@cortexkit/pi-magic-context 0.33.0 → 0.34.0

package/dist/{index-f3jfb2ed.js → index-0k3j1tc3.js}

@@ -7852,9 +7852,13 @@ var require_src2 = __commonJS((exports, module) => {
 });
 
 // ../plugin/src/config/agent-disable.ts
+var COMPACTION_ENABLED_PATH = `compaction${"."}enabled`;
 function isDreamerRunnable(config) {
   return !!config.dreamer && config.dreamer.disable !== true;
 }
+function isCompactionEnabled(config) {
+  return config.compaction?.enabled !== false;
+}
 function clonePlainObject(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     return;
@@ -8296,6 +8300,7 @@ var dubiousOwnershipLoggedDirectories = new Set;
 var dubiousOwnershipWarnedDirectories = new Set;
 var transientGitIdentityReuseLoggedDirectories = new Set;
 var execFileSyncForIdentity = execFileSync;
+var userHomeDirectoryForIdentity = () => homedir2();
 var nowMs = () => Date.now();
 
 class ProjectIdentityError extends Error {
@@ -8491,9 +8496,12 @@ function recordDubiousOwnershipFallback(canonical) {
   dubiousOwnershipLoggedDirectories.add(canonical);
   log(`[magic-context] ${formatDubiousOwnershipWarning(canonical)}`);
 }
+function canonicalUserHomeDirectory() {
+  return realpathSync.native(userHomeDirectoryForIdentity());
+}
 function isUserHomeDirectory(directory) {
   try {
-    return realpathSync.native(path.resolve(directory)) === realpathSync.native(homedir2());
+    return realpathSync.native(path.resolve(directory)) === canonicalUserHomeDirectory();
   } catch {
     return false;
   }
@@ -8562,22 +8570,52 @@ function hasGitDir(canonical) {
     return false;
   }
 }
-function hasGitDirInAncestorChain(startDirectory) {
+function gitRootInAncestorChain(startDirectory) {
   let current = startDirectory;
   while (true) {
     if (existsSync2(path.join(current, ".git"))) {
-      return true;
+      try {
+        return realpathSync.native(current);
+      } catch {
+        return path.resolve(current);
+      }
     }
     const parent = path.dirname(current);
     if (parent === current) {
-      return false;
+      return null;
     }
     current = parent;
   }
 }
-function resolveProjectIdentityForSession(directory) {
-  if (isUserHomeDirectory(directory))
-    return;
+function hasGitDirInAncestorChain(startDirectory) {
+  return gitRootInAncestorChain(startDirectory) !== null;
+}
+function gitRootDirectory(canonical) {
+  const direct = gitRootInAncestorChain(canonical);
+  if (direct)
+    return direct;
+  try {
+    const realCanonical = realpathSync.native(canonical);
+    return realCanonical === canonical ? null : gitRootInAncestorChain(realCanonical);
+  } catch {
+    return null;
+  }
+}
+function resolveProjectIdentityForSession(directory, allowHomeProject = false) {
+  const canonicalHome = canonicalUserHomeDirectory();
+  const canonicalDirectory = (() => {
+    try {
+      return realpathSync.native(path.resolve(directory));
+    } catch {
+      return path.resolve(directory);
+    }
+  })();
+  const inheritsHomeRepository = gitRootDirectory(canonicalDirectory) === canonicalHome;
+  if (canonicalDirectory === canonicalHome || inheritsHomeRepository) {
+    if (!allowHomeProject)
+      return;
+    return directoryFallback(canonicalHome);
+  }
   return resolveProjectIdentityOrFallback(directory);
 }
 function normalizeStoredProjectPath(rawOrStored) {
@@ -8610,9 +8648,28 @@ function scheduleAfterBootQuiet(task, additionalDelayMs = 0) {
   return timer;
 }
 
+// ../plugin/src/shared/storage-permissions.ts
+var enforcePrivateStoragePermissions = true;
+function setStoragePrivatePermissionEnforcement(enforce) {
+  enforcePrivateStoragePermissions = enforce;
+}
+function shouldEnforcePrivateStoragePermissions() {
+  return enforcePrivateStoragePermissions;
+}
+
 // ../plugin/src/features/magic-context/storage-db.ts
-import { chmodSync, copyFileSync, cpSync, existsSync as existsSync4, mkdirSync as mkdirSync2, mkdtempSync } from "node:fs";
-import { dirname as dirname2, join as join3 } from "node:path";
+import {
+  chmodSync,
+  copyFileSync,
+  cpSync,
+  existsSync as existsSync4,
+  mkdirSync as mkdirSync2,
+  mkdtempSync,
+  readdirSync,
+  readFileSync as readFileSync2,
+  unlinkSync as unlinkSync2
+} from "node:fs";
+import { basename as basename2, dirname as dirname2, join as join3 } from "node:path";
 
 // ../plugin/src/shared/error-message.ts
 function getErrorMessage(error) {
@@ -8690,6 +8747,49 @@ function safeString(value) {
   }
 }
 
+// ../plugin/src/shared/rpc-utils.ts
+function isPidAlive(pid) {
+  if (!Number.isInteger(pid) || pid <= 0)
+    return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+function parseRpcPortFile(content, fallbackPid = 0) {
+  const trimmed = content.trim();
+  if (!trimmed)
+    return null;
+  if (trimmed.startsWith("{")) {
+    try {
+      const parsed = JSON.parse(trimmed);
+      const port2 = Number(parsed.port);
+      const pid = Number(parsed.pid);
+      const startedAt = Number(parsed.started_at);
+      if (!isValidPort(port2) || !Number.isInteger(pid) || pid <= 0)
+        return null;
+      return {
+        port: port2,
+        pid,
+        started_at: Number.isFinite(startedAt) ? startedAt : 0,
+        token: typeof parsed.token === "string" ? parsed.token : undefined,
+        instance_id: typeof parsed.instance_id === "string" ? parsed.instance_id : undefined
+      };
+    } catch {
+      return null;
+    }
+  }
+  const port = Number.parseInt(trimmed, 10);
+  if (!isValidPort(port))
+    return null;
+  return { port, pid: fallbackPid, started_at: 0 };
+}
+function isValidPort(port) {
+  return Number.isInteger(port) && port > 0 && port <= 65535;
+}
+
 // ../plugin/src/shared/sqlite.ts
 var isBun = typeof process !== "undefined" && typeof process.versions?.bun === "string";
 var bunSpec = "bun:" + "sqlite";
@@ -8757,30 +8857,11 @@ function buildNodeSqliteDatabaseClass(DatabaseSync) {
 }
 var Database = DatabaseImpl;
 var privilegeDepth = new WeakMap;
-var registeredPrivilegeFunctions = new WeakSet;
-var privilegeUdfAvailable = new WeakSet;
-function registerPrivilegedWriter(db) {
-  if (registeredPrivilegeFunctions.has(db))
-    return;
-  const native = db;
-  const implementation = () => (privilegeDepth.get(db) ?? 0) > 0 ? 1 : 0;
-  if (typeof native.function === "function") {
-    native.function("mc_privileged_writer", implementation);
-  } else if (typeof native.createFunction === "function") {
-    native.createFunction("mc_privileged_writer", implementation);
-  } else {
-    registeredPrivilegeFunctions.add(db);
-    return;
-  }
-  privilegeUdfAvailable.add(db);
-  registeredPrivilegeFunctions.add(db);
-}
 function isInTransaction(db) {
   const candidate = db;
   return candidate.inTransaction === true || candidate.isTransaction === true;
 }
 function withPrivilegedWriter(db, operation) {
-  registerPrivilegedWriter(db);
   const previousDepth = privilegeDepth.get(db) ?? 0;
   const nested = isInTransaction(db);
   const savepoint = "mc_privilege_scope";
@@ -8791,11 +8872,9 @@ function withPrivilegedWriter(db, operation) {
   }
   privilegeDepth.set(db, previousDepth + 1);
   try {
-    if (!privilegeUdfAvailable.has(db)) {
-      db.prepare("INSERT INTO context_privilege_state(id, enabled) VALUES (1, 1) ON CONFLICT(id) DO UPDATE SET enabled = 1").run();
-    }
+    db.prepare("INSERT INTO context_privilege_state(id, enabled) VALUES (1, 1) ON CONFLICT(id) DO UPDATE SET enabled = 1").run();
     const result = operation();
-    if (!privilegeUdfAvailable.has(db) && previousDepth === 0) {
+    if (previousDepth === 0) {
       db.prepare("UPDATE context_privilege_state SET enabled = 0 WHERE id = 1").run();
     }
     if (nested) {
@@ -8860,6 +8939,184 @@ function ensureContextStoreUuid(db) {
 var MAX_AUTHORITY_SEED_FRAME_BYTES = 900 * 1024;
 var mirrorFlights = new WeakMap;
 
