@cortexkit/opencode-magic-context 0.49.23 → 0.49.24

package/dist/v2/{server-zg5y109h.js → server-r209n2fk.js}

@@ -40,7 +40,7 @@ import {
   getProjectChunkEmbeddingModelId2,
   getProjectEmbeddingMaxInputTokens2,
   embedItemsForProject2
-} from "./server-ad18djzs.js";
+} from "./server-q5z0gag0.js";
 import {
   hasMeaningfulUserText2,
   estimateTokens,
@@ -55,11 +55,12 @@ import {
   beginSqliteWriterAsync2
 } from "./server-gzy5w8ya.js";
 import {
+  areRustHistorianSyntheticParts2,
   isStrictGapHealingMessage2,
   noteRawSessionSummaryRowWritten2,
   RawOrdinalsNotReady2,
   runSessionWarmupWorker
-} from "./server-4kjmrjn4.js";
+} from "./server-swvhxhxz.js";
 import {
   buildCanonicalChunkTextFromFts2,
   buildCompartmentSummaryFallbackText2,
@@ -69,7 +70,7 @@ import {
   replaceCompartmentChunkEmbeddings2,
   deleteChunkEmbedBackoffForSession2,
   chunkWindowSourceKey2
-} from "./server-62g58aaz.js";
+} from "./server-pw21ypwb.js";
 import {
   isPidAlive
 } from "./server-k3t06fxr.js";
@@ -89,7 +90,7 @@ import {
   toMessageIndexSource2,
   clearIndexedMessagesInTransaction2,
   indexSourcesAfterOrdinal2
-} from "./server-ppcd1qxh.js";
+} from "./server-mefps930.js";
 import {
   retreatPastHostUnservedRows,
   snapTerminalCompartmentToServedRow,
@@ -187,7 +188,7 @@ import {
   getRawSessionTagKeysThrough2,
   getLegacyProtectedTailStartOrdinal2,
   readSessionChunk2
-} from "./server-m4bfaevz.js";
+} from "./server-gwmshgx9.js";
 import {
   getTableColumnNames
 } from "./server-rqebawx1.js";
@@ -197,7 +198,7 @@ import {
   LATEST_SUPPORTED_VERSION,
   getPersistedSchemaVersion,
   openDatabase
-} from "./server-j8h7bsca.js";
+} from "./server-y9ncq4ck.js";
 import {
   providerMass,
   calibrationForModelKey,
@@ -258,7 +259,7 @@ import {
   userFacingFailureCode,
   promoteSessionFactsDurable,
   embedPromotedFacts
-} from "./server-d48x3m4x.js";
+} from "./server-9xbbaekh.js";
 import {
   isMarkerCandidateBasisCurrent2,
   invalidateMarkerCandidateBasis2,
@@ -16783,6 +16784,7 @@ function resolveProtectedTailBoundary(ctx) {
     priorBoundaryOrdinal: ctx.priorBoundaryOrdinal,
     migrationFloorActive: ctx.migrationFloorActive,
     emergencyTailScale: ctx.emergencyTailScale,
+    liftLivePromptFloor: ctx.liftLivePromptFloor === true ? true : undefined,
     providerShapeVersion: ctx.providerShapeVersion,
     cacheNamespace: ctx.cacheNamespace,
     createdAt,
@@ -17210,28 +17212,37 @@ function logInconsistentProducerWindowOnce(sessionId, model, window, reserve) {
   sessionLog2(sessionId, `producer window inconsistent for ${model}: window=${window} reserve=${reserve}; sending unguarded`);
 }
 var HISTORIAN_ALERT_COOLDOWN_MS = 60 * 1000;
-function v2NonNarrativeStoredGapRanges(db, sessionId, compartments) {
-  if (readCoordinateRebaseNotice(db, sessionId)?.generation !== "v2")
-    return [];
+function nonNarrativeStoredGapRanges(db, sessionId, compartments) {
+  const rebasedToV2 = readCoordinateRebaseNotice(db, sessionId)?.generation === "v2";
   const safeRanges = [];
-  for (let index = 1;index < compartments.length; index += 1) {
+  for (let index = 0;index < compartments.length; index += 1) {
     const previous = compartments[index - 1];
     const current = compartments[index];
-    if (!previous || !current)
+    if (!current)
       continue;
-    const start = previous.endMessage + 1;
+    const start = previous ? previous.endMessage + 1 : 1;
     const end = current.startMessage - 1;
     if (end < start)
       continue;
     const messages = readRawSessionMessageRange2(sessionId, start, end);
     const ordinals = new Set(messages.map((message) => message.ordinal));
-    const complete = ordinals.size === end - start + 1 && messages.every((message) => isStrictGapHealingMessage2(message));
+    const complete = ordinals.size === end - start + 1 && messages.every((message) => message.ordinal >= start && message.ordinal <= end && (areRustHistorianSyntheticParts2(message.parts) || index > 0 && rebasedToV2 && isStrictGapHealingMessage2(message)));
     if (complete)
       safeRanges.push({ start, end });
   }
   return safeRanges;
