@cortexkit/opencode-magic-context 0.49.23 → 0.49.25

package/dist/v2/{server-33nqbqkw.js → server-tfawsj08.js}

@@ -22,7 +22,7 @@ import {
   loadCompartmentChunkEmbeddingsForSearch2,
   peekCompartmentChunkSearchPool2,
   warmCompartmentChunkSearchPool2
-} from "./server-62g58aaz.js";
+} from "./server-pw21ypwb.js";
 import {
   recordEmbeddingMeasurement,
   saveCommitEmbedding,
@@ -39,7 +39,7 @@ import {
   enqueueShadowEmbeddingItems2,
   getProjectEmbeddingSnapshot2,
   embedItemsForProject2
-} from "./server-ad18djzs.js";
+} from "./server-q5z0gag0.js";
 import {
   getProjectEmbeddings2
 } from "./server-4dhv7mqz.js";
@@ -48,7 +48,7 @@ import {
   isEmbeddingEnabled,
   embedText,
   ensureMemoryEmbeddings2
-} from "./server-qteg2kt9.js";
+} from "./server-8j2e7t31.js";
 import {
   ModuleMemoryAuthorityError2,
   getMemoriesByProject2,
@@ -63,13 +63,13 @@ import {
   sanitizeFtsQuery,
   searchMemoriesFTS,
   searchMemoriesFTSUnion
-} from "./server-d48x3m4x.js";
+} from "./server-9xbbaekh.js";
 import {
   cleanSearchText,
   keywordRelevance,
   matchedSearchSnippet,
   getIndexedMessageCorpusSize2
-} from "./server-ppcd1qxh.js";
+} from "./server-6a8pxpxg.js";
 import {
   MESSAGE_FTS_SESSION_FILTER_SQL,
   withMessageFtsSessionFilter

package/dist/v2/{server-dtp8hcjh.js → server-wxrdher8.js}

@@ -5,7 +5,7 @@ import {
 } from "./server-gzy5w8ya.js";
 import {
   runSessionWarmupWorker
-} from "./server-4kjmrjn4.js";
+} from "./server-swvhxhxz.js";
 import {
   logSlowWriteTransaction
 } from "./server-gyy4k6mf.js";

package/dist/v2/server.js

@@ -7874,7 +7874,7 @@ var require_src2 = __commonJS(function(exports, module) {
 // package.json
 var package_default = {
   name: "@cortexkit/opencode-magic-context",
-  version: "0.49.23",
+  version: "0.49.25",
   type: "module",
   description: "OpenCode plugin for Magic Context — cross-session memory and context management",
   main: "dist/index.js",
@@ -7917,8 +7917,8 @@ var package_default = {
     "check:tui-compiled": 'git diff --exit-code -- src/tui-compiled && test -z "$(git status --porcelain -- src/tui-compiled)"',
     "check:transformers-node-wasm": "bun scripts/verify-transformers-node-wasm.ts",
     typecheck: "tsc -p ../retina-local-fs/tsconfig.build.json && tsc --noEmit && tsc -p tsconfig.scripts.json",
-    test: "bun ../../scripts/check-bun.mjs && bun install --frozen-lockfile && bun run test:active-session-backfill && MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --parallel=4 --timeout 30000 --test-name-pattern '^(?!re-embeds 1600 old chunks)'",
-    "test:active-session-backfill": "MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test src/hooks/magic-context/auto-embed-session.test.ts --test-name-pattern '^re-embeds 1600 old chunks' --timeout 120000",
+    test: "bun ../../scripts/check-bun.mjs && bun install --frozen-lockfile && MC_SLOW_TESTS=0 MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --parallel=4 --timeout 30000 --test-name-pattern '^(?!.*\\[slow\\] )'",
+    "test:active-session-backfill": "MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test src/hooks/magic-context/auto-embed-session.test.ts --test-name-pattern 're-embeds old chunks' --timeout 120000",
     "test:serial": "bun install --frozen-lockfile && MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --timeout 30000",
     "test:parallel:probe": "bun scripts/verify-parallel-db-isolation.ts",
     lint: "bun ../../scripts/check-bun.mjs && biome check .",
@@ -7929,7 +7929,7 @@ var package_default = {
     prepublishOnly: "bun run build && bun run check:tui-compiled"
   },
   "//check:tui-compiled": "Check drift on output already generated by build or build:tui; this check never regenerates files. CI and prepublishOnly build first.",
-  "//test": "The strict 50ms active-session backfill latency gate runs alone before the four-worker suite, which excludes only that already-run case. Unrelated workers can deschedule the latency monitor. Test runs also disable JSC's optimizing WebAssembly tier so per-file isolation does not pay its compilation cost on every file; production host options are unchanged.",
+  "//test": "Unit shards run small behavioral fixtures. The nightly/check-branch slow-unit lane runs full scale and latency gates in fresh processes once per mode, not once per shard. JSC's optimizing WebAssembly tier stays disabled in tests; production host options are unchanged.",
   dependencies: {
     "@cortexkit/subc-client": "0.11.1",
     "@jitl/quickjs-singlefile-cjs-release-asyncify": "0.32.0",
@@ -8195,7 +8195,7 @@ async function setup(context) {
   if (claimStorageBackupWarningCheck() && isMagicContextStorageOutsideEngram(storageDir)) {
     log2(`[magic-context] Magic Context storage is at ${storageDir}, outside the folder Engram backs up (~/.local/share/cortexkit/magic-context). It is not included in CortexKit backups.`);
   }
-  const { registerContext } = await import("./context-ea3x7smm.js");
+  const { registerContext } = await import("./context-y7wfvdve.js");
   setHarness2("opencode2");
   bindStaleBuildNotice({}, import.meta.url, "opencode2");
   const duties = await registerContext(context);