+// ../plugin/src/hooks/magic-context/compartment-parser.ts
+var COMPARTMENT_REGEX = /<compartment\s+([^>]*?)\s*>(.*?)<\/compartment>/gs;
+var ATTR_START_REGEX = /\bstart="(\d+)"/;
+var ATTR_END_REGEX = /\bend="(\d+)"/;
+var ATTR_TITLE_REGEX = /\btitle="([^"]*)"/;
+var ATTR_EPISODE_REGEX = /\bepisode_type="([^"]*)"/;
+var ATTR_IMPORTANCE_REGEX = /\bimportance="(\d+)"/;
+function makeTierOpenRegex(n) {
+  return new RegExp(`<p${n}\\s*(/?)>`);
+}
+var TIER_OPEN_REGEXES = [
+  makeTierOpenRegex(1),
+  makeTierOpenRegex(2),
+  makeTierOpenRegex(3),
+  makeTierOpenRegex(4)
+];
+var TIER_CLOSE_ANY_REGEX = /<\/p\d/;
+var TIER_OPEN_ANY_REGEX = /<p\d/;
+var CATEGORY_BLOCK_REGEX = /<(PROJECT_RULES|ARCHITECTURE|CONSTRAINTS|CONFIG_VALUES|NAMING)>(.*?)<\/\1>/gs;
+var FACT_ITEM_REGEX = /^\s*\*\s*(.+)$/gm;
+var UNPROCESSED_REGEX = /<unprocessed_from>(\d+)<\/unprocessed_from>/;
+var USER_OBSERVATIONS_REGEX = /<user_observations>(.*?)<\/user_observations>/s;
+var USER_OBS_ITEM_REGEX = /^\s*\*\s*(.+)$/gm;
+var PRIMER_CANDIDATES_REGEX = /<primer_candidates>(.*?)<\/primer_candidates>/s;
+var PRIMER_ELEMENT_REGEX = /<primer\s+at_compartment="(\d+)"\s*>(.*?)<\/primer>/gs;
+var PRIMER_ITEM_REGEX = /^\s*(?:\*|-|\d+\.)\s*(.+)$/gm;
+var FACTS_BLOCK_REGEX = /<facts>(.*?)<\/facts>/s;
+var EVENTS_BLOCK_REGEX = /<events>(.*?)<\/events>/s;
+var EVENT_ELEMENT_REGEX = /<([a-z_]+)\s+at_compartment="(\d+)"\s*>(.*?)<\/\1>/gs;
+var EVENT_FIELD_REGEX = /<([a-z_]+)\s*>(.*?)<\/\1>/gs;
+function extractTier(inner, index) {
+  const openMatch = TIER_OPEN_REGEXES[index].exec(inner);
+  if (!openMatch)
+    return;
+  if (openMatch[1] === "/")
+    return "";
+  const rest = inner.slice(openMatch.index + openMatch[0].length);
+  const closeAt = rest.search(TIER_CLOSE_ANY_REGEX);
+  let body = closeAt === -1 ? rest : rest.slice(0, closeAt);
+  const openInside = body.search(TIER_OPEN_ANY_REGEX);
+  if (openInside !== -1)
+    body = body.slice(0, openInside);
+  return unescapeXml(body.trim());
+}
+function extractTiersFromInner(inner) {
+  return {
+    p1: extractTier(inner, 0),
+    p2: extractTier(inner, 1),
+    p3: extractTier(inner, 2),
+    p4: extractTier(inner, 3)
+  };
+}
+function parseCompartmentOutput(text) {
+  const compartments = [];
+  const facts = [];
+  for (const match of text.matchAll(COMPARTMENT_REGEX)) {
+    const attrs = match[1];
+    const inner = match[2];
+    const startMatch = attrs.match(ATTR_START_REGEX);
+    const endMatch = attrs.match(ATTR_END_REGEX);
+    const titleMatch = attrs.match(ATTR_TITLE_REGEX);
+    if (!startMatch || !endMatch || !titleMatch)
+      continue;
+    const startMessage = parseInt(startMatch[1], 10);
+    const endMessage = parseInt(endMatch[1], 10);
+    const title = unescapeXml(titleMatch[1]);
+    if (Number.isNaN(startMessage) || Number.isNaN(endMessage) || !title)
+      continue;
+    const episodeMatch = attrs.match(ATTR_EPISODE_REGEX);
+    const importanceMatch = attrs.match(ATTR_IMPORTANCE_REGEX);
+    const episodeType = episodeMatch ? unescapeXml(episodeMatch[1]) : undefined;
+    const importance = importanceMatch ? parseInt(importanceMatch[1], 10) : undefined;
+    const p1 = extractTier(inner, 0);
+    if (typeof p1 === "string" && p1.length > 0) {
+      const p2 = extractTier(inner, 1);
+      const p3 = extractTier(inner, 2);
+      const p4 = extractTier(inner, 3);
+      compartments.push({
+        startMessage,
+        endMessage,
+        title,
+        content: p1,
+        p1,
+        p2: typeof p2 === "string" ? p2 : p1,
+        p3: typeof p3 === "string" ? p3 : typeof p2 === "string" ? p2 : p1,
+        p4: typeof p4 === "string" ? p4 : "",
+        importance,
+        episodeType
+      });
+      continue;
+    }
+    const content = unescapeXml(inner.trim());
+    if (content) {
+      compartments.push({
+        startMessage,
+        endMessage,
+        title,
+        content,
+        importance,
+        episodeType
+      });
+    }
+  }
+  const factsBlockMatch = text.match(FACTS_BLOCK_REGEX);
+  const factsScope = factsBlockMatch ? factsBlockMatch[1] : text.replace(EVENTS_BLOCK_REGEX, "").replace(/<compartment\s+[^>]*?\s*>.*?<\/compartment>/gs, "");
+  for (const categoryMatch of factsScope.matchAll(CATEGORY_BLOCK_REGEX)) {
+    const category = categoryMatch[1];
+    const blockContent = categoryMatch[2];
+    for (const itemMatch of blockContent.matchAll(FACT_ITEM_REGEX)) {
+      const content = unescapeXml(itemMatch[1].trim());
+      if (content) {
+        facts.push({ category, content });
+      }
+    }
+  }
+  const unprocessedMatch = text.match(UNPROCESSED_REGEX);
+  const unprocessedFrom = unprocessedMatch ? parseInt(unprocessedMatch[1], 10) : null;
+  const userObservations = [];
+  const userObsMatch = text.match(USER_OBSERVATIONS_REGEX);
+  if (userObsMatch) {
+    for (const itemMatch of userObsMatch[1].matchAll(USER_OBS_ITEM_REGEX)) {
+      const obs = unescapeXml(itemMatch[1].trim());
+      if (obs)
+        userObservations.push(obs);
+    }
+  }
+  const primerCandidates = [];
+  const primerMatch = text.match(PRIMER_CANDIDATES_REGEX);
+  if (primerMatch) {
+    const block = primerMatch[1];
+    let sawElement = false;
+    for (const el of block.matchAll(PRIMER_ELEMENT_REGEX)) {
+      sawElement = true;
+      const question = unescapeXml(el[2].trim());
+      if (question) {
+        primerCandidates.push({
+          question,
+          originCompartmentIndex: Number.parseInt(el[1], 10)
+        });
+      }
+    }
+    if (!sawElement) {
+      for (const itemMatch of block.matchAll(PRIMER_ITEM_REGEX)) {
+        const question = unescapeXml(itemMatch[1].trim());
+        if (question)
+          primerCandidates.push({ question });
+      }
+    }
+  }
+  const events = parseEvents(text);
+  compartments.sort((a, b) => a.startMessage - b.startMessage);
+  return { compartments, facts, events, unprocessedFrom, userObservations, primerCandidates };
+}
+function parseEvents(text) {
+  const blockMatch = text.match(EVENTS_BLOCK_REGEX);
+  if (!blockMatch)
+    return [];
+  const block = blockMatch[1];
+  const events = [];
+  for (const elMatch of block.matchAll(EVENT_ELEMENT_REGEX)) {
+    const kind = elMatch[1];
+    const atRaw = parseInt(elMatch[2], 10);
+    const atCompartment = Number.isNaN(atRaw) ? null : atRaw;
+    const fields = {};
+    for (const fieldMatch of elMatch[3].matchAll(EVENT_FIELD_REGEX)) {
+      const name = fieldMatch[1];
+      const value = unescapeXml(fieldMatch[2].trim());
+      if (value)
+        fields[name] = value;
+    }
+    events.push({ kind, atCompartment, fields });
+  }
+  return events;
+}
+function unescapeXml(s) {
+  return s.replace(/&amp;/g, "&").replace(/&apos;/g, "'").replace(/&quot;/g, '"').replace(/&lt;/g, "<").replace(/&gt;/g, ">");
+}
+
 // ../plugin/src/features/magic-context/storage-schema-helpers.ts
 function ensureColumn(db, table, column, definition) {
   if (!/^[a-z][a-z0-9_]*$/.test(table) || !/^[a-z][a-z0-9_]*$/.test(column) || !/^[A-Z0-9_"'(),[\]\s]+$/i.test(definition)) {
@@ -9285,15 +9542,38 @@ function isSqliteLockError(error) {
 function tableExists2(db, name) {
   return Boolean(db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name = ?").get(name));
 }
+function healMismatchedTierClose(db, table, hasLegacy) {
+  if (!tableExists2(db, table))
+    return;
+  const columns = new Set(db.prepare(`PRAGMA table_info(${table})`).all().map((row) => row.name));
+  for (const required of ["content", "p1", "p2", "p3", "p4"]) {
+    if (!columns.has(required))
+      return;
+  }
+  if (hasLegacy && !columns.has("legacy"))
+    return;
+  const predicate = hasLegacy ? "legacy = 1 AND p1 IS NULL AND content LIKE '%<p1%'" : "p1 IS NULL AND content LIKE '%<p1%'";
+  const rows = db.prepare(`SELECT id, content FROM ${table} WHERE ${predicate}`).all();
+  const update = db.prepare(`UPDATE ${table} SET p1 = ?, p2 = ?, p3 = ?, p4 = ?${hasLegacy ? ", legacy = 0" : ""} WHERE id = ?`);
+  for (const row of rows) {
+    const tiers = extractTiersFromInner(row.content);
+    if (typeof tiers.p1 !== "string" || tiers.p1.length === 0)
+      continue;
+    const p1 = tiers.p1;
+    const p2 = typeof tiers.p2 === "string" ? tiers.p2 : p1;
+    const p3 = typeof tiers.p3 === "string" ? tiers.p3 : p2;
+    const p4 = typeof tiers.p4 === "string" ? tiers.p4 : "";
+    update.run(p1, p2, p3, p4, row.id);
+  }
+}
 function assertForeignKeyIntegrity(db, table) {
   const rows = (table ? db.prepare(`PRAGMA foreign_key_check(${table})`) : db.prepare("PRAGMA foreign_key_check")).all();
   if (rows.length > 0) {
     throw new Error(`foreign_key_check failed after embedding table rebuild${table ? ` (${table})` : ""} (${rows.length} violation(s))`);
   }
 }
-function authorityPrivilegeCheck(db) {
-  const native = db;
-  return typeof native.function === "function" || typeof native.createFunction === "function" ? "mc_privileged_writer() = 0" : "COALESCE((SELECT enabled FROM context_privilege_state WHERE id = 1), 0) = 0";
+function authorityPrivilegeCheck() {
+  return "COALESCE((SELECT enabled FROM context_privilege_state WHERE id = 1), 0) = 0";
 }
 function managedAuthorityNoteRow(row) {
   return `(
@@ -9312,7 +9592,7 @@ function managedAuthorityNoteRow(row) {
     )`;
 }
 function installLatestAuthorityTriggers(db) {
-  const privilegeCheck = authorityPrivilegeCheck(db);
+  const privilegeCheck = authorityPrivilegeCheck();
   if (tableExists2(db, "memories")) {
     db.exec(`
             DROP TRIGGER IF EXISTS memories_authority_guard_insert;
@@ -11238,6 +11518,48 @@ var MIGRATIONS = [
                     ON memory_mutation_log(project_path, target_memory_id, id);
             `);
     }
+  },
+  {
+    version: 70,
+    description: "heal legacy compartments stranded by mismatched tier closing tags (issue #246)",
+    up(db) {
+      healMismatchedTierClose(db, "compartments", true);
+      healMismatchedTierClose(db, "recomp_compartments", false);
+    }
+  },
+  {
+    version: 71,
+    description: "rebuild authority guard triggers to the durable state-table form (issue #253)",
+    up(db) {
+      installLatestAuthorityTriggers(db);
+    }
+  },
+  {
+    version: 72,
+    description: "add per-session compaction mode record column (issue #266)",
+    up(db) {
+      if (tableExists2(db, "session_meta")) {
+        ensureColumn(db, "session_meta", "compaction_mode_record", "TEXT");
+      }
+    }
+  },
+  {
+    version: 73,
+    description: "persist the last successful todowrite permission verdict",
+    up(db) {
+      if (tableExists2(db, "session_meta")) {
+        ensureColumn(db, "session_meta", "todo_permission_denied", "INTEGER NOT NULL DEFAULT 2");
+      }
+    }
+  },
+  {
+    version: 74,
+    description: "persist detected context-limit provenance",
+    up(db) {
+      if (tableExists2(db, "session_meta")) {
+        ensureColumn(db, "session_meta", "detected_context_limit_provenance", "TEXT NOT NULL DEFAULT 'unknown'");
+      }
+    }
   }
 ];
 var LATEST_MIGRATION_VERSION = MIGRATIONS.reduce((max, m) => Math.max(max, m.version), 0);
@@ -144263,30 +144585,40 @@ var persistenceByDatabase = new WeakMap;
 var persistenceErrorByDatabase = new WeakMap;
 var pathByDatabase = new WeakMap;
 var lastSchemaFenceRejection = null;
+var lastMigrationOnOpenRefusal = null;
 function getSchemaFenceRejection() {
   return lastSchemaFenceRejection;
 }
-var LATEST_SUPPORTED_VERSION = 69;
+function getMigrationOnOpenRefusal() {
+  return lastMigrationOnOpenRefusal;
+}
+var LATEST_SUPPORTED_VERSION = 74;
 var PERMISSIONS_ENFORCEABLE = process.platform !== "win32";
+var defaultStoragePermissionFs = { chmodSync, mkdirSync: mkdirSync2 };
+var storagePermissionFs = defaultStoragePermissionFs;
 function ensureSecureStorageDir(dir) {
-  mkdirSync2(dir, { recursive: true, mode: 448 });
+  if (!shouldEnforcePrivateStoragePermissions()) {
+    storagePermissionFs.mkdirSync(dir, { recursive: true });
+    return;
+  }
+  storagePermissionFs.mkdirSync(dir, { recursive: true, mode: 448 });
   if (!PERMISSIONS_ENFORCEABLE)
     return;
   try {
-    chmodSync(dir, 448);
+    storagePermissionFs.chmodSync(dir, 448);
   } catch (error) {
     log(`[magic-context] could not restrict storage dir permissions on ${dir}: ${getErrorMessage(error)}`);
   }
 }
 function restrictDatabaseFilePermissions(dbPath) {
-  if (!PERMISSIONS_ENFORCEABLE)
+  if (!PERMISSIONS_ENFORCEABLE || !shouldEnforcePrivateStoragePermissions())
     return;
   for (const suffix of ["", "-wal", "-shm"]) {
     const file = `${dbPath}${suffix}`;
     if (!existsSync4(file))
       continue;
     try {
-      chmodSync(file, 384);
+      storagePermissionFs.chmodSync(file, 384);
     } catch (error) {
       log(`[magic-context] could not restrict DB file permissions on ${file}: ${getErrorMessage(error)}`);
     }
@@ -144356,6 +144688,9 @@ function getPersistedSchemaVersion(db) {
   const row = db.prepare("SELECT MAX(version) AS version FROM schema_migrations").get();
   return row?.version ?? 0;
 }
+function formatSchemaFenceBootLog(persistedVersion, supportedVersion) {
+  return `[magic-context] storage schema at boot: database=v${persistedVersion}, supported_fence=v${supportedVersion}`;
+}
 function getRuntimeLatestSupportedVersion(options) {
   if (options?.latestSupportedVersion !== undefined) {
     return options.latestSupportedVersion;
@@ -144372,12 +144707,109 @@ function getRuntimeLatestSupportedVersion(options) {
 function enforceSchemaFence(db, dbPath, latestSupportedVersion) {
   const persistedVersion = getPersistedSchemaVersion(db);
   if (persistedVersion <= latestSupportedVersion) {
+    lastSchemaFenceRejection = null;
     return true;
   }
   lastSchemaFenceRejection = { persistedVersion, supportedVersion: latestSupportedVersion };
   log(`[magic-context] storage fatal: refusing to open ${dbPath}; database schema v${persistedVersion} is newer than this binary supports (max v${latestSupportedVersion}). A pinned or stale plugin is likely sharing this database with a newer instance; update or unpin Magic Context with 'npx @cortexkit/magic-context@latest doctor --force', then restart.`);
   return false;
 }
+function unreadableDiscovery(path2) {
+  return {
+    state: "unreadable",
+    serverPids: [],
+    staleFiles: [],
+    unreadableFile: path2
+  };
+}
+function inspectRpcServerDiscovery(storageDir) {
+  const rpcRoot = join3(storageDir, "rpc");
+  let projectEntries;
+  try {
+    projectEntries = readdirSync(rpcRoot, { withFileTypes: true });
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { state: "absent", serverPids: [], staleFiles: [] };
+    }
+    return unreadableDiscovery(rpcRoot);
+  }
+  const portFiles = [];
+  for (const projectEntry of projectEntries) {
+    if (!projectEntry.isDirectory())
+      continue;
+    const projectDir = join3(rpcRoot, projectEntry.name);
+    let entries;
+    try {
+      entries = readdirSync(projectDir);
+    } catch {
+      return unreadableDiscovery(projectDir);
+    }
+    for (const entry of entries) {
+      if (entry === "port" || entry.startsWith("port-") && entry.endsWith(".json")) {
+        portFiles.push(join3(projectDir, entry));
+      }
+    }
+  }
+  if (portFiles.length === 0) {
+    return { state: "absent", serverPids: [], staleFiles: [] };
+  }
+  const pids = new Set;
+  const staleFiles = [];
+  for (const portFile of portFiles) {
+    let raw;
+    try {
+      raw = readFileSync2(portFile, "utf8");
+    } catch {
+      return unreadableDiscovery(portFile);
+    }
+    const filename = basename2(portFile);
+    const pidFromName = /^port-(\d+)/.exec(filename)?.[1];
+    const record = parseRpcPortFile(raw, pidFromName ? Number(pidFromName) : 0);
+    if (!record || !Number.isInteger(record.pid) || record.pid <= 0) {
+      return unreadableDiscovery(portFile);
+    }
+    if (isPidAlive(record.pid))
+      pids.add(record.pid);
+    else
+      staleFiles.push(portFile);
+  }
+  const serverPids = [...pids].sort((a, b) => a - b);
+  if (serverPids.length > 0) {
+    return { state: "live", serverPids, staleFiles };
+  }
+  for (const staleFile of staleFiles) {
+    try {
+      unlinkSync2(staleFile);
+    } catch {
+      return unreadableDiscovery(staleFile);
+    }
+  }
+  return { state: "stale", serverPids: [], staleFiles };
+}
+function enforceMigrationOnOpenGuard(db, dbPath, dbDir, latestSupportedVersion) {
+  const persistedVersion = getPersistedSchemaVersion(db);
+  if (persistedVersion >= latestSupportedVersion) {
+    lastMigrationOnOpenRefusal = null;
+    return true;
+  }
+  const discovery = inspectRpcServerDiscovery(dbDir);
+  if (discovery.state === "absent" || discovery.state === "stale") {
+    lastMigrationOnOpenRefusal = null;
+    return true;
+  }
+  lastMigrationOnOpenRefusal = {
+    persistedVersion,
+    supportedVersion: latestSupportedVersion,
+    serverPids: discovery.serverPids,
+    ...discovery.unreadableFile ? { unreadableFile: discovery.unreadableFile } : {}
+  };
+  if (discovery.state === "unreadable") {
+    log(`[magic-context] storage fatal: refusing to migrate ${dbPath} from schema v${persistedVersion} to v${latestSupportedVersion} because RPC discovery file ${discovery.unreadableFile ?? "<unknown>"} is unreadable or invalid, so the absence of a live OpenCode server cannot be proven. Restart OpenCode, remove or repair the named discovery file, then retry this process.`);
+  } else {
+    log(`[magic-context] storage fatal: refusing to migrate ${dbPath} from schema v${persistedVersion} to v${latestSupportedVersion} while live OpenCode server PID(s) ${discovery.serverPids.join(", ")} may still use the old plugin build. Restart OpenCode, then retry this process.`);
+  }
+  return false;
+}
 var sqlitePragmaConfig = {
   cacheSizeMb: 64,
   mmapSizeMb: 0
@@ -144422,6 +144854,9 @@ function finishDatabaseOpen(db, dbPath, explicitDbPath, latestSupportedVersion)
   pathByDatabase.set(db, dbPath);
   persistenceByDatabase.set(db, true);
   persistenceErrorByDatabase.delete(db);
+  if (!explicitDbPath) {
+    log(formatSchemaFenceBootLog(getPersistedSchemaVersion(db), latestSupportedVersion));
+  }
   return db;
 }
 function initializeDatabase(db) {
@@ -145022,12 +145457,14 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       note_nudge_anchors TEXT NOT NULL DEFAULT '[]',
       auto_search_hint_decisions TEXT NOT NULL DEFAULT '[]',
       last_todo_state TEXT DEFAULT '',
+      todo_permission_denied INTEGER NOT NULL DEFAULT 2,
       todo_synthetic_call_id TEXT DEFAULT '',
       todo_synthetic_anchor_message_id TEXT DEFAULT '',
       todo_synthetic_state_json TEXT DEFAULT '',
       is_subagent INTEGER DEFAULT 0,
       last_context_percentage REAL DEFAULT 0,
       last_input_tokens INTEGER DEFAULT 0,
+      detected_context_limit_provenance TEXT NOT NULL DEFAULT 'unknown',
       observed_safe_input_tokens INTEGER NOT NULL DEFAULT 0,
       cache_alert_sent INTEGER NOT NULL DEFAULT 0,
       times_execute_threshold_reached INTEGER DEFAULT 0,
@@ -145082,6 +145519,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       emergency_drain_active INTEGER NOT NULL DEFAULT 0,
       historian_drain_failure_at INTEGER NOT NULL DEFAULT 0,
       wrapup_in_progress_state TEXT,
+      compaction_mode_record TEXT,
       cached_m0_materialized_at INTEGER,
       cached_m0_session_facts_version INTEGER,
       cached_m0_upgrade_state TEXT,
@@ -145281,6 +145719,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
   ensureColumn(db, "session_meta", "note_nudge_anchors", "TEXT NOT NULL DEFAULT '[]'");
   ensureColumn(db, "session_meta", "auto_search_hint_decisions", "TEXT NOT NULL DEFAULT '[]'");
   ensureColumn(db, "session_meta", "last_todo_state", "TEXT DEFAULT ''");
+  ensureColumn(db, "session_meta", "todo_permission_denied", "INTEGER NOT NULL DEFAULT 2");
   ensureColumn(db, "session_meta", "todo_synthetic_call_id", "TEXT DEFAULT ''");
   ensureColumn(db, "session_meta", "todo_synthetic_anchor_message_id", "TEXT DEFAULT ''");
   ensureColumn(db, "session_meta", "todo_synthetic_state_json", "TEXT DEFAULT ''");
@@ -145337,6 +145776,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
   ensureColumn(db, "session_meta", "recomp_partial_range_end", "INTEGER DEFAULT 0");
   ensureColumn(db, "session_meta", "detected_context_limit", "INTEGER DEFAULT 0");
   ensureColumn(db, "session_meta", "detected_context_limit_model_key", "TEXT");
+  ensureColumn(db, "session_meta", "detected_context_limit_provenance", "TEXT NOT NULL DEFAULT 'unknown'");
   ensureColumn(db, "session_meta", "needs_emergency_recovery", "INTEGER DEFAULT 0");
   ensureColumn(db, "session_meta", "emergency_recovery_origin", "TEXT DEFAULT ''");
   ensureColumn(db, "session_meta", "pending_compaction_marker_state", "TEXT");
@@ -145387,6 +145827,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
   ensureColumn(db, "session_meta", "emergency_drain_active", "INTEGER NOT NULL DEFAULT 0");
   ensureColumn(db, "session_meta", "historian_drain_failure_at", "INTEGER NOT NULL DEFAULT 0");
   ensureColumn(db, "session_meta", "wrapup_in_progress_state", "TEXT");
+  ensureColumn(db, "session_meta", "compaction_mode_record", "TEXT");
   ensureColumn(db, "session_meta", "cached_m0_materialized_at", "INTEGER");
   ensureColumn(db, "session_meta", "cached_m0_session_facts_version", "INTEGER");
   ensureColumn(db, "session_meta", "cached_m0_upgrade_state", "TEXT");
@@ -145526,12 +145967,13 @@ function openDatabase(dbPathOrOptions) {
   const explicitDbPath = options?.dbPath !== undefined;
   const { dbDir, dbPath } = resolveDatabasePath(options?.dbPath);
   const latestSupportedVersion = getRuntimeLatestSupportedVersion(options);
+  lastSchemaFenceRejection = null;
+  lastMigrationOnOpenRefusal = null;
   const existing = databases.get(dbPath);
   if (existing) {
     if (!enforceSchemaFence(existing, dbPath, latestSupportedVersion)) {
       return null;
     }
-    registerPrivilegedWriter(existing);
     if (!persistenceByDatabase.has(existing)) {
       persistenceByDatabase.set(existing, true);
     }
@@ -145544,11 +145986,14 @@ function openDatabase(dbPathOrOptions) {
     }
     ensureSecureStorageDir(dbDir);
     const db = new Database(dbPath);
-    registerPrivilegedWriter(db);
     if (!enforceSchemaFence(db, dbPath, latestSupportedVersion)) {
       closeQuietly(db);
       return null;
     }
+    if (!enforceMigrationOnOpenGuard(db, dbPath, dbDir, latestSupportedVersion)) {
+      closeQuietly(db);
+      return null;
+    }
     initializeDatabase(db);
     runMigrations(db);
     ensureContextStoreUuid(db);
@@ -145564,6 +146009,8 @@ async function openDatabaseAsync(dbPathOrOptions) {
   const explicitDbPath = options?.dbPath !== undefined;
   const { dbDir, dbPath } = resolveDatabasePath(options?.dbPath);
   const latestSupportedVersion = getRuntimeLatestSupportedVersion(options);
+  lastSchemaFenceRejection = null;
+  lastMigrationOnOpenRefusal = null;
   const existing = databases.get(dbPath);
   if (existing) {
     if (!enforceSchemaFence(existing, dbPath, latestSupportedVersion))
@@ -145583,11 +146030,14 @@ async function openDatabaseAsync(dbPathOrOptions) {
         migrateLegacyStorageIfNeeded(dbPath, dbDir);
       ensureSecureStorageDir(dbDir);
       db = new Database(dbPath);
-      registerPrivilegedWriter(db);
       if (!enforceSchemaFence(db, dbPath, latestSupportedVersion)) {
         closeQuietly(db);
         return null;
       }
+      if (!enforceMigrationOnOpenGuard(db, dbPath, dbDir, latestSupportedVersion)) {
+        closeQuietly(db);
+        return null;
+      }
       initializeDatabase(db);
       await runMigrationsWithRetry(db);
       ensureContextStoreUuid(db);
@@ -145609,6 +146059,24 @@ async function openDatabaseAsync(dbPathOrOptions) {
   }
 }
 