 }
 var lastHistorianAlertBySession = new Map;
+var loggedStoredValidationFailures = new Map;
+function logStoredValidationFailureOnce(sessionId, error) {
+  const failureClass = error.split(" ", 2).join(" ");
+  const logged = loggedStoredValidationFailures.get(sessionId) ?? new Set;
+  if (logged.has(failureClass))
+    return;
+  logged.add(failureClass);
+  loggedStoredValidationFailures.set(sessionId, logged);
+  sessionLog2(sessionId, `historian failure: source=existing-validation reason="${error}"`);
+}
 var STORED_COMPARTMENT_FAILURE_BACKOFF_MS = 30 * 60 * 1000;
 function storedCompartmentFailureBackingOff(db, sessionId, validationError, now = Date.now()) {
   if (getHistorianFailureState(db, sessionId).lastError !== validationError)
@@ -17376,10 +17387,12 @@ async function runCompartmentAgent(deps) {
       return;
     }
     let priorCompartments = getCompartments(db, sessionId);
-    let existingValidationError = validateStoredCompartments(priorCompartments, v2NonNarrativeStoredGapRanges(db, sessionId, priorCompartments));
+    let existingValidationError = validateStoredCompartments(priorCompartments, nonNarrativeStoredGapRanges(db, sessionId, priorCompartments));
     const unresolvedInvolved = existingValidationError !== null && priorCompartments.some((compartment) => compartment.rebaseStatus === "unresolved");
-    if (unresolvedInvolved && existingValidationError && storedCompartmentFailureBackingOff(db, sessionId, existingValidationError)) {
-      sessionLog2(sessionId, `historian no-op: stored compartments still invalid ("${existingValidationError}"); backing off`);
+    if (existingValidationError && storedCompartmentFailureBackingOff(db, sessionId, existingValidationError)) {
+      if (unresolvedInvolved) {
+        sessionLog2(sessionId, `historian no-op: stored compartments still invalid ("${existingValidationError}"); backing off`);
+      }
       telemetry.status = "noop";
       telemetry.failureReason = `existing-validation backoff: ${existingValidationError}`;
       return;
@@ -17393,15 +17406,19 @@ async function runCompartmentAgent(deps) {
       });
       if (recovery.rowsRewritten > 0) {
         priorCompartments = getCompartments(db, sessionId);
-        existingValidationError = validateStoredCompartments(priorCompartments, v2NonNarrativeStoredGapRanges(db, sessionId, priorCompartments));
+        existingValidationError = validateStoredCompartments(priorCompartments, nonNarrativeStoredGapRanges(db, sessionId, priorCompartments));
       }
     }
     if (existingValidationError) {
-      sessionLog2(sessionId, `historian failure: source=existing-validation reason="${existingValidationError}"`);
+      if (unresolvedInvolved) {
+        sessionLog2(sessionId, `historian failure: source=existing-validation reason="${existingValidationError}"`);
+      } else {
+        logStoredValidationFailureOnce(sessionId, existingValidationError);
+      }
       const failCount = incrementHistorianFailure(db, sessionId, existingValidationError);
       telemetry.failureReason = `existing-validation: ${existingValidationError}`;
+      retainDrainReservationForRetryThrottle = true;
       if (unresolvedInvolved) {
-        retainDrainReservationForRetryThrottle = true;
         await notifyHistorianIssue(buildStoredCompartmentsInvalidNotice());
       } else {
         await notifyHistorianIssue(buildHistorianFailureNotice(failCount, existingValidationError));
@@ -17441,7 +17458,8 @@ async function runCompartmentAgent(deps) {
           inputTokens: boundarySnapshot.usageInputTokens
         },
         usageSource: boundarySnapshot.usageSource,
-        emergencyTailScale: boundarySnapshot.emergencyTailScale
+        emergencyTailScale: boundarySnapshot.emergencyTailScale,
+        liftLivePromptFloor: boundarySnapshot.liftLivePromptFloor === true
       });
       if (refreshed && hasRunnableCompartmentWindow(refreshed)) {
         sessionLog2(sessionId, `historian: refreshed stale protected-tail snapshot at run time (was: ${validation.detail ?? "stale"}) — eligible head ${refreshed.offset}-${refreshed.eligibleEndOrdinal - 1}`);

