@cortexkit/opencode-magic-context 0.46.1 → 0.48.0

package/src/agents/smart-notes-on.golden.json

@@ -0,0 +1,70 @@
+{
+  "opencode/full": "ee8313665a36e94be315b564c3959c21644c6b13a6e80de86aff8492a7948248",
+  "pi/full": "06d5cdfa5922dc889f8924e40ed60a76055b6f008614f552c11249dbba7ccf32",
+  "guidance/full/false/false/false/false": "5fd6f9d5ceadc9afb6c2e5f6f1359ee0fb51d03afa17d002a503a9958941fa84",
+  "pi-guidance/full/false/false/false/false": "5fd6f9d5ceadc9afb6c2e5f6f1359ee0fb51d03afa17d002a503a9958941fa84",
+  "guidance/full/false/false/false/true": "c07904e2985b91a3bfec547cbd3e6aa3b6eee9e2d0fed49df2aa701bbc927998",
+  "pi-guidance/full/false/false/false/true": "c07904e2985b91a3bfec547cbd3e6aa3b6eee9e2d0fed49df2aa701bbc927998",
+  "guidance/full/false/false/true/false": "5d2a13e49719520f4282b4cba6c234eed5882eae7d656e5f7fb98e7d3905ebb5",
+  "pi-guidance/full/false/false/true/false": "5d2a13e49719520f4282b4cba6c234eed5882eae7d656e5f7fb98e7d3905ebb5",
+  "guidance/full/false/false/true/true": "5ba23e90d969f1a25f51e7de836601156be6353ec8d7a1361f34a5961436146a",
+  "pi-guidance/full/false/false/true/true": "5ba23e90d969f1a25f51e7de836601156be6353ec8d7a1361f34a5961436146a",
+  "guidance/full/false/true/false/false": "3a398d32bc9eea87978aca46679149ff2d7f37ee42e3bdedad3c500505cbf400",
+  "pi-guidance/full/false/true/false/false": "3a398d32bc9eea87978aca46679149ff2d7f37ee42e3bdedad3c500505cbf400",
+  "guidance/full/false/true/false/true": "eec86c8a69bff34341b30398dc526945ad20648e3b1cb4b67c058dc1dbf98ef8",
+  "pi-guidance/full/false/true/false/true": "eec86c8a69bff34341b30398dc526945ad20648e3b1cb4b67c058dc1dbf98ef8",
+  "guidance/full/false/true/true/false": "ad7927d9deb91b2ca5c357ff6bd8d932619f90cb8cdf39e27ec6bc6742ed7763",
+  "pi-guidance/full/false/true/true/false": "ad7927d9deb91b2ca5c357ff6bd8d932619f90cb8cdf39e27ec6bc6742ed7763",
+  "guidance/full/false/true/true/true": "569aeb5e7a7132c89e4b0b78e7ecc1791b14d530a659d7334eff67e54ad14ae8",
+  "pi-guidance/full/false/true/true/true": "569aeb5e7a7132c89e4b0b78e7ecc1791b14d530a659d7334eff67e54ad14ae8",
+  "guidance/full/true/false/false/false": "f1f0a1c4df72890afdefcb08db70ecdb3cdba8c61b0a9c56b3e1370cca598d26",
+  "pi-guidance/full/true/false/false/false": "f1f0a1c4df72890afdefcb08db70ecdb3cdba8c61b0a9c56b3e1370cca598d26",
+  "guidance/full/true/false/false/true": "b53542325bb0e5d69adf12e098d8e45e6f73990770a06536545bb13b56872444",
+  "pi-guidance/full/true/false/false/true": "b53542325bb0e5d69adf12e098d8e45e6f73990770a06536545bb13b56872444",
+  "guidance/full/true/false/true/false": "c6081025c0af192d6f63d6d6f1ebeee1f1e134f8174d90de643d3b156c84b5e9",
+  "pi-guidance/full/true/false/true/false": "c6081025c0af192d6f63d6d6f1ebeee1f1e134f8174d90de643d3b156c84b5e9",
+  "guidance/full/true/false/true/true": "c8ee6b3237719e4c908241e651f36aa90562ee54a4854b5f5d3ec87e99605db5",
+  "pi-guidance/full/true/false/true/true": "c8ee6b3237719e4c908241e651f36aa90562ee54a4854b5f5d3ec87e99605db5",
+  "guidance/full/true/true/false/false": "e46393931592b92a96d887a634f11c8970239e753f245c777ff43583356dc73a",
+  "pi-guidance/full/true/true/false/false": "e46393931592b92a96d887a634f11c8970239e753f245c777ff43583356dc73a",
+  "guidance/full/true/true/false/true": "34e98b5c45d9dfc97ce50bb08d62a5064dc628dd371e4289b5f3c0b9a108b335",
+  "pi-guidance/full/true/true/false/true": "34e98b5c45d9dfc97ce50bb08d62a5064dc628dd371e4289b5f3c0b9a108b335",
+  "guidance/full/true/true/true/false": "77aaa97847d1cf96b947664a48656cb32ae9c0354882746c2e9961785acc5ce3",
+  "pi-guidance/full/true/true/true/false": "77aaa97847d1cf96b947664a48656cb32ae9c0354882746c2e9961785acc5ce3",
+  "guidance/full/true/true/true/true": "224fe7ba3904c53b0fa22d079ec7cb7c4a132d8092dade80a86c44d56f588831",
+  "pi-guidance/full/true/true/true/true": "224fe7ba3904c53b0fa22d079ec7cb7c4a132d8092dade80a86c44d56f588831",