+// ../plugin/src/shared/context-limit-provenance.ts
+function normalizeContextLimitProvenance(value) {
+  if (value === "prompt_only" || value === "combined")
+    return value;
+  return "unknown";
+}
+
+// ../plugin/src/shared/escalation-bands.ts
+var MAX_EXECUTE_THRESHOLD = 90;
+var ABSOLUTE_EMERGENCY_PERCENTAGE = 95;
+function escalationBands(effectiveThresholdPercentage) {
+  const threshold = Number.isFinite(effectiveThresholdPercentage) ? Math.min(effectiveThresholdPercentage, MAX_EXECUTE_THRESHOLD) : 65;
+  return {
+    forceMaterializationPercentage: Math.max(85, threshold + 2),
+    emergencyPercentage: ABSOLUTE_EMERGENCY_PERCENTAGE
+  };
+}
+
 // ../plugin/src/features/magic-context/storage-meta-shared.ts
 import { Buffer as Buffer2 } from "node:buffer";
 var SESSION_META_SELECT_COLUMNS = [
@@ -146248,6 +146716,45 @@ function releaseWrapupInProgress(db, sessionId, holderId) {
     }
   }
 }
+var COMPACTION_MODE_RECORD_VALUES = new Set([
+  "on",
+  "off",
+  "on_notice_pending",
+  "off_notice_pending",
+  "off_cleanup_pending"
+]);
+function normalizeCompactionModeRecord(value) {
+  if (value === null || value === undefined)
+    return null;
+  if (typeof value === "string" && COMPACTION_MODE_RECORD_VALUES.has(value)) {
+    return value;
+  }
+  return null;
+}
+function resolveCompactionModeRecord(record) {
+  switch (record) {
+    case "on":
+    case "on_notice_pending":
+      return "on";
+    case "off":
+    case "off_notice_pending":
+    case "off_cleanup_pending":
+      return "off";
+    default:
+      return null;
+  }
+}
+function getCompactionModeRecord(db, sessionId) {
+  const row = db.prepare("SELECT compaction_mode_record FROM session_meta WHERE session_id = ?").get(sessionId);
+  return normalizeCompactionModeRecord(row?.compaction_mode_record);
+}
+function setCompactionModeRecord(db, sessionId, value) {
+  if (value !== null && !COMPACTION_MODE_RECORD_VALUES.has(value)) {
+    throw new Error(`Invalid compaction_mode_record value: ${String(value)} (expected a supported compaction mode record or null)`);
+  }
+  ensureSessionMetaRow(db, sessionId);
+  db.prepare("UPDATE session_meta SET compaction_mode_record = ? WHERE session_id = ?").run(value, sessionId);
+}
 function protectedTailWindowBudget(usagePercentage, usable, perRunCap) {
   if (usagePercentage >= 95)
     return Math.min(1e6, Math.max(4 * perRunCap, Math.round(0.5 * usable)));
@@ -146255,7 +146762,6 @@ function protectedTailWindowBudget(usagePercentage, usable, perRunCap) {
     return Math.min(750000, Math.max(3 * perRunCap, Math.round(0.35 * usable)));
   return Math.min(500000, Math.max(perRunCap, Math.round(0.2 * usable)));
 }
-var EMERGENCY_DRAIN_ENTER_PERCENTAGE = 95;
 var EMERGENCY_DRAIN_EXIT_MARGIN = 10;
 var EMERGENCY_DRAIN_FALLBACK_EXIT_PERCENTAGE = 55;
 var EMERGENCY_DRAIN_FAILURE_BACKOFF_MS = 60000;
@@ -146290,7 +146796,8 @@ function reserveProtectedTailDrainTokens(args) {
     }
     const exitThreshold = emergencyDrainExitThreshold(args.executeThresholdPercentage);
     let latchActiveSince = meta.emergencyDrainActive;
-    if (args.usagePercentage >= EMERGENCY_DRAIN_ENTER_PERCENTAGE) {
+    const { forceMaterializationPercentage } = escalationBands(args.executeThresholdPercentage);
+    if (args.usagePercentage >= forceMaterializationPercentage) {
       if (latchActiveSince <= 0)
         latchActiveSince = now;
     } else if (latchActiveSince > 0) {
@@ -146659,17 +147166,19 @@ function normalizeEmergencyRecoveryOrigin(value) {
   return value === "provider_overflow" || value === "proactive_model_shrink" ? value : null;
 }
 function getOverflowState(db, sessionId, modelKey) {
-  const result = db.prepare("SELECT detected_context_limit, detected_context_limit_model_key, needs_emergency_recovery, emergency_recovery_origin FROM session_meta WHERE session_id = ?").get(sessionId);
+  const result = db.prepare("SELECT detected_context_limit, detected_context_limit_model_key, detected_context_limit_provenance, needs_emergency_recovery, emergency_recovery_origin FROM session_meta WHERE session_id = ?").get(sessionId);
   if (!result) {
     return {
       detectedContextLimit: 0,
       detectedContextLimitModelKey: null,
+      detectedContextLimitProvenance: "unknown",
       needsEmergencyRecovery: false,
       emergencyRecoveryOrigin: null
     };
   }
   const storedModelKey = normalizeDetectedLimitModelKey(result.detected_context_limit_model_key);
   const requestedModelKey = normalizeDetectedLimitModelKey(modelKey);
+  const provenance = normalizeContextLimitProvenance(result.detected_context_limit_provenance);
   const limit = typeof result.detected_context_limit === "number" && result.detected_context_limit > 0 ? result.detected_context_limit : 0;
   const modelMatches = limit > 0 && requestedModelKey && storedModelKey ? requestedModelKey === storedModelKey : true;
   const needs = typeof result.needs_emergency_recovery === "number" && result.needs_emergency_recovery > 0;
@@ -146678,11 +147187,12 @@ function getOverflowState(db, sessionId, modelKey) {
   return {
     detectedContextLimit: modelMatches ? limit : 0,
     detectedContextLimitModelKey: storedModelKey,
+    detectedContextLimitProvenance: provenance,
     needsEmergencyRecovery: needs,
     emergencyRecoveryOrigin: recoveryOrigin
   };
 }
-function recordOverflowDetected(db, sessionId, reportedLimit, modelKey, origin = "provider_overflow") {
+function recordOverflowDetected(db, sessionId, reportedLimit, modelKey, origin = "provider_overflow", provenance = "unknown") {
   emergencyRecoveryArmedSessions.add(sessionId);
   db.transaction(() => {
     ensureSessionMetaRow(db, sessionId);
@@ -146691,7 +147201,7 @@ function recordOverflowDetected(db, sessionId, reportedLimit, modelKey, origin =
       providerOverflowReconfirmedSessions.add(sessionId);
     }
     if (typeof reportedLimit === "number" && reportedLimit > 0) {
-      db.prepare("UPDATE session_meta SET detected_context_limit = ?, detected_context_limit_model_key = ?, needs_emergency_recovery = 1, emergency_recovery_origin = ?, observed_safe_input_tokens = 0, cache_alert_sent = 0 WHERE session_id = ?").run(reportedLimit, normalizeDetectedLimitModelKey(modelKey), origin, sessionId);
+      db.prepare("UPDATE session_meta SET detected_context_limit = ?, detected_context_limit_model_key = ?, detected_context_limit_provenance = ?, needs_emergency_recovery = 1, emergency_recovery_origin = ?, observed_safe_input_tokens = 0, cache_alert_sent = 0 WHERE session_id = ?").run(reportedLimit, normalizeDetectedLimitModelKey(modelKey), normalizeContextLimitProvenance(provenance), origin, sessionId);
     } else {
       db.prepare("UPDATE session_meta SET needs_emergency_recovery = 1, emergency_recovery_origin = ?, observed_safe_input_tokens = 0, cache_alert_sent = 0 WHERE session_id = ?").run(origin, sessionId);
     }
@@ -146712,7 +147222,7 @@ function clearEmergencyRecovery(db, sessionId) {
 function clearDetectedContextLimit(db, sessionId) {
   db.transaction(() => {
     ensureSessionMetaRow(db, sessionId);
-    db.prepare("UPDATE session_meta SET detected_context_limit = 0, detected_context_limit_model_key = NULL WHERE session_id = ?").run(sessionId);
+    db.prepare("UPDATE session_meta SET detected_context_limit = 0, detected_context_limit_model_key = NULL, detected_context_limit_provenance = 'unknown' WHERE session_id = ?").run(sessionId);
   })();
 }
 function getPersistedCompactionMarkerState(db, sessionId) {
@@ -146977,6 +147487,62 @@ function getRawSessionMessageCountFromDb(db, sessionId) {
                       AND COALESCE(json_extract(data, '$.finish'), '') = 'stop')`).get(sessionId);
   return typeof row?.count === "number" ? row.count : 0;
 }
+function isMidTurn(_deps, sessionId) {
+  try {
+    return withReadOnlySessionDb((db) => isMidTurnFromOpenCodeDb(db, sessionId));
+  } catch (error) {
+    log("[magic-context] failed to inspect OpenCode mid-turn state:", error);
+    return false;
+  }
+}
+function isMidTurnFromOpenCodeDb(db, sessionId) {
+  const latestAssistant = db.prepare(`SELECT id,
+                    json_extract(data, '$.finish') as finish,
+                    time_created as timeCreated
+             FROM message
+             WHERE session_id = ?
+               AND json_extract(data, '$.role') = 'assistant'
+             ORDER BY time_created DESC
+             LIMIT 1`).get(sessionId);
+  if (typeof latestAssistant?.id !== "string")
+    return false;
+  if (hasNewerRealUserMessage(db, sessionId, latestAssistant.timeCreated))
+    return false;
+  if (latestAssistant.finish === "tool-calls")
+    return true;
+  const partRows = db.prepare("SELECT data FROM part WHERE session_id = ? AND message_id = ?").all(sessionId, latestAssistant.id);
+  return partRows.some((row) => {
+    if (typeof row.data !== "string" || row.data.length === 0)
+      return false;
+    try {
+      const part = JSON.parse(row.data);
+      return part.type === "tool" && part.providerExecuted !== true;
+    } catch {
+      return false;
+    }
+  });
+}
+function hasNewerRealUserMessage(db, sessionId, latestAssistantTimeCreated) {
+  if (typeof latestAssistantTimeCreated !== "number")
+    return false;
+  const row = db.prepare(`SELECT 1 as one
+             FROM message m
+             WHERE m.session_id = ?
+               AND m.time_created > ?
+               AND json_extract(m.data, '$.role') = 'user'
+               AND NOT (
+                 EXISTS (SELECT 1 FROM part p WHERE p.message_id = m.id)
+                 AND NOT EXISTS (
+                   SELECT 1 FROM part p
+                   WHERE p.message_id = m.id
+                     AND COALESCE(json_extract(p.data, '$.synthetic'), 0) NOT IN (1, 'true')
+                     AND json_extract(p.data, '$.metadata.marker.kind') IS NULL
+                     AND COALESCE(json_extract(p.data, '$.ignored'), 0) NOT IN (1, 'true')
+                 )
+               )
+             LIMIT 1`).get(sessionId, latestAssistantTimeCreated);
+  return row?.one === 1;
+}
 
 // ../plugin/src/hooks/magic-context/read-session-raw.ts
 function isRawMessageRow(row) {
@@ -148455,7 +149021,7 @@ function escapeXmlContent(s) {
 }
 // ../plugin/src/features/magic-context/project-docs-hash.ts
 import { createHash as createHash5 } from "node:crypto";
-import { lstatSync, readFileSync as readFileSync2, statSync as statSync3 } from "node:fs";
+import { lstatSync, readFileSync as readFileSync3, statSync as statSync3 } from "node:fs";
 import path2 from "node:path";
 var PROJECT_DOC_FILES = ["ARCHITECTURE.md", "STRUCTURE.md"];
 var PROJECT_DOCS_DELIMITER = `
@@ -148529,7 +149095,7 @@ function readCanonicalPieces(projectDirectory, files) {
     if (!safeToRead) {
       continue;
     }
-    const canonicalContent = canonicalizeDocContent(readFileSync2(filePath, "utf8"));
+    const canonicalContent = canonicalizeDocContent(readFileSync3(filePath, "utf8"));
     hashPieces.push(`file:${filename}
 ${canonicalContent}`);
     renderedSections.push(`<file name="${escapeXmlAttr(filename)}">
@@ -148976,7 +149542,7 @@ function getMemoryMutationsForRenderByIdentitySet(db, projectPaths, afterId, ren
       }
       visited.add(terminal);
       const next = byTarget.get(terminal);
-      if (!next || next.mutationType !== "superseded")
+      if (next?.mutationType !== "superseded")
         break;
       if (depth >= MAX_MEMORY_REPLACEMENT_DEPTH - 1) {
         terminal = null;
@@ -149236,6 +149802,14 @@ function getPendingOpsStatement(db) {
   }
   return stmt;
 }
+function getClearPendingOpsStatement(db) {
+  let stmt = clearPendingOpsStatements.get(db);
+  if (!stmt) {
+    stmt = db.prepare("DELETE FROM pending_ops WHERE session_id = ?");
+    clearPendingOpsStatements.set(db, stmt);
+  }
+  return stmt;
+}
 function getRemovePendingOpStatement(db) {
   let stmt = removePendingOpStatements.get(db);
   if (!stmt) {
@@ -149270,6 +149844,9 @@ function getPendingOps(db, sessionId) {
   const rows = getPendingOpsStatement(db).all(sessionId).filter(isPendingOpRow);
   return rows.map(toPendingOp).filter((op) => op !== null);
 }
+function clearPendingOps(db, sessionId) {
+  getClearPendingOpsStatement(db).run(sessionId);
+}
 function removePendingOp(db, sessionId, tagId) {
   getRemovePendingOpStatement(db).run(sessionId, tagId);
 }
@@ -150229,76 +150806,6 @@ var ERROR_CLASSES = new Set([
   "permission_denied",
   "unknown"
 ]);
-// ../plugin/src/shared/models-dev-cache.ts
-import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join5 } from "node:path";
-var MIN_SANE_LIMIT = 20000;
-var MAX_SANE_LIMIT = 3000000;
-function isSaneLimit(limit) {
-  return typeof limit === "number" && limit >= MIN_SANE_LIMIT && limit <= MAX_SANE_LIMIT;
-}
-var apiCache = null;
-var persistSeedLoaded = false;
-function persistFilePath() {
-  return join5(getMagicContextStorageDir(), `model-context-limits-${getHarness()}.json`);
-}
-function loadPersistedApiCacheOnce() {
-  if (persistSeedLoaded || apiCache !== null)
-    return;
-  persistSeedLoaded = true;
-  try {
-    const raw = readFileSync3(persistFilePath(), "utf-8");
-    const obj = JSON.parse(raw);
-    const map = new Map;
-    for (const [key, persisted] of Object.entries(obj)) {
-      const limit = typeof persisted === "number" ? persisted : persisted.limit;
-      const inputLimit = typeof persisted === "number" ? undefined : persisted.inputLimit;
-      const vision = typeof persisted === "number" ? false : persisted.vision === true;
-      if (isSaneLimit(limit)) {
-        map.set(key, {
-          limit,
-          inputLimit: isSaneLimit(inputLimit) ? inputLimit : undefined,
-          vision
-        });
-      }
-    }
-    if (map.size > 0) {
-      apiCache = map;
-      sessionLog("global", `models-dev-cache: seeded ${map.size} entries from persisted cache (cold start)`);
-    }
-  } catch {}
-}
-function getSdkContextLimit(providerID, modelID) {
-  loadPersistedApiCacheOnce();
-  const fromApi = lookupLimitWithTagFallback(apiCache, providerID, modelID);
-  return isSaneLimit(fromApi) ? fromApi : undefined;
-}
-function modelSupportsVision(providerID, modelID) {
-  loadPersistedApiCacheOnce();
-  if (!apiCache)
-    return false;
-  const exact = apiCache.get(`${providerID}/${modelID}`);
-  if (exact?.vision === true)
-    return true;
-  const colon = modelID.lastIndexOf(":");
-  return colon > 0 ? apiCache.get(`${providerID}/${modelID.slice(0, colon)}`)?.vision === true : false;
-}
-function lookupLimitWithTagFallback(cache, providerID, modelID) {
-  if (!cache)
-    return;
-  const exact = cache.get(`${providerID}/${modelID}`)?.limit;
-  if (typeof exact === "number")
-    return exact;
-  const colonIdx = modelID.lastIndexOf(":");
-  if (colonIdx > 0) {
-    const baseModel = modelID.slice(0, colonIdx);
-    const fallback = cache.get(`${providerID}/${baseModel}`)?.limit;
-    if (typeof fallback === "number")
-      return fallback;
-  }
-  return;
-}
-
 // ../plugin/src/hooks/magic-context/todo-view.ts
 import { createHash as createHash7 } from "node:crypto";
 var TODO_STATUS_PENDING = "pending";
@@ -150756,7 +151263,7 @@ function pruneNestedConfigLeaf(block, relativePath) {
 }
 
 // src/config/index.ts
-import { existsSync as existsSync7, readFileSync as readFileSync5 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6 } from "node:fs";
 
 // ../plugin/src/config/migrate-dreamer-v2.ts
 var OLD_VERIFY_TASK = "verify";
@@ -165562,62 +166069,6 @@ function nextDueAtMs(expression, afterMs, consumedScheduledAtMs, maxSearchMs = M
   return next ? next.getTime() : null;
 }
 
-// ../plugin/src/features/magic-context/dreamer/task-registry.ts
-var CANONICAL_DREAM_TASKS = [
-  "map-memories",
-  "verify",
-  "verify-broad",
-  "curate",
-  "compress-cues",
-  "classify-memories",
-  "retrospective",
-  "maintain-docs",
-  "evaluate-smart-notes",
-  "review-user-memories",
-  "promote-primers",
-  "refresh-primers"
-];
-var AGENTIC_DREAM_TASKS = ["curate", "maintain-docs"];
-var MEMORY_DOMAIN_TASKS = [
-  "map-memories",
-  "verify",
-  "verify-broad",
-  "curate",
-  "compress-cues",
-  "classify-memories",
-  "retrospective",
-  "promote-primers",
-  "refresh-primers"
-];
-var MEMORY_DOMAIN_SET = new Set(MEMORY_DOMAIN_TASKS);
-function leaseKindFor(task) {
-  if (MEMORY_DOMAIN_SET.has(task))
-    return "memory";
-  switch (task) {
-    case "review-user-memories":
-      return "user-memories";
-    case "promote-primers":
-    case "refresh-primers":
-      return "memory";
-    case "maintain-docs":
-      return "maintain-docs";
-    case "evaluate-smart-notes":
-      return "evaluate-smart-notes";
-    default:
-      return "memory";
-  }
-}
-function leaseKeyFor(task, projectIdentity) {
-  const kind = leaseKindFor(task);
-  return kind === "user-memories" ? "user-memories" : `${kind}:${projectIdentity}`;
-}
-function isCanonicalDreamTask(value) {
-  return CANONICAL_DREAM_TASKS.includes(value);
-}
-function compareTaskOrder(a, b) {
-  return CANONICAL_DREAM_TASKS.indexOf(a) - CANONICAL_DREAM_TASKS.indexOf(b);
-}
-
 // ../plugin/src/config/schema/agent-overrides.ts
 var PermissionValueSchema = exports_external.enum(["ask", "allow", "deny"]);
 var PermissionSchema = exports_external.object({
@@ -165646,12 +166097,11 @@ var AgentOverrideConfigSchema = exports_external.object({
 
