-        const transformersSpec = "@huggingface/transformers";
-        const transformersModule = await import(transformersSpec);
+        const { module: transformersModule, usesWasm } = await loadTransformersForLocalEmbedding();
         const env = transformersModule.env;
         const LogLevel = transformersModule.LogLevel;
         if (LogLevel && "ERROR" in LogLevel) {
           env.logLevel = LogLevel.ERROR;
         }
-        const modelCacheDir = join6(getMagicContextStorageDir(), "models");
+        const modelCacheDir = modelCacheDirForRuntime();
         try {
           if (shouldEnforcePrivateStoragePermissions()) {
             mkdirSync3(modelCacheDir, { recursive: true, mode: 448 });
@@ -34221,7 +34583,7 @@ class LocalEmbeddingProvider {
             try {
               const pipeline = await withQuietConsole(() => createPipeline("feature-extraction", this.model, {
                 dtype: this.dtype,
-                ...injectedWasmOrt ? { device: "auto" } : {}
+                ...usesWasm ? { device: "auto" } : {}
               }));
               if (this.disposing) {
                 await pipeline.dispose?.();
@@ -34253,10 +34615,9 @@ class LocalEmbeddingProvider {
           await releaseLock();
         }
       } catch (error51) {
-        if (isNativeRuntimeMissingError(error51)) {
-          nativeRuntimeMissing = true;
-          log("[magic-context] local embeddings are disabled because the onnxruntime-node native binding is missing or failed to load. Run `npx @cortexkit/magic-context@latest doctor` for repair guidance (use `doctor --force` to reinstall cached plugin packages), or configure an `openai-compatible` embedding HTTP endpoint. Existing memories are unaffected.");
-        } else {
+        if (!localEmbeddingRuntimeIsDisabled() && isNativeRuntimeMissingError(error51)) {
+          disableLocalEmbeddingsAfterRuntimeFailure(error51 instanceof Error ? error51.message : String(error51));
+        } else if (!localEmbeddingRuntimeIsDisabled()) {
           log("[magic-context] embedding model failed to load:", error51);
         }
         this.pipeline = null;
@@ -34477,6 +34838,7 @@ class OpenAICompatibleEmbeddingProvider {
   circuitOpenUntil = 0;
   openLogged = false;
   modelMismatchLogged = false;
+  lastFailureReason = null;
   halfOpenProbeInFlight = false;
   constructor(options) {
     this.endpoint = normalizeEndpoint2(options.endpoint);
@@ -34566,41 +34928,59 @@ class OpenAICompatibleEmbeddingProvider {
         signal: internalController.signal
       });
       if (!response.ok) {
-        log(`[magic-context] openai-compatible embedding request failed: ${response.status} ${response.statusText}`);
-        this.recordFailure(isProbe);
+        const excerpt = await response.text().catch(() => "");
+        const failure = this.failure("http_error", `HTTP ${response.status} from endpoint${this.bodyExcerpt(excerpt)}`, response.status >= 500 || response.status === 408 || response.status === 429);
+        log(`[magic-context] openai-compatible embedding request failed: ${failure.reason}`);
+        this.recordFailure(isProbe, failure);
         return Array.from({ length: texts.length }, () => null);
       }
       const rawBody = await response.text();
       if (rawBody.trim().length === 0) {
-        log(`[magic-context] openai-compatible embedding request returned empty body (status=${response.status}, content-type=${response.headers.get("content-type") ?? "none"})`);
-        this.recordFailure(isProbe);
+        const failure = this.failure("invalid_envelope", "response body was empty", false);
+        log(`[magic-context] openai-compatible embedding request failed: ${failure.reason}`);
+        this.recordFailure(isProbe, failure);
         return Array.from({ length: texts.length }, () => null);
       }
       let body;
       try {
         body = JSON.parse(rawBody);
-      } catch (parseError) {
-        const snippet = rawBody.slice(0, 200).replace(/\s+/g, " ");
-        log(`[magic-context] openai-compatible embedding response was not JSON (status=${response.status}, ${rawBody.length}B body, snippet="${snippet}"):`, parseError instanceof Error ? parseError.message : parseError);
-        this.recordFailure(isProbe);
+      } catch {
+        const failure = this.failure("invalid_envelope", `response body was not valid JSON${this.bodyExcerpt(rawBody)}`, false);
+        log(`[magic-context] openai-compatible embedding request failed: ${failure.reason}`);
+        this.recordFailure(isProbe, failure);
         return Array.from({ length: texts.length }, () => null);
       }
       const servedModel = typeof body.model === "string" ? body.model : "";
       if (this.model && servedModel && !embeddingModelsMatch(servedModel, this.model)) {
         if (!this.modelMismatchLogged) {
