@cortexkit/pi-magic-context 0.33.1 → 0.34.0

package/dist/{index-e3kftg52.js → index-0k3j1tc3.js}

@@ -7852,9 +7852,13 @@ var require_src2 = __commonJS((exports, module) => {
 });
 
 // ../plugin/src/config/agent-disable.ts
+var COMPACTION_ENABLED_PATH = `compaction${"."}enabled`;
 function isDreamerRunnable(config) {
   return !!config.dreamer && config.dreamer.disable !== true;
 }
+function isCompactionEnabled(config) {
+  return config.compaction?.enabled !== false;
+}
 function clonePlainObject(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     return;
@@ -8296,6 +8300,7 @@ var dubiousOwnershipLoggedDirectories = new Set;
 var dubiousOwnershipWarnedDirectories = new Set;
 var transientGitIdentityReuseLoggedDirectories = new Set;
 var execFileSyncForIdentity = execFileSync;
+var userHomeDirectoryForIdentity = () => homedir2();
 var nowMs = () => Date.now();
 
 class ProjectIdentityError extends Error {
@@ -8491,9 +8496,12 @@ function recordDubiousOwnershipFallback(canonical) {
   dubiousOwnershipLoggedDirectories.add(canonical);
   log(`[magic-context] ${formatDubiousOwnershipWarning(canonical)}`);
 }
+function canonicalUserHomeDirectory() {
+  return realpathSync.native(userHomeDirectoryForIdentity());
+}
 function isUserHomeDirectory(directory) {
   try {
-    return realpathSync.native(path.resolve(directory)) === realpathSync.native(homedir2());
+    return realpathSync.native(path.resolve(directory)) === canonicalUserHomeDirectory();
   } catch {
     return false;
   }
@@ -8562,22 +8570,52 @@ function hasGitDir(canonical) {
     return false;
   }
 }
-function hasGitDirInAncestorChain(startDirectory) {
+function gitRootInAncestorChain(startDirectory) {
   let current = startDirectory;
   while (true) {
     if (existsSync2(path.join(current, ".git"))) {
-      return true;
+      try {
+        return realpathSync.native(current);
+      } catch {
+        return path.resolve(current);
+      }
     }
     const parent = path.dirname(current);
     if (parent === current) {
-      return false;
+      return null;
     }
     current = parent;
   }
 }
-function resolveProjectIdentityForSession(directory) {
-  if (isUserHomeDirectory(directory))
-    return;
+function hasGitDirInAncestorChain(startDirectory) {
+  return gitRootInAncestorChain(startDirectory) !== null;
+}
+function gitRootDirectory(canonical) {
+  const direct = gitRootInAncestorChain(canonical);
+  if (direct)
+    return direct;
+  try {
+    const realCanonical = realpathSync.native(canonical);
+    return realCanonical === canonical ? null : gitRootInAncestorChain(realCanonical);
+  } catch {
+    return null;
+  }
+}
+function resolveProjectIdentityForSession(directory, allowHomeProject = false) {
+  const canonicalHome = canonicalUserHomeDirectory();
+  const canonicalDirectory = (() => {
+    try {
+      return realpathSync.native(path.resolve(directory));
+    } catch {
+      return path.resolve(directory);
+    }
+  })();
+  const inheritsHomeRepository = gitRootDirectory(canonicalDirectory) === canonicalHome;
+  if (canonicalDirectory === canonicalHome || inheritsHomeRepository) {
+    if (!allowHomeProject)
+      return;
+    return directoryFallback(canonicalHome);
+  }
   return resolveProjectIdentityOrFallback(directory);
 }
 function normalizeStoredProjectPath(rawOrStored) {
@@ -8610,9 +8648,28 @@ function scheduleAfterBootQuiet(task, additionalDelayMs = 0) {
   return timer;
 }
 
+// ../plugin/src/shared/storage-permissions.ts
+var enforcePrivateStoragePermissions = true;
+function setStoragePrivatePermissionEnforcement(enforce) {
+  enforcePrivateStoragePermissions = enforce;
+}
+function shouldEnforcePrivateStoragePermissions() {
+  return enforcePrivateStoragePermissions;
+}
+
 // ../plugin/src/features/magic-context/storage-db.ts
-import { chmodSync, copyFileSync, cpSync, existsSync as existsSync4, mkdirSync as mkdirSync2, mkdtempSync } from "node:fs";
-import { dirname as dirname2, join as join3 } from "node:path";
+import {
+  chmodSync,
+  copyFileSync,
+  cpSync,
+  existsSync as existsSync4,
+  mkdirSync as mkdirSync2,
+  mkdtempSync,
+  readdirSync,
+  readFileSync as readFileSync2,
+  unlinkSync as unlinkSync2
+} from "node:fs";
+import { basename as basename2, dirname as dirname2, join as join3 } from "node:path";
 
 // ../plugin/src/shared/error-message.ts
 function getErrorMessage(error) {
@@ -8690,6 +8747,49 @@ function safeString(value) {
   }
 }
 
+// ../plugin/src/shared/rpc-utils.ts
+function isPidAlive(pid) {
+  if (!Number.isInteger(pid) || pid <= 0)
+    return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+function parseRpcPortFile(content, fallbackPid = 0) {
+  const trimmed = content.trim();
+  if (!trimmed)
+    return null;
+  if (trimmed.startsWith("{")) {
+    try {
+      const parsed = JSON.parse(trimmed);
+      const port2 = Number(parsed.port);
+      const pid = Number(parsed.pid);
+      const startedAt = Number(parsed.started_at);
+      if (!isValidPort(port2) || !Number.isInteger(pid) || pid <= 0)
+        return null;
+      return {
+        port: port2,
+        pid,
+        started_at: Number.isFinite(startedAt) ? startedAt : 0,
+        token: typeof parsed.token === "string" ? parsed.token : undefined,
+        instance_id: typeof parsed.instance_id === "string" ? parsed.instance_id : undefined
+      };
+    } catch {
+      return null;
+    }
+  }
+  const port = Number.parseInt(trimmed, 10);
+  if (!isValidPort(port))
+    return null;
+  return { port, pid: fallbackPid, started_at: 0 };
+}
+function isValidPort(port) {
+  return Number.isInteger(port) && port > 0 && port <= 65535;
+}
+
 // ../plugin/src/shared/sqlite.ts
 var isBun = typeof process !== "undefined" && typeof process.versions?.bun === "string";
 var bunSpec = "bun:" + "sqlite";
@@ -11433,6 +11533,33 @@ var MIGRATIONS = [
     up(db) {
       installLatestAuthorityTriggers(db);
     }
+  },
+  {
+    version: 72,
+    description: "add per-session compaction mode record column (issue #266)",
+    up(db) {
+      if (tableExists2(db, "session_meta")) {
+        ensureColumn(db, "session_meta", "compaction_mode_record", "TEXT");
+      }
+    }
+  },
+  {
+    version: 73,
+    description: "persist the last successful todowrite permission verdict",
+    up(db) {
+      if (tableExists2(db, "session_meta")) {
+        ensureColumn(db, "session_meta", "todo_permission_denied", "INTEGER NOT NULL DEFAULT 2");
+      }
+    }
+  },
+  {
+    version: 74,
+    description: "persist detected context-limit provenance",
+    up(db) {
+      if (tableExists2(db, "session_meta")) {
+        ensureColumn(db, "session_meta", "detected_context_limit_provenance", "TEXT NOT NULL DEFAULT 'unknown'");
+      }
+    }
   }
 ];
 var LATEST_MIGRATION_VERSION = MIGRATIONS.reduce((max, m) => Math.max(max, m.version), 0);
@@ -144458,30 +144585,40 @@ var persistenceByDatabase = new WeakMap;
 var persistenceErrorByDatabase = new WeakMap;
 var pathByDatabase = new WeakMap;
 var lastSchemaFenceRejection = null;
+var lastMigrationOnOpenRefusal = null;
 function getSchemaFenceRejection() {
   return lastSchemaFenceRejection;
 }
-var LATEST_SUPPORTED_VERSION = 71;
+function getMigrationOnOpenRefusal() {
+  return lastMigrationOnOpenRefusal;
+}
+var LATEST_SUPPORTED_VERSION = 74;
 var PERMISSIONS_ENFORCEABLE = process.platform !== "win32";
+var defaultStoragePermissionFs = { chmodSync, mkdirSync: mkdirSync2 };
+var storagePermissionFs = defaultStoragePermissionFs;
 function ensureSecureStorageDir(dir) {
-  mkdirSync2(dir, { recursive: true, mode: 448 });
+  if (!shouldEnforcePrivateStoragePermissions()) {
+    storagePermissionFs.mkdirSync(dir, { recursive: true });
+    return;
+  }
+  storagePermissionFs.mkdirSync(dir, { recursive: true, mode: 448 });
   if (!PERMISSIONS_ENFORCEABLE)
     return;
   try {
-    chmodSync(dir, 448);
+    storagePermissionFs.chmodSync(dir, 448);
   } catch (error) {
     log(`[magic-context] could not restrict storage dir permissions on ${dir}: ${getErrorMessage(error)}`);
   }
 }
 function restrictDatabaseFilePermissions(dbPath) {
-  if (!PERMISSIONS_ENFORCEABLE)
+  if (!PERMISSIONS_ENFORCEABLE || !shouldEnforcePrivateStoragePermissions())
     return;
   for (const suffix of ["", "-wal", "-shm"]) {
     const file = `${dbPath}${suffix}`;
     if (!existsSync4(file))
       continue;
     try {
-      chmodSync(file, 384);
+      storagePermissionFs.chmodSync(file, 384);
     } catch (error) {
       log(`[magic-context] could not restrict DB file permissions on ${file}: ${getErrorMessage(error)}`);
     }
@@ -144551,6 +144688,9 @@ function getPersistedSchemaVersion(db) {
   const row = db.prepare("SELECT MAX(version) AS version FROM schema_migrations").get();
   return row?.version ?? 0;
 }
+function formatSchemaFenceBootLog(persistedVersion, supportedVersion) {
+  return `[magic-context] storage schema at boot: database=v${persistedVersion}, supported_fence=v${supportedVersion}`;
+}
 function getRuntimeLatestSupportedVersion(options) {
   if (options?.latestSupportedVersion !== undefined) {
     return options.latestSupportedVersion;
@@ -144567,12 +144707,109 @@ function getRuntimeLatestSupportedVersion(options) {
 function enforceSchemaFence(db, dbPath, latestSupportedVersion) {
   const persistedVersion = getPersistedSchemaVersion(db);
   if (persistedVersion <= latestSupportedVersion) {
+    lastSchemaFenceRejection = null;
     return true;
   }
   lastSchemaFenceRejection = { persistedVersion, supportedVersion: latestSupportedVersion };
   log(`[magic-context] storage fatal: refusing to open ${dbPath}; database schema v${persistedVersion} is newer than this binary supports (max v${latestSupportedVersion}). A pinned or stale plugin is likely sharing this database with a newer instance; update or unpin Magic Context with 'npx @cortexkit/magic-context@latest doctor --force', then restart.`);
   return false;
 }
+function unreadableDiscovery(path2) {
+  return {
+    state: "unreadable",
+    serverPids: [],
+    staleFiles: [],
+    unreadableFile: path2
+  };
+}
+function inspectRpcServerDiscovery(storageDir) {
+  const rpcRoot = join3(storageDir, "rpc");
+  let projectEntries;
+  try {
+    projectEntries = readdirSync(rpcRoot, { withFileTypes: true });
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { state: "absent", serverPids: [], staleFiles: [] };
+    }
+    return unreadableDiscovery(rpcRoot);
+  }
+  const portFiles = [];
+  for (const projectEntry of projectEntries) {
+    if (!projectEntry.isDirectory())
+      continue;
+    const projectDir = join3(rpcRoot, projectEntry.name);
+    let entries;
+    try {
+      entries = readdirSync(projectDir);
+    } catch {
+      return unreadableDiscovery(projectDir);
+    }
+    for (const entry of entries) {
+      if (entry === "port" || entry.startsWith("port-") && entry.endsWith(".json")) {
+        portFiles.push(join3(projectDir, entry));
+      }
+    }
+  }
+  if (portFiles.length === 0) {
+    return { state: "absent", serverPids: [], staleFiles: [] };
+  }
+  const pids = new Set;
+  const staleFiles = [];
+  for (const portFile of portFiles) {
+    let raw;
+    try {
+      raw = readFileSync2(portFile, "utf8");
+    } catch {
+      return unreadableDiscovery(portFile);
+    }
+    const filename = basename2(portFile);
+    const pidFromName = /^port-(\d+)/.exec(filename)?.[1];
+    const record = parseRpcPortFile(raw, pidFromName ? Number(pidFromName) : 0);
+    if (!record || !Number.isInteger(record.pid) || record.pid <= 0) {
+      return unreadableDiscovery(portFile);
+    }
+    if (isPidAlive(record.pid))
+      pids.add(record.pid);
+    else
+      staleFiles.push(portFile);
+  }
+  const serverPids = [...pids].sort((a, b) => a - b);
+  if (serverPids.length > 0) {
+    return { state: "live", serverPids, staleFiles };
+  }
+  for (const staleFile of staleFiles) {
+    try {
+      unlinkSync2(staleFile);
+    } catch {
+      return unreadableDiscovery(staleFile);
+    }
+  }
+  return { state: "stale", serverPids: [], staleFiles };
+}
+function enforceMigrationOnOpenGuard(db, dbPath, dbDir, latestSupportedVersion) {
+  const persistedVersion = getPersistedSchemaVersion(db);
+  if (persistedVersion >= latestSupportedVersion) {
+    lastMigrationOnOpenRefusal = null;
+    return true;
+  }
+  const discovery = inspectRpcServerDiscovery(dbDir);
+  if (discovery.state === "absent" || discovery.state === "stale") {
+    lastMigrationOnOpenRefusal = null;
+    return true;
+  }
+  lastMigrationOnOpenRefusal = {
+    persistedVersion,
+    supportedVersion: latestSupportedVersion,
+    serverPids: discovery.serverPids,
+    ...discovery.unreadableFile ? { unreadableFile: discovery.unreadableFile } : {}
+  };
+  if (discovery.state === "unreadable") {
+    log(`[magic-context] storage fatal: refusing to migrate ${dbPath} from schema v${persistedVersion} to v${latestSupportedVersion} because RPC discovery file ${discovery.unreadableFile ?? "<unknown>"} is unreadable or invalid, so the absence of a live OpenCode server cannot be proven. Restart OpenCode, remove or repair the named discovery file, then retry this process.`);
+  } else {
+    log(`[magic-context] storage fatal: refusing to migrate ${dbPath} from schema v${persistedVersion} to v${latestSupportedVersion} while live OpenCode server PID(s) ${discovery.serverPids.join(", ")} may still use the old plugin build. Restart OpenCode, then retry this process.`);
+  }
+  return false;
+}
 var sqlitePragmaConfig = {
   cacheSizeMb: 64,
   mmapSizeMb: 0
@@ -144617,6 +144854,9 @@ function finishDatabaseOpen(db, dbPath, explicitDbPath, latestSupportedVersion)
   pathByDatabase.set(db, dbPath);
   persistenceByDatabase.set(db, true);
   persistenceErrorByDatabase.delete(db);
+  if (!explicitDbPath) {
+    log(formatSchemaFenceBootLog(getPersistedSchemaVersion(db), latestSupportedVersion));
+  }
   return db;
 }
 function initializeDatabase(db) {
@@ -145217,12 +145457,14 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       note_nudge_anchors TEXT NOT NULL DEFAULT '[]',
       auto_search_hint_decisions TEXT NOT NULL DEFAULT '[]',
       last_todo_state TEXT DEFAULT '',
+      todo_permission_denied INTEGER NOT NULL DEFAULT 2,
       todo_synthetic_call_id TEXT DEFAULT '',
       todo_synthetic_anchor_message_id TEXT DEFAULT '',
       todo_synthetic_state_json TEXT DEFAULT '',
       is_subagent INTEGER DEFAULT 0,
       last_context_percentage REAL DEFAULT 0,
       last_input_tokens INTEGER DEFAULT 0,
+      detected_context_limit_provenance TEXT NOT NULL DEFAULT 'unknown',
       observed_safe_input_tokens INTEGER NOT NULL DEFAULT 0,
       cache_alert_sent INTEGER NOT NULL DEFAULT 0,
       times_execute_threshold_reached INTEGER DEFAULT 0,
@@ -145277,6 +145519,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
       emergency_drain_active INTEGER NOT NULL DEFAULT 0,
       historian_drain_failure_at INTEGER NOT NULL DEFAULT 0,
       wrapup_in_progress_state TEXT,
+      compaction_mode_record TEXT,
       cached_m0_materialized_at INTEGER,
       cached_m0_session_facts_version INTEGER,
       cached_m0_upgrade_state TEXT,
@@ -145476,6 +145719,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
   ensureColumn(db, "session_meta", "note_nudge_anchors", "TEXT NOT NULL DEFAULT '[]'");
   ensureColumn(db, "session_meta", "auto_search_hint_decisions", "TEXT NOT NULL DEFAULT '[]'");
   ensureColumn(db, "session_meta", "last_todo_state", "TEXT DEFAULT ''");
+  ensureColumn(db, "session_meta", "todo_permission_denied", "INTEGER NOT NULL DEFAULT 2");
   ensureColumn(db, "session_meta", "todo_synthetic_call_id", "TEXT DEFAULT ''");
   ensureColumn(db, "session_meta", "todo_synthetic_anchor_message_id", "TEXT DEFAULT ''");
   ensureColumn(db, "session_meta", "todo_synthetic_state_json", "TEXT DEFAULT ''");
@@ -145532,6 +145776,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
   ensureColumn(db, "session_meta", "recomp_partial_range_end", "INTEGER DEFAULT 0");
   ensureColumn(db, "session_meta", "detected_context_limit", "INTEGER DEFAULT 0");
   ensureColumn(db, "session_meta", "detected_context_limit_model_key", "TEXT");
+  ensureColumn(db, "session_meta", "detected_context_limit_provenance", "TEXT NOT NULL DEFAULT 'unknown'");
   ensureColumn(db, "session_meta", "needs_emergency_recovery", "INTEGER DEFAULT 0");
   ensureColumn(db, "session_meta", "emergency_recovery_origin", "TEXT DEFAULT ''");
   ensureColumn(db, "session_meta", "pending_compaction_marker_state", "TEXT");
@@ -145582,6 +145827,7 @@ CREATE INDEX IF NOT EXISTS idx_dream_queue_pending ON dream_queue(started_at, en
   ensureColumn(db, "session_meta", "emergency_drain_active", "INTEGER NOT NULL DEFAULT 0");
   ensureColumn(db, "session_meta", "historian_drain_failure_at", "INTEGER NOT NULL DEFAULT 0");
   ensureColumn(db, "session_meta", "wrapup_in_progress_state", "TEXT");
+  ensureColumn(db, "session_meta", "compaction_mode_record", "TEXT");
   ensureColumn(db, "session_meta", "cached_m0_materialized_at", "INTEGER");
   ensureColumn(db, "session_meta", "cached_m0_session_facts_version", "INTEGER");
   ensureColumn(db, "session_meta", "cached_m0_upgrade_state", "TEXT");
@@ -145721,6 +145967,8 @@ function openDatabase(dbPathOrOptions) {
   const explicitDbPath = options?.dbPath !== undefined;
   const { dbDir, dbPath } = resolveDatabasePath(options?.dbPath);
   const latestSupportedVersion = getRuntimeLatestSupportedVersion(options);
+  lastSchemaFenceRejection = null;
+  lastMigrationOnOpenRefusal = null;
   const existing = databases.get(dbPath);
   if (existing) {
     if (!enforceSchemaFence(existing, dbPath, latestSupportedVersion)) {
@@ -145742,6 +145990,10 @@ function openDatabase(dbPathOrOptions) {
       closeQuietly(db);
       return null;
     }
+    if (!enforceMigrationOnOpenGuard(db, dbPath, dbDir, latestSupportedVersion)) {
+      closeQuietly(db);
+      return null;
+    }
     initializeDatabase(db);
     runMigrations(db);
     ensureContextStoreUuid(db);
@@ -145757,6 +146009,8 @@ async function openDatabaseAsync(dbPathOrOptions) {
   const explicitDbPath = options?.dbPath !== undefined;
   const { dbDir, dbPath } = resolveDatabasePath(options?.dbPath);
   const latestSupportedVersion = getRuntimeLatestSupportedVersion(options);
+  lastSchemaFenceRejection = null;
+  lastMigrationOnOpenRefusal = null;
   const existing = databases.get(dbPath);
   if (existing) {
     if (!enforceSchemaFence(existing, dbPath, latestSupportedVersion))
@@ -145780,6 +146034,10 @@ async function openDatabaseAsync(dbPathOrOptions) {
         closeQuietly(db);
         return null;
       }
+      if (!enforceMigrationOnOpenGuard(db, dbPath, dbDir, latestSupportedVersion)) {
+        closeQuietly(db);
+        return null;
+      }
       initializeDatabase(db);
       await runMigrationsWithRetry(db);
       ensureContextStoreUuid(db);
@@ -145801,6 +146059,24 @@ async function openDatabaseAsync(dbPathOrOptions) {
   }
 }
 