 // ../plugin/src/config/schema/magic-context.ts
 var DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE = 65;
-var EXECUTE_THRESHOLD_CAP_MESSAGE = "execute_threshold is capped at 80% for cache safety: a single large agent step can overflow the context window before Magic Context can compact between turns, forcing OpenCode's native compaction (hard to recover from). 80% also leaves headroom below the 85%/95% emergency bands. Use a value between 20 and 80.";
+var EXECUTE_THRESHOLD_CAP_MESSAGE = "execute_threshold is capped at 90% for cache safety: output capacity is reserved from the usable context window, and the remaining 10% absorbs mid-turn growth before the absolute 95% emergency wall. Use a value between 20 and 90.";
 var DEFAULT_HISTORIAN_TIMEOUT_MS = 300000;
 var DEFAULT_HISTORY_BUDGET_PERCENTAGE = 0.15;
 var DEFAULT_LOCAL_EMBEDDING_MODEL = "Xenova/all-MiniLM-L6-v2";
-var DreamingTaskSchema = exports_external.enum(AGENTIC_DREAM_TASKS);
-var PiThinkingLevelSchema = exports_external.enum(["off", "minimal", "low", "medium", "high", "xhigh"]).optional();
+var PiThinkingLevelSchema = exports_external.enum(["off", "minimal", "low", "medium", "high", "xhigh", "max"]).optional();
 var PiConfigSchema = exports_external.object({
   subagent_extensions: exports_external.array(exports_external.string().trim().min(1)).optional().describe("User-only allowlist of Pi extensions for Magic Context subagent children. When set, children use --no-extensions and load only these entries (plus Magic Context's scoped child extension where applicable). Relative paths resolve from ~/.pi/agent, matching Pi's settings.json package location. Unset preserves normal Pi extension discovery.")
 }).optional();
@@ -165724,7 +166174,7 @@ var SidekickConfigSchema = AgentOverrideConfigSchema.extend({
 }).optional();
 var HistorianConfigSchema = AgentOverrideConfigSchema.extend({
   two_pass: exports_external.boolean().default(false).describe("Run a second editor pass over historian output to clean low-signal U: lines and cross-compartment duplicates. Adds ~1 extra API call and ~1.3x cost per historian run. Useful for models without extended thinking support. (default: false)"),
-  thinking_level: PiThinkingLevelSchema.describe("Pi only: explicit thinking level passed as --thinking <level> to Pi historian subagent invocations. Required when using reasoning models (e.g. github-copilot/gpt-5.4) because Pi's default thinking-level resolution can pick a value the provider rejects. OpenCode users set variant instead. Valid: off | minimal | low | medium | high | xhigh"),
+  thinking_level: PiThinkingLevelSchema.describe("Pi only: explicit thinking level passed as --thinking <level> to Pi historian subagent invocations. Required when using reasoning models (e.g. github-copilot/gpt-5.4) because Pi's default thinking-level resolution can pick a value the provider rejects. OpenCode users set variant instead. Valid: off | minimal | low | medium | high | xhigh | max"),
   disallowed_tools: exports_external.array(exports_external.enum(["*", "read", "aft_outline", "aft_zoom", "aft_search"])).default([]).describe(`OpenCode only. Tools to REMOVE from the historian's default allow-list [read, aft_outline, aft_zoom, aft_search]. Applies to both historian and historian-editor agents. Use ["*"] to strip all tool definitions from the model request — this prevents weak instruction-following models (e.g. mistral-small-latest) from entering tool-calling loops. Individual tool names remove just that tool. Note: a user-supplied historian.permission override can re-allow a tool that disallowed_tools removed — disallowed_tools sets the baseline, permission overrides take precedence. (default: [])`)
 }).optional();
 var EmbeddingFallbackProviderSchema = exports_external.enum(["local", "openai-compatible", "off"]);
@@ -165745,7 +166195,22 @@ var BaseEmbeddingConfigSchema = exports_external.object({
   input_type: exports_external.string().optional().describe("Default input_type for stored/indexed (passage) embeddings in the request body. Required by some openai-compatible providers (e.g. NVIDIA NIM). Omitted from the request when unset."),
   query_input_type: exports_external.string().optional().describe("Optional input_type for query (search) embeddings on asymmetric models (e.g. NVIDIA NIM 'query'). When unset, query embeddings use embedding.input_type. Passage/stored content always uses embedding.input_type."),
   truncate: exports_external.string().optional().describe("Optional truncate mode sent in the embedding request body (e.g. NVIDIA NIM accepts 'NONE' | 'START' | 'END'). Omitted from the request when unset."),
-  max_input_tokens: exports_external.number().int().positive().optional().describe("Optional maximum input tokens for chunk embeddings. Defaults conservatively to 512 when omitted.")
+  max_input_tokens: exports_external.number().int().positive().optional().describe("Optional maximum input tokens for chunk embeddings. Defaults conservatively to 512 when omitted."),
+  local_dtype: exports_external.enum([
+    "auto",
+    "fp32",
+    "fp16",
+    "q8",
+    "int8",
+    "uint8",
+    "q4",
+    "bnb4",
+    "q4f16",
+    "q2",
+    "q2f16",
+    "q1",
+    "q1f16"
+  ]).optional().describe("Local provider only: ONNX model dtype passed to the transformers.js feature-extraction pipeline. Accepts the @huggingface/transformers DataType strings (auto, fp32, fp16, q8, int8, uint8, q4, bnb4, q4f16, q2, q2f16, q1, q1f16). Omitted keeps today's behavior (fp32). A non-default value changes the produced vectors and folds into the embedding model identity, so switching dtype re-embeds rather than mixing vector spaces. Useful for selecting a quantized variant (e.g. q8) of a larger multilingual model to cut memory and CPU cost; see issue #259.")
 }).superRefine((data, ctx) => {
   const validationProvider = data.provider === "synapse" ? data.fallback_provider : data.provider;
   if (validationProvider === "openai-compatible" && !data.endpoint?.trim()) {
@@ -165787,7 +166252,8 @@ var EmbeddingConfigSchema = BaseEmbeddingConfigSchema.transform((data) => {
     return {
       provider: "local",
       model: data.model?.trim() || DEFAULT_LOCAL_EMBEDDING_MODEL,
-      ...data.max_input_tokens ? { max_input_tokens: data.max_input_tokens } : {}
+      ...data.max_input_tokens ? { max_input_tokens: data.max_input_tokens } : {},
+      ...data.local_dtype ? { local_dtype: data.local_dtype } : {}
     };
   }
   if (data.provider === "openai-compatible") {
@@ -165810,6 +166276,7 @@ var EmbeddingConfigSchema = BaseEmbeddingConfigSchema.transform((data) => {
 });
 var MagicContextConfigSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).describe("Enable magic context (default: true)"),
+  allow_home_project: exports_external.boolean().default(false).describe("Allow Magic Context sessions launched from the exact canonical home directory. The home session uses its deterministic dir: identity so pre-gate memories reconnect. USER-LEVEL ONLY: project config is ignored. The home identity is excluded from registry seed exports, never resolves descendants by containment, and cannot join a workspace."),
   experimental: exports_external.object({
     mural: exports_external.object({
       enabled: exports_external.boolean().default(false),
@@ -165821,15 +166288,19 @@ var MagicContextConfigSchema = exports_external.object({
   language: exports_external.string().trim().toLowerCase().refine((s) => isValidLanguageCode(s), 'language must be a 2-letter ISO 639-1 code (e.g. "tr", "es", "de")').optional().describe("Output language for Magic Context's generated content and guidance, as a " + '2-letter ISO 639-1 code (e.g. "tr", "es", "de", "ja", "pt"). When set, the ' + "historian, dreamer, sidekick, and the agent-guidance block instruct the model to " + "write its PROSE in this language while keeping all structural tokens (XML tags, " + "the five memory category names, code identifiers, file paths) in English. " + "USER-LEVEL ONLY (ignored in project config for security). Unset = today's " + "behavior (model mirrors the conversation; English scaffolding). Changing it " + "triggers one cache re-materialization; existing compartments/memories keep their " + "original language until naturally rewritten."),
   historian: HistorianConfigSchema.describe("Historian agent configuration (model, fallback_models, variant, temperature, maxTokens, permission, two_pass, etc.)"),
   dreamer: DreamerConfigSchema.optional().describe("Dreamer agent + scheduling configuration (model, fallback_models, disable, schedule, tasks, etc.)"),
-  cache_ttl: exports_external.union([exports_external.string(), exports_external.object({ default: exports_external.string() }).catchall(exports_external.string())]).default("5m").describe('Cache TTL: string (e.g. "5m") or per-model object ({ default: "5m", "model-id": "10m" })'),
+  cache_ttl: exports_external.union([exports_external.string(), exports_external.object({ default: exports_external.string() }).catchall(exports_external.string())]).default("5m").describe('Cache TTL: string (e.g. "5m", "1h", "30s") or per-model object ({ default: "5m", "model-id": "10m" }). Set to "never" for lanes kept warm by an external keepwarm proxy — disables the idle-TTL heuristic so MC never initiates a rebuild based on elapsed time.'),
+  output_reserve: exports_external.union([
+    exports_external.number().min(0),
+    exports_external.object({ default: exports_external.number().min(0) }).catchall(exports_external.number().min(0))
+  ]).optional().describe('User-only output-token reservation override. Number or per-model object ({ default: 16384, "provider/model": 8192 }); 0 disables reservation. When unset, Magic Context reserves the catalog output limit (capped at 25% of context) for shared-window providers and keeps proven separate-quota Google/Gemini windows unchanged.'),
   toast_duration_ms: exports_external.number().min(0).max(60000).default(5000).describe("TUI toast lifetime in milliseconds for Magic Context notifications. Set to 0 to disable Magic Context toasts entirely (min: 0, max: 60000, default: 5000)"),
   execute_threshold_percentage: exports_external.union([
-    exports_external.number().min(20).max(80, EXECUTE_THRESHOLD_CAP_MESSAGE),
-    exports_external.object({ default: exports_external.number().min(20).max(80, EXECUTE_THRESHOLD_CAP_MESSAGE) }).catchall(exports_external.number().min(20).max(80, EXECUTE_THRESHOLD_CAP_MESSAGE))
-  ]).default(DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE).describe('Context percentage that forces queued operations to execute. Number or per-model object ({ default: 65, "provider/model": 45 }). Values above 80 are rejected because the runtime caps at 80% for cache safety (MAX_EXECUTE_THRESHOLD). Default: DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE'),
+    exports_external.number().min(20).max(90, EXECUTE_THRESHOLD_CAP_MESSAGE),
+    exports_external.object({ default: exports_external.number().min(20).max(90, EXECUTE_THRESHOLD_CAP_MESSAGE) }).catchall(exports_external.number().min(20).max(90, EXECUTE_THRESHOLD_CAP_MESSAGE))
+  ]).default(DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE).describe('Context percentage that forces queued operations to execute. Number or per-model object ({ default: 65, "provider/model": 45 }). Values above 90 are rejected because the runtime caps at 90% of the output-reserved safe window (MAX_EXECUTE_THRESHOLD). Default: DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE'),
   execute_threshold_tokens: exports_external.object({
     default: exports_external.number().min(5000).max(2000000).optional()
-  }).catchall(exports_external.number().min(5000).max(2000000)).optional().describe("Absolute token thresholds per model. When matched, overrides execute_threshold_percentage for that model. Accepts `default` for all models or per-model keys. Values above 80% × context_limit are clamped with a warning log. Min 5_000, max 2_000_000."),
+  }).catchall(exports_external.number().min(5000).max(2000000)).optional().describe("Absolute token thresholds per model. When matched, overrides execute_threshold_percentage for that model. Accepts `default` for all models or per-model keys. Values above 90% × context_limit are clamped with a warning log. Min 5_000, max 2_000_000."),
   protected_tags: exports_external.number().min(1).max(100).optional().describe("Number of recent tags to protect from dropping (min: 1, max: 100, default: 20)"),
   clear_reasoning_age: exports_external.number().min(10).default(50).describe("Clear reasoning/thinking blocks older than N tags (default: 50)"),
   history_budget_percentage: exports_external.number().min(0.05).max(0.5).default(DEFAULT_HISTORY_BUDGET_PERCENTAGE).describe("Fraction of usable context (context_limit × execute_threshold) reserved for the session history block (default: 0.15)"),
@@ -165849,6 +166320,9 @@ var MagicContextConfigSchema = exports_external.object({
     cache_size_mb: exports_external.number().min(2).max(2048).default(64).describe("Page-cache size in MiB per connection (PRAGMA cache_size). Larger keeps more hot pages resident, cutting re-reads on repeated full-table scans. (min 2, max 2048, default 64)"),
     mmap_size_mb: exports_external.number().min(0).max(8192).default(0).describe("Memory-mapped I/O size in MiB (PRAGMA mmap_size). 0 disables mmap (SQLite default). Raising it can cut read overhead on large DBs at the cost of address space. (min 0, max 8192, default 0)")
   }).default({ cache_size_mb: 64, mmap_size_mb: 0 }).describe("SQLite connection tuning for Magic Context's own context.db. These are per-connection PRAGMAs applied at open; they do not change the schema or what is stored."),
+  storage: exports_external.object({
+    enforce_private_permissions: exports_external.boolean().default(true).describe("When true (default), Magic Context creates and re-tightens its storage directories to owner-only 0700 and storage files to owner-only 0600. Set false only for a deliberate trusted-group deployment whose operator manages directory, database, WAL/SHM, cache, and RPC file permissions externally; Magic Context then never chmods or supplies restrictive creation modes. USER-LEVEL ONLY — ignored in project config for security. On Windows, POSIX chmod modes are already meaningless, so this setting is a no-op.")
+  }).default({ enforce_private_permissions: true }).describe("Storage permission policy. The default keeps session content and memories owner-private. Disabling enforcement is for trusted shared-group storage managed externally; every group member able to read the storage can read all stored session content and memories."),
   embedding: EmbeddingConfigSchema.default({
     provider: "local",
     model: DEFAULT_LOCAL_EMBEDDING_MODEL
@@ -165862,6 +166336,9 @@ var MagicContextConfigSchema = exports_external.object({
   temporal_awareness: exports_external.boolean().default(true).describe('Inject wall-clock gap markers (<!-- +Xm -->) between user messages where > 5 min elapsed since the previous message, and add compact date ranges to compartment headings. Gives the agent a sense of session pacing and "how long ago" across multi-day sessions. Graduated from experimental.temporal_awareness; default: true (set false to opt out).'),
   keep_subagents: exports_external.boolean().default(false).describe("Debug: keep the child sessions Magic Context spawns for its own subagents (historian, dreamer, sidekick, memory-migration) instead of deleting them on success. Useful for short-term inspection/data collection — their full transcript (prompt, tool calls, token usage, output) stays in the host session store. Kept sessions accumulate until manually cleared; leave false for normal use. Requires a restart to take effect."),
   fail_closed_blocking: exports_external.boolean().default(true).describe("When Magic Context cannot operate (schema fence mismatch, storage open/migration failure), block the primary-session prompt with a loud recovery error instead of silently degrading to native compaction. Default true. Set false only to restore the old degrade-silently behavior (not recommended). USER-LEVEL ONLY — ignored in project config for security. Requires a restart."),
+  compaction: exports_external.object({
+    enabled: exports_external.boolean().default(true).describe("When false, Magic Context stops managing the context window and keeps its knowledge layer: memory and docs/user-profile/key-files injection through additive m[0]/m[1], raw-message FTS indexing, dreamer, notes, ctx_search, ctx_expand, ctx_memory, and /ctx-embed remain available. MC's historian/compartment preparation, tagging, markers, pruning, folding, drops, strips, splicing, synthetic context-management todos, temporal markers, nudges, and fail-closed blocking stop; ctx_expand remains a knowledge-surface tool. fail_closed_blocking is inert: a transform failure passes the input messages through without blocking or cancelling. This setting does not enable native compaction: OpenCode's compaction.auto / compaction.prune or Pi's equivalent owns the window, or nothing does. MC's compaction.enabled in magic-context.jsonc is distinct from OpenCode's compaction.auto / compaction.prune in opencode.jsonc; they are different files and different owners. On the first turn after disabling, a long session may trigger one native compaction cycle; MC removes only its own marker boundary, leaves native boundaries and stored compartments intact, and does no pre-trimming mitigation. Marker cleanup is lazy per session, so an unresumed session is cleaned when it is next resumed. If compaction is enabled again, run /ctx-wrapup when the historian is runnable to catch up. OpenCode peer verification against v1.18.4 confirms native compaction covers child sessions: subagents receive additive memory/docs injection and no MC reclaim in this mode, so keep subagent tasks small or leave compaction.enabled on for long subagent runs. If transform_mode is rust, compaction-off resolves to the TypeScript transform and emits one frozen boot warning because there is no Rust reduced-mode contract. This is boot-resolved and requires a process restart; project-tier compaction.enabled is stripped so a cloned repository cannot disable the user's setting. The sidebar reports raw usage as Context: <pct>% · native compaction or Context: <pct>% · no active compaction and does not show an MC execute-threshold fill. /ctx-wrapup, /ctx-recomp, /ctx-flush, and /ctx-session-upgrade refuse without context-management side effects; /ctx-embed remains functional. Raw content hidden by a native boundary before Magic Context's first pass is not retroactively indexed.")
+  }).default({ enabled: true }).describe("Compaction-off mode gate. Default true (MC manages the context window as today). Set compaction.enabled=false to keep the knowledge layer while letting native compaction (or nothing) own the window. Boot-resolved; requires a restart to change."),
   todowrite: exports_external.object({
     enabled: exports_external.boolean().default(true).describe("Pi only: register Magic Context's todowrite task-list tool. Disable if you use your own todo extension. OpenCode ships its own built-in todowrite; this setting has no effect there."),
     overlay: exports_external.boolean().default(true).describe("Pi only: show the persistent todo overlay above the editor while tasks are active.")
@@ -166015,6 +166492,19 @@ function stripUnsafeProjectConfigFields(projectRaw) {
     delete projectRaw.fail_closed_blocking;
     warnings.push("Ignoring fail_closed_blocking from project config (security: only user-level config may disable or force the loud inoperability gate).");
   }
+  if ("allow_home_project" in projectRaw) {
+    delete projectRaw.allow_home_project;
+    warnings.push("Ignoring allow_home_project from project config (security: only user-level config may opt the user's home directory into Magic Context).");
+  }
+  const compaction = projectRaw.compaction;
+  if (isPlainObject3(compaction) && "enabled" in compaction) {
+    delete compaction.enabled;
+    warnings.push("Ignoring compaction.enabled from project config (security: only user-level config may disable Magic Context's context-window management; a cloned repo cannot change how the user's window is owned).");
+  }
+  if ("output_reserve" in projectRaw) {
+    delete projectRaw.output_reserve;
+    warnings.push("Ignoring output_reserve from project config (security: output-token reservation only honors user-level config).");
+  }
   if ("language" in projectRaw) {
     delete projectRaw.language;
     warnings.push("Ignoring language from project config (security: output language is a user-level setting).");
@@ -166023,6 +166513,11 @@ function stripUnsafeProjectConfigFields(projectRaw) {
     delete projectRaw.sqlite;
     warnings.push("Ignoring sqlite.* from project config (security: SQLite cache/mmap PRAGMAs apply to the " + "process-global shared database handle; only user-level config may set them).");
   }
+  const storage = projectRaw.storage;
+  if (isPlainObject3(storage) && "enforce_private_permissions" in storage) {
+    delete storage.enforce_private_permissions;
+    warnings.push("Ignoring storage.enforce_private_permissions from project config (security: only user-level config may opt into externally managed shared storage permissions).");
+  }
   const pi = projectRaw.pi;
   if (isPlainObject3(pi) && "subagent_extensions" in pi) {
     delete pi.subagent_extensions;
@@ -166361,6 +166856,188 @@ function substituteConfigVariables(input) {
   return { text: output, warnings };
 }
 