-          log(`[magic-context] embedding endpoint served a DIFFERENT model than requested — refusing the substituted vectors (they have the wrong dimensions/space). requested="${this.model}" served="${servedModel}". Check that the endpoint serves the requested model; variant suffixes and vendor prefixes are matched automatically.`);
+          log(`[magic-context] embedding endpoint served a DIFFERENT model than requested — refusing the substituted vectors (they have the wrong dimensions/space). requested="${sanitizeDiagnosticText(this.model)}" served="${sanitizeDiagnosticText(servedModel)}". Check that the endpoint serves the requested model; variant suffixes and vendor prefixes are matched automatically.`);
           this.modelMismatchLogged = true;
         }
-        this.recordFailure(isProbe);
+        this.recordFailure(isProbe, this.failure("substitution_rejected", `served model '${sanitizeDiagnosticText(servedModel)}' does not match requested '${sanitizeDiagnosticText(this.model)}' (substitution guard)`, false));
+        return Array.from({ length: texts.length }, () => null);
+      }
+      const responseKeys = Object.keys(body).sort();
+      if (!Array.isArray(body.data)) {
+        const failure = this.failure("invalid_envelope", `response had keys [${responseKeys.join(", ")}] but data[] was absent`, false);
+        log(`[magic-context] openai-compatible embedding request failed: ${failure.reason}`);
+        this.recordFailure(isProbe, failure);
+        return Array.from({ length: texts.length }, () => null);
+      }
+      if (body.data.length === 0) {
+        const failure = this.failure("empty_result", "response data[] was empty", true);
+        log(`[magic-context] openai-compatible embedding request failed: ${failure.reason}`);
+        this.recordFailure(isProbe, failure);
         return Array.from({ length: texts.length }, () => null);
       }
-      const items = Array.isArray(body.data) ? body.data : [];
+      const items = body.data;
       const results = Array.from({ length: texts.length }, (_, index) => {
         const embedding = items[index]?.embedding;
         return Array.isArray(embedding) ? Float32Array.from(embedding) : null;
       });
       if (results.every((r) => r === null)) {
-        this.recordFailure(isProbe);
+        const failure = this.failure("invalid_envelope", `response had keys [${responseKeys.join(", ")}] but data[].embedding was absent`, false);
+        log(`[magic-context] openai-compatible embedding request failed: ${failure.reason}`);
+        this.recordFailure(isProbe, failure);
       } else {
         this.recordSuccess();
       }
@@ -34610,11 +34990,14 @@ class OpenAICompatibleEmbeddingProvider {
       if (isAbort) {
         if (signal?.aborted) {} else {
           log(`[magic-context] openai-compatible embedding request timed out after ${FETCH_TIMEOUT_MS}ms`);
-          this.recordFailure(isProbe);
+          const failure = this.failure("transport_error", `request timed out after ${FETCH_TIMEOUT_MS}ms`, true);
+          this.recordFailure(isProbe, failure);
         }
       } else {
-        log("[magic-context] openai-compatible embedding request failed:", error51);
-        this.recordFailure(isProbe);
+        const detail = error51 instanceof Error ? error51.message : String(error51);
+        const failure = this.failure("transport_error", `transport error: ${sanitizeDiagnosticText(detail)}`, true);
+        log(`[magic-context] openai-compatible embedding request failed: ${failure.reason}`);
+        this.recordFailure(isProbe, failure);
       }
       return Array.from({ length: texts.length }, () => null);
     } finally {
@@ -34646,14 +35029,23 @@ class OpenAICompatibleEmbeddingProvider {
       return "short_circuit";
     }
     this.halfOpenProbeInFlight = true;
-    log("[magic-context] openai-compatible embedding: circuit half-open, probing endpoint");
+    log(`[magic-context] openai-compatible embedding: circuit half-open, probing endpoint after ${this.lastFailureReason?.reason ?? "unknown failure"}`);
     return "probe";
   }
-  recordFailure(isProbe) {
+  failure(failureClass, reason, retryable) {
+    return { class: failureClass, reason, retryable };
+  }
+  bodyExcerpt(body) {
+    const excerpt = sanitizeDiagnosticText(body).replace(/\s+/g, " ").trim().slice(0, 200);
+    return excerpt ? `: ${excerpt}` : "";
+  }
+  recordFailure(isProbe, failure) {
+    if (failure)
+      this.lastFailureReason = failure;
     if (isProbe) {
       this.circuitOpenUntil = Date.now() + OPEN_DURATION_MS;
       if (!this.openLogged) {
-        log(`[magic-context] openai-compatible embedding: probe failed, re-opening circuit for ${OPEN_DURATION_MS / 60000}min`);
+        log(`[magic-context] openai-compatible embedding: probe failed (${failure?.reason ?? this.lastFailureReason?.reason ?? "unknown failure"}), re-opening circuit for ${OPEN_DURATION_MS / 60000}min`);
         this.openLogged = true;
       }
       this.failureTimes = [];