+// ../plugin/src/shared/context-limit-provenance.ts
+function normalizeContextLimitProvenance(value) {
+  if (value === "prompt_only" || value === "combined")
+    return value;
+  return "unknown";
+}
+
+// ../plugin/src/shared/escalation-bands.ts
+var MAX_EXECUTE_THRESHOLD = 90;
+var ABSOLUTE_EMERGENCY_PERCENTAGE = 95;
+function escalationBands(effectiveThresholdPercentage) {
+  const threshold = Number.isFinite(effectiveThresholdPercentage) ? Math.min(effectiveThresholdPercentage, MAX_EXECUTE_THRESHOLD) : 65;
+  return {
+    forceMaterializationPercentage: Math.max(85, threshold + 2),
+    emergencyPercentage: ABSOLUTE_EMERGENCY_PERCENTAGE
+  };
+}
+
 // ../plugin/src/features/magic-context/storage-meta-shared.ts
 import { Buffer as Buffer2 } from "node:buffer";
 var SESSION_META_SELECT_COLUMNS = [
@@ -146440,6 +146716,45 @@ function releaseWrapupInProgress(db, sessionId, holderId) {
     }
   }
 }
+var COMPACTION_MODE_RECORD_VALUES = new Set([
+  "on",
+  "off",
+  "on_notice_pending",
+  "off_notice_pending",
+  "off_cleanup_pending"
+]);
+function normalizeCompactionModeRecord(value) {
+  if (value === null || value === undefined)
+    return null;
+  if (typeof value === "string" && COMPACTION_MODE_RECORD_VALUES.has(value)) {
+    return value;
+  }
+  return null;
+}
+function resolveCompactionModeRecord(record) {
+  switch (record) {
+    case "on":
+    case "on_notice_pending":
+      return "on";
+    case "off":
+    case "off_notice_pending":
+    case "off_cleanup_pending":
+      return "off";
+    default:
+      return null;
+  }
+}
+function getCompactionModeRecord(db, sessionId) {
+  const row = db.prepare("SELECT compaction_mode_record FROM session_meta WHERE session_id = ?").get(sessionId);
+  return normalizeCompactionModeRecord(row?.compaction_mode_record);
+}
+function setCompactionModeRecord(db, sessionId, value) {
+  if (value !== null && !COMPACTION_MODE_RECORD_VALUES.has(value)) {
+    throw new Error(`Invalid compaction_mode_record value: ${String(value)} (expected a supported compaction mode record or null)`);
+  }
+  ensureSessionMetaRow(db, sessionId);
+  db.prepare("UPDATE session_meta SET compaction_mode_record = ? WHERE session_id = ?").run(value, sessionId);
+}
 function protectedTailWindowBudget(usagePercentage, usable, perRunCap) {
   if (usagePercentage >= 95)
     return Math.min(1e6, Math.max(4 * perRunCap, Math.round(0.5 * usable)));
@@ -146447,7 +146762,6 @@ function protectedTailWindowBudget(usagePercentage, usable, perRunCap) {
     return Math.min(750000, Math.max(3 * perRunCap, Math.round(0.35 * usable)));
   return Math.min(500000, Math.max(perRunCap, Math.round(0.2 * usable)));
 }
-var EMERGENCY_DRAIN_ENTER_PERCENTAGE = 95;
 var EMERGENCY_DRAIN_EXIT_MARGIN = 10;
 var EMERGENCY_DRAIN_FALLBACK_EXIT_PERCENTAGE = 55;
 var EMERGENCY_DRAIN_FAILURE_BACKOFF_MS = 60000;
@@ -146482,7 +146796,8 @@ function reserveProtectedTailDrainTokens(args) {
     }
     const exitThreshold = emergencyDrainExitThreshold(args.executeThresholdPercentage);
     let latchActiveSince = meta.emergencyDrainActive;
-    if (args.usagePercentage >= EMERGENCY_DRAIN_ENTER_PERCENTAGE) {
+    const { forceMaterializationPercentage } = escalationBands(args.executeThresholdPercentage);
+    if (args.usagePercentage >= forceMaterializationPercentage) {
       if (latchActiveSince <= 0)
         latchActiveSince = now;
     } else if (latchActiveSince > 0) {
@@ -146851,17 +147166,19 @@ function normalizeEmergencyRecoveryOrigin(value) {
   return value === "provider_overflow" || value === "proactive_model_shrink" ? value : null;
 }
 function getOverflowState(db, sessionId, modelKey) {
-  const result = db.prepare("SELECT detected_context_limit, detected_context_limit_model_key, needs_emergency_recovery, emergency_recovery_origin FROM session_meta WHERE session_id = ?").get(sessionId);
+  const result = db.prepare("SELECT detected_context_limit, detected_context_limit_model_key, detected_context_limit_provenance, needs_emergency_recovery, emergency_recovery_origin FROM session_meta WHERE session_id = ?").get(sessionId);
   if (!result) {
     return {
       detectedContextLimit: 0,
       detectedContextLimitModelKey: null,
+      detectedContextLimitProvenance: "unknown",
       needsEmergencyRecovery: false,
       emergencyRecoveryOrigin: null
     };
   }
   const storedModelKey = normalizeDetectedLimitModelKey(result.detected_context_limit_model_key);
   const requestedModelKey = normalizeDetectedLimitModelKey(modelKey);
+  const provenance = normalizeContextLimitProvenance(result.detected_context_limit_provenance);
   const limit = typeof result.detected_context_limit === "number" && result.detected_context_limit > 0 ? result.detected_context_limit : 0;
   const modelMatches = limit > 0 && requestedModelKey && storedModelKey ? requestedModelKey === storedModelKey : true;
   const needs = typeof result.needs_emergency_recovery === "number" && result.needs_emergency_recovery > 0;
@@ -146870,11 +147187,12 @@ function getOverflowState(db, sessionId, modelKey) {
   return {
     detectedContextLimit: modelMatches ? limit : 0,
     detectedContextLimitModelKey: storedModelKey,
+    detectedContextLimitProvenance: provenance,
     needsEmergencyRecovery: needs,
     emergencyRecoveryOrigin: recoveryOrigin
   };
 }
-function recordOverflowDetected(db, sessionId, reportedLimit, modelKey, origin = "provider_overflow") {
+function recordOverflowDetected(db, sessionId, reportedLimit, modelKey, origin = "provider_overflow", provenance = "unknown") {
   emergencyRecoveryArmedSessions.add(sessionId);
   db.transaction(() => {
     ensureSessionMetaRow(db, sessionId);
@@ -146883,7 +147201,7 @@ function recordOverflowDetected(db, sessionId, reportedLimit, modelKey, origin =
       providerOverflowReconfirmedSessions.add(sessionId);
     }
     if (typeof reportedLimit === "number" && reportedLimit > 0) {
-      db.prepare("UPDATE session_meta SET detected_context_limit = ?, detected_context_limit_model_key = ?, needs_emergency_recovery = 1, emergency_recovery_origin = ?, observed_safe_input_tokens = 0, cache_alert_sent = 0 WHERE session_id = ?").run(reportedLimit, normalizeDetectedLimitModelKey(modelKey), origin, sessionId);
+      db.prepare("UPDATE session_meta SET detected_context_limit = ?, detected_context_limit_model_key = ?, detected_context_limit_provenance = ?, needs_emergency_recovery = 1, emergency_recovery_origin = ?, observed_safe_input_tokens = 0, cache_alert_sent = 0 WHERE session_id = ?").run(reportedLimit, normalizeDetectedLimitModelKey(modelKey), normalizeContextLimitProvenance(provenance), origin, sessionId);
     } else {
       db.prepare("UPDATE session_meta SET needs_emergency_recovery = 1, emergency_recovery_origin = ?, observed_safe_input_tokens = 0, cache_alert_sent = 0 WHERE session_id = ?").run(origin, sessionId);
     }
@@ -146904,7 +147222,7 @@ function clearEmergencyRecovery(db, sessionId) {
 function clearDetectedContextLimit(db, sessionId) {
   db.transaction(() => {
     ensureSessionMetaRow(db, sessionId);
-    db.prepare("UPDATE session_meta SET detected_context_limit = 0, detected_context_limit_model_key = NULL WHERE session_id = ?").run(sessionId);
+    db.prepare("UPDATE session_meta SET detected_context_limit = 0, detected_context_limit_model_key = NULL, detected_context_limit_provenance = 'unknown' WHERE session_id = ?").run(sessionId);
   })();
 }
 function getPersistedCompactionMarkerState(db, sessionId) {
@@ -147169,6 +147487,62 @@ function getRawSessionMessageCountFromDb(db, sessionId) {
                       AND COALESCE(json_extract(data, '$.finish'), '') = 'stop')`).get(sessionId);
   return typeof row?.count === "number" ? row.count : 0;
 }
+function isMidTurn(_deps, sessionId) {
+  try {
+    return withReadOnlySessionDb((db) => isMidTurnFromOpenCodeDb(db, sessionId));
+  } catch (error) {
+    log("[magic-context] failed to inspect OpenCode mid-turn state:", error);
+    return false;
+  }
+}
+function isMidTurnFromOpenCodeDb(db, sessionId) {
+  const latestAssistant = db.prepare(`SELECT id,
+                    json_extract(data, '$.finish') as finish,
+                    time_created as timeCreated
+             FROM message
+             WHERE session_id = ?
+               AND json_extract(data, '$.role') = 'assistant'
+             ORDER BY time_created DESC
+             LIMIT 1`).get(sessionId);
+  if (typeof latestAssistant?.id !== "string")
+    return false;
+  if (hasNewerRealUserMessage(db, sessionId, latestAssistant.timeCreated))
+    return false;
+  if (latestAssistant.finish === "tool-calls")
+    return true;
+  const partRows = db.prepare("SELECT data FROM part WHERE session_id = ? AND message_id = ?").all(sessionId, latestAssistant.id);
+  return partRows.some((row) => {
+    if (typeof row.data !== "string" || row.data.length === 0)
+      return false;
+    try {
+      const part = JSON.parse(row.data);
+      return part.type === "tool" && part.providerExecuted !== true;
+    } catch {
+      return false;
+    }
+  });
+}
+function hasNewerRealUserMessage(db, sessionId, latestAssistantTimeCreated) {
+  if (typeof latestAssistantTimeCreated !== "number")
+    return false;
+  const row = db.prepare(`SELECT 1 as one
+             FROM message m
+             WHERE m.session_id = ?
+               AND m.time_created > ?
+               AND json_extract(m.data, '$.role') = 'user'
+               AND NOT (
+                 EXISTS (SELECT 1 FROM part p WHERE p.message_id = m.id)
+                 AND NOT EXISTS (
+                   SELECT 1 FROM part p
+                   WHERE p.message_id = m.id
+                     AND COALESCE(json_extract(p.data, '$.synthetic'), 0) NOT IN (1, 'true')
+                     AND json_extract(p.data, '$.metadata.marker.kind') IS NULL
+                     AND COALESCE(json_extract(p.data, '$.ignored'), 0) NOT IN (1, 'true')
+                 )
+               )
+             LIMIT 1`).get(sessionId, latestAssistantTimeCreated);
+  return row?.one === 1;
+}
 