package/dist/v2/{server-4kjmrjn4.js → server-swvhxhxz.js}

@@ -18,6 +18,10 @@ import { Worker } from "node:worker_threads";
 
 // src/hooks/magic-context/read-session-raw.ts
 import { isMainThread } from "node:worker_threads";
+function areRustHistorianSyntheticParts2(parts) {
+  const contentParts = parts.filter((part) => part === null || typeof part !== "object" || part.type !== "compaction");
+  return contentParts.length > 0 && contentParts.every((part) => part !== null && typeof part === "object" && (part.synthetic === true || part.syntheticTodoMarker === true));
+}
 function isStrictGapHealingMessage2(message) {
   if (message.storeType === "synthetic")
     return true;
@@ -1293,4 +1297,4 @@ function recordFailure(key, sessionId, failure, detail) {
   log2(`[magic-context] WARN canonical ordinal warm-up failed for ${sessionId} (${failure}: ${detail}); counts remain bounded and callers must defer or retry`);
 }
 
-export { isStrictGapHealingMessage2, isRawCompactionSummaryInfo2, readRawSessionMessagesFromDb2, readRawSessionMessagePageFromDb2, readRawSessionMessageSummaryPageFromDb2, countRawSessionMessageOrdinalsFromDb2, readRawSessionMessageIdOrdinalsForRangeFromDb2, readRawSessionMessageIdsAtOrdinalsFromDb2, readRawSessionMessageOrdinalPageFromDb2, countStoredRawSessionMessagesFromDb2, readRawSessionTailFromDb2, extractInMemoryMessageViews2, buildInMemoryTailRawMessages2, readRawSessionMessagePartsByIdFromDb2, forgetRawSessionOrdinalWatermark2, forgetRawSessionSummaryRows2, noteRawSessionSummaryRowWritten2, RawOrdinalsNotReady2, rawOrdinalSummarySeed2, scanRawSessionSummaryRows2, getRawSessionSummaryEpoch2, installRawSessionSummaryScan2, isRawSessionSummaryWarm2, readRawSessionMessageOrdinalByIdFromDb2, readRawSessionMessageByIdFromDb2, hasRawSessionMessageByIdFromDb2, readRawSeedTailFromDb2, readRawSessionBoundaryEndpointsFromDb2, runSessionWarmupWorker, prewarmRawSessionOrdinalsForDb };
+export { areRustHistorianSyntheticParts2, isStrictGapHealingMessage2, isRawCompactionSummaryInfo2, readRawSessionMessagesFromDb2, readRawSessionMessagePageFromDb2, readRawSessionMessageSummaryPageFromDb2, countRawSessionMessageOrdinalsFromDb2, readRawSessionMessageIdOrdinalsForRangeFromDb2, readRawSessionMessageIdsAtOrdinalsFromDb2, readRawSessionMessageOrdinalPageFromDb2, countStoredRawSessionMessagesFromDb2, readRawSessionTailFromDb2, extractInMemoryMessageViews2, buildInMemoryTailRawMessages2, readRawSessionMessagePartsByIdFromDb2, forgetRawSessionOrdinalWatermark2, forgetRawSessionSummaryRows2, noteRawSessionSummaryRowWritten2, RawOrdinalsNotReady2, rawOrdinalSummarySeed2, scanRawSessionSummaryRows2, getRawSessionSummaryEpoch2, installRawSessionSummaryScan2, isRawSessionSummaryWarm2, readRawSessionMessageOrdinalByIdFromDb2, readRawSessionMessageByIdFromDb2, hasRawSessionMessageByIdFromDb2, readRawSeedTailFromDb2, readRawSessionBoundaryEndpointsFromDb2, runSessionWarmupWorker, prewarmRawSessionOrdinalsForDb };