+  "opencode/light": "203313946dd10c99b0e8ae9ddd47bd3f5d7568d6571eb189babb7cb59ef6a2f0",
+  "pi/light": "2ab9c355546c723f51df122a04d325ab7e0c700078c30e44452a5eee3d7e37ee",
+  "guidance/light/false/false/false/false": "a8713eda6b4d8888f584a9740b69b72c57f1cdff04bc675844c1caa0c95557d7",
+  "pi-guidance/light/false/false/false/false": "a8713eda6b4d8888f584a9740b69b72c57f1cdff04bc675844c1caa0c95557d7",
+  "guidance/light/false/false/false/true": "7a99730b51c8dd094d052288bb54f9d1b2563ade3cbfafa190496b6fe18e461c",
+  "pi-guidance/light/false/false/false/true": "7a99730b51c8dd094d052288bb54f9d1b2563ade3cbfafa190496b6fe18e461c",
+  "guidance/light/false/false/true/false": "1a866792b99c84f884941c6a5b269c5df9af394f1bbcba8893a7ea7a60ccd6e0",
+  "pi-guidance/light/false/false/true/false": "1a866792b99c84f884941c6a5b269c5df9af394f1bbcba8893a7ea7a60ccd6e0",
+  "guidance/light/false/false/true/true": "468fa55f0a35d503787bce7829352e522ef577cd9869b6c14eeb8c8c810c18e5",
+  "pi-guidance/light/false/false/true/true": "468fa55f0a35d503787bce7829352e522ef577cd9869b6c14eeb8c8c810c18e5",
+  "guidance/light/false/true/false/false": "e57d504f74b82f22ae334424accfee415638e266e14f960f1fabd30d5729aca9",
+  "pi-guidance/light/false/true/false/false": "e57d504f74b82f22ae334424accfee415638e266e14f960f1fabd30d5729aca9",
+  "guidance/light/false/true/false/true": "c8ed1794cf9ad0d3b3f0bf8e1372e5993f83d860c3459f05727c241444101ad4",
+  "pi-guidance/light/false/true/false/true": "c8ed1794cf9ad0d3b3f0bf8e1372e5993f83d860c3459f05727c241444101ad4",
+  "guidance/light/false/true/true/false": "bab2bf005b8faa918f91cb280678e571329095ba3d02212fd5360eea3aeb06d5",
+  "pi-guidance/light/false/true/true/false": "bab2bf005b8faa918f91cb280678e571329095ba3d02212fd5360eea3aeb06d5",
+  "guidance/light/false/true/true/true": "985cc5f091691be624e9e493268cafbf543b39e4eccb67f9cdfb12be75d5543a",
+  "pi-guidance/light/false/true/true/true": "985cc5f091691be624e9e493268cafbf543b39e4eccb67f9cdfb12be75d5543a",
+  "guidance/light/true/false/false/false": "6fd77355947d510c275f593b87fc013c2ccac439bd3db6ac2f5c1160cb755626",
+  "pi-guidance/light/true/false/false/false": "6fd77355947d510c275f593b87fc013c2ccac439bd3db6ac2f5c1160cb755626",
+  "guidance/light/true/false/false/true": "8ea26079e952c2cf10730070d46ee072ed0c1346fd41cf4bbfd3cd222dfc4b3b",
+  "pi-guidance/light/true/false/false/true": "8ea26079e952c2cf10730070d46ee072ed0c1346fd41cf4bbfd3cd222dfc4b3b",
+  "guidance/light/true/false/true/false": "0c18e3350478eac6f4f412def32bb0373bf4e34e028c22db0aa764afbab8d9b5",
+  "pi-guidance/light/true/false/true/false": "0c18e3350478eac6f4f412def32bb0373bf4e34e028c22db0aa764afbab8d9b5",
+  "guidance/light/true/false/true/true": "b6c622ace8b3a722750f13930ef27bf849ee2b06fa49a4d70095b7d98a08da8b",
+  "pi-guidance/light/true/false/true/true": "b6c622ace8b3a722750f13930ef27bf849ee2b06fa49a4d70095b7d98a08da8b",
+  "guidance/light/true/true/false/false": "d4da84246319941f74b26e7fbf569d875fe66f3b336b3e43c1dbca1906c895e0",
+  "pi-guidance/light/true/true/false/false": "d4da84246319941f74b26e7fbf569d875fe66f3b336b3e43c1dbca1906c895e0",
+  "guidance/light/true/true/false/true": "155ced931db6255047bc9122452f6eb0dbd83d3bc6160d6295ca26a3f5baac15",
+  "pi-guidance/light/true/true/false/true": "155ced931db6255047bc9122452f6eb0dbd83d3bc6160d6295ca26a3f5baac15",
+  "guidance/light/true/true/true/false": "bf0bd6e2b793b580560ce9bb18d039ac375abec3a09a986dc406b081b5ad9079",
+  "pi-guidance/light/true/true/true/false": "bf0bd6e2b793b580560ce9bb18d039ac375abec3a09a986dc406b081b5ad9079",
+  "guidance/light/true/true/true/true": "6e94bb838eba4d1ebe6ae6205f90fb45589dcce3af6352baa1466eeca437f652",
+  "pi-guidance/light/true/true/true/true": "6e94bb838eba4d1ebe6ae6205f90fb45589dcce3af6352baa1466eeca437f652"
+}

