@cortexkit/pi-magic-context 0.49.13 → 0.49.14

package/dist/index.js

@@ -247,7 +247,7 @@ import {
   registerTodoStateLifecycle,
   syncCtxMemoryToolEnabled,
   registerMagicContextTools
-} from "./index-aypx5h57.js";
+} from "./index-65kty5te.js";
 import {
   canonicalModelIdentity,
   piModelRefToCanonical,
@@ -287,7 +287,7 @@ import {
   openCurrentDatabase,
   openDatabaseAsync,
   closeDatabase
-} from "./index-t27xk4r7.js";
+} from "./index-ccsscaap.js";
 import {
   setHomeProjectPermission,
   ProjectIdentityError,
@@ -457,7 +457,7 @@ import {
   getRawSessionTagKeysThrough2,
   getLegacyProtectedTailStartOrdinal2,
   readSessionChunk2
-} from "./index-53xdqb3d.js";
+} from "./index-75ah9413.js";
 import {
   UNKNOWN_FIT_RATIO,
   hasMeasuredDecisionCalibration,
@@ -544,7 +544,7 @@ import {
   getToolTagNumberByOwner2,
   getNullOwnerToolTag2,
   adoptNullOwnerToolTag2
-} from "./index-ed9d2ded.js";
+} from "./index-j0n09wtp.js";
 import {
   textMentionsRecentCommit,
   hasMeaningfulUserText2,
@@ -576,11 +576,7 @@ import {
   isKnownAutocommit,
   observeTemporalDecisions,
   freezeTemporalDecisions,
-  tagRevisionIncarnationSql,
-  tagRevisionCountSql,
-  tagRevisionKey,
-  tagIdentityRevisionKey,
-  TAG_INSERT_CONFLICT_ROWS
+  tagIdentityRevisionKey
 } from "./index-jrap43gc.js";
 import {
   resolveOpenCodeDbPath,
@@ -620,7 +616,7 @@ import {
   indexSingleMessage2,
   indexMessagesAfterOrdinal2,
   sweepOrphanedOpenCodeMessageIndexes2
-} from "./index-vv1j5cak.js";
+} from "./index-a4pk5yv9.js";
 import {
   formatSynapseLaneDescriptor
 } from "./index-6dz2ed1v.js";
@@ -686,7 +682,7 @@ import {
   expandWorkspaceIdentitySetWithAliases,
   sourceNameForMemory,
   computeWorkspaceEpochFingerprint
-} from "./index-3cnarwf8.js";
+} from "./index-bet4sd3e.js";
 import {
   configureContextDatabasePragmas2
 } from "./index-fapenpch.js";
@@ -736,7 +732,7 @@ import {
   normalizeVerificationFiles,
   indexCommitsForProject,
   embedUnembeddedCommits
-} from "./index-wp9q91kn.js";
+} from "./index-0awvkeb5.js";
 import {
   setEmbeddingSessionBusy2,
   isEmbeddingHostBusy2
@@ -780,6 +776,17 @@ import {
   SubagentTelemetry,
   readHostSystemPrompt
 } from "./index-y29y2j2w.js";
+import {
+  PiTagHydrationError,
+  getPiTagSnapshotView,
+  getPiActiveTagSnapshotView,
+  readPiFallbackTagRows,
+  prewarmPiTagSnapshot,
+  cancelPiTagSnapshotSession,
+  drainPiTagSnapshotSession,
+  assertPiTagSnapshotReady,
+  ensurePiTagSnapshotReady
+} from "./index-1vw4f2pe.js";
 import"./index-f18ec69t.js";
 import {
   __toESM
@@ -3499,7 +3506,7 @@ function startHostStallProfilerSwitch() {
 // package.json
 var package_default = {
   name: "@cortexkit/pi-magic-context",
-  version: "0.49.13",
+  version: "0.49.14",
   type: "module",
   description: "Pi and OMP coding agent extension for Magic Context — cross-session memory and context management",
   main: "dist/index.js",
@@ -3528,7 +3535,7 @@ var package_default = {
   ],
   "//": "The build intentionally bundles typebox (no --external typebox) and keeps it a regular dependency. OMP's extension loader rewrites every bare `typebox` import to its own omptype-based shim, whose schemas are callable objects rather than JSON Schema; they fail structuredClone during tool registration, so an external typebox import stops Magic Context loading on OMP. src/typebox-bundling.test.ts guards this.",
   scripts: {
-    build: "bun ../../scripts/check-bun.mjs && tsc -p ../retina-local-fs/tsconfig.build.json && bun ../../scripts/clean-dist-chunks.mjs dist index.js subagent-entry.js historian-calibration-extension.js embedding-worker-process.js raw-ordinal-warmup-worker.js transformers-web.js transformers-node-wasm.js && bun build ../plugin/src/features/magic-context/memory/transformers-web-entry.ts --outfile dist/transformers-web.js --target browser --format esm --external onnxruntime-web && bun ../plugin/scripts/build-transformers-node-wasm.ts dist && bun build src/index.ts src/subagent-entry.ts src/historian-calibration-extension.ts ../plugin/src/features/magic-context/memory/embedding-worker.ts ../plugin/src/features/magic-context/memory/embedding-worker-process.ts ../plugin/src/features/magic-context/migration-worker.ts ../plugin/src/hooks/magic-context/auto-search-worker.ts ../plugin/src/hooks/magic-context/raw-ordinal-warmup-worker.ts ../plugin/src/features/magic-context/compaction-marker-candidates-worker.ts ../plugin/src/features/magic-context/chunk-embedding-write-worker.ts --outdir dist --entry-naming '[name].[ext]' --target node --format esm --splitting --external @earendil-works/pi-coding-agent --external @oh-my-pi/pi-coding-agent --external @earendil-works/pi-tui --external onnxruntime-node --external onnxruntime-web --external sharp --external bun:ffi --external node:sqlite",
+    build: "bun ../../scripts/check-bun.mjs && tsc -p ../retina-local-fs/tsconfig.build.json && bun ../../scripts/clean-dist-chunks.mjs dist index.js subagent-entry.js historian-calibration-extension.js embedding-worker-process.js raw-ordinal-warmup-worker.js tag-snapshot-worker-pi.js transformers-web.js transformers-node-wasm.js && bun build ../plugin/src/features/magic-context/memory/transformers-web-entry.ts --outfile dist/transformers-web.js --target browser --format esm --external onnxruntime-web && bun ../plugin/scripts/build-transformers-node-wasm.ts dist && bun build src/index.ts src/tag-snapshot-worker-pi.ts src/subagent-entry.ts src/historian-calibration-extension.ts ../plugin/src/features/magic-context/memory/embedding-worker.ts ../plugin/src/features/magic-context/memory/embedding-worker-process.ts ../plugin/src/features/magic-context/migration-worker.ts ../plugin/src/hooks/magic-context/auto-search-worker.ts ../plugin/src/hooks/magic-context/raw-ordinal-warmup-worker.ts ../plugin/src/features/magic-context/compaction-marker-candidates-worker.ts ../plugin/src/features/magic-context/chunk-embedding-write-worker.ts --outdir dist --entry-naming '[name].[ext]' --target node --format esm --splitting --external @earendil-works/pi-coding-agent --external @oh-my-pi/pi-coding-agent --external @earendil-works/pi-tui --external onnxruntime-node --external onnxruntime-web --external sharp --external bun:ffi --external node:sqlite",
     "build:e2e-argv": `bun ../../scripts/clean-dist-chunks.mjs ../../tests/docker/.generated subagent-runner-e2e.mjs && bun build src/subagent-runner.ts --outdir ../../tests/docker/.generated --entry-naming 'subagent-runner-e2e.mjs' --splitting --target node --format esm --external node:sqlite && node --input-type=module -e 'const { __test } = await import("../../tests/docker/.generated/subagent-runner-e2e.mjs"); if (typeof __test.buildArgs !== "function" || typeof __test.resolvePiInvocation !== "function") throw new Error("argv renderer exports missing"); console.log("Node argv renderer: 2 exports loaded")'`,
     typecheck: "tsc -p ../retina-local-fs/tsconfig.build.json && tsc --noEmit",
     test: "bun ../../scripts/check-bun.mjs && bun install --frozen-lockfile && BUN_JSC_useOMGJIT=0 bun test --parallel=4 --timeout 30000",
@@ -3537,7 +3544,7 @@ var package_default = {
     "lint:fix": "biome check --write src",
     format: "biome format --write src",
     "format:check": "biome format src",
-    clean: "bun ../../scripts/clean-dist-chunks.mjs dist index.js subagent-entry.js historian-calibration-extension.js embedding-worker.js embedding-worker-process.js migration-worker.js raw-ordinal-warmup-worker.js transformers-web.js transformers-node-wasm.js",
+    clean: "bun ../../scripts/clean-dist-chunks.mjs dist index.js subagent-entry.js historian-calibration-extension.js embedding-worker.js embedding-worker-process.js migration-worker.js raw-ordinal-warmup-worker.js tag-snapshot-worker-pi.js transformers-web.js transformers-node-wasm.js",
     prepublishOnly: "bun run build"
   },
