@cortexkit/opencode-magic-context 0.47.0 → 0.49.0

package/src/agents/smart-notes-on.golden.json

@@ -0,0 +1,70 @@
+{
+  "opencode/full": "ee8313665a36e94be315b564c3959c21644c6b13a6e80de86aff8492a7948248",
+  "pi/full": "06d5cdfa5922dc889f8924e40ed60a76055b6f008614f552c11249dbba7ccf32",
+  "guidance/full/false/false/false/false": "5fd6f9d5ceadc9afb6c2e5f6f1359ee0fb51d03afa17d002a503a9958941fa84",
+  "pi-guidance/full/false/false/false/false": "5fd6f9d5ceadc9afb6c2e5f6f1359ee0fb51d03afa17d002a503a9958941fa84",
+  "guidance/full/false/false/false/true": "c07904e2985b91a3bfec547cbd3e6aa3b6eee9e2d0fed49df2aa701bbc927998",
+  "pi-guidance/full/false/false/false/true": "c07904e2985b91a3bfec547cbd3e6aa3b6eee9e2d0fed49df2aa701bbc927998",
+  "guidance/full/false/false/true/false": "5d2a13e49719520f4282b4cba6c234eed5882eae7d656e5f7fb98e7d3905ebb5",
+  "pi-guidance/full/false/false/true/false": "5d2a13e49719520f4282b4cba6c234eed5882eae7d656e5f7fb98e7d3905ebb5",
+  "guidance/full/false/false/true/true": "5ba23e90d969f1a25f51e7de836601156be6353ec8d7a1361f34a5961436146a",
+  "pi-guidance/full/false/false/true/true": "5ba23e90d969f1a25f51e7de836601156be6353ec8d7a1361f34a5961436146a",
+  "guidance/full/false/true/false/false": "3a398d32bc9eea87978aca46679149ff2d7f37ee42e3bdedad3c500505cbf400",
+  "pi-guidance/full/false/true/false/false": "3a398d32bc9eea87978aca46679149ff2d7f37ee42e3bdedad3c500505cbf400",
+  "guidance/full/false/true/false/true": "eec86c8a69bff34341b30398dc526945ad20648e3b1cb4b67c058dc1dbf98ef8",
+  "pi-guidance/full/false/true/false/true": "eec86c8a69bff34341b30398dc526945ad20648e3b1cb4b67c058dc1dbf98ef8",
+  "guidance/full/false/true/true/false": "ad7927d9deb91b2ca5c357ff6bd8d932619f90cb8cdf39e27ec6bc6742ed7763",
+  "pi-guidance/full/false/true/true/false": "ad7927d9deb91b2ca5c357ff6bd8d932619f90cb8cdf39e27ec6bc6742ed7763",
+  "guidance/full/false/true/true/true": "569aeb5e7a7132c89e4b0b78e7ecc1791b14d530a659d7334eff67e54ad14ae8",
+  "pi-guidance/full/false/true/true/true": "569aeb5e7a7132c89e4b0b78e7ecc1791b14d530a659d7334eff67e54ad14ae8",
+  "guidance/full/true/false/false/false": "f1f0a1c4df72890afdefcb08db70ecdb3cdba8c61b0a9c56b3e1370cca598d26",
+  "pi-guidance/full/true/false/false/false": "f1f0a1c4df72890afdefcb08db70ecdb3cdba8c61b0a9c56b3e1370cca598d26",
+  "guidance/full/true/false/false/true": "b53542325bb0e5d69adf12e098d8e45e6f73990770a06536545bb13b56872444",
+  "pi-guidance/full/true/false/false/true": "b53542325bb0e5d69adf12e098d8e45e6f73990770a06536545bb13b56872444",
+  "guidance/full/true/false/true/false": "c6081025c0af192d6f63d6d6f1ebeee1f1e134f8174d90de643d3b156c84b5e9",
+  "pi-guidance/full/true/false/true/false": "c6081025c0af192d6f63d6d6f1ebeee1f1e134f8174d90de643d3b156c84b5e9",
+  "guidance/full/true/false/true/true": "c8ee6b3237719e4c908241e651f36aa90562ee54a4854b5f5d3ec87e99605db5",
+  "pi-guidance/full/true/false/true/true": "c8ee6b3237719e4c908241e651f36aa90562ee54a4854b5f5d3ec87e99605db5",
+  "guidance/full/true/true/false/false": "e46393931592b92a96d887a634f11c8970239e753f245c777ff43583356dc73a",
+  "pi-guidance/full/true/true/false/false": "e46393931592b92a96d887a634f11c8970239e753f245c777ff43583356dc73a",
+  "guidance/full/true/true/false/true": "34e98b5c45d9dfc97ce50bb08d62a5064dc628dd371e4289b5f3c0b9a108b335",
+  "pi-guidance/full/true/true/false/true": "34e98b5c45d9dfc97ce50bb08d62a5064dc628dd371e4289b5f3c0b9a108b335",
+  "guidance/full/true/true/true/false": "77aaa97847d1cf96b947664a48656cb32ae9c0354882746c2e9961785acc5ce3",
+  "pi-guidance/full/true/true/true/false": "77aaa97847d1cf96b947664a48656cb32ae9c0354882746c2e9961785acc5ce3",
+  "guidance/full/true/true/true/true": "224fe7ba3904c53b0fa22d079ec7cb7c4a132d8092dade80a86c44d56f588831",
+  "pi-guidance/full/true/true/true/true": "224fe7ba3904c53b0fa22d079ec7cb7c4a132d8092dade80a86c44d56f588831",
