@cortexkit/opencode-magic-context 0.40.1 → 0.41.1

package/dist/{index-x64cmpej.js → index-dh0vfghk.js}

@@ -2,19 +2,21 @@ import {
   deriveTriggerBudget,
   modelSupportsVision,
   shouldEnforcePrivateStoragePermissions
-} from "./index-mg1yx1ph.js";
+} from "./index-2d4kf2ve.js";
 import {
   describeError,
   getErrorMessage,
   sendIgnoredMessage
-} from "./index-btj2qhmc.js";
+} from "./index-zwjhba2r.js";
 import {
+  SESSION_SCOPED_TABLES,
   clearCachedM0M1,
   deleteSessionScopedRows,
   ensureSessionMetaRow,
+  logSlowWriteTransaction,
   persistCachedM0,
   updateSessionMeta
-} from "./index-rw0qrkvq.js";
+} from "./index-z893kjyt.js";
 import {
   modelRefLookupOrder,
   piModelRefToCanonical
@@ -27,7 +29,7 @@ import {
   openCodeDbExists,
   withPrivilegedWriter,
   withReadOnlySessionDb
-} from "./index-sw8gnq34.js";
+} from "./index-b9j85d29.js";
 import {
   detectConfigFile
 } from "./index-8mtsfhyg.js";
@@ -36,8 +38,9 @@ import {
 } from "./index-d62ypazr.js";
 import {
   log,
+  sanitizeDiagnosticText,
   sessionLog
-} from "./index-8pqfcghm.js";
+} from "./index-4x691bz5.js";
 import {
   ensureCortexKitArtifactGitignore,
   getDataDir,
@@ -45,7 +48,7 @@ import {
   getLegacyOpenCodeMagicContextStorageDir,
   getMagicContextStorageDir,
   getProjectMagicContextHistorianDir
-} from "./index-mmrhhk9a.js";
+} from "./index-37yzyeca.js";
 import {
   __export,
   __require
@@ -398,153 +401,6 @@ function buildPrimaryLanguageDirective(language) {
   return `Use ${target} for your natural-language replies to the user unless the user explicitly asks for another language. Keep code, identifiers, file paths, commands, logs, and quoted text verbatim.`;
 }
 
-// src/shared/redaction.ts
-import { homedir, userInfo } from "node:os";
-function escapeRegex(value) {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-var SECRET_WORDS = [
-  "key",
-  "token",
-  "secret",
-  "password",
-  "auth",
-  "authorization",
-  "bearer",
-  "credential"
-];
-var SECRET_SEGMENT_PATTERN = new RegExp(`^(?:${SECRET_WORDS.map((w) => `${w}s?`).join("|")})$`, "i");
-var TRAILING_DESCRIPTORS = new Set(["id", "ids", "value", "values", "header", "headers"]);
-function redactionTypeForKey(key) {
-  const normalized = key.trim().toLowerCase().replace(/[^a-z0-9_.-]+/g, "_");
-  const suffix = normalized.split(".").filter(Boolean).at(-1) ?? normalized;
-  return suffix || "secret";
-}
-function isNonSecretScalarValue(value) {
-  const v = value.trim();
-  if (v === "true" || v === "false" || v === "null" || v === "undefined")
-    return true;
-  return /^[+-]?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?$/.test(v);
-}
-var SECRET_QUALIFIERS = new Set([
-  "api",
-  "access",
-  "private",
-  "client",
-  "auth",
-  "authorization",
-  "secret",
-  "bearer",
-  "session",
-  "refresh",
-  "service",
-  "x",
-  "openai",
-  "anthropic",
-  "google",
-  "github",
-  "huggingface",
-  "aws",
-  "azure"
-]);
-function sanitizePathString(value) {
-  const home = homedir();
-  const username = userInfo().username;
-  let sanitized = value;
-  if (home) {
-    sanitized = sanitized.replace(new RegExp(escapeRegex(home), "g"), "~");
-  }
-  sanitized = sanitized.replace(/\/Users\/[^/]+\//g, "/Users/<USER>/");
-  sanitized = sanitized.replace(/\/home\/[^/]+\//g, "/home/<USER>/");
-  sanitized = sanitized.replace(/C:\\Users\\[^\\]+\\/g, "C:\\Users\\<USER>\\");
-  if (username) {
-    sanitized = sanitized.replace(new RegExp(escapeRegex(username), "g"), "<USER>");
-  }
-  return sanitized;
-}
-var SECRET_TEXT_PATTERNS = [
-  {
-    pattern: /\bsk-ant-(?:api03-)?[A-Za-z0-9_-]{32,}/g,
-    replacement: "<ANTHROPIC_API_KEY_REDACTED>"
-  },
-  {
-    pattern: /\bsk-(?:proj-)?[A-Za-z0-9_-]{32,}/g,
-    replacement: "<OPENAI_API_KEY_REDACTED>"
-  },
-  {
-    pattern: /\bgithub_pat_[A-Za-z0-9_]{20,}/g,
-    replacement: "<GITHUB_PAT_REDACTED>"
-  },
-  {
-    pattern: /\b(?:gh[opsu]|ghr)_[A-Za-z0-9]{30,}/g,
-    replacement: "<GITHUB_TOKEN_REDACTED>"
-  },
-  {
-    pattern: /\bhf_[A-Za-z0-9]{30,}/g,
-    replacement: "<HUGGINGFACE_TOKEN_REDACTED>"
-  },
-  {
-    pattern: /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g,
-    replacement: "<AWS_ACCESS_KEY_ID_REDACTED>"
-  },
-  {
-    pattern: /\bxox[abprsuvc]-[A-Za-z0-9-]{10,}/g,
-    replacement: "<SLACK_TOKEN_REDACTED>"
-  },
-  {
-    pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g,
-    replacement: "<GOOGLE_API_KEY_REDACTED>"
-  },
-  {
-    pattern: /\b(Authorization\s*:\s*Bearer\s+)([A-Za-z0-9._~+/=-]{8,})/gi,
-    replacement: (_full, prefix) => `${prefix}<REDACTED:bearer>`
-  },
-  {
-    pattern: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g,
-    replacement: "<JWT_REDACTED>"
-  },
-  {
-    pattern: /(["'])([^"']*(?:key|token|secret|password|auth|bearer|credential)[^"']*)\1(\s*:\s*)(["'])([^"']*)\4/gi,
-    replacement: (full, quote, key, separator, valueQuote, value) => isNonSecretScalarValue(value) ? full : `${quote}${key}${quote}${separator}${valueQuote}<REDACTED:${redactionTypeForKey(key)}>${valueQuote}`
-  },
-  {
-    pattern: /\b([A-Za-z0-9_.-]*(?:key|token|secret|password|auth|bearer|credential)[A-Za-z0-9_.-]*)\s*=\s*([^\s'"`]+)/gi,
-    replacement: (full, key, value) => isNonSecretScalarValue(value) ? full : `${key}=<REDACTED:${redactionTypeForKey(key)}>`
-  }
-];
-function redactSecretText(value) {
-  let redacted = value;
-  for (const { pattern, replacement } of SECRET_TEXT_PATTERNS) {
-    if (typeof replacement === "string") {
-      redacted = redacted.replace(pattern, replacement);
-    } else {
-      redacted = redacted.replace(pattern, replacement);
-    }
-  }
-  return redacted;
-}
-function sanitizeDiagnosticText(value) {
-  return redactSecretText(sanitizePathString(value));
-}
-var SHAREABILITY_SENSITIVE_PATTERNS = [
-  /\bC:\/Users\/[^/\s]+/i,
-  /(?:^|\s)~\/[^\s]+/,
-  /\b(?:api[_-]?key|secret|token|password|passwd|pwd|client[_-]?secret|access[_-]?key)\b\s*[:=]\s*\S+/i,
-  /\b(?:localhost|127\.0\.0\.1|0\.0\.0\.0|\[::1\])(?::\d+)?\b/i,
-  /\b(?:10|127)\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/,
-  /\b192\.168\.\d{1,3}\.\d{1,3}\b/,
-  /\b172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}\b/
-];
-function hasShareabilitySensitiveText(text) {
-  try {
-    if (sanitizeDiagnosticText(text) !== text)
-      return true;
-    return SHAREABILITY_SENSITIVE_PATTERNS.some((pattern) => pattern.test(text));
-  } catch {
-    return true;
-  }
-}
-
 // src/features/magic-context/fail-closed-block.ts
 var FAIL_CLOSED_DOCTOR_COMMAND = "npx @cortexkit/magic-context@latest doctor";
 var FAIL_CLOSED_REPROBE_EVERY_N = 5;
@@ -1145,6 +1001,18 @@ function isValidPort(port) {
 // src/features/magic-context/context-authority.ts
 import { createHash as createHash2, randomUUID } from "node:crypto";
 var AUTHORITY_DOMAINS = ["memories", "notes"];
+var observedAuthorityRoutingByProject = new Map;
+function observeAuthorityRouting(projectPath, location) {
+  const previous = observedAuthorityRoutingByProject.get(projectPath);
+  if (previous === location)
+    return;
+  observedAuthorityRoutingByProject.set(projectPath, location);
+  if (location === "MODULE") {
+    log(`[magic-context] project ${projectPath} authority → MODULE: host backends → MODULE: ctx_memory, ctx_note; historian: module-side`);
+  } else if (previous === "MODULE") {
+    log(`[magic-context] project ${projectPath} authority → TS: host backends → TypeScript: ctx_memory, ctx_note; historian: host-side`);
+  }
+}
 var moduleNoteEvaluationBridges = new Map;
 function registerModuleNoteEvaluationBridge(projectPath, bridge) {
   moduleNoteEvaluationBridges.set(projectPath, bridge);
@@ -1374,7 +1242,7 @@ async function prepareAuthority(args) {
         if (identities.length > 0) {
           args.db.transaction(() => {
             for (const identity of identities) {
-              rememberIdentity(args.db, domain, args.projectPath, identity.moduleRowId, identity.sourceRowId);
+              rememberIdentity(args.db, domain, args.projectPath, identity.moduleRowId, identity.sourceRowId, undefined, true);
             }
           }).immediate();
         }
@@ -1512,6 +1380,9 @@ async function drainAuthority(args) {
         if (next === cursor)
           break;
       }
+      if (args.domain === "memories") {
+        resolvePendingMemoryReferencesForDrain(args.db);
+      }
       for (const step of [
         "seed",
         "memories",
@@ -1684,6 +1555,83 @@ var MEMORY_SNAPSHOT_COLUMNS = [
   "mural_cue_at",
   "mural_cue_rejection_count"
 ];
+var IMMUTABLE_MEMORY_SNAPSHOT_COLUMNS = ["project_path", "first_seen_at", "created_at"];
+var CLASSIFICATION_MEMORY_SNAPSHOT_COLUMNS = [
+  "importance",
+  "scope",
+  "shareable",
+  "source_type",
+  "classified_at"
+];
+var VERIFICATION_MEMORY_SNAPSHOT_COLUMNS = [
+  "verification_status",
+  "verified_at",
+  "mapping",
+  "mapping_origin"
+];
+var MURAL_MEMORY_SNAPSHOT_COLUMNS = [
+  "mural_cue",
+  "mural_cue_hash",
+  "mural_cue_at",
+  "mural_cue_rejection_count"
+];
+var UPDATED_MEMORY_SNAPSHOT_COLUMNS = [
+  "category",
+  "content",
+  "normalized_hash",
+  "source_session_id",
+  "seen_count",
+  "retrieval_count",
+  "updated_at",
+  "last_seen_at",
+  "last_retrieved_at",
+  "status",
+  "expires_at",
+  "superseded_by_memory_id",
+  "merged_from",
+  "metadata_json"
+];
+function memorySnapshotTimestamp(row, key) {
+  const value = row[key];
+  return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+function parsedMemorySnapshot(snapshotJson, fallback) {
+  try {
+    const parsed = JSON.parse(snapshotJson);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : fallback;
+  } catch {
+    return fallback;
+  }
+}
+function guardMemorySnapshotByRecency(args) {
+  const effectiveRow = { ...args.row };
+  if (!args.existing) {
+    return { effectiveRow, hostUpdatedNewer: false, hostVerificationNewer: false };
+  }
+  const existing = args.existing;
+  const preserve = (columns) => {
+    for (const column of columns) {
+      if (Object.hasOwn(existing, column)) {
+        effectiveRow[column] = existing[column];
+      }
+    }
+  };
+  preserve(IMMUTABLE_MEMORY_SNAPSHOT_COLUMNS);
+  const hostUpdatedNewer = memorySnapshotTimestamp(existing, "updated_at") > memorySnapshotTimestamp(args.snapshot, "updated_at");
+  const hostClassificationNewer = hostUpdatedNewer || memorySnapshotTimestamp(existing, "classified_at") > memorySnapshotTimestamp(args.snapshot, "classified_at");
+  const snapshotCarriesUpdatedAt = hasSnapshotField(args.snapshot, "updated_at");
+  const hostVerificationNewer = hostUpdatedNewer && snapshotCarriesUpdatedAt;
+  const hostMuralNewer = hostUpdatedNewer && snapshotCarriesUpdatedAt;
+  if (hostUpdatedNewer)
+    preserve(UPDATED_MEMORY_SNAPSHOT_COLUMNS);
+  if (hostClassificationNewer)
+    preserve(CLASSIFICATION_MEMORY_SNAPSHOT_COLUMNS);
+  if (hostVerificationNewer)
+    preserve(VERIFICATION_MEMORY_SNAPSHOT_COLUMNS);
+  if (hostMuralNewer)
+    preserve(MURAL_MEMORY_SNAPSHOT_COLUMNS);
+  return { effectiveRow, hostUpdatedNewer, hostVerificationNewer };
+}
 function hasSnapshotField(row, key) {
   return Object.prototype.hasOwnProperty.call(row, key);
 }
@@ -1828,11 +1776,11 @@ function prepareMirrorPageStatements(db) {
               verification_status = ?, verified_at = ?, classified_at = ?, superseded_by_memory_id = ?,
               merged_from = ?, metadata_json = ?, mural_cue = ?, mural_cue_hash = ?, mural_cue_at = ?,
               mural_cue_rejection_count = ? WHERE id = ?`),
-    updateSuperseded: db.prepare("UPDATE memories SET superseded_by_memory_id = ? WHERE id = ?"),
+    updateSuperseded: db.prepare("UPDATE memories SET superseded_by_memory_id = ?, updated_at = ? WHERE id = ?"),
     deletePendingReference: db.prepare("DELETE FROM mirror_pending_references WHERE domain = 'memories' AND module_project = ? AND module_row_id = ?"),
     upsertPendingReference: db.prepare("INSERT INTO mirror_pending_references(domain, module_project, module_row_id, target_module_row_id) VALUES ('memories', ?, ?, ?) ON CONFLICT(domain, module_project, module_row_id) DO UPDATE SET target_module_row_id = excluded.target_module_row_id"),
     deleteMemoryVerifications: db.prepare("DELETE FROM memory_verifications WHERE memory_id = ?"),
-    insertMemoryVerification: db.prepare("INSERT INTO memory_verifications(memory_id, file_path, verified_at, mapped_at) VALUES (?, ?, ?, ?)"),
+    insertMemoryVerification: db.prepare("INSERT INTO memory_verifications(memory_id, file_path, verified_at, mapped_at, mapping_origin) VALUES (?, ?, ?, ?, ?)"),
     noteById: db.prepare("SELECT * FROM notes WHERE id = ?"),
     noteIdByStoreId: db.prepare("SELECT id FROM notes WHERE id = ? AND type = 'smart' AND project_path = ?"),
     insertNote: db.prepare("INSERT INTO notes (type, status, content, project_path, session_id, created_at, updated_at) VALUES ('smart', 'active', '', ?, ?, 0, 0)"),
@@ -1860,7 +1808,8 @@ function prepareMirrorPageStatements(db) {
                        AND target.module_row_id = pending.target_module_row_id
                      WHERE pending.domain = 'memories'
                        AND source.context_row_id = memories.id
-                )
+                ),
+                    updated_at = ?
               WHERE id IN (
                     SELECT source.context_row_id
                       FROM mirror_pending_references pending
@@ -1890,7 +1839,7 @@ function prepareMirrorPageStatements(db) {
     repairPending: db.prepare("SELECT dirty FROM mirror_memory_repair_state WHERE id = 1"),
     markRepairPending: db.prepare("UPDATE mirror_memory_repair_state SET dirty = 1, updated_at = ? WHERE id = 1"),
     clearRepairPending: db.prepare("UPDATE mirror_memory_repair_state SET dirty = 0, updated_at = ? WHERE id = 1"),
-    repairCandidates: db.prepare(`SELECT memory.id, live.full_row_snapshot
+    repairCandidates: db.prepare(`SELECT memory.id, memory.updated_at, memory.classified_at, live.full_row_snapshot
                FROM memories memory
                JOIN mirror_identity identity
                  ON identity.domain = 'memories'
@@ -1904,9 +1853,14 @@ function prepareMirrorPageStatements(db) {
               WHERE (memory.source_type IS NULL OR memory.importance IS NULL)
                 AND live.full_row_snapshot IS NOT NULL`),
     repairMemory: db.prepare(`UPDATE memories
-                SET source_type = COALESCE(?, source_type),
-                    importance = COALESCE(?, importance)
-              WHERE id = ?`),
+                SET source_type = COALESCE(source_type, ?),
+                    importance = COALESCE(importance, ?),
+                    updated_at = ?
+              WHERE id = ?
+                AND COALESCE(updated_at, 0) <= ?
+                AND COALESCE(classified_at, 0) <= ?
+                AND ((source_type IS NULL AND ? IS NOT NULL)
+                  OR (importance IS NULL AND ? IS NOT NULL))`),
     updateCursor: db.prepare("INSERT INTO mirror_cursors(domain, cursor, updated_at) VALUES (?, ?, ?) ON CONFLICT(domain) DO UPDATE SET cursor = excluded.cursor, updated_at = excluded.updated_at"),
     contextStoreUuid: getContextStoreUuid(db)
   };
@@ -1917,20 +1871,26 @@ function mirrorIdentity(db, domain, moduleProject, moduleRowId, statements) {
 function applyMirroredNoteCompileFields(args) {
   return withPrivilegedWriter(args.db, () => {
     const result = args.db.prepare(`UPDATE notes
-                    SET compiled_provider = ?, compiled_config = ?, compiled_at = ?, compile_status = ?
+                    SET compiled_provider = ?, compiled_config = ?, compiled_at = ?, compile_status = ?,
+                        updated_at = ?
                   WHERE id = (
                         SELECT context_row_id
                           FROM mirror_identity
                          WHERE domain = 'notes' AND module_project = ? AND module_row_id = ?
