@cortexkit/opencode-magic-context 0.45.0 → 0.46.1

package/dist/v2/{server-e36nf2p1.js → server-frbm99q5.js}

@@ -6,14 +6,21 @@ import {
   importPluginModule,
   writeForwardedLogLine,
   log
-} from "./server-ckpc8pxy.js";
+} from "./server-1qbnzc80.js";
 import {
+  ensureColumn,
+  healAllNullColumns,
+  installV95PerfSchema,
+  setDatabase,
+  loadToolDefinitionMeasurements
+} from "./server-vs5gpnd4.js";
+import {
+  closeQuietly,
   resolveOpenCodeDbPath,
   hasV1MessageTables,
   openCodeDbPathExists,
-  getOpenCodeDbProbeDescriptions,
-  closeQuietly
-} from "./server-qpg6wf72.js";
+  getOpenCodeDbProbeDescriptions
+} from "./server-ajzeteqw.js";
 import {
   registerSlowWriteReporter,
   registerSqliteDiagnosticSink,
@@ -23,1479 +30,1610 @@ import {
   withoutSqliteTransformPass,
   isTransientSqliteError,
   withPrivilegedWriter
-} from "./server-a4m2b1yv.js";
-import {
-  setDatabase,
-  loadToolDefinitionMeasurements
-} from "./server-r7cmye3k.js";
+} from "./server-fg34g6a5.js";
 import {
   getErrorMessage
 } from "./server-y8v6yerm.js";
 import {
-  shouldEnforcePrivateStoragePermissions
-} from "./server-e44zzy84.js";
+  shouldEnforcePrivateStoragePermissions,
+  ensureStorageDirectorySync,
+  writeStorageFileSync,
+  writeStorageFileAtomicSync,
+  copyStorageFileSync,
+  copyStorageTreeSync,
+  tightenStorageTreeSync
+} from "./server-1bc61ans.js";
 import {
   logSlowWriteTransaction
-} from "./server-fgmxwrgy.js";
-
-// src/features/magic-context/migrations.ts
-import { isMainThread } from "node:worker_threads";
-
-// src/features/magic-context/memory/constants.ts
-var V2_MEMORY_CATEGORIES = [
-  "PROJECT_RULES",
-  "ARCHITECTURE",
-  "CONSTRAINTS",
-  "CONFIG_VALUES",
-  "NAMING"
-];
-var PROMOTABLE_CATEGORIES = [
-  ...V2_MEMORY_CATEGORIES,
-  "ARCHITECTURE_DECISIONS",
-  "CONFIG_DEFAULTS",
-  "USER_PREFERENCES",
-  "USER_DIRECTIVES",
-  "ENVIRONMENT",
-  "WORKFLOW_RULES",
-  "KNOWN_ISSUES"
-];
-var CATEGORY_PRIORITY = [
-  ...V2_MEMORY_CATEGORIES,
-  "USER_DIRECTIVES",
-  "USER_PREFERENCES",
-  "CONFIG_DEFAULTS",
-  "ARCHITECTURE_DECISIONS",
-  "ENVIRONMENT",
-  "WORKFLOW_RULES",
-  "KNOWN_ISSUES"
-];
-var MEMORY_CATEGORY_ORDER_UNKNOWN = 99;
-var MEMORY_CATEGORY_ORDER_PRIORITY = CATEGORY_PRIORITY.reduce((acc, category, index) => {
-  acc[category] = index;
-  return acc;
-}, {});
-var MEMORY_CATEGORY_ORDER_SQL = `CASE category ${CATEGORY_PRIORITY.map((category, index) => `WHEN '${category}' THEN ${index}`).join(" ")} ELSE ${MEMORY_CATEGORY_ORDER_UNKNOWN} END`;
-function getMemoryCategoryOrder(category) {
-  return MEMORY_CATEGORY_ORDER_PRIORITY[category] ?? MEMORY_CATEGORY_ORDER_UNKNOWN;
-}
-var CATEGORY_DEFAULT_TTL = {
-  WORKFLOW_RULES: 90 * 24 * 60 * 60 * 1000,
-  KNOWN_ISSUES: 30 * 24 * 60 * 60 * 1000
-};
+} from "./server-14vq4kpm.js";
 
-// src/shared/xml-unescape.ts
-var XML_ENTITY_REGEX = /&(amp|apos|quot|lt|gt);/g;
-var XML_ENTITIES = {
-  amp: "&",
-  apos: "'",
-  quot: '"',
-  lt: "<",
-  gt: ">"
-};
-function unescapeXml(s) {
-  return s.replace(XML_ENTITY_REGEX, (entity, name) => XML_ENTITIES[name] ?? entity);
+// src/features/magic-context/fail-closed-block.ts
+var FAIL_CLOSED_DOCTOR_COMMAND = "npx @cortexkit/magic-context@latest doctor";
+function attachFailClosedBlockingProcessEvidence(process2, evidence) {
+  Object.defineProperties(process2, {
+    startTime: { configurable: true, value: evidence.startTime },
+    commandLine: { configurable: true, value: evidence.commandLine }
+  });
+  return process2;
 }
 