package/dist/v2/{wrapup-orchestrator-3ssd5yy1.js → wrapup-orchestrator-ycs8y6n4.js}

@@ -19,8 +19,8 @@ import {
   registerActiveCompartmentRun,
   setRecompStarting2,
   setRecompTerminal2
-} from "./server-zg5y109h.js";
-import"./server-ad18djzs.js";
+} from "./server-7weh65vd.js";
+import"./server-q5z0gag0.js";
 import"./server-3mz2qh5a.js";
 import"./server-ab1g0wn9.js";
 import {
@@ -28,10 +28,10 @@ import {
 } from "./server-gzy5w8ya.js";
 import"./server-51779zs2.js";
 import"./server-cpjk5jd2.js";
-import"./server-4kjmrjn4.js";
-import"./server-dtp8hcjh.js";
-import"./server-62g58aaz.js";
-import"./server-ppcd1qxh.js";
+import"./server-swvhxhxz.js";
+import"./server-wxrdher8.js";
+import"./server-pw21ypwb.js";
+import"./server-6a8pxpxg.js";
 import {
   getWrapupInProgressState,
   acquireWrapupInProgress,
@@ -40,20 +40,20 @@ import {
   getHistorianFailureState,
   clearEmergencyRecovery,
   prepareRawSessionOrdinals2
-} from "./server-m4bfaevz.js";
+} from "./server-5brp2rfn.js";
 import"./server-rqebawx1.js";
-import"./server-j8h7bsca.js";
+import"./server-e75vag9d.js";
 import"./server-1zx87sdm.js";
 import"./server-fa7vtp40.js";
 import"./server-24g8r2d0.js";
 import"./server-2ra6pwf3.js";
 import"./server-3vhxy2k5.js";
-import"./server-d1dzgvwd.js";
+import"./server-7d6m1p2b.js";
 import"./server-fr0wbhdn.js";
 import"./server-wwaw5npa.js";
 import"./server-qjvk4a9t.js";
 import"./server-fb3zxn06.js";
-import"./server-d48x3m4x.js";
+import"./server-9xbbaekh.js";
 import {
   pushNotification2
 } from "./server-x8a7jmkh.js";
@@ -62,7 +62,7 @@ import"./server-qt1qqasc.js";
 import"./server-bsgd4dk1.js";
 import"./server-4dhv7mqz.js";
 import"./server-vr4szghm.js";
-import"./server-qteg2kt9.js";
+import"./server-8j2e7t31.js";
 import"./server-jjvbk92s.js";
 import"./server-94wk1ey3.js";
 import"./server-29qp8nz4.js";