   "//test": "Test runs cap file-isolated workers at four (one for test:serial) and disable JSC's optimizing WebAssembly tier so per-file isolation does not pay its compilation cost on every file. These are not production settings and do not change host process engine options.",
@@ -3802,6 +3809,7 @@ async function inheritPiCloneSession(event, ctx, deps, isStartup) {
       deps.signalPendingMarker(destinationSessionId);
     }
     writeLog(`[magic-context][pi] clone-inheritance: migrated compartments=${result.compartmentsCopied} tags=${result.tagsCopied} notes=${result.notesCopied} facts=${result.factsCopied} source=${sourceSessionId} dest=${destinationSessionId} reason=${isStartup ? "startup" : event.reason}`);
+    deps.onInherited?.(destinationSessionId);
     return result;
   } catch (error) {
     logCloneStartFailureOnce(destinationSessionId, () => writeLog(`[magic-context][pi] clone-inheritance: failed source=${sourceSessionId} dest=${destinationSessionId} stage=${stage} error=${error instanceof Error ? error.message : String(error)}; run /ctx-wrapup to rebuild, or re-clone`));
@@ -12693,7 +12701,7 @@ function getAsyncModule() {
       await beforeModuleLoad();
     const [{ default: singlefileAsyncifyVariant }, { newQuickJSAsyncWASMModuleFromVariant }] = await importPluginModule(() => Promise.all([
       import("./index-e7vx3byk.js").then((m)=>__toESM(m.default,1)),
-      import("./index-e6xnpach.js")
+      import("./index-b7p25tm0.js")
     ]));
     const module = await newQuickJSAsyncWASMModuleFromVariant(singlefileAsyncifyVariant);
     return module;
@@ -14369,7 +14377,8 @@ function currentManifest(text) {
   return start < 0 ? text : text.slice(start);
 }
 function parseMapMemoriesCompletion(text, completion, expectedIds) {
-  return validateMapMemoriesManifest(currentManifest(assistantText(completion.messages ?? []) || text), expectedIds);
+  const source = /<mappings\b/i.test(text) ? text : assistantText(completion.messages ?? []) || text;
+  return validateMapMemoriesManifest(currentManifest(source), expectedIds);
 }
 function validateClientMapMemories(messages, expectedIds) {
   if (hasLengthCappedOutput(messages)) {
@@ -24150,6 +24159,31 @@ function computePiWorkMetrics(sessionEntries) {
   return { newWorkTokens, totalInputTokens };
 }
 
+// ../plugin/src/hooks/magic-context/pending-drop-eligibility.ts
+function pendingDropVeto(tagNumber, target, protectedTagIds) {
+  if (protectedTagIds.has(tagNumber))
+    return "protected";
+  if (target?.thinkingDropProtected)
+    return "active_thinking";
+  return null;
+}
+function capturePendingDropEligibility(targets, protectedTagIds) {
+  const eligible = new Set;
+  for (const [number, target] of targets) {
+    if (pendingDropVeto(number, target, protectedTagIds))
+      continue;
+    if (target.drop) {
+      if (target.canDrop?.() === true)
+        eligible.add(number);
+    } else {
+      const content = target.getContent?.();
+      if (typeof content === "string" && content.length > `[dropped §${number}§]`.length)
+        eligible.add(number);
+    }
+  }
+  return eligible;
+}
+
 // ../plugin/src/hooks/magic-context/apply-operations.ts
 var RECENT_TOOL_SKELETON_WINDOW = 20;
 function buildReplacementContent(tagId) {
@@ -24265,7 +24299,7 @@ function prepareLegacyToolSkeletonConversions(db, sessionId, targets, options =
     }
   };
 }
-function applyPendingOperations(sessionId, db, targets, protectedTagIds, preloadedTags, preloadedPendingOps, syntheticPendingOps = [], editMarkerTagIds = new Set, onTagReduced, onBatchComplete) {
+function applyPendingOperations(sessionId, db, targets, protectedTagIds, preloadedTags, preloadedPendingOps, syntheticPendingOps = [], editMarkerTagIds = new Set, onTagReduced, onBatchComplete, onEligibilitySnapshot) {
   let didMutateMessage = false;
   let diagnostics;
   const reject = (reason) => {
@@ -24280,6 +24314,7 @@ function applyPendingOperations(sessionId, db, targets, protectedTagIds, preload
     }).immediate();
     {
       const pendingOps = preloadedPendingOps ?? getPendingOps(db, sessionId);
+      onEligibilitySnapshot?.(capturePendingDropEligibility(targets, protectedTagIds));
       const tags = preloadedTags ?? getTagsByNumbers2(db, sessionId, [
         ...new Set([
           ...pendingOps.map((op) => op.tagId),
@@ -24310,13 +24345,10 @@ function applyPendingOperations(sessionId, db, targets, protectedTagIds, preload
             removePendingOp(db, sessionId, pendingOp.tagId);
           continue;
         }
-        if (protectedTagIds.has(pendingOp.tagId)) {
-          reject("protected");
-          continue;
-        }
         const target = targets.get(pendingOp.tagId);
-        if (target?.thinkingDropProtected) {
-          reject("active_thinking");
+        const veto = pendingDropVeto(pendingOp.tagId, target, protectedTagIds);
+        if (veto) {
+          reject(veto);
           continue;
         }
         const isToolTag = tagTypeById.get(pendingOp.tagId) === "tool";
@@ -25522,12 +25554,12 @@ function estimateUntaggedInMemoryTailUpperBound(db, sessionId, inMemoryTail, tag
 function getProactiveCompartmentTriggerPercentage(executeThresholdPercentage) {
   return Math.max(0, executeThresholdPercentage - PROACTIVE_TRIGGER_OFFSET_PERCENTAGE);
 }
-function estimateProjectedPostDropPercentage(db, sessionId, usage, activeTags, keepReasoningTokens, clearedReasoningThroughTag, canClearReasoning, liveBudgetCutoff) {
+function estimateProjectedPostDropPercentage(db, sessionId, usage, activeTags, keepReasoningTokens, clearedReasoningThroughTag, canClearReasoning, liveBudgetCutoff, eligiblePendingDropTagIds) {
   const totalActiveBytes = activeTags.reduce((sum, tag) => sum + tag.byteSize + tag.reasoningByteSize, 0);
   if (totalActiveBytes === 0)
     return null;
   let droppableBytes = 0;
-  const pendingDrops = getPendingOps(db, sessionId).filter((op) => op.operation === "drop");
+  const pendingDrops = getPendingOps(db, sessionId).filter((op) => op.operation === "drop" && eligiblePendingDropTagIds?.has(op.tagId) === true);
   const pendingDropTagIds = new Set(pendingDrops.map((op) => op.tagId));
   if (pendingDrops.length > 0) {
     droppableBytes += activeTags.filter((tag) => pendingDropTagIds.has(tag.tagNumber)).reduce((sum, tag) => sum + tag.byteSize + tag.reasoningByteSize, 0);
@@ -25656,7 +25688,7 @@ function getUnsummarizedTailInfo(db, sessionId, triggerBudget, usage, executeThr
 function formatProjectedPostDropPercentage(value) {
   return value === null ? "none" : `${value.toFixed(1)}%`;
 }
-function checkCompartmentTrigger(db, sessionId, sessionMeta, usage, _previousPercentage, executeThresholdPercentage, triggerBudget, keepReasoningTokens, commitClusterTrigger, preloadedActiveTags, contextLimit, inMemoryTail, taggerFloorOverride, reasoningProjection, reclaimRide) {
+function checkCompartmentTrigger(db, sessionId, sessionMeta, usage, _previousPercentage, executeThresholdPercentage, triggerBudget, keepReasoningTokens, commitClusterTrigger, preloadedActiveTags, contextLimit, inMemoryTail, taggerFloorOverride, reasoningProjection, reclaimRide, eligiblePendingDropTagIds) {
   if (sessionMeta.compartmentInProgress) {
     sessionLog2(sessionId, `compartment trigger: skipped — historian already in progress (usage=${usage.percentage.toFixed(1)}%)`);
     return { shouldFire: false };
@@ -25720,7 +25752,7 @@ function checkCompartmentTrigger(db, sessionId, sessionMeta, usage, _previousPer
     return { shouldFire: false };
   }
   const canClearReasoning = reasoningProjection?.canClearReasoning ?? modelAcceptsEmptyContent(reasoningProjection?.providerID);
-  const projectedPostDropPercentage = estimateProjectedPostDropPercentage(db, sessionId, usage, preloadedActiveTags ?? getActiveTagsBySession2(db, sessionId), keepReasoningTokens, sessionMeta.clearedReasoningThroughTag, canClearReasoning, reasoningProjection?.budgetCutoff);
+  const projectedPostDropPercentage = estimateProjectedPostDropPercentage(db, sessionId, usage, preloadedActiveTags ?? getActiveTagsBySession2(db, sessionId), keepReasoningTokens, sessionMeta.clearedReasoningThroughTag, canClearReasoning, reasoningProjection?.budgetCutoff, eligiblePendingDropTagIds);