-// src/hooks/magic-context/compartment-parser.ts
-var COMPARTMENT_OPEN_REGEX = /<compartment\s+((?:[^>"]|"[^"\n]*")*?)\s*>/g;
-var COMPARTMENT_CLOSE_TAG = "</compartment>";
-var COMPARTMENT_CLOSE_FOLLOWER_REGEX = /^\s*(?:$|<(?:compartment\s|\/compartments\s*>|\/output\s*>|(?:facts|events|meta|user_observations|primer_candidates|unprocessed_from)\s*>))/;
-var ATTR_START_REGEX = /\bstart="(\d+)"/;
-var ATTR_END_REGEX = /\bend="(\d+)"/;
-var ATTR_TITLE_REGEX = /\btitle="([^"]*)"/;
-var ATTR_EPISODE_REGEX = /\bepisode_type="([^"]*)"/;
-var ATTR_IMPORTANCE_REGEX = /\bimportance="(\d+)"/;
-var TIER_OPEN_REGEX = /<p(\d)\s*(\/?)>/g;
-var TIER_CLOSE_REGEX = /<\/p(\d)\s*>/g;
-var TIER_CLOSE_FOLLOWER_REGEX = /^\s*(?:$|<\/?p\d\s*\/?>)/;
-var TIER_CLOSE_ANY_REGEX = /<\/p\d/;
-var TIER_OPEN_ANY_REGEX = /<p\d/;
-var CATEGORY_BLOCK_REGEX = /<([A-Za-z_][A-Za-z0-9_-]*)>(.*?)<\/\1>/gs;
-var HISTORIAN_CATEGORIES = new Set(V2_MEMORY_CATEGORIES);
-var FACT_ITEM_REGEX = /^\s*\*\s*(.+)$/gm;
-var UNPROCESSED_REGEX = /<unprocessed_from>(\d+)<\/unprocessed_from>/;
-var USER_OBSERVATIONS_REGEX = /<user_observations>(.*?)<\/user_observations>/s;
-var USER_OBS_ITEM_REGEX = /^\s*\*\s*(.+)$/gm;
-var PRIMER_CANDIDATES_REGEX = /<primer_candidates>(.*?)<\/primer_candidates>/s;
-var PRIMER_ELEMENT_REGEX = /<primer\s+at_compartment="(\d+)"\s*>(.*?)<\/primer>/gs;
-var PRIMER_ITEM_REGEX = /^\s*(?:\*|-|\d+\.)\s*(.+)$/gm;
-var FACTS_BLOCK_REGEX = /<facts>(.*?)<\/facts>/s;
-var EVENTS_BLOCK_REGEX = /<events>(.*?)<\/events>/s;
-var EVENT_ELEMENT_REGEX = /<([a-z_]+)\s+at_compartment="(\d+)"\s*>(.*?)<\/\1>/gs;
-var EVENT_FIELD_REGEX = /<([a-z_]+)\s*>(.*?)<\/\1>/gs;
-function searchFrom(s, regex, from) {
-  const at = s.slice(from).search(regex);
-  return at === -1 ? -1 : from + at;
-}
-function hasTierOpenerFrom(inner, digit, from) {
-  return new RegExp(`<p${digit}\\s*/?>`).test(inner.slice(from));
-}
-function findMatchingTierClose(inner, bodyStart, digit, found) {
-  const closeRegex = new RegExp(TIER_CLOSE_REGEX.source, "g");
-  closeRegex.lastIndex = bodyStart;
-  for (let close = closeRegex.exec(inner);close; close = closeRegex.exec(inner)) {
-    const end = close.index + close[0].length;
-    if (Number(close[1]) !== digit)
-      continue;
-    if (!TIER_CLOSE_FOLLOWER_REGEX.test(inner.slice(end)))
-      continue;
-    const body = inner.slice(bodyStart, close.index);
-    for (const open of body.matchAll(new RegExp(TIER_OPEN_REGEX.source, "g"))) {
-      const other = Number(open[1]);
-      const otherwiseMissing = other >= 1 && other <= 4 && other !== digit && !found.has(other) && !hasTierOpenerFrom(inner, other, end);
-      if (otherwiseMissing)
-        return;
-    }
-    return { start: close.index, end };
+class FailClosedBlockingError extends Error {
+  code = "FAIL_CLOSED_BLOCKING";
+  reason;
+  constructor(message, reason, options) {
+    super(message, options);
+    this.name = "FailClosedBlockingError";
+    this.reason = reason;
   }
-  return;
 }
-function extractTiers(inner) {
-  const tiers = new Map;
-  const openRegex = new RegExp(TIER_OPEN_REGEX.source, "g");
-  let pos = 0;
-  for (;; ) {
-    openRegex.lastIndex = pos;
-    const open = openRegex.exec(inner);
-    if (!open)
-      break;
-    const digit = Number(open[1]);
-    const bodyStart = open.index + open[0].length;
-    let bodyEnd = bodyStart;
-    pos = bodyStart;
-    if (open[2] !== "/") {
-      const close = findMatchingTierClose(inner, bodyStart, digit, tiers);
-      if (close) {
-        bodyEnd = close.start;
-        pos = close.end;
-      } else {
-        const closeAt = searchFrom(inner, TIER_CLOSE_ANY_REGEX, bodyStart);
-        bodyEnd = closeAt === -1 ? inner.length : closeAt;
-        pos = closeAt === -1 ? inner.length : closeAt + 1;
-        const openInside = searchFrom(inner.slice(0, bodyEnd), TIER_OPEN_ANY_REGEX, bodyStart);
-        if (openInside !== -1) {
-          bodyEnd = openInside;
-          pos = openInside;
-        }
-      }
-    }
-    if (!tiers.has(digit)) {
-      tiers.set(digit, unescapeXml(inner.slice(bodyStart, bodyEnd).trim()));
-    }
+var OPENCODE_INTERNAL_AGENT_NAMES = new Set(["title", "summary", "compaction"]);
+function isMagicContextHiddenAgentName(agent) {
+  if (agent === "smart-note-compiler" || agent.startsWith("smart-note-")) {
+    return true;
   }
-  return tiers;
-}
-function extractTiersFromInner(inner) {
-  const tiers = extractTiers(inner);
-  return { p1: tiers.get(1), p2: tiers.get(2), p3: tiers.get(3), p4: tiers.get(4) };
+  if (agent === "historian" || agent.startsWith("historian-"))
+    return true;
+  if (agent === "dreamer" || agent.startsWith("dreamer-"))
+    return true;
+  return false;
 }
-function findCompartmentElements(text) {
-  const elements = [];
-  const openRegex = new RegExp(COMPARTMENT_OPEN_REGEX.source, "g");
-  let cursor = 0;
-  for (;; ) {
-    openRegex.lastIndex = cursor;
-    const open = openRegex.exec(text);
-    if (!open)
-      break;
-    const bodyStart = open.index + open[0].length;
-    const nextOpen = openRegex.exec(text);
-    const windowEnd = nextOpen ? nextOpen.index : text.length;
-    const firstClose = text.indexOf(COMPARTMENT_CLOSE_TAG, bodyStart);
-    if (firstClose === -1)
-      break;
-    let closeAt = firstClose;
-    for (let at = firstClose;at !== -1 && at < windowEnd; at = text.indexOf(COMPARTMENT_CLOSE_TAG, at + 1)) {
-      if (COMPARTMENT_CLOSE_FOLLOWER_REGEX.test(text.slice(at + COMPARTMENT_CLOSE_TAG.length))) {
-        closeAt = at;
-        break;
-      }
-    }
-    const end = closeAt + COMPARTMENT_CLOSE_TAG.length;
-    elements.push({
-      start: open.index,
-      end,
-      attrs: open[1],
-      inner: text.slice(bodyStart, closeAt)
-    });
-    cursor = end;
+var MAX_FORMATTED_BLOCKING_PROCESSES = 8;
+var MAX_FORMATTED_COMMAND_LINE_LENGTH = 80;
+function normalizeFailClosedProcessKind(process2) {
+  switch (process2.kind) {
+    case "OpenCode server":
+    case "OpenCode instance (TUI/CLI)":
+    case "Pi":
+    case "process":
+      return process2.kind;
+  }
+  switch (process2.harness?.trim().toLowerCase()) {
+    case "opencode server":
+      return "OpenCode server";
+    case "opencode instance (tui/cli)":
+    case "opencode instance":
+      return "OpenCode instance (TUI/CLI)";
+    case "pi":
+    case "pi harness":
+    case "omp":
+      return "Pi";
+    default:
+      return "process";
   }
-  return elements;
 }
-function textOutsideCompartments(text, elements) {
-  let outside = "";
-  let last = 0;
-  for (const element of elements) {
-    outside += text.slice(last, element.start);
-    last = element.end;
+function formatFailClosedProcessStartTime(startTime) {
+  if (!Number.isFinite(startTime) || startTime <= 0)
+    return "unverified";
+  try {
+    const parts = new Intl.DateTimeFormat("en-US", {
+      day: "numeric",
+      hour: "2-digit",
+      minute: "2-digit",
+      month: "short",
+      hour12: false
+    }).formatToParts(new Date(startTime));
+    const values = Object.fromEntries(parts.map(({ type, value }) => [type, value]));
+    if (!values.month || !values.day || !values.hour || !values.minute)
+      return "unverified";
+    return `${values.month} ${values.day} ${values.hour}:${values.minute}`;
+  } catch {
+    return "unverified";
   }
-  return outside + text.slice(last);
 }
-function parseCompartmentOutput(text) {
-  const compartments = [];
-  const facts = [];
-  let droppedFactBlocks = 0;
-  let droppedFacts = 0;
-  const elements = findCompartmentElements(text);
-  for (const { attrs, inner } of elements) {
-    const startMatch = attrs.match(ATTR_START_REGEX);
-    const endMatch = attrs.match(ATTR_END_REGEX);
-    const titleMatch = attrs.match(ATTR_TITLE_REGEX);
-    if (!startMatch || !endMatch || !titleMatch)
-      continue;
-    const startMessage = parseInt(startMatch[1], 10);
-    const endMessage = parseInt(endMatch[1], 10);
-    const title = unescapeXml(titleMatch[1]);
-    if (Number.isNaN(startMessage) || Number.isNaN(endMessage) || !title)
-      continue;
-    const episodeMatch = attrs.match(ATTR_EPISODE_REGEX);
-    const importanceMatch = attrs.match(ATTR_IMPORTANCE_REGEX);
-    const episodeType = episodeMatch ? unescapeXml(episodeMatch[1]) : undefined;
-    const importance = importanceMatch ? parseInt(importanceMatch[1], 10) : undefined;
-    const { p1, p2, p3, p4 } = extractTiersFromInner(inner);
-    if (typeof p1 === "string" && p1.length > 0) {
-      compartments.push({
-        startMessage,
-        endMessage,
-        title,
-        content: p1,
-        p1,
-        p2: typeof p2 === "string" ? p2 : p1,
-        p3: typeof p3 === "string" ? p3 : typeof p2 === "string" ? p2 : p1,
-        p4: typeof p4 === "string" ? p4 : "",
-        importance,
-        episodeType
-      });
-      continue;
-    }
-    const content = unescapeXml(inner.trim());
-    if (content) {
-      compartments.push({
-        startMessage,
-        endMessage,
-        title,
-        content,
-        importance,
-        episodeType
-      });
-    }
+function formatFailClosedCommandLine(commandLine) {
+  if (typeof commandLine !== "string" || commandLine.trim().length === 0)
+    return "unverified";
+  try {
+    const normalized = commandLine.replaceAll("\x00", " ").replace(/\s+/g, " ").trim();
+    if (normalized.length === 0)
+      return "unverified";
+    const sanitized = sanitizeDiagnosticText(normalized).trim();
+    if (sanitized.length === 0)
+      return "unverified";
+    return sanitized.length > MAX_FORMATTED_COMMAND_LINE_LENGTH ? `${sanitized.slice(0, MAX_FORMATTED_COMMAND_LINE_LENGTH - 3)}...` : sanitized;
+  } catch {
+    return "unverified";
   }
-  const outside = textOutsideCompartments(text, elements);
-  const factsBlockMatch = outside.match(FACTS_BLOCK_REGEX);
-  const factsScope = factsBlockMatch ? factsBlockMatch[1] : outside.replace(EVENTS_BLOCK_REGEX, "").replace(/<(meta|user_observations|primer_candidates)>.*?<\/\1>/gs, "").replace(/<\/?(?:output|compartments)>/g, "");
-  for (const categoryMatch of factsScope.matchAll(CATEGORY_BLOCK_REGEX)) {
-    const category = categoryMatch[1];
-    const blockContent = categoryMatch[2];
-    const items = [...blockContent.matchAll(FACT_ITEM_REGEX)].map((match) => unescapeXml(match[1].trim())).filter(Boolean);
-    if (!HISTORIAN_CATEGORIES.has(category)) {
-      if (items.length === 0)
-        continue;
-      droppedFactBlocks++;
-      droppedFacts += items.length;
-      log(`[historian] Dropped <facts> category ${category} (${items.length} facts)`);
+}
+function formatFailClosedBlockingProcesses(processes) {
+  const uniqueProcesses = new Map;
+  for (const process2 of processes) {
+    if (!Number.isInteger(process2.pid) || process2.pid <= 0)
       continue;
+    const candidate = {
+      kind: normalizeFailClosedProcessKind(process2),
+      pid: process2.pid,
+      startTime: process2.startTime,
+      commandLine: process2.commandLine
+    };
+    const previous = uniqueProcesses.get(process2.pid);
+    if (!previous || previous.kind === "process" && candidate.kind !== "process") {
+      uniqueProcesses.set(process2.pid, candidate);
+    } else {
+      uniqueProcesses.set(process2.pid, {
+        ...previous,
+        startTime: previous.startTime ?? candidate.startTime,
+        commandLine: previous.commandLine ?? candidate.commandLine
+      });
     }
-    for (const content of items)
-      facts.push({ category, content });
   }
-  const unprocessedMatch = outside.match(UNPROCESSED_REGEX);
-  const unprocessedFrom = unprocessedMatch ? parseInt(unprocessedMatch[1], 10) : null;
-  const userObservations = [];
-  const userObsMatch = outside.match(USER_OBSERVATIONS_REGEX);
-  if (userObsMatch) {
-    for (const itemMatch of userObsMatch[1].matchAll(USER_OBS_ITEM_REGEX)) {
-      const obs = unescapeXml(itemMatch[1].trim());
-      if (obs)
-        userObservations.push(obs);
+  const entries = [...uniqueProcesses.values()];
+  const visible = entries.slice(0, MAX_FORMATTED_BLOCKING_PROCESSES);
+  const rendered = visible.map(({ kind, pid }) => `${kind} (PID ${pid})`);
+  const omitted = entries.length - visible.length;
+  if (omitted > 0)
+    rendered.push(`${omitted} more blocking process(es)`);
+  if (rendered.length === 0)
+    return "a live process";
+  const summary = rendered.length === 1 ? rendered[0] : `${rendered.slice(0, -1).join(", ")}, and ${rendered.at(-1)}`;
+  const evidence = entries.map(({ kind, pid, startTime, commandLine }) => `- PID ${pid}: ${kind}, started ${formatFailClosedProcessStartTime(startTime)}, cmd: ${formatFailClosedCommandLine(commandLine)}`).join(`
+`);
+  return `${summary}
+Blocking process evidence:
+${evidence}`;
+}
+function formatFailClosedBlockingMessage(reason) {
+  if (reason.kind === "migration_guard") {
+    if (reason.unreadableFile) {
+      const arm = reason.unreadableArm ?? "io";
+      const recovery = arm === "io" ? `If none of these processes are running, it is safe to delete ${reason.unreadableFile} and retry.` : `The file may be a recent incomplete write; retry after the file is older than the ten-minute grace window, or stop the relevant process before deleting it.`;
+      return [
+        `Magic Context cannot migrate the shared database because RPC discovery file ${reason.unreadableFile} is uncertain (${arm} arm), so the absence of a live process cannot be proven.`,
+        recovery,
+        `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
+      ].join(" ");
     }
+    return [
+      `Magic Context cannot migrate the shared database (one database serves every project on this machine) because ${formatFailClosedBlockingProcesses(reason.blockingProcesses)} may be running an older Magic Context build that would fail against the migrated database.`,
+      `The database is at upstream migration v${reason.persistedVersion}; this build needs v${reason.supportedVersion}.`,
+      "Restart the blocking process — even one from a different project — and it will pick up the new build and migrate on start; or shut it down and retry.",
+      "If that host loads a pinned or cached older Magic Context build, a restart alone is not enough: stop it or update its Magic Context build, then start this host once so it migrates the database with nothing older attached.",
+      `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
+    ].join(" ");
   }
-  const primerCandidates = [];
-  const primerMatch = outside.match(PRIMER_CANDIDATES_REGEX);
-  if (primerMatch) {
-    const block = primerMatch[1];
-    let sawElement = false;
-    for (const el of block.matchAll(PRIMER_ELEMENT_REGEX)) {
-      sawElement = true;
-      const question = unescapeXml(el[2].trim());
-      if (question) {
-        primerCandidates.push({
-          question,
-          originCompartmentIndex: Number.parseInt(el[1], 10)
-        });
-      }
-    }
-    if (!sawElement) {
-      for (const itemMatch of block.matchAll(PRIMER_ITEM_REGEX)) {
-        const question = unescapeXml(itemMatch[1].trim());
-        if (question)
-          primerCandidates.push({ question });
-      }
-    }
+  if (reason.kind === "schema_fence") {
+    return [
+      `Magic Context cannot operate: this Magic Context build is older than the database; upgrade/restart this harness (upstream migration lane v${reason.persistedVersion}, build supports through v${reason.supportedVersion}).`,
+      `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
+    ].join(" ");
   }
-  const events = parseEvents(outside);
-  const sortedByStart = compartments.map((compartment, emitted) => ({ compartment, emitted })).sort((a, b) => a.compartment.startMessage - b.compartment.startMessage);
-  const sortedPosition = [];
-  sortedByStart.forEach(({ emitted }, sorted) => {
-    sortedPosition[emitted] = sorted + 1;
-  });
-  const remapAnchor = (anchor) => anchor >= 1 && anchor <= sortedPosition.length ? sortedPosition[anchor - 1] : anchor;
-  return {
-    compartments: sortedByStart.map(({ compartment }) => compartment),
-    facts,
-    droppedFactBlocks,
-    droppedFacts,
-    events: events.map((event) => event.atCompartment === null ? event : { ...event, atCompartment: remapAnchor(event.atCompartment) }),
-    unprocessedFrom,
-    userObservations,
-    primerCandidates: primerCandidates.map((candidate) => candidate.originCompartmentIndex === undefined ? candidate : {
-      ...candidate,
-      originCompartmentIndex: remapAnchor(candidate.originCompartmentIndex)
-    })
-  };
+  const cause = reason.cause.trim().length > 0 ? reason.cause.trim() : "unknown storage error";
+  return [
+    `Magic Context cannot operate: persistent storage failed (${cause}).`,
+    "The plugin will not silently degrade to native compaction while enabled.",
+    `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
+  ].join(" ");
 }
-function parseEvents(text) {
-  const blockMatch = text.match(EVENTS_BLOCK_REGEX);
-  if (!blockMatch)
-    return [];
-  const block = blockMatch[1];
-  const events = [];
-  for (const elMatch of block.matchAll(EVENT_ELEMENT_REGEX)) {
-    const kind = elMatch[1];
-    const atRaw = parseInt(elMatch[2], 10);
-    const atCompartment = Number.isNaN(atRaw) ? null : atRaw;
-    const fields = {};
-    for (const fieldMatch of elMatch[3].matchAll(EVENT_FIELD_REGEX)) {
-      const name = fieldMatch[1];
-      const value = unescapeXml(fieldMatch[2].trim());
-      if (value)
-        fields[name] = value;
+function formatFailClosedBlockingSummary(reason) {
+  if (reason.kind === "migration_guard") {
+    if (reason.unreadableFile) {
+      return `Magic Context cannot migrate the shared database from v${reason.persistedVersion} to v${reason.supportedVersion}: RPC discovery file ${reason.unreadableFile} could not be read, so an older host may still be attached.`;
     }
-    events.push({ kind, atCompartment, fields });
+    const blockers = reason.blockingProcesses.filter((process2) => Number.isInteger(process2.pid) && process2.pid > 0).map((process2) => `${normalizeFailClosedProcessKind(process2)} (PID ${process2.pid})`);
+    const named = blockers.length > 0 ? blockers.join(", ") : "a live process";
+    return `Magic Context cannot migrate the shared database from v${reason.persistedVersion} to v${reason.supportedVersion} while ${named} may still run an older Magic Context build. Stop or update that host, then start this one once.`;
   }
-  return events;
-}
-
-// src/features/magic-context/lkg-prefix-chunks.ts
-import { createHash } from "node:crypto";
-var LKG_PREFIX_CHUNK_CHARS = 64 * 1024;
-function splitLkgPrefix(jsonPrefix) {
-  const chunks = [];
-  let start = 0;
-  while (start < jsonPrefix.length) {
-    let end = Math.min(start + LKG_PREFIX_CHUNK_CHARS, jsonPrefix.length);
-    if (end < jsonPrefix.length) {
-      const last = jsonPrefix.charCodeAt(end - 1);
-      if (last >= 55296 && last <= 56319)
-        end -= 1;
-    }
-    chunks.push(jsonPrefix.slice(start, end));
-    start = end;
+  if (reason.kind === "schema_fence") {
+    return `Magic Context cannot operate: the shared database is at v${reason.persistedVersion}, newer than this build supports (v${reason.supportedVersion}). Update and restart this host.`;
   }
-  return chunks;
-}
-function hashLkgChunk(body) {
-  return createHash("sha256").update(body).digest("hex");
+  const cause = reason.cause.trim().length > 0 ? reason.cause.trim() : "unknown storage error";
+  return `Magic Context cannot operate: persistent storage failed (${cause}).`;
 }
-function hashLkgChunkList(chunkHashes) {
-  return createHash("sha256").update(chunkHashes.join(`
-`)).digest("hex");
+function createFailClosedBlockingError(reason, options) {
+  return new FailClosedBlockingError(formatFailClosedBlockingMessage(reason), reason, options);
 }
-function layoutLkgPrefix(jsonPrefix) {
-  const chunks = splitLkgPrefix(jsonPrefix);
-  const chunkHashes = chunks.map(hashLkgChunk);
-  return { chunks, chunkHashes, chars: jsonPrefix.length, hash: hashLkgChunkList(chunkHashes) };
+function isFailClosedBlockingError(error) {
+  return error instanceof FailClosedBlockingError || typeof error === "object" && error !== null && error.name === "FailClosedBlockingError" && error.code === "FAIL_CLOSED_BLOCKING";
 }
-
-// src/features/magic-context/migration-v94-write-split.ts
-var LKG_SLOT_CHUNKS_DDL = `
-    CREATE TABLE IF NOT EXISTS lkg_slot_chunks (
-        session_id TEXT NOT NULL,
-        chunk INTEGER NOT NULL,
-        hash TEXT NOT NULL,
-        body TEXT NOT NULL,
-        PRIMARY KEY (session_id, chunk)
-    );
-`;
-var SESSION_REPLAY_DECISIONS_DDL = `
-    CREATE TABLE IF NOT EXISTS session_replay_decisions (
-        session_id TEXT NOT NULL,
-        message_id TEXT NOT NULL,
-        decision TEXT NOT NULL,
-        PRIMARY KEY (session_id, message_id)
-    ) WITHOUT ROWID;
-`;
-function lkgSlotsDdl(table) {
-  return `
-        CREATE TABLE IF NOT EXISTS ${table} (
-            session_id TEXT PRIMARY KEY,
-            json_prefix_chars INTEGER NOT NULL,
-            json_prefix_chunks INTEGER NOT NULL,
-            json_prefix_hash TEXT NOT NULL,
-            input_id_seq TEXT NOT NULL,
-            input_content_digests TEXT NOT NULL,
-            input_content_signatures TEXT,
-            last_input_message_id TEXT NOT NULL,
-            model_key TEXT,
-            provider_key TEXT,
-            captured_at INTEGER NOT NULL,
-            row_version INTEGER,
-            capture_sequence INTEGER
-        );
-    `;
+function shouldBypassFailClosedBlock(input) {
+  if (input.isPiSubagentEnv === true)
+    return true;
+  if (input.isInternalChildSession === true)
+    return true;
+  const agent = typeof input.agent === "string" ? input.agent.trim() : "";
+  if (agent.length === 0)
+    return false;
+  if (OPENCODE_INTERNAL_AGENT_NAMES.has(agent))
+    return true;
+  if (isMagicContextHiddenAgentName(agent))
+    return true;
+  return false;
 }
-var LKG_SLOTS_DDL = lkgSlotsDdl("lkg_slots");
-var LKG_MOVE_WINDOW_MS = 24 * 60 * 60 * 1000;
-function tableExists(db, name) {
-  return Boolean(db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name = ?").get(name));
+function resolveAgentNameFromMessages(messages) {
+  for (let i = messages.length - 1;i >= 0; i -= 1) {
+    const info = messages[i]?.info;
+    if (!info || typeof info !== "object")
+      continue;
+    const agent = info.agent;
+    if (typeof agent === "string" && agent.length > 0)
+      return agent;
+  }
+  return;
 }
-function columnExists(db, table, column) {
-  const rows = db.prepare(`PRAGMA table_info(${table})`).all();
-  return rows.some((row) => row.name === column);
+
+// src/features/magic-context/memory/project-identity.ts
+import { execFileSync } from "node:child_process";
+import { createHash as createHash2 } from "node:crypto";
+import { existsSync, realpathSync as realpathSync2, statSync } from "node:fs";
+import { homedir } from "node:os";
+import path3 from "node:path";
+
+// src/features/magic-context/memory/project-identity-cache.ts
+import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+import path2 from "node:path";
+
+// src/shared/project-directory-key.ts
+import { realpathSync } from "node:fs";
+import path from "node:path";
+function projectDirectoryKey(directory) {
+  const slashed = directory.replaceAll("\\", "/").replace(/^\/\/\?\/UNC\//i, "//").replace(/^\/\/\?\//, "");
+  if (/^[a-z]:\//i.test(slashed) || slashed.startsWith("//")) {
+    return path.win32.normalize(slashed).replaceAll("\\", "/").replace(/\/$/, "").toLowerCase();
+  }
+  return path.resolve(directory);
 }
-function splitLkgSlotPrefixes(db, now = Date.now()) {
-  db.exec(LKG_SLOT_CHUNKS_DDL);
-  if (!tableExists(db, "lkg_slots")) {
-    db.exec(LKG_SLOTS_DDL);
-    return;
+var realpathForCanonicalDirectory = (directory) => realpathSync.native(directory);
+function canonicalProjectDirectory(directory) {
+  let resolved = directory;
+  try {
+    resolved = realpathForCanonicalDirectory(directory);
+  } catch {}
+  return projectDirectoryKey(resolved);
+}
+
+// src/features/magic-context/memory/project-identity-cache.ts
+function cachePath(directory, storageDir = getMagicContextStorageDir()) {
+  const hash = createHash("sha256").update(projectDirectoryKey(directory)).digest("hex");
+  return path2.join(storageDir, "project-identities", `${hash}.json`);
+}
+function rememberGitIdentity(directory, identity) {
+  try {
+    const destination = cachePath(directory);
+    writeStorageFileAtomicSync(destination, JSON.stringify({ directory: projectDirectoryKey(directory), identity }));
+  } catch {}
+}
+function readRememberedGitIdentity(directory, storageDir) {
+  try {
+    const record = JSON.parse(readFileSync(cachePath(directory, storageDir), "utf8"));
+    if (record.directory === projectDirectoryKey(directory) && /^git:[0-9a-f]{7,64}$/.test(record.identity))
+      return record.identity;
+  } catch {}
+  return;
+}
+
+// src/features/magic-context/memory/project-identity.ts
+var GIT_TIMEOUT_MS = 5000;
+var TRANSIENT_FAILURE_COOLDOWN_MS = 5 * 60 * 1000;
+var identityCache = new Map;
+var linkedGitWorktreeCache = new Map;
+var lastKnownGitIdentityCache = new Map;
+var directoryFallbackCache = new Map;
+var transientFailureCooldown = new Map;
+var dubiousOwnershipFallbackDirectories = new Set;
+var dubiousOwnershipLoggedDirectories = new Set;
+var dubiousOwnershipWarnedDirectories = new Set;
+var transientGitIdentityReuseLoggedDirectories = new Set;
+var sessionIdentityCache = new Map;
+var homeProjectPermission = false;
+var homeProjectSkipLogged = false;
+var pausedIdentityReasons = new Map;
+var pausedIdentityLogged = new Set;
+function setHomeProjectPermission(allowed) {
+  homeProjectPermission = allowed;
+}
+function shouldSkipHomeProjectMemory(directory) {
+  try {
+    assertProjectAllowed(directory, homeProjectPermission);
+    return false;
+  } catch (error) {
+    if (!(error instanceof ProjectIdentityError) || error.errorClass !== "home_project_disabled")
+      throw error;
+    if (!homeProjectSkipLogged) {
+      homeProjectSkipLogged = true;
+      log("[magic-context] home project memory disabled; skipping memory features");
+    }
+    return true;
   }
-  if (!columnExists(db, "lkg_slots", "json_prefix"))
-    return;
-  db.prepare("DELETE FROM lkg_slots WHERE NOT (captured_at >= ?)").run(now - LKG_MOVE_WINDOW_MS);
-  db.exec("DROP TABLE IF EXISTS lkg_slots_v94");
-  db.exec(lkgSlotsDdl("lkg_slots_v94"));
-  const sessionIds = db.prepare("SELECT session_id FROM lkg_slots").all().map((row) => row.session_id);
-  const readPrefix = db.prepare("SELECT json_prefix FROM lkg_slots WHERE session_id IS ?");
-  const insertSlot = db.prepare(`INSERT OR IGNORE INTO lkg_slots_v94 (
-            session_id, json_prefix_chars, json_prefix_chunks, json_prefix_hash,
-            input_id_seq, input_content_digests, input_content_signatures,
-            last_input_message_id, model_key, provider_key,
-            captured_at, row_version, capture_sequence
-        )
-        SELECT session_id, ?, ?, ?,
-            input_id_seq, input_content_digests, input_content_signatures,
-            last_input_message_id, model_key, provider_key,
-            captured_at, row_version, capture_sequence
-        FROM lkg_slots WHERE session_id IS ?`);
-  const insertChunk = db.prepare("INSERT INTO lkg_slot_chunks (session_id, chunk, hash, body) VALUES (?, ?, ?, ?)");
-  db.prepare("DELETE FROM lkg_slot_chunks").run();
-  for (const sessionId of sessionIds) {
-    if (typeof sessionId !== "string")
-      continue;
-    const row = readPrefix.get(sessionId);
-    if (typeof row?.json_prefix !== "string")
-      continue;
-    const layout = layoutLkgPrefix(row.json_prefix);
-    const inserted = insertSlot.run(layout.chars, layout.chunks.length, layout.hash, sessionId);
-    if (Number(inserted.changes) !== 1)
-      continue;
-    for (let index = 0;index < layout.chunks.length; index += 1) {
-      insertChunk.run(sessionId, index, layout.chunkHashes[index], layout.chunks[index]);
+}
+var execFileSyncForIdentity = execFileSync;
+var userHomeDirectoryForIdentity = () => homedir();
+var nowMs = () => Date.now();
+var filesystemProbeObserverForTests;
+
+class ProjectIdentityError extends Error {
+  errorClass;
+  rawDirectory;
+  constructor(errorClass, rawDirectory, message, cause) {
+    super(message);
+    this.name = "ProjectIdentityError";
+    this.errorClass = errorClass;
+    this.rawDirectory = rawDirectory;
+    if (cause) {
+      this.cause = cause;
     }
   }
-  db.exec("DROP TABLE lkg_slots");
-  db.exec("ALTER TABLE lkg_slots_v94 RENAME TO lkg_slots");
 }
-function validDecisionSql(type, value) {
-  return `(${type} = 'text' AND (
-        ${value} IN ('keep', 'strip') OR (
-            ${value} GLOB 'keep:[1-9]*'
-            AND substr(${value}, 6) NOT GLOB '*[^0-9]*'
-            AND length(${value}) <= 10
-            AND CAST(substr(${value}, 6) AS INTEGER) BETWEEN 2 AND 10000
-        )
-    ))`;
+function asError(error) {
+  return error instanceof Error ? error : undefined;
 }
-function splitReplayDecisions(db) {
-  db.exec(SESSION_REPLAY_DECISIONS_DDL);
-  if (!tableExists(db, "session_meta"))
+function getErrorCode(error) {
+  if (error === null || typeof error !== "object" || !("code" in error)) {
     return;
-  if (!columnExists(db, "session_meta", "trailing_blank_decisions"))
+  }
+  const code = error.code;
+  return typeof code === "string" ? code : undefined;
+}
+function getErrorSignal(error) {
+  if (error === null || typeof error !== "object" || !("signal" in error)) {
     return;
-  const doc = "sm.trailing_blank_decisions";
-  const hasVersionKey = `json_type(${doc}, '$.version') IS NOT NULL`;
-  const versionIsDecision = validDecisionSql(`json_type(${doc}, '$.version')`, `json_extract(${doc}, '$.version')`);
-  const isV2 = `(${hasVersionKey} AND NOT ${versionIsDecision})`;
-  const v2Valid = `(
-        json_type(${doc}, '$.version') IN ('integer', 'real')
-        AND json_extract(${doc}, '$.version') = 2
-        AND json_type(${doc}, '$.trailingBlank') = 'object'
-        AND NOT EXISTS (
-            SELECT 1 FROM json_each(${doc}, '$.trailingBlank') AS entry
-            WHERE entry.key = '' OR NOT ${validDecisionSql("entry.type", "entry.value")}
-        )
-    )`;
-  const v1Valid = `NOT EXISTS (
-        SELECT 1 FROM json_each(${doc}) AS entry
-        WHERE entry.key = '' OR NOT ${validDecisionSql("entry.type", "entry.value")}
-    )`;
-  db.exec("DROP TABLE IF EXISTS temp.v94_replay_documents");
-  db.exec(`
-        CREATE TEMP TABLE v94_replay_documents AS
-        SELECT session_id, version FROM (
-            SELECT sm.session_id AS session_id, CASE WHEN ${isV2} THEN 2 ELSE 1 END AS version,
-                CASE WHEN ${isV2} THEN ${v2Valid} ELSE ${v1Valid} END AS strictly_valid
-            FROM session_meta AS sm
-            WHERE typeof(${doc}) = 'text' AND ${doc} <> ''
-                AND json_valid(${doc}) AND json_type(${doc}) = 'object'
-        ) WHERE strictly_valid;
-    `);
-  db.exec(`
-        INSERT INTO session_replay_decisions (session_id, message_id, decision)
-        SELECT sm.session_id, entry.key, entry.value
-        FROM v94_replay_documents AS moved
-        JOIN session_meta AS sm ON sm.session_id = moved.session_id
-        JOIN json_each(
-            ${doc}, CASE moved.version WHEN 2 THEN '$.trailingBlank' ELSE '$' END
-        ) AS entry
-        WHERE true
-        ON CONFLICT(session_id, message_id) DO UPDATE SET decision = excluded.decision;
-    `);
-  db.exec(`
-        UPDATE session_meta SET trailing_blank_decisions = (
-            SELECT CASE moved.version
-                WHEN 2 THEN json_set(session_meta.trailing_blank_decisions, '$.trailingBlank', json('{}'))
-                ELSE ''
-            END
-            FROM v94_replay_documents AS moved WHERE moved.session_id = session_meta.session_id
-        )
-        WHERE session_id IN (SELECT session_id FROM v94_replay_documents);
-    `);
-  db.exec("DROP TABLE temp.v94_replay_documents");
+  }
+  const signal = error.signal;
+  return typeof signal === "string" ? signal : undefined;
 }
-
-// src/features/magic-context/opencode2-relabel.ts
-var OPENCODE2_RELABEL_STATE_KEY = "v87_opencode2_relabel";
-var V87_HARNESS_TWIN_RULES = [
-  {
-    table: "session_projects",
-    keyColumns: ["session_id"],
-    incomingIsNewer: "incoming.updated_at > existing.updated_at"
-  },
-  {
-    table: "primer_candidates",
-    keyColumns: [
-      "project_path",
-      "session_id",
-      "source_start_message_id",
-      "source_end_message_id"
-    ],
-    incomingIsNewer: "incoming.created_at > existing.created_at"
-  },
-  {
-    table: "transform_decisions",
-    keyColumns: ["session_id", "message_id"],
-    incomingIsNewer: "incoming.ts_ms > existing.ts_ms"
+function getErrorKilled(error) {
+  if (error === null || typeof error !== "object" || !("killed" in error)) {