package/dist/{wrapup-orchestrator-5vpcd1zx.js → wrapup-orchestrator-f642w8n3.js}

@@ -1,41 +1,41 @@
 import {
   runManagedWrapup2
-} from "./index-jmq8kfe7.js";
-import"./index-ffzhwfzy.js";
-import"./index-y76rhsnr.js";
+} from "./index-ebsvmc5s.js";
+import"./index-zzrzjnx5.js";
+import"./index-0s8454t2.js";
 import"./index-qgh1qwjj.js";
-import"./index-3svaejkh.js";
-import"./index-mnnkgq0q.js";
+import"./index-z928hmnp.js";
+import"./index-awcftgmx.js";
 import"./index-sd3egckz.js";
-import"./index-rxqr723x.js";
-import"./index-zy67whjr.js";
+import"./index-t6j3qxnd.js";
+import"./index-z05n7702.js";
 import"./index-jjvbk92s.js";
 import"./index-4dhv7mqz.js";
 import"./index-spwjbkc7.js";
-import"./index-66eby7hx.js";
+import"./index-jcr6pe7z.js";
 import"./index-qt1qqasc.js";
-import"./index-mnhcdfxg.js";
+import"./index-yrrsp47d.js";
 import"./index-whcgcfrv.js";
 import"./index-1zx87sdm.js";
-import"./index-ksq50rg0.js";
+import"./index-c9zrgcnt.js";
 import"./index-x8a7jmkh.js";
 import"./index-rrv26qjz.js";
 import"./index-51rdvtkz.js";
 import"./index-nxrsns5x.js";
 import"./index-kfyb3k6n.js";
-import"./index-m32esgmj.js";
+import"./index-3d5wnkq7.js";
 import"./index-wfybj1dw.js";
-import"./index-a9zvn5fe.js";
+import"./index-q7ywt6xt.js";
 import"./index-fb3zxn06.js";
 import"./index-9q1g3c5q.js";
 import"./index-kq5w68dp.js";
-import"./index-x6cbrv9h.js";
+import"./index-szf8r0ba.js";
 import"./index-fr0wbhdn.js";
 import"./index-c7phnbvk.js";
-import"./index-j76ah6d7.js";
+import"./index-cfaet9cg.js";
 import"./index-x9k3mqrf.js";
 import"./index-58e3y90n.js";
-import"./index-jfem3dgz.js";
+import"./index-7tdtpqrg.js";
 import"./index-v0p37hm2.js";
 import"./index-t5pck3ss.js";
 import"./index-b88dwwrh.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/opencode-magic-context",
-  "version": "0.49.23",
+  "version": "0.49.25",
   "type": "module",
   "description": "OpenCode plugin for Magic Context — cross-session memory and context management",
   "main": "dist/index.js",
@@ -43,8 +43,8 @@
     "check:tui-compiled": "git diff --exit-code -- src/tui-compiled && test -z \"$(git status --porcelain -- src/tui-compiled)\"",
     "check:transformers-node-wasm": "bun scripts/verify-transformers-node-wasm.ts",
     "typecheck": "tsc -p ../retina-local-fs/tsconfig.build.json && tsc --noEmit && tsc -p tsconfig.scripts.json",
-    "test": "bun ../../scripts/check-bun.mjs && bun install --frozen-lockfile && bun run test:active-session-backfill && MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --parallel=4 --timeout 30000 --test-name-pattern '^(?!re-embeds 1600 old chunks)'",
-    "test:active-session-backfill": "MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test src/hooks/magic-context/auto-embed-session.test.ts --test-name-pattern '^re-embeds 1600 old chunks' --timeout 120000",
+    "test": "bun ../../scripts/check-bun.mjs && bun install --frozen-lockfile && MC_SLOW_TESTS=0 MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --parallel=4 --timeout 30000 --test-name-pattern '^(?!.*\\[slow\\] )'",
+    "test:active-session-backfill": "MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test src/hooks/magic-context/auto-embed-session.test.ts --test-name-pattern 're-embeds old chunks' --timeout 120000",
     "test:serial": "bun install --frozen-lockfile && MC_REVIEW_ASSERT_LIVENESS=1 BUN_JSC_useOMGJIT=0 bun test --timeout 30000",
     "test:parallel:probe": "bun scripts/verify-parallel-db-isolation.ts",
     "lint": "bun ../../scripts/check-bun.mjs && biome check .",
@@ -55,7 +55,7 @@
     "prepublishOnly": "bun run build && bun run check:tui-compiled"
   },
   "//check:tui-compiled": "Check drift on output already generated by build or build:tui; this check never regenerates files. CI and prepublishOnly build first.",
-  "//test": "The strict 50ms active-session backfill latency gate runs alone before the four-worker suite, which excludes only that already-run case. Unrelated workers can deschedule the latency monitor. Test runs also disable JSC's optimizing WebAssembly tier so per-file isolation does not pay its compilation cost on every file; production host options are unchanged.",
+  "//test": "Unit shards run small behavioral fixtures. The nightly/check-branch slow-unit lane runs full scale and latency gates in fresh processes once per mode, not once per shard. JSC's optimizing WebAssembly tier stays disabled in tests; production host options are unchanged.",
   "dependencies": {
     "@cortexkit/subc-client": "0.11.1",
     "@jitl/quickjs-singlefile-cjs-release-asyncify": "0.32.0",