   const relativePostDropTarget = executeThresholdPercentage * POST_DROP_TARGET_RATIO;
   const rideLabel = reclaimRide ? reclaimRideLabel(reclaimRide) : "ride=none";
   const dropsCanLand = reclaimRide !== undefined && hasReclaimRide(reclaimRide);
@@ -25804,6 +25836,20 @@ function checkCompartmentTrigger(db, sessionId, sessionMeta, usage, _previousPer
 }
 
 // ../plugin/src/hooks/magic-context/degraded-pass-refusal.ts
+function describeDegradedPassFailure(site, cause) {
+  const details = [site];
+  const seen = new Set;
+  while (cause !== undefined && cause !== null && !seen.has(cause)) {
+    seen.add(cause);
+    const current = cause;
+    const detail = typeof current.site === "string" ? current.site : typeof current.message === "string" ? current.message : String(cause);
+    if (!details.includes(detail))
+      details.push(detail);
+    cause = current.cause;
+  }
+  return `Magic Context could not safely prepare this turn [${userFacingFailureCode("transform_pass_degraded")}] (${details.join(": ")}). This request was not sent.`;
+}
+
 class DegradedPassRefusalError extends Error {
   site;
   code = "DEGRADED_PASS_REFUSAL";
@@ -25811,7 +25857,7 @@ class DegradedPassRefusalError extends Error {
   estimatedTokens;
   contextLimitTokens;
   constructor(site, options) {
-    super(renderUserFacingFailure("transform_pass_degraded", "plain"), {
+    super(describeDegradedPassFailure(site, options?.cause), {
       cause: options?.cause
     });
     this.site = site;
@@ -30595,246 +30641,6 @@ function detectRecentCommit(messages) {
   return false;
 }
 
-// src/tag-snapshot-pi.ts
-function createPiTagSnapshotReader(db) {
-  const existing = readers.get(db);
-  if (existing)
-    return existing;
-  db.exec(`
-		CREATE TEMP TABLE IF NOT EXISTS pi_tag_revision (revision INTEGER NOT NULL);
-		INSERT INTO pi_tag_revision SELECT 0 WHERE NOT EXISTS (SELECT 1 FROM pi_tag_revision);
-		CREATE TEMP TABLE IF NOT EXISTS pi_tag_session_revision (session_id TEXT PRIMARY KEY, revision INTEGER NOT NULL);
-		CREATE TEMP TABLE IF NOT EXISTS pi_tag_watch (session_id TEXT PRIMARY KEY);
-		CREATE TEMP TABLE IF NOT EXISTS pi_tag_changes (session_id TEXT, tag_number INTEGER, PRIMARY KEY (session_id, tag_number));
-		CREATE TEMP TABLE IF NOT EXISTS pi_tag_version_own (session_id TEXT PRIMARY KEY, count INTEGER NOT NULL);
-		DROP TRIGGER IF EXISTS temp.pi_tag_version_ai;
-		DROP TRIGGER IF EXISTS temp.pi_tag_version_ad;
-		DROP TRIGGER IF EXISTS temp.pi_tag_version_au;
-		DROP TRIGGER IF EXISTS temp.pi_tag_insert;
-		DROP TRIGGER IF EXISTS temp.pi_tag_update;
-		DROP TRIGGER IF EXISTS temp.pi_tag_delete;
-		DROP TRIGGER IF EXISTS temp.pi_tag_insert_conflicts;
-		CREATE TEMP TRIGGER pi_tag_insert_conflicts BEFORE INSERT ON main.tags BEGIN
-			UPDATE pi_tag_revision SET revision = revision + (SELECT COUNT(*) FROM (${TAG_INSERT_CONFLICT_ROWS}));
-			INSERT INTO pi_tag_session_revision
-				SELECT session_id, COUNT(*) FROM (${TAG_INSERT_CONFLICT_ROWS}) GROUP BY session_id
-				ON CONFLICT(session_id) DO UPDATE SET revision = revision + excluded.revision;
-			INSERT INTO pi_tag_changes
-				SELECT session_id, tag_number FROM (${TAG_INSERT_CONFLICT_ROWS}) AS conflicts
-				WHERE EXISTS (SELECT 1 FROM pi_tag_watch WHERE session_id = conflicts.session_id)
-				AND NOT EXISTS (SELECT 1 FROM pi_tag_changes WHERE session_id = conflicts.session_id AND tag_number = conflicts.tag_number)
-				GROUP BY session_id, tag_number;
-		END;
-		CREATE TEMP TRIGGER IF NOT EXISTS pi_tag_insert AFTER INSERT ON main.tags BEGIN
-			UPDATE pi_tag_revision SET revision = revision + 1;
-			INSERT INTO pi_tag_session_revision VALUES (NEW.session_id, 1) ON CONFLICT(session_id) DO UPDATE SET revision = revision + 1;
-			INSERT INTO pi_tag_changes SELECT NEW.session_id, NEW.tag_number WHERE EXISTS (SELECT 1 FROM pi_tag_watch WHERE session_id = NEW.session_id) AND NOT EXISTS (SELECT 1 FROM pi_tag_changes WHERE session_id = NEW.session_id AND tag_number = NEW.tag_number);
-		END;
-		CREATE TEMP TRIGGER IF NOT EXISTS pi_tag_update AFTER UPDATE ON main.tags BEGIN
-			UPDATE pi_tag_revision SET revision = revision + 1;
-			INSERT INTO pi_tag_session_revision VALUES (OLD.session_id, 1) ON CONFLICT(session_id) DO UPDATE SET revision = revision + 1;
-			INSERT INTO pi_tag_session_revision SELECT NEW.session_id, 1 WHERE NEW.session_id IS NOT OLD.session_id ON CONFLICT(session_id) DO UPDATE SET revision = revision + 1;
-			INSERT INTO pi_tag_changes SELECT OLD.session_id, OLD.tag_number WHERE EXISTS (SELECT 1 FROM pi_tag_watch WHERE session_id = OLD.session_id) AND NOT EXISTS (SELECT 1 FROM pi_tag_changes WHERE session_id = OLD.session_id AND tag_number = OLD.tag_number);
-			INSERT INTO pi_tag_changes SELECT NEW.session_id, NEW.tag_number WHERE EXISTS (SELECT 1 FROM pi_tag_watch WHERE session_id = NEW.session_id) AND NOT EXISTS (SELECT 1 FROM pi_tag_changes WHERE session_id = NEW.session_id AND tag_number = NEW.tag_number);
-		END;
-		CREATE TEMP TRIGGER IF NOT EXISTS pi_tag_delete AFTER DELETE ON main.tags BEGIN
-			UPDATE pi_tag_revision SET revision = revision + 1;
-			INSERT INTO pi_tag_session_revision VALUES (OLD.session_id, 1) ON CONFLICT(session_id) DO UPDATE SET revision = revision + 1;
-			INSERT INTO pi_tag_changes SELECT OLD.session_id, OLD.tag_number WHERE EXISTS (SELECT 1 FROM pi_tag_watch WHERE session_id = OLD.session_id) AND NOT EXISTS (SELECT 1 FROM pi_tag_changes WHERE session_id = OLD.session_id AND tag_number = OLD.tag_number);
-		END;
-		CREATE TEMP TRIGGER pi_tag_version_ai AFTER INSERT ON main.tags BEGIN
-			INSERT INTO pi_tag_version_own VALUES (NEW.session_id, 1) ON CONFLICT(session_id) DO UPDATE SET count = count + 1;
-		END;
-		CREATE TEMP TRIGGER pi_tag_version_ad AFTER DELETE ON main.tags BEGIN
-			INSERT INTO pi_tag_version_own VALUES (OLD.session_id, 1) ON CONFLICT(session_id) DO UPDATE SET count = count + 1;
-		END;
-		CREATE TEMP TRIGGER pi_tag_version_au
-		AFTER UPDATE OF session_id, message_id, tag_number, type, tool_owner_message_id, status ON main.tags BEGIN
-			INSERT INTO pi_tag_version_own VALUES (OLD.session_id, 1) ON CONFLICT(session_id) DO UPDATE SET count = count + 1;
-			INSERT INTO pi_tag_version_own SELECT NEW.session_id, 1 WHERE NEW.session_id != OLD.session_id
-				ON CONFLICT(session_id) DO UPDATE SET count = count + 1;
-		END;
-	`);
-  const versionStamp = db.prepare(`SELECT
-		COALESCE((SELECT tags_version FROM session_meta WHERE session_id = ?), 0) AS durable,
-		COALESCE((SELECT count FROM pi_tag_version_own WHERE session_id = ?), 0) AS own`);
-  const revision = db.prepare(`WITH stamp AS (SELECT
-		COALESCE((SELECT revision FROM pi_tag_session_revision WHERE session_id = ?), 0) AS own,
-		COALESCE((SELECT value FROM schema_migrations_meta WHERE key = ?), '0') AS total)
-		SELECT CAST(own AS TEXT) AS local,
-		(${tagRevisionIncarnationSql("total")}) || ':' || CAST(${tagRevisionCountSql("total")} - own AS TEXT) AS foreign_revision FROM stamp`);
-  revisionReaders.set(db, (sessionId) => {
-    const transaction = db;
-    if (transaction.inTransaction || transaction.isTransaction)
-      return null;
-    const row = revision.get(sessionId, tagRevisionKey(sessionId));
-    return [row.local, row.foreign_revision];
-  });
-  const changed = db.prepare("SELECT tag_number FROM pi_tag_changes WHERE session_id = ? ORDER BY tag_number");
-  const clearChanged = db.prepare("DELETE FROM pi_tag_changes WHERE session_id = ?");
-  const watch = db.prepare("INSERT OR IGNORE INTO pi_tag_watch VALUES (?)");
-  const unwatch = db.prepare("DELETE FROM pi_tag_watch WHERE session_id = ?");
-  const cache = new Map;
-  const fallbackRows = db.prepare(`SELECT ${FALLBACK_ROW_COLUMNS} FROM tags WHERE session_id = ? AND ${FALLBACK_ROW_PREDICATE}`);
-  const fallbackRowsByNumbers = db.prepare(`SELECT ${FALLBACK_ROW_COLUMNS} FROM tags WHERE session_id = ?