+  "opencode/light": "203313946dd10c99b0e8ae9ddd47bd3f5d7568d6571eb189babb7cb59ef6a2f0",
+  "pi/light": "2ab9c355546c723f51df122a04d325ab7e0c700078c30e44452a5eee3d7e37ee",
+  "guidance/light/false/false/false/false": "a8713eda6b4d8888f584a9740b69b72c57f1cdff04bc675844c1caa0c95557d7",
+  "pi-guidance/light/false/false/false/false": "a8713eda6b4d8888f584a9740b69b72c57f1cdff04bc675844c1caa0c95557d7",
+  "guidance/light/false/false/false/true": "7a99730b51c8dd094d052288bb54f9d1b2563ade3cbfafa190496b6fe18e461c",
+  "pi-guidance/light/false/false/false/true": "7a99730b51c8dd094d052288bb54f9d1b2563ade3cbfafa190496b6fe18e461c",
+  "guidance/light/false/false/true/false": "1a866792b99c84f884941c6a5b269c5df9af394f1bbcba8893a7ea7a60ccd6e0",
+  "pi-guidance/light/false/false/true/false": "1a866792b99c84f884941c6a5b269c5df9af394f1bbcba8893a7ea7a60ccd6e0",
+  "guidance/light/false/false/true/true": "468fa55f0a35d503787bce7829352e522ef577cd9869b6c14eeb8c8c810c18e5",
+  "pi-guidance/light/false/false/true/true": "468fa55f0a35d503787bce7829352e522ef577cd9869b6c14eeb8c8c810c18e5",
+  "guidance/light/false/true/false/false": "e57d504f74b82f22ae334424accfee415638e266e14f960f1fabd30d5729aca9",
+  "pi-guidance/light/false/true/false/false": "e57d504f74b82f22ae334424accfee415638e266e14f960f1fabd30d5729aca9",
+  "guidance/light/false/true/false/true": "c8ed1794cf9ad0d3b3f0bf8e1372e5993f83d860c3459f05727c241444101ad4",
+  "pi-guidance/light/false/true/false/true": "c8ed1794cf9ad0d3b3f0bf8e1372e5993f83d860c3459f05727c241444101ad4",
+  "guidance/light/false/true/true/false": "bab2bf005b8faa918f91cb280678e571329095ba3d02212fd5360eea3aeb06d5",
+  "pi-guidance/light/false/true/true/false": "bab2bf005b8faa918f91cb280678e571329095ba3d02212fd5360eea3aeb06d5",
+  "guidance/light/false/true/true/true": "985cc5f091691be624e9e493268cafbf543b39e4eccb67f9cdfb12be75d5543a",
+  "pi-guidance/light/false/true/true/true": "985cc5f091691be624e9e493268cafbf543b39e4eccb67f9cdfb12be75d5543a",
+  "guidance/light/true/false/false/false": "6fd77355947d510c275f593b87fc013c2ccac439bd3db6ac2f5c1160cb755626",
+  "pi-guidance/light/true/false/false/false": "6fd77355947d510c275f593b87fc013c2ccac439bd3db6ac2f5c1160cb755626",
+  "guidance/light/true/false/false/true": "8ea26079e952c2cf10730070d46ee072ed0c1346fd41cf4bbfd3cd222dfc4b3b",
+  "pi-guidance/light/true/false/false/true": "8ea26079e952c2cf10730070d46ee072ed0c1346fd41cf4bbfd3cd222dfc4b3b",
+  "guidance/light/true/false/true/false": "0c18e3350478eac6f4f412def32bb0373bf4e34e028c22db0aa764afbab8d9b5",
+  "pi-guidance/light/true/false/true/false": "0c18e3350478eac6f4f412def32bb0373bf4e34e028c22db0aa764afbab8d9b5",
+  "guidance/light/true/false/true/true": "b6c622ace8b3a722750f13930ef27bf849ee2b06fa49a4d70095b7d98a08da8b",
+  "pi-guidance/light/true/false/true/true": "b6c622ace8b3a722750f13930ef27bf849ee2b06fa49a4d70095b7d98a08da8b",
+  "guidance/light/true/true/false/false": "d4da84246319941f74b26e7fbf569d875fe66f3b336b3e43c1dbca1906c895e0",
+  "pi-guidance/light/true/true/false/false": "d4da84246319941f74b26e7fbf569d875fe66f3b336b3e43c1dbca1906c895e0",
+  "guidance/light/true/true/false/true": "155ced931db6255047bc9122452f6eb0dbd83d3bc6160d6295ca26a3f5baac15",
+  "pi-guidance/light/true/true/false/true": "155ced931db6255047bc9122452f6eb0dbd83d3bc6160d6295ca26a3f5baac15",
+  "guidance/light/true/true/true/false": "bf0bd6e2b793b580560ce9bb18d039ac375abec3a09a986dc406b081b5ad9079",
+  "pi-guidance/light/true/true/true/false": "bf0bd6e2b793b580560ce9bb18d039ac375abec3a09a986dc406b081b5ad9079",
+  "guidance/light/true/true/true/true": "6e94bb838eba4d1ebe6ae6205f90fb45589dcce3af6352baa1466eeca437f652",
+  "pi-guidance/light/true/true/true/true": "6e94bb838eba4d1ebe6ae6205f90fb45589dcce3af6352baa1466eeca437f652"
+}