+    return false;
   }
-];
-function tableExists2(db, name) {
-  return Boolean(db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name = ?").get(name));
+  return error.killed === true;
 }
-function columnNames(db, table) {
-  return new Set(db.prepare(`PRAGMA table_info(${table})`).all().map((column) => column.name));
+function getErrorStderr(error) {
+  if (error === null || typeof error !== "object" || !("stderr" in error)) {
+    return "";
+  }
+  const stderr = error.stderr;
+  if (typeof stderr === "string") {
+    return stderr;
+  }
+  if (Buffer.isBuffer(stderr)) {
+    return stderr.toString("utf8");
+  }
+  return "";
 }
-function listSessionScopedHarnessTables(db, tables) {
-  const shapes = [];
-  for (const table of tables) {
-    if (!tableExists2(db, table))
-      continue;
-    const columns = columnNames(db, table);
-    if (!columns.has("harness"))
-      continue;
-    shapes.push({ table, hasSessionId: columns.has("session_id") });
+function directoryFallback(directory) {
+  const canonical = path3.resolve(directory);
+  const hash = createHash2("md5").update(canonical, "utf8").digest("hex").slice(0, 12);
+  return `dir:${hash}`;
+}
+function rememberedIdentityOrDirectoryFallback(canonical) {
+  return readRememberedGitIdentity(canonical) ?? directoryFallback(canonical);
+}
+function assertDirectoryUsable(canonicalDirectory, rawDirectory) {
+  try {
+    const stat = statSync(canonicalDirectory);
+    if (!stat.isDirectory()) {
+      throw new ProjectIdentityError("unknown", rawDirectory, `Project path is not a directory: ${canonicalDirectory}`);
+    }
+  } catch (error) {
+    if (error instanceof ProjectIdentityError) {
+      throw error;
+    }
+    const code = getErrorCode(error);
+    if (code === "EACCES" || code === "EPERM") {
+      throw new ProjectIdentityError("permission_denied", rawDirectory, `Permission denied while accessing project directory: ${canonicalDirectory}`, asError(error));
+    }
+    throw new ProjectIdentityError("unknown", rawDirectory, `Unable to access project directory: ${canonicalDirectory}`, asError(error));
+  }
+}
+function isGitTimeoutError(error) {
+  const code = getErrorCode(error);
+  const signal = getErrorSignal(error);
+  return code === "ETIMEDOUT" || signal === "SIGTERM" || signal === "SIGKILL" || getErrorKilled(error);
+}
+function hasUnbornHead(directory) {
+  const options = {
+    cwd: directory,
+    encoding: "utf8",
+    env: { ...process.env, LC_ALL: "C", LANG: "C" },
+    stdio: ["ignore", "pipe", "pipe"],
+    timeout: GIT_TIMEOUT_MS,
+    windowsHide: true
+  };
+  try {
+    execFileSyncForIdentity("git", ["rev-parse", "--git-dir"], options);
+    try {
+      execFileSyncForIdentity("git", ["rev-parse", "--verify", "--quiet", "HEAD"], options);
+      return false;
+    } catch (error) {
+      return !isGitTimeoutError(error) && typeof error === "object" && error !== null && "status" in error && error.status === 1 && getErrorStderr(error) === "";
+    }
+  } catch {
+    return false;
   }
-  return shapes;
 }
-function collectCandidateSessions(db, shapes) {
-  const sessions = new Set;
-  for (const shape of shapes) {
-    if (!shape.hasSessionId)
-      continue;
-    const rows = db.prepare(`SELECT DISTINCT session_id AS id FROM ${shape.table}
-                  WHERE session_id IS NOT NULL AND harness IN ('opencode', 'opencode2')`).all();
-    for (const row of rows)
-      sessions.add(row.id);
+function classifyGitError(error, rawDirectory) {
+  if (isGitTimeoutError(error)) {
+    return new ProjectIdentityError("git_timeout", rawDirectory, `git rev-list timed out after ${GIT_TIMEOUT_MS}ms`, asError(error));
   }
-  return [...sessions].sort();
+  const code = getErrorCode(error);
+  if (code === "ENOENT") {
+    return new ProjectIdentityError("git_missing", rawDirectory, "git binary is not available in PATH", asError(error));
+  }
+  if (code === "EACCES" || code === "EPERM") {
+    return new ProjectIdentityError("permission_denied", rawDirectory, "Permission denied while spawning git", asError(error));
+  }
+  const stderr = getErrorStderr(error).toLowerCase();
+  if (stderr.includes("detected dubious ownership")) {
+    return new ProjectIdentityError("dubious_ownership", rawDirectory, "git refused to read the repository because it detected dubious ownership", asError(error));
+  }
+  if (stderr.includes("not a git repository") || stderr.includes("does not have any commits yet") || stderr.includes("ambiguous argument 'head'") || stderr.includes("unknown revision or path")) {
+    return new ProjectIdentityError("not_git_repo", rawDirectory, "Directory has no git root commit; caller may use directory fallback", asError(error));
+  }
+  return new ProjectIdentityError("unknown", rawDirectory, "git rev-list failed while resolving project identity", asError(error));
 }
-function openEvidenceStore(path) {
-  const store = new Database(path, { readonly: true, fileMustExist: true });
+function resolveProjectIdentityStrict(directory, allowHomeProject = homeProjectPermission) {
+  assertProjectAllowed(directory, allowHomeProject);
+  const canonical = path3.resolve(directory);
+  const cached = identityCache.get(canonical);
+  if (cached !== undefined) {
+    return cached;
+  }
+  assertDirectoryUsable(canonical, directory);
+  if (!hasGitDir(canonical)) {
+    throw new ProjectIdentityError("not_git_repo", directory, "Directory has no git metadata; caller may use directory fallback");
+  }
+  let output;
   try {
-    const hasV1Messages = tableExists2(store, "message");
-    const hasV1Session = tableExists2(store, "session");
-    const hasV2 = tableExists2(store, "session_v2");
-    const hasV2Messages = hasV2 && tableExists2(store, "session_message");
-    if (!hasV1Messages && !hasV1Session && !hasV2) {
-      store.close();
-      return null;
-    }
-    const v1Message = hasV1Messages ? store.prepare("SELECT MAX(time_updated) AS newest FROM message WHERE session_id = ?") : null;
-    const v1Session = hasV1Session ? store.prepare("SELECT time_updated AS newest FROM session WHERE id = ?") : null;
-    const v2Message = hasV2Messages ? store.prepare("SELECT MAX(time_updated) AS newest FROM session_message WHERE session_id = ?") : null;
-    const v2Session = hasV2 ? store.prepare("SELECT time_updated AS newest FROM session_v2 WHERE id = ?") : null;
-    const newest = (statements, sessionId) => {
-      let best = null;
-      for (const statement of statements) {
-        if (!statement)
-          continue;
-        const row = statement.get(sessionId);
-        const value = row?.newest;
-        if (typeof value !== "number")
-          continue;
-        if (best === null || value > best)
-          best = value;
-      }
-      return best;
-    };
-    return {
-      newestV1Activity: (sessionId) => newest([v1Message, v1Session], sessionId),
-      newestV2Activity: (sessionId) => newest([v2Message, v2Session], sessionId),
-      close: () => store.close()
-    };
+    output = execFileSyncForIdentity("git", ["rev-list", "--max-parents=0", "HEAD"], {
+      cwd: canonical,
+      encoding: "utf8",
+      env: { ...process.env, LC_ALL: "C", LANG: "C" },
+      stdio: ["ignore", "pipe", "pipe"],
+      timeout: GIT_TIMEOUT_MS,
+      windowsHide: true
+    });
   } catch (error) {
-    store.close();
-    throw error;
+    const classified = classifyGitError(error, directory);
+    if (classified.errorClass === "not_git_repo" && hasUnbornHead(canonical)) {
+      throw new ProjectIdentityError("no_commits", directory, "Git repository has no commits yet");
+    }
+    throw classified;
+  }
+  const rootCommit = output.split(`
+`).map((line) => line.trim().slice(0, 64)).filter((line) => /^[0-9a-f]{7,64}$/.test(line)).sort()[0];
+  if (!rootCommit) {
+    throw new ProjectIdentityError("unknown", directory, "git rev-list returned no valid root commit hash");
   }
+  const identity = `git:${rootCommit}`;
+  identityCache.set(canonical, identity);
+  lastKnownGitIdentityCache.set(canonical, identity);
+  rememberGitIdentity(canonical, identity);
+  const root = gitRootDirectory(canonical);
+  if (root && root !== canonical)
+    rememberGitIdentity(root, identity);
+  transientFailureCooldown.delete(canonical);
+  dubiousOwnershipFallbackDirectories.delete(canonical);
+  transientGitIdentityReuseLoggedDirectories.delete(canonical);
+  return identity;
 }
-function resolveHarnessFromEvidence(evidence, sessionId) {
-  const v1 = evidence.newestV1Activity(sessionId);
-  const v2 = evidence.newestV2Activity(sessionId);
-  if (v1 === null && v2 === null)
-    return null;
-  if (v2 !== null && (v1 === null || v2 > v1))
-    return "opencode2";
-  if (v1 !== null && (v2 === null || v1 > v2))
-    return "opencode";
-  return null;
+function shouldUseDirectoryFallback(error) {
+  return error.errorClass !== "home_project_disabled";
 }
-function prepareTwinResolver(db, table, keyColumns, incomingIsNewer) {
-  const joinOn = keyColumns.map((column) => `incoming.${column} = existing.${column}`).join(" AND ");
-  const dropIncoming = db.prepare(`DELETE FROM ${table} WHERE rowid IN (
-             SELECT incoming.rowid FROM ${table} AS incoming
-             JOIN ${table} AS existing ON ${joinOn} AND existing.harness = ?
-             WHERE incoming.session_id = ? AND incoming.harness = ?
-               AND NOT (${incomingIsNewer})
-         )`);
-  const dropExisting = db.prepare(`DELETE FROM ${table} WHERE rowid IN (
-             SELECT existing.rowid FROM ${table} AS existing
-             JOIN ${table} AS incoming ON ${joinOn} AND incoming.harness = ?
-             WHERE existing.session_id = ? AND existing.harness = ?
-               AND (${incomingIsNewer})
-         )`);
-  return {
-    run(sessionId, target, source) {
-      dropIncoming.run(target, sessionId, source);
-      dropExisting.run(source, sessionId, target);
+function getActiveCooldown(canonical) {
+  const until = transientFailureCooldown.get(canonical);
+  if (until === undefined)
+    return;
+  if (nowMs() < until)
+    return until;
+  transientFailureCooldown.delete(canonical);
+  return;
+}
+function lastKnownGitIdentity(canonical) {
+  return lastKnownGitIdentityCache.get(canonical) ?? identityCache.get(canonical) ?? readRememberedGitIdentity(canonical);
+}
+function nearestLastKnownGitIdentity(canonical) {
+  const visited = new Set;
+  const walk = (start) => {
+    let current = start;
+    while (!visited.has(current)) {
+      visited.add(current);
+      const cached = lastKnownGitIdentity(current);
+      if (cached !== undefined)
+        return { identity: cached, source: current };
+      if (existsSync(path3.join(current, ".git")))
+        break;
+      const parent = path3.dirname(current);
+      if (parent === current)
+        break;
+      current = parent;
     }
+    return;
   };
+  const exactOrAncestor = walk(canonical);
+  if (exactOrAncestor)
+    return exactOrAncestor;
+  try {
+    const realCanonical = realpathSync2.native(canonical);
+    if (realCanonical !== canonical)
+      return walk(realCanonical);
+  } catch {}
+  return;
 }
-function writeUnresolvedState(db, reason, resolution, sessionIds) {
-  if (!tableExists2(db, "schema_migrations_meta"))
+function reuseLastKnownGitIdentity(canonical) {
+  const cached = nearestLastKnownGitIdentity(canonical);
+  if (cached === undefined)
     return;
-  const value = {
-    reason,
-    lookedFor: getOpenCodeDbProbeDescriptions(resolution).join(", "),
-    sessionIds: [...sessionIds],
-    recordedAt: Date.now()
-  };
-  db.prepare(`INSERT INTO schema_migrations_meta (key, value) VALUES (?, ?)
-         ON CONFLICT(key) DO UPDATE SET value = excluded.value`).run(OPENCODE2_RELABEL_STATE_KEY, JSON.stringify(value));
+  if (!transientGitIdentityReuseLoggedDirectories.has(canonical)) {
+    transientGitIdentityReuseLoggedDirectories.add(canonical);
+    const sourceNote = cached.source === canonical ? "" : ` from ancestor ${cached.source}`;
+    log(`[magic-context] git identity resolution is temporarily unavailable for ${canonical}; reusing the last successful project identity${sourceNote} to avoid splitting project-scoped memory`);
+  }
+  return cached.identity;
 }
-function clearUnresolvedState(db) {
-  if (!tableExists2(db, "schema_migrations_meta"))
+function formatDubiousOwnershipWarning(canonical) {
+  return `Magic Context: git refused to read ${canonical} (dubious ownership — the repo is owned by a different user). Memory features are paused unless a previous git identity is available. Fix: git config --global --add safe.directory ${canonical}`;
+}
+function recordDubiousOwnershipFallback(canonical) {
+  dubiousOwnershipFallbackDirectories.add(canonical);
+  if (dubiousOwnershipLoggedDirectories.has(canonical))
     return;
-  db.prepare("DELETE FROM schema_migrations_meta WHERE key = ?").run(OPENCODE2_RELABEL_STATE_KEY);
+  dubiousOwnershipLoggedDirectories.add(canonical);
+  log(`[magic-context] ${formatDubiousOwnershipWarning(canonical)}`);
 }
-function repairOpenCode2HarnessLabels(db, options) {
-  const shapes = listSessionScopedHarnessTables(db, options.tables);
-  const candidateSessionIds = collectCandidateSessions(db, shapes);
-  if (candidateSessionIds.length === 0) {
-    clearUnresolvedState(db);
-    return {
-      status: "no_candidates",
-      storePath: null,
-      candidateSessionIds,
-      relabelledSessions: []
-    };
+function takeDubiousOwnershipProjectIdentityWarning(directory) {
+  const canonical = path3.resolve(directory);
+  if (!dubiousOwnershipFallbackDirectories.has(canonical))
+    return null;
+  if (dubiousOwnershipWarnedDirectories.has(canonical))
+    return null;
+  dubiousOwnershipWarnedDirectories.add(canonical);
+  return formatDubiousOwnershipWarning(canonical);
+}
+function canonicalUserHomeDirectory() {
+  const homeDirectory = userHomeDirectoryForIdentity();
+  try {
+    return realpathSync2.native(homeDirectory);
+  } catch {
+    return homeDirectory;
   }
-  const resolution = resolveOpenCodeDbPath("v1", { env: options.env });
-  let evidence = null;
-  let reason = null;
-  if (!openCodeDbPathExists(resolution)) {
-    reason = "store_not_found";
-  } else {
-    try {
-      evidence = openEvidenceStore(resolution.path);
-      if (!evidence)
-        reason = "store_schema_unknown";
-    } catch (error) {
-      reason = "store_unreadable";
-      log(`[migration] OpenCode session database at ${resolution.path} could not be read: ${error instanceof Error ? error.message : String(error)}`);
+}
+function isUserHomeDirectory(directory) {
+  if (projectDirectoryKey(directory) === projectDirectoryKey(userHomeDirectoryForIdentity()))
+    return true;
+  try {
+    return projectDirectoryKey(realpathSync2.native(path3.resolve(directory))) === projectDirectoryKey(canonicalUserHomeDirectory());
+  } catch {
+    return false;
+  }
+}
+function assertProjectAllowed(directory, allowHomeProject) {
+  const canonical = path3.resolve(directory);
+  if (!allowHomeProject && (isUserHomeDirectory(directory) || isUserHomeDirectory(gitRootDirectory(canonical) ?? canonical))) {
+    throw new ProjectIdentityError("home_project_disabled", directory, "Home project memory is disabled; set allow_home_project to opt in");
+  }
+}
+function resolveProjectIdentity(directory, allowHomeProject = homeProjectPermission) {
+  assertProjectAllowed(directory, allowHomeProject);
+  const canonical = path3.resolve(directory);
+  const cachedFallback = directoryFallbackCache.get(canonical);
+  if (cachedFallback !== undefined) {
+    if (!hasGitDir(canonical)) {
+      return cachedFallback;
     }
+    directoryFallbackCache.delete(canonical);
   }
-  if (!evidence || reason !== null) {
-    evidence?.close();
-    writeUnresolvedState(db, reason ?? "store_not_found", resolution, candidateSessionIds);
-    log(`[migration] OpenCode harness labels left unverified for ${candidateSessionIds.length} session(s): ` + `no readable OpenCode session database (${reason ?? "store_not_found"}) at ${resolution.path}. ` + "Nothing was relabelled; `magic-context doctor` reports the affected sessions.");
-    return {
-      status: "unresolved",
-      reason: reason ?? "store_not_found",
-      storePath: null,
-      candidateSessionIds,
-      relabelledSessions: []
-    };
+  if (getActiveCooldown(canonical) !== undefined) {
+    if (hasGitDir(canonical)) {
+      const cachedGitIdentity = reuseLastKnownGitIdentity(canonical);
+      if (cachedGitIdentity !== undefined) {
+        return cachedGitIdentity;
+      }
+      throw new ProjectIdentityError("git_identity_unavailable", directory, "Git identity unavailable; memory features paused until the retry cooldown expires");
+    }
+    return rememberedIdentityOrDirectoryFallback(canonical);
   }
-  const relabelledSessions = [];
   try {
-    const updates = shapes.filter((shape) => shape.hasSessionId).map((shape) => db.prepare(`UPDATE ${shape.table} SET harness = ? WHERE session_id = ? AND harness = ?`));
-    const presentTables = new Set(shapes.map((shape) => shape.table));
-    const twinResolvers = V87_HARNESS_TWIN_RULES.filter((rule) => presentTables.has(rule.table)).map((rule) => prepareTwinResolver(db, rule.table, rule.keyColumns, rule.incomingIsNewer));
-    for (const sessionId of candidateSessionIds) {
-      const target = resolveHarnessFromEvidence(evidence, sessionId);
-      if (target === null)
-        continue;
-      const source = target === "opencode" ? "opencode2" : "opencode";
-      for (const resolver of twinResolvers)
-        resolver.run(sessionId, target, source);
-      let moved = 0;
-      for (const update of updates) {
-        moved += Number(update.run(target, sessionId, source).changes ?? 0);
+    return resolveProjectIdentityStrict(directory, allowHomeProject);
+  } catch (error) {
+    if (error instanceof ProjectIdentityError && shouldUseDirectoryFallback(error)) {
+      if (error.errorClass === "no_commits")
+        return directoryFallback(canonical);
+      if (!hasGitDir(canonical)) {
+        if (error.errorClass === "permission_denied")
+          throw error;
+        const resolved = rememberedIdentityOrDirectoryFallback(canonical);
+        directoryFallbackCache.set(canonical, resolved);
+        transientFailureCooldown.delete(canonical);
+        return resolved;
       }
-      if (moved > 0)
-        relabelledSessions.push({ sessionId, harness: target });
+      transientFailureCooldown.set(canonical, nowMs() + TRANSIENT_FAILURE_COOLDOWN_MS);
+      const cachedGitIdentity = reuseLastKnownGitIdentity(canonical);
+      if (error.errorClass === "dubious_ownership")
+        recordDubiousOwnershipFallback(canonical);
+      if (cachedGitIdentity !== undefined) {
+        return cachedGitIdentity;
+      }
+      throw error;
     }
-  } finally {
-    evidence.close();
+    throw error;
   }
-  clearUnresolvedState(db);
-  if (relabelledSessions.length > 0) {
-    const toOpenCode2 = relabelledSessions.filter((entry) => entry.harness === "opencode2").length;
-    log(`[migration] OpenCode harness labels repaired from ${resolution.path}: ` + `${toOpenCode2} session(s) restored to opencode2, ` + `${relabelledSessions.length - toOpenCode2} session(s) set to opencode.`);
+}
+function resolveProjectIdentityOrFallback(directory, allowHomeProject = homeProjectPermission) {
+  try {
+    return resolveProjectIdentity(directory, allowHomeProject);
+  } catch (error) {
+    const canonical = path3.resolve(directory);
+    if (hasGitDir(canonical) || error instanceof ProjectIdentityError && error.errorClass === "home_project_disabled")
+      throw error;
+    const fallback = rememberedIdentityOrDirectoryFallback(canonical);
+    const message = error instanceof Error ? error.message : String(error);
+    log(`[magic-context] project identity resolution failed for ${canonical}; using directory fallback ${fallback}: ${message}`);
+    return fallback;
   }
-  return {
-    status: "resolved",
-    storePath: resolution.path,
-    candidateSessionIds,
-    relabelledSessions
-  };
 }
-
-// src/features/magic-context/storage-compartment-history-version.ts
-function definitions(db) {
-  const hasPrivilegeTable = Boolean(db.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='context_privilege_state'").get());
-  const externalUpdate = hasPrivilegeTable ? "CASE WHEN COALESCE((SELECT enabled FROM context_privilege_state WHERE id=1),0)=0 THEN 1 ELSE 0 END" : "1";
-  return [
-    {
-      type: "table",
-      name: "compartment_history_versions",
-      sql: `CREATE TABLE compartment_history_versions (
-            session_id TEXT PRIMARY KEY NOT NULL,
-            generation TEXT NOT NULL DEFAULT (lower(hex(randomblob(16)))),
-            version INTEGER NOT NULL DEFAULT 0 CHECK (version >= 0),
-            rewrite_version INTEGER NOT NULL DEFAULT 0 CHECK (rewrite_version >= 0),
-            seeded INTEGER NOT NULL DEFAULT 0 CHECK (seeded IN (0, 1))
-        )`
-    },
-    {
-      type: "trigger",
-      name: "compartment_history_ai",
-      sql: `CREATE TRIGGER compartment_history_ai AFTER INSERT ON compartments BEGIN
-            INSERT INTO compartment_history_versions(session_id, version) VALUES (NEW.session_id, 1)
-            ON CONFLICT(session_id) DO UPDATE SET version = version + 1;
-        END`
-    },
-    {
-      type: "trigger",
-      name: "compartment_history_ad",
-      sql: `CREATE TRIGGER compartment_history_ad AFTER DELETE ON compartments BEGIN
-            INSERT INTO compartment_history_versions(session_id, version) VALUES (OLD.session_id, 1)
-            ON CONFLICT(session_id) DO UPDATE SET version = version + 1;
-        END`
-    },
-    {
-      type: "trigger",
-      name: "compartment_history_au",
-      sql: `CREATE TRIGGER compartment_history_au AFTER UPDATE ON compartments BEGIN
-            INSERT INTO compartment_history_versions(session_id, version, rewrite_version) VALUES (OLD.session_id, 1, ${externalUpdate})
-            ON CONFLICT(session_id) DO UPDATE SET version = version + 1, rewrite_version = rewrite_version + ${externalUpdate};
-            INSERT INTO compartment_history_versions(session_id, version, rewrite_version)
-                SELECT NEW.session_id, 1, ${externalUpdate} WHERE NEW.session_id != OLD.session_id
-            ON CONFLICT(session_id) DO UPDATE SET version = version + 1, rewrite_version = rewrite_version + ${externalUpdate};
-        END`
+function hasGitDir(canonical) {
+  if (hasGitDirInAncestorChain(canonical)) {
+    return true;
+  }
+  try {
+    const realCanonical = realpathSync2.native(canonical);
+    return realCanonical !== canonical && hasGitDirInAncestorChain(realCanonical);
+  } catch {
+    return false;
+  }
+}
+function gitRootInAncestorChain(startDirectory) {
+  let current = startDirectory;
+  while (true) {
+    if (existsSync(path3.join(current, ".git"))) {
+      try {
+        return realpathSync2.native(current);
+      } catch {
+        return path3.resolve(current);
+      }
     }
-  ];
+    const parent = path3.dirname(current);
+    if (parent === current) {
+      return null;
+    }
+    current = parent;
+  }
 }
-function installedDefinitions(db) {
-  const rows = db.prepare(`SELECT type, name, sql FROM sqlite_master
-        WHERE name IN ('compartment_history_versions', 'compartment_history_ai', 'compartment_history_ad', 'compartment_history_au')`).all();
-  return new Map(rows.map((row) => [`${row.type}:${row.name}`, row.sql]));
+function hasGitDirInAncestorChain(startDirectory) {
+  return gitRootInAncestorChain(startDirectory) !== null;
 }
-function matches(expected, installed) {
-  return expected.every((definition) => installed.get(`${definition.type}:${definition.name}`) === definition.sql);
+function gitRootDirectory(canonical) {
+  const direct = gitRootInAncestorChain(canonical);
+  if (direct)
+    return direct;
+  try {
+    const realCanonical = realpathSync2.native(canonical);
+    return realCanonical === canonical ? null : gitRootInAncestorChain(realCanonical);
+  } catch {
+    return null;
+  }
 }
-function installCompartmentHistoryVersions(db) {
-  if (!db.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='compartments'").get())
-    return;
-  if (matches(definitions(db), installedDefinitions(db)))
-    return;
-  db.transaction(() => {
-    const expected = definitions(db);
-    const installed = installedDefinitions(db);
-    if (matches(expected, installed))
-      return;
-    const table = expected[0];
-    const existingTable = installed.get(`table:${table.name}`);
-    if (existingTable !== undefined && existingTable !== table.sql) {
-      throw new Error("compartment_history_versions schema differs from v93; refusing to replace revision data");
+function directoryHasGitMetadata(directory) {
+  return gitRootDirectory(path3.resolve(directory)) !== null;
+}
+function describeUnresolvedProjectIdentity(directory) {
+  const resolvedDirectory = path3.resolve(directory);
+  const canonicalHome = canonicalUserHomeDirectory();
+  const canonicalDirectory = (() => {
+    try {
+      return realpathSync2.native(resolvedDirectory);
+    } catch {
+      return resolvedDirectory;
     }
-    if (existingTable === undefined)
-      db.exec(table.sql);
-    db.exec(`INSERT OR IGNORE INTO compartment_history_versions(session_id, seeded)
-            SELECT DISTINCT session_id, 1 FROM compartments`);
-    for (const trigger of expected.slice(1)) {
-      if (installed.get(`trigger:${trigger.name}`) === trigger.sql)
-        continue;
-      db.exec(`DROP TRIGGER IF EXISTS ${trigger.name}`);
-      db.exec(trigger.sql);
+  })();
+  if (isUserHomeDirectory(directory) || gitRootDirectory(canonicalDirectory) === canonicalHome) {
+    return `this session runs in your home directory (${canonicalHome}), which Magic Context does not treat as a project. ` + "Start OpenCode inside a project folder, or set `allow_home_project: true` in the user-level " + "magic-context.jsonc (~/.config/cortexkit/) to give home sessions their own memory.";
+  }
+  if (hasGitDir(resolvedDirectory))
+    return `git identity resolution for ${resolvedDirectory} is temporarily unavailable. Memory features are paused; retry after git access recovers.`;
+  return `the session directory ${resolvedDirectory} could not be read as a project.`;
+}
+function isUsableProjectIdentity(identity) {
+  return typeof identity === "string" && identity.trim().length > 0;
+}
+function resolveProjectIdentityForSession(directory, allowHomeProject = homeProjectPermission) {
+  const resolvedDirectory = path3.resolve(directory);
+  const cacheKey = `${allowHomeProject ? "1" : "0"}\x00${resolvedDirectory}`;
+  const cached = sessionIdentityCache.get(cacheKey);
+  if (cached && (cached.revalidateAt === null || nowMs() < cached.revalidateAt) && !(cached.identity?.startsWith("dir:") && hasGitDir(resolvedDirectory))) {
+    return cached.identity;
+  }
+  sessionIdentityCache.delete(cacheKey);
+  filesystemProbeObserverForTests?.();
+  const canonicalDirectory = (() => {
+    try {
+      filesystemProbeObserverForTests?.();
+      return realpathSync2.native(resolvedDirectory);
+    } catch {
+      return resolvedDirectory;
+    }
+  })();
+  filesystemProbeObserverForTests?.();
+  const homeRoot = gitRootDirectory(canonicalDirectory);
+  const inheritsHomeRepository = homeRoot !== null && isUserHomeDirectory(homeRoot);
+  let identity;
+  if (!allowHomeProject && (isUserHomeDirectory(directory) || inheritsHomeRepository)) {
+    identity = undefined;
+  } else {
+    try {
+      identity = resolveProjectIdentityOrFallback(isUserHomeDirectory(directory) ? canonicalUserHomeDirectory() : directory, allowHomeProject);
+    } catch (error) {
+      if (!(error instanceof ProjectIdentityError))
+        throw error;
+      const reason = error.errorClass === "git_identity_unavailable" ? pausedIdentityReasons.get(resolvedDirectory) ?? error.errorClass : error.errorClass;
+      pausedIdentityReasons.set(resolvedDirectory, reason);
+      const logKey = `${resolvedDirectory}\x00${reason}`;
+      if (!pausedIdentityLogged.has(logKey)) {
+        pausedIdentityLogged.add(logKey);
+        log(`[magic-context] memory features paused for ${resolvedDirectory}: ${reason}`);
+      }
+      identity = undefined;
     }
-  }).immediate();
-}
-
-// src/features/magic-context/storage-schema-helpers.ts
-function ensureColumn(db, table, column, definition) {
-  if (!/^[a-z][a-z0-9_]*$/.test(table) || !/^[a-z][a-z0-9_]*$/.test(column) || !/^[A-Z0-9_"'(),[\]\s]+$/i.test(definition)) {
-    throw new Error(`Unsafe schema identifier: ${table}.${column} ${definition}`);
   }
-  const rows = db.prepare(`PRAGMA table_info(${table})`).all();
-  if (rows.some((row) => row.name === column)) {
-    return;
+  if (identity !== undefined)
+    pausedIdentityReasons.delete(resolvedDirectory);
+  sessionIdentityCache.set(cacheKey, {
+    identity,
+    revalidateAt: identity?.startsWith("git:") === true ? null : nowMs() + TRANSIENT_FAILURE_COOLDOWN_MS
+  });
+  return identity;
+}
+function normalizeStoredProjectPath(rawOrStored) {
+  if (rawOrStored.startsWith("git:") || rawOrStored.startsWith("dir:")) {
+    return rawOrStored;
   }
   try {
-    db.exec(`ALTER TABLE ${table} ADD COLUMN ${column} ${definition}`);
-  } catch (err) {
-    const recheck = db.prepare(`PRAGMA table_info(${table})`).all();
-    if (recheck.some((row) => row.name === column)) {
-      return;
-    }
-    throw err;
-  }
-}
-function healAllNullColumns(db) {
-  const existingColumns = getSessionMetaColumns(db);
-  const fallbacks = [
-    ["cache_ttl", ""],
-    ["last_nudge_band", ""],
-    ["last_nudge_level", ""],
-    ["channel2_nudge_claim_token", ""],
-    ["last_transform_error", ""],
-    ["nudge_anchor_message_id", ""],
-    ["nudge_anchor_text", ""],
-    ["sticky_turn_reminder_text", ""],
-    ["sticky_turn_reminder_message_id", ""],
-    ["note_nudge_trigger_message_id", ""],
-    ["note_nudge_sticky_text", ""],
-    ["note_nudge_sticky_message_id", ""],
-    ["last_todo_state", ""],
-    ["todo_synthetic_call_id", ""],
-    ["todo_synthetic_anchor_message_id", ""],
-    ["todo_synthetic_state_json", ""],
-    ["system_prompt_hash", ""],
-    ["stripped_placeholder_ids", ""],
-    ["stale_reduce_stripped_ids", ""],
-    ["processed_image_stripped_ids", ""],
-    ["merged_reasoning_stripped_ids", ""],
-    ["thinking_binding_recovery_target", ""],
-    ["trailing_blank_decisions", ""],
-    ["memory_block_cache", ""],
-    ["memory_block_ids", ""],
-    ["compaction_marker_state", ""],
-    ["key_files", ""],
-    ["times_execute_threshold_reached", 0],
-    ["compartment_in_progress", 0],
-    ["historian_failure_count", 0],
-    ["cleared_reasoning_through_tag", 0],
-    ["memory_block_count", 0],
-    ["system_prompt_tokens", 0],
-    ["conversation_tokens", 0],
-    ["tool_call_tokens", 0],
-    ["note_nudge_trigger_pending", 0],
-    ["observed_safe_input_tokens", 0],
-    ["cache_alert_sent", 0],
-    ["new_work_tokens", 0],
-    ["total_input_tokens", 0],
-    ["last_emergency_input_sample", 0],
-    ["channel2_nudge_claimed_at", 0],
-    ["last_usage_context_limit", 0],
-    ["prior_boundary_ordinal", 1],
-    ["protected_tail_policy_version", 0],
-    ["protected_tail_drain_window_started_at", 0],
-    ["protected_tail_drain_tokens", 0],
-    ["recovery_no_eligible_head_count", 0],
-    ["force_emergency_bypass_window_start", 0],
-    ["force_emergency_bypass_used", 0],
-    ["emergency_drain_active", 0],
-    ["historian_drain_failure_at", 0]
-  ];
-  const presentFallbacks = fallbacks.filter(([column]) => existingColumns.has(column));
-  if (presentFallbacks.length > 0) {
-    const assignments = presentFallbacks.map(([column]) => `${column} = COALESCE(${column}, ?)`).join(", ");
-    const nullPredicate = presentFallbacks.map(([column]) => `${column} IS NULL`).join(" OR ");
-    db.prepare(`UPDATE session_meta SET ${assignments} WHERE ${nullPredicate}`).run(...presentFallbacks.map(([, fallback]) => fallback));
+    return resolveProjectIdentity(rawOrStored);
+  } catch {
+    return rawOrStored;
   }
-  healMissingMemoryBlockIds(db, existingColumns);
 }
-function getSessionMetaColumns(db) {
-  const rows = db.prepare("PRAGMA table_info(session_meta)").all();
-  return new Set(rows.flatMap((row) => typeof row.name === "string" ? [row.name] : []));
-}
-function healMissingMemoryBlockIds(db, columns) {
-  if (!columns.has("memory_block_cache") || !columns.has("memory_block_ids") || !columns.has("memory_block_count")) {
-    return;
-  }
-  db.prepare("UPDATE session_meta SET memory_block_cache = '' WHERE memory_block_cache != '' AND (memory_block_ids IS NULL OR memory_block_ids = '') AND memory_block_count > 0").run();
+function storedPathBelongsToIdentity(storedProjectPath, projectIdentity) {
+  return storedProjectPath === projectIdentity || normalizeStoredProjectPath(storedProjectPath) === projectIdentity;
 }
 