+// ../plugin/src/shared/models-dev-cache.ts
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync5, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join5 } from "node:path";
+
+// ../plugin/src/shared/harness-provider-map.ts
+var CANONICAL_TO_PI_PROVIDER = {
+  openai: "openai-codex",
+  google: "google-antigravity"
+};
+var PI_TO_CANONICAL_PROVIDER = {
+  "openai-codex": "openai",
+  "google-antigravity": "google"
+};
+function remapProviderPrefix(ref, map2) {
+  if (typeof ref !== "string")
+    return ref;
+  const slash = ref.indexOf("/");
+  if (slash <= 0)
+    return ref;
+  const provider = ref.slice(0, slash);
+  const mapped = map2[provider];
+  return mapped ? `${mapped}${ref.slice(slash)}` : ref;
+}
+function piModelRefToCanonical(ref) {
+  return remapProviderPrefix(ref, PI_TO_CANONICAL_PROVIDER);
+}
+function resolveModelRefForPi(ref) {
+  return remapProviderPrefix(piModelRefToCanonical(ref), CANONICAL_TO_PI_PROVIDER);
+}
+
+// ../plugin/src/shared/models-dev-cache.ts
+var MIN_SANE_LIMIT = 20000;
+var MAX_SANE_LIMIT = 3000000;
+function isSaneLimit(limit) {
+  return typeof limit === "number" && limit >= MIN_SANE_LIMIT && limit <= MAX_SANE_LIMIT;
+}
+var SEPARATE_OUTPUT_QUOTA_PROVIDERS = new Set(["google", "google-antigravity"]);
+var MIN_PLAUSIBLE_CONTEXT_LIMIT = 1024;
+var OUTPUT_RESERVE_CAP_RATIO = 0.25;
+var outputReserveConfig;
+var reserveClampLogSeen = new Set;
+var apiCache = null;
+var persistSeedLoaded = false;
+function persistFilePath() {
+  return join5(getMagicContextStorageDir(), `model-context-limits-${getHarness()}.json`);
+}
+function loadPersistedApiCacheOnce() {
+  if (persistSeedLoaded || apiCache !== null)
+    return;
+  persistSeedLoaded = true;
+  try {
+    const raw = readFileSync5(persistFilePath(), "utf-8");
+    const obj = JSON.parse(raw);
+    const map2 = new Map;
+    for (const [key, persisted] of Object.entries(obj)) {
+      const limit = typeof persisted === "number" ? persisted : persisted.limit;
+      const contextLimit = typeof persisted === "number" ? undefined : persisted.contextLimit;
+      const inputLimit = typeof persisted === "number" ? undefined : persisted.inputLimit;
+      const outputLimit = typeof persisted === "number" ? undefined : persisted.outputLimit;
+      const vision = typeof persisted === "number" ? false : persisted.vision === true;
+      if (isSaneLimit(contextLimit) || isSaneLimit(limit)) {
+        map2.set(key, {
+          limit: isSaneLimit(limit) ? limit : undefined,
+          contextLimit: isSaneLimit(contextLimit) ? contextLimit : undefined,
+          inputLimit: isSaneLimit(inputLimit) ? inputLimit : undefined,
+          outputLimit: isFinitePositive(outputLimit) ? outputLimit : undefined,
+          vision
+        });
+      }
+    }
+    if (map2.size > 0) {
+      apiCache = map2;
+      sessionLog("global", `models-dev-cache: seeded ${map2.size} entries from persisted cache (cold start)`);
+    }
+  } catch {}
+}
+function isFinitePositive(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0;
+}
+function modelKeyLookupOrder(providerID, modelID) {
+  const full = `${providerID}/${modelID}`;
+  const canonicalFull = piModelRefToCanonical(full);
+  const candidates = [full, canonicalFull, modelID];
+  const colon = modelID.lastIndexOf(":");
+  if (colon > 0) {
+    const bareModel = modelID.slice(0, colon);
+    const providerBare = `${providerID}/${bareModel}`;
+    candidates.push(providerBare, piModelRefToCanonical(providerBare), bareModel);
+  }
+  return [...new Set(candidates)];
+}
+function configuredOutputReserve(config2, providerID, modelID) {
+  if (typeof config2 === "number")
+    return Number.isFinite(config2) && config2 >= 0 ? config2 : undefined;
+  if (!config2)
+    return;
+  for (const candidate of modelKeyLookupOrder(providerID, modelID)) {
+    const value = config2[candidate];
+    if (typeof value === "number" && Number.isFinite(value) && value >= 0)
+      return value;
+  }
+  return Number.isFinite(config2.default) && config2.default >= 0 ? config2.default : undefined;
+}
+function logReserveClampOnce(key, message) {
+  if (reserveClampLogSeen.has(key))
+    return;
+  reserveClampLogSeen.add(key);
+  sessionLog("global", `models-dev-cache: ${message}`);
+}
+function setOutputReserveConfig(config2) {
+  outputReserveConfig = config2;
+}
+function resolveLimit(limit, providerID, modelID, reserveConfig = outputReserveConfig) {
+  if (!limit)
+    return;
+  const context = isFinitePositive(limit.context) ? limit.context : undefined;
+  const input = isFinitePositive(limit.input) ? limit.input : undefined;
+  if (input !== undefined && (context === undefined || input < context))
+    return input;
+  if (context === undefined)
+    return;
+  const configuredReserve = configuredOutputReserve(reserveConfig, providerID, modelID);
+  let reserve;
+  if (configuredReserve !== undefined) {
+    reserve = configuredReserve;
+  } else if (SEPARATE_OUTPUT_QUOTA_PROVIDERS.has(providerID)) {
+    reserve = 0;
+  } else {
+    const output = isFinitePositive(limit.output) ? limit.output : 0;
+    const cap = context * OUTPUT_RESERVE_CAP_RATIO;
+    reserve = Math.min(output, cap);
+    if (output > cap) {
+      logReserveClampOnce(`cap|${providerID}/${modelID}|${context}|${output}`, `output reserve capped at 25% for ${providerID}/${modelID}: ${output} → ${cap}`);
+    }
+  }
+  const floor = Math.max(MIN_PLAUSIBLE_CONTEXT_LIMIT, context * 0.5);
+  const maxReserve = Math.max(0, context - floor);
+  if (reserve > maxReserve) {
+    logReserveClampOnce(`floor|${providerID}/${modelID}|${context}|${reserve}`, `output reserve clamped for ${providerID}/${modelID}: ${reserve} → ${maxReserve} (usable floor ${floor})`);
+    reserve = maxReserve;
+  }
+  return Math.floor(context - reserve);
+}
+function getSdkContextLimit(providerID, modelID, detectedContextLimit, options) {
+  loadPersistedApiCacheOnce();
+  const metadata = lookupMetadataWithTagFallback(apiCache, providerID, modelID);
+  if (!metadata)
+    return;
+  const rawContext = metadata.contextLimit ?? metadata.limit;
+  const promptOnlyDetected = options?.detectedLimitProvenance === "prompt_only" && isFinitePositive(detectedContextLimit) ? detectedContextLimit : undefined;
+  const context = promptOnlyDetected === undefined && isFinitePositive(detectedContextLimit) && isFinitePositive(rawContext) ? Math.min(rawContext, detectedContextLimit) : promptOnlyDetected === undefined && isFinitePositive(detectedContextLimit) ? detectedContextLimit : rawContext;
+  const inputCandidates = [metadata.inputLimit, promptOnlyDetected].filter(isFinitePositive);
+  const input = inputCandidates.length > 0 ? Math.min(...inputCandidates) : undefined;
+  return resolveLimit({
+    context,
+    input,
+    output: metadata.outputLimit
+  }, providerID, modelID, options?.reservation === "none" ? 0 : undefined);
+}
+function modelSupportsVision(providerID, modelID) {
+  loadPersistedApiCacheOnce();
+  if (!apiCache)
+    return false;
+  const exact = apiCache.get(`${providerID}/${modelID}`);
+  if (exact?.vision === true)
+    return true;
+  const colon = modelID.lastIndexOf(":");
+  return colon > 0 ? apiCache.get(`${providerID}/${modelID.slice(0, colon)}`)?.vision === true : false;
+}
+function lookupMetadataWithTagFallback(cache, providerID, modelID) {
+  if (!cache)
+    return;
+  const exact = cache.get(`${providerID}/${modelID}`);
+  if (exact)
+    return exact;
+  const colonIdx = modelID.lastIndexOf(":");
+  if (colonIdx > 0) {
+    return cache.get(`${providerID}/${modelID.slice(0, colonIdx)}`);
+  }
+  return;
+}
+
 // src/config/index.ts
 var import_comment_json = __toESM(require_src2(), 1);
 function getProjectConfigPaths(cwd) {
@@ -166379,7 +167056,7 @@ function resolvePiLegacyFallback(sources) {
 }
 function loadConfigFile(path3, scope) {
   try {
-    const rawText = readFileSync5(path3, "utf-8");
+    const rawText = readFileSync6(path3, "utf-8");
     const substituted = substituteConfigVariables({
       text: rawText,
       configPath: path3,
@@ -166564,6 +167241,7 @@ function loadPiConfig(opts = {}) {
     }
   }
   const parsed = parsePiConfig(rawConfig);
+  setOutputReserveConfig(parsed.config.output_reserve);
   warnings.push(...parsed.warnings.map((warning) => `[merged config] ${warning}`));
   return {
     config: parsed.config,
@@ -166683,6 +167361,7 @@ function loadPiConfigDetailed(opts = {}) {
   }
   const recoveredTopLevelKeys = [];
   const parsed = parsePiConfig(rawConfig, recoveredTopLevelKeys);
+  setOutputReserveConfig(parsed.config.output_reserve);
   warnings.push(...parsed.warnings.map((warning) => `[merged config] ${warning}`));
   const substitutionFailures = loadedFiles.flatMap(bindSubstitutionFailures);
   const userLoaded = loadedFiles.find((loaded) => loaded.scope === "user");
@@ -166805,9 +167484,6 @@ var existingHashStatements = new WeakMap;
 var existingHashByProjectStatements = new WeakMap;
 var deleteByCompartmentStatements = new WeakMap;
 var insertEmbeddingStatements = new WeakMap;
-var distinctModelStatements = new WeakMap;
-var clearProjectStatements = new WeakMap;
-var clearProjectModelStatements = new WeakMap;
 var searchRowsStatements = new WeakMap;
 var searchRowsByModelStatements = new WeakMap;
 var searchPoolProbeStatements = new WeakMap;
@@ -170074,6 +170750,7 @@ function getEmbeddingProviderIdentity(config2) {
     throw new Error("Unknown embedding provider");
   }
   const truncate = config2.provider === "openai-compatible" ? config2.truncate?.trim() : undefined;
+  const localDtype = config2.provider === "local" && config2.local_dtype && config2.local_dtype !== "fp32" ? config2.local_dtype : undefined;
   const identityInput = config2.provider === "openai-compatible" ? {
     provider: "openai-compatible",
     model: config2.model.trim(),
@@ -170085,7 +170762,8 @@ function getEmbeddingProviderIdentity(config2) {
     provider: "local",
     model: config2.model?.trim() || DEFAULT_LOCAL_EMBEDDING_MODEL,
     endpoint: "",
-    apiKeyPresent: false
+    apiKeyPresent: false,
+    ...localDtype ? { localDtype } : {}
   };
   return `embedding-provider:${computeNormalizedHash(JSON.stringify(identityInput))}`;
 }
@@ -170173,6 +170851,7 @@ async function injectWasmOrtForElectron() {
     return false;
   }
 }
+var DEFAULT_LOCAL_DTYPE = "fp32";
 async function withQuietConsole(fn) {
   const origWarn = console.warn;
   const origError = console.error;
@@ -170249,16 +170928,22 @@ class LocalEmbeddingProvider {
   modelId;
   maxInputTokens;
   model;
+  dtype;
   pipeline = null;
   initPromise = null;
   inFlight = 0;
   disposing = false;
   disposePromise = null;
   inFlightWaiters = [];
-  constructor(model = DEFAULT_LOCAL_EMBEDDING_MODEL, maxInputTokens = 512) {
+  constructor(model = DEFAULT_LOCAL_EMBEDDING_MODEL, maxInputTokens = 512, dtype = DEFAULT_LOCAL_DTYPE) {
     this.model = model;
     this.maxInputTokens = maxInputTokens;
-    this.modelId = getEmbeddingProviderIdentity({ provider: "local", model });
+    this.dtype = dtype || DEFAULT_LOCAL_DTYPE;
+    this.modelId = getEmbeddingProviderIdentity({
+      provider: "local",
+      model,
+      ...dtype && dtype !== DEFAULT_LOCAL_DTYPE ? { local_dtype: dtype } : {}
+    });
   }
   async initialize() {
     if (this.disposing) {
@@ -170289,11 +170974,15 @@ class LocalEmbeddingProvider {
         }
         const modelCacheDir = join6(getMagicContextStorageDir(), "models");
         try {
-          mkdirSync4(modelCacheDir, { recursive: true, mode: 448 });
-          if (process.platform !== "win32") {
-            try {
-              chmodSync2(modelCacheDir, 448);
-            } catch {}
+          if (shouldEnforcePrivateStoragePermissions()) {
+            mkdirSync4(modelCacheDir, { recursive: true, mode: 448 });
+            if (process.platform !== "win32") {
+              try {
+                chmodSync2(modelCacheDir, 448);
+              } catch {}
+            }
+          } else {
+            mkdirSync4(modelCacheDir, { recursive: true });
           }
           env.cacheDir = modelCacheDir;
         } catch {
@@ -170309,7 +170998,7 @@ class LocalEmbeddingProvider {
           for (let attempt = 1;attempt <= MAX_ATTEMPTS; attempt++) {
             try {
               const pipeline = await withQuietConsole(() => createPipeline("feature-extraction", this.model, {
-                dtype: "fp32",
+                dtype: this.dtype,
                 ...injectedWasmOrt ? { device: "auto" } : {}
               }));
               if (this.disposing) {
@@ -170781,9 +171470,6 @@ var saveStatements = new WeakMap;
 var loadProjectStatements = new WeakMap;
 var loadUnembeddedStatements = new WeakMap;
 var countEmbeddedStatements = new WeakMap;
-var clearProjectStatements2 = new WeakMap;
-var clearProjectModelStatements2 = new WeakMap;
-var distinctModelIdStatements = new WeakMap;
 function getSaveStatement(db) {
   let stmt = saveStatements.get(db);
   if (!stmt) {
@@ -170854,7 +171540,6 @@ function countEmbeddedCommits(db, projectPath, modelId) {
 var insertStatements = new WeakMap;
 var existingShasStatements = new WeakMap;
 var projectCountStatements = new WeakMap;
-var evictStatements = new WeakMap;
 var evictOverflowStatements = new WeakMap;
 var latestCommitTimeStatements = new WeakMap;
 function getInsertStatement(db) {
@@ -171103,7 +171788,6 @@ var deleteEmbeddingStatements = new WeakMap;
 var getStoredModelIdStatements = new WeakMap;
 var clearAllEmbeddingsStatements = new WeakMap;
 var clearModelEmbeddingsStatements = new WeakMap;
-var getDistinctStoredModelIdsStatements = new WeakMap;
 function isEmbeddingBlob(value) {
   return value instanceof Uint8Array || value instanceof ArrayBuffer;
 }
@@ -171331,6 +172015,9 @@ var shadowWorker = null;
 var SHADOW_MAX_ITEMS_PER_TICK = 64;
 var SHADOW_MAX_BYTES_PER_TICK = 512 * 1024;
 var SHADOW_MAX_WALL_CLOCK_MS = 2000;
+var pendingShadowBackfills = new Map;
+var shadowBackfillLastIds = new Map;
+var shadowBackfillStopReasons = new Map;
 var loadUnembeddedMemoriesStatements = new WeakMap;
 var upsertActiveIdentityStatements = new WeakMap;
 var backfillActiveIdentityStatements = new Map;
@@ -171378,7 +172065,8 @@ function resolveEmbeddingConfig(config2) {
       model: config2?.model?.trim() || DEFAULT_LOCAL_EMBEDDING_MODEL,
       ...config2?.max_input_tokens ? {
         max_input_tokens: normalizeCompartmentChunkMaxInputTokens(config2.max_input_tokens)
-      } : {}
+      } : {},
+      ...config2?.local_dtype ? { local_dtype: config2.local_dtype } : {}
     };
   }
   if (config2.provider === "openai-compatible") {
@@ -171437,7 +172125,7 @@ function createProvider(config2, context) {
     });
   }
   if (config2.provider === "local") {
-    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens);
+    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens, config2.local_dtype);
   }
   if (config2.provider === "synapse") {
     const synapse = config2;
@@ -171777,7 +172465,7 @@ function startShadowWorker() {
     return;
   shadowWorker = runShadowWorker().finally(() => {
     shadowWorker = null;
-    if (shadowQueue.length > 0)
+    if (shadowQueue.length > 0 || hasPendingShadowBackfill())
       startShadowWorker();
   });
 }
@@ -171824,6 +172512,95 @@ function enqueueShadowEmbeddingItems(projectIdentity, scope, ids) {
   shadowQueue.push({ projectIdentity, scope, ids: [...ids] });
   startShadowWorker();
 }
+function shadowBackfillMissingBase(scope, primaryModelId, shadowModelId, projectIdentity) {
+  if (scope === "memory") {
+    return {
+      sql: `SELECT m.id AS id
+                  FROM memories m
+                  JOIN memory_embeddings mp ON mp.memory_id = m.id AND mp.model_id = ?
+                  LEFT JOIN memory_embeddings ms ON ms.memory_id = m.id AND ms.model_id = ?
+                  WHERE m.project_path = ? AND m.status = 'active' AND ms.memory_id IS NULL`,
+      params: [primaryModelId, shadowModelId, projectIdentity],
+      orderBy: " ORDER BY m.id"
+    };
+  }
+  if (scope === "commit") {
+    return {
+      sql: `SELECT gc.sha AS id
+                  FROM git_commits gc
+                  JOIN git_commit_embeddings gp ON gp.sha = gc.sha AND gp.model_id = ?
+                  LEFT JOIN git_commit_embeddings gs ON gs.sha = gc.sha AND gs.model_id = ?
+                  WHERE gc.project_path = ? AND gs.sha IS NULL`,
+      params: [primaryModelId, shadowModelId, projectIdentity],
+      orderBy: " ORDER BY gc.committed_at DESC, gc.sha"
+    };
+  }
+  return {
+    sql: `SELECT DISTINCT cp.compartment_id AS id
+              FROM compartment_chunk_embeddings cp
+              WHERE cp.project_path = ? AND cp.model_id = ?
+                AND NOT EXISTS (
+                    SELECT 1 FROM compartment_chunk_embeddings cs
+                    WHERE cs.compartment_id = cp.compartment_id AND cs.model_id = ?
+                )`,
+    params: [projectIdentity, primaryModelId, shadowModelId],
+    orderBy: " ORDER BY cp.compartment_id"
+  };
+}
+function shadowBackfillMissingIds(db, projectIdentity, scope, primaryModelId, shadowModelId, limit) {
+  const { sql, params, orderBy } = shadowBackfillMissingBase(scope, primaryModelId, shadowModelId, projectIdentity);
+  const rows = db.prepare(`${sql}${orderBy} LIMIT ?`).all(...params, limit);
+  return rows.map((row) => String(row.id));
+}
+function shadowModelIdForScope(registration, scope) {
+  return scope === "chunk" ? registration.chunkModelId : registration.modelId;
+}
+function hasPendingShadowBackfill(projectIdentity) {
+  if (projectIdentity === undefined)
+    return pendingShadowBackfills.size > 0;
+  const scopes = pendingShadowBackfills.get(projectIdentity);
+  return scopes !== undefined && scopes.size > 0;
+}
+function pumpShadowBackfill() {
+  for (const [projectIdentity, scopes] of pendingShadowBackfills) {
+    const db = dbForShadowQueue.get(projectIdentity);
+    const shadow = shadowRegistrations.get(projectIdentity);
+    const primary = projectRegistrations.get(projectIdentity);
+    if (!db || !shadow || !primary) {
+      pendingShadowBackfills.delete(projectIdentity);
+      continue;
+    }
+    for (const scope of [...scopes]) {
+      const primaryModelId = shadowModelIdForScope(primary, scope);
+      const shadowModelId = shadowModelIdForScope(shadow, scope);
+      const stallKey = `${projectIdentity}:${scope}`;
+      if (primaryModelId === "off" || shadowModelId === "off") {
+        scopes.delete(scope);
+        shadowBackfillLastIds.delete(stallKey);
+        continue;
+      }
+      const ids = shadowBackfillMissingIds(db, projectIdentity, scope, primaryModelId, shadowModelId, SHADOW_MAX_ITEMS_PER_TICK);
+      if (ids.length === 0) {
+        shadowBackfillStopReasons.set(stallKey, "drained");
+        scopes.delete(scope);
+        shadowBackfillLastIds.delete(stallKey);
+        continue;
+      }
+      const signature = ids.join(",");
+      if (shadowBackfillLastIds.get(stallKey) === signature) {
+        shadowBackfillStopReasons.set(stallKey, "stalled_no_progress");
+        log(`[shadow] backfill scope ${scope} for ${projectIdentity} retired without progress — ` + `the last batch produced no writes (provider failure or timeout is the usual cause); ` + `${ids.length}+ items remain and retry on the next registration or manual --shadow run`);
+        scopes.delete(scope);
+        shadowBackfillLastIds.delete(stallKey);
+        continue;
+      }
+      shadowBackfillLastIds.set(stallKey, signature);
+      shadowQueue.push({ projectIdentity, scope, ids });
+    }
+    if (scopes.size === 0)
+      pendingShadowBackfills.delete(projectIdentity);
+  }
+}
 async function embedShadowItems(registration, items, db, scope) {
   const raw = registration.config;
   const fingerprint = typeof raw.synapse_fingerprint === "string" ? raw.synapse_fingerprint : "";
@@ -171947,7 +172724,15 @@ async function runShadowWorker() {
   const startedAt = Date.now();
   let processed = 0;
   let processedBytes = 0;
-  while (shadowQueue.length > 0 && processed < SHADOW_MAX_ITEMS_PER_TICK && Date.now() - startedAt < SHADOW_MAX_WALL_CLOCK_MS) {
+  for (;; ) {
+    if (shadowQueue.length === 0) {
+      pumpShadowBackfill();
+      if (shadowQueue.length === 0)
+        break;
+    }
+    if (processed >= SHADOW_MAX_ITEMS_PER_TICK || Date.now() - startedAt >= SHADOW_MAX_WALL_CLOCK_MS) {
+      break;
+    }
     const item = shadowQueue.shift();
     if (!item)
       break;
@@ -172483,7 +173268,7 @@ function createProvider2(config2) {
     });
   }
   if (config2.provider === "local") {
-    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens);
+    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens, config2.local_dtype);
   }
   if (config2.provider === "synapse") {
     const synapse = config2;
@@ -172660,7 +173445,8 @@ function configFingerprint(paths) {
   }).join("|");
 }
 async function ensureProjectRegisteredFromPiDirectory(directory, db) {
-  const projectIdentity = resolveProjectIdentityForSession(directory);
+  const detailed = loadPiConfigDetailed({ cwd: directory });
+  const projectIdentity = resolveProjectIdentityForSession(directory, detailed.config.allow_home_project);
   if (!projectIdentity)
     return;
   let registrationFingerprints = registrationFingerprintsByDatabase.get(db);
@@ -172671,7 +173457,6 @@ async function ensureProjectRegisteredFromPiDirectory(directory, db) {
   const cached2 = registrationFingerprints.get(projectIdentity);
   if (cached2 && configFingerprint(cached2.paths) === cached2.fingerprint)
     return;
-  const detailed = loadPiConfigDetailed({ cwd: directory });
   if (isConfigLoadUntrusted(detailed)) {
     handleUntrustedLoad(db, projectIdentity, directory, detailed);
     return;
@@ -178182,7 +178967,6 @@ class ModuleMemoryAuthorityError extends Error {
   }
 }
 function assertTsMemoryWriteAllowed(db, projectPath) {
-  registerPrivilegedWriter(db);
   try {
     const managed = db.prepare("SELECT 1 FROM authority_managed WHERE project_path = ? UNION SELECT 1 FROM authority_repair_pending WHERE project_path = ? LIMIT 1").get(projectPath, projectPath);
     if (managed)
@@ -179104,6 +179888,7 @@ function queueEmbedding(args) {
 }
 function createCtxMemoryTool(deps) {
   const dreamerAllowed = deps.allowDreamerActions === true;
+  const resolveProject = deps.resolveProjectIdentity ?? resolveProjectIdentityForSession;
   const description = dreamerAllowed ? `${CTX_MEMORY_DESCRIPTION}
 - list: enumerate stored memories (maintenance sessions).` : CTX_MEMORY_DESCRIPTION;
   return {
@@ -179126,7 +179911,7 @@ function createCtxMemoryTool(deps) {
       if (!dreamerAllowed && DREAMER_ONLY_ACTIONS.has(params.action)) {
         return err2(`Error: Action '${params.action}' is not allowed in this context.`);
       }
-      const projectIdentity = resolveProjectIdentityForSession(ctx.cwd);
+      const projectIdentity = resolveProject(ctx.cwd);
       if (!projectIdentity) {
         return err2("Error: Could not resolve project identity for memory action.");
       }
@@ -179496,6 +180281,7 @@ function paginateNewestFirst(notes, limit, offset) {
   return { page, total, footer };
 }
 function createCtxNoteTool(deps) {
+  const resolveProject = deps.resolveProjectIdentity ?? resolveProjectIdentityForSession;
   return {
     name: "ctx_note",
     label: "Magic Context: Notes",
@@ -179527,7 +180313,7 @@ function createCtxNoteTool(deps) {
           if (dreamerEnabled !== true) {
             return err3("Error: Smart notes require dreamer to be enabled. Enable dreamer in magic-context.jsonc to use surface_condition.");
           }
-          const projectIdentity = resolveProjectIdentityForSession(ctx.cwd);
+          const projectIdentity = resolveProject(ctx.cwd);
           if (!projectIdentity) {
             return err3("Error: Could not resolve project identity for smart note.");
           }
@@ -179553,7 +180339,7 @@ function createCtxNoteTool(deps) {
         if (typeof params.note_id !== "number") {
           return err3("Error: 'note_id' is required when action is 'dismiss'.");
         }
-        const projectIdentity = resolveProjectIdentityForSession(ctx.cwd);
+        const projectIdentity = resolveProject(ctx.cwd);
         if (!projectIdentity) {
           return err3("Error: Could not resolve project identity for note dismiss.");
         }
@@ -179575,7 +180361,7 @@ function createCtxNoteTool(deps) {
         if (!updates.content && !updates.surfaceCondition) {
           return err3("Error: Provide 'content' and/or 'surface_condition' to update.");
         }
-        const projectIdentity = resolveProjectIdentityForSession(ctx.cwd);
+        const projectIdentity = resolveProject(ctx.cwd);
         if (!projectIdentity) {
           return err3("Error: Could not resolve project identity for note update.");
         }
@@ -179601,6 +180387,7 @@ function createCtxNoteTool(deps) {
         db: deps.db,
         sessionId,
         cwd: ctx.cwd,
+        resolveProjectIdentity: resolveProject,
         filter: params.filter,
         limit,
         offset
@@ -179624,7 +180411,7 @@ No session notes or smart notes.`);
   };
 }
 function readNotes(args) {
-  const projectIdentity = resolveProjectIdentityForSession(args.cwd);
+  const projectIdentity = args.resolveProjectIdentity(args.cwd);
   if (args.filter === undefined) {
     const sessionNotes2 = getNotes(args.db, {
       sessionId: args.sessionId,
@@ -181357,32 +182144,6 @@ async function unifiedSearch(db, sessionId, projectPath, query, options = {}) {
 // ../plugin/src/features/magic-context/mural/render-trigger.ts
 import { createHash as createHash15 } from "node:crypto";
 