package/src/config/index.test.ts

@@ -4,7 +4,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { resolveEpochFloorForPass } from "../features/magic-context/storage-meta-persisted";
 import { buildOpenCodeConfigWarningBanner } from "../shared/config-warning-surface";
-import { resolveHistorianModel } from "../shared/model-resolution";
+import { resolveDreamerTaskModel, resolveHistorianModel } from "../shared/model-resolution";
 import { Database } from "../shared/sqlite";
 import { createTestTempDir, createTestTempDirFromPath } from "../shared/test-temp-dir";
 import {
@@ -13,6 +13,7 @@ import {
     setWindowOverlayPath,
 } from "../shared/window-geometry";
 import { loadPluginConfig, loadPluginConfigDetailed } from "./index";
+import { MURAL_MODEL_DEPRECATION_WARNING } from "./mural-model-deprecation";
 import { resolveConfigProfile } from "./profiles";
 import { getProtectedTokensTierOverrides } from "./project-security";
 import { REMOVED_AGENT_CONFIG_WARNING } from "./removed-agent-config";
@@ -269,6 +270,71 @@ describe("loadPluginConfig — graduated mural config", () => {
             expect.stringContaining('Deprecated "experimental.mural"'),
         );
     });
+
+    it("loads a config with the retired mural.model, warns once, and leaves compress-cues on the dreamer model", () => {
+        const result = loadWithUserConfig(
+            JSON.stringify({
+                mural: { enabled: true, model: "google/antigravity-gemini-3.8-flash" },
+                dreamer: {
+                    opencode: { model: "open/dreamer-default" },
+                    pi: { model: "pi/dreamer-default" },
+                },
+            }),
+        );
+
+        expect(result.mural.enabled).toBe(true);
+        expect(
+            (result.configWarnings ?? []).filter((w) =>
+                w.endsWith(MURAL_MODEL_DEPRECATION_WARNING),
+            ),
+        ).toHaveLength(1);
+        expect(MURAL_MODEL_DEPRECATION_WARNING).toContain("mural.model");
+        expect(
+            resolveDreamerTaskModel({ config: result, harness: "opencode", task: "compress-cues" })
+                .primary,
+        ).toEqual({ model: "open/dreamer-default" });
+        expect(
+            resolveDreamerTaskModel({ config: result, harness: "pi", task: "compress-cues" })
+                .primary,
+        ).toEqual({ model: "pi/dreamer-default" });
+    });
+
+    it("emits no mural.model warning when the key is absent", () => {
+        const result = loadWithUserConfig(JSON.stringify({ mural: { enabled: true } }));
+
+        expect((result.configWarnings ?? []).some((w) => w.includes("mural.model"))).toBe(false);
+    });
+
+    it("lets a project choose the compress-cues task model like any other dreamer task model", () => {
+        const result = loadWithUserAndProjectConfig(
+            JSON.stringify({ dreamer: { opencode: { model: "open/user-default" } } }),
+            JSON.stringify({
+                mural: { model: "repo/ignored" },
+                dreamer: {
+                    opencode: {
+                        tasks: {
+                            "compress-cues": { model: "open/project-cues" },
+                            curate: { model: "open/project-curate" },
+                        },
+                    },
+                },
+            }),
+        );
+
+        expect(
+            resolveDreamerTaskModel({ config: result, harness: "opencode", task: "compress-cues" })
+                .primary,
+        ).toEqual({ model: "open/project-cues" });
+        expect(
+            resolveDreamerTaskModel({ config: result, harness: "opencode", task: "curate" })
+                .primary,
+        ).toEqual({ model: "open/project-curate" });
+        expect(
+            (result.configWarnings ?? []).filter((w) =>
+                w.endsWith(MURAL_MODEL_DEPRECATION_WARNING),
+            ),
+        ).toHaveLength(1);
+    });
 });
 