package/dist/v2/{server-dtp8hcjh.js → server-wxrdher8.js}

@@ -5,7 +5,7 @@ import {
 } from "./server-gzy5w8ya.js";
 import {
   runSessionWarmupWorker
-} from "./server-4kjmrjn4.js";
+} from "./server-swvhxhxz.js";
 import {
   logSlowWriteTransaction
 } from "./server-gyy4k6mf.js";

package/dist/v2/{server-j8h7bsca.js → server-y9ncq4ck.js}

@@ -42,7 +42,7 @@ import {
 } from "./server-fb3zxn06.js";
 import {
   startMessageFtsRowidMapBackfill2
-} from "./server-dtp8hcjh.js";
+} from "./server-wxrdher8.js";
 import {
   LKG_SLOT_CHUNKS_DDL,
   SESSION_REPLAY_DECISIONS_DDL,
@@ -1221,7 +1221,7 @@ function finishDatabaseOpen(db, dbPath, explicitDbPath, latestSupportedVersion)
       state.running = startMessageFtsRowidMapBackfill2(db, signal).then(async () => {
         if (signal.aborted || !readsOpenCodeStore)
           return;
-        const { readRawSessionMessagePage, readRawSessionMessages } = await importPluginModule(() => import("./read-session-chunk-wazfyxcg.js"));
+        const { readRawSessionMessagePage, readRawSessionMessages } = await importPluginModule(() => import("./read-session-chunk-qqvda7zv.js"));
         const { startMessageTimeBackfill } = await importPluginModule(() => import("./message-time-backfill-zvthw6xb.js"));
         if (signal.aborted)
           return;

package/dist/v2/server.js

@@ -7874,7 +7874,7 @@ var require_src2 = __commonJS(function(exports, module) {
 // package.json
 var package_default = {
   name: "@cortexkit/opencode-magic-context",
-  version: "0.49.23",
+  version: "0.49.24",
   type: "module",
   description: "OpenCode plugin for Magic Context — cross-session memory and context management",
   main: "dist/index.js",
@@ -7917,8 +7917,8 @@ var package_default = {
     "check:tui-compiled": 'git diff --exit-code -- src/tui-compiled && test -z "$(git status --porcelain -- src/tui-compiled)"',
     "check:transformers-node-wasm": "bun scripts/verify-transformers-node-wasm.ts",
     typecheck: "tsc -p ../retina-local-fs/tsconfig.build.json && tsc --noEmit && tsc -p tsconfig.scripts.json",
-    test: "bun ../../scripts/check-bun.mjs && bun install --frozen-lockfile && bun run test:active-session-backfill && MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --parallel=4 --timeout 30000 --test-name-pattern '^(?!re-embeds 1600 old chunks)'",
-    "test:active-session-backfill": "MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test src/hooks/magic-context/auto-embed-session.test.ts --test-name-pattern '^re-embeds 1600 old chunks' --timeout 120000",
+    test: "bun ../../scripts/check-bun.mjs && bun install --frozen-lockfile && MC_SLOW_TESTS=0 MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --parallel=4 --timeout 30000 --test-name-pattern '^(?!.*\\[slow\\] )'",
+    "test:active-session-backfill": "MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test src/hooks/magic-context/auto-embed-session.test.ts --test-name-pattern 're-embeds old chunks' --timeout 120000",
     "test:serial": "bun install --frozen-lockfile && MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --timeout 30000",
     "test:parallel:probe": "bun scripts/verify-parallel-db-isolation.ts",
     lint: "bun ../../scripts/check-bun.mjs && biome check .",
@@ -7929,7 +7929,7 @@ var package_default = {
     prepublishOnly: "bun run build && bun run check:tui-compiled"
   },
   "//check:tui-compiled": "Check drift on output already generated by build or build:tui; this check never regenerates files. CI and prepublishOnly build first.",
-  "//test": "The strict 50ms active-session backfill latency gate runs alone before the four-worker suite, which excludes only that already-run case. Unrelated workers can deschedule the latency monitor. Test runs also disable JSC's optimizing WebAssembly tier so per-file isolation does not pay its compilation cost on every file; production host options are unchanged.",
+  "//test": "Unit shards run small behavioral fixtures. The nightly/check-branch slow-unit lane runs full scale and latency gates in fresh processes once per mode, not once per shard. JSC's optimizing WebAssembly tier stays disabled in tests; production host options are unchanged.",
   dependencies: {
     "@cortexkit/subc-client": "0.11.1",
     "@jitl/quickjs-singlefile-cjs-release-asyncify": "0.32.0",
@@ -8195,7 +8195,7 @@ async function setup(context) {
   if (claimStorageBackupWarningCheck() && isMagicContextStorageOutsideEngram(storageDir)) {
     log2(`[magic-context] Magic Context storage is at ${storageDir}, outside the folder Engram backs up (~/.local/share/cortexkit/magic-context). It is not included in CortexKit backups.`);
   }
-  const { registerContext } = await import("./context-ea3x7smm.js");
+  const { registerContext } = await import("./context-zbydzq4g.js");
   setHarness2("opencode2");
   bindStaleBuildNotice({}, import.meta.url, "opencode2");
   const duties = await registerContext(context);