-                  )`).run(args.fields.compiledProvider, args.fields.compiledConfig, args.fields.compiledAt, args.fields.compileStatus, args.moduleProject, args.moduleRowId);
+                  )`).run(args.fields.compiledProvider, args.fields.compiledConfig, args.fields.compiledAt, args.fields.compileStatus, Date.now(), args.moduleProject, args.moduleRowId);
     return result.changes === 1;
   });
 }
-function rememberIdentity(db, domain, moduleProject, moduleRowId, contextRowId, statements) {
+function rememberIdentity(db, domain, moduleProject, moduleRowId, contextRowId, statements, replaceContextIdentity = domain === "notes") {
   const existing = mirrorIdentity(db, domain, moduleProject, moduleRowId, statements);
-  if (existing)
+  if (existing?.context_row_id === contextRowId)
     return;
-  if (domain === "notes") {
+  if (existing) {
+    if (!replaceContextIdentity)
+      return;
+    (statements?.deleteIdentity ?? db.prepare("DELETE FROM mirror_identity WHERE domain = ? AND module_project = ? AND module_row_id = ?")).run(domain, moduleProject, moduleRowId);
+  }
+  if (replaceContextIdentity) {
     (statements?.deleteIdentityByContext ?? db.prepare("DELETE FROM mirror_identity WHERE domain = ? AND context_row_id = ?")).run(domain, contextRowId);
   }
   (statements?.insertIdentity ?? db.prepare("INSERT OR IGNORE INTO mirror_identity(domain, module_project, module_row_id, context_row_id) VALUES (?, ?, ?, ?)")).run(domain, moduleProject, moduleRowId, contextRowId);
@@ -1945,7 +1905,7 @@ function contextMemoryId(db, domain, moduleProject, row, moduleRowId, statements
   if (sourceUuid && sourceUuid === localStoreUuid && sourceId >= 0) {
     const existing = (statements?.memoryIdByStoreId ?? db.prepare("SELECT id FROM memories WHERE id = ? AND project_path = ?")).get(sourceId, moduleProject);
     if (existing?.id !== undefined) {
-      rememberIdentity(db, domain, moduleProject, moduleRowId, existing.id, statements);
+      rememberIdentity(db, domain, moduleProject, moduleRowId, existing.id, statements, true);
       return existing.id;
     }
   }
@@ -2002,37 +1962,46 @@ function applyMemoryRow(db, feed, statements) {
     log(`[magic-context] skipping memory mirror update for module ${moduleProject}/${feed.module_row_id}: context row ${contextId} belongs to ${existing.project_path}`);
     return;
   }
+  const retainedRecencySnapshot = parsedMemorySnapshot(snapshotJson, row);
+  const recencySnapshot = hasSnapshotField(row, "updated_at") ? row : hasSnapshotField(row, "classified_at") ? { ...retainedRecencySnapshot, classified_at: row.classified_at } : retainedRecencySnapshot;
+  const recencyGuard = guardMemorySnapshotByRecency({
+    row,
+    snapshot: recencySnapshot,
+    existing
+  });
+  const projectedRow = recencyGuard.effectiveRow;
   const has = (key) => hasSnapshotField(row, key);
-  const nullableNumber = (key, previous) => has(key) ? typeof row[key] === "number" && Number.isFinite(row[key]) ? row[key] : null : previous ?? null;
-  const nullableString = (key, previous) => has(key) ? rowNullableString(row, key) : previous ?? null;
-  const hasSuperseded = has("superseded_by_memory_id");
+  const nullableNumber = (key, previous) => has(key) ? typeof projectedRow[key] === "number" && Number.isFinite(projectedRow[key]) ? projectedRow[key] : null : previous ?? null;
+  const nullableString = (key, previous) => has(key) ? rowNullableString(projectedRow, key) : previous ?? null;
+  const hasSuperseded = has("superseded_by_memory_id") && !recencyGuard.hostUpdatedNewer;
   const previousHash = existing?.normalized_hash;
-  statements.updateMemory.run(has("project_path") ? rowString(row, "project_path") : existing?.project_path ?? moduleProject, has("category") ? rowString(row, "category", "CONSTRAINTS") : existing?.category ?? "CONSTRAINTS", has("content") ? rowString(row, "content") : existing?.content ?? "", has("normalized_hash") ? rowString(row, "normalized_hash") : existing?.normalized_hash ?? "", has("importance") ? typeof row.importance === "number" && Number.isFinite(row.importance) ? row.importance : null : existing?.importance ?? null, has("scope") ? rowString(row, "scope", "project") : existing?.scope ?? "project", has("shareable") ? rowNumber(row, "shareable") : existing?.shareable ?? 0, nullableString("source_session_id", existing?.source_session_id), nullableString("source_type", existing?.source_type), has("seen_count") ? rowNumber(row, "seen_count", 1) : existing?.seen_count ?? 1, has("retrieval_count") ? rowNumber(row, "retrieval_count") : existing?.retrieval_count ?? 0, has("first_seen_at") ? rowNumber(row, "first_seen_at") : existing?.first_seen_at ?? 0, has("created_at") ? rowNumber(row, "created_at") : existing?.created_at ?? 0, has("updated_at") ? rowNumber(row, "updated_at") : existing?.updated_at ?? 0, has("last_seen_at") ? rowNumber(row, "last_seen_at") : existing?.last_seen_at ?? 0, nullableNumber("last_retrieved_at", existing?.last_retrieved_at), has("status") ? rowString(row, "status", "active") : existing?.status ?? "active", nullableNumber("expires_at", existing?.expires_at), has("verification_status") ? rowString(row, "verification_status", "unverified") : existing?.verification_status ?? "unverified", nullableNumber("verified_at", existing?.verified_at), nullableNumber("classified_at", existing?.classified_at), hasSuperseded ? null : existing?.superseded_by_memory_id ?? null, nullableString("merged_from", existing?.merged_from), nullableString("metadata_json", existing?.metadata_json), nullableString("mural_cue", existing?.mural_cue), nullableString("mural_cue_hash", existing?.mural_cue_hash), nullableNumber("mural_cue_at", existing?.mural_cue_at), has("mural_cue_rejection_count") ? rowNumber(row, "mural_cue_rejection_count") : existing?.mural_cue_rejection_count ?? 0, contextId);
-  if (hasSuperseded && typeof row.superseded_by_memory_id === "number") {
-    const translated = mirrorIdentity(db, "memories", moduleProject, row.superseded_by_memory_id, statements);
+  statements.updateMemory.run(has("project_path") ? rowString(projectedRow, "project_path") : existing?.project_path ?? moduleProject, has("category") ? rowString(projectedRow, "category", "CONSTRAINTS") : existing?.category ?? "CONSTRAINTS", has("content") ? rowString(projectedRow, "content") : existing?.content ?? "", has("normalized_hash") ? rowString(projectedRow, "normalized_hash") : existing?.normalized_hash ?? "", has("importance") ? typeof projectedRow.importance === "number" && Number.isFinite(projectedRow.importance) ? projectedRow.importance : null : existing?.importance ?? null, has("scope") ? rowString(projectedRow, "scope", "project") : existing?.scope ?? "project", has("shareable") ? rowNumber(projectedRow, "shareable") : existing?.shareable ?? 0, nullableString("source_session_id", existing?.source_session_id), nullableString("source_type", existing?.source_type), has("seen_count") ? rowNumber(projectedRow, "seen_count", 1) : existing?.seen_count ?? 1, has("retrieval_count") ? rowNumber(projectedRow, "retrieval_count") : existing?.retrieval_count ?? 0, has("first_seen_at") ? rowNumber(projectedRow, "first_seen_at") : existing?.first_seen_at ?? 0, has("created_at") ? rowNumber(projectedRow, "created_at") : existing?.created_at ?? 0, has("updated_at") ? rowNumber(projectedRow, "updated_at") : existing?.updated_at ?? 0, has("last_seen_at") ? rowNumber(projectedRow, "last_seen_at") : existing?.last_seen_at ?? 0, nullableNumber("last_retrieved_at", existing?.last_retrieved_at), has("status") ? rowString(projectedRow, "status", "active") : existing?.status ?? "active", nullableNumber("expires_at", existing?.expires_at), has("verification_status") ? rowString(projectedRow, "verification_status", "unverified") : existing?.verification_status ?? "unverified", nullableNumber("verified_at", existing?.verified_at), nullableNumber("classified_at", existing?.classified_at), hasSuperseded ? null : existing?.superseded_by_memory_id ?? null, nullableString("merged_from", existing?.merged_from), nullableString("metadata_json", existing?.metadata_json), nullableString("mural_cue", existing?.mural_cue), nullableString("mural_cue_hash", existing?.mural_cue_hash), nullableNumber("mural_cue_at", existing?.mural_cue_at), has("mural_cue_rejection_count") ? rowNumber(projectedRow, "mural_cue_rejection_count") : existing?.mural_cue_rejection_count ?? 0, contextId);
+  if (hasSuperseded && typeof projectedRow.superseded_by_memory_id === "number") {
+    const translated = mirrorIdentity(db, "memories", moduleProject, projectedRow.superseded_by_memory_id, statements);
     if (translated) {
-      statements.updateSuperseded.run(translated.context_row_id, contextId);
+      statements.updateSuperseded.run(translated.context_row_id, Date.now(), contextId);
       statements.deletePendingReference.run(moduleProject, feed.module_row_id);
     } else {
-      statements.upsertPendingReference.run(moduleProject, feed.module_row_id, row.superseded_by_memory_id);
+      statements.upsertPendingReference.run(moduleProject, feed.module_row_id, projectedRow.superseded_by_memory_id);
     }
   } else if (hasSuperseded) {
     statements.deletePendingReference.run(moduleProject, feed.module_row_id);
   }
-  const appliedHash = has("normalized_hash") ? rowString(row, "normalized_hash") : previousHash;
+  const appliedHash = has("normalized_hash") ? rowString(projectedRow, "normalized_hash") : previousHash;
   if (previousHash !== appliedHash && appliedHash !== undefined) {
     statements.deleteMemoryEmbeddings.run(contextId);
   }
-  if (has("mapping")) {
+  if (has("mapping") && !recencyGuard.hostVerificationNewer) {
     statements.deleteMemoryVerifications.run(contextId);
-    if (Array.isArray(row.mapping)) {
+    if (Array.isArray(projectedRow.mapping)) {
       const files = [
-        ...new Set(row.mapping.filter((file) => typeof file === "string").sort())
+        ...new Set(projectedRow.mapping.filter((file) => typeof file === "string").sort())
       ];
-      const verifiedAt = rowNumber(row, "verified_at");
-      const mappedAt = rowNumber(row, "updated_at", Date.now());
+      const verifiedAt = rowNumber(projectedRow, "verified_at");
+      const mappedAt = rowNumber(projectedRow, "updated_at", Date.now());
+      const mappingOrigin = projectedRow.mapping_origin === "host_rejected_fallback" ? "host_rejected_fallback" : "mapper";
       for (const file of files.length > 0 ? files : [""]) {
-        statements.insertMemoryVerification.run(contextId, file, verifiedAt, mappedAt);
+        statements.insertMemoryVerification.run(contextId, file, verifiedAt, mappedAt, mappingOrigin);
       }
     }
   }
@@ -2058,7 +2027,11 @@ function repairNullClobberedMemoryRows(statements) {
     const importance = hasSnapshotField(snapshot, "importance") && typeof snapshot.importance === "number" && Number.isFinite(snapshot.importance) ? snapshot.importance : null;
     if (sourceType === null && importance === null)
       continue;
-    statements.repairMemory.run(sourceType, importance, candidate.id);
+    const snapshotVintage = Math.max(memorySnapshotTimestamp(snapshot, "updated_at"), memorySnapshotTimestamp(snapshot, "classified_at"));
+    const hostVintage = Math.max(candidate.updated_at ?? 0, candidate.classified_at ?? 0);
+    if (hostVintage > snapshotVintage)
+      continue;
+    statements.repairMemory.run(sourceType, importance, Date.now(), candidate.id, snapshotVintage, snapshotVintage, sourceType, importance);
   }
   statements.clearRepairPending.run(Date.now());
 }
@@ -2083,9 +2056,17 @@ function contextNoteId(db, feed, moduleProject, statements) {
   return contextId;
 }
 function translateMemoryReferences(statements) {
-  statements.translateMemoryReferences.run();
+  statements.translateMemoryReferences.run(Date.now());
   statements.clearTranslatedReferences.run();
 }
+function resolvePendingMemoryReferencesForDrain(db) {
+  withPrivilegedWriter(db, () => {
+    db.transaction(() => {
+      const statements = prepareMirrorPageStatements(db);
+      translateMemoryReferences(statements);
+    }).immediate();
+  });
+}
 function applyNoteRow(db, feed, statements) {
   const row = feed.full_row_snapshot;
   const moduleProject = rowString(row, "project_path");
@@ -2153,6 +2134,24 @@ function applyMirrorPage(args) {
       if (page.domain === "memories" && resnapshotStatus !== "complete" && page.rows.some((feed) => feed.op === "tombstone")) {
         throw new Error("memory mirror resnapshot must complete before tombstones");
       }
+      if (page.domain === "memories") {
+        for (const feed of page.rows) {
+          if (feed.domain !== "memories" || feed.op === "tombstone" || feed.feed_seq <= durableCursor) {
+            continue;
+          }
+          const row = feed.full_row_snapshot;
+          const moduleProject = rowString(row, "project_path");
+          const sourceUuid = rowNullableString(row, "context_store_uuid");
+          const sourceId = rowNumber(row, "context_row_id", -1);
+          if (!moduleProject || !sourceUuid || sourceUuid !== statements.contextStoreUuid || sourceId < 0) {
+            continue;
+          }
+          const existing = statements.memoryIdByStoreId.get(sourceId, moduleProject);
+          if (existing?.id === undefined)
+            continue;
+          rememberIdentity(db, "memories", moduleProject, feed.module_row_id, existing.id, statements, true);
+        }
+      }
       const touchedProjects = new Set;
       for (const feed of page.rows) {
         if (feed.domain !== page.domain || feed.feed_seq <= nextCursor)
@@ -2623,7 +2622,7 @@ var CATEGORY_DEFAULT_TTL = {
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { createHash as createHash3 } from "node:crypto";
 import { existsSync, realpathSync, statSync } from "node:fs";
-import { homedir as homedir2 } from "node:os";
+import { homedir } from "node:os";
 import path from "node:path";
 var GIT_TIMEOUT_MS = 5000;
 var TRANSIENT_FAILURE_COOLDOWN_MS = 5 * 60 * 1000;
@@ -2637,7 +2636,7 @@ var dubiousOwnershipLoggedDirectories = new Set;
 var dubiousOwnershipWarnedDirectories = new Set;
 var transientGitIdentityReuseLoggedDirectories = new Set;
 var execFileSyncForIdentity = execFileSync2;
-var userHomeDirectoryForIdentity = () => homedir2();
+var userHomeDirectoryForIdentity = () => homedir();
 var nowMs = () => Date.now();
 
 class ProjectIdentityError extends Error {
@@ -2952,6 +2951,9 @@ function gitRootDirectory(canonical) {
     return null;
   }
 }
+function directoryHasGitMetadata(directory) {
+  return gitRootDirectory(path.resolve(directory)) !== null;
+}
 function resolveProjectIdentityForSession(directory, allowHomeProject = false) {
   const canonicalHome = canonicalUserHomeDirectory();
   const canonicalDirectory = (() => {
@@ -5405,6 +5407,15 @@ var MIGRATIONS = [
                 );
             `);
     }
+  },
+  {
+    version: 82,
+    description: "record the origin of memory file-independent mappings",
+    up(db) {
+      if (!tableExists2(db, "memory_verifications"))
+        return;
+      ensureColumn(db, "memory_verifications", "mapping_origin", "TEXT NOT NULL DEFAULT 'mapper'");
+    }
   }
 ];
 var LATEST_MIGRATION_VERSION = MIGRATIONS.reduce((max, m) => Math.max(max, m.version), 0);
@@ -5450,6 +5461,7 @@ function runMigrations(db) {
     let migration;
     let currentVersion = 0;
     try {
+      const transactionStartedAt = performance.now();
       const applied = db.transaction(() => {
         currentVersion = getCurrentVersion(db);
         migration = MIGRATIONS.find((candidate) => candidate.version > currentVersion && !isMigrationApplied(db, candidate.version));
@@ -5464,6 +5476,7 @@ function runMigrations(db) {
         db.prepare("INSERT INTO schema_migrations (version, description, applied_at) VALUES (?, ?, ?)").run(migration.version, migration.description, Date.now());
         return true;
       }).immediate();
+      logSlowWriteTransaction("migration-runner", transactionStartedAt);
       if (!applied || !migration)
         break;
       if (migration.version <= 61)
@@ -5488,7 +5501,9 @@ function runMigrations(db) {
   }
   if (touchedLegacyAuthorityBatch) {
     try {
+      const transactionStartedAt = performance.now();
       db.transaction(() => installLatestAuthorityTriggers(db)).immediate();
+      logSlowWriteTransaction("migration-runner", transactionStartedAt);
     } catch (error) {
       throw new Error(`Migration authority-trigger postcondition failed: ${error instanceof Error ? error.message : String(error)}. Database may need manual repair.`);
     }
@@ -5524,7 +5539,7 @@ import { createHash as createHash5 } from "node:crypto";
 // src/hooks/magic-context/read-session-formatting.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, realpathSync as realpathSync2 } from "node:fs";
 import { createRequire } from "node:module";
-import { homedir as homedir3 } from "node:os";
+import { homedir as homedir2 } from "node:os";
 import { dirname, join as join2, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 
@@ -5641,7 +5656,7 @@ var tokenizerLoadPromise;
 var tokenizerWarningSent = false;
 function tokenizerPackageRoots() {
   const cwd = process.cwd();
-  const openCodeCache = join2(process.env.XDG_CACHE_HOME ?? join2(homedir3(), ".cache"), "opencode");
+  const openCodeCache = join2(process.env.XDG_CACHE_HOME ?? join2(homedir2(), ".cache"), "opencode");
   const roots = [cwd, openCodeCache];
   const candidates = [];
   for (const root of roots) {
@@ -6209,7 +6224,7 @@ function getSchemaFenceRejection() {
 function getMigrationOnOpenRefusal() {
   return lastMigrationOnOpenRefusal;
 }
-var LATEST_SUPPORTED_VERSION = 81;
+var LATEST_SUPPORTED_VERSION = 82;
 var PERMISSIONS_ENFORCEABLE = process.platform !== "win32";
 var defaultStoragePermissionFs = { chmodSync, mkdirSync };
 var storagePermissionFs = defaultStoragePermissionFs;
@@ -6958,8 +6973,10 @@ function initializeDatabase(db) {
       -- verified_at=0 means "mapped (files known) but not yet content-verified".
       -- map-memories sets mapped_at + verified_at=0; verify sets verified_at=now.
       verified_at  INTEGER NOT NULL,
-      mapped_at    INTEGER NOT NULL DEFAULT 0,
-      PRIMARY KEY (memory_id, file_path)
+       mapped_at    INTEGER NOT NULL DEFAULT 0,
+       -- Distinguishes mapper-authored independence from a host rejection fallback.
