@cortexkit/pi-magic-context 0.39.0 → 0.40.1

package/dist/index.js

@@ -13,6 +13,7 @@ import {
   DEFAULT_MEMORY_BUDGET_TOKENS,
   DEFAULT_USER_PROFILE_BUDGET_TOKENS,
   Database,
+  FAIL_CLOSED_DOCTOR_COMMAND,
   GIT_SWEEP_LEASE_RENEWAL_MS,
   GLOBAL_USER_PROFILE_PROJECT_PATH,
   LATEST_SUPPORTED_VERSION,
@@ -86,6 +87,8 @@ import {
   copySessionStateForClone,
   cosineSimilarity,
   countPrimerCandidatesForProject,
+  createFailClosedBlockingError,
+  createFailClosedController,
   createPrimer,
   createPromptSurfaceGuidanceEpochCache,
   createPromptSurfaceRuntime,
@@ -125,6 +128,7 @@ import {
   findAdoptableFallbackTags,
   findLastModelKeyFromBranch,
   findPiFallbackToolOwnerTags,
+  formatFailClosedBlockingMessage,
   formatWindowDerivationLine,
   getActivePrimers,
   getActiveTagsBySession,
@@ -226,6 +230,7 @@ import {
   hasMuralCueColumns,
   hasPiFallbackMessageTags,
   hasPiFallbackToolOwnerTags,
+  hasShareabilitySensitiveText,
   incrementHistorianFailure,
   indexCommitsForProject,
   indexMessagesAfterOrdinal,
@@ -241,6 +246,7 @@ import {
   isCompartmentLeaseHeld,
   isDreamerRunnable,
   isEditTool,
+  isFailClosedBlockingError,
   isMessageIndexReconciledThrough,
   isMessageIndexSourceCurrent,
   isMidTurn,
@@ -361,6 +367,7 @@ import {
   setSqlitePragmaConfig,
   setStoragePrivatePermissionEnforcement,
   setTodoSnapshot,
+  shouldBypassFailClosedBlock,
   shouldUseStickyChannel1Reminder,
   sourceNameForMemory,
   stripChannel1ReminderSpans,
@@ -396,7 +403,7 @@ import {
   withMigrationLanguageDirective,
   withRawMessageProvider,
   withRawSessionMessageCache
-} from "./index-qqgk7jmy.js";
+} from "./index-fre7qcqg.js";
 import {
   pushNotification
 } from "./index-hw34xmzk.js";
@@ -620,170 +627,6 @@ function summarizeDreamSchedule(dreamer) {
   return enabled.map((t) => `${t} ${dreamer?.tasks[t]?.schedule}`).join(", ");
 }
 