package/src/config/index.test.ts

@@ -4,7 +4,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { resolveEpochFloorForPass } from "../features/magic-context/storage-meta-persisted";
 import { buildOpenCodeConfigWarningBanner } from "../shared/config-warning-surface";
-import { resolveHistorianModel } from "../shared/model-resolution";
+import { resolveDreamerTaskModel, resolveHistorianModel } from "../shared/model-resolution";
 import { Database } from "../shared/sqlite";
 import { createTestTempDir, createTestTempDirFromPath } from "../shared/test-temp-dir";
 import {
@@ -13,6 +13,7 @@ import {
     setWindowOverlayPath,
 } from "../shared/window-geometry";
 import { loadPluginConfig, loadPluginConfigDetailed } from "./index";
+import { MURAL_MODEL_DEPRECATION_WARNING } from "./mural-model-deprecation";
 import { resolveConfigProfile } from "./profiles";
 import { getProtectedTokensTierOverrides } from "./project-security";
 import { REMOVED_AGENT_CONFIG_WARNING } from "./removed-agent-config";
@@ -269,6 +270,71 @@ describe("loadPluginConfig — graduated mural config", () => {
             expect.stringContaining('Deprecated "experimental.mural"'),
         );
     });
+
+    it("loads a config with the retired mural.model, warns once, and leaves compress-cues on the dreamer model", () => {
+        const result = loadWithUserConfig(
+            JSON.stringify({
+                mural: { enabled: true, model: "google/antigravity-gemini-3.8-flash" },
+                dreamer: {
+                    opencode: { model: "open/dreamer-default" },
+                    pi: { model: "pi/dreamer-default" },
+                },
+            }),
+        );
+
+        expect(result.mural.enabled).toBe(true);
+        expect(
+            (result.configWarnings ?? []).filter((w) =>
+                w.endsWith(MURAL_MODEL_DEPRECATION_WARNING),
+            ),
+        ).toHaveLength(1);
+        expect(MURAL_MODEL_DEPRECATION_WARNING).toContain("mural.model");
+        expect(
+            resolveDreamerTaskModel({ config: result, harness: "opencode", task: "compress-cues" })
+                .primary,
+        ).toEqual({ model: "open/dreamer-default" });
+        expect(
+            resolveDreamerTaskModel({ config: result, harness: "pi", task: "compress-cues" })
+                .primary,
+        ).toEqual({ model: "pi/dreamer-default" });
+    });
+
+    it("emits no mural.model warning when the key is absent", () => {
+        const result = loadWithUserConfig(JSON.stringify({ mural: { enabled: true } }));
+
+        expect((result.configWarnings ?? []).some((w) => w.includes("mural.model"))).toBe(false);
+    });
+
+    it("lets a project choose the compress-cues task model like any other dreamer task model", () => {
+        const result = loadWithUserAndProjectConfig(
+            JSON.stringify({ dreamer: { opencode: { model: "open/user-default" } } }),
+            JSON.stringify({
+                mural: { model: "repo/ignored" },
+                dreamer: {
+                    opencode: {
+                        tasks: {
+                            "compress-cues": { model: "open/project-cues" },
+                            curate: { model: "open/project-curate" },
+                        },
+                    },
+                },
+            }),
+        );
+
+        expect(
+            resolveDreamerTaskModel({ config: result, harness: "opencode", task: "compress-cues" })
+                .primary,
+        ).toEqual({ model: "open/project-cues" });
+        expect(
+            resolveDreamerTaskModel({ config: result, harness: "opencode", task: "curate" })
+                .primary,
+        ).toEqual({ model: "open/project-curate" });
+        expect(
+            (result.configWarnings ?? []).filter((w) =>
+                w.endsWith(MURAL_MODEL_DEPRECATION_WARNING),
+            ),
+        ).toHaveLength(1);
+    });
 });
 