 // ../plugin/src/hooks/magic-context/read-session-raw.ts
 function isRawMessageRow(row) {
@@ -148647,7 +149021,7 @@ function escapeXmlContent(s) {
 }
 // ../plugin/src/features/magic-context/project-docs-hash.ts
 import { createHash as createHash5 } from "node:crypto";
-import { lstatSync, readFileSync as readFileSync2, statSync as statSync3 } from "node:fs";
+import { lstatSync, readFileSync as readFileSync3, statSync as statSync3 } from "node:fs";
 import path2 from "node:path";
 var PROJECT_DOC_FILES = ["ARCHITECTURE.md", "STRUCTURE.md"];
 var PROJECT_DOCS_DELIMITER = `
@@ -148721,7 +149095,7 @@ function readCanonicalPieces(projectDirectory, files) {
     if (!safeToRead) {
       continue;
     }
-    const canonicalContent = canonicalizeDocContent(readFileSync2(filePath, "utf8"));
+    const canonicalContent = canonicalizeDocContent(readFileSync3(filePath, "utf8"));
     hashPieces.push(`file:${filename}
 ${canonicalContent}`);
     renderedSections.push(`<file name="${escapeXmlAttr(filename)}">
@@ -149168,7 +149542,7 @@ function getMemoryMutationsForRenderByIdentitySet(db, projectPaths, afterId, ren
       }
       visited.add(terminal);
       const next = byTarget.get(terminal);
-      if (!next || next.mutationType !== "superseded")
+      if (next?.mutationType !== "superseded")
         break;
       if (depth >= MAX_MEMORY_REPLACEMENT_DEPTH - 1) {
         terminal = null;
@@ -149428,6 +149802,14 @@ function getPendingOpsStatement(db) {
   }
   return stmt;
 }
+function getClearPendingOpsStatement(db) {
+  let stmt = clearPendingOpsStatements.get(db);
+  if (!stmt) {
+    stmt = db.prepare("DELETE FROM pending_ops WHERE session_id = ?");
+    clearPendingOpsStatements.set(db, stmt);
+  }
+  return stmt;
+}
 function getRemovePendingOpStatement(db) {
   let stmt = removePendingOpStatements.get(db);
   if (!stmt) {
@@ -149462,6 +149844,9 @@ function getPendingOps(db, sessionId) {
   const rows = getPendingOpsStatement(db).all(sessionId).filter(isPendingOpRow);
   return rows.map(toPendingOp).filter((op) => op !== null);
 }
+function clearPendingOps(db, sessionId) {
+  getClearPendingOpsStatement(db).run(sessionId);
+}
 function removePendingOp(db, sessionId, tagId) {
   getRemovePendingOpStatement(db).run(sessionId, tagId);
 }
@@ -150421,76 +150806,6 @@ var ERROR_CLASSES = new Set([
   "permission_denied",
   "unknown"
 ]);
-// ../plugin/src/shared/models-dev-cache.ts
-import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join5 } from "node:path";
-var MIN_SANE_LIMIT = 20000;
-var MAX_SANE_LIMIT = 3000000;
-function isSaneLimit(limit) {
-  return typeof limit === "number" && limit >= MIN_SANE_LIMIT && limit <= MAX_SANE_LIMIT;
-}
-var apiCache = null;
-var persistSeedLoaded = false;
-function persistFilePath() {
-  return join5(getMagicContextStorageDir(), `model-context-limits-${getHarness()}.json`);
-}
-function loadPersistedApiCacheOnce() {
-  if (persistSeedLoaded || apiCache !== null)
-    return;
-  persistSeedLoaded = true;
-  try {
-    const raw = readFileSync3(persistFilePath(), "utf-8");
-    const obj = JSON.parse(raw);
-    const map = new Map;
-    for (const [key, persisted] of Object.entries(obj)) {
-      const limit = typeof persisted === "number" ? persisted : persisted.limit;
-      const inputLimit = typeof persisted === "number" ? undefined : persisted.inputLimit;
-      const vision = typeof persisted === "number" ? false : persisted.vision === true;
-      if (isSaneLimit(limit)) {
-        map.set(key, {
-          limit,
-          inputLimit: isSaneLimit(inputLimit) ? inputLimit : undefined,
-          vision
-        });
-      }
-    }
-    if (map.size > 0) {
-      apiCache = map;
-      sessionLog("global", `models-dev-cache: seeded ${map.size} entries from persisted cache (cold start)`);
-    }
-  } catch {}
-}
-function getSdkContextLimit(providerID, modelID) {
-  loadPersistedApiCacheOnce();
-  const fromApi = lookupLimitWithTagFallback(apiCache, providerID, modelID);
-  return isSaneLimit(fromApi) ? fromApi : undefined;
-}
-function modelSupportsVision(providerID, modelID) {
-  loadPersistedApiCacheOnce();
-  if (!apiCache)
-    return false;
-  const exact = apiCache.get(`${providerID}/${modelID}`);
-  if (exact?.vision === true)
-    return true;
-  const colon = modelID.lastIndexOf(":");
-  return colon > 0 ? apiCache.get(`${providerID}/${modelID.slice(0, colon)}`)?.vision === true : false;
-}
-function lookupLimitWithTagFallback(cache, providerID, modelID) {
-  if (!cache)
-    return;
-  const exact = cache.get(`${providerID}/${modelID}`)?.limit;
-  if (typeof exact === "number")
-    return exact;
-  const colonIdx = modelID.lastIndexOf(":");
-  if (colonIdx > 0) {
-    const baseModel = modelID.slice(0, colonIdx);
-    const fallback = cache.get(`${providerID}/${baseModel}`)?.limit;
-    if (typeof fallback === "number")
-      return fallback;
-  }
-  return;
-}
-
 // ../plugin/src/hooks/magic-context/todo-view.ts
 import { createHash as createHash7 } from "node:crypto";
 var TODO_STATUS_PENDING = "pending";
@@ -150948,7 +151263,7 @@ function pruneNestedConfigLeaf(block, relativePath) {
 }
 
 // src/config/index.ts
-import { existsSync as existsSync7, readFileSync as readFileSync5 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6 } from "node:fs";
 
 // ../plugin/src/config/migrate-dreamer-v2.ts
 var OLD_VERIFY_TASK = "verify";
@@ -165782,7 +166097,7 @@ var AgentOverrideConfigSchema = exports_external.object({
 