-// ../plugin/src/features/magic-context/fail-closed-block.ts
-var FAIL_CLOSED_DOCTOR_COMMAND = "npx @cortexkit/magic-context@latest doctor";
-var FAIL_CLOSED_REPROBE_EVERY_N = 5;
-
-class FailClosedBlockingError extends Error {
-  code = "FAIL_CLOSED_BLOCKING";
-  reason;
-  constructor(message, reason, options) {
-    super(message, options);
-    this.name = "FailClosedBlockingError";
-    this.reason = reason;
-  }
-}
-var OPENCODE_INTERNAL_AGENT_NAMES = new Set(["title", "summary", "compaction"]);
-function isMagicContextHiddenAgentName(agent) {
-  if (agent === "sidekick" || agent === "smart-note-compiler" || agent.startsWith("smart-note-")) {
-    return true;
-  }
-  if (agent === "historian" || agent.startsWith("historian-"))
-    return true;
-  if (agent === "dreamer" || agent.startsWith("dreamer-"))
-    return true;
-  return false;
-}
-var MAX_FORMATTED_BLOCKING_PROCESSES = 8;
-function normalizeFailClosedProcessKind(process2) {
-  switch (process2.kind) {
-    case "OpenCode server":
-    case "OpenCode instance (TUI/CLI)":
-    case "Pi":
-    case "process":
-      return process2.kind;
-  }
-  switch (process2.harness?.trim().toLowerCase()) {
-    case "opencode server":
-      return "OpenCode server";
-    case "opencode instance (tui/cli)":
-    case "opencode instance":
-      return "OpenCode instance (TUI/CLI)";
-    case "pi":
-    case "pi harness":
-    case "omp":
-      return "Pi";
-    default:
-      return "process";
-  }
-}
-function formatFailClosedBlockingProcesses(processes) {
-  const uniqueProcesses = new Map;
-  for (const process2 of processes) {
-    if (!Number.isInteger(process2.pid) || process2.pid <= 0)
-      continue;
-    const kind = normalizeFailClosedProcessKind(process2);
-    uniqueProcesses.set(`${kind}\x00${process2.pid}`, { kind, pid: process2.pid });
-  }
-  const entries = [...uniqueProcesses.values()];
-  const visible = entries.slice(0, MAX_FORMATTED_BLOCKING_PROCESSES);
-  const rendered = visible.map(({ kind, pid }) => `${kind} (PID ${pid})`);
-  const omitted = entries.length - visible.length;
-  if (omitted > 0)
-    rendered.push(`${omitted} more blocking process(es)`);
-  if (rendered.length === 0)
-    return "a live process";
-  if (rendered.length === 1)
-    return rendered[0];
-  const last = rendered.pop();
-  return `${rendered.join(", ")}, and ${last}`;
-}
-function formatFailClosedBlockingMessage(reason) {
-  if (reason.kind === "migration_guard") {
-    if (reason.unreadableFile) {
-      const arm = reason.unreadableArm ?? "io";
-      const recovery = arm === "io" ? `If none of these processes are running, it is safe to delete ${reason.unreadableFile} and retry.` : `The file may be a recent incomplete write; retry after the file is older than the ten-minute grace window, or stop the relevant process before deleting it.`;
-      return [
-        `Magic Context cannot migrate the shared database because RPC discovery file ${reason.unreadableFile} is uncertain (${arm} arm), so the absence of a live process cannot be proven.`,
-        recovery,
-        `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
-      ].join(" ");
-    }
-    return [
-      `Magic Context cannot migrate the shared database because ${formatFailClosedBlockingProcesses(reason.blockingProcesses)} may be running an older Magic Context build that would fail against the migrated database.`,
-      "Restart the blocking process (it will pick up the new build and migrate on start), or shut it down and retry.",
-      `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
-    ].join(" ");
-  }
-  if (reason.kind === "schema_fence") {
-    return [
-      `Magic Context cannot operate: this Magic Context build is older than the database; upgrade/restart this harness (upstream migration lane v${reason.persistedVersion}, build supports through v${reason.supportedVersion}).`,
-      `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
-    ].join(" ");
-  }
-  const cause = reason.cause.trim().length > 0 ? reason.cause.trim() : "unknown storage error";
-  return [
-    `Magic Context cannot operate: persistent storage failed (${cause}).`,
-    "The plugin will not silently degrade to native compaction while enabled.",
-    `Recovery: ${FAIL_CLOSED_DOCTOR_COMMAND}`
-  ].join(" ");
-}
-function createFailClosedBlockingError(reason, options) {
-  return new FailClosedBlockingError(formatFailClosedBlockingMessage(reason), reason, options);
-}
-function isFailClosedBlockingError(error) {
-  return error instanceof FailClosedBlockingError || typeof error === "object" && error !== null && error.name === "FailClosedBlockingError" && error.code === "FAIL_CLOSED_BLOCKING";
-}
-function shouldBypassFailClosedBlock(input) {
-  if (input.isPiSubagentEnv === true)
-    return true;
-  if (input.isInternalChildSession === true)
-    return true;
-  const agent = typeof input.agent === "string" ? input.agent.trim() : "";
-  if (agent.length === 0)
-    return false;
-  if (OPENCODE_INTERNAL_AGENT_NAMES.has(agent))
-    return true;
-  if (isMagicContextHiddenAgentName(agent))
-    return true;
-  return false;
-}
-function createFailClosedController(options) {
-  const reprobeEveryN = Math.max(1, options?.reprobeEveryN ?? FAIL_CLOSED_REPROBE_EVERY_N);
-  let reason = null;
-  let blockedPassCount = 0;
-  return {
-    arm(next) {
-      reason = next;
-      blockedPassCount = 0;
-    },
-    clear() {
-      reason = null;
-      blockedPassCount = 0;
-    },
-    isArmed() {
-      return reason !== null;
-    },
-    getReason() {
-      return reason;
-    },
-    async enforce(input) {
-      if (!reason)
-        return;
-      if (!input.blockingEnabled)
-        return;
-      if (input.exempt)
-        return;
-      blockedPassCount += 1;
-      const shouldReprobe = typeof input.tryReopen === "function" && (blockedPassCount === 1 || blockedPassCount % reprobeEveryN === 0);
-      if (shouldReprobe) {
-        try {
-          const healed = await input.tryReopen?.();
-          if (healed) {
-            reason = null;
-            blockedPassCount = 0;
-            return;
-          }
-        } catch {}
-      }
-      const blockedReason = reason;
-      if (!blockedReason)
-        return;
-      throw createFailClosedBlockingError(blockedReason);
-    }
-  };
-}
-
 // ../plugin/src/features/magic-context/message-index-async.ts
 function isDatabaseLockedError(error) {
   if (!error || typeof error !== "object")
@@ -5828,153 +5671,6 @@ function isRustAuthorityDrainingError(error) {
   return error instanceof Error && error.message.includes("authority_draining");
 }
 