@@ -34666,7 +35058,7 @@ class OpenAICompatibleEmbeddingProvider {
     if (this.failureTimes.length >= FAILURE_THRESHOLD) {
       this.circuitOpenUntil = now + OPEN_DURATION_MS;
       if (!this.openLogged) {
-        log(`[magic-context] openai-compatible embedding: opening circuit for ${OPEN_DURATION_MS / 60000}min after ${this.failureTimes.length} failures in ${FAILURE_WINDOW_MS / 1000}s`);
+        log(`[magic-context] openai-compatible embedding: opening circuit for ${OPEN_DURATION_MS / 60000}min after ${this.failureTimes.length} failures in ${FAILURE_WINDOW_MS / 1000}s (${failure?.reason ?? this.lastFailureReason?.reason ?? "unknown failure"})`);
         this.openLogged = true;
       }
       this.failureTimes = [];
@@ -34679,6 +35071,10 @@ class OpenAICompatibleEmbeddingProvider {
     this.failureTimes = [];
     this.circuitOpenUntil = 0;
     this.openLogged = false;
+    this.lastFailureReason = null;
+  }
+  getLastFailureReason() {
+    return this.lastFailureReason;
   }
   _getCircuitState() {
     if (this.circuitOpenUntil === 0)
@@ -34696,6 +35092,7 @@ class OpenAICompatibleEmbeddingProvider {
     this.circuitOpenUntil = 0;
     this.openLogged = false;
     this.halfOpenProbeInFlight = false;
+    this.lastFailureReason = null;
   }
 }
 
@@ -35945,11 +36342,16 @@ async function drainCommitBacklogForProject(db, projectIdentity, deadline) {
   }
   return total;
 }
+function getLastEmbeddingFailureForProject(projectIdentity) {
+  const registration = projectRegistrations.get(projectIdentity);
+  return registration?.provider?.getLastFailureReason?.() ?? null;
+}
 async function embedCandidateChunkBatch(db, projectIdentity, modelId, candidates, signal) {
   const noWork = [];
   const failed = [];
+  const failureReasons = [];
   if (candidates.length === 0)
-    return { embedded: 0, noWork, failed };
+    return { embedded: 0, noWork, failed, failureReasons };
   const maxInputTokens = getProjectEmbeddingMaxInputTokens(projectIdentity);
   const prepared = [];
   for (const candidate of candidates) {
@@ -35966,7 +36368,7 @@ async function embedCandidateChunkBatch(db, projectIdentity, modelId, candidates
     prepared.push({ candidate, windows });
   }
   if (prepared.length === 0)
-    return { embedded: 0, noWork, failed };
+    return { embedded: 0, noWork, failed, failureReasons };
   let embedded = 0;
   let i = 0;
   while (i < prepared.length) {
@@ -35998,6 +36400,11 @@ async function embedCandidateChunkBatch(db, projectIdentity, modelId, candidates
       }
       if (signal?.aborted)
         break;
+      if (!result || result.vectors.size === 0) {
+        const failure = getLastEmbeddingFailureForProject(projectIdentity);
+        if (failure)
+          failureReasons.push(failure);
+      }
       if (result) {
         for (const item of slice) {
           if (persistedIds.has(item.candidate.id))
@@ -36039,7 +36446,7 @@ async function embedCandidateChunkBatch(db, projectIdentity, modelId, candidates
       }
     }
   }
-  return { embedded, noWork, failed };
+  return { embedded, noWork, failed, failureReasons };
 }
 async function embedSessionCompartmentChunks(db, projectIdentity, sessionId, options) {
   const snapshot2 = getProjectEmbeddingSnapshot(projectIdentity);
@@ -36077,6 +36484,7 @@ async function embedSessionCompartmentChunks(db, projectIdentity, sessionId, opt
   let aborted2 = false;
   let providerDown = false;
   let consecutiveFailedBatches = 0;
+  const failureReasons = [];
   try {
     options?.onProgress?.({ embedded, total });
     for (;; ) {
@@ -36090,7 +36498,8 @@ async function embedSessionCompartmentChunks(db, projectIdentity, sessionId, opt
       const {
         embedded: n,
         noWork,
-        failed
+        failed,
+        failureReasons: batchFailureReasons
       } = await embedCandidateChunkBatch(db, projectIdentity, snapshot2.chunkModelId, candidates, drainAbort.signal);
       if (leaseLost || !renewGitSweepLease(db, projectIdentity, holderId)) {
         leaseLost = true;
@@ -36098,6 +36507,7 @@ async function embedSessionCompartmentChunks(db, projectIdentity, sessionId, opt
         aborted2 = true;
         break;
       }
+      failureReasons.push(...batchFailureReasons);
       for (const id of noWork)
         skipIds.push(id);
       for (const id of failed)
@@ -36129,7 +36539,14 @@ async function embedSessionCompartmentChunks(db, projectIdentity, sessionId, opt
   if (providerDown || failedIds.length > 0) {
     const remaining = Math.max(0, countUnembeddedSessionCompartments(db, projectIdentity, sessionId, snapshot2.chunkModelId) - skipIds.length);
     if (remaining > 0) {
-      return { status: "stalled", embedded, total, remaining, failed: failedIds.length };
+      return {
+        status: "stalled",
+        embedded,
+        total,
+        remaining,
+        failed: failedIds.length,
+        failure: dominantEmbeddingFailure(failureReasons)
+      };