 // ../plugin/src/config/schema/magic-context.ts
 var DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE = 65;
-var EXECUTE_THRESHOLD_CAP_MESSAGE = "execute_threshold is capped at 80% for cache safety: a single large agent step can overflow the context window before Magic Context can compact between turns, forcing OpenCode's native compaction (hard to recover from). 80% also leaves headroom below the 85%/95% emergency bands. Use a value between 20 and 80.";
+var EXECUTE_THRESHOLD_CAP_MESSAGE = "execute_threshold is capped at 90% for cache safety: output capacity is reserved from the usable context window, and the remaining 10% absorbs mid-turn growth before the absolute 95% emergency wall. Use a value between 20 and 90.";
 var DEFAULT_HISTORIAN_TIMEOUT_MS = 300000;
 var DEFAULT_HISTORY_BUDGET_PERCENTAGE = 0.15;
 var DEFAULT_LOCAL_EMBEDDING_MODEL = "Xenova/all-MiniLM-L6-v2";
@@ -165880,7 +166195,22 @@ var BaseEmbeddingConfigSchema = exports_external.object({
   input_type: exports_external.string().optional().describe("Default input_type for stored/indexed (passage) embeddings in the request body. Required by some openai-compatible providers (e.g. NVIDIA NIM). Omitted from the request when unset."),
   query_input_type: exports_external.string().optional().describe("Optional input_type for query (search) embeddings on asymmetric models (e.g. NVIDIA NIM 'query'). When unset, query embeddings use embedding.input_type. Passage/stored content always uses embedding.input_type."),
   truncate: exports_external.string().optional().describe("Optional truncate mode sent in the embedding request body (e.g. NVIDIA NIM accepts 'NONE' | 'START' | 'END'). Omitted from the request when unset."),
-  max_input_tokens: exports_external.number().int().positive().optional().describe("Optional maximum input tokens for chunk embeddings. Defaults conservatively to 512 when omitted.")
+  max_input_tokens: exports_external.number().int().positive().optional().describe("Optional maximum input tokens for chunk embeddings. Defaults conservatively to 512 when omitted."),
+  local_dtype: exports_external.enum([
+    "auto",
+    "fp32",
+    "fp16",
+    "q8",
+    "int8",
+    "uint8",
+    "q4",
+    "bnb4",
+    "q4f16",
+    "q2",
+    "q2f16",
+    "q1",
+    "q1f16"
+  ]).optional().describe("Local provider only: ONNX model dtype passed to the transformers.js feature-extraction pipeline. Accepts the @huggingface/transformers DataType strings (auto, fp32, fp16, q8, int8, uint8, q4, bnb4, q4f16, q2, q2f16, q1, q1f16). Omitted keeps today's behavior (fp32). A non-default value changes the produced vectors and folds into the embedding model identity, so switching dtype re-embeds rather than mixing vector spaces. Useful for selecting a quantized variant (e.g. q8) of a larger multilingual model to cut memory and CPU cost; see issue #259.")
 }).superRefine((data, ctx) => {
   const validationProvider = data.provider === "synapse" ? data.fallback_provider : data.provider;
   if (validationProvider === "openai-compatible" && !data.endpoint?.trim()) {
@@ -165922,7 +166252,8 @@ var EmbeddingConfigSchema = BaseEmbeddingConfigSchema.transform((data) => {
     return {
       provider: "local",
       model: data.model?.trim() || DEFAULT_LOCAL_EMBEDDING_MODEL,
-      ...data.max_input_tokens ? { max_input_tokens: data.max_input_tokens } : {}
+      ...data.max_input_tokens ? { max_input_tokens: data.max_input_tokens } : {},
+      ...data.local_dtype ? { local_dtype: data.local_dtype } : {}
     };
   }
   if (data.provider === "openai-compatible") {
@@ -165945,6 +166276,7 @@ var EmbeddingConfigSchema = BaseEmbeddingConfigSchema.transform((data) => {
 });
 var MagicContextConfigSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).describe("Enable magic context (default: true)"),
+  allow_home_project: exports_external.boolean().default(false).describe("Allow Magic Context sessions launched from the exact canonical home directory. The home session uses its deterministic dir: identity so pre-gate memories reconnect. USER-LEVEL ONLY: project config is ignored. The home identity is excluded from registry seed exports, never resolves descendants by containment, and cannot join a workspace."),
   experimental: exports_external.object({
     mural: exports_external.object({
       enabled: exports_external.boolean().default(false),
@@ -165956,15 +166288,19 @@ var MagicContextConfigSchema = exports_external.object({
   language: exports_external.string().trim().toLowerCase().refine((s) => isValidLanguageCode(s), 'language must be a 2-letter ISO 639-1 code (e.g. "tr", "es", "de")').optional().describe("Output language for Magic Context's generated content and guidance, as a " + '2-letter ISO 639-1 code (e.g. "tr", "es", "de", "ja", "pt"). When set, the ' + "historian, dreamer, sidekick, and the agent-guidance block instruct the model to " + "write its PROSE in this language while keeping all structural tokens (XML tags, " + "the five memory category names, code identifiers, file paths) in English. " + "USER-LEVEL ONLY (ignored in project config for security). Unset = today's " + "behavior (model mirrors the conversation; English scaffolding). Changing it " + "triggers one cache re-materialization; existing compartments/memories keep their " + "original language until naturally rewritten."),
   historian: HistorianConfigSchema.describe("Historian agent configuration (model, fallback_models, variant, temperature, maxTokens, permission, two_pass, etc.)"),
   dreamer: DreamerConfigSchema.optional().describe("Dreamer agent + scheduling configuration (model, fallback_models, disable, schedule, tasks, etc.)"),
-  cache_ttl: exports_external.union([exports_external.string(), exports_external.object({ default: exports_external.string() }).catchall(exports_external.string())]).default("5m").describe('Cache TTL: string (e.g. "5m") or per-model object ({ default: "5m", "model-id": "10m" })'),
+  cache_ttl: exports_external.union([exports_external.string(), exports_external.object({ default: exports_external.string() }).catchall(exports_external.string())]).default("5m").describe('Cache TTL: string (e.g. "5m", "1h", "30s") or per-model object ({ default: "5m", "model-id": "10m" }). Set to "never" for lanes kept warm by an external keepwarm proxy — disables the idle-TTL heuristic so MC never initiates a rebuild based on elapsed time.'),
+  output_reserve: exports_external.union([
+    exports_external.number().min(0),
+    exports_external.object({ default: exports_external.number().min(0) }).catchall(exports_external.number().min(0))
+  ]).optional().describe('User-only output-token reservation override. Number or per-model object ({ default: 16384, "provider/model": 8192 }); 0 disables reservation. When unset, Magic Context reserves the catalog output limit (capped at 25% of context) for shared-window providers and keeps proven separate-quota Google/Gemini windows unchanged.'),
   toast_duration_ms: exports_external.number().min(0).max(60000).default(5000).describe("TUI toast lifetime in milliseconds for Magic Context notifications. Set to 0 to disable Magic Context toasts entirely (min: 0, max: 60000, default: 5000)"),
   execute_threshold_percentage: exports_external.union([
-    exports_external.number().min(20).max(80, EXECUTE_THRESHOLD_CAP_MESSAGE),
-    exports_external.object({ default: exports_external.number().min(20).max(80, EXECUTE_THRESHOLD_CAP_MESSAGE) }).catchall(exports_external.number().min(20).max(80, EXECUTE_THRESHOLD_CAP_MESSAGE))
-  ]).default(DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE).describe('Context percentage that forces queued operations to execute. Number or per-model object ({ default: 65, "provider/model": 45 }). Values above 80 are rejected because the runtime caps at 80% for cache safety (MAX_EXECUTE_THRESHOLD). Default: DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE'),
+    exports_external.number().min(20).max(90, EXECUTE_THRESHOLD_CAP_MESSAGE),
+    exports_external.object({ default: exports_external.number().min(20).max(90, EXECUTE_THRESHOLD_CAP_MESSAGE) }).catchall(exports_external.number().min(20).max(90, EXECUTE_THRESHOLD_CAP_MESSAGE))
+  ]).default(DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE).describe('Context percentage that forces queued operations to execute. Number or per-model object ({ default: 65, "provider/model": 45 }). Values above 90 are rejected because the runtime caps at 90% of the output-reserved safe window (MAX_EXECUTE_THRESHOLD). Default: DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE'),
   execute_threshold_tokens: exports_external.object({
     default: exports_external.number().min(5000).max(2000000).optional()
-  }).catchall(exports_external.number().min(5000).max(2000000)).optional().describe("Absolute token thresholds per model. When matched, overrides execute_threshold_percentage for that model. Accepts `default` for all models or per-model keys. Values above 80% × context_limit are clamped with a warning log. Min 5_000, max 2_000_000."),
+  }).catchall(exports_external.number().min(5000).max(2000000)).optional().describe("Absolute token thresholds per model. When matched, overrides execute_threshold_percentage for that model. Accepts `default` for all models or per-model keys. Values above 90% × context_limit are clamped with a warning log. Min 5_000, max 2_000_000."),
   protected_tags: exports_external.number().min(1).max(100).optional().describe("Number of recent tags to protect from dropping (min: 1, max: 100, default: 20)"),
   clear_reasoning_age: exports_external.number().min(10).default(50).describe("Clear reasoning/thinking blocks older than N tags (default: 50)"),
   history_budget_percentage: exports_external.number().min(0.05).max(0.5).default(DEFAULT_HISTORY_BUDGET_PERCENTAGE).describe("Fraction of usable context (context_limit × execute_threshold) reserved for the session history block (default: 0.15)"),
@@ -165984,6 +166320,9 @@ var MagicContextConfigSchema = exports_external.object({
     cache_size_mb: exports_external.number().min(2).max(2048).default(64).describe("Page-cache size in MiB per connection (PRAGMA cache_size). Larger keeps more hot pages resident, cutting re-reads on repeated full-table scans. (min 2, max 2048, default 64)"),
     mmap_size_mb: exports_external.number().min(0).max(8192).default(0).describe("Memory-mapped I/O size in MiB (PRAGMA mmap_size). 0 disables mmap (SQLite default). Raising it can cut read overhead on large DBs at the cost of address space. (min 0, max 8192, default 0)")
   }).default({ cache_size_mb: 64, mmap_size_mb: 0 }).describe("SQLite connection tuning for Magic Context's own context.db. These are per-connection PRAGMAs applied at open; they do not change the schema or what is stored."),
+  storage: exports_external.object({
+    enforce_private_permissions: exports_external.boolean().default(true).describe("When true (default), Magic Context creates and re-tightens its storage directories to owner-only 0700 and storage files to owner-only 0600. Set false only for a deliberate trusted-group deployment whose operator manages directory, database, WAL/SHM, cache, and RPC file permissions externally; Magic Context then never chmods or supplies restrictive creation modes. USER-LEVEL ONLY — ignored in project config for security. On Windows, POSIX chmod modes are already meaningless, so this setting is a no-op.")
+  }).default({ enforce_private_permissions: true }).describe("Storage permission policy. The default keeps session content and memories owner-private. Disabling enforcement is for trusted shared-group storage managed externally; every group member able to read the storage can read all stored session content and memories."),
   embedding: EmbeddingConfigSchema.default({
     provider: "local",
     model: DEFAULT_LOCAL_EMBEDDING_MODEL
@@ -165997,6 +166336,9 @@ var MagicContextConfigSchema = exports_external.object({
   temporal_awareness: exports_external.boolean().default(true).describe('Inject wall-clock gap markers (<!-- +Xm -->) between user messages where > 5 min elapsed since the previous message, and add compact date ranges to compartment headings. Gives the agent a sense of session pacing and "how long ago" across multi-day sessions. Graduated from experimental.temporal_awareness; default: true (set false to opt out).'),
   keep_subagents: exports_external.boolean().default(false).describe("Debug: keep the child sessions Magic Context spawns for its own subagents (historian, dreamer, sidekick, memory-migration) instead of deleting them on success. Useful for short-term inspection/data collection — their full transcript (prompt, tool calls, token usage, output) stays in the host session store. Kept sessions accumulate until manually cleared; leave false for normal use. Requires a restart to take effect."),
   fail_closed_blocking: exports_external.boolean().default(true).describe("When Magic Context cannot operate (schema fence mismatch, storage open/migration failure), block the primary-session prompt with a loud recovery error instead of silently degrading to native compaction. Default true. Set false only to restore the old degrade-silently behavior (not recommended). USER-LEVEL ONLY — ignored in project config for security. Requires a restart."),
+  compaction: exports_external.object({
+    enabled: exports_external.boolean().default(true).describe("When false, Magic Context stops managing the context window and keeps its knowledge layer: memory and docs/user-profile/key-files injection through additive m[0]/m[1], raw-message FTS indexing, dreamer, notes, ctx_search, ctx_expand, ctx_memory, and /ctx-embed remain available. MC's historian/compartment preparation, tagging, markers, pruning, folding, drops, strips, splicing, synthetic context-management todos, temporal markers, nudges, and fail-closed blocking stop; ctx_expand remains a knowledge-surface tool. fail_closed_blocking is inert: a transform failure passes the input messages through without blocking or cancelling. This setting does not enable native compaction: OpenCode's compaction.auto / compaction.prune or Pi's equivalent owns the window, or nothing does. MC's compaction.enabled in magic-context.jsonc is distinct from OpenCode's compaction.auto / compaction.prune in opencode.jsonc; they are different files and different owners. On the first turn after disabling, a long session may trigger one native compaction cycle; MC removes only its own marker boundary, leaves native boundaries and stored compartments intact, and does no pre-trimming mitigation. Marker cleanup is lazy per session, so an unresumed session is cleaned when it is next resumed. If compaction is enabled again, run /ctx-wrapup when the historian is runnable to catch up. OpenCode peer verification against v1.18.4 confirms native compaction covers child sessions: subagents receive additive memory/docs injection and no MC reclaim in this mode, so keep subagent tasks small or leave compaction.enabled on for long subagent runs. If transform_mode is rust, compaction-off resolves to the TypeScript transform and emits one frozen boot warning because there is no Rust reduced-mode contract. This is boot-resolved and requires a process restart; project-tier compaction.enabled is stripped so a cloned repository cannot disable the user's setting. The sidebar reports raw usage as Context: <pct>% · native compaction or Context: <pct>% · no active compaction and does not show an MC execute-threshold fill. /ctx-wrapup, /ctx-recomp, /ctx-flush, and /ctx-session-upgrade refuse without context-management side effects; /ctx-embed remains functional. Raw content hidden by a native boundary before Magic Context's first pass is not retroactively indexed.")
+  }).default({ enabled: true }).describe("Compaction-off mode gate. Default true (MC manages the context window as today). Set compaction.enabled=false to keep the knowledge layer while letting native compaction (or nothing) own the window. Boot-resolved; requires a restart to change."),
   todowrite: exports_external.object({
     enabled: exports_external.boolean().default(true).describe("Pi only: register Magic Context's todowrite task-list tool. Disable if you use your own todo extension. OpenCode ships its own built-in todowrite; this setting has no effect there."),
     overlay: exports_external.boolean().default(true).describe("Pi only: show the persistent todo overlay above the editor while tasks are active.")
@@ -166150,6 +166492,19 @@ function stripUnsafeProjectConfigFields(projectRaw) {
     delete projectRaw.fail_closed_blocking;
     warnings.push("Ignoring fail_closed_blocking from project config (security: only user-level config may disable or force the loud inoperability gate).");
   }
+  if ("allow_home_project" in projectRaw) {
+    delete projectRaw.allow_home_project;
+    warnings.push("Ignoring allow_home_project from project config (security: only user-level config may opt the user's home directory into Magic Context).");
+  }
+  const compaction = projectRaw.compaction;
+  if (isPlainObject3(compaction) && "enabled" in compaction) {
+    delete compaction.enabled;
+    warnings.push("Ignoring compaction.enabled from project config (security: only user-level config may disable Magic Context's context-window management; a cloned repo cannot change how the user's window is owned).");
+  }
+  if ("output_reserve" in projectRaw) {
+    delete projectRaw.output_reserve;
+    warnings.push("Ignoring output_reserve from project config (security: output-token reservation only honors user-level config).");
+  }
   if ("language" in projectRaw) {
     delete projectRaw.language;
     warnings.push("Ignoring language from project config (security: output language is a user-level setting).");
@@ -166158,6 +166513,11 @@ function stripUnsafeProjectConfigFields(projectRaw) {
     delete projectRaw.sqlite;
     warnings.push("Ignoring sqlite.* from project config (security: SQLite cache/mmap PRAGMAs apply to the " + "process-global shared database handle; only user-level config may set them).");
   }
+  const storage = projectRaw.storage;
+  if (isPlainObject3(storage) && "enforce_private_permissions" in storage) {
+    delete storage.enforce_private_permissions;
+    warnings.push("Ignoring storage.enforce_private_permissions from project config (security: only user-level config may opt into externally managed shared storage permissions).");
+  }
   const pi = projectRaw.pi;
   if (isPlainObject3(pi) && "subagent_extensions" in pi) {
     delete pi.subagent_extensions;
@@ -166496,6 +166856,188 @@ function substituteConfigVariables(input) {
   return { text: output, warnings };
 }
 