 describe("loadPluginConfig — transform mode resolution", () => {

package/src/config/index.ts

@@ -25,6 +25,7 @@ import {
 } from "./migrate-config-location";
 import { migrateDreamerV2 } from "./migrate-dreamer-v2";
 import { migrateLegacyExperimental } from "./migrate-experimental";
+import { warnDeprecatedMuralModel } from "./mural-model-deprecation";
 import { resolveConfigProfile } from "./profiles";
 import {
     attachProtectedTokensTierOverrides,
@@ -437,6 +438,7 @@ export function parsePluginConfig(
         configWithoutRemovedAgent,
         preMigrationWarnings,
     );
+    warnDeprecatedMuralModel(migratedExperimental, preMigrationWarnings);
     // Dreamer v2: convert the legacy v1 dreamer shape (window schedule, tasks
     // array, user_memories/pin_key_files blocks) into the per-task `tasks` record.
     // Runs AFTER migrate-experimental so experimental.user_memories (already

package/src/config/latch-permanence-guard.test.ts

@@ -53,6 +53,10 @@ const KNOWN_SLOTS: Record<string, KnownSlot> = {
         classification: "VERDICT",
         reason: "Correct: circuit state expires and a half-open probe re-evaluates the endpoint.",
     },
+    "packages/plugin/src/hooks/magic-context/raw-ordinal-warmup.ts:exitHookRegistered": {
+        classification: "PUBLICATION",
+        reason: "Correct: records that the one process-exit handler stopping canonical-ordinal warm-up workers is installed; it holds no failure or absence verdict.",
+    },
     "packages/plugin/src/features/magic-context/memory/project-identity.ts:homeProjectPermission": {
         classification: "VERDICT",
         reason: "Boot config publishes the home-project permission; the setter replaces it on another host initialization, while explicit resolution arguments override it.",

package/src/config/mural-model-deprecation.ts

@@ -0,0 +1,24 @@
+/**
+ * `mural.model` used to name one cue-compressor model shared by every harness.
+ * Model ids differ per harness (OpenCode and Pi spell the same model with
+ * different provider prefixes), so a single string could not name a working
+ * model on every host. compress-cues now resolves through each harness's
+ * dreamer settings like every other dreamer task, and the key is ignored.
+ */
+export const MURAL_MODEL_DEPRECATION_WARNING =
+    "mural.model is deprecated and ignored; compress-cues now uses the dreamer model for each harness, like every other dreamer task. To override it, set dreamer.opencode.tasks.compress-cues.model (or the pi/omp equivalent). This key no longer does anything; remove it.";
+
+/**
+ * Pushes the deprecation warning when the config still sets `mural.model`.
+ * Call it after the legacy experimental migration so the pre-graduation
+ * `experimental.mural.model` spelling is reported the same way.
+ */
+export function warnDeprecatedMuralModel(
+    config: Record<string, unknown>,
+    warnings: string[],
+): void {
+    const mural = config.mural;
+    if (typeof mural === "object" && mural !== null && Object.hasOwn(mural, "model")) {
+        warnings.push(MURAL_MODEL_DEPRECATION_WARNING);
+    }
+}

package/src/config/project-security.hostile-matrix.test.ts

@@ -112,7 +112,6 @@ function ocTaskBlock(): Record<string, unknown> {
         fallback_models: [ocEntry()],
         variant: "task-variant",
         timeout_minutes: 45,
-        mural: { model: "hostile/task-mural" },
         ...ESCALATION_VALUE,
     };
 }
@@ -123,14 +122,13 @@ function piTaskBlock(): Record<string, unknown> {
         fallback_models: [piEntry()],
         thinking_level: "high",
         timeout_minutes: 45,
-        mural: { model: "hostile/task-mural" },
         ...ESCALATION_VALUE,
     };
 }
 