 describe("loadPluginConfig — transform mode resolution", () => {

package/src/config/index.ts

@@ -25,6 +25,7 @@ import {
 } from "./migrate-config-location";
 import { migrateDreamerV2 } from "./migrate-dreamer-v2";
 import { migrateLegacyExperimental } from "./migrate-experimental";
+import { warnDeprecatedMuralModel } from "./mural-model-deprecation";
 import { resolveConfigProfile } from "./profiles";
 import {
     attachProtectedTokensTierOverrides,
@@ -415,6 +416,12 @@ export function parsePluginConfig(
     // opt-in/out state survives upgrades even when they never run `doctor`.
     const preMigrationWarnings: string[] = [];
     const configWithoutRemovedAgent = stripRemovedAgentConfig(rawConfig, preMigrationWarnings);
+    if (Object.hasOwn(rawConfig, "clear_reasoning_age")) {
+        const warning =
+            "clear_reasoning_age is deprecated and ignored. Magic Context now keeps reasoning up to a token budget, keep_reasoning_tokens (default 10,000). Remove the key, or set keep_reasoning_tokens to a token count.";
+        preMigrationWarnings.push(warning);
+        log(`[magic-context] ${warning}`);
+    }
     if (Object.hasOwn(rawConfig, "protected_tags")) {
         warnProtectedTagsDeprecationOnce();
         preMigrationWarnings.push(
@@ -431,6 +438,7 @@ export function parsePluginConfig(
         configWithoutRemovedAgent,
         preMigrationWarnings,
     );
+    warnDeprecatedMuralModel(migratedExperimental, preMigrationWarnings);
     // Dreamer v2: convert the legacy v1 dreamer shape (window schedule, tasks
     // array, user_memories/pin_key_files blocks) into the per-task `tasks` record.
     // Runs AFTER migrate-experimental so experimental.user_memories (already

package/src/config/latch-permanence-guard.test.ts

@@ -53,6 +53,10 @@ const KNOWN_SLOTS: Record<string, KnownSlot> = {
         classification: "VERDICT",
         reason: "Correct: circuit state expires and a half-open probe re-evaluates the endpoint.",
     },
+    "packages/plugin/src/hooks/magic-context/raw-ordinal-warmup.ts:exitHookRegistered": {
+        classification: "PUBLICATION",
+        reason: "Correct: records that the one process-exit handler stopping canonical-ordinal warm-up workers is installed; it holds no failure or absence verdict.",
+    },
     "packages/plugin/src/features/magic-context/memory/project-identity.ts:homeProjectPermission": {
         classification: "VERDICT",
         reason: "Boot config publishes the home-project permission; the setter replaces it on another host initialization, while explicit resolution arguments override it.",

package/src/config/live-run-config.test.ts

@@ -7,7 +7,7 @@ import {
     userMemoryCollectionEnabled,
 } from "../features/magic-context/dreamer/task-config";
 import { producerInputTokenLimit } from "../hooks/magic-context/producer-window-guard";
-import { resolveHistorianModel } from "../shared/model-resolution";
+import { resolveDreamerTaskModel, resolveHistorianModel } from "../shared/model-resolution";
 import { createTestTempDirFromPath } from "../shared/test-temp-dir";
 import { loadPluginConfigDetailed } from "./index";
 import { dreamerRunConfig, historianRunConfig } from "./live-run-config";
@@ -248,3 +248,39 @@ test("malformed project config retains last good values and deduplicates the war
         rmSync(root, { recursive: true, force: true });
     }
 });
+
+test("OMP keeps the pi historian and dreamer models when the config has no omp block", () => {
+    // Live sampling used to create empty parent objects for every live path. An empty
+    // `omp` block then shadowed the `pi` block OMP falls back to, and OMP ran the
+    // historian and dreamer on its own default model.
+    const config = {
+        historian: { pi: { model: "anthropic/claude-sonnet-5-5" } },
+        dreamer: {
+            pi: {
+                model: "anthropic/claude-sonnet-5-5",
+                tasks: { curate: { model: "openai/gpt-6-luna" } },
+            },
+        },
+    } as unknown as Parameters<typeof historianRunConfig>[0];
+    for (const sampled of [historianRunConfig(config, config), dreamerRunConfig(config, config)]) {
+        expect((sampled as { historian?: Record<string, unknown> }).historian?.omp).toBeUndefined();
+        expect((sampled as { dreamer?: Record<string, unknown> }).dreamer?.omp).toBeUndefined();
+        expect(resolveHistorianModel(sampled, "omp").primary?.model).toBe(
+            "anthropic/claude-sonnet-5-5",
+        );
+        expect(
+            resolveDreamerTaskModel({ config: sampled, harness: "omp", task: "curate" }).primary
+                ?.model,
+        ).toBe("openai/gpt-6-luna");
+    }
+});
+
+test("live sampling clears a key removed from the fresh config without touching the boot object", () => {
+    const boot = {
+        historian: { pi: { model: "anthropic/claude-sonnet-5-5" } },
+    } as unknown as Parameters<typeof historianRunConfig>[0];
+    const fresh = { historian: { pi: {} } } as unknown as Parameters<typeof historianRunConfig>[0];
+    const sampled = historianRunConfig(boot, fresh);
+    expect(resolveHistorianModel(sampled, "pi").primary).toBeUndefined();
+    expect(resolveHistorianModel(boot, "pi").primary?.model).toBe("anthropic/claude-sonnet-5-5");
+});