+// ../plugin/src/shared/models-dev-cache.ts
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync5, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join5 } from "node:path";
+
+// ../plugin/src/shared/harness-provider-map.ts
+var CANONICAL_TO_PI_PROVIDER = {
+  openai: "openai-codex",
+  google: "google-antigravity"
+};
+var PI_TO_CANONICAL_PROVIDER = {
+  "openai-codex": "openai",
+  "google-antigravity": "google"
+};
+function remapProviderPrefix(ref, map2) {
+  if (typeof ref !== "string")
+    return ref;
+  const slash = ref.indexOf("/");
+  if (slash <= 0)
+    return ref;
+  const provider = ref.slice(0, slash);
+  const mapped = map2[provider];
+  return mapped ? `${mapped}${ref.slice(slash)}` : ref;
+}
+function piModelRefToCanonical(ref) {
+  return remapProviderPrefix(ref, PI_TO_CANONICAL_PROVIDER);
+}
+function resolveModelRefForPi(ref) {
+  return remapProviderPrefix(piModelRefToCanonical(ref), CANONICAL_TO_PI_PROVIDER);
+}
+
+// ../plugin/src/shared/models-dev-cache.ts
+var MIN_SANE_LIMIT = 20000;
+var MAX_SANE_LIMIT = 3000000;
+function isSaneLimit(limit) {
+  return typeof limit === "number" && limit >= MIN_SANE_LIMIT && limit <= MAX_SANE_LIMIT;
+}
+var SEPARATE_OUTPUT_QUOTA_PROVIDERS = new Set(["google", "google-antigravity"]);
+var MIN_PLAUSIBLE_CONTEXT_LIMIT = 1024;
+var OUTPUT_RESERVE_CAP_RATIO = 0.25;
+var outputReserveConfig;
+var reserveClampLogSeen = new Set;
+var apiCache = null;
+var persistSeedLoaded = false;
+function persistFilePath() {
+  return join5(getMagicContextStorageDir(), `model-context-limits-${getHarness()}.json`);
+}
+function loadPersistedApiCacheOnce() {
+  if (persistSeedLoaded || apiCache !== null)
+    return;
+  persistSeedLoaded = true;
+  try {
+    const raw = readFileSync5(persistFilePath(), "utf-8");
+    const obj = JSON.parse(raw);
+    const map2 = new Map;
+    for (const [key, persisted] of Object.entries(obj)) {
+      const limit = typeof persisted === "number" ? persisted : persisted.limit;
+      const contextLimit = typeof persisted === "number" ? undefined : persisted.contextLimit;
+      const inputLimit = typeof persisted === "number" ? undefined : persisted.inputLimit;
+      const outputLimit = typeof persisted === "number" ? undefined : persisted.outputLimit;
+      const vision = typeof persisted === "number" ? false : persisted.vision === true;
+      if (isSaneLimit(contextLimit) || isSaneLimit(limit)) {
+        map2.set(key, {
+          limit: isSaneLimit(limit) ? limit : undefined,
+          contextLimit: isSaneLimit(contextLimit) ? contextLimit : undefined,
+          inputLimit: isSaneLimit(inputLimit) ? inputLimit : undefined,
+          outputLimit: isFinitePositive(outputLimit) ? outputLimit : undefined,
+          vision
+        });
+      }
+    }
+    if (map2.size > 0) {
+      apiCache = map2;
+      sessionLog("global", `models-dev-cache: seeded ${map2.size} entries from persisted cache (cold start)`);
+    }
+  } catch {}
+}
+function isFinitePositive(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0;
+}
+function modelKeyLookupOrder(providerID, modelID) {
+  const full = `${providerID}/${modelID}`;
+  const canonicalFull = piModelRefToCanonical(full);
+  const candidates = [full, canonicalFull, modelID];
+  const colon = modelID.lastIndexOf(":");
+  if (colon > 0) {
+    const bareModel = modelID.slice(0, colon);
+    const providerBare = `${providerID}/${bareModel}`;
+    candidates.push(providerBare, piModelRefToCanonical(providerBare), bareModel);
+  }
+  return [...new Set(candidates)];
+}
+function configuredOutputReserve(config2, providerID, modelID) {
+  if (typeof config2 === "number")
+    return Number.isFinite(config2) && config2 >= 0 ? config2 : undefined;
+  if (!config2)
+    return;
+  for (const candidate of modelKeyLookupOrder(providerID, modelID)) {
+    const value = config2[candidate];
+    if (typeof value === "number" && Number.isFinite(value) && value >= 0)
+      return value;
+  }
+  return Number.isFinite(config2.default) && config2.default >= 0 ? config2.default : undefined;
+}
+function logReserveClampOnce(key, message) {
+  if (reserveClampLogSeen.has(key))
+    return;
+  reserveClampLogSeen.add(key);
+  sessionLog("global", `models-dev-cache: ${message}`);
+}
+function setOutputReserveConfig(config2) {
+  outputReserveConfig = config2;
+}
+function resolveLimit(limit, providerID, modelID, reserveConfig = outputReserveConfig) {
+  if (!limit)
+    return;
+  const context = isFinitePositive(limit.context) ? limit.context : undefined;
+  const input = isFinitePositive(limit.input) ? limit.input : undefined;
+  if (input !== undefined && (context === undefined || input < context))
+    return input;
+  if (context === undefined)
+    return;
+  const configuredReserve = configuredOutputReserve(reserveConfig, providerID, modelID);
+  let reserve;
+  if (configuredReserve !== undefined) {
+    reserve = configuredReserve;
+  } else if (SEPARATE_OUTPUT_QUOTA_PROVIDERS.has(providerID)) {
+    reserve = 0;
+  } else {
+    const output = isFinitePositive(limit.output) ? limit.output : 0;
+    const cap = context * OUTPUT_RESERVE_CAP_RATIO;
+    reserve = Math.min(output, cap);
+    if (output > cap) {
+      logReserveClampOnce(`cap|${providerID}/${modelID}|${context}|${output}`, `output reserve capped at 25% for ${providerID}/${modelID}: ${output} → ${cap}`);
+    }
+  }
+  const floor = Math.max(MIN_PLAUSIBLE_CONTEXT_LIMIT, context * 0.5);
+  const maxReserve = Math.max(0, context - floor);
+  if (reserve > maxReserve) {
+    logReserveClampOnce(`floor|${providerID}/${modelID}|${context}|${reserve}`, `output reserve clamped for ${providerID}/${modelID}: ${reserve} → ${maxReserve} (usable floor ${floor})`);
+    reserve = maxReserve;
+  }
+  return Math.floor(context - reserve);
+}
+function getSdkContextLimit(providerID, modelID, detectedContextLimit, options) {
+  loadPersistedApiCacheOnce();
+  const metadata = lookupMetadataWithTagFallback(apiCache, providerID, modelID);
+  if (!metadata)
+    return;
+  const rawContext = metadata.contextLimit ?? metadata.limit;
+  const promptOnlyDetected = options?.detectedLimitProvenance === "prompt_only" && isFinitePositive(detectedContextLimit) ? detectedContextLimit : undefined;
+  const context = promptOnlyDetected === undefined && isFinitePositive(detectedContextLimit) && isFinitePositive(rawContext) ? Math.min(rawContext, detectedContextLimit) : promptOnlyDetected === undefined && isFinitePositive(detectedContextLimit) ? detectedContextLimit : rawContext;
+  const inputCandidates = [metadata.inputLimit, promptOnlyDetected].filter(isFinitePositive);
+  const input = inputCandidates.length > 0 ? Math.min(...inputCandidates) : undefined;
+  return resolveLimit({
+    context,
+    input,
+    output: metadata.outputLimit
+  }, providerID, modelID, options?.reservation === "none" ? 0 : undefined);
+}
+function modelSupportsVision(providerID, modelID) {
+  loadPersistedApiCacheOnce();
+  if (!apiCache)
+    return false;
+  const exact = apiCache.get(`${providerID}/${modelID}`);
+  if (exact?.vision === true)
+    return true;
+  const colon = modelID.lastIndexOf(":");
+  return colon > 0 ? apiCache.get(`${providerID}/${modelID.slice(0, colon)}`)?.vision === true : false;
+}
+function lookupMetadataWithTagFallback(cache, providerID, modelID) {
+  if (!cache)
+    return;
+  const exact = cache.get(`${providerID}/${modelID}`);
+  if (exact)
+    return exact;
+  const colonIdx = modelID.lastIndexOf(":");
+  if (colonIdx > 0) {
+    return cache.get(`${providerID}/${modelID.slice(0, colonIdx)}`);
+  }
+  return;
+}
+
 // src/config/index.ts
 var import_comment_json = __toESM(require_src2(), 1);
 function getProjectConfigPaths(cwd) {
@@ -166514,7 +167056,7 @@ function resolvePiLegacyFallback(sources) {
 }
 function loadConfigFile(path3, scope) {
   try {
-    const rawText = readFileSync5(path3, "utf-8");
+    const rawText = readFileSync6(path3, "utf-8");
     const substituted = substituteConfigVariables({
       text: rawText,
       configPath: path3,
@@ -166699,6 +167241,7 @@ function loadPiConfig(opts = {}) {
     }
   }
   const parsed = parsePiConfig(rawConfig);
+  setOutputReserveConfig(parsed.config.output_reserve);
   warnings.push(...parsed.warnings.map((warning) => `[merged config] ${warning}`));
   return {
     config: parsed.config,
@@ -166818,6 +167361,7 @@ function loadPiConfigDetailed(opts = {}) {
   }
   const recoveredTopLevelKeys = [];
   const parsed = parsePiConfig(rawConfig, recoveredTopLevelKeys);
+  setOutputReserveConfig(parsed.config.output_reserve);
   warnings.push(...parsed.warnings.map((warning) => `[merged config] ${warning}`));
   const substitutionFailures = loadedFiles.flatMap(bindSubstitutionFailures);
   const userLoaded = loadedFiles.find((loaded) => loaded.scope === "user");
@@ -166940,9 +167484,6 @@ var existingHashStatements = new WeakMap;
 var existingHashByProjectStatements = new WeakMap;
 var deleteByCompartmentStatements = new WeakMap;
 var insertEmbeddingStatements = new WeakMap;
-var distinctModelStatements = new WeakMap;
-var clearProjectStatements = new WeakMap;
-var clearProjectModelStatements = new WeakMap;
 var searchRowsStatements = new WeakMap;
 var searchRowsByModelStatements = new WeakMap;
 var searchPoolProbeStatements = new WeakMap;
@@ -170209,6 +170750,7 @@ function getEmbeddingProviderIdentity(config2) {
     throw new Error("Unknown embedding provider");
   }
   const truncate = config2.provider === "openai-compatible" ? config2.truncate?.trim() : undefined;
+  const localDtype = config2.provider === "local" && config2.local_dtype && config2.local_dtype !== "fp32" ? config2.local_dtype : undefined;
   const identityInput = config2.provider === "openai-compatible" ? {
     provider: "openai-compatible",
     model: config2.model.trim(),
@@ -170220,7 +170762,8 @@ function getEmbeddingProviderIdentity(config2) {
     provider: "local",
     model: config2.model?.trim() || DEFAULT_LOCAL_EMBEDDING_MODEL,
     endpoint: "",
-    apiKeyPresent: false
+    apiKeyPresent: false,
+    ...localDtype ? { localDtype } : {}
   };
   return `embedding-provider:${computeNormalizedHash(JSON.stringify(identityInput))}`;
 }
@@ -170308,6 +170851,7 @@ async function injectWasmOrtForElectron() {
     return false;
   }
 }
+var DEFAULT_LOCAL_DTYPE = "fp32";
 async function withQuietConsole(fn) {
   const origWarn = console.warn;
   const origError = console.error;
@@ -170384,16 +170928,22 @@ class LocalEmbeddingProvider {
   modelId;
   maxInputTokens;
   model;
+  dtype;
   pipeline = null;
   initPromise = null;
   inFlight = 0;
   disposing = false;
   disposePromise = null;
   inFlightWaiters = [];
-  constructor(model = DEFAULT_LOCAL_EMBEDDING_MODEL, maxInputTokens = 512) {
+  constructor(model = DEFAULT_LOCAL_EMBEDDING_MODEL, maxInputTokens = 512, dtype = DEFAULT_LOCAL_DTYPE) {
     this.model = model;
     this.maxInputTokens = maxInputTokens;
-    this.modelId = getEmbeddingProviderIdentity({ provider: "local", model });
+    this.dtype = dtype || DEFAULT_LOCAL_DTYPE;
+    this.modelId = getEmbeddingProviderIdentity({
+      provider: "local",
+      model,
+      ...dtype && dtype !== DEFAULT_LOCAL_DTYPE ? { local_dtype: dtype } : {}
+    });
   }
   async initialize() {
     if (this.disposing) {
@@ -170424,11 +170974,15 @@ class LocalEmbeddingProvider {
         }
         const modelCacheDir = join6(getMagicContextStorageDir(), "models");
         try {
-          mkdirSync4(modelCacheDir, { recursive: true, mode: 448 });
-          if (process.platform !== "win32") {
-            try {
-              chmodSync2(modelCacheDir, 448);
-            } catch {}
+          if (shouldEnforcePrivateStoragePermissions()) {
+            mkdirSync4(modelCacheDir, { recursive: true, mode: 448 });
+            if (process.platform !== "win32") {
+              try {
+                chmodSync2(modelCacheDir, 448);
+              } catch {}
+            }
+          } else {
+            mkdirSync4(modelCacheDir, { recursive: true });
           }
           env.cacheDir = modelCacheDir;
         } catch {
@@ -170444,7 +170998,7 @@ class LocalEmbeddingProvider {
           for (let attempt = 1;attempt <= MAX_ATTEMPTS; attempt++) {
             try {
               const pipeline = await withQuietConsole(() => createPipeline("feature-extraction", this.model, {
-                dtype: "fp32",
+                dtype: this.dtype,
                 ...injectedWasmOrt ? { device: "auto" } : {}
               }));
               if (this.disposing) {
@@ -170916,9 +171470,6 @@ var saveStatements = new WeakMap;
 var loadProjectStatements = new WeakMap;
 var loadUnembeddedStatements = new WeakMap;
 var countEmbeddedStatements = new WeakMap;
-var clearProjectStatements2 = new WeakMap;
-var clearProjectModelStatements2 = new WeakMap;
-var distinctModelIdStatements = new WeakMap;
 function getSaveStatement(db) {
   let stmt = saveStatements.get(db);
   if (!stmt) {
@@ -170989,7 +171540,6 @@ function countEmbeddedCommits(db, projectPath, modelId) {
 var insertStatements = new WeakMap;
 var existingShasStatements = new WeakMap;
 var projectCountStatements = new WeakMap;
-var evictStatements = new WeakMap;
 var evictOverflowStatements = new WeakMap;
 var latestCommitTimeStatements = new WeakMap;
 function getInsertStatement(db) {
@@ -171238,7 +171788,6 @@ var deleteEmbeddingStatements = new WeakMap;
 var getStoredModelIdStatements = new WeakMap;
 var clearAllEmbeddingsStatements = new WeakMap;
 var clearModelEmbeddingsStatements = new WeakMap;
-var getDistinctStoredModelIdsStatements = new WeakMap;
 function isEmbeddingBlob(value) {
   return value instanceof Uint8Array || value instanceof ArrayBuffer;
 }
@@ -171516,7 +172065,8 @@ function resolveEmbeddingConfig(config2) {
       model: config2?.model?.trim() || DEFAULT_LOCAL_EMBEDDING_MODEL,
       ...config2?.max_input_tokens ? {
         max_input_tokens: normalizeCompartmentChunkMaxInputTokens(config2.max_input_tokens)
-      } : {}
+      } : {},
+      ...config2?.local_dtype ? { local_dtype: config2.local_dtype } : {}
     };
   }
   if (config2.provider === "openai-compatible") {
@@ -171575,7 +172125,7 @@ function createProvider(config2, context) {
     });
   }
   if (config2.provider === "local") {
-    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens);
+    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens, config2.local_dtype);
   }
   if (config2.provider === "synapse") {
     const synapse = config2;
@@ -172718,7 +173268,7 @@ function createProvider2(config2) {
     });
   }
   if (config2.provider === "local") {
-    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens);
+    return new LocalEmbeddingProvider(config2.model, config2.max_input_tokens, config2.local_dtype);
   }
   if (config2.provider === "synapse") {
     const synapse = config2;
@@ -172895,7 +173445,8 @@ function configFingerprint(paths) {
   }).join("|");
 }
 async function ensureProjectRegisteredFromPiDirectory(directory, db) {
-  const projectIdentity = resolveProjectIdentityForSession(directory);
+  const detailed = loadPiConfigDetailed({ cwd: directory });
+  const projectIdentity = resolveProjectIdentityForSession(directory, detailed.config.allow_home_project);
   if (!projectIdentity)
     return;
   let registrationFingerprints = registrationFingerprintsByDatabase.get(db);
@@ -172906,7 +173457,6 @@ async function ensureProjectRegisteredFromPiDirectory(directory, db) {
   const cached2 = registrationFingerprints.get(projectIdentity);
   if (cached2 && configFingerprint(cached2.paths) === cached2.fingerprint)
     return;
-  const detailed = loadPiConfigDetailed({ cwd: directory });
   if (isConfigLoadUntrusted(detailed)) {
     handleUntrustedLoad(db, projectIdentity, directory, detailed);
     return;
@@ -179338,6 +179888,7 @@ function queueEmbedding(args) {
 }
 function createCtxMemoryTool(deps) {
   const dreamerAllowed = deps.allowDreamerActions === true;
+  const resolveProject = deps.resolveProjectIdentity ?? resolveProjectIdentityForSession;
   const description = dreamerAllowed ? `${CTX_MEMORY_DESCRIPTION}
 - list: enumerate stored memories (maintenance sessions).` : CTX_MEMORY_DESCRIPTION;
   return {
@@ -179360,7 +179911,7 @@ function createCtxMemoryTool(deps) {
       if (!dreamerAllowed && DREAMER_ONLY_ACTIONS.has(params.action)) {
         return err2(`Error: Action '${params.action}' is not allowed in this context.`);
       }
-      const projectIdentity = resolveProjectIdentityForSession(ctx.cwd);
+      const projectIdentity = resolveProject(ctx.cwd);
       if (!projectIdentity) {
         return err2("Error: Could not resolve project identity for memory action.");
       }
@@ -179730,6 +180281,7 @@ function paginateNewestFirst(notes, limit, offset) {
   return { page, total, footer };
 }
 function createCtxNoteTool(deps) {
+  const resolveProject = deps.resolveProjectIdentity ?? resolveProjectIdentityForSession;
   return {
     name: "ctx_note",
     label: "Magic Context: Notes",
@@ -179761,7 +180313,7 @@ function createCtxNoteTool(deps) {
           if (dreamerEnabled !== true) {
             return err3("Error: Smart notes require dreamer to be enabled. Enable dreamer in magic-context.jsonc to use surface_condition.");
           }
-          const projectIdentity = resolveProjectIdentityForSession(ctx.cwd);
+          const projectIdentity = resolveProject(ctx.cwd);
           if (!projectIdentity) {
             return err3("Error: Could not resolve project identity for smart note.");
           }
@@ -179787,7 +180339,7 @@ function createCtxNoteTool(deps) {
         if (typeof params.note_id !== "number") {
           return err3("Error: 'note_id' is required when action is 'dismiss'.");
         }
-        const projectIdentity = resolveProjectIdentityForSession(ctx.cwd);
+        const projectIdentity = resolveProject(ctx.cwd);
         if (!projectIdentity) {
           return err3("Error: Could not resolve project identity for note dismiss.");
         }
@@ -179809,7 +180361,7 @@ function createCtxNoteTool(deps) {
         if (!updates.content && !updates.surfaceCondition) {
           return err3("Error: Provide 'content' and/or 'surface_condition' to update.");
         }
-        const projectIdentity = resolveProjectIdentityForSession(ctx.cwd);
+        const projectIdentity = resolveProject(ctx.cwd);
         if (!projectIdentity) {
           return err3("Error: Could not resolve project identity for note update.");
         }
@@ -179835,6 +180387,7 @@ function createCtxNoteTool(deps) {
         db: deps.db,
         sessionId,
         cwd: ctx.cwd,
+        resolveProjectIdentity: resolveProject,
         filter: params.filter,
         limit,
         offset
@@ -179858,7 +180411,7 @@ No session notes or smart notes.`);
   };
 }
 function readNotes(args) {
-  const projectIdentity = resolveProjectIdentityForSession(args.cwd);
+  const projectIdentity = args.resolveProjectIdentity(args.cwd);
   if (args.filter === undefined) {
     const sessionNotes2 = getNotes(args.db, {
       sessionId: args.sessionId,
@@ -181591,32 +182144,6 @@ async function unifiedSearch(db, sessionId, projectPath, query, options = {}) {
 // ../plugin/src/features/magic-context/mural/render-trigger.ts
 import { createHash as createHash15 } from "node:crypto";
 