-// src/features/magic-context/workspaces.ts
-import { createHash as createHash4 } from "node:crypto";
-
-// src/features/magic-context/memory/project-identity.ts
-import { execFileSync } from "node:child_process";
-import { createHash as createHash3 } from "node:crypto";
-import { existsSync, realpathSync as realpathSync2, statSync } from "node:fs";
-import { homedir } from "node:os";
-import path3 from "node:path";
-
-// src/features/magic-context/memory/project-identity-cache.ts
-import { createHash as createHash2, randomUUID } from "node:crypto";
-import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-import path2 from "node:path";
+// src/features/magic-context/migrations.ts
+import { isMainThread } from "node:worker_threads";
 
-// src/shared/project-directory-key.ts
-import { realpathSync } from "node:fs";
-import path from "node:path";
-function projectDirectoryKey(directory) {
-  const slashed = directory.replaceAll("\\", "/").replace(/^\/\/\?\/UNC\//i, "//").replace(/^\/\/\?\//, "");
-  if (/^[a-z]:\//i.test(slashed) || slashed.startsWith("//")) {
-    return path.win32.normalize(slashed).replaceAll("\\", "/").replace(/\/$/, "").toLowerCase();
-  }
-  return path.resolve(directory);
-}
-var realpathForCanonicalDirectory = (directory) => realpathSync.native(directory);
-function canonicalProjectDirectory(directory) {
-  let resolved = directory;
-  try {
-    resolved = realpathForCanonicalDirectory(directory);
-  } catch {}
-  return projectDirectoryKey(resolved);
+// src/features/magic-context/memory/constants.ts
+var V2_MEMORY_CATEGORIES = [
+  "PROJECT_RULES",
+  "ARCHITECTURE",
+  "CONSTRAINTS",
+  "CONFIG_VALUES",
+  "NAMING"
+];
+var PROMOTABLE_CATEGORIES = [
+  ...V2_MEMORY_CATEGORIES,
+  "ARCHITECTURE_DECISIONS",
+  "CONFIG_DEFAULTS",
+  "USER_PREFERENCES",
+  "USER_DIRECTIVES",
+  "ENVIRONMENT",
+  "WORKFLOW_RULES",
+  "KNOWN_ISSUES"
+];
+var CATEGORY_PRIORITY = [
+  ...V2_MEMORY_CATEGORIES,
+  "USER_DIRECTIVES",
+  "USER_PREFERENCES",
+  "CONFIG_DEFAULTS",
+  "ARCHITECTURE_DECISIONS",
+  "ENVIRONMENT",
+  "WORKFLOW_RULES",
+  "KNOWN_ISSUES"
+];
+var MEMORY_CATEGORY_ORDER_UNKNOWN = 99;
+var MEMORY_CATEGORY_ORDER_PRIORITY = CATEGORY_PRIORITY.reduce((acc, category, index) => {
+  acc[category] = index;
+  return acc;
+}, {});
+var MEMORY_CATEGORY_ORDER_SQL = `CASE category ${CATEGORY_PRIORITY.map((category, index) => `WHEN '${category}' THEN ${index}`).join(" ")} ELSE ${MEMORY_CATEGORY_ORDER_UNKNOWN} END`;
+function getMemoryCategoryOrder(category) {
+  return MEMORY_CATEGORY_ORDER_PRIORITY[category] ?? MEMORY_CATEGORY_ORDER_UNKNOWN;
 }
+var CATEGORY_DEFAULT_TTL = {
+  WORKFLOW_RULES: 90 * 24 * 60 * 60 * 1000,
+  KNOWN_ISSUES: 30 * 24 * 60 * 60 * 1000
+};
 
-// src/features/magic-context/memory/project-identity-cache.ts
-function cachePath(directory, storageDir = getMagicContextStorageDir()) {
-  const hash = createHash2("sha256").update(projectDirectoryKey(directory)).digest("hex");
-  return path2.join(storageDir, "project-identities", `${hash}.json`);
-}
-function rememberGitIdentity(directory, identity) {
-  try {
-    const destination = cachePath(directory);
-    mkdirSync(path2.dirname(destination), { recursive: true });
-    const temporary = `${destination}.${randomUUID()}.tmp`;
-    writeFileSync(temporary, JSON.stringify({ directory: projectDirectoryKey(directory), identity }), { mode: 384 });
-    renameSync(temporary, destination);
-  } catch {}
-}
-function readRememberedGitIdentity(directory, storageDir) {
-  try {
-    const record = JSON.parse(readFileSync(cachePath(directory, storageDir), "utf8"));
-    if (record.directory === projectDirectoryKey(directory) && /^git:[0-9a-f]{7,64}$/.test(record.identity))
-      return record.identity;
-  } catch {}
-  return;
+// src/shared/xml-unescape.ts
+var XML_ENTITY_REGEX = /&(amp|apos|quot|lt|gt);/g;
+var XML_ENTITIES = {
+  amp: "&",
+  apos: "'",
+  quot: '"',
+  lt: "<",
+  gt: ">"
+};
+function unescapeXml(s) {
+  return s.replace(XML_ENTITY_REGEX, (entity, name) => XML_ENTITIES[name] ?? entity);
 }
 