-// ../plugin/src/shared/harness-provider-map.ts
-var CANONICAL_TO_PI_PROVIDER = {
-  openai: "openai-codex",
-  google: "google-antigravity"
-};
-var PI_TO_CANONICAL_PROVIDER = {
-  "openai-codex": "openai",
-  "google-antigravity": "google"
-};
-function remapProviderPrefix(ref3, map2) {
-  if (typeof ref3 !== "string")
-    return ref3;
-  const slash = ref3.indexOf("/");
-  if (slash <= 0)
-    return ref3;
-  const provider2 = ref3.slice(0, slash);
-  const mapped3 = map2[provider2];
-  return mapped3 ? `${mapped3}${ref3.slice(slash)}` : ref3;
-}
-function piModelRefToCanonical(ref3) {
-  return remapProviderPrefix(ref3, PI_TO_CANONICAL_PROVIDER);
-}
-function resolveModelRefForPi(ref3) {
-  return remapProviderPrefix(piModelRefToCanonical(ref3), CANONICAL_TO_PI_PROVIDER);
-}
-
 // ../plugin/src/features/magic-context/mural/mural-selection.ts
 var DEFAULT_MURAL_MEMORY_BUDGET = 8000;
 function muralOverflowMemories(memories, budgetTokens = DEFAULT_MURAL_MEMORY_BUDGET) {
@@ -181584,6 +182345,8 @@ function naturalLineLengths(entries, roomWidth) {
   let currentCategory = null;
   for (let index = 0;index < entries.length; index++) {
     const entry = entries[index];
+    if (!entry)
+      continue;
     if (entry.category !== currentCategory) {
       currentCategory = entry.category;
       lengths.push(codepoints(` <${entry.category}> `));
@@ -181616,6 +182379,8 @@ function planLines(entries, roomWidth) {
   let currentCategory = null;
   for (let index = 0;index < entries.length; index++) {
     const entry = entries[index];
+    if (!entry)
+      continue;
     if (entry.category !== currentCategory) {
       currentCategory = entry.category;
       lines.push({
@@ -181679,8 +182444,11 @@ function renderLayout(entries, plan, roomWidth, columnCount) {
   const usage = {};
   let filledLineCount = 0;
   for (const [column, columnPlan] of splitPlan(plan, columnCount).entries()) {
+    const columnGrid = grid[column];
+    if (!columnGrid)
+      continue;
     for (const [row, line] of columnPlan.entries()) {
-      grid[column][row] = line.text;
+      columnGrid[row] = line.text;
       filledLineCount += 1;
       usage[line.category] = (usage[line.category] ?? 0) + 1;
       const placementLine = row + 1;
@@ -181791,6 +182559,7 @@ function glyph(character) {
 }
 function drawGlyph(pixels, width, height, x, y, character, color) {
   const glyphData = glyph(character);
+  const [red, green, blue] = color;
   for (let row = 0;row < MURAL_CELL_HEIGHT; row++) {
     const pattern2 = glyphData.rows[row] ?? 0;
     for (let column = 0;column < glyphData.width; column++) {
@@ -181801,9 +182570,9 @@ function drawGlyph(pixels, width, height, x, y, character, color) {
       if (px < 0 || py < 0 || px >= width || py >= height)
         continue;
       const offset = (py * width + px) * 3;
-      pixels[offset] = color[0];
-      pixels[offset + 1] = color[1];
-      pixels[offset + 2] = color[2];
+      pixels[offset] = red;
+      pixels[offset + 1] = green;
+      pixels[offset + 2] = blue;
     }
   }
 }
@@ -181815,6 +182584,7 @@ function drawText(pixels, width, height, x, y, text, color) {
   }
 }
 function fillRect(pixels, canvasWidth, canvasHeight, x, y, width, height, color) {
+  const [red, green, blue] = color;
   const left = Math.max(0, x);
   const top = Math.max(0, y);
   const right = Math.min(canvasWidth, x + width);
@@ -181822,9 +182592,9 @@ function fillRect(pixels, canvasWidth, canvasHeight, x, y, width, height, color)
   for (let py = top;py < bottom; py++) {
     for (let px = left;px < right; px++) {
       const offset = (py * canvasWidth + px) * 3;
-      pixels[offset] = color[0];
-      pixels[offset + 1] = color[1];
-      pixels[offset + 2] = color[2];
+      pixels[offset] = red;
+      pixels[offset + 1] = green;
+      pixels[offset + 2] = blue;
     }
   }
 }
@@ -181851,6 +182621,9 @@ function renderMural(entries) {
   });
   const fittingCandidates = candidates2.filter((candidate) => candidate.layout.droppedIds.length === 0);
   const candidatesToCompare = fittingCandidates.length > 0 ? fittingCandidates : candidates2;
+  const firstCandidate = candidatesToCompare[0];
+  if (!firstCandidate)
+    throw new Error("mural layout candidate list is empty");
   const selected = candidatesToCompare.reduce((best, candidate) => {
     if (!best)
       return candidate;
@@ -181861,7 +182634,7 @@ function renderMural(entries) {
       return candidate.tileArea < best.tileArea ? candidate : best;
     }
     return candidate.requestedColumnCount < best.requestedColumnCount ? candidate : best;
-  }, candidatesToCompare[0]);
+  }, firstCandidate);
   const { layout, width, height } = selected;
   const pixels = new Uint8Array(width * height * 3).fill(255);
   const contentWidth = layout.columnCount === 0 ? 0 : layout.columnCount * roomWidth * MURAL_CELL_WIDTH + MURAL_COLUMN_GAP * (layout.columnCount - 1) * MURAL_CELL_WIDTH;
@@ -182161,6 +182934,353 @@ class BoundedSessionMap {
   }
 }
 