+       mapping_origin TEXT NOT NULL DEFAULT 'mapper',
+       PRIMARY KEY (memory_id, file_path)
     );
     CREATE INDEX IF NOT EXISTS idx_memory_verifications_memory ON memory_verifications(memory_id);
 
@@ -8610,15 +8627,32 @@ function buildToolArcs(messages) {
   }
   return arcs.sort((a, b) => a.invOrdinal - b.invOrdinal || (a.resOrdinal ?? Number.MAX_SAFE_INTEGER) - (b.resOrdinal ?? Number.MAX_SAFE_INTEGER));
 }
+function fenceBoundaryForCompletedToolArcs(candidate, arcs, publicationFloorOrdinal) {
+  const completed = arcs.filter((arc) => arc.resOrdinal !== null).map((arc) => ({ invocation: arc.invOrdinal, result: arc.resOrdinal }));
+  const component = completed.filter((arc) => completedToolArcCrossesBoundary(arc.invocation, arc.result, candidate));
+  if (component.length === 0)
+    return candidate;
+  for (let pass = 0;pass <= completed.length; pass += 1) {
+    const minInvocation2 = Math.min(...component.map((arc) => arc.invocation));
+    const maxResult2 = Math.max(...component.map((arc) => arc.result));
+    const before = component.length;
+    for (const arc of completed) {
+      if (arc.invocation <= maxResult2 && arc.result >= minInvocation2 && !component.includes(arc)) {
+        component.push(arc);
+      }
+    }
+    if (component.length === before)
+      break;
+  }
+  const minInvocation = Math.min(...component.map((arc) => arc.invocation));
+  const maxResult = Math.max(...component.map((arc) => arc.result));
+  return minInvocation < publicationFloorOrdinal ? maxResult + 1 : minInvocation;
+}
 function fenceBoundaryForToolArcs(candidate, arcs, lastCompartmentEndOrdinal, recentOpenArcCutoff) {
-  let boundary = candidate;
+  const boundary = fenceBoundaryForCompletedToolArcs(candidate, arcs, lastCompartmentEndOrdinal + 1);
   for (const arc of arcs) {
-    if (arc.resOrdinal !== null) {
-      if (completedToolArcCrossesBoundary(arc.invOrdinal, arc.resOrdinal, boundary)) {
-        boundary = arc.resOrdinal + 1;
-      }
+    if (arc.resOrdinal !== null)
       continue;
-    }
     if (arc.invOrdinal < recentOpenArcCutoff)
       continue;
     if (arc.invOrdinal >= lastCompartmentEndOrdinal + 1 && arc.invOrdinal < boundary) {
@@ -9975,6 +10009,16 @@ function persistMessageHistoryOrphanSweepState(db, cursor, lastSweptAt) {
              cursor_session_id = excluded.cursor_session_id,
              last_swept_at = excluded.last_swept_at`).run(cursor, lastSweptAt);
 }
+function getOpenCodeSessionScopedCandidateSourceSql() {
+  return SESSION_SCOPED_TABLES.filter((definition) => definition.harnessScoped === true).map((definition) => {
+    const predicates = ["session_id IS NOT NULL", "harness = 'opencode'"];
+    if (definition.extraPredicate)
+      predicates.push(definition.extraPredicate);
+    return `SELECT session_id FROM ${definition.table} WHERE ${predicates.join(" AND ")}`;
+  }).join(`
+UNION
+`);
+}
 function sweepOrphanedOpenCodeMessageIndexes(db, openReadableOpenCodeDb, options = {}) {
   const now = options.now ?? Date.now();
   const batchSize = Math.max(1, Math.floor(options.batchSize ?? MESSAGE_HISTORY_ORPHAN_SWEEP_BATCH_SIZE));
@@ -9998,13 +10042,19 @@ function sweepOrphanedOpenCodeMessageIndexes(db, openReadableOpenCodeDb, options
   }
   try {
     const cutoff = now - safetyAgeMs;
+    const candidateSourceSql = getOpenCodeSessionScopedCandidateSourceSql();
     const candidates = db.prepare(`SELECT session_id
-                 FROM message_history_index
-                 WHERE harness = 'opencode'
-                   AND updated_at <= ?
-                   AND session_id > ?
+                 FROM (${candidateSourceSql}) AS session_candidates
+                 WHERE session_id > ?
+                   AND NOT EXISTS (
+                       SELECT 1
+                       FROM message_history_index
+                       WHERE message_history_index.session_id = session_candidates.session_id
+                         AND message_history_index.harness = 'opencode'
+                         AND message_history_index.updated_at > ?
+                   )
                  ORDER BY session_id ASC
-                 LIMIT ?`).all(cutoff, cursor, batchSize);
+                 LIMIT ?`).all(cursor, cutoff, batchSize);
     const sessionExists = openCodeDb.prepare("SELECT 1 FROM session WHERE id = ? LIMIT 1");
     const missingSessionIds = candidates.filter((candidate) => !sessionExists.get(candidate.session_id)).map((candidate) => candidate.session_id);
     const nextCursor = candidates.length < batchSize ? "" : candidates[candidates.length - 1]?.session_id ?? cursor;
@@ -10013,7 +10063,17 @@ function sweepOrphanedOpenCodeMessageIndexes(db, openReadableOpenCodeDb, options
     let committed = false;
     let deleted = 0;
     try {
-      const stillEligible = db.prepare("SELECT 1 FROM message_history_index WHERE session_id = ? AND harness = 'opencode' AND updated_at <= ?");
+      const stillEligible = db.prepare(`SELECT 1
+                 FROM (${candidateSourceSql}) AS session_candidates
+                 WHERE session_id = ?
+                   AND NOT EXISTS (
+                       SELECT 1
+                       FROM message_history_index
+                       WHERE message_history_index.session_id = session_candidates.session_id
+                         AND message_history_index.harness = 'opencode'
+                         AND message_history_index.updated_at > ?
+                   )
+                 LIMIT 1`);
       const eligibleSessionIds = missingSessionIds.filter((sessionId) => stillEligible.get(sessionId, cutoff));
       deleteSessionScopedRows(db, eligibleSessionIds, "opencode");
       deleted = eligibleSessionIds.length;
@@ -10448,6 +10508,13 @@ function isProviderOverflowReconfirmed(sessionId) {
 function getEmergencyRecoveryArmedAt(sessionId) {
   return emergencyRecoveryArmedAtBySession.get(sessionId) ?? null;
 }
+function describeProtectedTailDrainBudgetSkip(result) {
+  const state2 = result.budgetState;
+  if (!state2)
+    return "historian skip: internal drain budget spent";
+  const resetMinutes = Math.max(1, Math.ceil(state2.resetInMs / 60000));
+  return `historian skip: internal drain budget spent (${state2.spentTokens}/${state2.limitTokens} tokens; resets in ${resetMinutes}m)`;
+}
 var CAS_RETRY_LIMIT = 5;
 var AUTO_SEARCH_NO_HINT_REASONS = new Set([
   "below-threshold",
@@ -10827,19 +10894,28 @@ function reserveProtectedTailDrainTokens(args) {
   const now = args.now ?? Date.now();
   const requested = Math.max(0, Math.floor(args.trueRawTokens));
   if (requested === 0) {
-    return { ok: true, reservedTokens: 0, overQuotaBypass: false, reservation: null };
+    return {
+      ok: true,
+      reservedTokens: 0,
+      overQuotaBypass: false,
+      reservation: null,
+      budgetState: null
+    };
   }
   let result = {
     ok: false,
     reservedTokens: 0,
     overQuotaBypass: false,
     reservation: null,
-    skippedReason: "quota exhausted"
+    budgetState: null,
+    skippedReason: "internal drain budget spent"
   };
   args.db.transaction(() => {
     ensureSessionMetaRow(args.db, args.sessionId);
     let meta = loadProtectedTailMeta(args.db, args.sessionId);
-    if (now - meta.protectedTailDrainWindowStartedAt > DRAIN_WINDOW_MS) {
+    const windowStartedAt = meta.protectedTailDrainWindowStartedAt;
+    const windowExpired = windowStartedAt <= 0 || windowStartedAt > now || now - windowStartedAt >= DRAIN_WINDOW_MS;
+    if (windowExpired) {
       args.db.prepare(`UPDATE session_meta
                      SET protected_tail_drain_window_started_at = ?, protected_tail_drain_tokens = 0
                      WHERE session_id = ?`).run(now, args.sessionId);
@@ -10864,22 +10940,35 @@ function reserveProtectedTailDrainTokens(args) {
     const remaining = Math.max(0, budget - meta.protectedTailDrainTokens);
     let reserved = Math.min(requested, args.perRunCap, remaining);
     let bypass = false;
-    const inFailureBackoff = meta.historianDrainFailureAt > 0 && now - meta.historianDrainFailureAt < EMERGENCY_DRAIN_FAILURE_BACKOFF_MS;
+    const inFailureBackoff = meta.historianDrainFailureAt > 0 && meta.historianDrainFailureAt <= now && now - meta.historianDrainFailureAt < EMERGENCY_DRAIN_FAILURE_BACKOFF_MS;
     if (reserved <= 0 && latchActive && !inFailureBackoff) {
       reserved = Math.min(requested, args.perRunCap);
       bypass = true;
     }
-    if (reserved <= 0)
+    const activeWindowStartedAt = meta.protectedTailDrainWindowStartedAt;
+    const budgetState = (spentTokens) => ({
+      windowStartedAt: activeWindowStartedAt,
+      resetsAt: activeWindowStartedAt + DRAIN_WINDOW_MS,
+      resetInMs: Math.max(0, activeWindowStartedAt + DRAIN_WINDOW_MS - now),
+      spentTokens,
+      limitTokens: budget
+    });
+    if (reserved <= 0) {
+      result = {
+        ...result,
+        budgetState: budgetState(meta.protectedTailDrainTokens)
+      };
       return;
+    }
     args.db.prepare(`UPDATE session_meta
-                 SET protected_tail_drain_window_started_at = CASE WHEN protected_tail_drain_window_started_at = 0 THEN ? ELSE protected_tail_drain_window_started_at END,
-                     protected_tail_drain_tokens = COALESCE(protected_tail_drain_tokens, 0) + ?
-                 WHERE session_id = ?`).run(now, reserved, args.sessionId);
+                 SET protected_tail_drain_tokens = COALESCE(protected_tail_drain_tokens, 0) + ?
+                 WHERE session_id = ?`).run(reserved, args.sessionId);
     result = {
       ok: true,
       reservedTokens: reserved,
       overQuotaBypass: bypass,
-      reservation: { sessionId: args.sessionId, runId: args.runId, tokens: reserved }
+      reservation: { sessionId: args.sessionId, runId: args.runId, tokens: reserved },
+      budgetState: budgetState(meta.protectedTailDrainTokens + reserved)
     };
   })();
   return result;
@@ -10957,19 +11046,38 @@ function parseChannel1NudgeState(raw) {
   try {
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
-      return {
+      const state2 = {
         level: normalizeLastNudgeLevel(parsed.level),
         ordinal: typeof parsed.ordinal === "number" ? Math.max(0, Math.round(parsed.ordinal)) : 0
       };
+      if (parsed.postReduceGracePending === true)
+        state2.postReduceGracePending = true;
+      if (typeof parsed.postReduceGraceBaselineU === "number" && Number.isFinite(parsed.postReduceGraceBaselineU)) {
+        state2.postReduceGraceBaselineU = Math.max(0, Math.round(parsed.postReduceGraceBaselineU));
+      }
+      const preLevel = normalizeLastNudgeLevel(parsed.postReduceGracePreLevel);
+      if (preLevel !== "" || parsed.postReduceGracePreLevel === "") {
+        state2.postReduceGracePreLevel = preLevel;
+      }
+      return state2;
     }
   } catch {}
   return { level: normalizeLastNudgeLevel(raw), ordinal: 0 };
 }
 function serializeChannel1NudgeState(value) {
-  return JSON.stringify({
+  const serialized = {
     level: normalizeLastNudgeLevel(value.level),
     ordinal: Math.max(0, Math.round(value.ordinal))
-  });
+  };
+  if (value.postReduceGracePending === true)
+    serialized.postReduceGracePending = true;
+  if (value.postReduceGraceBaselineU !== undefined) {
+    serialized.postReduceGraceBaselineU = Math.max(0, Math.round(value.postReduceGraceBaselineU));
+  }
+  if (value.postReduceGracePreLevel !== undefined) {
+    serialized.postReduceGracePreLevel = normalizeLastNudgeLevel(value.postReduceGracePreLevel);
+  }
+  return JSON.stringify(serialized);
 }
 function getLastNudgeUndropped(db, sessionId) {
   const result = db.prepare("SELECT last_nudge_undropped FROM session_meta WHERE session_id = ?").get(sessionId);
@@ -10991,20 +11099,36 @@ function setChannel1NudgeState(db, sessionId, value) {
     db.prepare("UPDATE session_meta SET last_nudge_level = ? WHERE session_id = ?").run(serializeChannel1NudgeState(value), sessionId);
   })();
 }
-function resetLastNudgeCycle(db, sessionId) {
-  db.transaction(() => {
+function markChannel1PostReduceGracePending(db, sessionId) {
+  return db.transaction(() => {
     ensureSessionMetaRow(db, sessionId);
-    db.prepare("UPDATE session_meta SET last_nudge_undropped = 0, last_nudge_level = ? WHERE session_id = ?").run(serializeChannel1NudgeState(EMPTY_CHANNEL1_NUDGE_STATE), sessionId);
+    const current = getChannel1NudgeState(db, sessionId);
+    const next = {
+      level: current.level,
+      ordinal: current.ordinal,
+      postReduceGracePending: true,
+      postReduceGracePreLevel: current.level
+    };
+    db.prepare("UPDATE session_meta SET last_nudge_level = ? WHERE session_id = ?").run(serializeChannel1NudgeState(next), sessionId);
+    return next;
   })();
 }
-function resetLastNudgeCycleIfTailShrank(db, sessionId, measuredUndropped) {
-  let changed = false;
-  db.transaction(() => {
+function captureChannel1PostReduceGraceBaseline(db, sessionId, measuredUndropped) {
+  return db.transaction(() => {
     ensureSessionMetaRow(db, sessionId);
-    const result = db.prepare("UPDATE session_meta SET last_nudge_undropped = 0, last_nudge_level = ? WHERE session_id = ? AND last_nudge_undropped > ?").run(serializeChannel1NudgeState(EMPTY_CHANNEL1_NUDGE_STATE), sessionId, Math.max(0, Math.round(measuredUndropped)));
-    changed = (result.changes ?? 0) > 0;
+    const current = getChannel1NudgeState(db, sessionId);
+    if (current.postReduceGracePending !== true)
+      return current;
+    const baselineU = Math.max(0, Math.round(measuredUndropped));
+    const next = {
+      level: current.level,
+      ordinal: current.ordinal,
+      postReduceGraceBaselineU: baselineU,
+      postReduceGracePreLevel: current.postReduceGracePreLevel ?? current.level
+    };
+    db.prepare("UPDATE session_meta SET last_nudge_level = ? WHERE session_id = ?").run(serializeChannel1NudgeState(next), sessionId);
+    return next;
   })();
-  return changed;
 }
 function isChannel2StateRow(row) {
   return typeof row === "object" && row !== null && typeof row.channel2_nudge_state === "string";
@@ -11535,6 +11659,33 @@ function addTrailingBlankDecisions(db, sessionId, additions, options) {
   sessionLog(sessionId, `trailing_blank_decisions CAS: ${CAS_RETRY_LIMIT} retries exhausted`);
   return false;
 }
+function demoteTrailingBlankKeepDecisions(db, sessionId, messageIds) {
+  const ids = new Set(messageIds);
+  if (ids.size === 0)
+    return [];
+  ensureSessionMetaRow(db, sessionId);
+  for (let attempt = 0;attempt < CAS_RETRY_LIMIT; attempt += 1) {
+    const row = db.prepare("SELECT trailing_blank_decisions FROM session_meta WHERE session_id = ?").get(sessionId);
+    const rawStored = row ? row.trailing_blank_decisions ?? null : null;
+    const current = parseTrailingBlankDecisions(rawStored);
+    const demotedIds = [];
+    for (const id of ids) {
+      const decision = current.get(id);
+      if (decision === "keep" || decision?.startsWith("keep:") === true) {
+        current.set(id, "strip");
+        demotedIds.push(id);
+      }
+    }
+    if (demotedIds.length === 0)
+      return [];
+    const nextBlob = JSON.stringify(Object.fromEntries(current));
+    const result = db.prepare("UPDATE session_meta SET trailing_blank_decisions = ? WHERE session_id = ? AND trailing_blank_decisions IS ?").run(nextBlob, sessionId, rawStored);
+    if (result.changes > 0)
+      return demotedIds;
+  }
+  sessionLog(sessionId, `trailing_blank_decisions demotion CAS: ${CAS_RETRY_LIMIT} retries exhausted`);
+  return null;
+}
 function getStaleReduceStrippedIds(db, sessionId) {
   const row = db.prepare("SELECT stale_reduce_stripped_ids FROM session_meta WHERE session_id = ?").get(sessionId);
   return new Set(parseStrippedBlob(row?.stale_reduce_stripped_ids));
@@ -11877,6 +12028,7 @@ function markNoteChecked(db, noteId) {
 // src/features/magic-context/storage-ops.ts
 var queuePendingOpStatements = new WeakMap;
 var getPendingOpsStatements = new WeakMap;
+var getPendingOpsCountStatements = new WeakMap;
 var clearPendingOpsStatements = new WeakMap;
 var removePendingOpStatements = new WeakMap;
 function getQueuePendingOpStatement(db) {
@@ -11937,6 +12089,19 @@ function getPendingOps(db, sessionId) {
   const rows = getPendingOpsStatement(db).all(sessionId).filter(isPendingOpRow);
   return rows.map(toPendingOp).filter((op) => op !== null);
 }
+function getPendingOpsCount(db, sessionId) {
+  try {
+    let statement = getPendingOpsCountStatements.get(db);
+    if (!statement) {
+      statement = db.prepare("SELECT COUNT(*) AS count FROM pending_ops WHERE session_id = ?");
+      getPendingOpsCountStatements.set(db, statement);
+    }
+    const row = statement.get(sessionId);
+    return typeof row?.count === "number" && Number.isFinite(row.count) ? row.count : null;
+  } catch {
+    return null;
+  }
+}
 function clearPendingOps(db, sessionId) {
   getClearPendingOpsStatement(db).run(sessionId);
 }
@@ -12976,7 +13141,8 @@ function measureTailHygiene(input) {
         continue;
       }
       if (type === "text") {
-        const content = firstString(part, ["text", "content"]);
+        const rawContent = firstString(part, ["text", "content"]);
+        const content = rawContent === null ? null : stripChannel1ReminderSpans(rawContent);
         if (!content || isDropSentinel(content)) {
           parts.push(excludedSnapshot(`${key}\x00excluded`, part));
           continue;
@@ -13126,7 +13292,8 @@ function refreshTailHygieneBaseline(input) {
       evaluable: true,
       generationInvalidated: false,
       baselineParts: measured.parts,
-      contentSignature: measured.contentSignature
+      contentSignature: measured.contentSignature,
+      channel1PostReduceGrace: input.previous?.channel1PostReduceGrace
     };
   }
   const prefix = sameMeasuredPrefix(input.previous.baselineParts, measured.parts);
@@ -13188,47 +13355,74 @@ function decideChannel1(input) {
   const tailTokens = Math.max(0, input.baselineT + input.turnDeltaT);
   const undroppedTokens = Math.min(tailTokens, Math.max(0, input.baselineU + input.turnDeltaU));
   const severity = Math.min(1, Math.max(0, undroppedTokens / Math.max(tailTokens, 1)));
-  const resetCycle = input.hasRecentReduce || undroppedTokens < input.lastNudgeUndropped;
-  const lastNudge = resetCycle ? 0 : input.lastNudgeUndropped;
-  const lastLevel = resetCycle ? "" : input.lastNudgeLevel;
-  const quiet = () => ({
+  const previousLevel = input.lastNudgeLevel;
+  let lastNudge = Math.max(0, input.lastNudgeUndropped);
+  let nextLevel = previousLevel;
+  let clearPostReduceGrace = false;
+  const quiet = (level2 = "gentle") => ({
     fire: false,
-    level: "gentle",
+    sticky: false,
+    level: level2,
     undroppedTokens,
     tailTokens,
     severity,
     nextLastNudge: lastNudge,
-    nextLastNudgeLevel: lastLevel
+    nextLastNudgeLevel: nextLevel,