-// ../plugin/src/shared/redaction.ts
-import { homedir as homedir2, userInfo } from "node:os";
-function escapeRegex(value) {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-var SECRET_WORDS = [
-  "key",
-  "token",
-  "secret",
-  "password",
-  "auth",
-  "authorization",
-  "bearer",
-  "credential"
-];
-var SECRET_SEGMENT_PATTERN = new RegExp(`^(?:${SECRET_WORDS.map((w) => `${w}s?`).join("|")})$`, "i");
-var TRAILING_DESCRIPTORS = new Set(["id", "ids", "value", "values", "header", "headers"]);
-function redactionTypeForKey(key) {
-  const normalized = key.trim().toLowerCase().replace(/[^a-z0-9_.-]+/g, "_");
-  const suffix = normalized.split(".").filter(Boolean).at(-1) ?? normalized;
-  return suffix || "secret";
-}
-function isNonSecretScalarValue(value) {
-  const v = value.trim();
-  if (v === "true" || v === "false" || v === "null" || v === "undefined")
-    return true;
-  return /^[+-]?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?$/.test(v);
-}
-var SECRET_QUALIFIERS = new Set([
-  "api",
-  "access",
-  "private",
-  "client",
-  "auth",
-  "authorization",
-  "secret",
-  "bearer",
-  "session",
-  "refresh",
-  "service",
-  "x",
-  "openai",
-  "anthropic",
-  "google",
-  "github",
-  "huggingface",
-  "aws",
-  "azure"
-]);
-function sanitizePathString(value) {
-  const home = homedir2();
-  const username = userInfo().username;
-  let sanitized = value;
-  if (home) {
-    sanitized = sanitized.replace(new RegExp(escapeRegex(home), "g"), "~");
-  }
-  sanitized = sanitized.replace(/\/Users\/[^/]+\//g, "/Users/<USER>/");
-  sanitized = sanitized.replace(/\/home\/[^/]+\//g, "/home/<USER>/");
-  sanitized = sanitized.replace(/C:\\Users\\[^\\]+\\/g, "C:\\Users\\<USER>\\");
-  if (username) {
-    sanitized = sanitized.replace(new RegExp(escapeRegex(username), "g"), "<USER>");
-  }
-  return sanitized;
-}
-var SECRET_TEXT_PATTERNS = [
-  {
-    pattern: /\bsk-ant-(?:api03-)?[A-Za-z0-9_-]{32,}/g,
-    replacement: "<ANTHROPIC_API_KEY_REDACTED>"
-  },
-  {
-    pattern: /\bsk-(?:proj-)?[A-Za-z0-9_-]{32,}/g,
-    replacement: "<OPENAI_API_KEY_REDACTED>"
-  },
-  {
-    pattern: /\bgithub_pat_[A-Za-z0-9_]{20,}/g,
-    replacement: "<GITHUB_PAT_REDACTED>"
-  },
-  {
-    pattern: /\b(?:gh[opsu]|ghr)_[A-Za-z0-9]{30,}/g,
-    replacement: "<GITHUB_TOKEN_REDACTED>"
-  },
-  {
-    pattern: /\bhf_[A-Za-z0-9]{30,}/g,
-    replacement: "<HUGGINGFACE_TOKEN_REDACTED>"
-  },
-  {
-    pattern: /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g,
-    replacement: "<AWS_ACCESS_KEY_ID_REDACTED>"
-  },
-  {
-    pattern: /\bxox[abprsuvc]-[A-Za-z0-9-]{10,}/g,
-    replacement: "<SLACK_TOKEN_REDACTED>"
-  },
-  {
-    pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g,
-    replacement: "<GOOGLE_API_KEY_REDACTED>"
-  },
-  {
-    pattern: /\b(Authorization\s*:\s*Bearer\s+)([A-Za-z0-9._~+/=-]{8,})/gi,
-    replacement: (_full, prefix) => `${prefix}<REDACTED:bearer>`
-  },
-  {
-    pattern: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g,
-    replacement: "<JWT_REDACTED>"
-  },
-  {
-    pattern: /(["'])([^"']*(?:key|token|secret|password|auth|bearer|credential)[^"']*)\1(\s*:\s*)(["'])([^"']*)\4/gi,
-    replacement: (full, quote, key, separator, valueQuote, value) => isNonSecretScalarValue(value) ? full : `${quote}${key}${quote}${separator}${valueQuote}<REDACTED:${redactionTypeForKey(key)}>${valueQuote}`
-  },
-  {
-    pattern: /\b([A-Za-z0-9_.-]*(?:key|token|secret|password|auth|bearer|credential)[A-Za-z0-9_.-]*)\s*=\s*([^\s'"`]+)/gi,
-    replacement: (full, key, value) => isNonSecretScalarValue(value) ? full : `${key}=<REDACTED:${redactionTypeForKey(key)}>`
-  }
-];
-function redactSecretText(value) {
-  let redacted = value;
-  for (const { pattern, replacement } of SECRET_TEXT_PATTERNS) {
-    if (typeof replacement === "string") {
-      redacted = redacted.replace(pattern, replacement);
-    } else {
-      redacted = redacted.replace(pattern, replacement);
-    }
-  }
-  return redacted;
-}
-function sanitizeDiagnosticText(value) {
-  return redactSecretText(sanitizePathString(value));
-}
-var SHAREABILITY_SENSITIVE_PATTERNS = [
-  /\bC:\/Users\/[^/\s]+/i,
-  /(?:^|\s)~\/[^\s]+/,
-  /\b(?:api[_-]?key|secret|token|password|passwd|pwd|client[_-]?secret|access[_-]?key)\b\s*[:=]\s*\S+/i,
-  /\b(?:localhost|127\.0\.0\.1|0\.0\.0\.0|\[::1\])(?::\d+)?\b/i,
-  /\b(?:10|127)\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/,
-  /\b192\.168\.\d{1,3}\.\d{1,3}\b/,
-  /\b172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}\b/
-];
-function hasShareabilitySensitiveText(text) {
-  try {
-    if (sanitizeDiagnosticText(text) !== text)
-      return true;
-    return SHAREABILITY_SENSITIVE_PATTERNS.some((pattern) => pattern.test(text));
-  } catch {
-    return true;
-  }
-}
-
 // ../plugin/src/features/magic-context/dreamer/classify-prompt.ts
 var SCORING_GUIDANCE = `### How to score importance (1-100)
 Importance decides which memories survive when the injected memory block is over budget: high scores stay in context, low scores drop first. So the score is only useful if it **discriminates** — if most memories land in the same band, you have not classified them, you have just labelled them.
@@ -12293,6 +11989,28 @@ var embedPauseBySession = new Set;
 var embedRunStateBySession = new Map;
 var autoEmbedAttemptedBySession = new Set;
 