 /**
  * One project-tier config that plants a value at every executable nested path
- * the per-harness schema admits, plus smuggled escalation / mural / extra
+ * the per-harness schema admits, plus smuggled escalation / extra
  * fields at those same depths.
  */
 function buildHostileProjectConfig(): Record<string, unknown> {
@@ -156,8 +154,7 @@ function buildHostileProjectConfig(): Record<string, unknown> {
                 historian: { opencode: { model: "hostile/profile-historian" } },
             },
         },
-        mural: { enabled: true, model: "hostile/top-mural" },
-        experimental: { mural: { enabled: true, model: "hostile/experimental-mural" } },
+        mural: { enabled: true },
         historian: {
             model: "hostile/flat-historian",
             fallback_models: ["hostile/flat-fallback"],
@@ -170,21 +167,18 @@ function buildHostileProjectConfig(): Record<string, unknown> {
                 model: ocEntry(),
                 fallback_models: [ocEntry()],
                 variant: "hostile-historian-variant",
-                mural: { model: "hostile/historian-oc-mural" },
                 ...ESCALATION_VALUE,
             },
             pi: {
                 model: piEntry(),
                 fallback_models: [piEntry()],
                 thinking_level: "max",
-                mural: { model: "hostile/historian-pi-mural" },
                 ...ESCALATION_VALUE,
             },
             omp: {
                 model: piEntry(),
                 fallback_models: [piEntry()],
                 thinking_level: "auto",
-                mural: { model: "hostile/historian-omp-mural" },
                 ...ESCALATION_VALUE,
             },
         },
@@ -197,7 +191,6 @@ function buildHostileProjectConfig(): Record<string, unknown> {
                 model: ocEntry(),
                 fallback_models: [ocEntry()],
                 variant: "hostile-dreamer-variant",
-                mural: { model: "hostile/dreamer-oc-mural" },
                 tasks: ocTasks,
                 ...ESCALATION_VALUE,
             },
@@ -205,7 +198,6 @@ function buildHostileProjectConfig(): Record<string, unknown> {
                 model: piEntry(),
                 fallback_models: [piEntry()],
                 thinking_level: "medium",
-                mural: { model: "hostile/dreamer-pi-mural" },
                 tasks: piTasks,
                 ...ESCALATION_VALUE,
             },
@@ -213,7 +205,6 @@ function buildHostileProjectConfig(): Record<string, unknown> {
                 model: piEntry(),
                 fallback_models: [piEntry()],
                 thinking_level: "auto",
-                mural: { model: "hostile/dreamer-omp-mural" },
                 tasks: ompTasks,
                 ...ESCALATION_VALUE,
             },
@@ -319,25 +310,6 @@ function nestedEscalationPaths(): string[] {
     return paths;
 }
 
-function nestedMuralModelPaths(): string[] {
-    const paths = [
-        "mural.model",
-        "experimental.mural.model",
-        "historian.opencode.mural.model",
-        "historian.pi.mural.model",
-        "historian.omp.mural.model",
-        "dreamer.opencode.mural.model",
-        "dreamer.pi.mural.model",
-        "dreamer.omp.mural.model",
-    ];
-    for (const task of CANONICAL_DREAM_TASKS) {
-        paths.push(`dreamer.opencode.tasks.${task}.mural.model`);
-        paths.push(`dreamer.pi.tasks.${task}.mural.model`);
-        paths.push(`dreamer.omp.tasks.${task}.mural.model`);
-    }
-    return paths;
-}
-
 function loadWithUserAndProjectConfig(userConfigText: string, projectConfigText: string) {
     const xdg = createTestTempDirFromPath(join(tmpdir(), "mc-hostile-user-"));
     const projectDir = createTestTempDirFromPath(join(tmpdir(), "mc-hostile-proj-"));
@@ -422,21 +394,13 @@ describe("hostile-config stripping matrix", () => {
             if (hasOwnPath(raw, path)) survived.push(`escalation:${path}`);
             else removed.push(path);
         }
-        for (const path of nestedMuralModelPaths()) {
-            if (hasOwnPath(raw, path)) survived.push(`mural:${path}`);
-            else removed.push(path);
-        }
 
         expect(survived).toEqual([]);
         expect(hasOwnPath(raw, "profiles")).toBe(false);
         expect(readPath(raw, "profile")).toBe("work");
         expect(warningText).toContain("Ignoring profiles from project config");
         expect(removed.sort()).toEqual(
-            [
-                ...historianUserOnlyPaths(),
-                ...nestedEscalationPaths(),
-                ...nestedMuralModelPaths(),
-            ].sort(),
+            [...historianUserOnlyPaths(), ...nestedEscalationPaths()].sort(),
         );
 
         for (const path of dreamerKeepPaths()) {
@@ -467,11 +431,7 @@ describe("hostile-config stripping matrix", () => {
         expect(readPath(raw, "dreamer.omp.tasks.verify.thinking_level")).toBe("high");
         expect(readPath(raw, "dreamer.omp.tasks.verify.timeout_minutes")).toBe(45);
 