-		 AND tag_number IN (SELECT value FROM json_each(?)) AND ${FALLBACK_ROW_PREDICATE}`);
-  const sync = (sessionId) => {
-    const transaction = db;
-    if (transaction.inTransaction || transaction.isTransaction)
-      return null;
-    const [local, external] = revisionReaders.get(db)?.(sessionId) ?? [
-      "0",
-      "0:0"
-    ];
-    const stamp = versionStamp.get(sessionId, sessionId);
-    let snapshot = cache.get(sessionId);
-    if (!snapshot || snapshot.foreignRevision !== external) {
-      const tags = snapshot ? reuseUnchangedRows(snapshot.tags, getTagsBySession2(db, sessionId)) : getTagsBySession2(db, sessionId);
-      snapshot = {
-        revision: local,
-        foreignRevision: external,
-        tags,
-        active: tags.filter(isActive),
-        durableVersion: stamp.durable,
-        ownVersion: stamp.own
-      };
-      if (cache.size >= 100 && !cache.has(sessionId)) {
-        const oldest = cache.keys().next().value;
-        if (oldest !== undefined) {
-          cache.delete(oldest);
-          unwatch.run(oldest);
-          clearChanged.run(oldest);
-        }
-      }
-      cache.set(sessionId, snapshot);
-      for (const tag of snapshot.tags)
-        Object.freeze(tag);
-      watch.run(sessionId);
-    } else if (snapshot.revision !== local) {
-      const numbers = changed.all(sessionId).map((row) => row.tag_number);
-      if (numbers.length > 0) {
-        const dirty = new Set(numbers);
-        const replacements = getTagsByNumbers2(db, sessionId, numbers);
-        for (const tag of replacements)
-          Object.freeze(tag);
-        snapshot.tags = mergeChangedRows(snapshot.tags, dirty, replacements);
-        snapshot.active = mergeChangedRows(snapshot.active, dirty, replacements.filter(isActive));
-        if (!numbers.every(Number.isSafeInteger)) {
-          snapshot.fallback = undefined;
-        } else if (snapshot.fallback) {
-          snapshot.fallback = [
-            ...snapshot.fallback.filter((row) => !dirty.has(row.tag_number)),
-            ...fallbackRowsByNumbers.all(sessionId, JSON.stringify(numbers))
-          ];
-        }
-      }
-      snapshot.revision = local;
-    }
-    if (stamp.durable - snapshot.durableVersion !== stamp.own - snapshot.ownVersion) {
-      snapshot.fallback = undefined;
-    }
-    snapshot.durableVersion = stamp.durable;
-    snapshot.ownVersion = stamp.own;
-    clearChanged.run(sessionId);
-    return snapshot;
-  };
-  const read = (sessionId, borrowed = false) => {
-    const snapshot = sync(sessionId);
-    if (!snapshot)
-      return getTagsBySession2(db, sessionId);
-    return borrowed ? snapshot.tags : snapshot.tags.map((tag) => ({ ...tag }));
-  };
-  entryReaders.set(db, sync);
-  fallbackReaders.set(db, (sessionId) => {
-    const snapshot = sync(sessionId);
-    if (!snapshot)
-      return null;
-    snapshot.fallback ??= fallbackRows.all(sessionId);
-    return snapshot.fallback;
-  });
-  readers.set(db, read);
-  return read;
-}
-var FALLBACK_ROW_COLUMNS = "id, tag_number, type, message_id, tool_owner_message_id, entry_fingerprint";
-var FALLBACK_ROW_PREDICATE = `((type = 'message' AND message_id LIKE 'pi-msg-%')
-	OR (type = 'tool' AND tool_owner_message_id LIKE 'pi-msg-%'))`;
-var isActive = (tag) => tag.status === "active";
-function sameRow(left, right, keys) {
-  for (const key of keys)
-    if (!Object.is(left[key], right[key]))
-      return false;
-  return true;
-}
-function reuseUnchangedRows(cached, fresh) {
-  const first = fresh[0];
-  if (!first)
-    return fresh;
-  const keys = Object.keys(first);
-  let index = 0;
-  for (let position = 0;position < fresh.length; position += 1) {
-    const row = fresh[position];
-    if (!row)
-      continue;
-    while (index < cached.length) {
-      const old = cached[index];
-      if (!old || old.tagNumber > row.tagNumber || old.tagNumber === row.tagNumber && (old.id ?? 0) >= (row.id ?? 0))
-        break;
-      index += 1;
-    }
-    const old = cached[index];
-    if (old && old.id === row.id && sameRow(old, row, keys))
-      fresh[position] = old;
-  }
-  return fresh;
-}
-function mergeChangedRows(rows, dirty, replacements) {
-  const highest = rows.at(-1)?.tagNumber ?? -1;
-  let appendOnly = true;
-  for (const number of dirty) {
-    if (number <= highest) {
-      appendOnly = false;
-      break;
-    }
-  }
-  if (appendOnly)
-    return [...rows, ...replacements];
-  const unchanged = rows.filter((tag) => !dirty.has(tag.tagNumber));
-  const merged = [];
-  let index = 0;
-  for (const tag of unchanged) {
-    while (index < replacements.length) {
-      const next = replacements[index];
-      if (!next)
-        break;
-      if (next.tagNumber > tag.tagNumber || next.tagNumber === tag.tagNumber && (next.id ?? 0) > (tag.id ?? 0))
-        break;
-      merged.push(next);
-      index += 1;
-    }
-    merged.push(tag);
-  }
-  merged.push(...replacements.slice(index));
-  return merged;
-}
-var entryReaders = new WeakMap;
-var fallbackReaders = new WeakMap;
-var readers = new WeakMap;
-var revisionReaders = new WeakMap;
-function getPiTagSnapshotView(db, sessionId) {
-  return createPiTagSnapshotReader(db)(sessionId, true);
-}
-function getPiActiveTagSnapshotView(db, sessionId, passTags) {
-  createPiTagSnapshotReader(db);
-  const snapshot = entryReaders.get(db)?.(sessionId);
-  if (snapshot && (!passTags || snapshot.tags === passTags))
-    return snapshot.active.slice();
-  return (passTags ?? getTagsBySession2(db, sessionId)).filter(isActive);
-}
-function readPiFallbackTagRows(db, sessionId) {
-  createPiTagSnapshotReader(db);
-  return fallbackReaders.get(db)?.(sessionId) ?? null;
-}
-
 // src/fallback-tag-probes-pi.ts
 function probe(db, sessionId, kind) {
   const rows = readPiFallbackTagRows(db, sessionId);
@@ -34256,6 +34062,9 @@ class PiContextBudget {
   writerAllowance() {
     return Math.max(0, Math.min(PI_CONTEXT_BUDGET.writerMs, this.remainingWork() - PI_CONTEXT_BUDGET.completionReserveMs));
   }
+  hydrationAllowance() {
+    return Math.max(0, Math.min(this.remainingWork() - PI_CONTEXT_BUDGET.completionReserveMs, this.remainingOutcome() - PI_CONTEXT_BUDGET.completionReserveMs));
+  }
   assertOutcome = () => {
     this.assertOwner();
     this.signal?.throwIfAborted();
@@ -35933,550 +35742,825 @@ function piPreparedStructureMismatch(payload, prepared, onImageTrim) {
   }
 }
 
-// src/pi-context-refusal.ts
-var ENTRY_TYPE = "magic-context-turn-refused";
-var RETRY_MESSAGE = "Magic Context could not safely prepare this turn; send your message again.";
-var MAX_UNSENDABLE_NONCES_PER_SESSION = 32;
-var receiptMaps = new Set;
-function clearPiContextReceipt(sessionId) {
-  for (const receipts of receiptMaps)
-    receipts.delete(sessionId);
-}
-function createPiContextOwnershipGuards(operations, key, active, budget, owner) {
-  const sideTurn = budget.sideTurn;
-  const signal = budget.signal;
-  const isOwned = () => sideTurn ? operations.get(key) === owner : operations.get(key) === active && active.pass === budget;
-  const isCurrent = () => isOwned() && (sideTurn || !active.ended);
-  const assertOwner = () => {
-    if (!isCurrent())
-      throw new PiContextSupersededError("Pi context pass superseded: no longer valid for this operation", active.ended ? "agent_end" : operations.get(key) !== (sideTurn ? owner : active) ? "operation replacement or cache eviction" : "newer context pass");
-    signal?.throwIfAborted();
+// src/pi-lkg.ts
+var piLkgSessionStates = new Map;
+function completedProviderUsage(message) {