+    clearPostReduceGrace
   });
   if (input.evaluable === false || input.generationInvalidated === true)
     return quiet();
-  if (input.hasRecentReduce)
-    return quiet();
-  if (tailTokens < CHANNEL1_MIN_TOKENS)
+  if (input.hasRecentReduce || input.postReduceGracePending)
     return quiet();
-  if (undroppedTokens < CHANNEL1_FLOOR_TOKENS || undroppedTokens === 0)
-    return quiet();
-  if (severity < S_GENTLE)
-    return quiet();
-  let level;
-  if (severity >= S_URGENT)
-    level = "urgent";
-  else if (severity >= S_FIRM)
-    level = "firm";
-  else
-    level = "gentle";
-  const escalated = lastLevel === "" || LEVEL_RANK[level] > LEVEL_RANK[lastLevel];
-  const cadenceReached = lastLevel !== "" && undroppedTokens - lastNudge >= channel1RefireTokens(tailTokens);
-  if (!escalated && !cadenceReached)
+  let level = "";
+  if (tailTokens >= CHANNEL1_MIN_TOKENS && undroppedTokens >= CHANNEL1_FLOOR_TOKENS && severity >= S_GENTLE) {
+    if (severity >= S_URGENT)
+      level = "urgent";
+    else if (severity >= S_FIRM)
+      level = "firm";
+    else
+      level = "gentle";
+  }
+  const previousRank = previousLevel === "" ? 0 : LEVEL_RANK[previousLevel];
+  const currentRank = level === "" ? 0 : LEVEL_RANK[level];
+  const graceBaseline = input.postReduceGraceBaselineU;
+  if (graceBaseline !== undefined) {
+    const preReduceLevel = input.postReduceGracePreLevel ?? previousLevel;
+    const preReduceRank = preReduceLevel === "" ? 0 : LEVEL_RANK[preReduceLevel];
+    const regrowthReached = undroppedTokens - Math.max(0, graceBaseline) >= channel1RefireTokens(tailTokens);
+    const escalatedAbovePreReduceBand = currentRank > preReduceRank;
+    if (!regrowthReached && !escalatedAbovePreReduceBand) {
+      return quiet(level === "" ? "gentle" : level);
+    }
+    clearPostReduceGrace = true;
+  }
+  if (level === "") {
+    nextLevel = "";
+    lastNudge = 0;
     return quiet();
+  }
+  if (currentRank < previousRank) {
+    nextLevel = level;
+    lastNudge = undroppedTokens;
+    return quiet(level);
+  }
+  const crossedFromBelow = currentRank > previousRank;
+  const cadenceReached = currentRank === previousRank && undroppedTokens - lastNudge >= channel1RefireTokens(tailTokens);
+  const currentTurn = input.currentRealUserTurnCount;
+  const lastFireTurn = input.lastFireOrdinal;
+  const stickyTurnGapReached = currentTurn === undefined || lastFireTurn === undefined || lastFireTurn > currentTurn || currentTurn - lastFireTurn >= CHANNEL1_STICKY_REAL_USER_TURN_GAP;
+  if (!crossedFromBelow && (!cadenceReached || !stickyTurnGapReached))
+    return quiet(level);
   return {
     fire: true,
+    sticky: !crossedFromBelow,
     level,
     undroppedTokens,
     tailTokens,
     severity,
     nextLastNudge: undroppedTokens,
-    nextLastNudgeLevel: level
+    nextLastNudgeLevel: level,
+    clearPostReduceGrace
   };
 }
 var CHANNEL2_SEVERITY_THRESHOLD = 0.75;
@@ -13265,44 +13459,42 @@ function formatOldestReclaimableHint(hint) {
   return rendered.length > 0 ? `
 oldest reclaimable: ${rendered}.` : "";
 }
-function buildChannel2Reminder(undroppedTokens, usableWindowTokens, hint) {
-  const amount = approxThousands(undroppedTokens);
-  const usableWindow = approxThousands(usableWindowTokens);
+function reclaimableToolOutputCount(parts) {
+  return parts.filter((part) => part.kind === "toolOutput" && part.uTokens > 0).length;
+}
+function formatReclaimableOutputSummary(count, tokens) {
+  const outputCount = Math.max(0, Math.floor(count));
+  const outputs = outputCount === 0 ? "spent tool outputs" : `${outputCount} spent tool output${outputCount === 1 ? "" : "s"}`;
+  return `${outputs} (~${approxThousands(tokens)} tokens)`;
+}
+function buildChannel2Reminder(undroppedTokens, reclaimableToolOutputs, hint) {
+  const summary = formatReclaimableOutputSummary(reclaimableToolOutputs, undroppedTokens);
   const hintText = formatOldestReclaimableHint(hint);
   return `<system-reminder>
-` + `Routine housekeeping: an older span of this session folds into compact history automatically — nothing is lost and nothing pauses. ` + `Drop spent tool outputs with ctx_reduce first so the archive keeps only what matters (~${amount} of ~${usableWindow} reclaimable).${hintText}
+` + `Routine housekeeping: ${summary} are reclaimable — make a ctx_reduce pass at a natural stopping point.${hintText}
 ` + `</system-reminder>`;
 }
-var CHANNEL1_STICKY_REAL_USER_TURN_GAP = 3;
-function shouldUseStickyChannel1Reminder(input) {
-  if (input.lastLevel !== input.level)
-    return false;
-  if (input.lastOrdinal > input.currentRealUserTurnCount)
-    return false;
-  const gap = input.currentRealUserTurnCount - input.lastOrdinal;
-  return gap >= 0 && gap < CHANNEL1_STICKY_REAL_USER_TURN_GAP;
-}
-function buildChannel1Reminder(level, undroppedTokens, usableWindowTokens, hint, sticky = false) {
+var CHANNEL1_STICKY_REAL_USER_TURN_GAP = 5;
+function buildChannel1Reminder(level, undroppedTokens, reclaimableToolOutputs, hint, sticky = false) {
+  const summary = formatReclaimableOutputSummary(reclaimableToolOutputs, undroppedTokens);
   const hintText = formatOldestReclaimableHint(hint);
   if (sticky) {
     return `
 
 <system-reminder>
-Reminder: ctx_reduce housekeeping still pending —${hintText}
+Reminder: ${summary} are still reclaimable — ctx_reduce them at a natural stopping point.${hintText}
 </system-reminder>`;
   }
-  const amount = approxThousands(undroppedTokens);
-  const usableWindow = approxThousands(usableWindowTokens);
   let body;
   switch (level) {
     case "gentle":
-      body = `Housekeeping: some earlier tool outputs are spent and can be dropped with ctx_reduce when you are done with them. ` + `Context is managed automatically — this is tidiness, never a reason to rush or narrow scope.`;
+      body = `Housekeeping: ${summary} are reclaimable — drop the ones you have already processed with ctx_reduce at a natural stopping point.`;
       break;
     case "firm":
-      body = `Housekeeping: ~${amount} of this session's ~${usableWindow} window is spent tool output. ` + `Drop what you have already processed with ctx_reduce at a natural stopping point. ` + `Not a limit — nothing is lost either way.`;
+      body = `Housekeeping: ${summary} are reclaimable — make a ctx_reduce pass at a natural stopping point.`;
       break;
     case "urgent":
-      body = `Housekeeping backlog: ~${amount} of this session's ~${usableWindow} window is spent tool output — worth a ctx_reduce pass now. ` + `This is routine and lossless; it is never a reason to change scope.`;
+      body = `Housekeeping backlog: ${summary} are reclaimable — a ctx_reduce pass is due.`;
       break;
   }
   return `
@@ -13363,8 +13555,8 @@ function planEmergencyDrop(input) {
   if (!Number.isFinite(currentTotalInputTokens) || currentTotalInputTokens <= 0) {
     return noop("unknown-usage");
   }
-  if (hasPriorDrop && currentTotalInputTokens === priorInputSample) {
-    return noop("same-input-sample (awaiting fresh usage after prior drop)");
+  if (hasPriorDrop) {
+    return noop(`pressure-episode-latched (prior sample ${priorInputSample}; awaiting exit or independent bust)`);
   }
   let tailTokens = 0;
   for (const tag of floorTags) {
@@ -13474,12 +13666,50 @@ function getUpdateTagDropModeStatement(db) {
 var updateTagByteSizeStatements = new WeakMap;
 var updateTagInputByteSizeStatements = new WeakMap;
 var CONTENT_ID_SUFFIX = /:(?:p|file)\d+$/;
+var RECENT_OWNER_SCAN_PAGE_SIZE = 128;
+var recentTagOwnerStatements = new WeakMap;
 function ownerMessageIdForTagRow(row) {
   if (row.type === "tool") {
     return row.tool_owner_message_id ?? row.message_id;
   }
   return row.message_id.replace(CONTENT_ID_SUFFIX, "");
 }
+function getRecentTagOwnerStatement(db) {
+  let statement = recentTagOwnerStatements.get(db);
+  if (!statement) {
+    statement = db.prepare(`SELECT type, message_id, tool_owner_message_id
+             FROM tags
+             WHERE session_id = ?
+             ORDER BY tag_number DESC, id DESC
+             LIMIT ? OFFSET ?`);
+    recentTagOwnerStatements.set(db, statement);
+  }
+  return statement;
+}
+function getRecentTagOwnerMessageIds(db, sessionId, maxOwners) {
+  const recent = new Set;
+  if (!Number.isFinite(maxOwners) || maxOwners <= 0)
+    return recent;
+  const statement = getRecentTagOwnerStatement(db);
+  let offset = 0;
+  while (recent.size < maxOwners) {
+    const rows = statement.all(sessionId, RECENT_OWNER_SCAN_PAGE_SIZE, offset);
+    for (const row of rows) {
+      if (typeof row.type !== "string" || typeof row.message_id !== "string")
+        continue;
+      const ownerId = row.type === "tool" ? typeof row.tool_owner_message_id === "string" ? row.tool_owner_message_id : null : row.message_id.replace(CONTENT_ID_SUFFIX, "");
+      if (!ownerId || recent.has(ownerId))
+        continue;
+      recent.add(ownerId);
+      if (recent.size >= maxOwners)
+        break;
+    }
+    if (rows.length < RECENT_OWNER_SCAN_PAGE_SIZE)
+      break;
+    offset += rows.length;
+  }
+  return recent;
+}
 var RECLAIM_HINT_EXCLUDED_TOOLS = new Set([
   "ask",
   "bash_kill",
@@ -14603,15 +14833,15 @@ import {
   unlinkSync as unlinkSync2,
   writeFileSync
 } from "node:fs";
-import { homedir as homedir4 } from "node:os";
+import { homedir as homedir3 } from "node:os";
 import { basename as basename2, dirname as dirname3, isAbsolute, join as join5 } from "node:path";
 var CONFIG_FILE_BASENAME = "magic-context";
 var MOVED_MARKER_SUFFIX = ".MOVED_READPLEASE";
 function homeDir() {
   if (process.platform === "win32") {
-    return process.env.USERPROFILE || process.env.HOME || homedir4();
+    return process.env.USERPROFILE || process.env.HOME || homedir3();
   }
-  return process.env.HOME || homedir4();
+  return process.env.HOME || homedir3();
 }
 function configHome() {
   const xdg = process.env.XDG_CONFIG_HOME;
@@ -15592,6 +15822,7 @@ var memoryImportanceColumnCache = new WeakMap;
 var memoryScopeColumnCache = new WeakMap;
 var memoryShareableColumnCache = new WeakMap;
 var memoryClassifiedAtColumnCache = new WeakMap;
+var memoryVerificationsTableCache = new WeakMap;
 function hasMemoryImportanceColumn(db) {
   const cached = memoryImportanceColumnCache.get(db);
   if (cached !== undefined)
@@ -17045,39 +17276,76 @@ function mapBackfillCandidateRows(rows) {
     title: row.title
   }));
 }
-var sessionBackfillCandidateStatements = new WeakMap;
-function loadUnembeddedSessionChunkCandidates(db, projectPath, sessionId, modelId, limit, excludeIds) {
-  if (excludeIds && excludeIds.length > 0) {
-    const placeholders3 = excludeIds.map(() => "?").join(", ");
-    const stmt2 = db.prepare(`SELECT c.id AS id,
-                    c.session_id AS sessionId,
-                    c.start_message AS startMessage,
-                    c.end_message AS endMessage,
-                    c.title AS title
-             FROM compartments c
-             JOIN session_projects sp
-               ON sp.session_id = c.session_id
-              AND sp.harness = c.harness
-              AND sp.project_path = ?
-             WHERE c.session_id = ?
-               AND c.start_message IS NOT NULL
-               AND c.end_message IS NOT NULL
-               AND c.id NOT IN (${placeholders3})
-               AND NOT EXISTS (
-                   SELECT 1
-                   FROM compartment_chunk_embeddings current
-                   WHERE current.compartment_id = c.id
-                     AND current.project_path = ?
-                     AND current.model_id = ?
-               )
-             ORDER BY c.start_message ASC, c.id ASC
-             LIMIT ?`);
-    const rows2 = stmt2.all(projectPath, sessionId, ...excludeIds, projectPath, modelId, Math.max(1, limit));
-    return mapBackfillCandidateRows(rows2);
+function classifyChunkCoverageDefect(db, projectPath, modelId, candidate, maxInputTokens) {
+  const canonicalText = buildCanonicalChunkTextFromFts(db, candidate.sessionId, candidate.startMessage, candidate.endMessage) || buildCompartmentSummaryFallbackText(db, candidate.id);
+  const windows = chunkCanonicalText(canonicalText, candidate.startMessage, candidate.endMessage, maxInputTokens);
+  const existing = getExistingChunkHashes(db, candidate.id, modelId, projectPath);
+  if (windows.some((window) => !existing.has(window.windowIndex)))
+    return "missing";
+  if (existing.size !== windows.length || windows.some((window) => existing.get(window.windowIndex) !== window.chunkHash)) {
+    return "stale";
   }
-  let stmt = sessionBackfillCandidateStatements.get(db);
-  if (!stmt) {
-    stmt = db.prepare(`SELECT c.id AS id,
+  return null;
+}
+function selectHashIncompleteChunkCandidates(db, projectPath, modelId, candidates, limit, maxInputTokens) {
+  const missing = [];
+  const stale = [];
+  for (const candidate of candidates) {
+    const defect = classifyChunkCoverageDefect(db, projectPath, modelId, candidate, maxInputTokens);
+    if (defect === "missing")
+      missing.push(candidate);
+    else if (defect === "stale")
+      stale.push(candidate);
+  }
+  return [...missing, ...stale].slice(0, limit);
+}
+var sessionBackfillCandidateStatements = new WeakMap;
+function loadUnembeddedSessionChunkCandidates(db, projectPath, sessionId, modelId, limit, excludeIds, maxInputTokens = DEFAULT_COMPARTMENT_CHUNK_MAX_INPUT_TOKENS) {
+  const exclusions = excludeIds && excludeIds.length > 0 ? excludeIds : [];
+  const exclusionSql = exclusions.length > 0 ? `AND c.id NOT IN (${exclusions.map(() => "?").join(", ")})` : "";
+  const stmt = exclusions.length > 0 ? db.prepare(`SELECT c.id AS id,
+                          c.session_id AS sessionId,
+                          c.start_message AS startMessage,
+                          c.end_message AS endMessage,
+                          c.title AS title
+                   FROM compartments c
+                   JOIN session_projects sp
+                     ON sp.session_id = c.session_id
+                    AND sp.harness = c.harness
+                    AND sp.project_path = ?
+                   WHERE c.session_id = ?
+                     AND c.start_message IS NOT NULL
+                     AND c.end_message IS NOT NULL
+                     ${exclusionSql}
+                   ORDER BY c.start_message ASC, c.id ASC`) : (() => {
+    let cached = sessionBackfillCandidateStatements.get(db);
+    if (!cached) {
+      cached = db.prepare(`SELECT c.id AS id,
+                                  c.session_id AS sessionId,
+                                  c.start_message AS startMessage,
+                                  c.end_message AS endMessage,
+                                  c.title AS title
+                           FROM compartments c
+                           JOIN session_projects sp
+                             ON sp.session_id = c.session_id
+                            AND sp.harness = c.harness
+                            AND sp.project_path = ?
+                           WHERE c.session_id = ?
+                             AND c.start_message IS NOT NULL
+                             AND c.end_message IS NOT NULL
+                           ORDER BY c.start_message ASC, c.id ASC`);
+      sessionBackfillCandidateStatements.set(db, cached);
+    }
+    return cached;
+  })();
+  const rows = stmt.all(projectPath, sessionId, ...exclusions);
+  return selectHashIncompleteChunkCandidates(db, projectPath, modelId, mapBackfillCandidateRows(rows), Math.max(1, limit), maxInputTokens);
+}
+function countUnembeddedSessionCompartments(db, projectPath, sessionId, modelId, maxInputTokens = DEFAULT_COMPARTMENT_CHUNK_MAX_INPUT_TOKENS) {
+  return loadUnembeddedSessionChunkCandidates(db, projectPath, sessionId, modelId, Number.MAX_SAFE_INTEGER, undefined, maxInputTokens).length;
+}
+function countSessionCompartmentEmbedCoverage(db, projectPath, sessionId, modelId, maxInputTokens = DEFAULT_COMPARTMENT_CHUNK_MAX_INPUT_TOKENS) {
+  const rows = db.prepare(`SELECT c.id AS id,
                     c.session_id AS sessionId,
                     c.start_message AS startMessage,
                     c.end_message AS endMessage,
@@ -17090,67 +17358,22 @@ function loadUnembeddedSessionChunkCandidates(db, projectPath, sessionId, modelI
              WHERE c.session_id = ?
                AND c.start_message IS NOT NULL
                AND c.end_message IS NOT NULL
-               AND NOT EXISTS (
-                   SELECT 1
-                   FROM compartment_chunk_embeddings current
-                   WHERE current.compartment_id = c.id
-                     AND current.project_path = ?
-                     AND current.model_id = ?
-               )
-             ORDER BY c.start_message ASC, c.id ASC
-             LIMIT ?`);
-    sessionBackfillCandidateStatements.set(db, stmt);
+             ORDER BY c.start_message ASC, c.id ASC`).all(projectPath, sessionId);
+  const candidates = mapBackfillCandidateRows(rows);
+  let embedded = 0;
+  for (const candidate of candidates) {
+    if (classifyChunkCoverageDefect(db, projectPath, modelId, candidate, maxInputTokens) === null) {
+      embedded += 1;
+    }
   }
-  const rows = stmt.all(projectPath, sessionId, projectPath, modelId, Math.max(1, limit));
-  return mapBackfillCandidateRows(rows);
-}
-function countUnembeddedSessionCompartments(db, projectPath, sessionId, modelId) {
-  const row = db.prepare(`SELECT COUNT(*) AS n
-             FROM compartments c
-             JOIN session_projects sp
-               ON sp.session_id = c.session_id
-              AND sp.harness = c.harness
-              AND sp.project_path = ?
-             WHERE c.session_id = ?
-               AND c.start_message IS NOT NULL
-               AND c.end_message IS NOT NULL
-               AND NOT EXISTS (
-                   SELECT 1
-                   FROM compartment_chunk_embeddings current
-                   WHERE current.compartment_id = c.id
-                     AND current.project_path = ?
-                     AND current.model_id = ?
-               )`).get(projectPath, sessionId, projectPath, modelId);
-  return typeof row?.n === "number" ? row.n : 0;
-}
-function countSessionCompartmentEmbedCoverage(db, projectPath, sessionId, modelId) {
-  const row = db.prepare(`SELECT
-               COUNT(*) AS total,
-               SUM(CASE WHEN EXISTS (
-                   SELECT 1 FROM compartment_chunk_embeddings e
-                   WHERE e.compartment_id = c.id
-                     AND e.project_path = ?
-                     AND e.model_id = ?
-               ) THEN 1 ELSE 0 END) AS embedded
-             FROM compartments c
-             JOIN session_projects sp
-               ON sp.session_id = c.session_id
-              AND sp.harness = c.harness
-              AND sp.project_path = ?