-// src/features/magic-context/memory/project-identity.ts
-var GIT_TIMEOUT_MS = 5000;
-var TRANSIENT_FAILURE_COOLDOWN_MS = 5 * 60 * 1000;
-var identityCache = new Map;
-var linkedGitWorktreeCache = new Map;
-var lastKnownGitIdentityCache = new Map;
-var directoryFallbackCache = new Map;
-var transientFailureCooldown = new Map;
-var dubiousOwnershipFallbackDirectories = new Set;
-var dubiousOwnershipLoggedDirectories = new Set;
-var dubiousOwnershipWarnedDirectories = new Set;
-var transientGitIdentityReuseLoggedDirectories = new Set;
-var sessionIdentityCache = new Map;
-var homeProjectPermission = false;
-var homeProjectSkipLogged = false;
-var pausedIdentityReasons = new Map;
-var pausedIdentityLogged = new Set;
-function setHomeProjectPermission(allowed) {
-  homeProjectPermission = allowed;
+// src/hooks/magic-context/compartment-parser.ts
+var COMPARTMENT_OPEN_REGEX = /<compartment\s+((?:[^>"]|"[^"\n]*")*?)\s*>/g;
+var COMPARTMENT_CLOSE_TAG = "</compartment>";
+var COMPARTMENT_CLOSE_FOLLOWER_REGEX = /^\s*(?:$|<(?:compartment\s|\/compartments\s*>|\/output\s*>|(?:facts|events|meta|user_observations|primer_candidates|unprocessed_from)\s*>))/;
+var ATTR_START_REGEX = /\bstart="(\d+)"/;
+var ATTR_END_REGEX = /\bend="(\d+)"/;
+var ATTR_TITLE_REGEX = /\btitle="([^"]*)"/;
+var ATTR_EPISODE_REGEX = /\bepisode_type="([^"]*)"/;
+var ATTR_IMPORTANCE_REGEX = /\bimportance="(\d+)"/;
+var TIER_OPEN_REGEX = /<p(\d)\s*(\/?)>/g;
+var TIER_CLOSE_REGEX = /<\/p(\d)\s*>/g;
+var TIER_CLOSE_FOLLOWER_REGEX = /^\s*(?:$|<\/?p\d\s*\/?>)/;
+var TIER_CLOSE_ANY_REGEX = /<\/p\d/;
+var TIER_OPEN_ANY_REGEX = /<p\d/;
+var CATEGORY_BLOCK_REGEX = /<([A-Za-z_][A-Za-z0-9_-]*)>(.*?)<\/\1>/gs;
+var HISTORIAN_CATEGORIES = new Set(V2_MEMORY_CATEGORIES);
+var FACT_ITEM_REGEX = /^\s*\*\s*(.+)$/gm;
+var UNPROCESSED_REGEX = /<unprocessed_from>(\d+)<\/unprocessed_from>/;
+var USER_OBSERVATIONS_REGEX = /<user_observations>(.*?)<\/user_observations>/s;
+var USER_OBS_ITEM_REGEX = /^\s*\*\s*(.+)$/gm;
+var PRIMER_CANDIDATES_REGEX = /<primer_candidates>(.*?)<\/primer_candidates>/s;
+var PRIMER_ELEMENT_REGEX = /<primer\s+at_compartment="(\d+)"\s*>(.*?)<\/primer>/gs;
+var PRIMER_ITEM_REGEX = /^\s*(?:\*|-|\d+\.)\s*(.+)$/gm;
+var FACTS_BLOCK_REGEX = /<facts>(.*?)<\/facts>/s;
+var EVENTS_BLOCK_REGEX = /<events>(.*?)<\/events>/s;
+var EVENT_ELEMENT_REGEX = /<([a-z_]+)\s+at_compartment="(\d+)"\s*>(.*?)<\/\1>/gs;
+var EVENT_FIELD_REGEX = /<([a-z_]+)\s*>(.*?)<\/\1>/gs;
+function searchFrom(s, regex, from) {
+  const at = s.slice(from).search(regex);
+  return at === -1 ? -1 : from + at;
 }
-function shouldSkipHomeProjectMemory(directory) {
-  try {
-    assertProjectAllowed(directory, homeProjectPermission);
-    return false;
-  } catch (error) {
-    if (!(error instanceof ProjectIdentityError) || error.errorClass !== "home_project_disabled")
-      throw error;
-    if (!homeProjectSkipLogged) {
-      homeProjectSkipLogged = true;
-      log("[magic-context] home project memory disabled; skipping memory features");
+function hasTierOpenerFrom(inner, digit, from) {
+  return new RegExp(`<p${digit}\\s*/?>`).test(inner.slice(from));
+}
+function findMatchingTierClose(inner, bodyStart, digit, found) {
+  const closeRegex = new RegExp(TIER_CLOSE_REGEX.source, "g");
+  closeRegex.lastIndex = bodyStart;
+  for (let close = closeRegex.exec(inner);close; close = closeRegex.exec(inner)) {
+    const end = close.index + close[0].length;
+    if (Number(close[1]) !== digit)
+      continue;
+    if (!TIER_CLOSE_FOLLOWER_REGEX.test(inner.slice(end)))
+      continue;
+    const body = inner.slice(bodyStart, close.index);
+    for (const open of body.matchAll(new RegExp(TIER_OPEN_REGEX.source, "g"))) {
+      const other = Number(open[1]);
+      const otherwiseMissing = other >= 1 && other <= 4 && other !== digit && !found.has(other) && !hasTierOpenerFrom(inner, other, end);
+      if (otherwiseMissing)
+        return;
     }
-    return true;
+    return { start: close.index, end };
   }
+  return;
 }
-var execFileSyncForIdentity = execFileSync;
-var userHomeDirectoryForIdentity = () => homedir();
-var nowMs = () => Date.now();
-var filesystemProbeObserverForTests;
-
-class ProjectIdentityError extends Error {
-  errorClass;
-  rawDirectory;
-  constructor(errorClass, rawDirectory, message, cause) {
-    super(message);
-    this.name = "ProjectIdentityError";
-    this.errorClass = errorClass;
-    this.rawDirectory = rawDirectory;
-    if (cause) {
-      this.cause = cause;
+function extractTiers(inner) {
+  const tiers = new Map;
+  const openRegex = new RegExp(TIER_OPEN_REGEX.source, "g");
+  let pos = 0;
+  for (;; ) {
+    openRegex.lastIndex = pos;
+    const open = openRegex.exec(inner);
+    if (!open)
+      break;
+    const digit = Number(open[1]);
+    const bodyStart = open.index + open[0].length;
+    let bodyEnd = bodyStart;
+    pos = bodyStart;
+    if (open[2] !== "/") {
+      const close = findMatchingTierClose(inner, bodyStart, digit, tiers);
+      if (close) {
+        bodyEnd = close.start;
+        pos = close.end;
+      } else {
+        const closeAt = searchFrom(inner, TIER_CLOSE_ANY_REGEX, bodyStart);
+        bodyEnd = closeAt === -1 ? inner.length : closeAt;
+        pos = closeAt === -1 ? inner.length : closeAt + 1;
+        const openInside = searchFrom(inner.slice(0, bodyEnd), TIER_OPEN_ANY_REGEX, bodyStart);
+        if (openInside !== -1) {
+          bodyEnd = openInside;
+          pos = openInside;
+        }
+      }
+    }
+    if (!tiers.has(digit)) {
+      tiers.set(digit, unescapeXml(inner.slice(bodyStart, bodyEnd).trim()));
     }
   }
+  return tiers;
 }
-function asError(error) {
-  return error instanceof Error ? error : undefined;
-}
-function getErrorCode(error) {
-  if (error === null || typeof error !== "object" || !("code" in error)) {
-    return;
-  }
-  const code = error.code;
-  return typeof code === "string" ? code : undefined;
+function extractTiersFromInner(inner) {
+  const tiers = extractTiers(inner);
+  return { p1: tiers.get(1), p2: tiers.get(2), p3: tiers.get(3), p4: tiers.get(4) };
 }
-function getErrorSignal(error) {
-  if (error === null || typeof error !== "object" || !("signal" in error)) {
-    return;
+function findCompartmentElements(text) {
+  const elements = [];
+  const openRegex = new RegExp(COMPARTMENT_OPEN_REGEX.source, "g");
+  let cursor = 0;
+  for (;; ) {
+    openRegex.lastIndex = cursor;
+    const open = openRegex.exec(text);
+    if (!open)
+      break;
+    const bodyStart = open.index + open[0].length;
+    const nextOpen = openRegex.exec(text);
+    const windowEnd = nextOpen ? nextOpen.index : text.length;
+    const firstClose = text.indexOf(COMPARTMENT_CLOSE_TAG, bodyStart);
+    if (firstClose === -1)
+      break;
+    let closeAt = firstClose;
+    for (let at = firstClose;at !== -1 && at < windowEnd; at = text.indexOf(COMPARTMENT_CLOSE_TAG, at + 1)) {
+      if (COMPARTMENT_CLOSE_FOLLOWER_REGEX.test(text.slice(at + COMPARTMENT_CLOSE_TAG.length))) {
+        closeAt = at;
+        break;
+      }
+    }
+    const end = closeAt + COMPARTMENT_CLOSE_TAG.length;
+    elements.push({
+      start: open.index,
+      end,
+      attrs: open[1],
+      inner: text.slice(bodyStart, closeAt)
+    });
+    cursor = end;
   }
-  const signal = error.signal;
-  return typeof signal === "string" ? signal : undefined;
+  return elements;
 }
-function getErrorKilled(error) {
-  if (error === null || typeof error !== "object" || !("killed" in error)) {
-    return false;
+function textOutsideCompartments(text, elements) {
+  let outside = "";
+  let last = 0;
+  for (const element of elements) {
+    outside += text.slice(last, element.start);
+    last = element.end;
   }
-  return error.killed === true;
+  return outside + text.slice(last);
 }
-function getErrorStderr(error) {
-  if (error === null || typeof error !== "object" || !("stderr" in error)) {
-    return "";
-  }
-  const stderr = error.stderr;
-  if (typeof stderr === "string") {
-    return stderr;
+function parseCompartmentOutput(text) {
+  const compartments = [];
+  const facts = [];
+  let droppedFactBlocks = 0;
+  let droppedFacts = 0;
+  const elements = findCompartmentElements(text);
+  for (const { attrs, inner } of elements) {
+    const startMatch = attrs.match(ATTR_START_REGEX);
+    const endMatch = attrs.match(ATTR_END_REGEX);
+    const titleMatch = attrs.match(ATTR_TITLE_REGEX);
+    if (!startMatch || !endMatch || !titleMatch)
+      continue;
+    const startMessage = parseInt(startMatch[1], 10);
+    const endMessage = parseInt(endMatch[1], 10);
+    const title = unescapeXml(titleMatch[1]);
+    if (Number.isNaN(startMessage) || Number.isNaN(endMessage) || !title)
+      continue;
+    const episodeMatch = attrs.match(ATTR_EPISODE_REGEX);
+    const importanceMatch = attrs.match(ATTR_IMPORTANCE_REGEX);
+    const episodeType = episodeMatch ? unescapeXml(episodeMatch[1]) : undefined;
+    const importance = importanceMatch ? parseInt(importanceMatch[1], 10) : undefined;
+    const { p1, p2, p3, p4 } = extractTiersFromInner(inner);
+    if (typeof p1 === "string" && p1.length > 0) {
+      compartments.push({
+        startMessage,
+        endMessage,
+        title,
+        content: p1,
+        p1,
+        p2: typeof p2 === "string" ? p2 : p1,
+        p3: typeof p3 === "string" ? p3 : typeof p2 === "string" ? p2 : p1,
+        p4: typeof p4 === "string" ? p4 : "",
+        importance,
+        episodeType
+      });
+      continue;
+    }
+    const content = unescapeXml(inner.trim());
+    if (content) {
+      compartments.push({
+        startMessage,
+        endMessage,
+        title,
+        content,
+        importance,
+        episodeType
+      });
+    }
   }
-  if (Buffer.isBuffer(stderr)) {
-    return stderr.toString("utf8");
+  const outside = textOutsideCompartments(text, elements);
+  const factsBlockMatch = outside.match(FACTS_BLOCK_REGEX);
+  const factsScope = factsBlockMatch ? factsBlockMatch[1] : outside.replace(EVENTS_BLOCK_REGEX, "").replace(/<(meta|user_observations|primer_candidates)>.*?<\/\1>/gs, "").replace(/<\/?(?:output|compartments)>/g, "");
+  for (const categoryMatch of factsScope.matchAll(CATEGORY_BLOCK_REGEX)) {
+    const category = categoryMatch[1];
+    const blockContent = categoryMatch[2];
+    const items = [...blockContent.matchAll(FACT_ITEM_REGEX)].map((match) => unescapeXml(match[1].trim())).filter(Boolean);
+    if (!HISTORIAN_CATEGORIES.has(category)) {
+      if (items.length === 0)
+        continue;
+      droppedFactBlocks++;
+      droppedFacts += items.length;
+      log(`[historian] Dropped <facts> category ${category} (${items.length} facts)`);
+      continue;
+    }
+    for (const content of items)
+      facts.push({ category, content });
   }
-  return "";
-}
-function directoryFallback(directory) {
-  const canonical = path3.resolve(directory);
-  const hash = createHash3("md5").update(canonical, "utf8").digest("hex").slice(0, 12);
-  return `dir:${hash}`;
-}
-function rememberedIdentityOrDirectoryFallback(canonical) {
-  return readRememberedGitIdentity(canonical) ?? directoryFallback(canonical);
-}
-function assertDirectoryUsable(canonicalDirectory, rawDirectory) {
-  try {
-    const stat = statSync(canonicalDirectory);
-    if (!stat.isDirectory()) {
-      throw new ProjectIdentityError("unknown", rawDirectory, `Project path is not a directory: ${canonicalDirectory}`);
+  const unprocessedMatch = outside.match(UNPROCESSED_REGEX);
+  const unprocessedFrom = unprocessedMatch ? parseInt(unprocessedMatch[1], 10) : null;
+  const userObservations = [];
+  const userObsMatch = outside.match(USER_OBSERVATIONS_REGEX);
+  if (userObsMatch) {
+    for (const itemMatch of userObsMatch[1].matchAll(USER_OBS_ITEM_REGEX)) {
+      const obs = unescapeXml(itemMatch[1].trim());
+      if (obs)
+        userObservations.push(obs);
     }
-  } catch (error) {
-    if (error instanceof ProjectIdentityError) {
-      throw error;
+  }
+  const primerCandidates = [];
+  const primerMatch = outside.match(PRIMER_CANDIDATES_REGEX);
+  if (primerMatch) {
+    const block = primerMatch[1];
+    let sawElement = false;
+    for (const el of block.matchAll(PRIMER_ELEMENT_REGEX)) {
+      sawElement = true;
+      const question = unescapeXml(el[2].trim());
+      if (question) {
+        primerCandidates.push({
+          question,
+          originCompartmentIndex: Number.parseInt(el[1], 10)
+        });
+      }
     }
-    const code = getErrorCode(error);
-    if (code === "EACCES" || code === "EPERM") {
-      throw new ProjectIdentityError("permission_denied", rawDirectory, `Permission denied while accessing project directory: ${canonicalDirectory}`, asError(error));
+    if (!sawElement) {
+      for (const itemMatch of block.matchAll(PRIMER_ITEM_REGEX)) {
+        const question = unescapeXml(itemMatch[1].trim());
+        if (question)
+          primerCandidates.push({ question });
+      }
     }
-    throw new ProjectIdentityError("unknown", rawDirectory, `Unable to access project directory: ${canonicalDirectory}`, asError(error));
   }
+  const events = parseEvents(outside);
+  const sortedByStart = compartments.map((compartment, emitted) => ({ compartment, emitted })).sort((a, b) => a.compartment.startMessage - b.compartment.startMessage);
+  const sortedPosition = [];
+  sortedByStart.forEach(({ emitted }, sorted) => {
+    sortedPosition[emitted] = sorted + 1;
+  });
+  const remapAnchor = (anchor) => anchor >= 1 && anchor <= sortedPosition.length ? sortedPosition[anchor - 1] : anchor;
+  return {
+    compartments: sortedByStart.map(({ compartment }) => compartment),
+    facts,
+    droppedFactBlocks,
+    droppedFacts,
+    events: events.map((event) => event.atCompartment === null ? event : { ...event, atCompartment: remapAnchor(event.atCompartment) }),
+    unprocessedFrom,
+    userObservations,
+    primerCandidates: primerCandidates.map((candidate) => candidate.originCompartmentIndex === undefined ? candidate : {
+      ...candidate,
+      originCompartmentIndex: remapAnchor(candidate.originCompartmentIndex)
+    })
+  };
 }
-function isGitTimeoutError(error) {
-  const code = getErrorCode(error);
-  const signal = getErrorSignal(error);
-  return code === "ETIMEDOUT" || signal === "SIGTERM" || signal === "SIGKILL" || getErrorKilled(error);
+function parseEvents(text) {
+  const blockMatch = text.match(EVENTS_BLOCK_REGEX);
+  if (!blockMatch)
+    return [];
+  const block = blockMatch[1];
+  const events = [];
+  for (const elMatch of block.matchAll(EVENT_ELEMENT_REGEX)) {
+    const kind = elMatch[1];
+    const atRaw = parseInt(elMatch[2], 10);
+    const atCompartment = Number.isNaN(atRaw) ? null : atRaw;
+    const fields = {};
+    for (const fieldMatch of elMatch[3].matchAll(EVENT_FIELD_REGEX)) {
+      const name = fieldMatch[1];
+      const value = unescapeXml(fieldMatch[2].trim());
+      if (value)
+        fields[name] = value;
+    }
+    events.push({ kind, atCompartment, fields });
+  }
+  return events;
 }
-function hasUnbornHead(directory) {
-  const options = {
-    cwd: directory,
-    encoding: "utf8",
-    env: { ...process.env, LC_ALL: "C", LANG: "C" },
-    stdio: ["ignore", "pipe", "pipe"],
-    timeout: GIT_TIMEOUT_MS,
-    windowsHide: true
-  };
-  try {
-    execFileSyncForIdentity("git", ["rev-parse", "--git-dir"], options);
-    try {
-      execFileSyncForIdentity("git", ["rev-parse", "--verify", "--quiet", "HEAD"], options);
-      return false;
-    } catch (error) {
-      return !isGitTimeoutError(error) && typeof error === "object" && error !== null && "status" in error && error.status === 1 && getErrorStderr(error) === "";
+
+// src/features/magic-context/lkg-prefix-chunks.ts
+import { createHash as createHash3 } from "node:crypto";
+var LKG_PREFIX_CHUNK_CHARS = 64 * 1024;
+function splitLkgPrefix(jsonPrefix) {
+  const chunks = [];
+  let start = 0;
+  while (start < jsonPrefix.length) {
+    let end = Math.min(start + LKG_PREFIX_CHUNK_CHARS, jsonPrefix.length);
+    if (end < jsonPrefix.length) {
+      const last = jsonPrefix.charCodeAt(end - 1);
+      if (last >= 55296 && last <= 56319)
+        end -= 1;
     }
-  } catch {
-    return false;
+    chunks.push(jsonPrefix.slice(start, end));
+    start = end;
   }
+  return chunks;
 }
-function classifyGitError(error, rawDirectory) {
-  if (isGitTimeoutError(error)) {
-    return new ProjectIdentityError("git_timeout", rawDirectory, `git rev-list timed out after ${GIT_TIMEOUT_MS}ms`, asError(error));
-  }
-  const code = getErrorCode(error);
-  if (code === "ENOENT") {
-    return new ProjectIdentityError("git_missing", rawDirectory, "git binary is not available in PATH", asError(error));
-  }
-  if (code === "EACCES" || code === "EPERM") {
-    return new ProjectIdentityError("permission_denied", rawDirectory, "Permission denied while spawning git", asError(error));
-  }
-  const stderr = getErrorStderr(error).toLowerCase();
-  if (stderr.includes("detected dubious ownership")) {
-    return new ProjectIdentityError("dubious_ownership", rawDirectory, "git refused to read the repository because it detected dubious ownership", asError(error));
+function hashLkgChunk(body) {
+  return createHash3("sha256").update(body).digest("hex");
+}
+function hashLkgChunkList(chunkHashes) {
+  return createHash3("sha256").update(chunkHashes.join(`
+`)).digest("hex");
+}
+function layoutLkgPrefix(jsonPrefix) {
+  const chunks = splitLkgPrefix(jsonPrefix);
+  const chunkHashes = chunks.map(hashLkgChunk);
+  return { chunks, chunkHashes, chars: jsonPrefix.length, hash: hashLkgChunkList(chunkHashes) };
+}
+function assembleLkgPrefix(expected, rows) {
+  const { chars, chunks, hash } = expected;
+  if (typeof chars !== "number" || !Number.isSafeInteger(chars) || typeof chunks !== "number" || !Number.isSafeInteger(chunks) || typeof hash !== "string" || rows.length !== chunks) {
+    return;
   }
-  if (stderr.includes("not a git repository") || stderr.includes("does not have any commits yet") || stderr.includes("ambiguous argument 'head'") || stderr.includes("unknown revision or path")) {
-    return new ProjectIdentityError("not_git_repo", rawDirectory, "Directory has no git root commit; caller may use directory fallback", asError(error));
+  const bodies = [];
+  let length = 0;
+  for (let index = 0;index < rows.length; index += 1) {
+    const row = rows[index];
+    if (row?.chunk !== index || typeof row.body !== "string")
+      return;
+    bodies.push(row.body);
+    length += row.body.length;
   }
-  return new ProjectIdentityError("unknown", rawDirectory, "git rev-list failed while resolving project identity", asError(error));
+  if (length !== chars)
+    return;
+  const chunkHashes = bodies.map(hashLkgChunk);
+  if (chunkHashes.some((chunkHash, index) => rows[index]?.hash !== chunkHash))
+    return;
+  if (hashLkgChunkList(chunkHashes) !== hash)
+    return;
+  return { jsonPrefix: bodies.join(""), chunkHashes, hash };
 }
-function resolveProjectIdentityStrict(directory, allowHomeProject = homeProjectPermission) {
-  assertProjectAllowed(directory, allowHomeProject);
-  const canonical = path3.resolve(directory);
-  const cached = identityCache.get(canonical);
-  if (cached !== undefined) {
-    return cached;
-  }
-  assertDirectoryUsable(canonical, directory);
-  if (!hasGitDir(canonical)) {
-    throw new ProjectIdentityError("not_git_repo", directory, "Directory has no git metadata; caller may use directory fallback");
+
+// src/features/magic-context/migration-v94-write-split.ts
+var LKG_SLOT_CHUNKS_DDL = `
+    CREATE TABLE IF NOT EXISTS lkg_slot_chunks (
+        session_id TEXT NOT NULL,
+        chunk INTEGER NOT NULL,
+        hash TEXT NOT NULL,
+        body TEXT NOT NULL,
+        PRIMARY KEY (session_id, chunk)
+    );
+`;
+var SESSION_REPLAY_DECISIONS_DDL = `
+    CREATE TABLE IF NOT EXISTS session_replay_decisions (
+        session_id TEXT NOT NULL,
+        message_id TEXT NOT NULL,
+        decision TEXT NOT NULL,
+        PRIMARY KEY (session_id, message_id)
+    ) WITHOUT ROWID;
+`;
+function lkgSlotsDdl(table) {
+  return `
+        CREATE TABLE IF NOT EXISTS ${table} (
+            session_id TEXT PRIMARY KEY,
+            json_prefix_chars INTEGER NOT NULL,
+            json_prefix_chunks INTEGER NOT NULL,
+            json_prefix_hash TEXT NOT NULL,
+            input_id_seq TEXT NOT NULL,
+            input_content_digests TEXT NOT NULL,
+            input_content_signatures TEXT,
+            last_input_message_id TEXT NOT NULL,
+            model_key TEXT,
+            provider_key TEXT,
+            captured_at INTEGER NOT NULL,
+            row_version INTEGER,
+            capture_sequence INTEGER
+        );
+    `;
+}
+var LKG_SLOTS_DDL = lkgSlotsDdl("lkg_slots");
+var LKG_MOVE_WINDOW_MS = 24 * 60 * 60 * 1000;
+function tableExists(db, name) {
+  return Boolean(db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name = ?").get(name));
+}
+function columnExists(db, table, column) {
+  const rows = db.prepare(`PRAGMA table_info(${table})`).all();
+  return rows.some((row) => row.name === column);
+}
+function splitLkgSlotPrefixes(db, now = Date.now()) {
+  db.exec(LKG_SLOT_CHUNKS_DDL);
+  if (!tableExists(db, "lkg_slots")) {
+    db.exec(LKG_SLOTS_DDL);
+    return;
   }
-  let output;
-  try {
-    output = execFileSyncForIdentity("git", ["rev-list", "--max-parents=0", "HEAD"], {
-      cwd: canonical,
-      encoding: "utf8",
-      env: { ...process.env, LC_ALL: "C", LANG: "C" },
-      stdio: ["ignore", "pipe", "pipe"],
-      timeout: GIT_TIMEOUT_MS,
-      windowsHide: true
-    });
-  } catch (error) {
-    const classified = classifyGitError(error, directory);
-    if (classified.errorClass === "not_git_repo" && hasUnbornHead(canonical)) {
-      throw new ProjectIdentityError("no_commits", directory, "Git repository has no commits yet");
+  if (!columnExists(db, "lkg_slots", "json_prefix"))
+    return;
+  db.prepare("DELETE FROM lkg_slots WHERE NOT (captured_at >= ?)").run(now - LKG_MOVE_WINDOW_MS);
+  db.exec("DROP TABLE IF EXISTS lkg_slots_v94");
+  db.exec(lkgSlotsDdl("lkg_slots_v94"));
+  const sessionIds = db.prepare("SELECT session_id FROM lkg_slots").all().map((row) => row.session_id);
+  const readPrefix = db.prepare("SELECT json_prefix FROM lkg_slots WHERE session_id IS ?");
+  const insertSlot = db.prepare(`INSERT OR IGNORE INTO lkg_slots_v94 (
+            session_id, json_prefix_chars, json_prefix_chunks, json_prefix_hash,
+            input_id_seq, input_content_digests, input_content_signatures,
+            last_input_message_id, model_key, provider_key,
+            captured_at, row_version, capture_sequence
+        )
+        SELECT session_id, ?, ?, ?,
+            input_id_seq, input_content_digests, input_content_signatures,
+            last_input_message_id, model_key, provider_key,
+            captured_at, row_version, capture_sequence
+        FROM lkg_slots WHERE session_id IS ?`);
+  const insertChunk = db.prepare("INSERT INTO lkg_slot_chunks (session_id, chunk, hash, body) VALUES (?, ?, ?, ?)");
+  db.prepare("DELETE FROM lkg_slot_chunks").run();
+  for (const sessionId of sessionIds) {
+    if (typeof sessionId !== "string")
+      continue;
+    const row = readPrefix.get(sessionId);
+    if (typeof row?.json_prefix !== "string")
+      continue;
+    const layout = layoutLkgPrefix(row.json_prefix);
+    const inserted = insertSlot.run(layout.chars, layout.chunks.length, layout.hash, sessionId);
+    if (Number(inserted.changes) !== 1)
+      continue;
+    for (let index = 0;index < layout.chunks.length; index += 1) {
+      insertChunk.run(sessionId, index, layout.chunkHashes[index], layout.chunks[index]);
     }
-    throw classified;
-  }
-  const rootCommit = output.split(`
-`).map((line) => line.trim().slice(0, 64)).filter((line) => /^[0-9a-f]{7,64}$/.test(line)).sort()[0];
-  if (!rootCommit) {
-    throw new ProjectIdentityError("unknown", directory, "git rev-list returned no valid root commit hash");
   }
-  const identity = `git:${rootCommit}`;
-  identityCache.set(canonical, identity);
-  lastKnownGitIdentityCache.set(canonical, identity);
-  rememberGitIdentity(canonical, identity);
-  const root = gitRootDirectory(canonical);
-  if (root && root !== canonical)
-    rememberGitIdentity(root, identity);
-  transientFailureCooldown.delete(canonical);
-  dubiousOwnershipFallbackDirectories.delete(canonical);
-  transientGitIdentityReuseLoggedDirectories.delete(canonical);
-  return identity;
+  db.exec("DROP TABLE lkg_slots");
+  db.exec("ALTER TABLE lkg_slots_v94 RENAME TO lkg_slots");
 }
-function shouldUseDirectoryFallback(error) {
-  return error.errorClass !== "home_project_disabled";
+function validDecisionSql(type, value) {
+  return `(${type} = 'text' AND (
+        ${value} IN ('keep', 'strip') OR (
+            ${value} GLOB 'keep:[1-9]*'
+            AND substr(${value}, 6) NOT GLOB '*[^0-9]*'
+            AND length(${value}) <= 10
+            AND CAST(substr(${value}, 6) AS INTEGER) BETWEEN 2 AND 10000
+        )
+    ))`;
 }
-function getActiveCooldown(canonical) {
-  const until = transientFailureCooldown.get(canonical);
-  if (until === undefined)
+function splitReplayDecisions(db) {
+  db.exec(SESSION_REPLAY_DECISIONS_DDL);
+  if (!tableExists(db, "session_meta"))
     return;
-  if (nowMs() < until)
-    return until;
-  transientFailureCooldown.delete(canonical);
-  return;
-}
-function lastKnownGitIdentity(canonical) {
-  return lastKnownGitIdentityCache.get(canonical) ?? identityCache.get(canonical) ?? readRememberedGitIdentity(canonical);
-}
-function nearestLastKnownGitIdentity(canonical) {
-  const visited = new Set;
-  const walk = (start) => {
-    let current = start;
-    while (!visited.has(current)) {
-      visited.add(current);
-      const cached = lastKnownGitIdentity(current);
-      if (cached !== undefined)
-        return { identity: cached, source: current };
-      if (existsSync(path3.join(current, ".git")))
-        break;
-      const parent = path3.dirname(current);
-      if (parent === current)
-        break;
-      current = parent;
-    }
+  if (!columnExists(db, "session_meta", "trailing_blank_decisions"))
     return;
-  };
-  const exactOrAncestor = walk(canonical);
-  if (exactOrAncestor)
-    return exactOrAncestor;
-  try {
-    const realCanonical = realpathSync2.native(canonical);