package/dist/v2/{wrapup-orchestrator-3ssd5yy1.js → wrapup-orchestrator-9z81xj66.js}

@@ -19,8 +19,8 @@ import {
   registerActiveCompartmentRun,
   setRecompStarting2,
   setRecompTerminal2
-} from "./server-zg5y109h.js";
-import"./server-ad18djzs.js";
+} from "./server-r209n2fk.js";
+import"./server-q5z0gag0.js";
 import"./server-3mz2qh5a.js";
 import"./server-ab1g0wn9.js";
 import {
@@ -28,10 +28,10 @@ import {
 } from "./server-gzy5w8ya.js";
 import"./server-51779zs2.js";
 import"./server-cpjk5jd2.js";
-import"./server-4kjmrjn4.js";
-import"./server-dtp8hcjh.js";
-import"./server-62g58aaz.js";
-import"./server-ppcd1qxh.js";
+import"./server-swvhxhxz.js";
+import"./server-wxrdher8.js";
+import"./server-pw21ypwb.js";
+import"./server-mefps930.js";
 import {
   getWrapupInProgressState,
   acquireWrapupInProgress,
@@ -40,9 +40,9 @@ import {
   getHistorianFailureState,
   clearEmergencyRecovery,
   prepareRawSessionOrdinals2
-} from "./server-m4bfaevz.js";
+} from "./server-gwmshgx9.js";
 import"./server-rqebawx1.js";
-import"./server-j8h7bsca.js";
+import"./server-y9ncq4ck.js";
 import"./server-1zx87sdm.js";
 import"./server-fa7vtp40.js";
 import"./server-24g8r2d0.js";
@@ -53,7 +53,7 @@ import"./server-fr0wbhdn.js";
 import"./server-wwaw5npa.js";
 import"./server-qjvk4a9t.js";
 import"./server-fb3zxn06.js";
-import"./server-d48x3m4x.js";
+import"./server-9xbbaekh.js";
 import {
   pushNotification2
 } from "./server-x8a7jmkh.js";
@@ -62,7 +62,7 @@ import"./server-qt1qqasc.js";
 import"./server-bsgd4dk1.js";
 import"./server-4dhv7mqz.js";
 import"./server-vr4szghm.js";
-import"./server-qteg2kt9.js";
+import"./server-8j2e7t31.js";
 import"./server-jjvbk92s.js";
 import"./server-94wk1ey3.js";
 import"./server-29qp8nz4.js";