-             WHERE c.session_id = ?
-               AND c.start_message IS NOT NULL
-               AND c.end_message IS NOT NULL`).get(projectPath, modelId, projectPath, sessionId);
-  return {
-    total: typeof row?.total === "number" ? row.total : 0,
-    embedded: typeof row?.embedded === "number" ? row.embedded : 0
-  };
+  return { embedded, total: candidates.length };
 }
 
 // src/features/magic-context/project-embedding-registry.ts
 import { createHash as createHash14, randomUUID as randomUUID2 } from "node:crypto";
 
 // src/config/schema/magic-context.ts
-import { homedir as homedir5 } from "node:os";
+import { homedir as homedir4 } from "node:os";
 
 // ../../node_modules/.bun/zod@4.4.3/node_modules/zod/v4/classic/external.js
 var exports_external = {};
@@ -17777,7 +18000,7 @@ __export(exports_util, {
   createTransparentProxy: () => createTransparentProxy,
   defineLazy: () => defineLazy,
   esc: () => esc,
-  escapeRegex: () => escapeRegex2,
+  escapeRegex: () => escapeRegex,
   explicitlyAborted: () => explicitlyAborted,
   extend: () => extend,
   finalizeIssue: () => finalizeIssue,
@@ -18054,7 +18277,7 @@ var primitiveTypes = /* @__PURE__ */ new Set([
   "symbol",
   "undefined"
 ]);
-function escapeRegex2(str) {
+function escapeRegex(str) {
   return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone(inst, def, params) {
@@ -18764,7 +18987,7 @@ function emoji() {
 var ipv4 = /^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/;
 var ipv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))$/;
 var mac = (delimiter) => {
-  const escapedDelim = escapeRegex2(delimiter ?? ":");
+  const escapedDelim = escapeRegex(delimiter ?? ":");
   return new RegExp(`^(?:[0-9A-F]{2}${escapedDelim}){5}[0-9A-F]{2}$|^(?:[0-9a-f]{2}${escapedDelim}){5}[0-9a-f]{2}$`);
 };
 var cidrv4 = /^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\/([0-9]|[1-2][0-9]|3[0-2])$/;
@@ -19265,7 +19488,7 @@ var $ZodCheckUpperCase = /* @__PURE__ */ $constructor("$ZodCheckUpperCase", (ins
 });
 var $ZodCheckIncludes = /* @__PURE__ */ $constructor("$ZodCheckIncludes", (inst, def) => {
   $ZodCheck.init(inst, def);
-  const escapedRegex = escapeRegex2(def.includes);
+  const escapedRegex = escapeRegex(def.includes);
   const pattern = new RegExp(typeof def.position === "number" ? `^.{${def.position}}${escapedRegex}` : escapedRegex);
   def.pattern = pattern;
   inst._zod.onattach.push((inst2) => {
@@ -19289,7 +19512,7 @@ var $ZodCheckIncludes = /* @__PURE__ */ $constructor("$ZodCheckIncludes", (inst,
 });
 var $ZodCheckStartsWith = /* @__PURE__ */ $constructor("$ZodCheckStartsWith", (inst, def) => {
   $ZodCheck.init(inst, def);
-  const pattern = new RegExp(`^${escapeRegex2(def.prefix)}.*`);
+  const pattern = new RegExp(`^${escapeRegex(def.prefix)}.*`);
   def.pattern ?? (def.pattern = pattern);
   inst._zod.onattach.push((inst2) => {
     const bag = inst2._zod.bag;
@@ -19312,7 +19535,7 @@ var $ZodCheckStartsWith = /* @__PURE__ */ $constructor("$ZodCheckStartsWith", (i
 });
 var $ZodCheckEndsWith = /* @__PURE__ */ $constructor("$ZodCheckEndsWith", (inst, def) => {
   $ZodCheck.init(inst, def);
-  const pattern = new RegExp(`.*${escapeRegex2(def.suffix)}$`);
+  const pattern = new RegExp(`.*${escapeRegex(def.suffix)}$`);
   def.pattern ?? (def.pattern = pattern);
   inst._zod.onattach.push((inst2) => {
     const bag = inst2._zod.bag;
@@ -20959,7 +21182,7 @@ var $ZodEnum = /* @__PURE__ */ $constructor("$ZodEnum", (inst, def) => {
   const values = getEnumValues(def.entries);
   const valuesSet = new Set(values);
   inst._zod.values = valuesSet;
-  inst._zod.pattern = new RegExp(`^(${values.filter((k) => propertyKeyTypes.has(typeof k)).map((o) => typeof o === "string" ? escapeRegex2(o) : o.toString()).join("|")})$`);
+  inst._zod.pattern = new RegExp(`^(${values.filter((k) => propertyKeyTypes.has(typeof k)).map((o) => typeof o === "string" ? escapeRegex(o) : o.toString()).join("|")})$`);
   inst._zod.parse = (payload, _ctx) => {
     const input = payload.value;
     if (valuesSet.has(input)) {
@@ -20981,7 +21204,7 @@ var $ZodLiteral = /* @__PURE__ */ $constructor("$ZodLiteral", (inst, def) => {
   }
   const values = new Set(def.values);
   inst._zod.values = values;
-  inst._zod.pattern = new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex2(o) : o ? escapeRegex2(o.toString()) : String(o)).join("|")})$`);
+  inst._zod.pattern = new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex(o) : o ? escapeRegex(o.toString()) : String(o)).join("|")})$`);
   inst._zod.parse = (payload, _ctx) => {
     const input = payload.value;
     if (values.has(input)) {
@@ -21346,7 +21569,7 @@ var $ZodTemplateLiteral = /* @__PURE__ */ $constructor("$ZodTemplateLiteral", (i
       const end = source.endsWith("$") ? source.length - 1 : source.length;
       regexParts.push(source.slice(start, end));
     } else if (part === null || primitiveTypes.has(typeof part)) {
-      regexParts.push(escapeRegex2(`${part}`));
+      regexParts.push(escapeRegex(`${part}`));
     } else {
       throw new Error(`Invalid template literal part: ${part}`);
     }
@@ -31833,9 +32056,9 @@ var EmbeddingFallbackProviderSchema = exports_external.enum(["local", "openai-co
 function expandConfigPath(value) {
   const trimmed = value.trim();
   if (trimmed === "~")
-    return homedir5();
+    return homedir4();
   if (trimmed.startsWith("~/"))
-    return `${homedir5()}/${trimmed.slice(2)}`;
+    return `${homedir4()}/${trimmed.slice(2)}`;
   return trimmed;
 }
 var BaseEmbeddingConfigSchema = exports_external.object({
@@ -31848,6 +32071,7 @@ var BaseEmbeddingConfigSchema = exports_external.object({
   query_input_type: exports_external.string().optional().describe("Optional input_type for query (search) embeddings on asymmetric models (e.g. NVIDIA NIM 'query'). When unset, query embeddings use embedding.input_type. Passage/stored content always uses embedding.input_type."),
   truncate: exports_external.string().optional().describe("Optional truncate mode sent in the embedding request body (e.g. NVIDIA NIM accepts 'NONE' | 'START' | 'END'). Omitted from the request when unset."),
   max_input_tokens: exports_external.number().int().positive().optional().describe("Optional maximum input tokens for chunk embeddings. Defaults conservatively to 512 when omitted."),
+  local_runtime: exports_external.enum(["auto", "native", "wasm"]).default("auto").describe("Local provider only: ONNX runtime selection. 'auto' uses native under Node and uses WASM under Bun versions before 1.4.0, where Bun's NAPI teardown race can panic on quit; native is restored automatically on Bun 1.4.0+. Set 'native' only to prefer speed while accepting that pre-1.4.0 Bun crash risk, or 'wasm' to avoid loading the native addon."),
   local_dtype: exports_external.enum([
     "auto",
     "fp32",
@@ -31904,6 +32128,7 @@ var EmbeddingConfigSchema = BaseEmbeddingConfigSchema.transform((data) => {
     return {
       provider: "local",
       model: data.model?.trim() || DEFAULT_LOCAL_EMBEDDING_MODEL,
+      local_runtime: data.local_runtime,
       ...data.max_input_tokens ? { max_input_tokens: data.max_input_tokens } : {},
       ...data.local_dtype ? { local_dtype: data.local_dtype } : {}
     };
@@ -31984,7 +32209,8 @@ var MagicContextConfigSchema = exports_external.object({
   }).default({ enforce_private_permissions: true }).describe("Storage permission policy. The default keeps session content and memories owner-private. Disabling enforcement is for trusted shared-group storage managed externally; every group member able to read the storage can read all stored session content and memories."),
   embedding: EmbeddingConfigSchema.default({
     provider: "local",
-    model: DEFAULT_LOCAL_EMBEDDING_MODEL
+    model: DEFAULT_LOCAL_EMBEDDING_MODEL,
+    local_runtime: "auto"
   }).describe("Embedding provider configuration"),
   subc: exports_external.object({
     connection_file: exports_external.string().trim().min(1).transform(expandConfigPath).describe("Path to the owner-only subc connection file.")
@@ -33726,21 +33952,28 @@ var SYNAPSE_DEFAULT_MODEL = "gte-modernbert-base-f16";
 var SYNAPSE_MAX_INPUT_TOKENS = 8192;
 var SYNAPSE_DEFAULT_QUERY_TIMEOUT_MS = 3000;
 var SYNAPSE_DEFAULT_BATCH_TIMEOUT_MS = 120000;
+var SYNAPSE_CERTIFICATION_REFUSAL_REASONS = new Set([
+  "not_certified",
+  "probe_required",
+  "migration_required"
+]);
 
 class SynapseEmbeddingError extends Error {
   code;
   retryAfterMs;
   permanent;
+  refusalReason;
   constructor(code, message, options) {
     super(message, options?.cause === undefined ? undefined : { cause: options.cause });
     this.name = "SynapseEmbeddingError";
     this.code = code;
     this.permanent = options?.permanent ?? isPermanentSynapseCode(code);
     this.retryAfterMs = options?.retryAfterMs ?? (this.permanent ? undefined : 100);
+    this.refusalReason = options?.refusalReason;
   }
 }
 function isPermanentSynapseCode(code) {
-  return code === "artifact_invalid" || code === "substitution_rejected" || code === "not_certified" || code === "probe_required" || code === "idempotency_conflict" || code === "schema_violation";
+  return code === "artifact_invalid" || code === "substitution_rejected" || code === "not_certified" || code === "probe_required" || code === "idempotency_conflict" || code === "schema_violation" || code === "certification_refused" || code === "needs_reauth";
 }
 function asRecord(value) {
   return value !== null && typeof value === "object" ? value : null;
@@ -33766,11 +33999,21 @@ function readErrorCode(value) {
   }
   return;
 }
+function readCertificationRefusalReason(value) {
+  if (!(value instanceof SubcCallError))
+    return;
+  const detail = value.detail;
+  if (typeof detail === "string")
+    return detail;
+  const record2 = asRecord(detail);
+  return typeof record2?.reason === "string" ? record2.reason : undefined;
+}
 function classifyError(value) {
   if (value instanceof SynapseEmbeddingError)
     return value;
   const code = readErrorCode(value) ?? (value instanceof Error ? value.name : "transport");
   const normalized = code.toLowerCase();
+  const refusalReason = readCertificationRefusalReason(value);
   let mapped = "transport";
   if (normalized.includes("queue_full"))
     mapped = "queue_full";
@@ -33782,12 +34025,16 @@ function classifyError(value) {
     mapped = "artifact_invalid";
   else if (normalized.includes("substitution"))
     mapped = "substitution_rejected";
+  else if (normalized === "certification_refused")
+    mapped = "certification_refused";
   else if (normalized.includes("not_certified"))
     mapped = "not_certified";
   else if (normalized.includes("probe_required"))
     mapped = "probe_required";
   else if (normalized.includes("idempotency_conflict"))
     mapped = "idempotency_conflict";
+  else if (normalized.includes("needs_reauth"))
+    mapped = "needs_reauth";
   else if (normalized.includes("schema"))
     mapped = "schema_violation";
   else if (normalized.includes("module_restarted") || normalized.includes("module restarted"))
@@ -33795,9 +34042,41 @@ function classifyError(value) {
   const message = value instanceof Error ? value.message : String(value);
   return new SynapseEmbeddingError(mapped, message, {
     retryAfterMs: readRetryAfter(value) ?? (isPermanentSynapseCode(mapped) ? undefined : 100),
-    cause: value
+    cause: value,
+    refusalReason
   });
 }
+function embeddingFailureFor(error51) {
+  const typedReason = error51.refusalReason;
+  if (typedReason !== undefined && SYNAPSE_CERTIFICATION_REFUSAL_REASONS.has(typedReason) || error51.code === "not_certified" || error51.code === "probe_required") {
+    return {
+      class: "certification_refusal",
+      reason: `SYNAPSE certification refused embedding: ${typedReason ?? error51.code}`,
+      retryable: false
+    };
+  }
+  if (error51.code === "certification_refused") {
+    return {
+      class: "certification_refusal",
+      reason: `SYNAPSE certification refused embedding: ${typedReason ?? "unknown reason"}`,
+      retryable: false
+    };
+  }
+  if (typedReason === "needs_reauth" || typedReason === "needs_reauth_expired") {
+    return {
+      class: "credential_required",
+      reason: "SYNAPSE requires reauthentication",
+      retryable: false
+    };
+  }
+  if (error51.code === "substitution_rejected") {
+    return { class: "substitution_rejected", reason: error51.message, retryable: false };
+  }
+  if (error51.code === "schema_violation" || error51.code === "artifact_invalid") {
+    return { class: "invalid_envelope", reason: error51.message, retryable: false };
+  }
+  return { class: "transport_error", reason: error51.message, retryable: !error51.permanent };
+}
 function wait(ms) {
   return new Promise((resolve4) => setTimeout(resolve4, ms));
 }
@@ -33917,6 +34196,7 @@ class SynapseEmbeddingProvider {
   initialized = false;
   initializing = null;
   permanentFailure = false;
+  lastFailureReason = null;
   batchLimit = 16;
   tokenBudget = null;
   constructor(options) {
@@ -33991,9 +34271,11 @@ class SynapseEmbeddingProvider {
           this.tokenBudget = metadata.recommended_token_budget ?? this.tokenBudget;
         }
         this.initialized = true;
+        this.recordSuccess();
         return true;
       } catch (error51) {
         const classified = classifyError(error51);
+        this.recordFailure(classified);
         if (classified.permanent) {
           this.permanentFailure = true;
           log(`[magic-context] Synapse lane disabled: ${classified.code}: ${classified.message}`);
@@ -34020,6 +34302,7 @@ class SynapseEmbeddingProvider {
       if (!extracted)
         throw new SynapseEmbeddingError("schema_violation", "Synapse query returned no vector");
       this.validateResponse(extracted.metadata, extracted.vector.length);
+      this.recordSuccess();
       return extracted.vector;
     } catch (error51) {
       this.logCallFailure(error51, "embed.query");
@@ -34083,6 +34366,7 @@ class SynapseEmbeddingProvider {
           const vectorArray = Float32Array.from(vector);
           this.validateResponse({ ...batchEnvelope, ...item }, vectorArray.length);
           output.set(id, vectorArray);
+          this.recordSuccess();
         }
       } catch (error51) {
         const classified = classifyError(error51);
@@ -34105,6 +34389,9 @@ class SynapseEmbeddingProvider {
   isLoaded() {
     return this.initialized;
   }
+  getLastFailureReason() {
+    return this.lastFailureReason;
+  }
   requestConstraints(extra) {
     const metadata = this.metadata;
     if (!metadata)
@@ -34222,11 +34509,18 @@ class SynapseEmbeddingProvider {
   }
   logCallFailure(error51, operation) {
     const classified = classifyError(error51);
+    this.recordFailure(classified);
     if (classified.permanent)
       this.permanentFailure = true;
     const suffix = classified.retryAfterMs === undefined ? "" : ` retry_after_ms=${classified.retryAfterMs}`;
     log(`[magic-context] Synapse ${operation} failed: ${classified.code}${suffix}: ${classified.message}`);
   }
+  recordFailure(error51) {
+    this.lastFailureReason = embeddingFailureFor(error51);
+  }
+  recordSuccess() {
+    this.lastFailureReason = null;
+  }
 }
 
 // src/features/magic-context/memory/embedding-identity.ts
@@ -34270,6 +34564,32 @@ import { chmodSync as chmodSync2, mkdirSync as mkdirSync3 } from "node:fs";
 import { open, stat, unlink, writeFile } from "node:fs/promises";
 import { dirname as dirname5, join as join6 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
+var BUN_NAPI_TEARDOWN_FIX_VERSION = [1, 4, 0];
+function currentLocalEmbeddingHost() {
+  const bun = globalThis.Bun;
+  const bunVersion = typeof process !== "undefined" && typeof process.versions?.bun === "string" ? process.versions.bun : undefined;
+  return {
+    isElectron: typeof process !== "undefined" && Boolean(process.versions?.electron),
+    isBun: Boolean(bun) || Boolean(bunVersion),
+    bunVersion
+  };
+}
+function bunHasNapiTeardownFix(version2) {
+  const match = version2?.match(/^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/);
+  if (!match || match[4])
+    return false;
+  const parsed = [Number(match[1]), Number(match[2]), Number(match[3])];
+  return parsed.some((part) => !Number.isSafeInteger(part)) ? false : parsed[0] > BUN_NAPI_TEARDOWN_FIX_VERSION[0] || parsed[0] === BUN_NAPI_TEARDOWN_FIX_VERSION[0] && (parsed[1] > BUN_NAPI_TEARDOWN_FIX_VERSION[1] || parsed[1] === BUN_NAPI_TEARDOWN_FIX_VERSION[1] && parsed[2] >= BUN_NAPI_TEARDOWN_FIX_VERSION[2]);
+}
+function resolveLocalEmbeddingRuntime(preference = "auto", host = currentLocalEmbeddingHost()) {
+  if (preference === "native" || preference === "wasm")
+    return preference;
+  if (host.isElectron)
+    return "electron";
+  if (host.isBun && !bunHasNapiTeardownFix(host.bunVersion))
+    return "wasm";
+  return "native";
+}
 var LOCK_POLL_MS = 150;
 var STALE_LOCK_MS = 3 * 60000;
 var MAX_LOCK_WAIT_MS = 5 * 60000;
@@ -34323,20 +34643,21 @@ function startLockHeartbeat(lockPath) {
 }
 var localEmbeddingRuntimeMode = "native";
 var wasmRuntimeInjected = false;
-var isElectronForRuntime = () => typeof process !== "undefined" && Boolean(process.versions?.electron);
+var localEmbeddingHostForRuntime = currentLocalEmbeddingHost;
 var importWasmOrtForRuntime = async () => {
-  const ortWebSpec = `onnxruntime-${"web"}`;
-  return await import(ortWebSpec);
+  const { createRequire: createRequireFn } = await import("node:module");
+  const requireFn = createRequireFn(import.meta.url);
+  const ortEntry = requireFn.resolve("onnxruntime-web");
+  return {
+    module: await import("onnxruntime-web"),
+    entryPath: ortEntry
+  };
 };
 var importTransformersForRuntime = async () => {
-  const transformersSpec = "@huggingface/transformers";
-  return await import(transformersSpec);
+  return await import("./transformers.node-b1wa0hgx.js");
 };
 var importTransformersWasmFallbackForRuntime = async () => {
-  const { createRequire: createRequireFn } = await import("node:module");
-  const requireFn = createRequireFn(import.meta.url);
-  const nodeEntry = requireFn.resolve("@huggingface/transformers");
-  const webEntry = pathToFileURL2(join6(dirname5(nodeEntry), "transformers.web.js")).href;
+  const webEntry = new URL("./transformers-web.js", import.meta.url).href;
   return await import(webEntry);
 };
 var modelCacheDirForRuntime = () => join6(getMagicContextStorageDir(), "models");
@@ -34354,17 +34675,9 @@ async function injectWasmOrt() {
   if (wasmRuntimeInjected)
     return true;
   try {
-    const ortWeb = await importWasmOrtForRuntime();
-    try {
-      const { createRequire: createRequireFn } = await import("node:module");
-      const requireFn = createRequireFn(import.meta.url);
-      const mainEntry = requireFn.resolve("onnxruntime-web");
-      const distDir = dirname5(mainEntry);
-      if (ortWeb.env?.wasm) {
-        ortWeb.env.wasm.wasmPaths = `${pathToFileURL2(distDir).href}/`;
-      }
-    } catch (pathError) {
-      log("[magic-context] could not resolve local onnxruntime-web/dist, falling back to default WASM paths:", pathError instanceof Error ? pathError.message : String(pathError));