package/src/agents/permissions.ts

@@ -112,9 +112,14 @@ function isPermissionMap(value: unknown): value is Record<string, unknown> {
  * OpenCode accepts either a whole-permission action or a pattern map for
  * `permission.task`; its visibility evaluator uses the last matching rule.
  * Normalize the whole-permission form, retain unrelated user rules, then append
- * our exact agent-id denies. When the ambient task policy has a wildcard deny,
- * re-emit that wildcard after the named denies so the Task tool is hidden rather
- * than shown as a callable-but-refused tool.
+ * our exact agent-id denies. When the ambient task policy is a wildcard deny
+ * whose only companions are our own appended agent-id denies, re-emit that
+ * wildcard after the named denies so the Task tool is hidden rather than shown
+ * as a callable-but-refused tool. When the wildcard deny sits next to any of
+ * the agent's own rules (the deny-by-default-with-exceptions shape), keep the
+ * agent's own ordering untouched: OpenCode resolves with the last matching
+ * rule, so moving the wildcard to the end there would override every named
+ * allow and empty the Task tool (#777).
  */
 export function denyTaskRoutingToAgents(
     permission: unknown,
@@ -133,10 +138,19 @@ export function denyTaskRoutingToAgents(
           : {};
     const internalAgentIdSet = new Set(internalAgentIds);
     const hasAmbientWildcardDeny = configuredTask["*"] === "deny";
+    // Only our own appended agent-id denies may accompany the wildcard for the
+    // move to stay correct — a user's named allow next to it must keep winning.
+    // Excluding internal ids here also keeps re-merging our own output
+    // idempotent: that output is exactly internal denies plus the wildcard.
+    const movesAmbientWildcardDeny =
+        hasAmbientWildcardDeny &&
+        Object.keys(configuredTask).every(
+            (agentId) => agentId === "*" || internalAgentIdSet.has(agentId),
+        );
     const retainedTask = Object.fromEntries(
         Object.entries(configuredTask).filter(
             ([agentId]) =>
-                !internalAgentIdSet.has(agentId) && (agentId !== "*" || !hasAmbientWildcardDeny),
+                !internalAgentIdSet.has(agentId) && (agentId !== "*" || !movesAmbientWildcardDeny),
         ),
     );
 
@@ -147,8 +161,10 @@ export function denyTaskRoutingToAgents(
             ...Object.fromEntries(internalAgentIds.map((agentId) => [agentId, "deny"])),
             // OpenCode's Permission.disabled uses findLast. Re-inserting the
             // ambient wildcard after our named routing denies keeps its whole-tool
-            // deny as the final match and makes the Task tool invisible.
-            ...(hasAmbientWildcardDeny ? { "*": "deny" } : {}),
+            // deny as the final match and makes the Task tool invisible — but
+            // only when it stood alone; with named rules the agent's own
+            // ordering must win (#777).
+            ...(movesAmbientWildcardDeny ? { "*": "deny" } : {}),
         },
     };
 }