+  if (!isRecord(message) || message.role !== "assistant" || !["stop", "length", "toolUse"].includes(String(message.stopReason)) || typeof message.provider !== "string" || !message.provider || typeof message.model !== "string" || !message.model || typeof message.timestamp !== "number" || !Number.isFinite(message.timestamp) || !isRecord(message.usage))
+    return;
+  const usage = message.usage;
+  const counts = [usage.input, usage.cacheRead, usage.cacheWrite];
+  if (!counts.every((count) => typeof count === "number" && Number.isSafeInteger(count) && count >= 0))
+    return;
+  let inputTokens = usage.input + usage.cacheRead + usage.cacheWrite;
+  if (typeof usage.totalTokens === "number" && Number.isSafeInteger(usage.totalTokens) && typeof usage.output === "number" && Number.isSafeInteger(usage.output) && usage.output >= 0) {
+    inputTokens = Math.max(inputTokens, usage.totalTokens - usage.output);
+  }
+  if (!Number.isSafeInteger(inputTokens) || inputTokens <= 0)
+    return;
+  return {
+    inputTokens,
+    modelKey: `${message.provider}/${message.model}`,
+    providerKey: message.provider,
+    timestamp: message.timestamp,
+    signature: JSON.stringify([
+      message.provider,
+      message.model,
+      message.timestamp,
+      message.stopReason,
+      usage.input,
+      usage.cacheRead,
+      usage.cacheWrite,
+      usage.output,
+      usage.totalTokens
+    ])
   };
-  return { isOwned, isCurrent, assertOwner };
 }
-function releasePiOperationPayloads(operation) {
-  operation.inputKeys = undefined;
-  operation.inputMessages = undefined;
-  operation.inputBranch = undefined;
-  operation.dispatchFields = undefined;
-  operation.managedSignature = undefined;
-  operation.preparedStructure = undefined;
+function notePiLkgProviderUsage(sessionId, parentInputId, message) {
+  try {
+    const state = piLkgSessionStates.get(sessionId);
+    const request = state?.capturedRequest;
+    const usage = completedProviderUsage(message);
+    if (!request || request.usage || !usage || request.captureSequence !== state?.captureSequence || !parentInputId || parentInputId.startsWith("pi-lkg-unmapped:") || parentInputId !== request.inputs.at(-1)?.id || usage.timestamp < request.capturedAt || usage.modelKey !== request.modelKey || usage.providerKey !== request.providerKey)
+      return false;
+    request.usage = {
+      signature: usage.signature,
+      inputTokens: usage.inputTokens
+    };
+    if (state)
+      state.measuredRequest = { ...request, usage: request.usage };
+    return true;
+  } catch {
+    return false;
+  }
 }
-function operationKey(ctx) {
-  return ctx.sessionManager?.getSessionId?.() ?? ctx.sessionManager ?? "no-session";
+function clearPiLkgSessionState(sessionId) {
+  const state = piLkgSessionStates.get(sessionId);
+  if (state)
+    state.captureSequence += 1;
+  piLkgSessionStates.delete(sessionId);
+  clearLkgFenceProcessState(sessionId);
 }
-function messageKey(message) {
-  if (!message || typeof message !== "object")
-    return;
-  const { role, timestamp } = message;
-  return typeof role === "string" && typeof timestamp === "number" ? `${role}:${timestamp}` : undefined;
+
+class PiLkgUncapturable extends Error {
+  reason;
+  constructor(reason, message, cause) {
+    super(message, { cause });
+    this.reason = reason;
+  }
 }
-function endBelongsToEarlierRun(operation, event) {
-  if (!operation.pass || operation.dispatched)
+function isTransientPiStorageError(error) {
+  if (!error || typeof error !== "object")
     return false;
-  const end = event;
-  if (end?.willContinue === true)
+  const candidate = error;
+  if (candidate.code === "SQLITE_BUSY" || candidate.code === "SQLITE_LOCKED" || candidate.code === "SQLITE_BUSY_SNAPSHOT") {
     return true;
-  if (!operation.inputKeys || !Array.isArray(end?.messages))
-    return false;
-  const ended = new Set;
-  for (const message of end.messages) {
-    const key = messageKey(message);
-    if (key)
-      ended.add(key);
   }
-  if (ended.size === 0)
-    return false;
-  return operation.inputKeys.some((key) => !ended.has(key));
+  return typeof candidate.message === "string" && /database is locked|database table is locked|sqlite_(busy|locked)/i.test(candidate.message);
 }
-function messageSnapshots(messages) {
-  const snapshots = [];
-  for (const message of messages) {
-    const id = messageKey(message);
-    const fields = lkgContentFields(message);
-    if (!id || !fields)
+function reconcilePiLkgEntryIds(resolved, alignedProjection) {
+  if (!resolved || !alignedProjection || resolved.length === 0)
+    return resolved;
+  const result = [...resolved];
+  const anchors = [];
+  let projectionCursor = 0;
+  for (let messageIndex = 0;messageIndex < resolved.length; messageIndex += 1) {
+    const id = resolved[messageIndex];
+    if (typeof id !== "string")
+      continue;
+    let projectionIndex = -1;
+    for (let index = projectionCursor;index < alignedProjection.length; index += 1) {
+      if (alignedProjection[index] === id) {
+        projectionIndex = index;
+        break;
+      }
+    }
+    if (projectionIndex < 0)
+      return resolved;
+    anchors.push({ messageIndex, projectionIndex });
+    projectionCursor = projectionIndex + 1;
+  }
+  if (anchors.length === 0)
+    return resolved;
+  const fillEqualSpan = (messageStart, messageEnd, projectionStart, projectionEnd) => {
+    if (messageEnd - messageStart !== projectionEnd - projectionStart)
       return;
-    snapshots.push({ id, fields });
+    for (let offset = 0;offset < messageEnd - messageStart; offset += 1) {
+      result[messageStart + offset] ??= alignedProjection[projectionStart + offset];
+    }
+  };
+  let previousMessageIndex = -1;
+  let previousProjectionIndex = -1;
+  for (const anchor of anchors) {
+    fillEqualSpan(previousMessageIndex + 1, anchor.messageIndex, previousProjectionIndex + 1, anchor.projectionIndex);
+    previousMessageIndex = anchor.messageIndex;
+    previousProjectionIndex = anchor.projectionIndex;
   }
-  return snapshots.length ? snapshots : undefined;
+  fillEqualSpan(previousMessageIndex + 1, resolved.length, previousProjectionIndex + 1, alignedProjection.length);
+  return result;
 }
-function inputBranch(ctx, inputs) {
-  try {
-    const branch = ctx.sessionManager.getBranch();
-    const entries = branch.filter((entry) => entry.type === "message" || entry.type === "custom_message");
-    const anchorId = entries.at(-1)?.id;
-    const native = messageSnapshots(entries.map((entry) => {
-      if (entry.type === "message")
-        return entry.message;
-      const attribution = entry.attribution;
-      const timestamp = new Date(entry.timestamp).getTime();
-      if (!Number.isFinite(timestamp) || !entry.customType || typeof entry.content !== "string" && !Array.isArray(entry.content) || attribution !== undefined && attribution !== "agent" && attribution !== "user")
-        return;
-      return {
-        role: "custom",
-        customType: entry.customType,
-        content: entry.content,
-        display: entry.display,
-        details: entry.details,
-        attribution,
-        timestamp
-      };
-    }));
-    inputs ??= native;
-    if (!anchorId || !native || !inputs || native.length > inputs.length || exactReusablePrefix(native, inputs) !== native.length)
-      return;
-    return {
-      anchorId,
-      anchorIndex: native.length - 1,
-      entryIds: entries.map((entry) => entry.id),
-      messages: inputs
-    };
-  } catch {
-    return;
+function piStorageErrorReason(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  if (error && typeof error === "object") {
+    const code = error.code;
+    if (code === "SQLITE_BUSY" || code === "SQLITE_LOCKED" || code === "SQLITE_BUSY_SNAPSHOT") {
+      return code;
+    }
+  }
+  if (/database is locked|database table is locked/i.test(message)) {