+    const { module: ortWeb, entryPath } = await importWasmOrtForRuntime();
+    if (ortWeb.env?.wasm) {
+      ortWeb.env.wasm.wasmPaths = `${pathToFileURL2(dirname5(entryPath)).href}/`;
     }
     globalThis[Symbol.for("onnxruntime")] = ortWeb;
     wasmRuntimeInjected = true;
@@ -34391,10 +34704,18 @@ function disableLocalEmbeddingsAfterRuntimeFailure(detail) {
   localEmbeddingRuntimeMode = "disabled";
   logForRuntime(`[magic-context] local embeddings are disabled because both the onnxruntime-node native binding and the onnxruntime-web (WASM) fallback failed to load. Native failure: ${detail}. Run \`npx @cortexkit/magic-context@latest doctor\` for repair guidance (use \`doctor --force\` to reinstall cached plugin packages), or configure an \`openai-compatible\` embedding HTTP endpoint. Existing memories are unaffected.`);
 }
-async function loadTransformersForLocalEmbedding() {
+async function loadTransformersForLocalEmbedding(runtimePreference) {
   if (localEmbeddingRuntimeMode === "disabled") {
     throw new Error("local embedding runtime is disabled");
   }
+  const resolvedRuntime = resolveLocalEmbeddingRuntime(runtimePreference, localEmbeddingHostForRuntime());
+  if (resolvedRuntime === "wasm") {
+    if (!await ensureWasmOrtInjected()) {
+      disableLocalEmbeddingsAfterRuntimeFailure("the selected WASM runtime is unavailable");
+      throw new Error("onnxruntime-web failed to load");
+    }
+    return { module: await importTransformersForRuntime(), usesWasm: true };
+  }
   if (localEmbeddingRuntimeMode === "wasm") {
     if (!await ensureWasmOrtInjected()) {
       disableLocalEmbeddingsAfterRuntimeFailure("the previously selected WASM runtime is unavailable");
@@ -34407,7 +34728,7 @@ async function loadTransformersForLocalEmbedding() {
       throw wasmError;
     }
   }
-  const electron = isElectronForRuntime();
+  const electron = resolvedRuntime === "electron";
   if (electron) {
     const wasInjected = wasmRuntimeInjected;
     if (await ensureWasmOrtInjected()) {
@@ -34463,6 +34784,8 @@ function isNativeRuntimeMissingError(error51) {
   if (code === "ERR_DLOPEN_FAILED" && lower.includes("onnxruntime")) {
     return true;
   }
+  if (lower.includes('could not load the "sharp" module'))
+    return true;
   const mentionsNativeRuntime = lower.includes("onnxruntime-node") || lower.includes("onnxruntime_binding");
   if (!mentionsNativeRuntime)
     return false;
@@ -34515,19 +34838,22 @@ class LocalEmbeddingProvider {
   maxInputTokens;
   model;
   dtype;
+  runtimePreference;
   pipeline = null;
   initPromise = null;
   inFlight = 0;
   disposing = false;
   disposePromise = null;
   inFlightWaiters = [];
-  constructor(model = DEFAULT_LOCAL_EMBEDDING_MODEL, maxInputTokens = 512, dtype = DEFAULT_LOCAL_DTYPE) {
+  constructor(model = DEFAULT_LOCAL_EMBEDDING_MODEL, maxInputTokens = 512, dtype = DEFAULT_LOCAL_DTYPE, runtimePreference = "auto") {
     this.model = model;
     this.maxInputTokens = maxInputTokens;
     this.dtype = dtype || DEFAULT_LOCAL_DTYPE;
+    this.runtimePreference = runtimePreference;
     this.modelId = getEmbeddingProviderIdentity({
       provider: "local",
       model,
+      local_runtime: runtimePreference,
       ...dtype && dtype !== DEFAULT_LOCAL_DTYPE ? { local_dtype: dtype } : {}
     });
   }
@@ -34550,7 +34876,7 @@ class LocalEmbeddingProvider {
         if (this.disposing) {
           return;
         }
-        const { module: transformersModule, usesWasm } = await loadTransformersForLocalEmbedding();
+        const { module: transformersModule, usesWasm } = await loadTransformersForLocalEmbedding(this.runtimePreference);
         const env = transformersModule.env;
         const LogLevel = transformersModule.LogLevel;
         if (LogLevel && "ERROR" in LogLevel) {
@@ -34618,7 +34944,7 @@ class LocalEmbeddingProvider {
         if (!localEmbeddingRuntimeIsDisabled() && isNativeRuntimeMissingError(error51)) {
           disableLocalEmbeddingsAfterRuntimeFailure(error51 instanceof Error ? error51.message : String(error51));
         } else if (!localEmbeddingRuntimeIsDisabled()) {
-          log("[magic-context] embedding model failed to load:", error51);
+          logForRuntime("[magic-context] embedding model failed to load:", error51);
         }
         this.pipeline = null;
       } finally {
@@ -35210,6 +35536,13 @@ function markProjectLoadUntrusted(projectIdentity) {
   untrustedLoadProjects.add(projectIdentity);
 }
 var testProviderFactory = null;
+
+class TestProviderFactoryRequiredError extends Error {
+  constructor() {
+    super("test constructed a network-capable embedding provider without a test factory — install _setTestProviderFactoryForProject or set embedding.provider off in the fixture");
+    this.name = "TestProviderFactoryRequiredError";
+  }
+}
 function synapseConfigFields(config2) {
   const raw = config2;
   return {
@@ -35281,6 +35614,7 @@ function resolveEmbeddingConfig(config2) {
     return {
       provider: "local",
       model: config2?.model?.trim() || DEFAULT_LOCAL_EMBEDDING_MODEL,
+      local_runtime: config2?.local_runtime ?? "auto",
       ...config2?.max_input_tokens ? {
         max_input_tokens: normalizeCompartmentChunkMaxInputTokens(config2.max_input_tokens)
       } : {},
@@ -35325,11 +35659,14 @@ function resolveEmbeddingConfig(config2) {
   throw new Error("Unknown embedding provider");
 }
 function createProvider(config2, context) {
+  if (config2.provider === "off") {
+    return null;
+  }
   if (testProviderFactory) {
     return testProviderFactory(config2);
   }
-  if (config2.provider === "off") {
-    return null;
+  if (process.env.MAGIC_CONTEXT_TEST_DATA_DIR?.trim()) {
+    throw new TestProviderFactoryRequiredError;
   }
   if (config2.provider === "openai-compatible") {
     return new OpenAICompatibleEmbeddingProvider({
@@ -35343,7 +35680,7 @@ function createProvider(config2, context) {
     });
   }
   if (config2.provider === "local") {
-    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens, config2.local_dtype);
+    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens, config2.local_dtype, config2.local_runtime);
   }
   if (config2.provider === "synapse") {
     const synapse = config2;
@@ -35830,15 +36167,25 @@ function shadowBackfillMissingBase(scope, primaryModelId, shadowModelId, project
     };
   }
   return {
-    sql: `SELECT DISTINCT cp.compartment_id AS id
+    sql: `SELECT cp.compartment_id AS id,
+                     MIN(CASE WHEN NOT EXISTS (
+                         SELECT 1 FROM compartment_chunk_embeddings same_key
+                         WHERE same_key.compartment_id = cp.compartment_id
+                           AND same_key.window_index = cp.window_index
+                           AND same_key.model_id = ?
+                     ) THEN 0 ELSE 1 END) AS defect_order
               FROM compartment_chunk_embeddings cp
               WHERE cp.project_path = ? AND cp.model_id = ?
                 AND NOT EXISTS (
-                    SELECT 1 FROM compartment_chunk_embeddings cs
-                    WHERE cs.compartment_id = cp.compartment_id AND cs.model_id = ?
-                )`,
-    params: [projectIdentity, primaryModelId, shadowModelId],
-    orderBy: " ORDER BY cp.compartment_id"
+                    SELECT 1 FROM compartment_chunk_embeddings current
+                    WHERE current.compartment_id = cp.compartment_id
+                      AND current.window_index = cp.window_index
+                      AND current.chunk_hash = cp.chunk_hash
+                      AND current.model_id = ?
+                )
+              GROUP BY cp.compartment_id`,
+    params: [shadowModelId, projectIdentity, primaryModelId, shadowModelId],
+    orderBy: " ORDER BY defect_order ASC, cp.compartment_id ASC"
   };
 }
 function shadowBackfillMissingIds(db, projectIdentity, scope, primaryModelId, shadowModelId, limit) {
@@ -36454,7 +36801,8 @@ async function embedSessionCompartmentChunks(db, projectIdentity, sessionId, opt
     return { status: "disabled", embedded: 0, total: 0 };
   }
   recordSessionProjectIdentity(db, sessionId, projectIdentity);
-  const total = countUnembeddedSessionCompartments(db, projectIdentity, sessionId, snapshot2.chunkModelId);
+  const maxInputTokens = getProjectEmbeddingMaxInputTokens(projectIdentity);
+  const total = countUnembeddedSessionCompartments(db, projectIdentity, sessionId, snapshot2.chunkModelId, maxInputTokens);
   if (total === 0)
     return { status: "nothing", embedded: 0, total: 0 };
   const holderId = `session-embed-${randomUUID2()}`;
@@ -36492,7 +36840,7 @@ async function embedSessionCompartmentChunks(db, projectIdentity, sessionId, opt
         aborted2 = true;
         break;
       }
-      const candidates = loadUnembeddedSessionChunkCandidates(db, projectIdentity, sessionId, snapshot2.chunkModelId, batchSize, [...skipIds, ...failedIds]);
+      const candidates = loadUnembeddedSessionChunkCandidates(db, projectIdentity, sessionId, snapshot2.chunkModelId, batchSize, [...skipIds, ...failedIds], maxInputTokens);
       if (candidates.length === 0)
         break;
       const {
@@ -36537,7 +36885,7 @@ async function embedSessionCompartmentChunks(db, projectIdentity, sessionId, opt
   if (aborted2)
     return { status: "aborted", embedded, total, failed: failedIds.length };
   if (providerDown || failedIds.length > 0) {
-    const remaining = Math.max(0, countUnembeddedSessionCompartments(db, projectIdentity, sessionId, snapshot2.chunkModelId) - skipIds.length);
+    const remaining = Math.max(0, countUnembeddedSessionCompartments(db, projectIdentity, sessionId, snapshot2.chunkModelId, maxInputTokens) - skipIds.length);
     if (remaining > 0) {
       return {
         status: "stalled",
@@ -36563,7 +36911,7 @@ function getEmbeddingCoverageStatus(db, projectIdentity, sessionId) {
       commits: { embedded: 0, total: 0, gitEnabled: false }
     };
   }
-  const session = countSessionCompartmentEmbedCoverage(db, projectIdentity, sessionId, snapshot2.chunkModelId);
+  const session = countSessionCompartmentEmbedCoverage(db, projectIdentity, sessionId, snapshot2.chunkModelId, getProjectEmbeddingMaxInputTokens(projectIdentity));
   const memories = getMemoryEmbedCoverage(db, projectIdentity, snapshot2.modelId);
   const gitEnabled = snapshot2.gitCommitEnabled;
   const commits = gitEnabled ? {
@@ -36702,7 +37050,8 @@ function cosineSimilarity(a, b) {
 // src/features/magic-context/memory/embedding.ts
 var DEFAULT_EMBEDDING_CONFIG = {
   provider: "local",
-  model: DEFAULT_LOCAL_EMBEDDING_MODEL
+  model: DEFAULT_LOCAL_EMBEDDING_MODEL,
+  local_runtime: "auto"
 };
 var embeddingConfig = DEFAULT_EMBEDDING_CONFIG;
 var provider = null;
@@ -36722,7 +37071,7 @@ function createProvider2(config2) {
     });
   }
   if (config2.provider === "local") {
-    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens, config2.local_dtype);
+    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens, config2.local_dtype, config2.local_runtime);
   }
   if (config2.provider === "synapse") {
     const synapse = config2;
@@ -36938,13 +37287,13 @@ function placeholders3(values) {
 function uniqueSortedFiles(files) {
   return Array.from(new Set(files.filter((file2) => file2 !== MEMORY_VERIFICATION_SENTINEL))).sort();
 }
-function recordMemoryMapping(db, memoryId, normalizedFiles, now) {
+function recordMemoryMapping(db, memoryId, normalizedFiles, now, mappingOrigin = "mapper") {
   const realFiles = uniqueSortedFiles(normalizedFiles);
   const filesToWrite = realFiles.length > 0 ? realFiles : [MEMORY_VERIFICATION_SENTINEL];
   db.prepare("DELETE FROM memory_verifications WHERE memory_id = ?").run(memoryId);
-  const insert = db.prepare("INSERT INTO memory_verifications (memory_id, file_path, verified_at, mapped_at) VALUES (?, ?, 0, ?)");
+  const insert = db.prepare("INSERT INTO memory_verifications (memory_id, file_path, verified_at, mapped_at, mapping_origin) VALUES (?, ?, 0, ?, ?)");
   for (const file2 of filesToWrite) {
-    insert.run(memoryId, file2, now);
+    insert.run(memoryId, file2, now, mappingOrigin);
   }
   return filesToWrite.length;
 }
@@ -36952,7 +37301,7 @@ function recordMemoryVerifications(db, memoryId, normalizedFiles, now) {
   const realFiles = uniqueSortedFiles(normalizedFiles);
   const filesToWrite = realFiles.length > 0 ? realFiles : [MEMORY_VERIFICATION_SENTINEL];
   db.prepare("DELETE FROM memory_verifications WHERE memory_id = ?").run(memoryId);
-  const insert = db.prepare("INSERT INTO memory_verifications (memory_id, file_path, verified_at, mapped_at) VALUES (?, ?, ?, ?)");
+  const insert = db.prepare("INSERT INTO memory_verifications (memory_id, file_path, verified_at, mapped_at, mapping_origin) VALUES (?, ?, ?, ?, 'mapper')");
   for (const file2 of filesToWrite) {
     insert.run(memoryId, file2, now, now);
   }
@@ -36974,7 +37323,7 @@ function getMemoryVerifications(db, memoryIds) {
   const result = new Map;
   if (ids.length === 0)
     return result;
-  const rows = db.prepare(`SELECT memory_id, file_path, verified_at, mapped_at
+  const rows = db.prepare(`SELECT memory_id, file_path, verified_at, mapped_at, mapping_origin
                FROM memory_verifications
               WHERE memory_id IN (${placeholders3(ids)})
               ORDER BY memory_id, file_path`).all(...ids);
@@ -36982,6 +37331,7 @@ function getMemoryVerifications(db, memoryIds) {
     const existing = result.get(row.memory_id) ?? {
       files: [],
       hasSentinel: false,
+      mappingOrigin: "mapper",
       verifiedAt: 0,
       mappedAt: 0
     };
@@ -36990,6 +37340,9 @@ function getMemoryVerifications(db, memoryIds) {
     } else if (!existing.files.includes(row.file_path)) {
       existing.files.push(row.file_path);
     }
+    if (row.mapping_origin === "host_rejected_fallback") {
+      existing.mappingOrigin = "host_rejected_fallback";
+    }
     existing.verifiedAt = Math.max(existing.verifiedAt, row.verified_at);
     existing.mappedAt = Math.max(existing.mappedAt, row.mapped_at ?? 0);
     result.set(row.memory_id, existing);
@@ -37709,12 +38062,14 @@ function dropMarkerSummaryTag(db, sessionId, summaryMessageId) {
     updateTagStatus(db, sessionId, tagNumber, "dropped");
 }
 function persistMarkerStateAndDropReplacedTag(db, sessionId, state2, replacedSummaryMessageId) {
+  const transactionStartedAt = performance.now();
   db.transaction(() => {
     setPersistedCompactionMarkerState(db, sessionId, state2);
     if (replacedSummaryMessageId !== null) {
       dropMarkerSummaryTag(db, sessionId, replacedSummaryMessageId);
     }
   })();
+  logSlowWriteTransaction("marker-drain", transactionStartedAt);
 }
 function validatePendingTarget(db, sessionId, pending) {
   const ocMessage = getOpenCodeMessageById(sessionId, pending.endMessageId);
@@ -41366,7 +41721,7 @@ function readCurrentM0SnapshotMarkersUncached(args) {
       toolSetHash: hard.toolSetHash ?? "",
       modelKey: piModelRefToCanonical(hard.modelKey),
       projectIdentity: args.projectPath ?? null,
-      muralEnabled: args.muralEnabled === true,
+      muralEnabled: args.memoryEnabled !== false && args.muralEnabled === true,
       renderBudgetIdentity: renderBudgetIdentity(args.memoryInjectionBudgetTokens, args.historyBudgetTokens)
     }
   };
@@ -41382,7 +41737,7 @@ function refreshVolatileMarkerInputs(markers, args) {
     toolSetHash: hard.toolSetHash ?? "",
     modelKey: hard.modelKey,
     projectIdentity: args.projectPath ?? null,
-    muralEnabled: args.muralEnabled === true,
+    muralEnabled: args.memoryEnabled !== false && args.muralEnabled === true,
     renderBudgetIdentity: renderBudgetIdentity(args.memoryInjectionBudgetTokens, args.historyBudgetTokens)
   };
 }
@@ -41455,6 +41810,10 @@ function snapshotMarkersFromCachedM0(state2) {
     renderBudgetIdentity: cachedUpgradeIdentity.renderBudgetIdentity
   };
 }
+var MEMORY_DERIVED_BLOCK_PATTERN = /<(?:project-memory|user-profile|new-user-profile|memory-updates|memory-mural)(?:>|\s)/;
+function cachedMemoryDerivedSurfacePresent(state2) {
+  return [state2.cachedM0Bytes, state2.cachedM1Bytes].some((bytes) => bytes !== null && MEMORY_DERIVED_BLOCK_PATTERN.test(bytes.toString("utf8")));
+}
 function mustMaterialize(args) {
   if (!args.state.cachedM0Bytes)
     return { value: true, reason: "first_render" };
@@ -41463,6 +41822,9 @@ function mustMaterialize(args) {
   const hard = args.hardSignals ?? EMPTY_HARD_SIGNALS;
   const current = readCurrentM0SnapshotMarkers(args);
   const cachedUpgradeIdentity = decodeCachedM0UpgradeIdentity(args.state.cachedM0UpgradeState);
+  if (args.memoryEnabled === false && cachedMemoryDerivedSurfacePresent(args.state)) {
+    return { value: true, reason: "render_config" };
+  }
   if (cachedUpgradeIdentity.compartmentRenderEpoch !== current.compartmentRenderEpoch) {
     return { value: true, reason: "compartment_render_epoch" };
   }
@@ -41817,7 +42179,7 @@ function historySliceTokens(m0Text) {
   return slice ? estimateTokens(slice) : 0;
 }
 function resolveMuralForM0(options, projectPath, modelKey, budgetTokens) {
-  if (!options.muralEnabled)
+  if (options.memoryEnabled === false || !options.muralEnabled)
     return;
   return resolveMuralWire(options.db, projectPath, modelKey, true, budgetTokens);
 }
@@ -41852,6 +42214,7 @@ function materializeM0(options) {
       projectPath,
       projectDirectory,
       injectDocs: options.injectDocs,
+      memoryEnabled: options.memoryEnabled,
       muralEnabled: options.muralEnabled,
       memoryInjectionBudgetTokens: options.memoryInjectionBudgetTokens,
       historyBudgetTokens: options.historyBudgetTokens,
@@ -41866,7 +42229,7 @@ function materializeM0(options) {
     compartments = options.compactionOff ? [] : readM0Compartments(options.db, options.sessionId);
     facts = [];
     memories = projectPath ? workspace.isWorkspaced ? getMemoriesByProjects(options.db, workspace.expandedIdentities, ["active", "permanent"], foldMaterializedAt, workspace.ownIdentities, workspace.shareCategories) : getMemoriesByProject(options.db, projectPath, ["active", "permanent"], foldMaterializedAt) : [];
-    userMemories = safeGetActiveUserMemories(options.db);
+    userMemories = options.memoryEnabled === false ? [] : safeGetActiveUserMemories(options.db);
     options.db.exec("COMMIT");
   } catch (error51) {
     try {
@@ -41884,7 +42247,7 @@ function materializeM0(options) {
     })
   };
   const trimmed = workspace.isWorkspaced ? trimWorkspaceMemoriesToBudgetV2(options.sessionId, memories, memoryBudget, workspace, memoryRenderOptions) : trimMemoriesToBudgetV2(options.sessionId, memories, memoryBudget);
-  const mural = options.mural ?? resolveMuralForM0(options, projectPath, snapshotMarkers.modelKey, memoryBudget);
+  const mural = options.memoryEnabled === false ? undefined : options.mural ?? resolveMuralForM0(options, projectPath, snapshotMarkers.modelKey, memoryBudget);
   let decayPressureMultiplier = 1;
   let m0Text = renderM0({
     projectDocs: docs.renderedBlock,
@@ -42127,7 +42490,7 @@ ${newCompartments.map((compartment) => renderCompartmentAtTier(compartment, 1)).