-    if (realCanonical !== canonical)
-      return walk(realCanonical);
-  } catch {}
-  return;
+  const doc = "sm.trailing_blank_decisions";
+  const hasVersionKey = `json_type(${doc}, '$.version') IS NOT NULL`;
+  const versionIsDecision = validDecisionSql(`json_type(${doc}, '$.version')`, `json_extract(${doc}, '$.version')`);
+  const isV2 = `(${hasVersionKey} AND NOT ${versionIsDecision})`;
+  const v2Valid = `(
+        json_type(${doc}, '$.version') IN ('integer', 'real')
+        AND json_extract(${doc}, '$.version') = 2
+        AND json_type(${doc}, '$.trailingBlank') = 'object'
+        AND NOT EXISTS (
+            SELECT 1 FROM json_each(${doc}, '$.trailingBlank') AS entry
+            WHERE entry.key = '' OR NOT ${validDecisionSql("entry.type", "entry.value")}
+        )
+    )`;
+  const v1Valid = `NOT EXISTS (
+        SELECT 1 FROM json_each(${doc}) AS entry
+        WHERE entry.key = '' OR NOT ${validDecisionSql("entry.type", "entry.value")}
+    )`;
+  db.exec("DROP TABLE IF EXISTS temp.v94_replay_documents");
+  db.exec(`
+        CREATE TEMP TABLE v94_replay_documents AS
+        SELECT session_id, version FROM (
+            SELECT sm.session_id AS session_id, CASE WHEN ${isV2} THEN 2 ELSE 1 END AS version,
+                CASE WHEN ${isV2} THEN ${v2Valid} ELSE ${v1Valid} END AS strictly_valid
+            FROM session_meta AS sm
+            WHERE typeof(${doc}) = 'text' AND ${doc} <> ''
+                AND json_valid(${doc}) AND json_type(${doc}) = 'object'
+        ) WHERE strictly_valid;
+    `);
+  db.exec(`
+        INSERT INTO session_replay_decisions (session_id, message_id, decision)
+        SELECT sm.session_id, entry.key, entry.value
+        FROM v94_replay_documents AS moved
+        JOIN session_meta AS sm ON sm.session_id = moved.session_id
+        JOIN json_each(
+            ${doc}, CASE moved.version WHEN 2 THEN '$.trailingBlank' ELSE '$' END
+        ) AS entry
+        WHERE true
+        ON CONFLICT(session_id, message_id) DO UPDATE SET decision = excluded.decision;
+    `);
+  db.exec(`
+        UPDATE session_meta SET trailing_blank_decisions = (
+            SELECT CASE moved.version
+                WHEN 2 THEN json_set(session_meta.trailing_blank_decisions, '$.trailingBlank', json('{}'))
+                ELSE ''
+            END
+            FROM v94_replay_documents AS moved WHERE moved.session_id = session_meta.session_id
+        )
+        WHERE session_id IN (SELECT session_id FROM v94_replay_documents);
+    `);
+  db.exec("DROP TABLE temp.v94_replay_documents");
 }
-function reuseLastKnownGitIdentity(canonical) {
-  const cached = nearestLastKnownGitIdentity(canonical);
-  if (cached === undefined)
-    return;
-  if (!transientGitIdentityReuseLoggedDirectories.has(canonical)) {
-    transientGitIdentityReuseLoggedDirectories.add(canonical);
-    const sourceNote = cached.source === canonical ? "" : ` from ancestor ${cached.source}`;
-    log(`[magic-context] git identity resolution is temporarily unavailable for ${canonical}; reusing the last successful project identity${sourceNote} to avoid splitting project-scoped memory`);
+
+// src/features/magic-context/opencode2-relabel.ts
+var OPENCODE2_RELABEL_STATE_KEY = "v87_opencode2_relabel";
+var V87_HARNESS_TWIN_RULES = [
+  {
+    table: "session_projects",
+    keyColumns: ["session_id"],
+    incomingIsNewer: "incoming.updated_at > existing.updated_at"
+  },
+  {
+    table: "primer_candidates",
+    keyColumns: [
+      "project_path",
+      "session_id",
+      "source_start_message_id",
+      "source_end_message_id"
+    ],
+    incomingIsNewer: "incoming.created_at > existing.created_at"
+  },
+  {
+    table: "transform_decisions",
+    keyColumns: ["session_id", "message_id"],
+    incomingIsNewer: "incoming.ts_ms > existing.ts_ms"
   }
-  return cached.identity;
-}
-function formatDubiousOwnershipWarning(canonical) {
-  return `Magic Context: git refused to read ${canonical} (dubious ownership — the repo is owned by a different user). Memory features are paused unless a previous git identity is available. Fix: git config --global --add safe.directory ${canonical}`;
-}
-function recordDubiousOwnershipFallback(canonical) {
-  dubiousOwnershipFallbackDirectories.add(canonical);
-  if (dubiousOwnershipLoggedDirectories.has(canonical))
-    return;
-  dubiousOwnershipLoggedDirectories.add(canonical);
-  log(`[magic-context] ${formatDubiousOwnershipWarning(canonical)}`);
-}
-function takeDubiousOwnershipProjectIdentityWarning(directory) {
-  const canonical = path3.resolve(directory);
-  if (!dubiousOwnershipFallbackDirectories.has(canonical))
-    return null;
-  if (dubiousOwnershipWarnedDirectories.has(canonical))
-    return null;
-  dubiousOwnershipWarnedDirectories.add(canonical);
-  return formatDubiousOwnershipWarning(canonical);
+];
+function tableExists2(db, name) {
+  return Boolean(db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name = ?").get(name));
 }
-function canonicalUserHomeDirectory() {
-  const homeDirectory = userHomeDirectoryForIdentity();
-  try {
-    return realpathSync2.native(homeDirectory);
-  } catch {
-    return homeDirectory;
-  }
+function columnNames(db, table) {
+  return new Set(db.prepare(`PRAGMA table_info(${table})`).all().map((column) => column.name));
 }
-function isUserHomeDirectory(directory) {
-  if (projectDirectoryKey(directory) === projectDirectoryKey(userHomeDirectoryForIdentity()))
-    return true;
-  try {
-    return projectDirectoryKey(realpathSync2.native(path3.resolve(directory))) === projectDirectoryKey(canonicalUserHomeDirectory());
-  } catch {
-    return false;
+function listSessionScopedHarnessTables(db, tables) {
+  const shapes = [];
+  for (const table of tables) {
+    if (!tableExists2(db, table))
+      continue;
+    const columns = columnNames(db, table);
+    if (!columns.has("harness"))
+      continue;
+    shapes.push({ table, hasSessionId: columns.has("session_id") });
   }
+  return shapes;
 }
-function assertProjectAllowed(directory, allowHomeProject) {
-  const canonical = path3.resolve(directory);
-  if (!allowHomeProject && (isUserHomeDirectory(directory) || isUserHomeDirectory(gitRootDirectory(canonical) ?? canonical))) {
-    throw new ProjectIdentityError("home_project_disabled", directory, "Home project memory is disabled; set allow_home_project to opt in");
+function collectCandidateSessions(db, shapes) {
+  const sessions = new Set;
+  for (const shape of shapes) {
+    if (!shape.hasSessionId)
+      continue;
+    const rows = db.prepare(`SELECT DISTINCT session_id AS id FROM ${shape.table}
+                  WHERE session_id IS NOT NULL AND harness IN ('opencode', 'opencode2')`).all();
+    for (const row of rows)
+      sessions.add(row.id);
   }
+  return [...sessions].sort();
 }
-function resolveProjectIdentity(directory, allowHomeProject = homeProjectPermission) {
-  assertProjectAllowed(directory, allowHomeProject);
-  const canonical = path3.resolve(directory);
-  const cachedFallback = directoryFallbackCache.get(canonical);
-  if (cachedFallback !== undefined) {
-    if (!hasGitDir(canonical)) {
-      return cachedFallback;
+function openEvidenceStore(path) {
+  const store = new Database(path, { readonly: true, fileMustExist: true });
+  try {
+    const hasV1Messages = tableExists2(store, "message");
+    const hasV1Session = tableExists2(store, "session");
+    const hasV2 = tableExists2(store, "session_v2");
+    const hasV2Messages = hasV2 && tableExists2(store, "session_message");
+    if (!hasV1Messages && !hasV1Session && !hasV2) {
+      store.close();
+      return null;
     }
-    directoryFallbackCache.delete(canonical);
-  }
-  if (getActiveCooldown(canonical) !== undefined) {
-    if (hasGitDir(canonical)) {
-      const cachedGitIdentity = reuseLastKnownGitIdentity(canonical);
-      if (cachedGitIdentity !== undefined) {
-        return cachedGitIdentity;
+    const v1Message = hasV1Messages ? store.prepare("SELECT MAX(time_updated) AS newest FROM message WHERE session_id = ?") : null;
+    const v1Session = hasV1Session ? store.prepare("SELECT time_updated AS newest FROM session WHERE id = ?") : null;
+    const v2Message = hasV2Messages ? store.prepare("SELECT MAX(time_updated) AS newest FROM session_message WHERE session_id = ?") : null;
+    const v2Session = hasV2 ? store.prepare("SELECT time_updated AS newest FROM session_v2 WHERE id = ?") : null;
+    const newest = (statements, sessionId) => {
+      let best = null;
+      for (const statement of statements) {
+        if (!statement)
+          continue;
+        const row = statement.get(sessionId);
+        const value = row?.newest;
+        if (typeof value !== "number")
+          continue;
+        if (best === null || value > best)
+          best = value;
       }
-      throw new ProjectIdentityError("git_identity_unavailable", directory, "Git identity unavailable; memory features paused until the retry cooldown expires");
-    }
-    return rememberedIdentityOrDirectoryFallback(canonical);
-  }
-  try {
-    return resolveProjectIdentityStrict(directory, allowHomeProject);
+      return best;
+    };
+    return {
+      newestV1Activity: (sessionId) => newest([v1Message, v1Session], sessionId),
+      newestV2Activity: (sessionId) => newest([v2Message, v2Session], sessionId),
+      close: () => store.close()
+    };
   } catch (error) {
-    if (error instanceof ProjectIdentityError && shouldUseDirectoryFallback(error)) {
-      if (error.errorClass === "no_commits")
-        return directoryFallback(canonical);
-      if (!hasGitDir(canonical)) {
-        if (error.errorClass === "permission_denied")
-          throw error;
-        const resolved = rememberedIdentityOrDirectoryFallback(canonical);
-        directoryFallbackCache.set(canonical, resolved);
-        transientFailureCooldown.delete(canonical);
-        return resolved;
-      }
-      transientFailureCooldown.set(canonical, nowMs() + TRANSIENT_FAILURE_COOLDOWN_MS);
-      const cachedGitIdentity = reuseLastKnownGitIdentity(canonical);
-      if (error.errorClass === "dubious_ownership")
-        recordDubiousOwnershipFallback(canonical);
-      if (cachedGitIdentity !== undefined) {
-        return cachedGitIdentity;
-      }
-      throw error;
-    }
+    store.close();
     throw error;
   }
 }
-function resolveProjectIdentityOrFallback(directory, allowHomeProject = homeProjectPermission) {
-  try {
-    return resolveProjectIdentity(directory, allowHomeProject);
-  } catch (error) {
-    const canonical = path3.resolve(directory);
-    if (hasGitDir(canonical) || error instanceof ProjectIdentityError && error.errorClass === "home_project_disabled")
-      throw error;
-    const fallback = rememberedIdentityOrDirectoryFallback(canonical);
-    const message = error instanceof Error ? error.message : String(error);
-    log(`[magic-context] project identity resolution failed for ${canonical}; using directory fallback ${fallback}: ${message}`);
-    return fallback;
-  }
-}
-function hasGitDir(canonical) {
-  if (hasGitDirInAncestorChain(canonical)) {
-    return true;
-  }
-  try {
-    const realCanonical = realpathSync2.native(canonical);
-    return realCanonical !== canonical && hasGitDirInAncestorChain(realCanonical);
-  } catch {
-    return false;
-  }
-}
-function gitRootInAncestorChain(startDirectory) {
-  let current = startDirectory;
-  while (true) {
-    if (existsSync(path3.join(current, ".git"))) {
-      try {
-        return realpathSync2.native(current);
-      } catch {
-        return path3.resolve(current);
-      }
-    }
-    const parent = path3.dirname(current);
-    if (parent === current) {
-      return null;
-    }
-    current = parent;
-  }
-}
-function hasGitDirInAncestorChain(startDirectory) {
-  return gitRootInAncestorChain(startDirectory) !== null;
-}
-function gitRootDirectory(canonical) {
-  const direct = gitRootInAncestorChain(canonical);
-  if (direct)
-    return direct;
-  try {
-    const realCanonical = realpathSync2.native(canonical);
-    return realCanonical === canonical ? null : gitRootInAncestorChain(realCanonical);
-  } catch {
+function resolveHarnessFromEvidence(evidence, sessionId) {
+  const v1 = evidence.newestV1Activity(sessionId);
+  const v2 = evidence.newestV2Activity(sessionId);
+  if (v1 === null && v2 === null)
     return null;
-  }
-}
-function directoryHasGitMetadata(directory) {
-  return gitRootDirectory(path3.resolve(directory)) !== null;
+  if (v2 !== null && (v1 === null || v2 > v1))
+    return "opencode2";
+  if (v1 !== null && (v2 === null || v1 > v2))
+    return "opencode";
+  return null;
 }
-function describeUnresolvedProjectIdentity(directory) {
-  const resolvedDirectory = path3.resolve(directory);
-  const canonicalHome = canonicalUserHomeDirectory();
-  const canonicalDirectory = (() => {
-    try {
-      return realpathSync2.native(resolvedDirectory);
-    } catch {
-      return resolvedDirectory;
+function prepareTwinResolver(db, table, keyColumns, incomingIsNewer) {
+  const joinOn = keyColumns.map((column) => `incoming.${column} = existing.${column}`).join(" AND ");
+  const dropIncoming = db.prepare(`DELETE FROM ${table} WHERE rowid IN (
+             SELECT incoming.rowid FROM ${table} AS incoming
+             JOIN ${table} AS existing ON ${joinOn} AND existing.harness = ?
+             WHERE incoming.session_id = ? AND incoming.harness = ?
+               AND NOT (${incomingIsNewer})
+         )`);
+  const dropExisting = db.prepare(`DELETE FROM ${table} WHERE rowid IN (
+             SELECT existing.rowid FROM ${table} AS existing
+             JOIN ${table} AS incoming ON ${joinOn} AND incoming.harness = ?
+             WHERE existing.session_id = ? AND existing.harness = ?
+               AND (${incomingIsNewer})
+         )`);
+  return {
+    run(sessionId, target, source) {
+      dropIncoming.run(target, sessionId, source);
+      dropExisting.run(source, sessionId, target);
     }
-  })();
-  if (isUserHomeDirectory(directory) || gitRootDirectory(canonicalDirectory) === canonicalHome) {
-    return `this session runs in your home directory (${canonicalHome}), which Magic Context does not treat as a project. ` + "Start OpenCode inside a project folder, or set `allow_home_project: true` in the user-level " + "magic-context.jsonc (~/.config/cortexkit/) to give home sessions their own memory.";
-  }
-  if (hasGitDir(resolvedDirectory))
-    return `git identity resolution for ${resolvedDirectory} is temporarily unavailable. Memory features are paused; retry after git access recovers.`;
-  return `the session directory ${resolvedDirectory} could not be read as a project.`;
+  };
 }
-function isUsableProjectIdentity(identity) {
-  return typeof identity === "string" && identity.trim().length > 0;
+function writeUnresolvedState(db, reason, resolution, sessionIds) {
+  if (!tableExists2(db, "schema_migrations_meta"))
+    return;
+  const value = {
+    reason,
+    lookedFor: getOpenCodeDbProbeDescriptions(resolution).join(", "),
+    sessionIds: [...sessionIds],
+    recordedAt: Date.now()
+  };
+  db.prepare(`INSERT INTO schema_migrations_meta (key, value) VALUES (?, ?)
+         ON CONFLICT(key) DO UPDATE SET value = excluded.value`).run(OPENCODE2_RELABEL_STATE_KEY, JSON.stringify(value));
 }
-function resolveProjectIdentityForSession(directory, allowHomeProject = homeProjectPermission) {
-  const resolvedDirectory = path3.resolve(directory);
-  const cacheKey = `${allowHomeProject ? "1" : "0"}\x00${resolvedDirectory}`;
-  const cached = sessionIdentityCache.get(cacheKey);
-  if (cached && (cached.revalidateAt === null || nowMs() < cached.revalidateAt) && !(cached.identity?.startsWith("dir:") && hasGitDir(resolvedDirectory))) {
-    return cached.identity;
+function clearUnresolvedState(db) {
+  if (!tableExists2(db, "schema_migrations_meta"))
+    return;
+  db.prepare("DELETE FROM schema_migrations_meta WHERE key = ?").run(OPENCODE2_RELABEL_STATE_KEY);
+}
+function repairOpenCode2HarnessLabels(db, options) {
+  const shapes = listSessionScopedHarnessTables(db, options.tables);
+  const candidateSessionIds = collectCandidateSessions(db, shapes);
+  if (candidateSessionIds.length === 0) {
+    clearUnresolvedState(db);
+    return {
+      status: "no_candidates",
+      storePath: null,
+      candidateSessionIds,
+      relabelledSessions: []
+    };
   }
-  sessionIdentityCache.delete(cacheKey);
-  filesystemProbeObserverForTests?.();
-  const canonicalDirectory = (() => {
-    try {
-      filesystemProbeObserverForTests?.();
-      return realpathSync2.native(resolvedDirectory);
-    } catch {
-      return resolvedDirectory;
-    }
-  })();
-  filesystemProbeObserverForTests?.();
-  const homeRoot = gitRootDirectory(canonicalDirectory);
-  const inheritsHomeRepository = homeRoot !== null && isUserHomeDirectory(homeRoot);
-  let identity;
-  if (!allowHomeProject && (isUserHomeDirectory(directory) || inheritsHomeRepository)) {
-    identity = undefined;
+  const resolution = resolveOpenCodeDbPath("v1", { env: options.env });
+  let evidence = null;
+  let reason = null;
+  if (!openCodeDbPathExists(resolution)) {
+    reason = "store_not_found";
   } else {
     try {
-      identity = resolveProjectIdentityOrFallback(isUserHomeDirectory(directory) ? canonicalUserHomeDirectory() : directory, allowHomeProject);
+      evidence = openEvidenceStore(resolution.path);
+      if (!evidence)
+        reason = "store_schema_unknown";
     } catch (error) {
-      if (!(error instanceof ProjectIdentityError))
-        throw error;
-      const reason = error.errorClass === "git_identity_unavailable" ? pausedIdentityReasons.get(resolvedDirectory) ?? error.errorClass : error.errorClass;
-      pausedIdentityReasons.set(resolvedDirectory, reason);
-      const logKey = `${resolvedDirectory}\x00${reason}`;
-      if (!pausedIdentityLogged.has(logKey)) {
-        pausedIdentityLogged.add(logKey);
-        log(`[magic-context] memory features paused for ${resolvedDirectory}: ${reason}`);
-      }
-      identity = undefined;
+      reason = "store_unreadable";
+      log(`[migration] OpenCode session database at ${resolution.path} could not be read: ${error instanceof Error ? error.message : String(error)}`);
     }
   }
-  if (identity !== undefined)
-    pausedIdentityReasons.delete(resolvedDirectory);
-  sessionIdentityCache.set(cacheKey, {
-    identity,
-    revalidateAt: identity?.startsWith("git:") === true ? null : nowMs() + TRANSIENT_FAILURE_COOLDOWN_MS
-  });
-  return identity;
-}
-function normalizeStoredProjectPath(rawOrStored) {
-  if (rawOrStored.startsWith("git:") || rawOrStored.startsWith("dir:")) {
-    return rawOrStored;
+  if (!evidence || reason !== null) {
+    evidence?.close();
+    writeUnresolvedState(db, reason ?? "store_not_found", resolution, candidateSessionIds);
+    log(`[migration] OpenCode harness labels left unverified for ${candidateSessionIds.length} session(s): ` + `no readable OpenCode session database (${reason ?? "store_not_found"}) at ${resolution.path}. ` + "Nothing was relabelled; `magic-context doctor` reports the affected sessions.");
+    return {
+      status: "unresolved",
+      reason: reason ?? "store_not_found",
+      storePath: null,
+      candidateSessionIds,
+      relabelledSessions: []
+    };
   }
+  const relabelledSessions = [];
   try {
-    return resolveProjectIdentity(rawOrStored);
-  } catch {
-    return rawOrStored;
+    const updates = shapes.filter((shape) => shape.hasSessionId).map((shape) => db.prepare(`UPDATE ${shape.table} SET harness = ? WHERE session_id = ? AND harness = ?`));
+    const presentTables = new Set(shapes.map((shape) => shape.table));
+    const twinResolvers = V87_HARNESS_TWIN_RULES.filter((rule) => presentTables.has(rule.table)).map((rule) => prepareTwinResolver(db, rule.table, rule.keyColumns, rule.incomingIsNewer));
+    for (const sessionId of candidateSessionIds) {
+      const target = resolveHarnessFromEvidence(evidence, sessionId);
+      if (target === null)
+        continue;
+      const source = target === "opencode" ? "opencode2" : "opencode";
+      for (const resolver of twinResolvers)
+        resolver.run(sessionId, target, source);
+      let moved = 0;
+      for (const update of updates) {
+        moved += Number(update.run(target, sessionId, source).changes ?? 0);
+      }
+      if (moved > 0)
+        relabelledSessions.push({ sessionId, harness: target });
+    }
+  } finally {
+    evidence.close();
+  }
+  clearUnresolvedState(db);
+  if (relabelledSessions.length > 0) {
+    const toOpenCode2 = relabelledSessions.filter((entry) => entry.harness === "opencode2").length;
+    log(`[migration] OpenCode harness labels repaired from ${resolution.path}: ` + `${toOpenCode2} session(s) restored to opencode2, ` + `${relabelledSessions.length - toOpenCode2} session(s) set to opencode.`);
   }
+  return {
+    status: "resolved",
+    storePath: resolution.path,
+    candidateSessionIds,
+    relabelledSessions
+  };
 }
-function storedPathBelongsToIdentity(storedProjectPath, projectIdentity) {
-  return storedProjectPath === projectIdentity || normalizeStoredProjectPath(storedProjectPath) === projectIdentity;
+
+// src/features/magic-context/storage-compartment-history-version.ts
+function definitions(db) {
+  const hasPrivilegeTable = Boolean(db.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='context_privilege_state'").get());
+  const externalUpdate = hasPrivilegeTable ? "CASE WHEN COALESCE((SELECT enabled FROM context_privilege_state WHERE id=1),0)=0 THEN 1 ELSE 0 END" : "1";
+  return [
+    {
+      type: "table",
+      name: "compartment_history_versions",
+      sql: `CREATE TABLE compartment_history_versions (
+            session_id TEXT PRIMARY KEY NOT NULL,
+            generation TEXT NOT NULL DEFAULT (lower(hex(randomblob(16)))),
+            version INTEGER NOT NULL DEFAULT 0 CHECK (version >= 0),
+            rewrite_version INTEGER NOT NULL DEFAULT 0 CHECK (rewrite_version >= 0),
+            seeded INTEGER NOT NULL DEFAULT 0 CHECK (seeded IN (0, 1))
+        )`
+    },
+    {
+      type: "trigger",
+      name: "compartment_history_ai",
+      sql: `CREATE TRIGGER compartment_history_ai AFTER INSERT ON compartments BEGIN
+            INSERT INTO compartment_history_versions(session_id, version) VALUES (NEW.session_id, 1)
+            ON CONFLICT(session_id) DO UPDATE SET version = version + 1;
+        END`
+    },
+    {
+      type: "trigger",
+      name: "compartment_history_ad",
+      sql: `CREATE TRIGGER compartment_history_ad AFTER DELETE ON compartments BEGIN
+            INSERT INTO compartment_history_versions(session_id, version) VALUES (OLD.session_id, 1)
+            ON CONFLICT(session_id) DO UPDATE SET version = version + 1;
+        END`
+    },
+    {
+      type: "trigger",
+      name: "compartment_history_au",
+      sql: `CREATE TRIGGER compartment_history_au AFTER UPDATE ON compartments BEGIN
+            INSERT INTO compartment_history_versions(session_id, version, rewrite_version) VALUES (OLD.session_id, 1, ${externalUpdate})
+            ON CONFLICT(session_id) DO UPDATE SET version = version + 1, rewrite_version = rewrite_version + ${externalUpdate};
+            INSERT INTO compartment_history_versions(session_id, version, rewrite_version)
+                SELECT NEW.session_id, 1, ${externalUpdate} WHERE NEW.session_id != OLD.session_id
+            ON CONFLICT(session_id) DO UPDATE SET version = version + 1, rewrite_version = rewrite_version + ${externalUpdate};
+        END`
+    }
+  ];
+}
+function installedDefinitions(db) {
+  const rows = db.prepare(`SELECT type, name, sql FROM sqlite_master
+        WHERE name IN ('compartment_history_versions', 'compartment_history_ai', 'compartment_history_ad', 'compartment_history_au')`).all();
+  return new Map(rows.map((row) => [`${row.type}:${row.name}`, row.sql]));
+}
+function matches(expected, installed) {
+  return expected.every((definition) => installed.get(`${definition.type}:${definition.name}`) === definition.sql);
+}
+function installCompartmentHistoryVersions(db) {
+  if (!db.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='compartments'").get())
+    return;
+  if (matches(definitions(db), installedDefinitions(db)))
+    return;
+  db.transaction(() => {
+    const expected = definitions(db);
+    const installed = installedDefinitions(db);
+    if (matches(expected, installed))
+      return;
+    const table = expected[0];
+    const existingTable = installed.get(`table:${table.name}`);
+    if (existingTable !== undefined && existingTable !== table.sql) {
+      throw new Error("compartment_history_versions schema differs from v93; refusing to replace revision data");
+    }
+    if (existingTable === undefined)
+      db.exec(table.sql);
+    db.exec(`INSERT OR IGNORE INTO compartment_history_versions(session_id, seeded)
+            SELECT DISTINCT session_id, 1 FROM compartments`);
+    for (const trigger of expected.slice(1)) {
+      if (installed.get(`trigger:${trigger.name}`) === trigger.sql)
+        continue;
+      db.exec(`DROP TRIGGER IF EXISTS ${trigger.name}`);
+      db.exec(trigger.sql);
+    }
+  }).immediate();
 }
+
 // src/features/magic-context/workspaces.ts
+import { createHash as createHash4 } from "node:crypto";
 var VALID_SHARE_CATEGORIES = new Set(V2_MEMORY_CATEGORIES);
 var DEFAULT_WORKSPACE_SHARE_CATEGORIES = ["CONSTRAINTS"];
 function tableExists3(db, tableName) {
@@ -4105,6 +4243,13 @@ var MIGRATIONS = [
       splitLkgSlotPrefixes(db);
       splitReplayDecisions(db);
     }
+  },
+  {
+    version: 95,
+    description: "cover cleanup and retention reads, index git FTS rowids and store temporal replay decisions",
+    up(db) {
+      installV95PerfSchema(db, true);
+    }
   }
 ];
 var LATEST_MIGRATION_VERSION = MIGRATIONS.reduce((max, m) => Math.max(max, m.version), 0);
@@ -4132,6 +4277,9 @@ function hasPendingMigrations(db) {
   return MIGRATIONS.some((candidate) => candidate.version > currentVersion && !isMigrationApplied(db, candidate.version));
 }
 var mainThreadMigrationBodies = 0;
+function getMainThreadMigrationBodyCount() {
+  return mainThreadMigrationBodies;
+}
 function isSiblingMigrationConflict(db, error, version) {
   if (!(error instanceof Error))
     return false;
@@ -4244,23 +4392,13 @@ async function runMigrationsWithRetry(db, options = {}) {
   }
 }
 