package/dist/{wrapup-orchestrator-5vpcd1zx.js → wrapup-orchestrator-dbnb530w.js}

@@ -1,41 +1,41 @@
 import {
   runManagedWrapup2
-} from "./index-jmq8kfe7.js";
-import"./index-ffzhwfzy.js";
-import"./index-y76rhsnr.js";
+} from "./index-7516anfj.js";
+import"./index-jd0y50w3.js";
+import"./index-dds7cxhz.js";
 import"./index-qgh1qwjj.js";
-import"./index-3svaejkh.js";
-import"./index-mnnkgq0q.js";
+import"./index-z928hmnp.js";
+import"./index-p6evxfcc.js";
 import"./index-sd3egckz.js";
-import"./index-rxqr723x.js";
-import"./index-zy67whjr.js";
+import"./index-t6j3qxnd.js";
+import"./index-z05n7702.js";
 import"./index-jjvbk92s.js";
 import"./index-4dhv7mqz.js";
 import"./index-spwjbkc7.js";
-import"./index-66eby7hx.js";
+import"./index-jcr6pe7z.js";
 import"./index-qt1qqasc.js";
-import"./index-mnhcdfxg.js";
+import"./index-t1zk694n.js";
 import"./index-whcgcfrv.js";
 import"./index-1zx87sdm.js";
-import"./index-ksq50rg0.js";
+import"./index-c9zrgcnt.js";
 import"./index-x8a7jmkh.js";
 import"./index-rrv26qjz.js";
 import"./index-51rdvtkz.js";
 import"./index-nxrsns5x.js";
 import"./index-kfyb3k6n.js";
-import"./index-m32esgmj.js";
+import"./index-3d5wnkq7.js";
 import"./index-wfybj1dw.js";
-import"./index-a9zvn5fe.js";
+import"./index-jrjr58ez.js";
 import"./index-fb3zxn06.js";
 import"./index-9q1g3c5q.js";
 import"./index-kq5w68dp.js";
-import"./index-x6cbrv9h.js";
+import"./index-szf8r0ba.js";
 import"./index-fr0wbhdn.js";
 import"./index-c7phnbvk.js";
 import"./index-j76ah6d7.js";
 import"./index-x9k3mqrf.js";
 import"./index-58e3y90n.js";
-import"./index-jfem3dgz.js";
+import"./index-7tdtpqrg.js";
 import"./index-v0p37hm2.js";
 import"./index-t5pck3ss.js";
 import"./index-b88dwwrh.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/opencode-magic-context",
-  "version": "0.49.23",
+  "version": "0.49.24",
   "type": "module",
   "description": "OpenCode plugin for Magic Context — cross-session memory and context management",
   "main": "dist/index.js",
@@ -43,8 +43,8 @@
     "check:tui-compiled": "git diff --exit-code -- src/tui-compiled && test -z \"$(git status --porcelain -- src/tui-compiled)\"",
     "check:transformers-node-wasm": "bun scripts/verify-transformers-node-wasm.ts",
     "typecheck": "tsc -p ../retina-local-fs/tsconfig.build.json && tsc --noEmit && tsc -p tsconfig.scripts.json",
-    "test": "bun ../../scripts/check-bun.mjs && bun install --frozen-lockfile && bun run test:active-session-backfill && MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --parallel=4 --timeout 30000 --test-name-pattern '^(?!re-embeds 1600 old chunks)'",
-    "test:active-session-backfill": "MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test src/hooks/magic-context/auto-embed-session.test.ts --test-name-pattern '^re-embeds 1600 old chunks' --timeout 120000",
+    "test": "bun ../../scripts/check-bun.mjs && bun install --frozen-lockfile && MC_SLOW_TESTS=0 MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --parallel=4 --timeout 30000 --test-name-pattern '^(?!.*\\[slow\\] )'",
+    "test:active-session-backfill": "MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test src/hooks/magic-context/auto-embed-session.test.ts --test-name-pattern 're-embeds old chunks' --timeout 120000",
     "test:serial": "bun install --frozen-lockfile && MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --timeout 30000",
     "test:parallel:probe": "bun scripts/verify-parallel-db-isolation.ts",
     "lint": "bun ../../scripts/check-bun.mjs && biome check .",
@@ -55,7 +55,7 @@
     "prepublishOnly": "bun run build && bun run check:tui-compiled"
   },
   "//check:tui-compiled": "Check drift on output already generated by build or build:tui; this check never regenerates files. CI and prepublishOnly build first.",
-  "//test": "The strict 50ms active-session backfill latency gate runs alone before the four-worker suite, which excludes only that already-run case. Unrelated workers can deschedule the latency monitor. Test runs also disable JSC's optimizing WebAssembly tier so per-file isolation does not pay its compilation cost on every file; production host options are unchanged.",
+  "//test": "Unit shards run small behavioral fixtures. The nightly/check-branch slow-unit lane runs full scale and latency gates in fresh processes once per mode, not once per shard. JSC's optimizing WebAssembly tier stays disabled in tests; production host options are unchanged.",
   "dependencies": {
     "@cortexkit/subc-client": "0.11.1",
     "@jitl/quickjs-singlefile-cjs-release-asyncify": "0.32.0",