package/src/config/live-run-config.ts

@@ -11,6 +11,14 @@ export function sampleLiveConfig<T extends MagicContextConfig>(boot: T, fresh: T
         const parts = path.split(".");
         let value: unknown = fresh;
         for (const part of parts) value = (value as Record<string, unknown> | undefined)?.[part];
+        if (value === undefined) {
+            // An unset live path must not create its parent objects. An empty `omp`
+            // block, for example, shadows the `pi` block it would otherwise fall back
+            // to, and the historian and dreamer lose their configured model. Only
+            // clear a leaf the boot config actually has, so removing a key live works.
+            removeLeaf(result, parts);
+            continue;
+        }
         let target = result;
         for (const part of parts.slice(0, -1)) {
             const child = target[part];
@@ -27,6 +35,26 @@ export function sampleLiveConfig<T extends MagicContextConfig>(boot: T, fresh: T
     return result as T;
 }
 
+function removeLeaf(root: Record<string, unknown>, parts: string[]): void {
+    const parents = parts.slice(0, -1);
+    let node: Record<string, unknown> = root;
+    for (const part of parents) {
+        const child = node[part];
+        if (!child || typeof child !== "object" || Array.isArray(child)) return;
+        node = child as Record<string, unknown>;
+    }
+    const leaf = parts.at(-1);
+    if (leaf === undefined || !Object.hasOwn(node, leaf)) return;
+    // Copy the parent chain before deleting so the boot config object is never mutated.
+    let target = root;
+    for (const part of parents) {
+        const copy = { ...(target[part] as Record<string, unknown>) };
+        target[part] = copy;
+        target = copy;
+    }
+    delete target[leaf];
+}
+
 export function changedLiveKeys(previous: MagicContextConfig, next: MagicContextConfig): string[] {
     const at = (config: MagicContextConfig, path: string): unknown =>
         path

package/src/config/migrate-config-location.ts

@@ -278,7 +278,7 @@ function sortJson(value: unknown): unknown {
     if (value && typeof value === "object") {
         const sorted: Record<string, unknown> = {};
         for (const key of Object.keys(value as Record<string, unknown>).sort()) {
-            if (key === "protected_tags") continue;
+            if (key === "protected_tags" || key === "clear_reasoning_age") continue;
             sorted[key] = sortJson((value as Record<string, unknown>)[key]);
         }
         return sorted;
@@ -509,7 +509,9 @@ export function migrateConfigFile(opts: ConfigFileMigrationOptions): ConfigFileM
         let migratedContent = first.content;
         let strippedProtectedTags = false;
         try {
-            const stripped = removeJsoncValue(first.content, ["protected_tags"]);
+            const stripped = removeJsoncValue(removeJsoncValue(first.content, ["protected_tags"]), [
+                "clear_reasoning_age",
+            ]);
             if (stripped !== first.content) {
                 migratedContent = stripped;
                 strippedProtectedTags = true;
@@ -520,7 +522,12 @@ export function migrateConfigFile(opts: ConfigFileMigrationOptions): ConfigFileM
 
         atomicWriteConfigFile(opts.targetPath, migratedContent);
         if (strippedProtectedTags) {
-            info?.(`Stripped deprecated "protected_tags" key during config location migration`);
+            if (first.content.includes('"protected_tags"'))
+                info?.(`Stripped deprecated "protected_tags" key during config location migration`);
+            if (first.content.includes('"clear_reasoning_age"'))
+                info?.(
+                    `Stripped deprecated "clear_reasoning_age" key during config location migration`,
+                );
         }
         info?.(
             `Migrated Magic Context ${opts.scope} config from ${first.path} to ${opts.targetPath}`,