-// src/features/magic-context/storage-db.ts
-import {
-  chmodSync,
-  copyFileSync,
-  cpSync,
-  existsSync as existsSync3,
-  mkdirSync as mkdirSync2,
-  readdirSync,
-  readFileSync as readFileSync3,
-  rmdirSync,
-  statSync as statSync2,
-  unlinkSync
-} from "node:fs";
-import { basename, dirname, join as join2, resolve } from "node:path";
-
 // src/plugin/boot-quiet.ts
+var BOOT_QUIET_MS = 120000;
 var bootQuietUntilMs = 0;
+function beginBootQuietPeriod(now = Date.now()) {
+  if (bootQuietUntilMs === 0)
+    bootQuietUntilMs = now + BOOT_QUIET_MS;
+}
 function bootQuietRemainingMs(now = Date.now()) {
   return Math.max(0, bootQuietUntilMs - now);
 }
@@ -4270,6 +4408,17 @@ function scheduleAfterBootQuiet(task, additionalDelayMs = 0) {
   return timer;
 }
 
+// src/features/magic-context/storage-db.ts
+import {
+  existsSync as existsSync3,
+  readdirSync,
+  readFileSync as readFileSync3,
+  rmdirSync,
+  statSync as statSync2,
+  unlinkSync
+} from "node:fs";
+import { basename, dirname, join as join2, resolve } from "node:path";
+
 // src/shared/rpc-utils.ts
 import { execFile, execFileSync as execFileSync2 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
@@ -4995,8 +5144,20 @@ function inspectWindowsProcessesSync() {
   };
 }
 
+// src/shared/sqlite-context-pragmas.ts
+function configureContextDatabasePragmas(db, readonly = false) {
+  const [row] = db.prepare(readonly ? "PRAGMA journal_mode" : "PRAGMA journal_mode=WAL").all();
+  const mode = row?.journal_mode?.toLowerCase();
+  if (mode === "memory" || readonly && mode !== "wal")
+    return;
+  if (mode !== "wal") {
+    throw new Error(`context.db requires WAL before synchronous=NORMAL (got ${mode ?? "unknown"})`);
+  }
+  db.exec("PRAGMA synchronous=NORMAL");
+}
+
 // src/features/magic-context/context-store-uuid.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID } from "node:crypto";
 function getContextStoreUuid(db) {
   const row = db.prepare("SELECT value FROM context_store_meta WHERE key = 'store_uuid'").get();
   return typeof row?.value === "string" && row.value.length > 0 ? row.value : null;
@@ -5005,7 +5166,7 @@ function ensureContextStoreUuid(db) {
   const existing = getContextStoreUuid(db);
   if (existing)
     return existing;
-  const minted = randomUUID2();
+  const minted = randomUUID();
   withPrivilegedWriter(db, () => {
     db.transaction(() => {
       db.prepare("INSERT INTO context_store_meta(key, value) VALUES ('store_uuid', ?) ON CONFLICT(key) DO NOTHING").run(minted);
@@ -5014,210 +5175,6 @@ function ensureContextStoreUuid(db) {
   return getContextStoreUuid(db) ?? minted;
 }
 
-// src/features/magic-context/fail-closed-block.ts
-var FAIL_CLOSED_DOCTOR_COMMAND = "npx @cortexkit/magic-context@latest doctor";
-function attachFailClosedBlockingProcessEvidence(process2, evidence) {
-  Object.defineProperties(process2, {
-    startTime: { configurable: true, value: evidence.startTime },
-    commandLine: { configurable: true, value: evidence.commandLine }
-  });
-  return process2;
-}
-
-class FailClosedBlockingError extends Error {
-  code = "FAIL_CLOSED_BLOCKING";
-  reason;
-  constructor(message, reason, options) {
-    super(message, options);
-    this.name = "FailClosedBlockingError";
-    this.reason = reason;
-  }
-}
-var OPENCODE_INTERNAL_AGENT_NAMES = new Set(["title", "summary", "compaction"]);
-function isMagicContextHiddenAgentName(agent) {
-  if (agent === "smart-note-compiler" || agent.startsWith("smart-note-")) {
-    return true;
-  }
-  if (agent === "historian" || agent.startsWith("historian-"))
-    return true;
-  if (agent === "dreamer" || agent.startsWith("dreamer-"))
-    return true;
-  return false;
-}
-var MAX_FORMATTED_BLOCKING_PROCESSES = 8;
-var MAX_FORMATTED_COMMAND_LINE_LENGTH = 80;
-function normalizeFailClosedProcessKind(process2) {
-  switch (process2.kind) {
-    case "OpenCode server":
-    case "OpenCode instance (TUI/CLI)":
-    case "Pi":
-    case "process":
-      return process2.kind;
-  }
-  switch (process2.harness?.trim().toLowerCase()) {
-    case "opencode server":
-      return "OpenCode server";
-    case "opencode instance (tui/cli)":
-    case "opencode instance":
-      return "OpenCode instance (TUI/CLI)";
-    case "pi":
-    case "pi harness":
-    case "omp":
-      return "Pi";
-    default:
-      return "process";
-  }
-}
-function formatFailClosedProcessStartTime(startTime) {
-  if (!Number.isFinite(startTime) || startTime <= 0)
-    return "unverified";
-  try {
-    const parts = new Intl.DateTimeFormat("en-US", {
-      day: "numeric",
-      hour: "2-digit",
-      minute: "2-digit",
-      month: "short",
-      hour12: false
-    }).formatToParts(new Date(startTime));
-    const values = Object.fromEntries(parts.map(({ type, value }) => [type, value]));
-    if (!values.month || !values.day || !values.hour || !values.minute)
-      return "unverified";
-    return `${values.month} ${values.day} ${values.hour}:${values.minute}`;
-  } catch {
-    return "unverified";
-  }
-}
-function formatFailClosedCommandLine(commandLine) {
-  if (typeof commandLine !== "string" || commandLine.trim().length === 0)
-    return "unverified";
-  try {
-    const normalized = commandLine.replaceAll("\x00", " ").replace(/\s+/g, " ").trim();
-    if (normalized.length === 0)
-      return "unverified";
-    const sanitized = sanitizeDiagnosticText(normalized).trim();
-    if (sanitized.length === 0)
-      return "unverified";
-    return sanitized.length > MAX_FORMATTED_COMMAND_LINE_LENGTH ? `${sanitized.slice(0, MAX_FORMATTED_COMMAND_LINE_LENGTH - 3)}...` : sanitized;
-  } catch {
-    return "unverified";
-  }
-}
-function formatFailClosedBlockingProcesses(processes) {
-  const uniqueProcesses = new Map;
-  for (const process2 of processes) {
-    if (!Number.isInteger(process2.pid) || process2.pid <= 0)
-      continue;
-    const candidate = {
-      kind: normalizeFailClosedProcessKind(process2),
-      pid: process2.pid,
-      startTime: process2.startTime,
-      commandLine: process2.commandLine
-    };
-    const previous = uniqueProcesses.get(process2.pid);
-    if (!previous || previous.kind === "process" && candidate.kind !== "process") {
-      uniqueProcesses.set(process2.pid, candidate);
-    } else {
-      uniqueProcesses.set(process2.pid, {
-        ...previous,
-        startTime: previous.startTime ?? candidate.startTime,
-        commandLine: previous.commandLine ?? candidate.commandLine
-      });
-    }
-  }
-  const entries = [...uniqueProcesses.values()];
-  const visible = entries.slice(0, MAX_FORMATTED_BLOCKING_PROCESSES);
-  const rendered = visible.map(({ kind, pid }) => `${kind} (PID ${pid})`);
-  const omitted = entries.length - visible.length;
-  if (omitted > 0)
-    rendered.push(`${omitted} more blocking process(es)`);
-  if (rendered.length === 0)
-    return "a live process";
-  const summary = rendered.length === 1 ? rendered[0] : `${rendered.slice(0, -1).join(", ")}, and ${rendered.at(-1)}`;
-  const evidence = entries.map(({ kind, pid, startTime, commandLine }) => `- PID ${pid}: ${kind}, started ${formatFailClosedProcessStartTime(startTime)}, cmd: ${formatFailClosedCommandLine(commandLine)}`).join(`
-`);
-  return `${summary}
-Blocking process evidence:
-${evidence}`;
-}
-function formatFailClosedBlockingMessage(reason) {
-  if (reason.kind === "migration_guard") {
-    if (reason.unreadableFile) {
-      const arm = reason.unreadableArm ?? "io";
-      const recovery = arm === "io" ? `If none of these processes are running, it is safe to delete ${reason.unreadableFile} and retry.` : `The file may be a recent incomplete write; retry after the file is older than the ten-minute grace window, or stop the relevant process before deleting it.`;
-      return [
-        `Magic Context cannot migrate the shared database because RPC discovery file ${reason.unreadableFile} is uncertain (${arm} arm), so the absence of a live process cannot be proven.`,
-        recovery,
-        `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
-      ].join(" ");
-    }
-    return [
-      `Magic Context cannot migrate the shared database (one database serves every project on this machine) because ${formatFailClosedBlockingProcesses(reason.blockingProcesses)} may be running an older Magic Context build that would fail against the migrated database.`,
-      `The database is at upstream migration v${reason.persistedVersion}; this build needs v${reason.supportedVersion}.`,
-      "Restart the blocking process — even one from a different project — and it will pick up the new build and migrate on start; or shut it down and retry.",
-      "If that host loads a pinned or cached older Magic Context build, a restart alone is not enough: stop it or update its Magic Context build, then start this host once so it migrates the database with nothing older attached.",
-      `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
-    ].join(" ");
-  }
-  if (reason.kind === "schema_fence") {
-    return [
-      `Magic Context cannot operate: this Magic Context build is older than the database; upgrade/restart this harness (upstream migration lane v${reason.persistedVersion}, build supports through v${reason.supportedVersion}).`,
-      `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
-    ].join(" ");
-  }
-  const cause = reason.cause.trim().length > 0 ? reason.cause.trim() : "unknown storage error";
-  return [
-    `Magic Context cannot operate: persistent storage failed (${cause}).`,
-    "The plugin will not silently degrade to native compaction while enabled.",
-    `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
-  ].join(" ");
-}
-function formatFailClosedBlockingSummary(reason) {
-  if (reason.kind === "migration_guard") {
-    if (reason.unreadableFile) {
-      return `Magic Context cannot migrate the shared database from v${reason.persistedVersion} to v${reason.supportedVersion}: RPC discovery file ${reason.unreadableFile} could not be read, so an older host may still be attached.`;
-    }
-    const blockers = reason.blockingProcesses.filter((process2) => Number.isInteger(process2.pid) && process2.pid > 0).map((process2) => `${normalizeFailClosedProcessKind(process2)} (PID ${process2.pid})`);
-    const named = blockers.length > 0 ? blockers.join(", ") : "a live process";
-    return `Magic Context cannot migrate the shared database from v${reason.persistedVersion} to v${reason.supportedVersion} while ${named} may still run an older Magic Context build. Stop or update that host, then start this one once.`;
-  }
-  if (reason.kind === "schema_fence") {
-    return `Magic Context cannot operate: the shared database is at v${reason.persistedVersion}, newer than this build supports (v${reason.supportedVersion}). Update and restart this host.`;
-  }
-  const cause = reason.cause.trim().length > 0 ? reason.cause.trim() : "unknown storage error";
-  return `Magic Context cannot operate: persistent storage failed (${cause}).`;
-}
-function createFailClosedBlockingError(reason, options) {
-  return new FailClosedBlockingError(formatFailClosedBlockingMessage(reason), reason, options);
-}
-function isFailClosedBlockingError(error) {
-  return error instanceof FailClosedBlockingError || typeof error === "object" && error !== null && error.name === "FailClosedBlockingError" && error.code === "FAIL_CLOSED_BLOCKING";
-}
-function shouldBypassFailClosedBlock(input) {
-  if (input.isPiSubagentEnv === true)
-    return true;
-  if (input.isInternalChildSession === true)
-    return true;
-  const agent = typeof input.agent === "string" ? input.agent.trim() : "";
-  if (agent.length === 0)
-    return false;
-  if (OPENCODE_INTERNAL_AGENT_NAMES.has(agent))
-    return true;
-  if (isMagicContextHiddenAgentName(agent))
-    return true;
-  return false;
-}
-function resolveAgentNameFromMessages(messages) {
-  for (let i = messages.length - 1;i >= 0; i -= 1) {
-    const info = messages[i]?.info;
-    if (!info || typeof info !== "object")
-      continue;
-    const agent = info.agent;
-    if (typeof agent === "string" && agent.length > 0)
-      return agent;
-  }
-  return;
-}
-
 // src/features/magic-context/message-fts-rowid-map.ts
 import { createHash as createHash6 } from "node:crypto";
 var MESSAGE_FTS_ROWID_MAP_BACKFILL_BATCH_SIZE = 100;
@@ -5452,6 +5409,9 @@ function startBootDeadline(timeoutMs, onDeferred) {
 }
 