+// ../plugin/src/features/magic-context/compaction-marker.ts
+import { createHash as createHash16 } from "node:crypto";
+import { existsSync as existsSync9 } from "node:fs";
+import { join as join7 } from "node:path";
+var BASE62_CHARS = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
+var ID_PREFIX_HEX_LENGTH = 12;
+var ID_SUFFIX_LENGTH = 14;
+var ID_PREFIX_MASK = (1n << BigInt(ID_PREFIX_HEX_LENGTH * 4)) - 1n;
+function deterministicBase62(seed, length) {
+  let value = BigInt(`0x${createHash16("sha256").update(seed).digest("hex")}`);
+  const chars = Array(length);
+  for (let index = length - 1;index >= 0; index -= 1) {
+    chars[index] = BASE62_CHARS[Number(value % 62n)];
+    value /= 62n;
+  }
+  return chars.join("");
+}
+function generateId(prefix, timestampMs, counter, identity) {
+  const encoded = BigInt(Math.max(0, Math.floor(timestampMs))) * 0x1000n + counter & ID_PREFIX_MASK;
+  const hex3 = encoded.toString(16).padStart(ID_PREFIX_HEX_LENGTH, "0");
+  return `${prefix}_${hex3}${deterministicBase62(`${prefix}\x00${identity}`, ID_SUFFIX_LENGTH)}`;
+}
+function generateMessageId(timestampMs, counter = 0n, identity = "") {
+  return generateId("msg", timestampMs, counter, identity);
+}
+function generatePartId(timestampMs, counter = 0n, identity = "") {
+  return generateId("prt", timestampMs, counter, identity);
+}
+function getOpenCodeDbPath2() {
+  return join7(getDataDir(), "opencode", "opencode.db");
+}
+var cachedWriteDb = null;
+var REQUIRED_MESSAGE_COLUMNS = ["id", "session_id", "time_created", "time_updated", "data"];
+var REQUIRED_PART_COLUMNS = [
+  "id",
+  "message_id",
+  "session_id",
+  "time_created",
+  "time_updated",
+  "data"
+];
+var cachedSchemaCompatible = null;
+function isOpenCodeSchemaCompatible(db, dbPath) {
+  if (cachedSchemaCompatible?.path === dbPath) {
+    return cachedSchemaCompatible.compatible;
+  }
+  try {
+    const messageCols = new Set(db.prepare("PRAGMA table_info(message)").all().map((r) => r.name ?? "").filter((n) => n.length > 0));
+    const partCols = new Set(db.prepare("PRAGMA table_info(part)").all().map((r) => r.name ?? "").filter((n) => n.length > 0));
+    const missingMessage = REQUIRED_MESSAGE_COLUMNS.filter((c) => !messageCols.has(c));
+    const missingPart = REQUIRED_PART_COLUMNS.filter((c) => !partCols.has(c));
+    if (missingMessage.length > 0 || missingPart.length > 0) {
+      log(`[magic-context] compaction-marker: OpenCode DB schema missing required columns ` + `(message: [${missingMessage.join(", ")}], part: [${missingPart.join(", ")}]). ` + `Marker injection disabled for this process. ` + `This usually means OpenCode was updated and magic-context is out of date.`);
+      cachedSchemaCompatible = { path: dbPath, compatible: false };
+      return false;
+    }
+    cachedSchemaCompatible = { path: dbPath, compatible: true };
+    return true;
+  } catch (error51) {
+    log(`[magic-context] compaction-marker: schema probe failed: ${error51 instanceof Error ? error51.message : String(error51)}. ` + `Marker injection disabled until next process restart.`);
+    cachedSchemaCompatible = { path: dbPath, compatible: false };
+    return false;
+  }
+}
+function getWritableOpenCodeDb() {
+  const dbPath = getOpenCodeDbPath2();
+  if (cachedWriteDb?.path === dbPath) {
+    return cachedWriteDb.db;
+  }
+  if (cachedWriteDb) {
+    try {
+      closeQuietly(cachedWriteDb.db);
+    } catch {}
+  }
+  if (!existsSync9(dbPath)) {
+    throw new Error(`OpenCode database not found at ${dbPath} (is OpenCode installed?)`);
+  }
+  const db = new Database(dbPath);
+  db.exec("PRAGMA busy_timeout=5000");
+  db.exec("PRAGMA journal_mode=WAL");
+  cachedWriteDb = { path: dbPath, db };
+  return db;
+}
+function getNonSummaryMessageSortKey(sessionId, messageId) {
+  const db = getWritableOpenCodeDb();
+  const row = db.prepare(`SELECT time_created, id
+             FROM message
+             WHERE session_id = ?
+               AND id = ?
+               AND NOT (COALESCE(json_extract(data, '$.summary'), 0) = 1
+                        AND COALESCE(json_extract(data, '$.finish'), '') = 'stop')
+             LIMIT 1`).get(sessionId, messageId);
+  if (typeof row?.time_created !== "number" || typeof row.id !== "string") {
+    return null;
+  }
+  return { id: row.id, timeCreated: row.time_created };
+}
+function findBoundaryUserMessage(sessionId, endMessageId) {
+  const db = getWritableOpenCodeDb();
+  const target2 = getNonSummaryMessageSortKey(sessionId, endMessageId);
+  if (!target2)
+    return null;
+  const boundary = db.prepare(`SELECT id, time_created, data
+             FROM message
+             WHERE session_id = ?
+               AND NOT (COALESCE(json_extract(data, '$.summary'), 0) = 1
+                        AND COALESCE(json_extract(data, '$.finish'), '') = 'stop')
+               AND COALESCE(json_extract(data, '$.role'), '') = 'user'
+               AND (time_created < ? OR (time_created = ? AND id <= ?))
+             ORDER BY time_created DESC, id DESC
+             LIMIT 1`).get(sessionId, target2.timeCreated, target2.timeCreated, target2.id);
+  if (typeof boundary?.id !== "string" || typeof boundary.time_created !== "number") {
+    return null;
+  }
+  return { id: boundary.id, timeCreated: boundary.time_created };
+}
+function compareOpenCodeMessagesByCanonicalOrder(sessionId, leftMessageId, rightMessageId) {
+  const left = getNonSummaryMessageSortKey(sessionId, leftMessageId);
+  const right = getNonSummaryMessageSortKey(sessionId, rightMessageId);
+  if (!left || !right)
+    return null;
+  if (left.timeCreated < right.timeCreated)
+    return -1;
+  if (left.timeCreated > right.timeCreated)
+    return 1;
+  if (left.id < right.id)
+    return -1;
+  if (left.id > right.id)
+    return 1;
+  return 0;
+}
+function removeLegacyMarkerLineageRows(db, args) {
+  const legacySummaries = db.prepare(`SELECT m.id
+             FROM message m
+             WHERE m.session_id = ?
+               AND m.id <> ?
+               AND COALESCE(json_extract(m.data, '$.summary'), 0) = 1
+               AND COALESCE(json_extract(m.data, '$.finish'), '') = 'stop'
+               AND COALESCE(json_extract(m.data, '$.parentID'), '') = ?
+               AND EXISTS (
+                   SELECT 1
+                   FROM part p
+                   WHERE p.session_id = m.session_id
+                     AND p.message_id = m.id
+                     AND COALESCE(json_extract(p.data, '$.type'), '') = 'text'
+                     AND COALESCE(json_extract(p.data, '$.text'), '') = ?
+               )`).all(args.sessionId, args.summaryMessageId, args.boundaryMessageId, args.summaryText);
+  const legacySummaryIds = legacySummaries.flatMap((row) => typeof row.id === "string" ? [row.id] : []);
+  if (legacySummaryIds.length === 0)
+    return;
+  const deleteSummaryParts = db.prepare("DELETE FROM part WHERE session_id = ? AND message_id = ?");
+  const deleteSummary = db.prepare("DELETE FROM message WHERE session_id = ? AND id = ?");
+  for (const summaryMessageId of legacySummaryIds) {
+    deleteSummaryParts.run(args.sessionId, summaryMessageId);
+    deleteSummary.run(args.sessionId, summaryMessageId);
+  }
+  db.prepare(`DELETE FROM part
+         WHERE session_id = ?
+           AND message_id = ?
+           AND id <> ?
+           AND COALESCE(json_extract(data, '$.type'), '') = 'compaction'
+           AND COALESCE(json_extract(data, '$.auto'), 0) = 1`).run(args.sessionId, args.boundaryMessageId, args.compactionPartId);
+}
+function injectCompactionMarker(args) {
+  const db = getWritableOpenCodeDb();
+  if (!isOpenCodeSchemaCompatible(db, getOpenCodeDbPath2())) {
+    return null;
+  }
+  const boundary = args.resolvedBoundary ?? findBoundaryUserMessage(args.sessionId, args.endMessageId);
+  if (!boundary) {
+    log(`[magic-context] compaction-marker: no user message found at or before endMessageId ${args.endMessageId} (ordinal ${args.endOrdinal})`);
+    return null;
+  }
+  const boundaryTime = boundary.timeCreated;
+  const markerIdentity = `${args.sessionId}\x00${args.endMessageId}`;
+  const summaryMsgId = generateMessageId(boundaryTime + 1, 1n, `${markerIdentity}\x00summary-message`);
+  const compactionPartId = generatePartId(boundaryTime, 1n, `${markerIdentity}\x00compaction-part`);
+  const summaryPartId = generatePartId(boundaryTime + 1, 2n, `${markerIdentity}\x00summary-part`);
+  const summaryMsgData = JSON.stringify({
+    role: "assistant",
+    parentID: boundary.id,
+    summary: true,
+    finish: "stop",
+    mode: "compaction",
+    agent: "compaction",
+    path: { cwd: args.directory, root: args.directory },
+    cost: 0,
+    tokens: { input: 0, output: 0, reasoning: 0, cache: { read: 0, write: 0 } },
+    modelID: "magic-context",
+    providerID: "magic-context",
+    time: { created: boundaryTime + 1 }
+  });
+  try {
+    db.transaction(() => {
+      removeLegacyMarkerLineageRows(db, {
+        sessionId: args.sessionId,
+        boundaryMessageId: boundary.id,
+        summaryText: args.summaryText,
+        summaryMessageId: summaryMsgId,
+        compactionPartId
+      });
+      db.prepare(`INSERT INTO part (id, message_id, session_id, time_created, time_updated, data)
+                 VALUES (?, ?, ?, ?, ?, ?)
+                 ON CONFLICT(id) DO UPDATE SET
+                     message_id = excluded.message_id,
+                     session_id = excluded.session_id,
+                     time_created = excluded.time_created,
+                     time_updated = excluded.time_updated,
+                     data = excluded.data`).run(compactionPartId, boundary.id, args.sessionId, boundaryTime, boundaryTime, '{"type":"compaction","auto":true}');
+      db.prepare(`INSERT INTO message (id, session_id, time_created, time_updated, data)
+                 VALUES (?, ?, ?, ?, ?)
+                 ON CONFLICT(id) DO UPDATE SET
+                     session_id = excluded.session_id,
+                     time_created = excluded.time_created,
+                     time_updated = excluded.time_updated,
+                     data = excluded.data`).run(summaryMsgId, args.sessionId, boundaryTime + 1, boundaryTime + 1, summaryMsgData);
+      db.prepare(`INSERT INTO part (id, message_id, session_id, time_created, time_updated, data)
+                 VALUES (?, ?, ?, ?, ?, ?)
+                 ON CONFLICT(id) DO UPDATE SET
+                     message_id = excluded.message_id,
+                     session_id = excluded.session_id,
+                     time_created = excluded.time_created,
+                     time_updated = excluded.time_updated,
+                     data = excluded.data`).run(summaryPartId, summaryMsgId, args.sessionId, boundaryTime + 1, boundaryTime + 1, JSON.stringify({ type: "text", text: args.summaryText }));
+    })();
+    log(`[magic-context] compaction-marker: injected boundary at user msg ${boundary.id} (ordinal ~${args.endOrdinal}), summary msg ${summaryMsgId}`);
+    return {
+      boundaryMessageId: boundary.id,
+      summaryMessageId: summaryMsgId,
+      compactionPartId,
+      summaryPartId
+    };
+  } catch (error51) {
+    log(`[magic-context] compaction-marker: injection failed: ${error51 instanceof Error ? error51.message : String(error51)}`);
+    return null;
+  }
+}
+function removeCompactionMarker(state) {
+  try {
+    const db = getWritableOpenCodeDb();
+    db.transaction(() => {
+      db.prepare("DELETE FROM part WHERE id = ?").run(state.summaryPartId);
+      db.prepare("DELETE FROM message WHERE id = ?").run(state.summaryMessageId);
+      db.prepare("DELETE FROM part WHERE id = ?").run(state.compactionPartId);
+    })();
+    return true;
+  } catch (error51) {
+    log(`[magic-context] compaction-marker: removal failed: ${error51 instanceof Error ? error51.message : String(error51)}`);
+    return false;
+  }
+}
+
+// ../plugin/src/hooks/magic-context/compaction-marker-manager.ts
+var MARKER_SUMMARY_TEXT = "[Compacted by magic-context — session history is managed by the plugin]";
+function dropMarkerSummaryTag(db, sessionId, summaryMessageId) {
+  const tagNumber = getTagNumberByMessageId(db, sessionId, `${summaryMessageId}:p0`);
+  if (tagNumber !== null)
+    updateTagStatus(db, sessionId, tagNumber, "dropped");
+}
+function persistMarkerStateAndDropReplacedTag(db, sessionId, state, replacedSummaryMessageId) {
+  db.transaction(() => {
+    setPersistedCompactionMarkerState(db, sessionId, state);
+    if (replacedSummaryMessageId !== null) {
+      dropMarkerSummaryTag(db, sessionId, replacedSummaryMessageId);
+    }
+  })();
+}
+function getCompartmentEndMessageIdForOrdinal(db, sessionId, endOrdinal) {
+  const row = db.prepare(`SELECT end_message_id
+             FROM compartments
+             WHERE session_id = ? AND end_message = ?
+             ORDER BY sequence DESC
+             LIMIT 1`).get(sessionId, endOrdinal);
+  return typeof row?.end_message_id === "string" && row.end_message_id.length > 0 ? row.end_message_id : null;
+}
+function existingMarkerAlreadyCoversTarget(sessionId, existing, targetOrdinal, targetEndMessageId) {
+  if (existing.boundaryOrdinal < targetOrdinal) {
+    return false;
+  }
+  if (existing.boundaryOrdinal === targetOrdinal) {
+    const boundaryCompare = compareOpenCodeMessagesByCanonicalOrder(sessionId, existing.boundaryMessageId, targetEndMessageId);
+    if (boundaryCompare === null || boundaryCompare > 0) {
+      return false;
+    }
+    if (existing.targetEndMessageId !== null && existing.targetEndMessageId !== targetEndMessageId) {
+      return false;
+    }
+    return true;
+  }
+  if (existing.targetEndMessageId !== null) {
+    const targetCompare = compareOpenCodeMessagesByCanonicalOrder(sessionId, existing.targetEndMessageId, targetEndMessageId);
+    if (targetCompare !== null && targetCompare <= 0) {
+      return false;
+    }
+  }
+  return true;
+}
+function updateCompactionMarkerAfterPublication(db, sessionId, lastCompartmentEnd, directory) {
+  if (getHarness() !== "opencode") {
+    return true;
+  }
+  const targetEndMessageId = getCompartmentEndMessageIdForOrdinal(db, sessionId, lastCompartmentEnd);
+  if (!targetEndMessageId) {
+    sessionLog(sessionId, `compaction-marker: no compartment endMessageId for ordinal ${lastCompartmentEnd}; preserving existing marker`);
+    return false;
+  }
+  const existing = getPersistedCompactionMarkerState(db, sessionId);
+  const removedSummaryMessageId = existing?.summaryMessageId ?? null;
+  if (existing) {
+    if (existingMarkerAlreadyCoversTarget(sessionId, existing, lastCompartmentEnd, targetEndMessageId)) {
+      return true;
+    }
+  }
+  const boundary = findBoundaryUserMessage(sessionId, targetEndMessageId);
+  if (!boundary) {
+    sessionLog(sessionId, `compaction-marker: no user boundary found at or before endMessageId ${targetEndMessageId} (ordinal ${lastCompartmentEnd}); preserving existing marker`);
+    return false;
+  }
+  if (existing) {
+    const removed = removeCompactionMarker(existing);
+    if (!removed) {
+      sessionLog(sessionId, `compaction-marker: failed to remove old boundary at ordinal ${existing.boundaryOrdinal}; preserving persisted state for retry (not injecting new marker this pass)`);
+      return false;
+    }
+    persistMarkerStateAndDropReplacedTag(db, sessionId, null, removedSummaryMessageId);
+    sessionLog(sessionId, `compaction-marker: removed old boundary at ordinal ${existing.boundaryOrdinal}, moving to ${lastCompartmentEnd}`);
+  }
+  const result = injectCompactionMarker({
+    sessionId,
+    endOrdinal: lastCompartmentEnd,
+    endMessageId: targetEndMessageId,
+    summaryText: MARKER_SUMMARY_TEXT,
+    directory: directory ?? process.cwd(),
+    resolvedBoundary: boundary
+  });
+  if (result) {
+    persistMarkerStateAndDropReplacedTag(db, sessionId, {
+      ...result,
+      boundaryOrdinal: lastCompartmentEnd,
+      targetEndMessageId
+    }, removedSummaryMessageId);
+    sessionLog(sessionId, `compaction-marker: injected at ordinal ${lastCompartmentEnd}, boundary user msg ${result.boundaryMessageId}`);
+    return true;
+  }
+  return false;
+}
+
 // ../plugin/src/hooks/magic-context/compartment-render-epoch.ts
 var COMPARTMENT_RENDER_EPOCH = "cre2";
 var EPOCH_COMPONENT_PREFIX = "|compartment-render:";
@@ -182450,6 +183570,13 @@ var INJECTION_CACHE_MAX = 100;
 var injectionCache = new BoundedSessionMap(INJECTION_CACHE_MAX);
 function clearInjectionCache(sessionId) {
   injectionCache.delete(sessionId);
+  resetDegradedReanchorState(sessionId);
+}
+var degradedRebuildCountBySession = new BoundedSessionMap(INJECTION_CACHE_MAX);
+var reAnchorLoggedBySession = new BoundedSessionMap(INJECTION_CACHE_MAX);
+function resetDegradedReanchorState(sessionId) {
+  degradedRebuildCountBySession.delete(sessionId);
+  reAnchorLoggedBySession.delete(sessionId);
 }
 function getVisibleMemoryIds(db, sessionId) {
   try {
@@ -182791,6 +183918,7 @@ function formatSearchResults(query, results, currentSessionId) {
 ${body}`;
 }
 function createCtxSearchTool(deps) {
+  const resolveProject = deps.resolveProjectIdentity ?? resolveProjectIdentityForSession;
   return {
     name: "ctx_search",
     label: "Magic Context: Search",
@@ -182816,7 +183944,7 @@ function createCtxSearchTool(deps) {
         };
       }
       const sessionId = ctx.sessionManager.getSessionId();
-      const projectIdentity = resolveProjectIdentityForSession(ctx.cwd);
+      const projectIdentity = resolveProject(ctx.cwd);
       if (!projectIdentity) {
         return {
           content: [
@@ -182941,12 +184069,14 @@ function createTodowriteTool() {
 
 // src/tools/index.ts
 function registerMagicContextTools(pi, opts) {
+  const resolveProjectIdentity2 = opts.resolveProjectIdentity ? (directory) => opts.resolveProjectIdentity?.({ cwd: directory }) : undefined;
   pi.registerTool(createCtxSearchTool({
     db: opts.db,
     ensureProjectRegistered: opts.ensureProjectRegistered,
     memoryEnabled: opts.memoryEnabled,
     embeddingEnabled: opts.embeddingEnabled,
-    gitCommitsEnabled: opts.gitCommitsEnabled
+    gitCommitsEnabled: opts.gitCommitsEnabled,
+    resolveProjectIdentity: resolveProjectIdentity2
   }));
   if (opts.memoryToolEnabled !== false) {
     pi.registerTool(createCtxMemoryTool({
@@ -182954,14 +184084,16 @@ function registerMagicContextTools(pi, opts) {
       ensureProjectRegistered: opts.ensureProjectRegistered,
       memoryEnabled: opts.memoryEnabled,
       embeddingEnabled: opts.embeddingEnabled,
-      allowDreamerActions: opts.allowDreamerActions ?? false
+      allowDreamerActions: opts.allowDreamerActions ?? false,
+      resolveProjectIdentity: resolveProjectIdentity2
     }));
   }
   if (!opts.sessionScopedToolsDisabled) {
     pi.registerTool(createCtxNoteTool({
       db: opts.db,
       dreamerEnabled: opts.dreamerEnabled ?? false,
-      resolveDreamerEnabled: opts.resolveDreamerEnabled
+      resolveDreamerEnabled: opts.resolveDreamerEnabled,
+      resolveProjectIdentity: resolveProjectIdentity2
     }));
     pi.registerTool(createCtxExpandTool({ db: opts.db }));
   }
@@ -182971,7 +184103,7 @@ function registerMagicContextTools(pi, opts) {
       registerTodosCommand(pi);
     }
   }
-  if (!opts.sessionScopedToolsDisabled) {
+  if (!opts.sessionScopedToolsDisabled && !opts.compactionOff) {
     pi.registerTool(createCtxReduceTool({
       db: opts.db,
       protectedTags: opts.protectedTags ?? 20,
@@ -182980,4 +184112,4 @@ function registerMagicContextTools(pi, opts) {
   }
 }
 