package/src/config/mural-model-deprecation.ts

@@ -0,0 +1,24 @@
+/**
+ * `mural.model` used to name one cue-compressor model shared by every harness.
+ * Model ids differ per harness (OpenCode and Pi spell the same model with
+ * different provider prefixes), so a single string could not name a working
+ * model on every host. compress-cues now resolves through each harness's
+ * dreamer settings like every other dreamer task, and the key is ignored.
+ */
+export const MURAL_MODEL_DEPRECATION_WARNING =
+    "mural.model is deprecated and ignored; compress-cues now uses the dreamer model for each harness, like every other dreamer task. To override it, set dreamer.opencode.tasks.compress-cues.model (or the pi/omp equivalent). This key no longer does anything; remove it.";
+
+/**
+ * Pushes the deprecation warning when the config still sets `mural.model`.
+ * Call it after the legacy experimental migration so the pre-graduation
+ * `experimental.mural.model` spelling is reported the same way.
+ */
+export function warnDeprecatedMuralModel(
+    config: Record<string, unknown>,
+    warnings: string[],
+): void {
+    const mural = config.mural;
+    if (typeof mural === "object" && mural !== null && Object.hasOwn(mural, "model")) {
+        warnings.push(MURAL_MODEL_DEPRECATION_WARNING);
+    }
+}

package/src/config/project-security.hostile-matrix.test.ts

@@ -112,7 +112,6 @@ function ocTaskBlock(): Record<string, unknown> {
         fallback_models: [ocEntry()],
         variant: "task-variant",
         timeout_minutes: 45,
-        mural: { model: "hostile/task-mural" },
         ...ESCALATION_VALUE,
     };
 }
@@ -123,14 +122,13 @@ function piTaskBlock(): Record<string, unknown> {
         fallback_models: [piEntry()],
         thinking_level: "high",
         timeout_minutes: 45,
-        mural: { model: "hostile/task-mural" },
         ...ESCALATION_VALUE,
     };
 }
 
 /**
  * One project-tier config that plants a value at every executable nested path
- * the per-harness schema admits, plus smuggled escalation / mural / extra
+ * the per-harness schema admits, plus smuggled escalation / extra
  * fields at those same depths.
  */
 function buildHostileProjectConfig(): Record<string, unknown> {
@@ -156,8 +154,7 @@ function buildHostileProjectConfig(): Record<string, unknown> {
                 historian: { opencode: { model: "hostile/profile-historian" } },
             },
         },
-        mural: { enabled: true, model: "hostile/top-mural" },
-        experimental: { mural: { enabled: true, model: "hostile/experimental-mural" } },
+        mural: { enabled: true },
         historian: {
             model: "hostile/flat-historian",
             fallback_models: ["hostile/flat-fallback"],
@@ -170,21 +167,18 @@ function buildHostileProjectConfig(): Record<string, unknown> {
                 model: ocEntry(),
                 fallback_models: [ocEntry()],
                 variant: "hostile-historian-variant",
-                mural: { model: "hostile/historian-oc-mural" },
                 ...ESCALATION_VALUE,
             },
             pi: {
                 model: piEntry(),
                 fallback_models: [piEntry()],
                 thinking_level: "max",
-                mural: { model: "hostile/historian-pi-mural" },
                 ...ESCALATION_VALUE,
             },
             omp: {
                 model: piEntry(),
                 fallback_models: [piEntry()],
                 thinking_level: "auto",
-                mural: { model: "hostile/historian-omp-mural" },
                 ...ESCALATION_VALUE,
             },
         },
@@ -197,7 +191,6 @@ function buildHostileProjectConfig(): Record<string, unknown> {
                 model: ocEntry(),
                 fallback_models: [ocEntry()],
                 variant: "hostile-dreamer-variant",
-                mural: { model: "hostile/dreamer-oc-mural" },
                 tasks: ocTasks,
                 ...ESCALATION_VALUE,
             },
@@ -205,7 +198,6 @@ function buildHostileProjectConfig(): Record<string, unknown> {
                 model: piEntry(),
                 fallback_models: [piEntry()],
                 thinking_level: "medium",
-                mural: { model: "hostile/dreamer-pi-mural" },
                 tasks: piTasks,
                 ...ESCALATION_VALUE,
             },
@@ -213,7 +205,6 @@ function buildHostileProjectConfig(): Record<string, unknown> {
                 model: piEntry(),
                 fallback_models: [piEntry()],
                 thinking_level: "auto",
-                mural: { model: "hostile/dreamer-omp-mural" },
                 tasks: ompTasks,
                 ...ESCALATION_VALUE,
             },
@@ -319,25 +310,6 @@ function nestedEscalationPaths(): string[] {
     return paths;
 }
 