package/src/agents/permissions.ts

@@ -112,9 +112,14 @@ function isPermissionMap(value: unknown): value is Record<string, unknown> {
  * OpenCode accepts either a whole-permission action or a pattern map for
  * `permission.task`; its visibility evaluator uses the last matching rule.
  * Normalize the whole-permission form, retain unrelated user rules, then append
- * our exact agent-id denies. When the ambient task policy has a wildcard deny,
- * re-emit that wildcard after the named denies so the Task tool is hidden rather
- * than shown as a callable-but-refused tool.
+ * our exact agent-id denies. When the ambient task policy is a wildcard deny
+ * whose only companions are our own appended agent-id denies, re-emit that
+ * wildcard after the named denies so the Task tool is hidden rather than shown
+ * as a callable-but-refused tool. When the wildcard deny sits next to any of
+ * the agent's own rules (the deny-by-default-with-exceptions shape), keep the
+ * agent's own ordering untouched: OpenCode resolves with the last matching
+ * rule, so moving the wildcard to the end there would override every named
+ * allow and empty the Task tool (#777).
  */
 export function denyTaskRoutingToAgents(
     permission: unknown,
@@ -133,10 +138,19 @@ export function denyTaskRoutingToAgents(
           : {};
     const internalAgentIdSet = new Set(internalAgentIds);
     const hasAmbientWildcardDeny = configuredTask["*"] === "deny";
+    // Only our own appended agent-id denies may accompany the wildcard for the
+    // move to stay correct — a user's named allow next to it must keep winning.
+    // Excluding internal ids here also keeps re-merging our own output
+    // idempotent: that output is exactly internal denies plus the wildcard.
+    const movesAmbientWildcardDeny =
+        hasAmbientWildcardDeny &&
+        Object.keys(configuredTask).every(
+            (agentId) => agentId === "*" || internalAgentIdSet.has(agentId),
+        );
     const retainedTask = Object.fromEntries(
         Object.entries(configuredTask).filter(
             ([agentId]) =>
-                !internalAgentIdSet.has(agentId) && (agentId !== "*" || !hasAmbientWildcardDeny),
+                !internalAgentIdSet.has(agentId) && (agentId !== "*" || !movesAmbientWildcardDeny),
         ),
     );
 
@@ -147,8 +161,10 @@ export function denyTaskRoutingToAgents(
             ...Object.fromEntries(internalAgentIds.map((agentId) => [agentId, "deny"])),
             // OpenCode's Permission.disabled uses findLast. Re-inserting the
             // ambient wildcard after our named routing denies keeps its whole-tool
-            // deny as the final match and makes the Task tool invisible.
-            ...(hasAmbientWildcardDeny ? { "*": "deny" } : {}),
+            // deny as the final match and makes the Task tool invisible — but
+            // only when it stood alone; with named rules the agent's own
+            // ordering must win (#777).
+            ...(movesAmbientWildcardDeny ? { "*": "deny" } : {}),
         },
     };
 }