-export { isDreamerRunnable, migrateMagicContextConfigLocations, CANONICAL_DREAM_TASKS, leaseKindFor, leaseKeyFor, isCanonicalDreamTask, compareTaskOrder, ProjectIdentityError, resolveProjectIdentityStrict, resolveProjectIdentity, resolveProjectIdentityForSession, beginBootQuietPeriod, scheduleAfterBootQuiet, Database, closeQuietly, textMentionsRecentCommit, hasMeaningfulUserText, extractTexts, extractToolCallSummaries, estimateTokens, normalizeText, stripPersistedAssistantText, byteSize, stripTagPrefix, peelLeadingMcTagNotation, prependTag, isRecord, isEditTool, applyEditMarkerToInput, setRawMessageProvider, withRawMessageProvider, cleanUserText, withRawSessionMessageCache, readRawSessionMessages, primeTailRawMessageCache, getCachedAbsoluteMessageCount, primeInMemoryTailRawMessageCache, getRawSessionMessageCount, getRawSessionTagKeysThrough, getLegacyProtectedTailStartOrdinal, readSessionChunk, clearCompressionDepth, clearCompressionDepthRange, getMessageIndexSourceIdentity, isMessageIndexSourceCurrent, getLastIndexedOrdinal, getMessageIndexReconciliationStartOrdinal, isMessageIndexReconciledThrough, indexSingleMessage, indexMessagesAfterOrdinal, sweepOrphanedOpenCodeMessageIndexes, recordSessionProjectIdentity, COMPARTMENT_LEASE_RENEWAL_MS, acquireCompartmentLease, renewCompartmentLease, releaseCompartmentLease, isCompartmentLeaseHeld, persistCachedM0, clearCachedM0M1, getCompartments, getLastCompartmentEndMessage, getLastCompartmentEndMessageId, getCompartmentsByEndMessageId, appendCompartments, saveRecompStagingPass, getRecompStaging, clearRecompStaging, getRecompPartialRange, setRecompPartialRange, escapeXmlAttr, escapeXmlContent, getModuleNoteEvaluationBridge, getContextStoreUuid, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, sourceNameForMemory, computeWorkspaceEpochFingerprint, bumpEpochsForWorkspaceMembers, readProjectDocsCanonical, copySessionStateForClone, getErrorMessage, describeError, stableStringify, getSchemaFenceRejection, getDatabasePath, setSqlitePragmaConfig, applySqliteTuningPragmas, runSqliteOptimize, openDatabase, openDatabaseAsync, queueM0Mutation, getMaxM0MutationId, queueMemoryMutation, getMemoryMutationsForRender, getMemoryMutationsForRenderByProjects, getMaxMemoryMutationId, getMaxMemoryMutationIdForProjects, loadProtectedTailMeta, markProtectedTailPolicyV3Seeded, recordProtectedTailPublicationFloor, recordProtectedTailNoEligibleHead, getWrapupInProgressState, isWrapupInProgress, acquireWrapupInProgress, updateWrapupInProgress, releaseWrapupInProgress, reserveProtectedTailDrainTokens, clearEmergencyDrainLatch, recordHistorianDrainFailure, clearHistorianDrainFailure, rollbackProtectedTailDrainReservation, clearPersistedReasoningWatermark, getEmergencyInputSample, setEmergencyDropSample, clearEmergencyDropSample, getLastNudgeUndropped, setLastNudgeUndropped, getLastNudgeLevel, setLastNudgeLevel, resetLastNudgeCycle, resetLastNudgeCycleIfTailShrank, getChannel2NudgeState, setChannel2NudgeState, casChannel2NudgeState, getPersistedNoteNudge, setPersistedNoteNudgeTrigger, setPersistedNoteNudgeTriggerMessageId, getNoteNudgeAnchors, getAutoSearchHintDecisions, deliverNoteNudgeAtomic, appendAutoSearchHintDecision, pruneNoteNudgeAnchors, pruneAutoSearchHintDecisions, getPersistedTodoSyntheticAnchor, setPersistedTodoSyntheticAnchor, clearPersistedTodoSyntheticAnchor, getNoteLastReadAt, getHistorianFailureState, incrementHistorianFailure, clearHistorianFailureState, getOverflowState, recordOverflowDetected, clearEmergencyRecovery, clearDetectedContextLimit, getPersistedCompactionMarkerState, setPersistedCompactionMarkerState, getStrippedPlaceholderIds, applyStrippedPlaceholderDelta, getProcessedImageStrippedIds, addProcessedImageStrippedIds, getPendingCompactionMarkerState, clearPendingCompactionMarkerStateIf, getPendingPiCompactionMarkerState, setPendingPiCompactionMarkerState, clearPendingPiCompactionMarkerStateIf, getSessionsWithPendingPiMarker, peekDeferredExecutePending, setDeferredExecutePendingIfAbsent, clearDeferredExecutePendingIfMatches, setSessionWorkMetrics, getSessionWorkMetrics, getOrCreateSessionMeta, updateSessionMeta, advanceToolReclaimWatermark, retryPendingSessionCleanups, getNotes, getSessionNotes, getPendingSmartNotes, getReadySmartNotes, markNoteReady, markNoteChecked, queuePendingOp, getPendingOps, removePendingOp, PRIMER_CANDIDATE_TTL_MS, PRIMER_CANDIDATE_MAX_AGE_MS, primerOccurrenceKey, primerOccurrenceUtcDay, insertPrimerCandidates, updatePrimerCandidateEmbedding, getPrimerCandidatesByIds, getPrimerCandidatesForPromotion, countPrimerCandidatesForProject, getActivePrimers, createPrimer, updatePrimerSupport, updatePrimerAnswer, GLOBAL_USER_PROFILE_PROJECT_PATH, getProjectState, bumpProjectUserProfileVersion, saveSourceContent, replaceSourceContent, getSourceContents, recordSubagentInvocation, getLatestHistorianInvocationId, updateTagByteSize, getActiveTagTokenAggregate, AGE_RECLAIM_MIN_TOKENS, getOldestActiveUnprotectedToolTags, getActiveToolTagsForAgeReclaim, getTriggerTagTokenUpperBound, updateTagInputByteSize, updateTagTokenCount, getPersistedToolTagAccounting, getAllStatusTagTokenTotalsFlat, updateTagInputTokenCount, tagTokenCountIsNull, backfillTagTokenCounts, insertTag, updateTagStatus, updateTagDropMode, updateCavemanDepth, hasPiFallbackMessageTags, findAdoptableFallbackTags, hasPiFallbackToolOwnerTags, findPiFallbackToolOwnerTags, adoptPiFallbackToolOwnerTag, adoptPiFallbackMessageTag, getMaxTagNumberBySession, getTagNumberByMessageId, deriveTagLoadFloor, getTagsBySession, getActiveTagsBySession, getTagsForPendingOperations, getTagsByNumbers, getMaxDroppedTagNumber, getToolTagNumberByOwner, getNullOwnerToolTag, adoptNullOwnerToolTag, isSaneLimit, getSdkContextLimit, normalizeTodoStateJson, buildSyntheticTodoPart, SYNTH_USER_ID_PREFIX, resolvePiStableId, isMidTurnPi, readPiSessionMessages, findLastModelKeyFromBranch, convertEntriesToRawMessages, withContentLanguageDirective, withMigrationLanguageDirective, buildPrimaryLanguageDirective, piModelRefToCanonical, resolveModelRefForPi, parseCron, nextOccurrence, nextDueAtMs, DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE, DEFAULT_HISTORIAN_TIMEOUT_MS, buildCanonicalChunkTextFromFts, buildCompartmentSummaryFallbackText, canonicalizeInMemoryChunkTextForEmbedding, chunkCanonicalText, chunkEmbeddingWindowsAreCurrent, replaceCompartmentChunkEmbeddings, cosineSimilarity, computeNormalizedHash, GIT_SWEEP_LEASE_RENEWAL_MS, acquireGitSweepLease, renewGitSweepLease, markGitSweepSuccessAndRelease, parkGitSweepNonIndexable, releaseGitSweepLease, invalidateMemory, contentSha256, sweepStaleEmbeddingIdentitiesForProject, enqueueShadowEmbeddingItems, getProjectEmbeddingSnapshot, getProjectChunkEmbeddingModelId, getProjectEmbeddingMaxInputTokens, embedTextForProject, embedBatchForProject, embedItemsForProject, embedUnembeddedMemoriesForProject, drainCommitBacklogForProject, embedSessionCompartmentChunks, getEmbeddingCoverageStatus, computeCueContentHash, getMuralCueState, memoryNeedsCue, setMuralCue, hasMemoryShareableColumn, hasMemoryClassifiedAtColumn, getUnclassifiedMemoryIds, insertMemory, getMemoryByHash, getMemoriesByProject, getMemoriesByProjects, getMaxMemoryIdForProjects, readNewMemoriesForM1Union, getAllActiveMemoriesForMigration, getMemoryById, setMemoryClassification, archiveMemory, deleteMemory, getMemoryCount, getMemoryCountsByStatus, promoteSessionFactsDurable, embedPromotedFacts, recordMemoryMapping, recordMemoryVerifications, getUnmappedMemoryIds, clearMemoryVerifications, getMemoryVerifications, resolveGitTopLevel, readGitHead, readGitChangedFilesSince, readGitFileChangeTimesSince, verificationFileExists, normalizeVerificationFiles, USER_MEMORY_CANDIDATE_TTL_MS, insertUserMemoryCandidates, getUserMemoryCandidates, deleteUserMemoryCandidates, pruneExpiredUserMemoryCandidates, insertUserMemory, getActiveUserMemories, updateUserMemoryContent, dismissUserMemory, indexCommitsForProject, embedUnembeddedCommits, loadPiConfig, ensureProjectRegisteredFromPiDirectory, resolveMuralWire, COMPARTMENT_RENDER_EPOCH, encodeCachedM0UpgradeIdentity, decodeCachedM0UpgradeIdentity, DEFAULT_HISTORY_BUDGET_TOKENS, renderCompartmentAtTier, renderDecayedCompartments, extractM0Block, TEMPORAL_MARKER_PATTERN, temporalMarkerPrefix, clearInjectionCache, getVisibleMemoryIds, renderMemoryBlock, DEFAULT_MEMORY_BUDGET_TOKENS, DEFAULT_USER_PROFILE_BUDGET_TOKENS, trimMemoriesToBudgetV2, trimWorkspaceMemoriesToBudgetV2, trimUserMemoriesToBudget, renderMemoryBlockV2, stripMemoryMuralBlock, unifiedSearch, rememberTodowriteToolCallTodos, parseTodos, setTodoSnapshot, registerTodoOverlay, registerTodoStateLifecycle, registerMagicContextTools };
+export { COMPACTION_ENABLED_PATH, isDreamerRunnable, isCompactionEnabled, migrateMagicContextConfigLocations, ProjectIdentityError, resolveProjectIdentityStrict, resolveProjectIdentity, resolveProjectIdentityForSession, beginBootQuietPeriod, scheduleAfterBootQuiet, Database, closeQuietly, isMidTurn, textMentionsRecentCommit, hasMeaningfulUserText, extractTexts, extractToolCallSummaries, estimateTokens, normalizeText, stripPersistedAssistantText, byteSize, stripTagPrefix, peelLeadingMcTagNotation, prependTag, isRecord, isEditTool, applyEditMarkerToInput, setRawMessageProvider, withRawMessageProvider, cleanUserText, withRawSessionMessageCache, readRawSessionMessages, primeTailRawMessageCache, getCachedAbsoluteMessageCount, primeInMemoryTailRawMessageCache, getRawSessionMessageCount, getRawSessionTagKeysThrough, getLegacyProtectedTailStartOrdinal, readSessionChunk, clearCompressionDepth, clearCompressionDepthRange, getMessageIndexSourceIdentity, isMessageIndexSourceCurrent, getLastIndexedOrdinal, getMessageIndexReconciliationStartOrdinal, isMessageIndexReconciledThrough, indexSingleMessage, indexMessagesAfterOrdinal, sweepOrphanedOpenCodeMessageIndexes, recordSessionProjectIdentity, COMPARTMENT_LEASE_RENEWAL_MS, acquireCompartmentLease, renewCompartmentLease, releaseCompartmentLease, isCompartmentLeaseHeld, persistCachedM0, clearCachedM0M1, getCompartments, getLastCompartmentEndMessage, getLastCompartmentEndMessageId, getCompartmentsByEndMessageId, appendCompartments, saveRecompStagingPass, getRecompStaging, clearRecompStaging, getRecompPartialRange, setRecompPartialRange, escapeXmlAttr, escapeXmlContent, getModuleNoteEvaluationBridge, getContextStoreUuid, parseCompartmentOutput, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, sourceNameForMemory, computeWorkspaceEpochFingerprint, bumpEpochsForWorkspaceMembers, readProjectDocsCanonical, copySessionStateForClone, getErrorMessage, describeError, setStoragePrivatePermissionEnforcement, stableStringify, getSchemaFenceRejection, getMigrationOnOpenRefusal, LATEST_SUPPORTED_VERSION, getDatabasePath, getPersistedSchemaVersion, setSqlitePragmaConfig, applySqliteTuningPragmas, runSqliteOptimize, openDatabase, openDatabaseAsync, queueM0Mutation, getMaxM0MutationId, queueMemoryMutation, getMemoryMutationsForRender, getMemoryMutationsForRenderByProjects, getMaxMemoryMutationId, getMaxMemoryMutationIdForProjects, MAX_EXECUTE_THRESHOLD, escalationBands, loadProtectedTailMeta, markProtectedTailPolicyV3Seeded, recordProtectedTailPublicationFloor, recordProtectedTailNoEligibleHead, getWrapupInProgressState, isWrapupInProgress, acquireWrapupInProgress, updateWrapupInProgress, releaseWrapupInProgress, resolveCompactionModeRecord, getCompactionModeRecord, setCompactionModeRecord, reserveProtectedTailDrainTokens, clearEmergencyDrainLatch, recordHistorianDrainFailure, clearHistorianDrainFailure, rollbackProtectedTailDrainReservation, clearPersistedReasoningWatermark, getEmergencyInputSample, setEmergencyDropSample, clearEmergencyDropSample, getLastNudgeUndropped, setLastNudgeUndropped, getLastNudgeLevel, setLastNudgeLevel, resetLastNudgeCycle, resetLastNudgeCycleIfTailShrank, getChannel2NudgeState, setChannel2NudgeState, casChannel2NudgeState, getPersistedNoteNudge, setPersistedNoteNudgeTrigger, setPersistedNoteNudgeTriggerMessageId, getNoteNudgeAnchors, getAutoSearchHintDecisions, deliverNoteNudgeAtomic, appendAutoSearchHintDecision, pruneNoteNudgeAnchors, pruneAutoSearchHintDecisions, getPersistedTodoSyntheticAnchor, setPersistedTodoSyntheticAnchor, clearPersistedTodoSyntheticAnchor, getNoteLastReadAt, getHistorianFailureState, incrementHistorianFailure, clearHistorianFailureState, getOverflowState, recordOverflowDetected, clearEmergencyRecovery, clearDetectedContextLimit, getStrippedPlaceholderIds, applyStrippedPlaceholderDelta, getProcessedImageStrippedIds, addProcessedImageStrippedIds, getPendingCompactionMarkerState, clearPendingCompactionMarkerStateIf, getPendingPiCompactionMarkerState, setPendingPiCompactionMarkerState, clearPendingPiCompactionMarkerStateIf, getSessionsWithPendingPiMarker, peekDeferredExecutePending, setDeferredExecutePendingIfAbsent, clearDeferredExecutePendingIfMatches, setSessionWorkMetrics, getSessionWorkMetrics, getOrCreateSessionMeta, updateSessionMeta, advanceToolReclaimWatermark, retryPendingSessionCleanups, getNotes, getSessionNotes, getPendingSmartNotes, getReadySmartNotes, markNoteReady, markNoteChecked, queuePendingOp, getPendingOps, clearPendingOps, removePendingOp, PRIMER_CANDIDATE_TTL_MS, PRIMER_CANDIDATE_MAX_AGE_MS, primerOccurrenceKey, primerOccurrenceUtcDay, insertPrimerCandidates, updatePrimerCandidateEmbedding, getPrimerCandidatesByIds, getPrimerCandidatesForPromotion, countPrimerCandidatesForProject, getActivePrimers, createPrimer, updatePrimerSupport, updatePrimerAnswer, GLOBAL_USER_PROFILE_PROJECT_PATH, getProjectState, bumpProjectUserProfileVersion, saveSourceContent, replaceSourceContent, getSourceContents, recordSubagentInvocation, getLatestHistorianInvocationId, updateTagByteSize, getActiveTagTokenAggregate, AGE_RECLAIM_MIN_TOKENS, getOldestActiveUnprotectedToolTags, getActiveToolTagsForAgeReclaim, getTriggerTagTokenUpperBound, updateTagInputByteSize, updateTagTokenCount, getPersistedToolTagAccounting, getAllStatusTagTokenTotalsFlat, updateTagInputTokenCount, tagTokenCountIsNull, backfillTagTokenCounts, insertTag, updateTagStatus, updateTagDropMode, updateCavemanDepth, hasPiFallbackMessageTags, findAdoptableFallbackTags, hasPiFallbackToolOwnerTags, findPiFallbackToolOwnerTags, adoptPiFallbackToolOwnerTag, adoptPiFallbackMessageTag, getMaxTagNumberBySession, getTagNumberByMessageId, deriveTagLoadFloor, getTagsBySession, getActiveTagsBySession, getTagsForPendingOperations, getTagsByNumbers, getMaxDroppedTagNumber, getToolTagNumberByOwner, getNullOwnerToolTag, adoptNullOwnerToolTag, BoundedSessionMap, piModelRefToCanonical, resolveModelRefForPi, isSaneLimit, resolveLimit, getSdkContextLimit, normalizeTodoStateJson, buildSyntheticTodoPart, SYNTH_USER_ID_PREFIX, resolvePiStableId, isMidTurnPi, readPiSessionMessages, findLastModelKeyFromBranch, convertEntriesToRawMessages, withContentLanguageDirective, withMigrationLanguageDirective, buildPrimaryLanguageDirective, getOpenCodeDbPath2 as getOpenCodeDbPath, parseCron, nextOccurrence, nextDueAtMs, DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE, DEFAULT_HISTORIAN_TIMEOUT_MS, buildCanonicalChunkTextFromFts, buildCompartmentSummaryFallbackText, canonicalizeInMemoryChunkTextForEmbedding, chunkCanonicalText, chunkEmbeddingWindowsAreCurrent, replaceCompartmentChunkEmbeddings, cosineSimilarity, computeNormalizedHash, GIT_SWEEP_LEASE_RENEWAL_MS, acquireGitSweepLease, renewGitSweepLease, markGitSweepSuccessAndRelease, parkGitSweepNonIndexable, releaseGitSweepLease, invalidateMemory, contentSha256, sweepStaleEmbeddingIdentitiesForProject, enqueueShadowEmbeddingItems, getProjectEmbeddingSnapshot, getProjectChunkEmbeddingModelId, getProjectEmbeddingMaxInputTokens, embedTextForProject, embedBatchForProject, embedItemsForProject, embedUnembeddedMemoriesForProject, drainCommitBacklogForProject, embedSessionCompartmentChunks, getEmbeddingCoverageStatus, computeCueContentHash, getMuralCueState, memoryNeedsCue, setMuralCue, hasMemoryShareableColumn, hasMemoryClassifiedAtColumn, getUnclassifiedMemoryIds, insertMemory, getMemoryByHash, getMemoriesByProject, getMemoriesByProjects, getMaxMemoryIdForProjects, readNewMemoriesForM1Union, getAllActiveMemoriesForMigration, getMemoryById, setMemoryClassification, archiveMemory, deleteMemory, getMemoryCount, getMemoryCountsByStatus, promoteSessionFactsDurable, embedPromotedFacts, recordMemoryMapping, recordMemoryVerifications, getUnmappedMemoryIds, clearMemoryVerifications, getMemoryVerifications, resolveGitTopLevel, readGitHead, readGitChangedFilesSince, readGitFileChangeTimesSince, verificationFileExists, normalizeVerificationFiles, USER_MEMORY_CANDIDATE_TTL_MS, insertUserMemoryCandidates, getUserMemoryCandidates, deleteUserMemoryCandidates, pruneExpiredUserMemoryCandidates, insertUserMemory, getActiveUserMemories, updateUserMemoryContent, dismissUserMemory, indexCommitsForProject, embedUnembeddedCommits, loadPiConfig, ensureProjectRegisteredFromPiDirectory, resolveMuralWire, updateCompactionMarkerAfterPublication, COMPARTMENT_RENDER_EPOCH, encodeCachedM0UpgradeIdentity, decodeCachedM0UpgradeIdentity, DEFAULT_HISTORY_BUDGET_TOKENS, renderCompartmentAtTier, renderDecayedCompartments, extractM0Block, TEMPORAL_MARKER_PATTERN, temporalMarkerPrefix, clearInjectionCache, getVisibleMemoryIds, renderMemoryBlock, DEFAULT_MEMORY_BUDGET_TOKENS, DEFAULT_USER_PROFILE_BUDGET_TOKENS, trimMemoriesToBudgetV2, trimWorkspaceMemoriesToBudgetV2, trimUserMemoriesToBudget, renderMemoryBlockV2, stripMemoryMuralBlock, unifiedSearch, rememberTodowriteToolCallTodos, parseTodos, setTodoSnapshot, registerTodoOverlay, registerTodoStateLifecycle, registerMagicContextTools };