-// ../plugin/src/shared/harness-provider-map.ts
-var CANONICAL_TO_PI_PROVIDER = {
-  openai: "openai-codex",
-  google: "google-antigravity"
-};
-var PI_TO_CANONICAL_PROVIDER = {
-  "openai-codex": "openai",
-  "google-antigravity": "google"
-};
-function remapProviderPrefix(ref3, map2) {
-  if (typeof ref3 !== "string")
-    return ref3;
-  const slash = ref3.indexOf("/");
-  if (slash <= 0)
-    return ref3;
-  const provider2 = ref3.slice(0, slash);
-  const mapped3 = map2[provider2];
-  return mapped3 ? `${mapped3}${ref3.slice(slash)}` : ref3;
-}
-function piModelRefToCanonical(ref3) {
-  return remapProviderPrefix(ref3, PI_TO_CANONICAL_PROVIDER);
-}
-function resolveModelRefForPi(ref3) {
-  return remapProviderPrefix(piModelRefToCanonical(ref3), CANONICAL_TO_PI_PROVIDER);
-}
-
 // ../plugin/src/features/magic-context/mural/mural-selection.ts
 var DEFAULT_MURAL_MEMORY_BUDGET = 8000;
 function muralOverflowMemories(memories, budgetTokens = DEFAULT_MURAL_MEMORY_BUDGET) {
@@ -181818,6 +182345,8 @@ function naturalLineLengths(entries, roomWidth) {
   let currentCategory = null;
   for (let index = 0;index < entries.length; index++) {
     const entry = entries[index];
+    if (!entry)
+      continue;
     if (entry.category !== currentCategory) {
       currentCategory = entry.category;
       lengths.push(codepoints(` <${entry.category}> `));
@@ -181850,6 +182379,8 @@ function planLines(entries, roomWidth) {
   let currentCategory = null;
   for (let index = 0;index < entries.length; index++) {
     const entry = entries[index];
+    if (!entry)
+      continue;
     if (entry.category !== currentCategory) {
       currentCategory = entry.category;
       lines.push({
@@ -181913,8 +182444,11 @@ function renderLayout(entries, plan, roomWidth, columnCount) {
   const usage = {};
   let filledLineCount = 0;
   for (const [column, columnPlan] of splitPlan(plan, columnCount).entries()) {
+    const columnGrid = grid[column];
+    if (!columnGrid)
+      continue;
     for (const [row, line] of columnPlan.entries()) {
-      grid[column][row] = line.text;
+      columnGrid[row] = line.text;
       filledLineCount += 1;
       usage[line.category] = (usage[line.category] ?? 0) + 1;
       const placementLine = row + 1;
@@ -182025,6 +182559,7 @@ function glyph(character) {
 }
 function drawGlyph(pixels, width, height, x, y, character, color) {
   const glyphData = glyph(character);
+  const [red, green, blue] = color;
   for (let row = 0;row < MURAL_CELL_HEIGHT; row++) {
     const pattern2 = glyphData.rows[row] ?? 0;
     for (let column = 0;column < glyphData.width; column++) {
@@ -182035,9 +182570,9 @@ function drawGlyph(pixels, width, height, x, y, character, color) {
       if (px < 0 || py < 0 || px >= width || py >= height)
         continue;
       const offset = (py * width + px) * 3;
-      pixels[offset] = color[0];
-      pixels[offset + 1] = color[1];
-      pixels[offset + 2] = color[2];
+      pixels[offset] = red;
+      pixels[offset + 1] = green;
+      pixels[offset + 2] = blue;
     }
   }
 }
@@ -182049,6 +182584,7 @@ function drawText(pixels, width, height, x, y, text, color) {
   }
 }
 function fillRect(pixels, canvasWidth, canvasHeight, x, y, width, height, color) {
+  const [red, green, blue] = color;
   const left = Math.max(0, x);
   const top = Math.max(0, y);
   const right = Math.min(canvasWidth, x + width);
@@ -182056,9 +182592,9 @@ function fillRect(pixels, canvasWidth, canvasHeight, x, y, width, height, color)
   for (let py = top;py < bottom; py++) {
     for (let px = left;px < right; px++) {
       const offset = (py * canvasWidth + px) * 3;
-      pixels[offset] = color[0];
-      pixels[offset + 1] = color[1];
-      pixels[offset + 2] = color[2];
+      pixels[offset] = red;
+      pixels[offset + 1] = green;
+      pixels[offset + 2] = blue;
     }
   }
 }
@@ -182085,6 +182621,9 @@ function renderMural(entries) {
   });
   const fittingCandidates = candidates2.filter((candidate) => candidate.layout.droppedIds.length === 0);
   const candidatesToCompare = fittingCandidates.length > 0 ? fittingCandidates : candidates2;
+  const firstCandidate = candidatesToCompare[0];
+  if (!firstCandidate)
+    throw new Error("mural layout candidate list is empty");
   const selected = candidatesToCompare.reduce((best, candidate) => {
     if (!best)
       return candidate;
@@ -182095,7 +182634,7 @@ function renderMural(entries) {
       return candidate.tileArea < best.tileArea ? candidate : best;
     }
     return candidate.requestedColumnCount < best.requestedColumnCount ? candidate : best;
-  }, candidatesToCompare[0]);
+  }, firstCandidate);
   const { layout, width, height } = selected;
   const pixels = new Uint8Array(width * height * 3).fill(255);
   const contentWidth = layout.columnCount === 0 ? 0 : layout.columnCount * roomWidth * MURAL_CELL_WIDTH + MURAL_COLUMN_GAP * (layout.columnCount - 1) * MURAL_CELL_WIDTH;
@@ -183379,6 +183918,7 @@ function formatSearchResults(query, results, currentSessionId) {
 ${body}`;
 }
 function createCtxSearchTool(deps) {
+  const resolveProject = deps.resolveProjectIdentity ?? resolveProjectIdentityForSession;
   return {
     name: "ctx_search",
     label: "Magic Context: Search",
@@ -183404,7 +183944,7 @@ function createCtxSearchTool(deps) {
         };
       }
       const sessionId = ctx.sessionManager.getSessionId();
-      const projectIdentity = resolveProjectIdentityForSession(ctx.cwd);
+      const projectIdentity = resolveProject(ctx.cwd);
       if (!projectIdentity) {
         return {
           content: [
@@ -183529,12 +184069,14 @@ function createTodowriteTool() {
 