-function nestedMuralModelPaths(): string[] {
-    const paths = [
-        "mural.model",
-        "experimental.mural.model",
-        "historian.opencode.mural.model",
-        "historian.pi.mural.model",
-        "historian.omp.mural.model",
-        "dreamer.opencode.mural.model",
-        "dreamer.pi.mural.model",
-        "dreamer.omp.mural.model",
-    ];
-    for (const task of CANONICAL_DREAM_TASKS) {
-        paths.push(`dreamer.opencode.tasks.${task}.mural.model`);
-        paths.push(`dreamer.pi.tasks.${task}.mural.model`);
-        paths.push(`dreamer.omp.tasks.${task}.mural.model`);
-    }
-    return paths;
-}
-
 function loadWithUserAndProjectConfig(userConfigText: string, projectConfigText: string) {
     const xdg = createTestTempDirFromPath(join(tmpdir(), "mc-hostile-user-"));
     const projectDir = createTestTempDirFromPath(join(tmpdir(), "mc-hostile-proj-"));
@@ -422,21 +394,13 @@ describe("hostile-config stripping matrix", () => {
             if (hasOwnPath(raw, path)) survived.push(`escalation:${path}`);
             else removed.push(path);
         }
-        for (const path of nestedMuralModelPaths()) {
-            if (hasOwnPath(raw, path)) survived.push(`mural:${path}`);
-            else removed.push(path);
-        }
 
         expect(survived).toEqual([]);
         expect(hasOwnPath(raw, "profiles")).toBe(false);
         expect(readPath(raw, "profile")).toBe("work");
         expect(warningText).toContain("Ignoring profiles from project config");
         expect(removed.sort()).toEqual(
-            [
-                ...historianUserOnlyPaths(),
-                ...nestedEscalationPaths(),
-                ...nestedMuralModelPaths(),
-            ].sort(),
+            [...historianUserOnlyPaths(), ...nestedEscalationPaths()].sort(),
         );
 
         for (const path of dreamerKeepPaths()) {
@@ -467,11 +431,7 @@ describe("hostile-config stripping matrix", () => {
         expect(readPath(raw, "dreamer.omp.tasks.verify.thinking_level")).toBe("high");
         expect(readPath(raw, "dreamer.omp.tasks.verify.timeout_minutes")).toBe(45);
 
-        for (const path of [
-            ...historianUserOnlyPaths(),
-            ...nestedEscalationPaths(),
-            ...nestedMuralModelPaths(),
-        ]) {
+        for (const path of [...historianUserOnlyPaths(), ...nestedEscalationPaths()]) {
             expect(warningText).toContain(path);
         }
     });

package/src/config/project-security.test.ts

@@ -242,26 +242,21 @@ describe("stripUnsafeProjectConfigFields", () => {
         expect(warning).toContain("historian.opencode.runner");
     });
 
-    it("strips mural.model from project config but keeps the feature switch", () => {
+    it("leaves the ignored mural.model to the deprecation warning instead of a security strip", () => {
+        // mural.model no longer selects any model, so it is not a trust boundary;
+        // the compress-cues model is a dreamer task model like any other.
         const raw: Record<string, unknown> = {
             mural: { enabled: true, model: "repo-controlled-model" },
+            dreamer: { opencode: { tasks: { "compress-cues": { model: "repo/cue-model" } } } },
         };
 
         const warnings = stripUnsafeProjectConfigFields(raw);
 
-        expect(raw.mural).toEqual({ enabled: true });
-        expect(warnings.some((w) => w.includes("mural.model"))).toBe(true);
-    });
-
-    it("strips the legacy experimental mural model before migration", () => {
-        const raw: Record<string, unknown> = {
-            experimental: { mural: { enabled: true, model: "repo-controlled-model" } },
-        };
-
-        const warnings = stripUnsafeProjectConfigFields(raw);
-
-        expect(raw.experimental).toEqual({ mural: { enabled: true } });
-        expect(warnings.some((w) => w.includes("experimental.mural.model"))).toBe(true);
+        expect(raw.mural).toEqual({ enabled: true, model: "repo-controlled-model" });
+        expect(raw.dreamer).toEqual({
+            opencode: { tasks: { "compress-cues": { model: "repo/cue-model" } } },
+        });
+        expect(warnings).toEqual([]);
     });
 
     it("strips hidden-agent prompt/permission/tools but keeps benign fields", () => {