+    return "SQLITE_BUSY_OR_LOCKED";
+  }
+  if (error && typeof error === "object") {
+    const code = error.code;
+    if (typeof code === "string" && code.length > 0)
+      return code;
   }
+  return message;
 }
-function dispatchedEndBelongsToEarlierRun(operation, event, ctx) {
-  if (!operation.dispatched || !operation.started || !operation.ready || !operation.pass?.completed || operation.refused || operation.pass.abandoned || !operation.inputBranch)
-    return false;
-  try {
-    if (ctx.isIdle() !== false)
-      return false;
-    const current = inputBranch(ctx);
-    const prepared = operation.inputBranch;
-    if (!current || current.entryIds[prepared.anchorIndex] !== prepared.anchorId || current.messages.length !== prepared.messages.length || exactReusablePrefix(current.messages, prepared.messages) !== prepared.messages.length)
-      return false;
-    const messages = event?.messages;
-    const ended = Array.isArray(messages) ? messageSnapshots(messages) : undefined;
-    return !!(ended && ended.length <= prepared.anchorIndex && ended.length < prepared.messages.length && exactReusablePrefix(prepared.messages, ended) === ended.length);
-  } catch {
+function plainJsonFields(value) {
+  const fields = [];
+  const seen = new WeakSet;
+  const visit = (child) => {
+    if (child === null)
+      fields.push(LKG_SNAPSHOT_NULL);
+    else if (typeof child === "string")
+      fields.push(LKG_SNAPSHOT_STRING, child);
+    else if (typeof child === "number")
+      fields.push(LKG_SNAPSHOT_NUMBER, child);
+    else if (typeof child === "boolean")
+      fields.push(LKG_SNAPSHOT_BOOLEAN, child);
+    else if (typeof child !== "object")
+      fields.push(LKG_SNAPSHOT_UNDEFINED);
+    else {
+      if (seen.has(child))
+        return false;
+      const array = Array.isArray(child);
+      const prototype = Object.getPrototypeOf(child);
+      if (!array && prototype !== Object.prototype && prototype !== null || "toJSON" in child)
+        return false;
+      const keys = Object.keys(child);
+      if (array && keys.length !== child.length)
+        return false;
+      seen.add(child);
+      fields.push(array ? LKG_SNAPSHOT_ARRAY : LKG_SNAPSHOT_OBJECT);
+      const countIndex = fields.length;
+      fields.push(array ? child.length : 0);
+      let count = 0;
+      for (const key of keys) {
+        const descriptor = Object.getOwnPropertyDescriptor(child, key);
+        if (!descriptor || !("value" in descriptor) || array && key !== String(count))
+          return false;
+        const entry = descriptor.value;
+        if (!array && (entry === undefined || typeof entry === "function" || typeof entry === "symbol"))
+          continue;
+        count++;
+        if (!array)
+          fields.push(LKG_SNAPSHOT_KEY, key);
+        if (!visit(entry))
+          return false;
+      }
+      if (!array)
+        fields[countIndex] = count;
+      seen.delete(child);
+    }
+    return true;
+  };
+  if (!visit(value))
+    return null;
+  const normalized = contentSnapshotValue(value);
+  return normalized === value ? fields : lkgContentFields(normalized);
+}
+function plainOutputFields(messages) {
+  if ("toJSON" in messages || Object.keys(messages).length !== messages.length)
+    return null;
+  const outputs = [];
+  for (let index = 0;index < messages.length; index++) {
+    const descriptor = Object.getOwnPropertyDescriptor(messages, String(index));
+    if (!descriptor || !("value" in descriptor))
+      return null;
+    const fields = plainJsonFields(descriptor.value);
+    if (!fields)
+      return null;
+    outputs.push({ id: String(index), fields });
+  }
+  return outputs;
+}
+function snapshotInputs(messages, entryIds, omitsBookkeeping) {
+  if (!entryIds || entryIds.length !== messages.length) {
+    return { inputs: [], failure: "lkg_entry_ids_unavailable" };
+  }
+  const firstStableIndex = entryIds.findIndex((id) => typeof id === "string" && id.length > 0);
+  if (firstStableIndex < 0) {
+    return { inputs: [], failure: "lkg_entry_ids_unavailable" };
+  }
+  const inputs = [];
+  const seen = new Set;
+  for (let index = 0;index < entryIds.length; index += 1) {
+    const fields = lkgContentFields(omitsBookkeeping ? piProviderInput(messages[index]) : messages[index]);
+    if (!fields)
+      return { inputs: [], failure: "lkg_content_snapshot_failed" };
+    const id = entryIds[index] || `pi-lkg-unmapped:${lkgContentDigestFromFields(fields)}`;
+    if (seen.has(id))
+      return { inputs: [], failure: "lkg_duplicate_entry_id" };
+    seen.add(id);
+    inputs.push({
+      id,
+      messageIndex: index,
+      fields,
+      providerUsageSignature: completedProviderUsage(messages[index])?.signature
+    });
+  }
+  return { inputs, failure: null };
+}
+var bookkeepingOmittingApis = new Set([
+  "anthropic-messages",
+  "google-generative-ai",
+  "openai-completions",
+  "openai-responses",
+  "openai-codex-responses"
+]);
+function omitsRootBookkeeping(args) {
+  if (args.transport != null)
     return false;
+  let api = args.apiKey;
+  if (api === undefined) {
+    const apis = new Set(args.messages.flatMap((message) => {
+      const value = message;
+      return value?.role === "assistant" && typeof value.api === "string" ? [value.api] : [];
+    }));
+    if (apis.size === 1)
+      api = [...apis][0];
   }
+  return typeof api === "string" && bookkeepingOmittingApis.has(api);
 }
-function inputMessageKeys(event) {
-  try {
-    const messages = event.messages;
-    if (!Array.isArray(messages))
+function piProviderInput(message) {
+  if (!message || typeof message !== "object" || Array.isArray(message))
+    return message;
+  const descriptors = Object.getOwnPropertyDescriptors(message);
+  delete descriptors.completedAt;
+  delete descriptors.contextSnapshot;
+  return Object.create(Object.getPrototypeOf(message), descriptors);
+}
+function restorePiLkgInputForFit(snapshot, branchEntries) {
+  if (!snapshot || snapshot.preparationFailure || !branchEntries || !snapshot.inputs.length)
+    return;
+  const byId = new Map;
+  for (const value of branchEntries) {
+    const entry = value;
+    if (entry?.type !== "message" || typeof entry.id !== "string")
+      continue;
+    if (byId.has(entry.id))
       return;
-    const keys = [];
-    for (const message of messages) {
-      const key = messageKey(message);
-      if (key)
-        keys.push(key);
-    }
-    return keys;
+    byId.set(entry.id, entry.message);
+  }
+  const input = [];
+  for (const saved of snapshot.inputs) {
+    if (!byId.has(saved.id))
+      return;
+    const message = byId.get(saved.id);
+    if (!message || typeof message !== "object" || Array.isArray(message) || Object.hasOwn(message, "parts"))
+      return;
+    const fields = plainJsonFields(snapshot.omitsBookkeeping ? piProviderInput(message) : message);
+    if (!fields || fields.length !== saved.fields.length || fields.some((field, i) => field !== saved.fields[i]))
+      return;
+    input.push(message);
+  }
+  try {
+    return structuredClone(input);
   } catch {
     return;
   }
 }
-function registerPiGuardedContext(pi, handler, options = {}) {
-  const operations = new Map;
-  const sideSessions = new Map;
-  receiptMaps.add(operations);
-  const newOperation = () => ({
-    retainedAfterEnd: false,
-    dispatched: false,
-    started: false,
-    ready: false,
-    refused: false,
-    ended: false
-  });
-  const lifecycle = new Map;
-  receiptMaps.add(lifecycle);
-  const lifecycleCounts = (key) => {
-    let counts = lifecycle.get(key);
-    if (!counts) {
-      counts = { starts: 0, ends: 0 };
-      lifecycle.set(key, counts);