-        for (const path of [
-            ...historianUserOnlyPaths(),
-            ...nestedEscalationPaths(),
-            ...nestedMuralModelPaths(),
-        ]) {
+        for (const path of [...historianUserOnlyPaths(), ...nestedEscalationPaths()]) {
             expect(warningText).toContain(path);
         }
     });

package/src/config/project-security.test.ts

@@ -242,26 +242,21 @@ describe("stripUnsafeProjectConfigFields", () => {
         expect(warning).toContain("historian.opencode.runner");
     });
 
-    it("strips mural.model from project config but keeps the feature switch", () => {
+    it("leaves the ignored mural.model to the deprecation warning instead of a security strip", () => {
+        // mural.model no longer selects any model, so it is not a trust boundary;
+        // the compress-cues model is a dreamer task model like any other.
         const raw: Record<string, unknown> = {
             mural: { enabled: true, model: "repo-controlled-model" },
+            dreamer: { opencode: { tasks: { "compress-cues": { model: "repo/cue-model" } } } },
         };
 
         const warnings = stripUnsafeProjectConfigFields(raw);
 
-        expect(raw.mural).toEqual({ enabled: true });
-        expect(warnings.some((w) => w.includes("mural.model"))).toBe(true);
-    });
-
-    it("strips the legacy experimental mural model before migration", () => {
-        const raw: Record<string, unknown> = {
-            experimental: { mural: { enabled: true, model: "repo-controlled-model" } },
-        };
-
-        const warnings = stripUnsafeProjectConfigFields(raw);
-
-        expect(raw.experimental).toEqual({ mural: { enabled: true } });
-        expect(warnings.some((w) => w.includes("experimental.mural.model"))).toBe(true);
+        expect(raw.mural).toEqual({ enabled: true, model: "repo-controlled-model" });
+        expect(raw.dreamer).toEqual({
+            opencode: { tasks: { "compress-cues": { model: "repo/cue-model" } } },
+        });
+        expect(warnings).toEqual([]);
     });
 
     it("strips hidden-agent prompt/permission/tools but keeps benign fields", () => {

package/src/config/project-security.ts

@@ -48,6 +48,11 @@ const PROMPT_SURFACE_USER_ONLY_FIELDS = ["guidance_override_path", "tool_descrip
  *                   on for an agent whose allow-list intentionally excludes it.
  * Dreamer model/cadence fields are deliberately NOT stripped: a repo may tune
  * its own dreamer overlays and schedules through the user's provider auth.
+ * Every dreamer task sends project memory to its model, so a repository that
+ * sets a dreamer model chooses where that memory goes; the project-tier allowance
+ * above accepts that. compress-cues follows the same rule: its model comes from
+ * dreamer.<harness>.tasks.compress-cues or the harness default, so a project
+ * can choose it exactly as it can for any other task.
  * Historian model selection stays USER-tier only, and compaction thresholds are
  * project raise-only, so a cloned repo cannot force earlier compaction or extra
  * historian spend on the user's dime.
@@ -184,25 +189,6 @@ function stripEscalationAtExecutableSite(
     }
 }
 
-/** Remove `mural.model` smuggled under hidden-agent trees. Top-level and
- *  experimental mural blocks are handled separately so their warnings stay
- *  specific; this walk covers harness and task nesting the schema does not
- *  admit but a hostile file can still write. */
-function stripNestedMuralModels(
-    node: Record<string, unknown>,
-    path: string,
-    removed: string[],
-): void {
-    for (const [key, value] of Object.entries(node)) {
-        if (key === "mural" && isPlainObject(value) && "model" in value) {
-            delete value.model;
-            removed.push(`${path}.${key}.model`);
-        } else if (isPlainObject(value)) {
-            stripNestedMuralModels(value, `${path}.${key}`, removed);
-        }
-    }
-}
-
 // Must match the schema's execute_threshold_percentage range (20-90). A narrower
 // range here let a valid project value of 81-90 skip the raise-only clamp and
 // reach the merged config as-is, lowering a higher user threshold.
@@ -368,9 +354,6 @@ function makeProjectThresholdWarning(field: string, reason: string): string {
  *    provider account. `host_runner` is stripped for the same reason in the other
  *    direction: a repo must not switch this machine's pull loop on and start
  *    spending the user's provider account on folds.
- *  - `mural.model` at the top-level block, the legacy experimental spelling,
- *    and any nested `mural.model` under hidden agents — a cloned repo cannot
- *    choose where project memory is sent.
  *  - `pi.subagent_extensions` — a cloned repo must not choose which extensions
  *    the user's Pi child processes load.
  *  - `prompt_surface.guidance_override_path` / `tool_descriptions` — a repository
@@ -472,6 +455,14 @@ export function stripUnsafeProjectConfigFields(projectRaw: Record<string, unknow
         );
     }
 