 // src/tools/index.ts
 function registerMagicContextTools(pi, opts) {
+  const resolveProjectIdentity2 = opts.resolveProjectIdentity ? (directory) => opts.resolveProjectIdentity?.({ cwd: directory }) : undefined;
   pi.registerTool(createCtxSearchTool({
     db: opts.db,
     ensureProjectRegistered: opts.ensureProjectRegistered,
     memoryEnabled: opts.memoryEnabled,
     embeddingEnabled: opts.embeddingEnabled,
-    gitCommitsEnabled: opts.gitCommitsEnabled
+    gitCommitsEnabled: opts.gitCommitsEnabled,
+    resolveProjectIdentity: resolveProjectIdentity2
   }));
   if (opts.memoryToolEnabled !== false) {
     pi.registerTool(createCtxMemoryTool({
@@ -183542,14 +184084,16 @@ function registerMagicContextTools(pi, opts) {
       ensureProjectRegistered: opts.ensureProjectRegistered,
       memoryEnabled: opts.memoryEnabled,
       embeddingEnabled: opts.embeddingEnabled,
-      allowDreamerActions: opts.allowDreamerActions ?? false
+      allowDreamerActions: opts.allowDreamerActions ?? false,
+      resolveProjectIdentity: resolveProjectIdentity2
     }));
   }
   if (!opts.sessionScopedToolsDisabled) {
     pi.registerTool(createCtxNoteTool({
       db: opts.db,
       dreamerEnabled: opts.dreamerEnabled ?? false,
-      resolveDreamerEnabled: opts.resolveDreamerEnabled
+      resolveDreamerEnabled: opts.resolveDreamerEnabled,
+      resolveProjectIdentity: resolveProjectIdentity2
     }));
     pi.registerTool(createCtxExpandTool({ db: opts.db }));
   }
@@ -183559,7 +184103,7 @@ function registerMagicContextTools(pi, opts) {
       registerTodosCommand(pi);
     }
   }
-  if (!opts.sessionScopedToolsDisabled) {
+  if (!opts.sessionScopedToolsDisabled && !opts.compactionOff) {
     pi.registerTool(createCtxReduceTool({
       db: opts.db,
       protectedTags: opts.protectedTags ?? 20,
@@ -183568,4 +184112,4 @@ function registerMagicContextTools(pi, opts) {
   }
 }
 