 // src/features/magic-context/migration-worker-client.ts
+function workerStartError(detail) {
+  return new Error(`the migration worker could not start (${detail}); reinstall or rebuild the plugin`);
+}
 function defaultWorkerEntry() {
   return new URL(new URL(import.meta.url).pathname.endsWith(".ts") ? "./migration-worker.ts" : "./migration-worker.js", import.meta.url);
 }
@@ -5462,8 +5422,7 @@ function runMigrationsOffThread(data) {
     try {
       worker = new Worker(workerEntryOverride ?? defaultWorkerEntry(), { workerData: data });
     } catch (error) {
-      log(`[migrations] could not start the migration worker (${error instanceof Error ? error.message : String(error)}); applying migrations on the main thread`);
-      resolve("worker_unavailable");
+      reject(workerStartError(error instanceof Error ? error.message : String(error)));
       return;
     }
     log(`[migrations] applying pending migrations on a worker thread: ${data.dbPath}`);
@@ -5487,14 +5446,14 @@ function runMigrationsOffThread(data) {
     };
     const unavailable = (detail) => {
       settle(() => {
-        log(`[migrations] the migration worker did not start (${detail}); applying migrations on the main thread`);
-        resolve("worker_unavailable");
+        reject(workerStartError(detail));
       });
     };
     worker.on("message", (message) => {
       switch (message.type) {
         case "ready":
           ready = true;
+          log(`[migrations] migration worker ready: ${data.dbPath}`);
           return;
         case "log":
           writeForwardedLogLine(message.line);
@@ -5504,9 +5463,17 @@ function runMigrationsOffThread(data) {
             setBusy(!message.waiting);
           return;
         case "done":
+          if (!ready) {
+            unavailable("reported completion before ready");
+            return;
+          }
           settle(() => resolve("migrated"));
           return;
         case "failed":
+          if (!ready) {
+            unavailable(message.message);
+            return;
+          }
           settle(() => reject(new Error(message.message)));
           return;
       }
@@ -5808,38 +5775,14 @@ function getSchemaFenceRejection() {
 function getMigrationOnOpenRefusal() {
   return lastMigrationOnOpenRefusal;
 }
-var LATEST_SUPPORTED_VERSION = 94;
+var LATEST_SUPPORTED_VERSION = 95;
 var BOOT_SQLITE_BUSY_TIMEOUT_MS = 5000;
-var PERMISSIONS_ENFORCEABLE = process.platform !== "win32";
-var defaultStoragePermissionFs = { chmodSync, mkdirSync: mkdirSync2 };
-var storagePermissionFs = defaultStoragePermissionFs;
 function ensureSecureStorageDir(dir) {
-  if (!shouldEnforcePrivateStoragePermissions()) {
-    storagePermissionFs.mkdirSync(dir, { recursive: true });
-    return;
-  }
-  storagePermissionFs.mkdirSync(dir, { recursive: true, mode: 448 });
-  if (!PERMISSIONS_ENFORCEABLE)
-    return;
-  try {
-    storagePermissionFs.chmodSync(dir, 448);
-  } catch (error) {
-    log(`[magic-context] could not restrict storage dir permissions on ${dir}: ${getErrorMessage(error)}`);
-  }
+  ensureStorageDirectorySync(dir);
 }
-function restrictDatabaseFilePermissions(dbPath) {
-  if (!PERMISSIONS_ENFORCEABLE || !shouldEnforcePrivateStoragePermissions())
-    return;
-  for (const suffix of ["", "-wal", "-shm"]) {
-    const file = `${dbPath}${suffix}`;
-    if (!existsSync3(file))
-      continue;
-    try {
-      storagePermissionFs.chmodSync(file, 384);
-    } catch (error) {
-      log(`[magic-context] could not restrict DB file permissions on ${file}: ${getErrorMessage(error)}`);
-    }
-  }
+function tightenStorageTree(dir) {
+  const { failures } = tightenStorageTreeSync(dir);
+  log(`[magic-context] storage permission tightening failures=${failures}`);
 }
 function resolveBootBusyTimeoutMs(value) {
   if (value === undefined)
@@ -5875,6 +5818,7 @@ function migrateLegacyStorageIfNeeded(targetDbPath, targetDbDir) {
   try {
     const legacyDb = new Database(legacyDbPath);
     try {
+      configureContextDatabasePragmas(legacyDb, true);
       legacyDb.exec("PRAGMA wal_checkpoint(TRUNCATE)");
     } finally {
       closeQuietly(legacyDb);
@@ -5887,7 +5831,7 @@ function migrateLegacyStorageIfNeeded(targetDbPath, targetDbDir) {
     const dst = join2(targetDbDir, `context.db${suffix}`);
     if (existsSync3(src)) {
       try {
-        copyFileSync(src, dst);
+        copyStorageFileSync(src, dst);
       } catch (error) {
         log(`[magic-context] failed to copy ${src}:`, getErrorMessage(error));
       }
@@ -5897,7 +5841,7 @@ function migrateLegacyStorageIfNeeded(targetDbPath, targetDbDir) {
   const targetModelsDir = join2(targetDbDir, "models");
   if (existsSync3(legacyModelsDir) && !existsSync3(targetModelsDir)) {
     try {
-      cpSync(legacyModelsDir, targetModelsDir, { recursive: true });
+      copyStorageTreeSync(legacyModelsDir, targetModelsDir);
     } catch (error) {
       log("[magic-context] failed to copy embedding model cache:", getErrorMessage(error));
     }
@@ -6236,6 +6180,12 @@ function applySqliteTuningPragmas(db) {
   db.exec(`PRAGMA mmap_size=${Math.round(sqlitePragmaConfig.mmapSizeMb * 1024 * 1024)}`);
   db.exec("PRAGMA analysis_limit=400");
 }
+function runSqliteOptimize(db) {
+  try {
+    db.exec("PRAGMA analysis_limit=400");
+    db.exec("PRAGMA optimize");
+  } catch {}
+}
 function finishDatabaseOpen(db, dbPath, explicitDbPath, latestSupportedVersion) {
   if (!enforceSchemaFence(db, dbPath, latestSupportedVersion)) {
     closeQuietly(db);
@@ -6256,8 +6206,8 @@ function finishDatabaseOpen(db, dbPath, explicitDbPath, latestSupportedVersion)
       startMessageFtsRowidMapBackfill(db).then(async () => {
         if (!readsOpenCodeStore)
           return;
-        const { readRawSessionMessagePage, readRawSessionMessages } = await importPluginModule(() => import("./read-session-chunk-hjza38hr.js"));
-        const { startMessageTimeBackfill } = await importPluginModule(() => import("./message-time-backfill-0n93vrd7.js"));
+        const { readRawSessionMessagePage, readRawSessionMessages } = await importPluginModule(() => import("./read-session-chunk-8vjp6581.js"));
+        const { startMessageTimeBackfill } = await importPluginModule(() => import("./message-time-backfill-r6qkem1x.js"));
         await startMessageTimeBackfill(db, Object.assign(readRawSessionMessages, {
           readPage: readRawSessionMessagePage
         }));
@@ -6280,7 +6230,7 @@ function finishDatabaseOpen(db, dbPath, explicitDbPath, latestSupportedVersion)
   }
   setDatabase(db);
   loadToolDefinitionMeasurements(db);
-  restrictDatabaseFilePermissions(dbPath);
+  tightenStorageTree(dirname(dbPath));
   databases.set(dbPath, db);
   pathByDatabase.set(db, dbPath);
   persistenceByDatabase.set(db, true);
@@ -6293,7 +6243,7 @@ function finishDatabaseOpen(db, dbPath, explicitDbPath, latestSupportedVersion)
 function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
   db.exec(`PRAGMA busy_timeout=${resolveBootBusyTimeoutMs(busyTimeoutMs)}`);
   db.exec("PRAGMA foreign_keys=ON");
-  db.exec("PRAGMA journal_mode=WAL");
+  configureContextDatabasePragmas(db);
   applySqliteTuningPragmas(db);
   db.exec(`
     CREATE TABLE IF NOT EXISTS tags (
@@ -6355,7 +6305,6 @@ function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
       harness TEXT NOT NULL DEFAULT 'opencode',
       UNIQUE(session_id, sequence)
     );
-    CREATE INDEX IF NOT EXISTS idx_compartments_session ON compartments(session_id);
 
     CREATE TABLE IF NOT EXISTS compartment_chunk_embeddings (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -6416,7 +6365,6 @@ function initializeDatabase(db, busyTimeoutMs = BOOT_SQLITE_BUSY_TIMEOUT_MS) {
       harness TEXT NOT NULL DEFAULT 'opencode',
       PRIMARY KEY(session_id, message_ordinal)
     );
-    CREATE INDEX IF NOT EXISTS idx_compression_depth_session ON compression_depth(session_id);
 
     CREATE TABLE IF NOT EXISTS session_facts (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -6722,7 +6670,6 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       stale_reason           TEXT,
       PRIMARY KEY (project_path, path)
     );
-    CREATE INDEX IF NOT EXISTS idx_project_key_files_project ON project_key_files(project_path);
     CREATE INDEX IF NOT EXISTS idx_project_key_files_generated_at ON project_key_files(project_path, generated_at);
 
     CREATE TABLE IF NOT EXISTS project_key_files_version (
@@ -7107,10 +7054,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       input_tokens       INTEGER NOT NULL DEFAULT 0,
       PRIMARY KEY (session_id, harness, message_id)
     );
-    CREATE INDEX IF NOT EXISTS idx_transform_decisions_session_harness
-      ON transform_decisions(session_id, harness);
 
-    CREATE INDEX IF NOT EXISTS idx_tags_session_tag_number ON tags(session_id, tag_number);
     CREATE INDEX IF NOT EXISTS idx_tags_session_message_id ON tags(session_id, message_id);
 
     -- Clone/import paths can write tags before session bootstrap. Keep trigger-created
@@ -7156,9 +7100,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       WHERE NEW.session_id != OLD.session_id
       ON CONFLICT(session_id) DO UPDATE SET tags_version = tags_version + 1;
     END;
-    CREATE INDEX IF NOT EXISTS idx_pending_ops_session ON pending_ops(session_id);
     CREATE INDEX IF NOT EXISTS idx_pending_ops_session_tag_id ON pending_ops(session_id, tag_id);
-    CREATE INDEX IF NOT EXISTS idx_source_contents_session ON source_contents(session_id);
     
     CREATE TABLE IF NOT EXISTS recomp_compartments (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -7511,8 +7453,6 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
         input_tokens       INTEGER NOT NULL DEFAULT 0,
         PRIMARY KEY (session_id, harness, message_id)
       );
-      CREATE INDEX IF NOT EXISTS idx_transform_decisions_session_harness
-        ON transform_decisions(session_id, harness);
     `);
   ensureColumn(db, "transform_decisions", "system_hash_prev", "TEXT");
   ensureColumn(db, "transform_decisions", "system_hash_new", "TEXT");
@@ -7534,12 +7474,26 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
         ON message_history_index(harness, session_id, updated_at);
     `);
   ensureColumn(db, "workspaces", "share_categories", `TEXT NOT NULL DEFAULT '["CONSTRAINTS"]'`);
+  const version = getPersistedSchemaVersion(db);
+  if (version === 0 || version >= 95)
+    installV95PerfSchema(db, false, version === 0);
 }
 var CHANNEL2_CLAIM_TTL_MS = 10 * 60000;
+var channel2HealStatements = new WeakMap;
 function healWedgedChannel2Claims(db) {
   try {
     const staleBefore = Date.now() - CHANNEL2_CLAIM_TTL_MS;
-    db.prepare("UPDATE session_meta SET channel2_nudge_state = '', channel2_nudge_claimed_at = 0, channel2_nudge_claim_token = '' WHERE channel2_nudge_state = 'claimed' AND (channel2_nudge_claimed_at IS NULL OR channel2_nudge_claimed_at = 0 OR channel2_nudge_claimed_at <= ?)").run(staleBefore);
+    let statements = channel2HealStatements.get(db);
+    if (!statements) {
+      const predicate = "channel2_nudge_state = 'claimed' AND (channel2_nudge_claimed_at IS NULL OR channel2_nudge_claimed_at = 0 OR channel2_nudge_claimed_at <= ?)";
+      statements = {
+        stale: db.prepare(`SELECT 1 FROM session_meta WHERE ${predicate} LIMIT 1`),
+        heal: db.prepare(`UPDATE session_meta SET channel2_nudge_state = '', channel2_nudge_claimed_at = 0, channel2_nudge_claim_token = '' WHERE ${predicate}`)
+      };
+      channel2HealStatements.set(db, statements);
+    }
+    if (statements.stale.get(staleBefore))
+      statements.heal.run(staleBefore);
   } catch {}
 }
 function openDatabase(dbPathOrOptions) {
@@ -7571,18 +7525,38 @@ function openDatabase(dbPathOrOptions) {
       migrateLegacyStorageIfNeeded(dbPath, dbDir);
     }
     ensureSecureStorageDir(dbDir);
+    tightenStorageTree(dbDir);
+    if (!existsSync3(dbPath) && shouldEnforcePrivateStoragePermissions()) {
+      try {
+        writeStorageFileSync(dbPath, new Uint8Array, { flag: "wx" });
+      } catch (error) {
+        if (error.code !== "EEXIST")
+          throw error;
+      }
+    }
     db = new Database(dbPath);
     installBootBusyTimeout(db, dbPath, busyTimeoutMs, options?.onBootBusyTimeout);
     if (!enforceSchemaFence(db, dbPath, latestSupportedVersion)) {
       closeQuietly(db);
       return null;
     }
+    if (options?.allowMigrations === false && hasPendingMigrations(db)) {
+      log(`[magic-context] storage not ready: pending migrations at ${dbPath}; host callers must await the async opener`);
+      closeQuietly(db);
+      return null;
+    }
     if (!enforceMigrationOnOpenGuard(db, dbPath, dbDir, latestSupportedVersion)) {
       closeQuietly(db);
       return null;
     }
     initializeDatabase(db, busyTimeoutMs);
-    runMigrations(db);
+    if (options?.allowMigrations === false) {
+      if (hasPendingMigrations(db)) {
+        closeQuietly(db);
+        return null;
+      }
+    } else
+      runMigrations(db);
     ensureContextStoreUuid(db);
     return finishDatabaseOpen(db, dbPath, explicitDbPath, latestSupportedVersion);
   } catch (error) {
@@ -7593,6 +7567,9 @@ function openDatabase(dbPathOrOptions) {
     throw new Error(`[magic-context] storage unavailable: ${detail}. Magic Context is disabled for this run; check log for details.`);
   }
 }
+function openCurrentDatabase(options = {}) {
+  return openDatabase({ ...options, allowMigrations: false });
+}
 async function openDatabaseAsync(dbPathOrOptions) {
   const options = typeof dbPathOrOptions === "string" ? { dbPath: dbPathOrOptions } : dbPathOrOptions;
   const explicitDbPath = options?.dbPath !== undefined;
@@ -7620,8 +7597,12 @@ async function openDatabaseAsync(dbPathOrOptions) {
   const pending = pendingAsyncOpens.get(dbPath);
   if (pending)
     return pending;
+  if (!isFileBackedPath(dbPath)) {
+    throw new Error("async migration requires a file-backed database; use the explicit synchronous opener for in-memory or URI test databases");
+  }
   const opening = (async () => {
     let db;
+    const mainThreadBodiesBefore = getMainThreadMigrationBodyCount();
     const openStartedAt = performance.now();
     let openMs = 0;
     let guardMs = 0;
@@ -7632,6 +7613,15 @@ async function openDatabaseAsync(dbPathOrOptions) {
       if (!explicitDbPath)
         migrateLegacyStorageIfNeeded(dbPath, dbDir);
       ensureSecureStorageDir(dbDir);
+      tightenStorageTree(dbDir);
+      if (!existsSync3(dbPath) && shouldEnforcePrivateStoragePermissions()) {
+        try {
+          writeStorageFileSync(dbPath, new Uint8Array, { flag: "wx" });
+        } catch (error) {
+          if (error.code !== "EEXIST")
+            throw error;
+        }
+      }
       db = new Database(dbPath);
       installBootBusyTimeout(db, dbPath, busyTimeoutMs, options?.onBootBusyTimeout);
       openMs = performance.now() - openStartedAt;
@@ -7649,15 +7639,20 @@ async function openDatabaseAsync(dbPathOrOptions) {
       }
       guardMs = performance.now() - guardStartedAt;
       migrateStartedAt = performance.now();
-      if (isFileBackedPath(dbPath) && hasPendingMigrations(db)) {
+      if (hasPendingMigrations(db)) {
         await runMigrationsOffThread({
           dbPath,
           busyTimeoutMs,
           sqlitePragmaConfig: { ...sqlitePragmaConfig }
         });
       }
+      if (hasPendingMigrations(db)) {
+        throw new Error("the migration worker did not complete the pending migration; reinstall or rebuild the plugin");
+      }
       initializeDatabase(db, busyTimeoutMs);
-      await runMigrationsWithRetry(db);
+      if (hasPendingMigrations(db)) {
+        throw new Error("storage initialization left a pending migration; reinstall or rebuild the plugin");
+      }
       ensureContextStoreUuid(db);
       const opened = finishDatabaseOpen(db, dbPath, explicitDbPath, latestSupportedVersion);
       migrateMs = performance.now() - migrateStartedAt;
@@ -7669,6 +7664,7 @@ async function openDatabaseAsync(dbPathOrOptions) {
       log(`[magic-context] storage fatal: failed to open ${dbPath}: ${detail}`);
       throw new Error(`[magic-context] storage unavailable: ${detail}. Magic Context is disabled for this run; check log for details.`);
     } finally {
+      log(`[migrations] async open main-thread migration-body count: ${getMainThreadMigrationBodyCount() - mainThreadBodiesBefore} (total=${getMainThreadMigrationBodyCount()}) path=${dbPath}`);
       if (openMs === 0)
         openMs = performance.now() - openStartedAt;
       if (guardStartedAt !== null && guardMs === 0) {
@@ -7699,4 +7695,4 @@ function getDatabasePersistenceError(db) {
   return persistenceErrorByDatabase.get(db) ?? null;
 }
 
-export { FAIL_CLOSED_DOCTOR_COMMAND, formatFailClosedBlockingMessage, formatFailClosedBlockingSummary, createFailClosedBlockingError, isFailClosedBlockingError, shouldBypassFailClosedBlock, resolveAgentNameFromMessages, canonicalProjectDirectory, setHomeProjectPermission, shouldSkipHomeProjectMemory, ProjectIdentityError, takeDubiousOwnershipProjectIdentityWarning, isUserHomeDirectory, resolveProjectIdentity, directoryHasGitMetadata, describeUnresolvedProjectIdentity, isUsableProjectIdentity, resolveProjectIdentityForSession, normalizeStoredProjectPath, storedPathBelongsToIdentity, recordMessageFtsRowid, messageFtsOrdinalRangeIsMapped, deleteUnmappedMessageFtsRows, registerOwnRpcServerInstance, rpcPortDir, rpcPortFilePath, isPidAlive, parseRpcPortFile, inspectProcessesAsync, V2_MEMORY_CATEGORIES, PROMOTABLE_CATEGORIES, CATEGORY_PRIORITY, getMemoryCategoryOrder, CATEGORY_DEFAULT_TTL, unescapeXml, parseCompartmentOutput, layoutLkgPrefix, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, resolveStoredPathWorkspaceIdentity, storedPathBelongsToWorkspace, sourceNameForMemory, computeWorkspaceEpochFingerprint, managedAuthorityNoteRow, runMigrationsWithRetry, scheduleAfterBootQuiet, startBootDeadline, getUnconfirmedMigrationHolders, getSchemaFenceRejection, getMigrationOnOpenRefusal, LATEST_SUPPORTED_VERSION, BOOT_SQLITE_BUSY_TIMEOUT_MS, getPersistedSchemaVersion, setSqlitePragmaConfig, initializeDatabase, openDatabase, openDatabaseAsync, isDatabasePersisted, getDatabasePersistenceError };
+export { FAIL_CLOSED_DOCTOR_COMMAND, formatFailClosedBlockingMessage, formatFailClosedBlockingSummary, createFailClosedBlockingError, isFailClosedBlockingError, shouldBypassFailClosedBlock, resolveAgentNameFromMessages, canonicalProjectDirectory, setHomeProjectPermission, shouldSkipHomeProjectMemory, ProjectIdentityError, takeDubiousOwnershipProjectIdentityWarning, isUserHomeDirectory, resolveProjectIdentity, directoryHasGitMetadata, describeUnresolvedProjectIdentity, isUsableProjectIdentity, resolveProjectIdentityForSession, normalizeStoredProjectPath, storedPathBelongsToIdentity, recordMessageFtsRowid, messageFtsOrdinalRangeIsMapped, deleteUnmappedMessageFtsRows, registerOwnRpcServerInstance, rpcPortDir, rpcPortFilePath, isPidAlive, parseRpcPortFile, inspectProcessesAsync, V2_MEMORY_CATEGORIES, PROMOTABLE_CATEGORIES, CATEGORY_PRIORITY, getMemoryCategoryOrder, CATEGORY_DEFAULT_TTL, unescapeXml, parseCompartmentOutput, layoutLkgPrefix, assembleLkgPrefix, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, resolveStoredPathWorkspaceIdentity, storedPathBelongsToWorkspace, sourceNameForMemory, computeWorkspaceEpochFingerprint, managedAuthorityNoteRow, runMigrationsWithRetry, beginBootQuietPeriod, scheduleAfterBootQuiet, startBootDeadline, getUnconfirmedMigrationHolders, getSchemaFenceRejection, getMigrationOnOpenRefusal, LATEST_SUPPORTED_VERSION, BOOT_SQLITE_BUSY_TIMEOUT_MS, getPersistedSchemaVersion, setSqlitePragmaConfig, runSqliteOptimize, initializeDatabase, openDatabase, openCurrentDatabase, openDatabaseAsync, isDatabasePersisted, getDatabasePersistenceError };