+// ../plugin/src/hooks/magic-context/format-embed-failure.ts
+function formatEmbedFailureSummary(embedded, remaining, failure) {
+  const compartment = `compartment${embedded === 1 ? "" : "s"}`;
+  if (!failure) {
+    return `Embedded ${embedded} ${compartment}; ${remaining} could not be embedded (the provider returned no result). Run /ctx-embed start again to retry them.`;
+  }
+  const retry = " Run /ctx-embed start again to retry them.";
+  switch (failure.class) {
+    case "substitution_rejected":
+      return `Embedded ${embedded} ${compartment}; ${remaining} rejected: ${failure.reason}. Fix: set embedding.model to the served spelling.`;
+    case "http_error": {
+      const fix = failure.reason.startsWith("HTTP 401") || failure.reason.startsWith("HTTP 403") ? " Fix: check embedding.api_key." : failure.reason.startsWith("HTTP 402") ? " Fix: check provider quota or billing." : failure.reason.startsWith("HTTP 404") ? " Fix: check embedding.endpoint and embedding.model." : failure.retryable ? retry : " Fix: check embedding.endpoint, embedding.model, and credentials.";
+      return `Embedded ${embedded} ${compartment}; ${remaining} failed: ${failure.reason}.${fix}`;
+    }
+    case "invalid_envelope":
+      return `Embedded ${embedded} ${compartment}; ${remaining} failed: ${failure.reason}. Fix: configure an OpenAI-compatible embedding endpoint that returns data[].embedding.`;
+    case "empty_result":
+    case "transport_error":
+      return `Embedded ${embedded} ${compartment}; ${remaining} failed: ${failure.reason}.${failure.retryable ? retry : ""}`;
+  }
+}
+
 // ../plugin/src/hooks/magic-context/format-embed-status.ts
 function formatEmbedStatusText(coverage, drain) {
   if (!coverage.enabled) {
@@ -12442,7 +12160,7 @@ Paused at ${cov.session.embedded}/${cov.session.total} compartments embedded.`,
       return {
         text: `## /ctx-embed
 