-export { isDreamerRunnable, migrateMagicContextConfigLocations, ProjectIdentityError, resolveProjectIdentityStrict, resolveProjectIdentity, resolveProjectIdentityForSession, beginBootQuietPeriod, scheduleAfterBootQuiet, Database, closeQuietly, textMentionsRecentCommit, hasMeaningfulUserText, extractTexts, extractToolCallSummaries, estimateTokens, normalizeText, stripPersistedAssistantText, byteSize, stripTagPrefix, peelLeadingMcTagNotation, prependTag, isRecord, isEditTool, applyEditMarkerToInput, setRawMessageProvider, withRawMessageProvider, cleanUserText, withRawSessionMessageCache, readRawSessionMessages, primeTailRawMessageCache, getCachedAbsoluteMessageCount, primeInMemoryTailRawMessageCache, getRawSessionMessageCount, getRawSessionTagKeysThrough, getLegacyProtectedTailStartOrdinal, readSessionChunk, clearCompressionDepth, clearCompressionDepthRange, getMessageIndexSourceIdentity, isMessageIndexSourceCurrent, getLastIndexedOrdinal, getMessageIndexReconciliationStartOrdinal, isMessageIndexReconciledThrough, indexSingleMessage, indexMessagesAfterOrdinal, sweepOrphanedOpenCodeMessageIndexes, recordSessionProjectIdentity, COMPARTMENT_LEASE_RENEWAL_MS, acquireCompartmentLease, renewCompartmentLease, releaseCompartmentLease, isCompartmentLeaseHeld, persistCachedM0, clearCachedM0M1, getCompartments, getLastCompartmentEndMessage, getLastCompartmentEndMessageId, getCompartmentsByEndMessageId, appendCompartments, saveRecompStagingPass, getRecompStaging, clearRecompStaging, getRecompPartialRange, setRecompPartialRange, escapeXmlAttr, escapeXmlContent, getModuleNoteEvaluationBridge, getContextStoreUuid, parseCompartmentOutput, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, sourceNameForMemory, computeWorkspaceEpochFingerprint, bumpEpochsForWorkspaceMembers, readProjectDocsCanonical, copySessionStateForClone, getErrorMessage, describeError, stableStringify, getSchemaFenceRejection, getDatabasePath, setSqlitePragmaConfig, applySqliteTuningPragmas, runSqliteOptimize, openDatabase, openDatabaseAsync, queueM0Mutation, getMaxM0MutationId, queueMemoryMutation, getMemoryMutationsForRender, getMemoryMutationsForRenderByProjects, getMaxMemoryMutationId, getMaxMemoryMutationIdForProjects, loadProtectedTailMeta, markProtectedTailPolicyV3Seeded, recordProtectedTailPublicationFloor, recordProtectedTailNoEligibleHead, getWrapupInProgressState, isWrapupInProgress, acquireWrapupInProgress, updateWrapupInProgress, releaseWrapupInProgress, reserveProtectedTailDrainTokens, clearEmergencyDrainLatch, recordHistorianDrainFailure, clearHistorianDrainFailure, rollbackProtectedTailDrainReservation, clearPersistedReasoningWatermark, getEmergencyInputSample, setEmergencyDropSample, clearEmergencyDropSample, getLastNudgeUndropped, setLastNudgeUndropped, getLastNudgeLevel, setLastNudgeLevel, resetLastNudgeCycle, resetLastNudgeCycleIfTailShrank, getChannel2NudgeState, setChannel2NudgeState, casChannel2NudgeState, getPersistedNoteNudge, setPersistedNoteNudgeTrigger, setPersistedNoteNudgeTriggerMessageId, getNoteNudgeAnchors, getAutoSearchHintDecisions, deliverNoteNudgeAtomic, appendAutoSearchHintDecision, pruneNoteNudgeAnchors, pruneAutoSearchHintDecisions, getPersistedTodoSyntheticAnchor, setPersistedTodoSyntheticAnchor, clearPersistedTodoSyntheticAnchor, getNoteLastReadAt, getHistorianFailureState, incrementHistorianFailure, clearHistorianFailureState, getOverflowState, recordOverflowDetected, clearEmergencyRecovery, clearDetectedContextLimit, getStrippedPlaceholderIds, applyStrippedPlaceholderDelta, getProcessedImageStrippedIds, addProcessedImageStrippedIds, getPendingCompactionMarkerState, clearPendingCompactionMarkerStateIf, getPendingPiCompactionMarkerState, setPendingPiCompactionMarkerState, clearPendingPiCompactionMarkerStateIf, getSessionsWithPendingPiMarker, peekDeferredExecutePending, setDeferredExecutePendingIfAbsent, clearDeferredExecutePendingIfMatches, setSessionWorkMetrics, getSessionWorkMetrics, getOrCreateSessionMeta, updateSessionMeta, advanceToolReclaimWatermark, retryPendingSessionCleanups, getNotes, getSessionNotes, getPendingSmartNotes, getReadySmartNotes, markNoteReady, markNoteChecked, queuePendingOp, getPendingOps, removePendingOp, PRIMER_CANDIDATE_TTL_MS, PRIMER_CANDIDATE_MAX_AGE_MS, primerOccurrenceKey, primerOccurrenceUtcDay, insertPrimerCandidates, updatePrimerCandidateEmbedding, getPrimerCandidatesByIds, getPrimerCandidatesForPromotion, countPrimerCandidatesForProject, getActivePrimers, createPrimer, updatePrimerSupport, updatePrimerAnswer, GLOBAL_USER_PROFILE_PROJECT_PATH, getProjectState, bumpProjectUserProfileVersion, saveSourceContent, replaceSourceContent, getSourceContents, recordSubagentInvocation, getLatestHistorianInvocationId, updateTagByteSize, getActiveTagTokenAggregate, AGE_RECLAIM_MIN_TOKENS, getOldestActiveUnprotectedToolTags, getActiveToolTagsForAgeReclaim, getTriggerTagTokenUpperBound, updateTagInputByteSize, updateTagTokenCount, getPersistedToolTagAccounting, getAllStatusTagTokenTotalsFlat, updateTagInputTokenCount, tagTokenCountIsNull, backfillTagTokenCounts, insertTag, updateTagStatus, updateTagDropMode, updateCavemanDepth, hasPiFallbackMessageTags, findAdoptableFallbackTags, hasPiFallbackToolOwnerTags, findPiFallbackToolOwnerTags, adoptPiFallbackToolOwnerTag, adoptPiFallbackMessageTag, getMaxTagNumberBySession, getTagNumberByMessageId, deriveTagLoadFloor, getTagsBySession, getActiveTagsBySession, getTagsForPendingOperations, getTagsByNumbers, getMaxDroppedTagNumber, getToolTagNumberByOwner, getNullOwnerToolTag, adoptNullOwnerToolTag, isSaneLimit, getSdkContextLimit, normalizeTodoStateJson, buildSyntheticTodoPart, SYNTH_USER_ID_PREFIX, resolvePiStableId, isMidTurnPi, readPiSessionMessages, findLastModelKeyFromBranch, convertEntriesToRawMessages, withContentLanguageDirective, withMigrationLanguageDirective, buildPrimaryLanguageDirective, piModelRefToCanonical, resolveModelRefForPi, getOpenCodeDbPath2 as getOpenCodeDbPath, parseCron, nextOccurrence, nextDueAtMs, DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE, DEFAULT_HISTORIAN_TIMEOUT_MS, buildCanonicalChunkTextFromFts, buildCompartmentSummaryFallbackText, canonicalizeInMemoryChunkTextForEmbedding, chunkCanonicalText, chunkEmbeddingWindowsAreCurrent, replaceCompartmentChunkEmbeddings, cosineSimilarity, computeNormalizedHash, GIT_SWEEP_LEASE_RENEWAL_MS, acquireGitSweepLease, renewGitSweepLease, markGitSweepSuccessAndRelease, parkGitSweepNonIndexable, releaseGitSweepLease, invalidateMemory, contentSha256, sweepStaleEmbeddingIdentitiesForProject, enqueueShadowEmbeddingItems, getProjectEmbeddingSnapshot, getProjectChunkEmbeddingModelId, getProjectEmbeddingMaxInputTokens, embedTextForProject, embedBatchForProject, embedItemsForProject, embedUnembeddedMemoriesForProject, drainCommitBacklogForProject, embedSessionCompartmentChunks, getEmbeddingCoverageStatus, computeCueContentHash, getMuralCueState, memoryNeedsCue, setMuralCue, hasMemoryShareableColumn, hasMemoryClassifiedAtColumn, getUnclassifiedMemoryIds, insertMemory, getMemoryByHash, getMemoriesByProject, getMemoriesByProjects, getMaxMemoryIdForProjects, readNewMemoriesForM1Union, getAllActiveMemoriesForMigration, getMemoryById, setMemoryClassification, archiveMemory, deleteMemory, getMemoryCount, getMemoryCountsByStatus, promoteSessionFactsDurable, embedPromotedFacts, recordMemoryMapping, recordMemoryVerifications, getUnmappedMemoryIds, clearMemoryVerifications, getMemoryVerifications, resolveGitTopLevel, readGitHead, readGitChangedFilesSince, readGitFileChangeTimesSince, verificationFileExists, normalizeVerificationFiles, USER_MEMORY_CANDIDATE_TTL_MS, insertUserMemoryCandidates, getUserMemoryCandidates, deleteUserMemoryCandidates, pruneExpiredUserMemoryCandidates, insertUserMemory, getActiveUserMemories, updateUserMemoryContent, dismissUserMemory, indexCommitsForProject, embedUnembeddedCommits, loadPiConfig, ensureProjectRegisteredFromPiDirectory, resolveMuralWire, updateCompactionMarkerAfterPublication, COMPARTMENT_RENDER_EPOCH, encodeCachedM0UpgradeIdentity, decodeCachedM0UpgradeIdentity, DEFAULT_HISTORY_BUDGET_TOKENS, renderCompartmentAtTier, renderDecayedCompartments, extractM0Block, TEMPORAL_MARKER_PATTERN, temporalMarkerPrefix, clearInjectionCache, getVisibleMemoryIds, renderMemoryBlock, DEFAULT_MEMORY_BUDGET_TOKENS, DEFAULT_USER_PROFILE_BUDGET_TOKENS, trimMemoriesToBudgetV2, trimWorkspaceMemoriesToBudgetV2, trimUserMemoriesToBudget, renderMemoryBlockV2, stripMemoryMuralBlock, unifiedSearch, rememberTodowriteToolCallTodos, parseTodos, setTodoSnapshot, registerTodoOverlay, registerTodoStateLifecycle, registerMagicContextTools };
+export { COMPACTION_ENABLED_PATH, isDreamerRunnable, isCompactionEnabled, migrateMagicContextConfigLocations, ProjectIdentityError, resolveProjectIdentityStrict, resolveProjectIdentity, resolveProjectIdentityForSession, beginBootQuietPeriod, scheduleAfterBootQuiet, Database, closeQuietly, isMidTurn, textMentionsRecentCommit, hasMeaningfulUserText, extractTexts, extractToolCallSummaries, estimateTokens, normalizeText, stripPersistedAssistantText, byteSize, stripTagPrefix, peelLeadingMcTagNotation, prependTag, isRecord, isEditTool, applyEditMarkerToInput, setRawMessageProvider, withRawMessageProvider, cleanUserText, withRawSessionMessageCache, readRawSessionMessages, primeTailRawMessageCache, getCachedAbsoluteMessageCount, primeInMemoryTailRawMessageCache, getRawSessionMessageCount, getRawSessionTagKeysThrough, getLegacyProtectedTailStartOrdinal, readSessionChunk, clearCompressionDepth, clearCompressionDepthRange, getMessageIndexSourceIdentity, isMessageIndexSourceCurrent, getLastIndexedOrdinal, getMessageIndexReconciliationStartOrdinal, isMessageIndexReconciledThrough, indexSingleMessage, indexMessagesAfterOrdinal, sweepOrphanedOpenCodeMessageIndexes, recordSessionProjectIdentity, COMPARTMENT_LEASE_RENEWAL_MS, acquireCompartmentLease, renewCompartmentLease, releaseCompartmentLease, isCompartmentLeaseHeld, persistCachedM0, clearCachedM0M1, getCompartments, getLastCompartmentEndMessage, getLastCompartmentEndMessageId, getCompartmentsByEndMessageId, appendCompartments, saveRecompStagingPass, getRecompStaging, clearRecompStaging, getRecompPartialRange, setRecompPartialRange, escapeXmlAttr, escapeXmlContent, getModuleNoteEvaluationBridge, getContextStoreUuid, parseCompartmentOutput, resolveWorkspaceShareCategories, resolveWorkspaceIdentitySet, expandWorkspaceIdentitySetWithAliases, sourceNameForMemory, computeWorkspaceEpochFingerprint, bumpEpochsForWorkspaceMembers, readProjectDocsCanonical, copySessionStateForClone, getErrorMessage, describeError, setStoragePrivatePermissionEnforcement, stableStringify, getSchemaFenceRejection, getMigrationOnOpenRefusal, LATEST_SUPPORTED_VERSION, getDatabasePath, getPersistedSchemaVersion, setSqlitePragmaConfig, applySqliteTuningPragmas, runSqliteOptimize, openDatabase, openDatabaseAsync, queueM0Mutation, getMaxM0MutationId, queueMemoryMutation, getMemoryMutationsForRender, getMemoryMutationsForRenderByProjects, getMaxMemoryMutationId, getMaxMemoryMutationIdForProjects, MAX_EXECUTE_THRESHOLD, escalationBands, loadProtectedTailMeta, markProtectedTailPolicyV3Seeded, recordProtectedTailPublicationFloor, recordProtectedTailNoEligibleHead, getWrapupInProgressState, isWrapupInProgress, acquireWrapupInProgress, updateWrapupInProgress, releaseWrapupInProgress, resolveCompactionModeRecord, getCompactionModeRecord, setCompactionModeRecord, reserveProtectedTailDrainTokens, clearEmergencyDrainLatch, recordHistorianDrainFailure, clearHistorianDrainFailure, rollbackProtectedTailDrainReservation, clearPersistedReasoningWatermark, getEmergencyInputSample, setEmergencyDropSample, clearEmergencyDropSample, getLastNudgeUndropped, setLastNudgeUndropped, getLastNudgeLevel, setLastNudgeLevel, resetLastNudgeCycle, resetLastNudgeCycleIfTailShrank, getChannel2NudgeState, setChannel2NudgeState, casChannel2NudgeState, getPersistedNoteNudge, setPersistedNoteNudgeTrigger, setPersistedNoteNudgeTriggerMessageId, getNoteNudgeAnchors, getAutoSearchHintDecisions, deliverNoteNudgeAtomic, appendAutoSearchHintDecision, pruneNoteNudgeAnchors, pruneAutoSearchHintDecisions, getPersistedTodoSyntheticAnchor, setPersistedTodoSyntheticAnchor, clearPersistedTodoSyntheticAnchor, getNoteLastReadAt, getHistorianFailureState, incrementHistorianFailure, clearHistorianFailureState, getOverflowState, recordOverflowDetected, clearEmergencyRecovery, clearDetectedContextLimit, getStrippedPlaceholderIds, applyStrippedPlaceholderDelta, getProcessedImageStrippedIds, addProcessedImageStrippedIds, getPendingCompactionMarkerState, clearPendingCompactionMarkerStateIf, getPendingPiCompactionMarkerState, setPendingPiCompactionMarkerState, clearPendingPiCompactionMarkerStateIf, getSessionsWithPendingPiMarker, peekDeferredExecutePending, setDeferredExecutePendingIfAbsent, clearDeferredExecutePendingIfMatches, setSessionWorkMetrics, getSessionWorkMetrics, getOrCreateSessionMeta, updateSessionMeta, advanceToolReclaimWatermark, retryPendingSessionCleanups, getNotes, getSessionNotes, getPendingSmartNotes, getReadySmartNotes, markNoteReady, markNoteChecked, queuePendingOp, getPendingOps, clearPendingOps, removePendingOp, PRIMER_CANDIDATE_TTL_MS, PRIMER_CANDIDATE_MAX_AGE_MS, primerOccurrenceKey, primerOccurrenceUtcDay, insertPrimerCandidates, updatePrimerCandidateEmbedding, getPrimerCandidatesByIds, getPrimerCandidatesForPromotion, countPrimerCandidatesForProject, getActivePrimers, createPrimer, updatePrimerSupport, updatePrimerAnswer, GLOBAL_USER_PROFILE_PROJECT_PATH, getProjectState, bumpProjectUserProfileVersion, saveSourceContent, replaceSourceContent, getSourceContents, recordSubagentInvocation, getLatestHistorianInvocationId, updateTagByteSize, getActiveTagTokenAggregate, AGE_RECLAIM_MIN_TOKENS, getOldestActiveUnprotectedToolTags, getActiveToolTagsForAgeReclaim, getTriggerTagTokenUpperBound, updateTagInputByteSize, updateTagTokenCount, getPersistedToolTagAccounting, getAllStatusTagTokenTotalsFlat, updateTagInputTokenCount, tagTokenCountIsNull, backfillTagTokenCounts, insertTag, updateTagStatus, updateTagDropMode, updateCavemanDepth, hasPiFallbackMessageTags, findAdoptableFallbackTags, hasPiFallbackToolOwnerTags, findPiFallbackToolOwnerTags, adoptPiFallbackToolOwnerTag, adoptPiFallbackMessageTag, getMaxTagNumberBySession, getTagNumberByMessageId, deriveTagLoadFloor, getTagsBySession, getActiveTagsBySession, getTagsForPendingOperations, getTagsByNumbers, getMaxDroppedTagNumber, getToolTagNumberByOwner, getNullOwnerToolTag, adoptNullOwnerToolTag, BoundedSessionMap, piModelRefToCanonical, resolveModelRefForPi, isSaneLimit, resolveLimit, getSdkContextLimit, normalizeTodoStateJson, buildSyntheticTodoPart, SYNTH_USER_ID_PREFIX, resolvePiStableId, isMidTurnPi, readPiSessionMessages, findLastModelKeyFromBranch, convertEntriesToRawMessages, withContentLanguageDirective, withMigrationLanguageDirective, buildPrimaryLanguageDirective, getOpenCodeDbPath2 as getOpenCodeDbPath, parseCron, nextOccurrence, nextDueAtMs, DEFAULT_EXECUTE_THRESHOLD_PERCENTAGE, DEFAULT_HISTORIAN_TIMEOUT_MS, buildCanonicalChunkTextFromFts, buildCompartmentSummaryFallbackText, canonicalizeInMemoryChunkTextForEmbedding, chunkCanonicalText, chunkEmbeddingWindowsAreCurrent, replaceCompartmentChunkEmbeddings, cosineSimilarity, computeNormalizedHash, GIT_SWEEP_LEASE_RENEWAL_MS, acquireGitSweepLease, renewGitSweepLease, markGitSweepSuccessAndRelease, parkGitSweepNonIndexable, releaseGitSweepLease, invalidateMemory, contentSha256, sweepStaleEmbeddingIdentitiesForProject, enqueueShadowEmbeddingItems, getProjectEmbeddingSnapshot, getProjectChunkEmbeddingModelId, getProjectEmbeddingMaxInputTokens, embedTextForProject, embedBatchForProject, embedItemsForProject, embedUnembeddedMemoriesForProject, drainCommitBacklogForProject, embedSessionCompartmentChunks, getEmbeddingCoverageStatus, computeCueContentHash, getMuralCueState, memoryNeedsCue, setMuralCue, hasMemoryShareableColumn, hasMemoryClassifiedAtColumn, getUnclassifiedMemoryIds, insertMemory, getMemoryByHash, getMemoriesByProject, getMemoriesByProjects, getMaxMemoryIdForProjects, readNewMemoriesForM1Union, getAllActiveMemoriesForMigration, getMemoryById, setMemoryClassification, archiveMemory, deleteMemory, getMemoryCount, getMemoryCountsByStatus, promoteSessionFactsDurable, embedPromotedFacts, recordMemoryMapping, recordMemoryVerifications, getUnmappedMemoryIds, clearMemoryVerifications, getMemoryVerifications, resolveGitTopLevel, readGitHead, readGitChangedFilesSince, readGitFileChangeTimesSince, verificationFileExists, normalizeVerificationFiles, USER_MEMORY_CANDIDATE_TTL_MS, insertUserMemoryCandidates, getUserMemoryCandidates, deleteUserMemoryCandidates, pruneExpiredUserMemoryCandidates, insertUserMemory, getActiveUserMemories, updateUserMemoryContent, dismissUserMemory, indexCommitsForProject, embedUnembeddedCommits, loadPiConfig, ensureProjectRegisteredFromPiDirectory, resolveMuralWire, updateCompactionMarkerAfterPublication, COMPARTMENT_RENDER_EPOCH, encodeCachedM0UpgradeIdentity, decodeCachedM0UpgradeIdentity, DEFAULT_HISTORY_BUDGET_TOKENS, renderCompartmentAtTier, renderDecayedCompartments, extractM0Block, TEMPORAL_MARKER_PATTERN, temporalMarkerPrefix, clearInjectionCache, getVisibleMemoryIds, renderMemoryBlock, DEFAULT_MEMORY_BUDGET_TOKENS, DEFAULT_USER_PROFILE_BUDGET_TOKENS, trimMemoriesToBudgetV2, trimWorkspaceMemoriesToBudgetV2, trimUserMemoriesToBudget, renderMemoryBlockV2, stripMemoryMuralBlock, unifiedSearch, rememberTodowriteToolCallTodos, parseTodos, setTodoSnapshot, registerTodoOverlay, registerTodoStateLifecycle, registerMagicContextTools };