     }
   }
   return { status: "done", embedded, total, failed: failedIds.length };
@@ -40270,7 +40687,8 @@ function injectTemporalMarkers(messages) {
       continue;
     const msg = raw;
     const role = msg.info?.role;
-    if (prev !== null && role === "user") {
+    const authoredUser = role === "user" && Array.isArray(msg.parts) && hasMeaningfulUserText(msg.parts);
+    if (prev !== null && authoredUser) {
       const prevTime = prev.info?.time;
       const currTime = msg.info?.time;
       if (prevTime?.created !== undefined && currTime?.created !== undefined) {
@@ -41072,7 +41490,7 @@ function mustMaterialize(args) {
   }
   const liveToolSetHash = hard.toolSetHash ?? "";
   const toolSetHashComparison = liveToolSetHash !== "" ? {
-    m0ToolSetHashPrev: args.state.cachedM0ToolSetHash ?? "",
+    m0ToolSetHashPrev: args.state.cachedM0ToolSetHash,
     m0ToolSetHashNew: liveToolSetHash
   } : null;
   const withToolSetHashComparison = (decision) => toolSetHashComparison ? { ...decision, ...toolSetHashComparison } : decision;
@@ -46467,4 +46885,4 @@ async function runUpgradeMemoryMigration(ctx, sessionId, migrationDirectory) {
   }
 }
 
-export { withContentLanguageDirective, buildPrimaryLanguageDirective, cortexKitUserConfigBasePath, cortexKitProjectConfigBasePath, resolveLegacyConfigSources, resolveLegacyConfigSourcesForHarness, migrateMagicContextConfigLocations, exports_external, DEFAULT_PROTECTED_TAGS, parseCron, nextOccurrence, nextDueAtMs, promptSurfaceConfigIdentity, resolvePromptSurface, resolveModelConfigOrDefault, DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE, DEFAULT_HISTORIAN_TIMEOUT_MS, DEFAULT_LOCAL_EMBEDDING_MODEL, PER_HARNESS_MIGRATION_INVENTORY, MagicContextConfigSchema, getOpenCodeDbPath, removeMcOwnedCompactionMarkers, isFailClosedBlockingError, shouldBypassFailClosedBlock, resolveAgentNameFromMessages, createFailClosedController, recordHookInitFailure, clearHookInitFailure, getLastHookInitFailure, ProjectIdentityError, resolveProjectIdentityStrict, takeDubiousOwnershipProjectIdentityWarning, resolveProjectIdentity, resolveProjectIdentityForSession, normalizeStoredProjectPath, storedPathBelongsToIdentity, isLinkedGitWorktree, recordSessionProjectIdentity, beginBootQuietPeriod, bootQuietRemainingMs, scheduleAfterBootQuiet, rpcPortDir, rpcPortFilePath, isPidAlive, parseRpcPortFile, registerModuleNoteEvaluationBridge, getModuleNoteEvaluationBridge, getContextStoreUuid, ensureContextStoreUuid, getAuthorityManagedMarker, reconcileAuthorityProject, checksumAuthoritySeedRows, prepareAuthority, drainAuthority, getMirrorCursor, applyMirroredNoteCompileFields, applyMirrorPage, pullMemoryMirrorOnce, V2_MEMORY_CATEGORIES, CATEGORY_PRIORITY, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, resolveStoredPathWorkspaceIdentity, storedPathBelongsToWorkspace, sourceNameForMemory, computeWorkspaceEpochFingerprint, textMentionsRecentCommit, hasMeaningfulUserText, extractTexts, extractToolCallSummaries, preloadTokenizer, estimateTokens, normalizeText, getCurrentToolSetHash, recordToolDefinition, getMeasuredToolDefinitionTokens, getSchemaFenceRejection, getMigrationOnOpenRefusal, LATEST_SUPPORTED_VERSION, getDatabasePath, getPersistedSchemaVersion, setSqlitePragmaConfig, runSqliteOptimize, openDatabase, openDatabaseAsync, isDatabasePersisted, getDatabasePersistenceError, COMPARTMENT_LEASE_RENEWAL_MS, acquireCompartmentLease, renewCompartmentLease, releaseCompartmentLease, getCompartments, getLastCompartmentEndMessage, getLastCompartmentEndMessageId, clearRecompStaging, isRawCompactionSummaryInfo, extractInMemoryMessageViews, buildInMemoryTailRawMessages, isRecord, estimateTrueRawMessageTokens, invalidateTrueRawTokenCache, stripPersistedAssistantText, byteSize, stripTagPrefix, prependTag, isThinkingPart, isTextPart, isToolPartWithOutput, isFilePart, buildFileSourceContent, isEditTool, partHasCompletedResult, extractToolCallObservation, ToolMutationBatch, createToolDropTarget, setRawMessageProvider, cleanUserText, withRawSessionMessageCache, readRawSessionMessages, primeTailRawMessageCache, primeInMemoryTailRawMessageCache, readRawSessionMessageOrdinalPage, getRawSessionStoredMessageCount, readRawSessionMessagePartsById, readRawSessionMessageOrdinalById, readRawSessionMessageById, readSessionChunk, getMessageIndexSourceIdentity, isMessageIndexSourceCurrent, getLastIndexedOrdinal, getIndexedMessageCorpusSize, getMessageIndexReconciliationStartOrdinal, isMessageIndexReconciledThrough, deleteIndexedMessage, clearIndexedMessages, indexSingleMessage, indexMessagesAfterOrdinal, sweepOrphanedOpenCodeMessageIndexes, recordEmbeddingMeasurement, getMaxM0MutationId, queueMemoryMutation, getMemoryMutationsForRenderByProjects, getMaxMemoryMutationIdForProjects, MAX_EXECUTE_THRESHOLD, escalationBands, isEmergencyRecoveryArmed, isProviderOverflowReconfirmed, getEmergencyRecoveryArmedAt, loadPersistedUsage, loadProtectedTailMeta, resetProtectedTailNoEligibleHead, getWrapupInProgressState, acquireWrapupInProgress, updateWrapupInProgress, releaseWrapupInProgress, resolveCompactionModeRecord, getCompactionModeRecord, setCompactionModeRecord, getPersistedReasoningWatermark, setPersistedReasoningWatermark, clearPersistedReasoningWatermark, getEmergencyInputSample, setEmergencyDropSample, clearEmergencyDropSample, getLastNudgeUndropped, setLastNudgeUndropped, getChannel1NudgeState, setChannel1NudgeState, resetLastNudgeCycle, resetLastNudgeCycleIfTailShrank, getChannel2NudgeState, getChannel2NudgeClaim, setChannel2NudgeState, casChannel2NudgeState, claimChannel2NudgeState, casChannel2NudgeClaim, getPersistedNoteNudge, getNoteNudgeAnchors, getAutoSearchHintDecisions, appendAutoSearchHintDecision, pruneNoteNudgeAnchors, pruneAutoSearchHintDecisions, removeNoteNudgeAnchorByMessageId, removeAutoSearchHintDecisionByMessageId, getPersistedTodoPermissionDenied, setPersistedTodoPermissionDenied, getPersistedTodoSyntheticAnchor, setPersistedTodoSyntheticAnchor, clearPersistedTodoSyntheticAnchor, setNoteLastReadAt, getHistorianFailureState, clearHistorianFailureState, getOverflowState, recordOverflowDetected, recordDetectedContextLimit, clearEmergencyRecovery, clearDetectedContextLimit, getPersistedCompactionMarkerState, setPersistedCompactionMarkerState, getStrippedPlaceholderIds, applyStrippedPlaceholderDelta, removeStrippedPlaceholderId, getMergedReasoningStrippedIds, addMergedReasoningStrippedIds, getTrailingBlankDecisions, addTrailingBlankDecisions, getStaleReduceStrippedIds, addStaleReduceStrippedIds, getProcessedImageStrippedIds, addProcessedImageStrippedIds, getPendingCompactionMarkerState, clearPendingCompactionMarkerStateIf, peekDeferredExecutePending, setDeferredExecutePendingIfAbsent, clearDeferredExecutePendingIfMatches, getSessionsWithPendingMarker, setSessionWorkMetrics, getNotes, addNote, getSessionNotes, getPendingSmartNotes, getReadySmartNotes, updateNote, dismissNote, markNoteReady, markNoteChecked, queuePendingOp, getPendingOps, clearPendingOps, removePendingOp, PRIMER_CANDIDATE_TTL_MS, PRIMER_CANDIDATE_MAX_AGE_MS, primerOccurrenceKey, primerOccurrenceUtcDay, updatePrimerCandidateEmbedding, getPrimerCandidatesByIds, getPrimerCandidatesForPromotion, countPrimerCandidatesForProject, getActivePrimers, createPrimer, updatePrimerSupport, updatePrimerAnswer, GLOBAL_USER_PROFILE_PROJECT_PATH, getProjectState, bumpProjectMemoryEpoch, bumpProjectUserProfileVersion, saveSourceContent, replaceSourceContent, getSourceContents, CTX_REDUCE_KEEP, estimateImageTokensFromDataUrl, normalizeTodoStateJson, buildSyntheticTodoPart, computeSyntheticCallId, isSyntheticTodoPart, countRealUserMessages, tailHygieneStructuralSignature, sameTailHygieneStructuralSignature, refreshTailHygieneBaseline, effectiveTailHygiene, assertTailHygieneContentUnchanged, CHANNEL1_SENTINEL, CHANNEL1_FLOOR_TOKENS, toolOutputTokens, decideChannel1, evaluateChannel2, buildChannel2Reminder, shouldUseStickyChannel1Reminder, buildChannel1Reminder, estimateEmergencyDropReclaimTokens, planEmergencyDrop, AGE_RECLAIM_MIN_TOKENS, getOldestActiveUnprotectedToolTags, getActiveToolTagsForAgeReclaim, getTriggerTagTokenUpperBound, getActiveTagTokenTotalsByMessage, tagTokenCountIsNull, backfillTagTokenCounts, insertTag, updateTagStatus, updateTagDropMode, updateCavemanDepth, updateTagMessageId, deleteTagsByMessageId, getMaxTagNumberBySession, getTagNumberByMessageId, deriveTagLoadFloor, getTagsBySession, getActiveTagsBySession, getTailHygieneTags, getDroppedTagsBySession, getTagsByNumbers, getMaxDroppedTagNumber, getToolTagNumberByOwner, getNullOwnerToolTag, adoptNullOwnerToolTag, getCandidateToolOwners, pickNearestPriorOwner, createChildSessionWithFence, detectOverflow, resolveFallbackChain, modelBodyField, promptSyncWithValidatedOutputRetry, normalizeSDKResponse, promptSurfaceHashMaterial, createPromptSurfaceRuntime, createPromptSurfaceGuidanceEpochCache, extractLatestAssistantText, hasLengthCappedOutput, setKeepSubagents, shouldKeepSubagents, recordChildInvocation, COMPARTMENT_AGENT_SYSTEM_PROMPT, HISTORIAN_EDITOR_SYSTEM_PROMPT, COMPARTMENT_STRUCTURAL_SYSTEM_PROMPT, Priority, AdmissionClass, StaleRouteHandleError, SocketClosedError, SocketTimeoutError, SubcClient, isConsumerReconnectTransient, connectionFileExists, getCompartmentEvents, loadCompartmentChunkEmbeddingsForSearch, cosineSimilarity, SYNAPSE_DEFAULT_MODEL, SynapseEmbeddingProvider, computeNormalizedHash, saveCommitEmbedding, loadProjectCommitEmbeddings, loadUnembeddedCommits, countEmbeddedCommits, upsertCommits, getLatestIndexedCommitTimeMs, enforceProjectCap, GIT_SWEEP_LEASE_RENEWAL_MS, acquireGitSweepLease, renewGitSweepLease, markGitSweepSuccessAndRelease, parkGitSweepNonIndexable, releaseGitSweepLease, saveEmbeddingIfHashMatches, getProjectEmbeddings, peekProjectEmbeddings, invalidateProject, invalidateMemory, markProjectLoadUntrusted, contentSha256, sweepStaleEmbeddingIdentitiesForProject, registerProjectEmbedding, registerProjectShadowEmbedding, getShadowEmbeddingMeasurementCohort, getPrimaryEmbeddingMeasurementCohort, embedShadowTextForProject, enqueueShadowEmbeddingItems, registerProjectInObservationMode, getProjectEmbeddingSnapshot, embedTextForProject, embedBatchForProject, embedItemsForProject, embedUnembeddedMemoriesForProject, drainCommitBacklogForProject, embedSessionCompartmentChunks, getEmbeddingCoverageStatus, isEmbeddingEnabled, embedText, ensureMemoryEmbeddings, computeCueContentHash, hasMuralCueColumns, getMuralCueState, memoryNeedsCue, setMuralCue, recordMuralCueRejection, hasMemoryShareableColumn, hasMemoryClassifiedAtColumn, getUnclassifiedMemoryIds, ModuleMemoryAuthorityError, insertMemory, insertMemoryIdempotent, getMemoryByHash, getMemoriesByProject, buildWorkspaceMemorySqlFilter, getMemoriesByProjects, getMaxMemoryIdForProjects, readNewMemoriesForM1Union, getMemoryById, getMemoriesByIds, updateMemorySeenCount, updateMemoryRetrievalCount, setMemoryClassification, supersededMemory, mergeMemoryStats, archiveMemory, getMemoryCountsByStatus, sanitizeFtsQuery, searchMemoriesFTS, searchMemoriesFTSUnion, recordMemoryMapping, recordMemoryVerifications, getUnmappedMemoryIds, clearMemoryVerifications, getMemoryVerifications, resolveGitTopLevel, readGitHead, readGitChangedFilesSince, readGitFileChangeTimesSince, verificationFileExists, normalizeVerificationFiles, USER_MEMORY_CANDIDATE_TTL_MS, insertUserMemoryCandidates, getUserMemoryCandidates, deleteUserMemoryCandidates, pruneExpiredUserMemoryCandidates, insertUserMemory, getActiveUserMemories, updateUserMemoryContent, dismissUserMemory, getMural, BoundedSessionMap, registerLkgPersistence, LKG_SNAPSHOT_ARRAY, LKG_SNAPSHOT_OBJECT, LKG_SNAPSHOT_KEY, LKG_SNAPSHOT_STRING, LKG_SNAPSHOT_NUMBER, LKG_SNAPSHOT_BOOLEAN, LKG_SNAPSHOT_NULL, LKG_SNAPSHOT_UNDEFINED, incrementalLkgContentDigests, lkgContentDigest, captureSlot, getSlot, dropSlot, noteEntry, onNoteTrigger, peekNoteNudgeText, markNoteNudgeDelivered, clearNoteNudgeTriggerAndCooldown, resetNoteNudgeCooldownOnly, clearNoteNudgeTriggerOnly, extractM0Block, resolveMuralWire, MARKER_SUMMARY_TEXT, applyDeferredCompactionMarker, removeCompactionMarkerForSession, checkCompactionMarkerConsistency, formatDate, injectTemporalMarkers, clearInjectionCache, getVisibleMemoryIds, prepareCompartmentInjection, renderCompartmentInjection, mustMaterialize, trimMemoriesToBudgetV2, renderMemoryBlockV2, injectM0M1, RECOVERY_NO_HEAD_LIMIT, resolveOpenCodeProtectedTailBoundary, resolveWrapupProtectedTailBoundary, getRawHistoryEligibility, hasRunnableCompartmentWindow, recordHighPressureNoEligibleHead, runCompartmentAgent, snapRangeToCompartments, getActiveCompartmentRun, markActiveCompartmentRunPublished, registerActiveCompartmentRun, startCompartmentAgent, isRecompFailure, isRecompSkip, isRecompComplete, extractRecompReason, contextualizeUpgradeReason, setRecompStarting, setRecompNote, setRecompTerminal, runManagedRecomp, runManagedUpgrade };
+export { withContentLanguageDirective, buildPrimaryLanguageDirective, cortexKitUserConfigBasePath, cortexKitProjectConfigBasePath, resolveLegacyConfigSources, resolveLegacyConfigSourcesForHarness, migrateMagicContextConfigLocations, exports_external, DEFAULT_PROTECTED_TAGS, parseCron, nextOccurrence, nextDueAtMs, promptSurfaceConfigIdentity, resolvePromptSurface, resolveModelConfigOrDefault, DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE, DEFAULT_HISTORIAN_TIMEOUT_MS, DEFAULT_LOCAL_EMBEDDING_MODEL, PER_HARNESS_MIGRATION_INVENTORY, ConfigProfilesSchema, MagicContextConfigSchema, getOpenCodeDbPath, removeMcOwnedCompactionMarkers, hasShareabilitySensitiveText, isFailClosedBlockingError, shouldBypassFailClosedBlock, resolveAgentNameFromMessages, createFailClosedController, recordHookInitFailure, clearHookInitFailure, getLastHookInitFailure, ProjectIdentityError, resolveProjectIdentityStrict, takeDubiousOwnershipProjectIdentityWarning, resolveProjectIdentity, resolveProjectIdentityForSession, normalizeStoredProjectPath, storedPathBelongsToIdentity, isLinkedGitWorktree, recordSessionProjectIdentity, beginBootQuietPeriod, bootQuietRemainingMs, scheduleAfterBootQuiet, rpcPortDir, rpcPortFilePath, isPidAlive, parseRpcPortFile, registerModuleNoteEvaluationBridge, getModuleNoteEvaluationBridge, getContextStoreUuid, ensureContextStoreUuid, getAuthorityManagedMarker, reconcileAuthorityProject, checksumAuthoritySeedRows, prepareAuthority, drainAuthority, getMirrorCursor, applyMirroredNoteCompileFields, applyMirrorPage, pullMemoryMirrorOnce, V2_MEMORY_CATEGORIES, CATEGORY_PRIORITY, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, resolveStoredPathWorkspaceIdentity, storedPathBelongsToWorkspace, sourceNameForMemory, computeWorkspaceEpochFingerprint, textMentionsRecentCommit, hasMeaningfulUserText, extractTexts, extractToolCallSummaries, preloadTokenizer, estimateTokens, normalizeText, getCurrentToolSetHash, recordToolDefinition, getMeasuredToolDefinitionTokens, getSchemaFenceRejection, getMigrationOnOpenRefusal, LATEST_SUPPORTED_VERSION, getDatabasePath, getPersistedSchemaVersion, setSqlitePragmaConfig, runSqliteOptimize, openDatabase, openDatabaseAsync, isDatabasePersisted, getDatabasePersistenceError, COMPARTMENT_LEASE_RENEWAL_MS, acquireCompartmentLease, renewCompartmentLease, releaseCompartmentLease, getCompartments, getLastCompartmentEndMessage, getLastCompartmentEndMessageId, clearRecompStaging, isRawCompactionSummaryInfo, extractInMemoryMessageViews, buildInMemoryTailRawMessages, isRecord, estimateTrueRawMessageTokens, invalidateTrueRawTokenCache, stripPersistedAssistantText, byteSize, stripTagPrefix, prependTag, isThinkingPart, isTextPart, isToolPartWithOutput, isFilePart, buildFileSourceContent, isEditTool, partHasCompletedResult, extractToolCallObservation, ToolMutationBatch, createToolDropTarget, setRawMessageProvider, cleanUserText, withRawSessionMessageCache, readRawSessionMessages, primeTailRawMessageCache, primeInMemoryTailRawMessageCache, readRawSessionMessageOrdinalPage, getRawSessionStoredMessageCount, readRawSessionMessagePartsById, readRawSessionMessageOrdinalById, readRawSessionMessageById, readSessionChunk, getMessageIndexSourceIdentity, isMessageIndexSourceCurrent, getLastIndexedOrdinal, getIndexedMessageCorpusSize, getMessageIndexReconciliationStartOrdinal, isMessageIndexReconciledThrough, deleteIndexedMessage, clearIndexedMessages, indexSingleMessage, indexMessagesAfterOrdinal, sweepOrphanedOpenCodeMessageIndexes, recordEmbeddingMeasurement, getMaxM0MutationId, queueMemoryMutation, getMemoryMutationsForRenderByProjects, getMaxMemoryMutationIdForProjects, MAX_EXECUTE_THRESHOLD, escalationBands, isEmergencyRecoveryArmed, isProviderOverflowReconfirmed, getEmergencyRecoveryArmedAt, loadPersistedUsage, loadProtectedTailMeta, resetProtectedTailNoEligibleHead, getWrapupInProgressState, acquireWrapupInProgress, updateWrapupInProgress, releaseWrapupInProgress, resolveCompactionModeRecord, getCompactionModeRecord, setCompactionModeRecord, getPersistedReasoningWatermark, setPersistedReasoningWatermark, clearPersistedReasoningWatermark, getEmergencyInputSample, setEmergencyDropSample, clearEmergencyDropSample, getLastNudgeUndropped, setLastNudgeUndropped, getChannel1NudgeState, setChannel1NudgeState, resetLastNudgeCycle, resetLastNudgeCycleIfTailShrank, getChannel2NudgeState, getChannel2NudgeClaim, setChannel2NudgeState, casChannel2NudgeState, claimChannel2NudgeState, casChannel2NudgeClaim, getPersistedNoteNudge, getNoteNudgeAnchors, getAutoSearchHintDecisions, appendAutoSearchHintDecision, pruneNoteNudgeAnchors, pruneAutoSearchHintDecisions, removeNoteNudgeAnchorByMessageId, removeAutoSearchHintDecisionByMessageId, getPersistedTodoPermissionDenied, setPersistedTodoPermissionDenied, getPersistedTodoSyntheticAnchor, setPersistedTodoSyntheticAnchor, clearPersistedTodoSyntheticAnchor, setNoteLastReadAt, getHistorianFailureState, clearHistorianFailureState, getOverflowState, recordOverflowDetected, recordDetectedContextLimit, clearEmergencyRecovery, clearDetectedContextLimit, getPersistedCompactionMarkerState, setPersistedCompactionMarkerState, getStrippedPlaceholderIds, applyStrippedPlaceholderDelta, removeStrippedPlaceholderId, getMergedReasoningStrippedIds, addMergedReasoningStrippedIds, getTrailingBlankDecisions, addTrailingBlankDecisions, getStaleReduceStrippedIds, addStaleReduceStrippedIds, getProcessedImageStrippedIds, addProcessedImageStrippedIds, getPendingCompactionMarkerState, clearPendingCompactionMarkerStateIf, peekDeferredExecutePending, setDeferredExecutePendingIfAbsent, clearDeferredExecutePendingIfMatches, getSessionsWithPendingMarker, setSessionWorkMetrics, getNotes, addNote, getSessionNotes, getPendingSmartNotes, getReadySmartNotes, updateNote, dismissNote, markNoteReady, markNoteChecked, queuePendingOp, getPendingOps, clearPendingOps, removePendingOp, PRIMER_CANDIDATE_TTL_MS, PRIMER_CANDIDATE_MAX_AGE_MS, primerOccurrenceKey, primerOccurrenceUtcDay, updatePrimerCandidateEmbedding, getPrimerCandidatesByIds, getPrimerCandidatesForPromotion, countPrimerCandidatesForProject, getActivePrimers, createPrimer, updatePrimerSupport, updatePrimerAnswer, GLOBAL_USER_PROFILE_PROJECT_PATH, getProjectState, bumpProjectMemoryEpoch, bumpProjectUserProfileVersion, saveSourceContent, replaceSourceContent, getSourceContents, CTX_REDUCE_KEEP, estimateImageTokensFromDataUrl, normalizeTodoStateJson, buildSyntheticTodoPart, computeSyntheticCallId, isSyntheticTodoPart, countRealUserMessages, tailHygieneStructuralSignature, sameTailHygieneStructuralSignature, refreshTailHygieneBaseline, effectiveTailHygiene, assertTailHygieneContentUnchanged, CHANNEL1_SENTINEL, CHANNEL1_FLOOR_TOKENS, toolOutputTokens, decideChannel1, evaluateChannel2, buildChannel2Reminder, shouldUseStickyChannel1Reminder, buildChannel1Reminder, estimateEmergencyDropReclaimTokens, planEmergencyDrop, AGE_RECLAIM_MIN_TOKENS, getOldestActiveUnprotectedToolTags, getActiveToolTagsForAgeReclaim, getTriggerTagTokenUpperBound, getActiveTagTokenTotalsByMessage, tagTokenCountIsNull, backfillTagTokenCounts, insertTag, updateTagStatus, updateTagDropMode, updateCavemanDepth, updateTagMessageId, deleteTagsByMessageId, getMaxTagNumberBySession, getTagNumberByMessageId, deriveTagLoadFloor, getTagsBySession, getActiveTagsBySession, getTailHygieneTags, getDroppedTagsBySession, getTagsByNumbers, getMaxDroppedTagNumber, getToolTagNumberByOwner, getNullOwnerToolTag, adoptNullOwnerToolTag, getCandidateToolOwners, pickNearestPriorOwner, createChildSessionWithFence, detectOverflow, resolveFallbackChain, modelBodyField, promptSyncWithValidatedOutputRetry, normalizeSDKResponse, promptSurfaceHashMaterial, createPromptSurfaceRuntime, createPromptSurfaceGuidanceEpochCache, extractLatestAssistantText, hasLengthCappedOutput, setKeepSubagents, shouldKeepSubagents, recordChildInvocation, COMPARTMENT_AGENT_SYSTEM_PROMPT, HISTORIAN_EDITOR_SYSTEM_PROMPT, COMPARTMENT_STRUCTURAL_SYSTEM_PROMPT, Priority, AdmissionClass, StaleRouteHandleError, SocketClosedError, SocketTimeoutError, SubcClient, isConsumerReconnectTransient, connectionFileExists, getCompartmentEvents, loadCompartmentChunkEmbeddingsForSearch, cosineSimilarity, SYNAPSE_DEFAULT_MODEL, SynapseEmbeddingProvider, computeNormalizedHash, saveCommitEmbedding, loadProjectCommitEmbeddings, loadUnembeddedCommits, countEmbeddedCommits, upsertCommits, getLatestIndexedCommitTimeMs, enforceProjectCap, GIT_SWEEP_LEASE_RENEWAL_MS, acquireGitSweepLease, renewGitSweepLease, markGitSweepSuccessAndRelease, parkGitSweepNonIndexable, releaseGitSweepLease, saveEmbeddingIfHashMatches, getProjectEmbeddings, peekProjectEmbeddings, invalidateProject, invalidateMemory, markProjectLoadUntrusted, contentSha256, sweepStaleEmbeddingIdentitiesForProject, registerProjectEmbedding, registerProjectShadowEmbedding, getShadowEmbeddingMeasurementCohort, getPrimaryEmbeddingMeasurementCohort, embedShadowTextForProject, enqueueShadowEmbeddingItems, registerProjectInObservationMode, getProjectEmbeddingSnapshot, embedTextForProject, embedBatchForProject, embedItemsForProject, embedUnembeddedMemoriesForProject, drainCommitBacklogForProject, embedSessionCompartmentChunks, getEmbeddingCoverageStatus, isEmbeddingEnabled, embedText, ensureMemoryEmbeddings, computeCueContentHash, hasMuralCueColumns, getMuralCueState, memoryNeedsCue, setMuralCue, recordMuralCueRejection, hasMemoryShareableColumn, hasMemoryClassifiedAtColumn, getUnclassifiedMemoryIds, ModuleMemoryAuthorityError, insertMemory, insertMemoryIdempotent, getMemoryByHash, getMemoriesByProject, buildWorkspaceMemorySqlFilter, getMemoriesByProjects, getMaxMemoryIdForProjects, readNewMemoriesForM1Union, getMemoryById, getMemoriesByIds, updateMemorySeenCount, updateMemoryRetrievalCount, setMemoryClassification, supersededMemory, mergeMemoryStats, archiveMemory, getMemoryCountsByStatus, sanitizeFtsQuery, searchMemoriesFTS, searchMemoriesFTSUnion, recordMemoryMapping, recordMemoryVerifications, getUnmappedMemoryIds, clearMemoryVerifications, getMemoryVerifications, resolveGitTopLevel, readGitHead, readGitChangedFilesSince, readGitFileChangeTimesSince, verificationFileExists, normalizeVerificationFiles, USER_MEMORY_CANDIDATE_TTL_MS, insertUserMemoryCandidates, getUserMemoryCandidates, deleteUserMemoryCandidates, pruneExpiredUserMemoryCandidates, insertUserMemory, getActiveUserMemories, updateUserMemoryContent, dismissUserMemory, getMural, BoundedSessionMap, registerLkgPersistence, LKG_SNAPSHOT_ARRAY, LKG_SNAPSHOT_OBJECT, LKG_SNAPSHOT_KEY, LKG_SNAPSHOT_STRING, LKG_SNAPSHOT_NUMBER, LKG_SNAPSHOT_BOOLEAN, LKG_SNAPSHOT_NULL, LKG_SNAPSHOT_UNDEFINED, incrementalLkgContentDigests, lkgContentDigest, captureSlot, getSlot, dropSlot, noteEntry, onNoteTrigger, peekNoteNudgeText, markNoteNudgeDelivered, clearNoteNudgeTriggerAndCooldown, resetNoteNudgeCooldownOnly, clearNoteNudgeTriggerOnly, extractM0Block, resolveMuralWire, MARKER_SUMMARY_TEXT, applyDeferredCompactionMarker, removeCompactionMarkerForSession, checkCompactionMarkerConsistency, formatDate, injectTemporalMarkers, clearInjectionCache, getVisibleMemoryIds, prepareCompartmentInjection, renderCompartmentInjection, mustMaterialize, trimMemoriesToBudgetV2, renderMemoryBlockV2, injectM0M1, RECOVERY_NO_HEAD_LIMIT, resolveOpenCodeProtectedTailBoundary, resolveWrapupProtectedTailBoundary, getRawHistoryEligibility, hasRunnableCompartmentWindow, recordHighPressureNoEligibleHead, runCompartmentAgent, snapRangeToCompartments, getActiveCompartmentRun, markActiveCompartmentRunPublished, registerActiveCompartmentRun, startCompartmentAgent, isRecompFailure, isRecompSkip, isRecompComplete, extractRecompReason, contextualizeUpgradeReason, setRecompStarting, setRecompNote, setRecompTerminal, runManagedRecomp, runManagedUpgrade };