-Embedded ${outcome.embedded} compartment${outcome.embedded === 1 ? "" : "s"}; ${outcome.remaining} could not be embedded (the provider returned no result). Run /ctx-embed start again to retry them.`,
+${formatEmbedFailureSummary(outcome.embedded, outcome.remaining, outcome.failure)}`,
         level: "info"
       };
     default:
@@ -28631,7 +28349,7 @@ ${c.content}
 // package.json
 var package_default = {
   name: "@cortexkit/pi-magic-context",
-  version: "0.39.0",
+  version: "0.40.1",
   type: "module",
   description: "Pi and OMP coding agent extension for Magic Context — cross-session memory and context management",
   main: "dist/index.js",
@@ -28817,6 +28535,7 @@ function renderInner(s, theme, innerWidth) {
   lines.push("* Conversation includes model Reasoning; hygiene excludes it.");
   lines.push("");
   lines.push(`Counts: ${s.compartmentCount} compartments · ${s.memoryCount} memories (${s.memoryBlockCount} injected) · ${s.sessionNoteCount + s.readySmartNoteCount} notes`);
+  lines.push(`Active profile: ${s.activeProfile ?? "none"}`);
   lines.push(`Historian: ${s.historianRunning ? theme.fg("warning", "running") : theme.fg("accent", "idle")}${s.historianFailureCount > 0 ? ` · ${theme.fg("error", `last failure ${s.historianLastFailureAt ? relTime(s.historianLastFailureAt) : "unknown"}`)}` : ""}`);
   if (s.recompInFlight) {
     lines.push(`Upgrade: ${theme.fg("warning", "recomp/upgrade running…")}`);
@@ -28947,6 +28666,7 @@ ${safeStringify(tool.parameters)}`);
   const compressionBudget = contextLimit > 0 ? Math.floor(contextLimit * (Math.min(threshold.percentage, 80) / 100) * historyBudgetPercentage) : null;
   return {
     sessionId,
+    activeProfile: deps.activeProfile ?? null,
     usagePercentage,
     inputTokens,
     systemPromptTokens,
@@ -29179,7 +28899,14 @@ No active Pi session is available.`,
           backlog: getDreamTaskBacklogs(currentDeps.db, currentDeps.projectIdentity, CANONICAL_DREAM_TASKS)
         }, windowGeometry, resolveTailHygieneStatus(getPiChannel1Baseline(sessionId)));
         const details = buildStatusDetails(currentDeps, sessionId);
-        sendCtxStatusMessage(pi, { title: "/ctx-status", text: statusText, level: "info" }, details);
+        const profileStatus = currentDeps.activeProfile ?? "none";
+        sendCtxStatusMessage(pi, {
+          title: "/ctx-status",
+          text: `${statusText}
+
+Active profile: ${profileStatus}`,
+          level: "info"
+        }, details);
       } catch (error) {
         sendCtxStatusMessage(pi, {
           title: "/ctx-status",
@@ -29203,6 +28930,7 @@ function buildStatusDetails(deps, sessionId) {
   return {
     sessionId,
     projectIdentity: deps.projectIdentity,
+    activeProfile: deps.activeProfile ?? null,
     activeTags: activeTags.length,
     droppedTags: droppedTags.length,
     totalBytes,
@@ -30321,6 +30049,7 @@ async function startPiMagicContextRuntime(pi, database, dbPath) {
       runnable: bootProjectDeps.dreamerEnabled,
       scheduleSummary: summarizeDreamSchedule(bootProjectDeps.config.dreamer)
     },
+    activeProfile: bootProjectDeps.config.profile,
     resolveStatusDeps: (ctx) => {
       const current = resolveCurrentProjectDeps(ctx);
       return {
@@ -30335,7 +30064,8 @@ async function startPiMagicContextRuntime(pi, database, dbPath) {
         dreamer: {
           runnable: current.dreamerEnabled,
           scheduleSummary: summarizeDreamSchedule(current.config.dreamer)
-        }
+        },
+        activeProfile: current.config.profile
       };
     }
   });

package/dist/subagent-entry.js

@@ -5,7 +5,7 @@ import {
   registerMagicContextTools,
   resolveProjectIdentityForSession,
   setStoragePrivatePermissionEnforcement
-} from "./index-qqgk7jmy.js";
+} from "./index-fre7qcqg.js";
 import {
   log,
   setHarness

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/pi-magic-context",
-  "version": "0.39.0",
+  "version": "0.40.1",
   "type": "module",
   "description": "Pi and OMP coding agent extension for Magic Context — cross-session memory and context management",
   "main": "dist/index.js",