+    const smartNotes = projectRaw.smart_notes;
+    if (isPlainObject(smartNotes) && "enabled" in smartNotes) {
+        delete smartNotes.enabled;
+        warnings.push(
+            "Ignoring smart_notes.enabled from project config (only user-level config may change process-wide tool definitions; restart required).",
+        );
+    }
+
     // Repositories may select preset routing, but project settings cannot add
     // guidance or tool-description text to the provider-visible prompt; those
     // user-only fields are removed before project settings are merged.
@@ -606,39 +597,6 @@ export function stripUnsafeProjectConfigFields(projectRaw: Record<string, unknow
         );
     }
 
-    const mural = projectRaw.mural;
-    if (isPlainObject(mural) && "model" in mural) {
-        delete mural.model;
-        warnings.push(
-            "Ignoring mural.model from project config (security: the mural cue-compressor model is a user-level setting; a repository cannot choose where project memory is sent).",
-        );
-    }
-
-    // Keep the same trust boundary while accepting the pre-graduation spelling.
-    // This must run before the in-memory migration moves experimental.mural.model
-    // to mural.model, otherwise an untrusted project could bypass the user-only
-    // model check.
-    const experimental = projectRaw.experimental;
-    const legacyMural = isPlainObject(experimental) ? experimental.mural : undefined;
-    if (isPlainObject(legacyMural) && "model" in legacyMural) {
-        delete legacyMural.model;
-        warnings.push(
-            "Ignoring experimental.mural.model from project config (security: the mural cue-compressor model is a user-level setting; use user-level mural.model).",
-        );
-    }
-
-    const nestedMuralRemoved: string[] = [];
-    for (const agentKey of HIDDEN_AGENT_KEYS) {
-        const block = projectRaw[agentKey];
-        if (!isPlainObject(block)) continue;
-        stripNestedMuralModels(block, agentKey, nestedMuralRemoved);
-    }
-    if (nestedMuralRemoved.length > 0) {
-        warnings.push(
-            `Ignoring ${nestedMuralRemoved.join(", ")} from project config (security: the mural cue-compressor model is a user-level setting; a repository cannot choose where project memory is sent).`,
-        );
-    }
-
     return warnings;
 }
 

package/src/config/schema/magic-context.test.ts

@@ -38,7 +38,7 @@ describe("MagicContextConfigSchema", () => {
                 fail_closed_blocking: true,
                 transform_mode: "ts",
                 storage: { enforce_private_permissions: true },
-                smart_notes: { retina_handoff: false },
+                smart_notes: { enabled: true, retina_handoff: false },
                 cache_ttl: "5m",
                 prompt_surface: { default: "full" },
                 execute_threshold_percentage: 65,
@@ -144,7 +144,7 @@ describe("MagicContextConfigSchema", () => {
                     overlay: false,
                 },
                 smart_drops: false,
-                smart_notes: { retina_handoff: false },
+                smart_notes: { enabled: true, retina_handoff: false },
                 shadow_embedding: {
                     enabled: false,
                 },

package/src/config/schema/magic-context.ts

@@ -917,9 +917,9 @@ export interface ShadowEmbeddingConfig {
 
 export interface MuralConfig {
     enabled: boolean;
-    /** The CUE COMPRESSOR model for the compress-cues dreamer task (the mural is
-     *  now rendered deterministically, so this no longer names an author model). */
-    model?: string;
+    /** Deprecated and ignored: compress-cues takes its model from each
+     *  harness's dreamer settings, like every other dreamer task. */
+    model?: unknown;
 }
 