package/src/config/project-security.ts

@@ -48,6 +48,11 @@ const PROMPT_SURFACE_USER_ONLY_FIELDS = ["guidance_override_path", "tool_descrip
  *                   on for an agent whose allow-list intentionally excludes it.
  * Dreamer model/cadence fields are deliberately NOT stripped: a repo may tune
  * its own dreamer overlays and schedules through the user's provider auth.
+ * Every dreamer task sends project memory to its model, so a repository that
+ * sets a dreamer model chooses where that memory goes; the project-tier allowance
+ * above accepts that. compress-cues follows the same rule: its model comes from
+ * dreamer.<harness>.tasks.compress-cues or the harness default, so a project
+ * can choose it exactly as it can for any other task.
  * Historian model selection stays USER-tier only, and compaction thresholds are
  * project raise-only, so a cloned repo cannot force earlier compaction or extra
  * historian spend on the user's dime.
@@ -184,25 +189,6 @@ function stripEscalationAtExecutableSite(
     }
 }
 
-/** Remove `mural.model` smuggled under hidden-agent trees. Top-level and
- *  experimental mural blocks are handled separately so their warnings stay
- *  specific; this walk covers harness and task nesting the schema does not
- *  admit but a hostile file can still write. */
-function stripNestedMuralModels(
-    node: Record<string, unknown>,
-    path: string,
-    removed: string[],
-): void {
-    for (const [key, value] of Object.entries(node)) {
-        if (key === "mural" && isPlainObject(value) && "model" in value) {
-            delete value.model;
-            removed.push(`${path}.${key}.model`);
-        } else if (isPlainObject(value)) {
-            stripNestedMuralModels(value, `${path}.${key}`, removed);
-        }
-    }
-}
-
 // Must match the schema's execute_threshold_percentage range (20-90). A narrower
 // range here let a valid project value of 81-90 skip the raise-only clamp and
 // reach the merged config as-is, lowering a higher user threshold.
@@ -368,9 +354,6 @@ function makeProjectThresholdWarning(field: string, reason: string): string {
  *    provider account. `host_runner` is stripped for the same reason in the other
  *    direction: a repo must not switch this machine's pull loop on and start
  *    spending the user's provider account on folds.
- *  - `mural.model` at the top-level block, the legacy experimental spelling,
- *    and any nested `mural.model` under hidden agents — a cloned repo cannot
- *    choose where project memory is sent.
  *  - `pi.subagent_extensions` — a cloned repo must not choose which extensions
  *    the user's Pi child processes load.
  *  - `prompt_surface.guidance_override_path` / `tool_descriptions` — a repository
@@ -472,6 +455,14 @@ export function stripUnsafeProjectConfigFields(projectRaw: Record<string, unknow
         );
     }
 
+    const smartNotes = projectRaw.smart_notes;
+    if (isPlainObject(smartNotes) && "enabled" in smartNotes) {
+        delete smartNotes.enabled;
+        warnings.push(
+            "Ignoring smart_notes.enabled from project config (only user-level config may change process-wide tool definitions; restart required).",
+        );
+    }
+
     // Repositories may select preset routing, but project settings cannot add
     // guidance or tool-description text to the provider-visible prompt; those
     // user-only fields are removed before project settings are merged.
@@ -606,39 +597,6 @@ export function stripUnsafeProjectConfigFields(projectRaw: Record<string, unknow
         );
     }
 
-    const mural = projectRaw.mural;
-    if (isPlainObject(mural) && "model" in mural) {
-        delete mural.model;
-        warnings.push(
-            "Ignoring mural.model from project config (security: the mural cue-compressor model is a user-level setting; a repository cannot choose where project memory is sent).",
-        );
-    }
-
-    // Keep the same trust boundary while accepting the pre-graduation spelling.
-    // This must run before the in-memory migration moves experimental.mural.model
-    // to mural.model, otherwise an untrusted project could bypass the user-only
-    // model check.
-    const experimental = projectRaw.experimental;
-    const legacyMural = isPlainObject(experimental) ? experimental.mural : undefined;
-    if (isPlainObject(legacyMural) && "model" in legacyMural) {
-        delete legacyMural.model;
-        warnings.push(
-            "Ignoring experimental.mural.model from project config (security: the mural cue-compressor model is a user-level setting; use user-level mural.model).",
-        );
-    }
-
-    const nestedMuralRemoved: string[] = [];
-    for (const agentKey of HIDDEN_AGENT_KEYS) {
-        const block = projectRaw[agentKey];
-        if (!isPlainObject(block)) continue;
-        stripNestedMuralModels(block, agentKey, nestedMuralRemoved);
-    }
-    if (nestedMuralRemoved.length > 0) {
-        warnings.push(
-            `Ignoring ${nestedMuralRemoved.join(", ")} from project config (security: the mural cue-compressor model is a user-level setting; a repository cannot choose where project memory is sent).`,
-        );
-    }
-
     return warnings;
 }