   if (newMemoriesBlock)
     blocks.push(newMemoriesBlock);
   const currentUserProfileVersion = getGlobalUserProfileVersion(options.db);
-  if (currentUserProfileVersion !== markers.projectUserProfileVersion) {
+  if (options.memoryEnabled !== false && currentUserProfileVersion !== markers.projectUserProfileVersion) {
     const profileBlock = renderUserProfileBlock(trimUserMemoriesToBudget(safeGetActiveUserMemories(options.db), Math.max(1, Math.floor((options.userProfileBudgetTokens ?? DEFAULT_USER_PROFILE_BUDGET_TOKENS) * 0.25))), "new-user-profile");
     if (profileBlock)
       blocks.push(profileBlock);
@@ -42345,6 +42708,7 @@ function renderFreshM0NonPersisted(options) {
     projectPath,
     projectDirectory,
     injectDocs: options.injectDocs,
+    memoryEnabled: options.memoryEnabled,
     muralEnabled: options.muralEnabled,
     memoryInjectionBudgetTokens: options.memoryInjectionBudgetTokens,
     historyBudgetTokens: options.historyBudgetTokens,
@@ -42359,7 +42723,7 @@ function renderFreshM0NonPersisted(options) {
   snapshotMarkers.materializedAt = options.state.cachedM0MaterializedAt ?? 0;
   const compartments = options.compactionOff ? [] : withCompartmentDates(options.sessionId, readM0Compartments(options.db, options.sessionId), options.temporalAwareness);
   const memories = projectPath ? workspace.isWorkspaced ? getMemoriesByProjects(options.db, workspace.expandedIdentities, ["active", "permanent"], snapshotMarkers.materializedAt, workspace.ownIdentities, workspace.shareCategories) : getMemoriesByProject(options.db, projectPath, ["active", "permanent"], snapshotMarkers.materializedAt) : [];
-  const userMemories = safeGetActiveUserMemories(options.db);
+  const userMemories = options.memoryEnabled === false ? [] : safeGetActiveUserMemories(options.db);
   const memoryBudget = options.memoryInjectionBudgetTokens ?? DEFAULT_MEMORY_BUDGET_TOKENS;
   const memoryRenderOptions = {
     sourceNameByMemoryId: sourceNamesForMemories({
@@ -42370,7 +42734,7 @@ function renderFreshM0NonPersisted(options) {
   };
   const trimmed = workspace.isWorkspaced ? trimWorkspaceMemoriesToBudgetV2(options.sessionId, memories, memoryBudget, workspace, memoryRenderOptions) : trimMemoriesToBudgetV2(options.sessionId, memories, memoryBudget);
   const budget = options.historyBudgetTokens ?? DEFAULT_HISTORY_BUDGET_TOKENS;
-  const mural = options.mural ?? resolveMuralForM0(options, projectPath, snapshotMarkers.modelKey, memoryBudget);
+  const mural = options.memoryEnabled === false ? undefined : options.mural ?? resolveMuralForM0(options, projectPath, snapshotMarkers.modelKey, memoryBudget);
   let decayPressureMultiplier = 1;
   let m0Text = renderM0({
     projectDocs: docs.renderedBlock,
@@ -42446,6 +42810,7 @@ function injectM0M1(options) {
     hardSignals: options.hardSignals,
     workspaceIdentitySet: options.workspaceIdentitySet,
     injectDocs: options.injectDocs,
+    memoryEnabled: options.memoryEnabled,
     muralEnabled: options.muralEnabled,
     memoryInjectionBudgetTokens: options.memoryInjectionBudgetTokens,
     historyBudgetTokens: options.historyBudgetTokens
@@ -42777,23 +43142,33 @@ function fenceWrapupBoundaryForToolArcs(args) {
   return boundary;
 }
 function applyHeadCap(args) {
-  const { index, protectedTailStart, offset, arcs, capTokens, recentOpenArcCutoff } = args;
+  const {
+    index,
+    protectedTailStart,
+    offset,
+    arcs,
+    lastCompartmentEndOrdinal,
+    capTokens,
+    recentOpenArcCutoff
+  } = args;
   if (offset >= protectedTailStart)
     return { eligibleEndOrdinal: offset, oversizeAtomicUnit: false };
   let end = index.findHeadEndForCap(offset, protectedTailStart, capTokens);
   let oversizeAtomicUnit = end === offset + 1 && index.tokenForOrdinal(offset) > capTokens;
+  const completedFence = fenceBoundaryForCompletedToolArcs(end, arcs, lastCompartmentEndOrdinal + 1);
+  if (completedFence > end) {
+    end = Math.min(protectedTailStart, completedFence);
+    if (index.rangeTokens(offset, end) > capTokens)
+      oversizeAtomicUnit = true;
+  } else {
+    end = completedFence;
+  }
   for (const arc of arcs) {
     const resOrdinal = arc.resOrdinal;
     if (resOrdinal === null) {
       if (arc.invOrdinal >= recentOpenArcCutoff && arc.invOrdinal >= offset && arc.invOrdinal < end) {
         end = Math.min(end, arc.invOrdinal);
       }
-      continue;
-    }
-    if (arc.invOrdinal < end && end <= resOrdinal) {
-      end = Math.min(protectedTailStart, resOrdinal + 1);
-      if (index.rangeTokens(Math.max(offset, arc.invOrdinal), end) > capTokens)
-        oversizeAtomicUnit = true;
     }
   }
   if (end <= offset && offset < protectedTailStart) {
@@ -45200,9 +45575,9 @@ async function runCompartmentAgent(deps) {
       executeThresholdPercentage: boundarySnapshot.executeThresholdPercentage
     });
     if (!reserve.ok) {
-      sessionLog(sessionId, `historian rate-limit skip: ${reserve.skippedReason ?? "quota exhausted"}`);
+      sessionLog(sessionId, describeProtectedTailDrainBudgetSkip(reserve));
       telemetry.status = "noop";
-      telemetry.failureReason = "protected-tail drain quota exhausted";
+      telemetry.failureReason = "internal protected-tail drain budget spent";
       return;
     }
     drainReservation = reserve.reservation;
@@ -45334,6 +45709,7 @@ ${chunkText}`,
       return;
     }
     let published = false;
+    const transactionStartedAt = performance.now();
     db.exec("BEGIN IMMEDIATE");
     try {
       if (!isCompartmentLeaseHeld(db, sessionId, holderId)) {
@@ -45380,6 +45756,7 @@ ${chunkText}`,
       }
       db.exec("COMMIT");
       published = true;
+      logSlowWriteTransaction("historian-publish", transactionStartedAt);
     } finally {
       if (!published) {
         try {
@@ -45518,6 +45895,7 @@ function insertRecompCompartmentRows(db, sessionId, compartments, now) {
 }
 function promoteRecompStagingWithM0Mutation(db, sessionId, holderId) {
   const now = Date.now();
+  const transactionStartedAt = performance.now();
   db.exec("BEGIN IMMEDIATE");
   let finished = false;
   try {
@@ -45546,6 +45924,7 @@ function promoteRecompStagingWithM0Mutation(db, sessionId, holderId) {
     clearCachedM0M1(db, sessionId);
     db.exec("COMMIT");
     finished = true;
+    logSlowWriteTransaction("historian-publish:recomp", transactionStartedAt);
     return { compartments: staging.compartments, facts: staging.facts };
   } finally {
     if (!finished) {
@@ -46885,4 +47264,4 @@ async function runUpgradeMemoryMigration(ctx, sessionId, migrationDirectory) {
   }
 }
 
-export { withContentLanguageDirective, buildPrimaryLanguageDirective, cortexKitUserConfigBasePath, cortexKitProjectConfigBasePath, resolveLegacyConfigSources, resolveLegacyConfigSourcesForHarness, migrateMagicContextConfigLocations, exports_external, DEFAULT_PROTECTED_TAGS, parseCron, nextOccurrence, nextDueAtMs, promptSurfaceConfigIdentity, resolvePromptSurface, resolveModelConfigOrDefault, DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE, DEFAULT_HISTORIAN_TIMEOUT_MS, DEFAULT_LOCAL_EMBEDDING_MODEL, PER_HARNESS_MIGRATION_INVENTORY, ConfigProfilesSchema, MagicContextConfigSchema, getOpenCodeDbPath, removeMcOwnedCompactionMarkers, hasShareabilitySensitiveText, isFailClosedBlockingError, shouldBypassFailClosedBlock, resolveAgentNameFromMessages, createFailClosedController, recordHookInitFailure, clearHookInitFailure, getLastHookInitFailure, ProjectIdentityError, resolveProjectIdentityStrict, takeDubiousOwnershipProjectIdentityWarning, resolveProjectIdentity, resolveProjectIdentityForSession, normalizeStoredProjectPath, storedPathBelongsToIdentity, isLinkedGitWorktree, recordSessionProjectIdentity, beginBootQuietPeriod, bootQuietRemainingMs, scheduleAfterBootQuiet, rpcPortDir, rpcPortFilePath, isPidAlive, parseRpcPortFile, registerModuleNoteEvaluationBridge, getModuleNoteEvaluationBridge, getContextStoreUuid, ensureContextStoreUuid, getAuthorityManagedMarker, reconcileAuthorityProject, checksumAuthoritySeedRows, prepareAuthority, drainAuthority, getMirrorCursor, applyMirroredNoteCompileFields, applyMirrorPage, pullMemoryMirrorOnce, V2_MEMORY_CATEGORIES, CATEGORY_PRIORITY, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, resolveStoredPathWorkspaceIdentity, storedPathBelongsToWorkspace, sourceNameForMemory, computeWorkspaceEpochFingerprint, textMentionsRecentCommit, hasMeaningfulUserText, extractTexts, extractToolCallSummaries, preloadTokenizer, estimateTokens, normalizeText, getCurrentToolSetHash, recordToolDefinition, getMeasuredToolDefinitionTokens, getSchemaFenceRejection, getMigrationOnOpenRefusal, LATEST_SUPPORTED_VERSION, getDatabasePath, getPersistedSchemaVersion, setSqlitePragmaConfig, runSqliteOptimize, openDatabase, openDatabaseAsync, isDatabasePersisted, getDatabasePersistenceError, COMPARTMENT_LEASE_RENEWAL_MS, acquireCompartmentLease, renewCompartmentLease, releaseCompartmentLease, getCompartments, getLastCompartmentEndMessage, getLastCompartmentEndMessageId, clearRecompStaging, isRawCompactionSummaryInfo, extractInMemoryMessageViews, buildInMemoryTailRawMessages, isRecord, estimateTrueRawMessageTokens, invalidateTrueRawTokenCache, stripPersistedAssistantText, byteSize, stripTagPrefix, prependTag, isThinkingPart, isTextPart, isToolPartWithOutput, isFilePart, buildFileSourceContent, isEditTool, partHasCompletedResult, extractToolCallObservation, ToolMutationBatch, createToolDropTarget, setRawMessageProvider, cleanUserText, withRawSessionMessageCache, readRawSessionMessages, primeTailRawMessageCache, primeInMemoryTailRawMessageCache, readRawSessionMessageOrdinalPage, getRawSessionStoredMessageCount, readRawSessionMessagePartsById, readRawSessionMessageOrdinalById, readRawSessionMessageById, readSessionChunk, getMessageIndexSourceIdentity, isMessageIndexSourceCurrent, getLastIndexedOrdinal, getIndexedMessageCorpusSize, getMessageIndexReconciliationStartOrdinal, isMessageIndexReconciledThrough, deleteIndexedMessage, clearIndexedMessages, indexSingleMessage, indexMessagesAfterOrdinal, sweepOrphanedOpenCodeMessageIndexes, recordEmbeddingMeasurement, getMaxM0MutationId, queueMemoryMutation, getMemoryMutationsForRenderByProjects, getMaxMemoryMutationIdForProjects, MAX_EXECUTE_THRESHOLD, escalationBands, isEmergencyRecoveryArmed, isProviderOverflowReconfirmed, getEmergencyRecoveryArmedAt, loadPersistedUsage, loadProtectedTailMeta, resetProtectedTailNoEligibleHead, getWrapupInProgressState, acquireWrapupInProgress, updateWrapupInProgress, releaseWrapupInProgress, resolveCompactionModeRecord, getCompactionModeRecord, setCompactionModeRecord, getPersistedReasoningWatermark, setPersistedReasoningWatermark, clearPersistedReasoningWatermark, getEmergencyInputSample, setEmergencyDropSample, clearEmergencyDropSample, getLastNudgeUndropped, setLastNudgeUndropped, getChannel1NudgeState, setChannel1NudgeState, resetLastNudgeCycle, resetLastNudgeCycleIfTailShrank, getChannel2NudgeState, getChannel2NudgeClaim, setChannel2NudgeState, casChannel2NudgeState, claimChannel2NudgeState, casChannel2NudgeClaim, getPersistedNoteNudge, getNoteNudgeAnchors, getAutoSearchHintDecisions, appendAutoSearchHintDecision, pruneNoteNudgeAnchors, pruneAutoSearchHintDecisions, removeNoteNudgeAnchorByMessageId, removeAutoSearchHintDecisionByMessageId, getPersistedTodoPermissionDenied, setPersistedTodoPermissionDenied, getPersistedTodoSyntheticAnchor, setPersistedTodoSyntheticAnchor, clearPersistedTodoSyntheticAnchor, setNoteLastReadAt, getHistorianFailureState, clearHistorianFailureState, getOverflowState, recordOverflowDetected, recordDetectedContextLimit, clearEmergencyRecovery, clearDetectedContextLimit, getPersistedCompactionMarkerState, setPersistedCompactionMarkerState, getStrippedPlaceholderIds, applyStrippedPlaceholderDelta, removeStrippedPlaceholderId, getMergedReasoningStrippedIds, addMergedReasoningStrippedIds, getTrailingBlankDecisions, addTrailingBlankDecisions, getStaleReduceStrippedIds, addStaleReduceStrippedIds, getProcessedImageStrippedIds, addProcessedImageStrippedIds, getPendingCompactionMarkerState, clearPendingCompactionMarkerStateIf, peekDeferredExecutePending, setDeferredExecutePendingIfAbsent, clearDeferredExecutePendingIfMatches, getSessionsWithPendingMarker, setSessionWorkMetrics, getNotes, addNote, getSessionNotes, getPendingSmartNotes, getReadySmartNotes, updateNote, dismissNote, markNoteReady, markNoteChecked, queuePendingOp, getPendingOps, clearPendingOps, removePendingOp, PRIMER_CANDIDATE_TTL_MS, PRIMER_CANDIDATE_MAX_AGE_MS, primerOccurrenceKey, primerOccurrenceUtcDay, updatePrimerCandidateEmbedding, getPrimerCandidatesByIds, getPrimerCandidatesForPromotion, countPrimerCandidatesForProject, getActivePrimers, createPrimer, updatePrimerSupport, updatePrimerAnswer, GLOBAL_USER_PROFILE_PROJECT_PATH, getProjectState, bumpProjectMemoryEpoch, bumpProjectUserProfileVersion, saveSourceContent, replaceSourceContent, getSourceContents, CTX_REDUCE_KEEP, estimateImageTokensFromDataUrl, normalizeTodoStateJson, buildSyntheticTodoPart, computeSyntheticCallId, isSyntheticTodoPart, countRealUserMessages, tailHygieneStructuralSignature, sameTailHygieneStructuralSignature, refreshTailHygieneBaseline, effectiveTailHygiene, assertTailHygieneContentUnchanged, CHANNEL1_SENTINEL, CHANNEL1_FLOOR_TOKENS, toolOutputTokens, decideChannel1, evaluateChannel2, buildChannel2Reminder, shouldUseStickyChannel1Reminder, buildChannel1Reminder, estimateEmergencyDropReclaimTokens, planEmergencyDrop, AGE_RECLAIM_MIN_TOKENS, getOldestActiveUnprotectedToolTags, getActiveToolTagsForAgeReclaim, getTriggerTagTokenUpperBound, getActiveTagTokenTotalsByMessage, tagTokenCountIsNull, backfillTagTokenCounts, insertTag, updateTagStatus, updateTagDropMode, updateCavemanDepth, updateTagMessageId, deleteTagsByMessageId, getMaxTagNumberBySession, getTagNumberByMessageId, deriveTagLoadFloor, getTagsBySession, getActiveTagsBySession, getTailHygieneTags, getDroppedTagsBySession, getTagsByNumbers, getMaxDroppedTagNumber, getToolTagNumberByOwner, getNullOwnerToolTag, adoptNullOwnerToolTag, getCandidateToolOwners, pickNearestPriorOwner, createChildSessionWithFence, detectOverflow, resolveFallbackChain, modelBodyField, promptSyncWithValidatedOutputRetry, normalizeSDKResponse, promptSurfaceHashMaterial, createPromptSurfaceRuntime, createPromptSurfaceGuidanceEpochCache, extractLatestAssistantText, hasLengthCappedOutput, setKeepSubagents, shouldKeepSubagents, recordChildInvocation, COMPARTMENT_AGENT_SYSTEM_PROMPT, HISTORIAN_EDITOR_SYSTEM_PROMPT, COMPARTMENT_STRUCTURAL_SYSTEM_PROMPT, Priority, AdmissionClass, StaleRouteHandleError, SocketClosedError, SocketTimeoutError, SubcClient, isConsumerReconnectTransient, connectionFileExists, getCompartmentEvents, loadCompartmentChunkEmbeddingsForSearch, cosineSimilarity, SYNAPSE_DEFAULT_MODEL, SynapseEmbeddingProvider, computeNormalizedHash, saveCommitEmbedding, loadProjectCommitEmbeddings, loadUnembeddedCommits, countEmbeddedCommits, upsertCommits, getLatestIndexedCommitTimeMs, enforceProjectCap, GIT_SWEEP_LEASE_RENEWAL_MS, acquireGitSweepLease, renewGitSweepLease, markGitSweepSuccessAndRelease, parkGitSweepNonIndexable, releaseGitSweepLease, saveEmbeddingIfHashMatches, getProjectEmbeddings, peekProjectEmbeddings, invalidateProject, invalidateMemory, markProjectLoadUntrusted, contentSha256, sweepStaleEmbeddingIdentitiesForProject, registerProjectEmbedding, registerProjectShadowEmbedding, getShadowEmbeddingMeasurementCohort, getPrimaryEmbeddingMeasurementCohort, embedShadowTextForProject, enqueueShadowEmbeddingItems, registerProjectInObservationMode, getProjectEmbeddingSnapshot, embedTextForProject, embedBatchForProject, embedItemsForProject, embedUnembeddedMemoriesForProject, drainCommitBacklogForProject, embedSessionCompartmentChunks, getEmbeddingCoverageStatus, isEmbeddingEnabled, embedText, ensureMemoryEmbeddings, computeCueContentHash, hasMuralCueColumns, getMuralCueState, memoryNeedsCue, setMuralCue, recordMuralCueRejection, hasMemoryShareableColumn, hasMemoryClassifiedAtColumn, getUnclassifiedMemoryIds, ModuleMemoryAuthorityError, insertMemory, insertMemoryIdempotent, getMemoryByHash, getMemoriesByProject, buildWorkspaceMemorySqlFilter, getMemoriesByProjects, getMaxMemoryIdForProjects, readNewMemoriesForM1Union, getMemoryById, getMemoriesByIds, updateMemorySeenCount, updateMemoryRetrievalCount, setMemoryClassification, supersededMemory, mergeMemoryStats, archiveMemory, getMemoryCountsByStatus, sanitizeFtsQuery, searchMemoriesFTS, searchMemoriesFTSUnion, recordMemoryMapping, recordMemoryVerifications, getUnmappedMemoryIds, clearMemoryVerifications, getMemoryVerifications, resolveGitTopLevel, readGitHead, readGitChangedFilesSince, readGitFileChangeTimesSince, verificationFileExists, normalizeVerificationFiles, USER_MEMORY_CANDIDATE_TTL_MS, insertUserMemoryCandidates, getUserMemoryCandidates, deleteUserMemoryCandidates, pruneExpiredUserMemoryCandidates, insertUserMemory, getActiveUserMemories, updateUserMemoryContent, dismissUserMemory, getMural, BoundedSessionMap, registerLkgPersistence, LKG_SNAPSHOT_ARRAY, LKG_SNAPSHOT_OBJECT, LKG_SNAPSHOT_KEY, LKG_SNAPSHOT_STRING, LKG_SNAPSHOT_NUMBER, LKG_SNAPSHOT_BOOLEAN, LKG_SNAPSHOT_NULL, LKG_SNAPSHOT_UNDEFINED, incrementalLkgContentDigests, lkgContentDigest, captureSlot, getSlot, dropSlot, noteEntry, onNoteTrigger, peekNoteNudgeText, markNoteNudgeDelivered, clearNoteNudgeTriggerAndCooldown, resetNoteNudgeCooldownOnly, clearNoteNudgeTriggerOnly, extractM0Block, resolveMuralWire, MARKER_SUMMARY_TEXT, applyDeferredCompactionMarker, removeCompactionMarkerForSession, checkCompactionMarkerConsistency, formatDate, injectTemporalMarkers, clearInjectionCache, getVisibleMemoryIds, prepareCompartmentInjection, renderCompartmentInjection, mustMaterialize, trimMemoriesToBudgetV2, renderMemoryBlockV2, injectM0M1, RECOVERY_NO_HEAD_LIMIT, resolveOpenCodeProtectedTailBoundary, resolveWrapupProtectedTailBoundary, getRawHistoryEligibility, hasRunnableCompartmentWindow, recordHighPressureNoEligibleHead, runCompartmentAgent, snapRangeToCompartments, getActiveCompartmentRun, markActiveCompartmentRunPublished, registerActiveCompartmentRun, startCompartmentAgent, isRecompFailure, isRecompSkip, isRecompComplete, extractRecompReason, contextualizeUpgradeReason, setRecompStarting, setRecompNote, setRecompTerminal, runManagedRecomp, runManagedUpgrade };
+export { withContentLanguageDirective, buildPrimaryLanguageDirective, cortexKitUserConfigBasePath, cortexKitProjectConfigBasePath, resolveLegacyConfigSources, resolveLegacyConfigSourcesForHarness, migrateMagicContextConfigLocations, exports_external, DEFAULT_PROTECTED_TAGS, parseCron, nextOccurrence, nextDueAtMs, promptSurfaceConfigIdentity, resolvePromptSurface, resolveModelConfigOrDefault, DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE, DEFAULT_HISTORIAN_TIMEOUT_MS, DEFAULT_LOCAL_EMBEDDING_MODEL, PER_HARNESS_MIGRATION_INVENTORY, ConfigProfilesSchema, MagicContextConfigSchema, getOpenCodeDbPath, removeMcOwnedCompactionMarkers, isFailClosedBlockingError, shouldBypassFailClosedBlock, resolveAgentNameFromMessages, createFailClosedController, recordHookInitFailure, clearHookInitFailure, getLastHookInitFailure, ProjectIdentityError, resolveProjectIdentityStrict, takeDubiousOwnershipProjectIdentityWarning, resolveProjectIdentity, directoryHasGitMetadata, resolveProjectIdentityForSession, normalizeStoredProjectPath, storedPathBelongsToIdentity, isLinkedGitWorktree, recordSessionProjectIdentity, beginBootQuietPeriod, bootQuietRemainingMs, scheduleAfterBootQuiet, rpcPortDir, rpcPortFilePath, isPidAlive, parseRpcPortFile, observeAuthorityRouting, registerModuleNoteEvaluationBridge, getModuleNoteEvaluationBridge, getContextStoreUuid, ensureContextStoreUuid, getAuthorityManagedMarker, reconcileAuthorityProject, checksumAuthoritySeedRows, prepareAuthority, drainAuthority, getMirrorCursor, applyMirroredNoteCompileFields, applyMirrorPage, pullMemoryMirrorOnce, V2_MEMORY_CATEGORIES, CATEGORY_PRIORITY, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, resolveStoredPathWorkspaceIdentity, storedPathBelongsToWorkspace, sourceNameForMemory, computeWorkspaceEpochFingerprint, textMentionsRecentCommit, hasMeaningfulUserText, extractTexts, extractToolCallSummaries, preloadTokenizer, estimateTokens, normalizeText, getCurrentToolSetHash, recordToolDefinition, getMeasuredToolDefinitionTokens, getSchemaFenceRejection, getMigrationOnOpenRefusal, LATEST_SUPPORTED_VERSION, getDatabasePath, getPersistedSchemaVersion, setSqlitePragmaConfig, runSqliteOptimize, openDatabase, openDatabaseAsync, isDatabasePersisted, getDatabasePersistenceError, COMPARTMENT_LEASE_RENEWAL_MS, acquireCompartmentLease, renewCompartmentLease, releaseCompartmentLease, getCompartments, getLastCompartmentEndMessage, getLastCompartmentEndMessageId, clearRecompStaging, isRawCompactionSummaryInfo, extractInMemoryMessageViews, buildInMemoryTailRawMessages, isRecord, estimateTrueRawMessageTokens, invalidateTrueRawTokenCache, stripPersistedAssistantText, byteSize, stripTagPrefix, prependTag, isThinkingPart, isTextPart, isToolPartWithOutput, isFilePart, buildFileSourceContent, isEditTool, partHasCompletedResult, extractToolCallObservation, ToolMutationBatch, createToolDropTarget, setRawMessageProvider, cleanUserText, withRawSessionMessageCache, readRawSessionMessages, primeTailRawMessageCache, primeInMemoryTailRawMessageCache, readRawSessionMessageOrdinalPage, getRawSessionStoredMessageCount, readRawSessionMessagePartsById, readRawSessionMessageOrdinalById, readRawSessionMessageById, readSessionChunk, getMessageIndexSourceIdentity, isMessageIndexSourceCurrent, getLastIndexedOrdinal, getIndexedMessageCorpusSize, getMessageIndexReconciliationStartOrdinal, isMessageIndexReconciledThrough, deleteIndexedMessage, clearIndexedMessages, indexSingleMessage, indexMessagesAfterOrdinal, sweepOrphanedOpenCodeMessageIndexes, recordEmbeddingMeasurement, getMaxM0MutationId, queueMemoryMutation, getMemoryMutationsForRenderByProjects, getMaxMemoryMutationIdForProjects, MAX_EXECUTE_THRESHOLD, escalationBands, isEmergencyRecoveryArmed, isProviderOverflowReconfirmed, getEmergencyRecoveryArmedAt, loadPersistedUsage, loadProtectedTailMeta, resetProtectedTailNoEligibleHead, getWrapupInProgressState, acquireWrapupInProgress, updateWrapupInProgress, releaseWrapupInProgress, resolveCompactionModeRecord, getCompactionModeRecord, setCompactionModeRecord, getPersistedReasoningWatermark, setPersistedReasoningWatermark, clearPersistedReasoningWatermark, getEmergencyInputSample, setEmergencyDropSample, clearEmergencyDropSample, getLastNudgeUndropped, setLastNudgeUndropped, getChannel1NudgeState, setChannel1NudgeState, markChannel1PostReduceGracePending, captureChannel1PostReduceGraceBaseline, getChannel2NudgeState, getChannel2NudgeClaim, setChannel2NudgeState, casChannel2NudgeState, claimChannel2NudgeState, casChannel2NudgeClaim, getPersistedNoteNudge, getNoteNudgeAnchors, getAutoSearchHintDecisions, appendAutoSearchHintDecision, pruneNoteNudgeAnchors, pruneAutoSearchHintDecisions, removeNoteNudgeAnchorByMessageId, removeAutoSearchHintDecisionByMessageId, getPersistedTodoPermissionDenied, setPersistedTodoPermissionDenied, getPersistedTodoSyntheticAnchor, setPersistedTodoSyntheticAnchor, clearPersistedTodoSyntheticAnchor, setNoteLastReadAt, getHistorianFailureState, clearHistorianFailureState, getOverflowState, recordOverflowDetected, recordDetectedContextLimit, clearEmergencyRecovery, clearDetectedContextLimit, getPersistedCompactionMarkerState, setPersistedCompactionMarkerState, getStrippedPlaceholderIds, applyStrippedPlaceholderDelta, removeStrippedPlaceholderId, getMergedReasoningStrippedIds, addMergedReasoningStrippedIds, getTrailingBlankDecisions, addTrailingBlankDecisions, demoteTrailingBlankKeepDecisions, getStaleReduceStrippedIds, addStaleReduceStrippedIds, getProcessedImageStrippedIds, addProcessedImageStrippedIds, getPendingCompactionMarkerState, clearPendingCompactionMarkerStateIf, peekDeferredExecutePending, setDeferredExecutePendingIfAbsent, clearDeferredExecutePendingIfMatches, getSessionsWithPendingMarker, setSessionWorkMetrics, getNotes, addNote, getSessionNotes, getPendingSmartNotes, getReadySmartNotes, updateNote, dismissNote, markNoteReady, markNoteChecked, queuePendingOp, getPendingOps, getPendingOpsCount, clearPendingOps, removePendingOp, PRIMER_CANDIDATE_TTL_MS, PRIMER_CANDIDATE_MAX_AGE_MS, primerOccurrenceKey, primerOccurrenceUtcDay, updatePrimerCandidateEmbedding, getPrimerCandidatesByIds, getPrimerCandidatesForPromotion, countPrimerCandidatesForProject, getActivePrimers, createPrimer, updatePrimerSupport, updatePrimerAnswer, GLOBAL_USER_PROFILE_PROJECT_PATH, getProjectState, bumpProjectMemoryEpoch, bumpProjectUserProfileVersion, saveSourceContent, replaceSourceContent, getSourceContents, CTX_REDUCE_KEEP, estimateImageTokensFromDataUrl, normalizeTodoStateJson, buildSyntheticTodoPart, computeSyntheticCallId, isSyntheticTodoPart, countRealUserMessages, tailHygieneStructuralSignature, sameTailHygieneStructuralSignature, refreshTailHygieneBaseline, effectiveTailHygiene, assertTailHygieneContentUnchanged, CHANNEL1_SENTINEL, CHANNEL1_FLOOR_TOKENS, toolOutputTokens, decideChannel1, evaluateChannel2, reclaimableToolOutputCount, buildChannel2Reminder, buildChannel1Reminder, estimateEmergencyDropReclaimTokens, planEmergencyDrop, getRecentTagOwnerMessageIds, AGE_RECLAIM_MIN_TOKENS, getOldestActiveUnprotectedToolTags, getActiveToolTagsForAgeReclaim, getTriggerTagTokenUpperBound, getActiveTagTokenTotalsByMessage, tagTokenCountIsNull, backfillTagTokenCounts, insertTag, updateTagStatus, updateTagDropMode, updateCavemanDepth, updateTagMessageId, deleteTagsByMessageId, getMaxTagNumberBySession, getTagNumberByMessageId, deriveTagLoadFloor, getTagsBySession, getActiveTagsBySession, getTailHygieneTags, getDroppedTagsBySession, getTagsByNumbers, getMaxDroppedTagNumber, getToolTagNumberByOwner, getNullOwnerToolTag, adoptNullOwnerToolTag, getCandidateToolOwners, pickNearestPriorOwner, createChildSessionWithFence, detectOverflow, resolveFallbackChain, modelBodyField, toModelEntry, promptSyncWithValidatedOutputRetry, normalizeSDKResponse, promptSurfaceHashMaterial, createPromptSurfaceRuntime, createPromptSurfaceGuidanceEpochCache, extractLatestAssistantText, hasLengthCappedOutput, setKeepSubagents, shouldKeepSubagents, recordChildInvocation, COMPARTMENT_AGENT_SYSTEM_PROMPT, HISTORIAN_EDITOR_SYSTEM_PROMPT, COMPARTMENT_STRUCTURAL_SYSTEM_PROMPT, Priority, AdmissionClass, StaleRouteHandleError, SocketClosedError, SocketTimeoutError, SubcClient, isConsumerReconnectTransient, connectionFileExists, getCompartmentEvents, loadCompartmentChunkEmbeddingsForSearch, cosineSimilarity, SYNAPSE_DEFAULT_MODEL, SynapseEmbeddingProvider, computeNormalizedHash, saveCommitEmbedding, loadProjectCommitEmbeddings, loadUnembeddedCommits, countEmbeddedCommits, upsertCommits, getLatestIndexedCommitTimeMs, enforceProjectCap, GIT_SWEEP_LEASE_RENEWAL_MS, acquireGitSweepLease, renewGitSweepLease, markGitSweepSuccessAndRelease, parkGitSweepNonIndexable, releaseGitSweepLease, saveEmbeddingIfHashMatches, getProjectEmbeddings, peekProjectEmbeddings, invalidateProject, invalidateMemory, markProjectLoadUntrusted, contentSha256, sweepStaleEmbeddingIdentitiesForProject, registerProjectEmbedding, registerProjectShadowEmbedding, getShadowEmbeddingMeasurementCohort, getPrimaryEmbeddingMeasurementCohort, embedShadowTextForProject, enqueueShadowEmbeddingItems, registerProjectInObservationMode, getProjectEmbeddingSnapshot, embedTextForProject, embedBatchForProject, embedItemsForProject, embedUnembeddedMemoriesForProject, drainCommitBacklogForProject, embedSessionCompartmentChunks, getEmbeddingCoverageStatus, isEmbeddingEnabled, embedText, ensureMemoryEmbeddings, computeCueContentHash, hasMuralCueColumns, getMuralCueState, memoryNeedsCue, setMuralCue, recordMuralCueRejection, hasMemoryShareableColumn, hasMemoryClassifiedAtColumn, getUnclassifiedMemoryIds, ModuleMemoryAuthorityError, insertMemory, insertMemoryIdempotent, getMemoryByHash, getMemoriesByProject, buildWorkspaceMemorySqlFilter, getMemoriesByProjects, getMaxMemoryIdForProjects, readNewMemoriesForM1Union, getMemoryById, getMemoriesByIds, updateMemorySeenCount, updateMemoryRetrievalCount, setMemoryClassification, supersededMemory, mergeMemoryStats, archiveMemory, getMemoryCountsByStatus, sanitizeFtsQuery, searchMemoriesFTS, searchMemoriesFTSUnion, recordMemoryMapping, recordMemoryVerifications, getUnmappedMemoryIds, clearMemoryVerifications, getMemoryVerifications, resolveGitTopLevel, readGitHead, readGitChangedFilesSince, readGitFileChangeTimesSince, verificationFileExists, normalizeVerificationFiles, USER_MEMORY_CANDIDATE_TTL_MS, insertUserMemoryCandidates, getUserMemoryCandidates, deleteUserMemoryCandidates, pruneExpiredUserMemoryCandidates, insertUserMemory, getActiveUserMemories, updateUserMemoryContent, dismissUserMemory, getMural, BoundedSessionMap, registerLkgPersistence, LKG_SNAPSHOT_ARRAY, LKG_SNAPSHOT_OBJECT, LKG_SNAPSHOT_KEY, LKG_SNAPSHOT_STRING, LKG_SNAPSHOT_NUMBER, LKG_SNAPSHOT_BOOLEAN, LKG_SNAPSHOT_NULL, LKG_SNAPSHOT_UNDEFINED, incrementalLkgContentDigests, lkgContentDigest, captureSlot, getSlot, dropSlot, noteEntry, onNoteTrigger, peekNoteNudgeText, markNoteNudgeDelivered, clearNoteNudgeTriggerAndCooldown, resetNoteNudgeCooldownOnly, clearNoteNudgeTriggerOnly, MARKER_SUMMARY_TEXT, applyDeferredCompactionMarker, removeCompactionMarkerForSession, checkCompactionMarkerConsistency, resolveMuralWire, extractM0Block, formatDate, injectTemporalMarkers, clearInjectionCache, getVisibleMemoryIds, prepareCompartmentInjection, renderCompartmentInjection, mustMaterialize, trimMemoriesToBudgetV2, renderMemoryBlockV2, injectM0M1, RECOVERY_NO_HEAD_LIMIT, resolveOpenCodeProtectedTailBoundary, resolveWrapupProtectedTailBoundary, getRawHistoryEligibility, hasRunnableCompartmentWindow, recordHighPressureNoEligibleHead, runCompartmentAgent, snapRangeToCompartments, getActiveCompartmentRun, markActiveCompartmentRunPublished, registerActiveCompartmentRun, startCompartmentAgent, isRecompFailure, isRecompSkip, isRecompComplete, extractRecompReason, contextualizeUpgradeReason, setRecompStarting, setRecompNote, setRecompTerminal, runManagedRecomp, runManagedUpgrade };