 export interface MagicContextConfig {
@@ -943,6 +943,8 @@ export interface MagicContextConfig {
     historian?: HistorianConfig;
     dreamer?: DreamerConfig;
     smart_notes: {
+        /** Enable smart-note authoring and checks for the user; read at process startup. */
+        enabled: boolean;
         /** Flip ownership of authoring-compiled conditions from dreamer to retina. */
         retina_handoff: boolean;
     };
@@ -1121,13 +1123,12 @@ export const MagicContextConfigSchema = z
             .object({
                 enabled: z.boolean().default(false),
                 model: z
-                    .string()
-                    .trim()
-                    .min(1)
+                    .unknown()
                     .optional()
                     .describe(
-                        "Model for the compress-cues task that compresses each memory into a mural cue. The mural image itself is rendered deterministically (no author model).",
-                    ),
+                        "Deprecated: ignored. compress-cues now uses the dreamer model for each harness, like every other dreamer task; override it with dreamer.opencode.tasks.compress-cues.model (or the pi/omp equivalent). Remove this key; it no longer does anything.",
+                    )
+                    .meta({ deprecated: true }),
             })
             .default({ enabled: false })
             .describe(
@@ -1184,6 +1185,12 @@ export const MagicContextConfigSchema = z
         ),
         smart_notes: z
             .object({
+                enabled: z
+                    .boolean()
+                    .default(true)
+                    .describe(
+                        "Enable smart-note authoring and condition evaluation. User-level only: tool definitions are process-wide. Changes require a host restart and rebuild each session's cached prompt once. Pending notes remain stored and unchecked; already-ready notes still surface.",
+                    ),
                 retina_handoff: z
                     .boolean()
                     .default(false)
@@ -1191,7 +1198,7 @@ export const MagicContextConfigSchema = z
                         "When true, dreamer skips smart notes whose surface conditions compiled to retina provider configs at authoring time. Default false keeps both paths active until the retina consumer is deployed.",
                     ),
             })
-            .default({ retina_handoff: false })
+            .default({ enabled: true, retina_handoff: false })
             .describe("Smart-note ownership transition controls."),
         cache_ttl: z
             .union([z.string(), z.object({ default: z.string() }).catchall(z.string())])
@@ -1601,7 +1608,6 @@ export const MagicContextConfigSchema = z
 /** Settings whose fresh values can be used by later agent runs without changing rendered prompt bytes. */
 export const LIVE_RELOAD_CONFIG_PATHS = [
     "cache_ttl",
-    "mural.model",
     "toast_duration_ms",
     "historian.opencode.model",
     "historian.opencode.fallback_models",

package/src/features/magic-context/dreamer/task-registry.ts

@@ -29,6 +29,12 @@ export const CANONICAL_DREAM_TASKS = [
 
 export type DreamTaskName = (typeof CANONICAL_DREAM_TASKS)[number];
 
+export function availableDreamTasks(smartNotesEnabled = true): DreamTaskName[] {
+    return CANONICAL_DREAM_TASKS.filter(
+        (task) => smartNotesEnabled || task !== "evaluate-smart-notes",
+    );
+}
+
 /** Prompt-token ceilings informed by docs/reports/dreamer-token-usage.md.
  * Completed Gemini run usage predicts 20-memory mapping/verification batches
  * at about 70% of their allowance

package/src/shared/auto-search-lifecycle.ts

@@ -1,4 +1,47 @@
+import type { AutoSearchHintNoHintReason } from "../features/magic-context/storage-meta-persisted";
+
 const pending = new Map<string, Set<AbortController>>();
+const unpublishedNoHints = new Map<string, Map<string, AutoSearchHintNoHintReason>>();
+
+/**
+ * A failed save can still send the user message without a search hint. Remember
+ * that no-hint decision until a later pass saves it to SQLite, including across
+ * closing and reopening the database handle. Switching or shutting down a session
+ * does not prove deletion and must not discard it. If all compare-and-swap (CAS)
+ * save retries fail and the process restarts before repair, this unsaved record
+ * is lost: that compound failure is the remaining durability gap.
+ */
+export function rememberUnpublishedAutoSearchNoHint(
+    sessionId: string,
+    messageId: string,
+    reason: AutoSearchHintNoHintReason,
+): void {
+    let messages = unpublishedNoHints.get(sessionId);
+    if (!messages) {
+        messages = new Map();
+        unpublishedNoHints.set(sessionId, messages);
+    }
+    if (!messages.has(messageId)) messages.set(messageId, reason);
+}
+
+export function getUnpublishedAutoSearchNoHint(
+    sessionId: string,
+    messageId: string,
+): AutoSearchHintNoHintReason | undefined {
+    return unpublishedNoHints.get(sessionId)?.get(messageId);
+}
+
+export function forgetUnpublishedAutoSearchNoHint(sessionId: string, messageId: string): void {
+    const messages = unpublishedNoHints.get(sessionId);
+    messages?.delete(messageId);
+    if (messages?.size === 0) unpublishedNoHints.delete(sessionId);
+}
+
+/** Deleting a session releases its unsaved no-hint records; switching away does not. */
+export function clearUnpublishedAutoSearchNoHints(sessionId?: string): void {
+    if (sessionId === undefined) unpublishedNoHints.clear();
+    else unpublishedNoHints.delete(sessionId);
+}
 
 /** Cleanup cancels optional searches and backfill, not durable served decisions. */
 export function registerAutoSearchWork(sessionId: string): {