+function extendsMeasuredRequest(measuredJson, nextJson) {
+  return measuredJson === nextJson || measuredJson.length > 2 && nextJson.startsWith(`${measuredJson.slice(0, -1)},`);
+}
+function createPiLkgCoordinator(db, scheduleCapture = (capture) => setImmediate(capture), onCaptureTiming) {
+  registerLkgPersistence(createDbLkgPersistence(db));
+  const stateFor = (sessionId) => {
+    let state = piLkgSessionStates.get(sessionId);
+    if (!state) {
+      state = {
+        captureSequence: 0,
+        syncCaptureRequired: false,
+        acceptedInputs: null,
+        acceptedSlot: null,
+        outputSnapshot: null
+      };
+      piLkgSessionStates.set(sessionId, state);
     }
-    return counts;
+    return state;
   };
-  const fenceEnabled = resolvePiHarnessKind() === "omp";
-  const unsendableNonces = new Map;
-  receiptMaps.add(unsendableNonces);
-  const structureWarnings = new Map;
-  receiptMaps.add(structureWarnings);
-  const imageTrimNotices = new Map;
-  receiptMaps.add(imageTrimNotices);
-  const refuse = (ctx, budget, reason, isCurrent) => {
-    if (!isCurrent()) {
-      log2(`[magic-context][pi] DISCARDED CONTEXT RESULT ${budget.diagnostic()}`, reason);
-      return;
-    }
-    budget.abandoned = true;
-    budget.recovery = budget.recovery === "not attempted" ? "no managed result; refused" : budget.recovery;
-    const identityConflict = findPiTagIdentityConflict2(reason);
-    const message = identityConflict ? `${identityConflict.message}. ${budget.diagnostic()}` : `${RETRY_MESSAGE} ${budget.diagnostic()} (${reason instanceof Error ? reason.message : String(reason)})`;
-    log2("[magic-context][pi] CONTEXT REFUSED", message);
-    try {
-      ctx.ui?.notify(message, "error");
-    } catch (error) {
-      log2("[magic-context][pi] refusal notice failed", error);
-    }
-    try {
-      pi.appendEntry(ENTRY_TYPE, { message });
-    } catch (error) {
-      log2("[magic-context][pi] refusal entry failed", error);
-    } finally {
-      if (!budget.sideTurn)
-        ctx.abort();
+  const recoveryFor = (snapshot) => {
+    const state = stateFor(snapshot.sessionId);
+    const prefix = state.recoveryPrefix;
+    if (!prefix) {
+      const slot = getSlot(snapshot.sessionId);
+      return lkgRecoveryFenceUnclean(snapshot.sessionId) || slot && lkgFenceRequiresRebuild(snapshot.sessionId, state.acceptedInputs ? slot : loadPersistedLkgSlot(db, snapshot.sessionId) ?? slot, !!state.acceptedInputs) ? { rebuildReason: "lkg_restart_rebuild" } : {};
     }
-    try {
-      options.onRefusal?.(ctx, budget, message, isCurrent);
-    } catch (error) {
-      log2("[magic-context][pi] refusal diagnostic failed", error);
+    const durableSlot = loadPersistedLkgSlot(db, snapshot.sessionId) ?? getSlot(snapshot.sessionId);
+    if (snapshot.preparationFailure || !durableSlot || !ownsLkgDirtyFence(snapshot.sessionId, prefix.fenceRevision) || prefix.modelKey !== snapshot.modelKey || prefix.providerKey !== snapshot.providerKey || JSON.stringify(prefix.systemEntries) !== JSON.stringify(snapshot.systemEntries) || exactReusablePrefix(snapshot.inputs, prefix.inputs) !== prefix.inputs.length)
+      return { rebuildReason: "lkg_recovery_input_rebuild" };
+    return { prefix };
+  };
+  const recoveryEntryIds = (snapshot) => {
+    const anchor = snapshot.replayAnchorInputIndex;
+    const slot = getSlot(snapshot.sessionId);
+    if (snapshot.preparationFailure || anchor === null || !slot?.piOutputEntryIds)
+      throw new PiLkgUncapturable("lkg_output_mapping_unavailable", "Cannot retain recovered output ownership");
+    const surviving = new Set(snapshot.inputs.map((input) => input.id));
+    return [
+      ...slot.piOutputEntryIds.filter((id) => id === null || surviving.has(id)),
+      ...snapshot.inputs.slice(anchor + 1).map((input) => input.id)
+    ];
+  };
+  const noteRecovery = (snapshot, messages, entryIds) => {
+    const state = stateFor(snapshot.sessionId);
+    const slot = getSlot(snapshot.sessionId);
+    if (!slot)
+      throw new PiLkgUncapturable("lkg_miss", "Cannot retain recovery without a saved request");
+    const anchor = snapshot.replayAnchorInputIndex;
+    if (anchor === null)
+      throw new PiLkgUncapturable("lkg_miss", "Cannot retain recovery without an input anchor");
+    const outputEntryIds = entryIds ?? recoveryEntryIds(snapshot);
+    if (outputEntryIds.length !== messages.length)
+      throw new PiLkgUncapturable("lkg_output_mapping_unavailable", "Recovered output ownership does not match the served array");
+    state.recoveryPrefix = {
+      fenceRevision: markLkgRecoveryDirty({
+        sessionId: snapshot.sessionId,
+        slot,
+        processLocalProof: !!state.acceptedInputs,
+        ownDirtyRevision: state.recoveryPrefix?.fenceRevision
+      }),
+      modelKey: snapshot.modelKey,
+      providerKey: snapshot.providerKey,
+      systemEntries: snapshot.systemEntries,
+      inputs: snapshot.inputs,
+      json: JSON.stringify(messages),
+      outputEntryIds,
+      untaggedInputIds: new Set([
+        ...state.recoveryPrefix?.untaggedInputIds ?? [],
+        ...snapshot.inputs.slice(anchor + 1).map((input) => input.id)
+      ])
+    };
+  };
+  const beginPass = (args) => {
+    const omitsBookkeeping = omitsRootBookkeeping(args);
+    const snapped = snapshotInputs(args.messages, args.entryIds, omitsBookkeeping);
+    const slot = getSlot(args.sessionId);
+    if (snapped.failure || !slot) {
+      return {
+        omitsBookkeeping,
+        sessionId: args.sessionId,
+        inputs: snapped.inputs,
+        preparationFailure: snapped.failure,
+        replayFailure: snapped.failure ?? "lkg_miss",
+        replayAnchorInputIndex: null,
+        pristineTail: null,
+        modelKey: args.modelKey,
+        providerKey: args.providerKey
+      };
+    }
+    const stableAnchorIndex = snapped.inputs.findIndex((input) => input.id === slot.lastInputMessageId);
+    if (stableAnchorIndex < 0) {
+      return {
+        omitsBookkeeping,
+        sessionId: args.sessionId,
+        inputs: snapped.inputs,
+        preparationFailure: null,
+        replayFailure: "lkg_invalidated_reshape",
+        replayAnchorInputIndex: null,
+        pristineTail: null,
+        modelKey: args.modelKey,
+        providerKey: args.providerKey
+      };
+    }
+    const messageAnchorIndex = snapped.inputs[stableAnchorIndex]?.messageIndex;
+    if (messageAnchorIndex === undefined) {
+      return {
+        omitsBookkeeping,
+        sessionId: args.sessionId,
+        inputs: snapped.inputs,
+        preparationFailure: null,
+        replayFailure: "lkg_invalidated_reshape",
+        replayAnchorInputIndex: null,
+        pristineTail: null,
+        modelKey: args.modelKey,
+        providerKey: args.providerKey
+      };
+    }
+    try {
+      return {
+        omitsBookkeeping,
+        sessionId: args.sessionId,
+        inputs: snapped.inputs,
+        preparationFailure: null,
+        replayFailure: null,
+        replayAnchorInputIndex: stableAnchorIndex,
+        pristineTail: structuredClone(args.messages.slice(messageAnchorIndex + 1)),
+        modelKey: args.modelKey,
+        providerKey: args.providerKey
+      };
+    } catch {
+      return {
+        omitsBookkeeping,
+        sessionId: args.sessionId,
+        inputs: snapped.inputs,
+        preparationFailure: null,
+        replayFailure: "lkg_tail_snapshot_failed",
+        replayAnchorInputIndex: null,
+        pristineTail: null,
+        modelKey: args.modelKey,
+        providerKey: args.providerKey
+      };
     }
   };
-  if (fenceEnabled) {
-    pi.on("agent_start", (_event, ctx) => {
-      const key = operationKey(ctx);
-      lifecycleCounts(key).starts++;
-      const pending = operations.get(key);
-      const active = pending && !pending.started && !pending.ended ? pending : newOperation();
-      active.started = true;
-      operations.set(key, active);
-    });
-    pi.on("agent_end", (event, ctx) => {
-      const key = operationKey(ctx);
-      const lifecycleSeen = lifecycleCounts(key);
-      lifecycleSeen.ends = Math.min(lifecycleSeen.ends + 1, lifecycleSeen.starts);
-      const counts = sideSessions.get(key);
-      if (counts)
-        log2(`[magic-context][pi] OMP context counts session=${String(key)} side_contexts=${counts.sides} context_passes=${counts.contexts} dispatch_fence=${counts.sides ? "latched off" : "on"}`);
-      const operation = operations.get(key);
-      if (operation) {
-        if (endBelongsToEarlierRun(operation, event) || lifecycleSeen.starts > lifecycleSeen.ends && dispatchedEndBelongsToEarlierRun(operation, event, ctx)) {
-          if (operation.dispatched)
-            operation.retainedAfterEnd = true;
-          if (lifecycleSeen.starts <= lifecycleSeen.ends)
-            operation.started = false;
-          log2(`[magic-context][pi] agent_end attributed to an earlier run; keeping the latest context pass session=${String(key)} ${operation.pass?.diagnostic() ?? ""}`);
-          return;
-        }
-        operation.ended = true;
-        operation.ready = false;
-        releasePiOperationPayloads(operation);
-      }
-    });
-    pi.on("before_provider_request", (event, ctx) => {
-      const cancelledOperation = operations.get(operationKey(ctx));
-      const signal = ctx.signal;
-      if (signal ? signal.aborted : cancelledOperation?.pass?.isCancelled()) {
-        cancelledOperation?.pass?.cancel();
-        if (cancelledOperation)
-          cancelledOperation.ready = false;
+  const measuredPrefixFor = (snapshot, slot, parentOf) => {
+    const request = stateFor(snapshot.sessionId).measuredRequest;
+    const anchor = snapshot.replayAnchorInputIndex;
+    if (!request?.usage || !slot || !parentOf || anchor === null || !snapshot.pristineTail || !extendsMeasuredRequest(request.jsonPrefix, slot.jsonPrefix) || !request.modelKey || request.modelKey !== slot.modelKey || request.modelKey !== snapshot.modelKey || request.providerKey !== slot.providerKey || request.providerKey !== snapshot.providerKey || snapshot.inputs[anchor]?.id !== slot.lastInputMessageId || exactReusablePrefix(snapshot.inputs, request.inputs) !== request.inputs.length)
+      return;
+    const assistant = snapshot.inputs[request.inputs.length];
+    const assistantId = assistant?.id;
+    if (!assistantId || assistantId.startsWith("pi-lkg-unmapped:") || assistant.providerUsageSignature !== request.usage.signature)
+      return;
+    let appendedMessages;
+    try {
+      if (parentOf(assistantId) !== request.inputs.at(-1)?.id)
         return;
-      }
-      if (options.compactionOff?.(ctx))
+      const measuredLength = JSON.parse(request.jsonPrefix).length;
+      const prefix = JSON.parse(slot.jsonPrefix);
+      const replyId = measuredLength < prefix.length ? slot.piOutputEntryIds?.[measuredLength] : snapshot.inputs[anchor + 1]?.id;
+      if (replyId !== assistantId)
         return;
-      const payload = event.payload;
-      const key = operationKey(ctx);
-      if (sideSessions.get(key)?.sides)
+      appendedMessages = [
+        ...prefix.slice(measuredLength),
+        ...snapshot.pristineTail
+      ];
+      if (completedProviderUsage(appendedMessages[0])?.signature !== request.usage.signature)
         return;
-      const nonces = unsendableNonces.get(key);
-      if (nonces?.size) {
-        const serializedPayload = JSON.stringify(payload);
-        if (serializedPayload && [...nonces].some((nonce) => serializedPayload.includes(nonce))) {
-          const budget = new PiContextBudget;
-          budget.stage = "provider dispatch";
-          refuse(ctx, budget, "superseded context fallback is not a managed request", () => true);
-          return;
-        }
+    } catch {
+      return;
+    }
+    return {
+      modelKey: piModelRefToCanonical(request.modelKey).toLowerCase(),
+      inputTokens: request.usage.inputTokens,
+      envelopeSignature: request.envelopeSignature,
+      appendedMessages,
+      previousMessages: JSON.parse(request.jsonPrefix)
+    };
+  };
+  const replay = (snapshot, parentOf) => {
+    if (snapshot.replayFailure) {
+      if (snapshot.replayFailure === "lkg_invalidated_reshape") {
+        dropSlot(snapshot.sessionId, snapshot.replayFailure);
+        stateFor(snapshot.sessionId).acceptedInputs = null;
       }
-      if (isOmpAdvisorRequest(payload))
-        return;
-      let operation = operations.get(key);
-      if (!operation) {
-        operation = newOperation();
-        operations.set(key, operation);
+      return { ok: false, reason: snapshot.replayFailure };
+    }
+    if (snapshot.replayAnchorInputIndex === null || snapshot.pristineTail === null) {
+      return { ok: false, reason: "lkg_miss" };
+    }
+    const slot = getSlot(snapshot.sessionId);
+    const start = slot?.inputIdSeq.indexOf(snapshot.inputs[0]?.id ?? "") ?? -1;
+    if (slot && start > 0) {
+      const ownership = slot.piOutputEntryIds;
+      if (!ownership)
+        return { ok: false, reason: "lkg_output_mapping_unavailable" };
+      if (slot.modelKey !== snapshot.modelKey || slot.providerKey !== snapshot.providerKey)
+        return { ok: false, reason: "lkg_model_mismatch" };
+      const surviving = snapshot.inputs.slice(0, snapshot.replayAnchorInputIndex + 1);
+      if (surviving.length !== slot.inputIdSeq.length - start || surviving.some((input, index) => input.id !== slot.inputIdSeq[start + index]))
+        return { ok: false, reason: "lkg_invalidated_reshape" };
+      if (surviving.some((input, index) => !lkgFieldsMatchDigest(input.fields, slot.inputContentDigests[start + index])))
+        return { ok: false, reason: "lkg_content_mismatch" };
+      const removed = new Set(slot.inputIdSeq.slice(0, start));
+      const prefix = JSON.parse(slot.jsonPrefix);
+      const measuredPrefix = measuredPrefixFor(snapshot, slot, parentOf);
+      return {
+        ok: true,
+        ...measuredPrefix ? { measuredPrefix } : {},
+        messages: [
+          ...prefix.filter((message, index) => isPiSystemEntry(message) || ownership[index] === null || !removed.has(ownership[index] ?? "")),
+          ...snapshot.pristineTail
+        ]
+      };
+    }
+    const prefixInputs = snapshot.inputs.slice(0, snapshot.replayAnchorInputIndex + 1);
+    const entry = {
+      pristineTail: snapshot.pristineTail,
+      entryInputIds: snapshot.inputs.map((input) => input.id),
+      entryContentDigests: prefixInputs.map((input) => lkgContentDigestFromFields(input.fields)),
+      ...slot?.inputContentDigests.some(isLegacyLkgDigest) ? {
+        entryLegacyContentDigests: prefixInputs.map((input) => legacyLkgDigestFromFields(input.fields))
+      } : {},
+      anchorIndex: snapshot.replayAnchorInputIndex
+    };
+    const result = replayLkg({
+      sessionId: snapshot.sessionId,
+      messages: [],
+      modelKey: snapshot.modelKey,
+      providerKey: snapshot.providerKey,
+      entry,
+      skipSeamValidation: true
+    });
+    if (!result.ok)
+      stateFor(snapshot.sessionId).acceptedInputs = null;
+    const measuredPrefix = result.ok ? measuredPrefixFor(snapshot, slot, parentOf) : undefined;
+    return result.ok && measuredPrefix ? { ...result, measuredPrefix } : result;
+  };
+  const captureAppliedPass = (args) => {
+    args.assertCurrentPass?.();
+    const { snapshot } = args;
+    if (snapshot.preparationFailure || snapshot.inputs.length === 0) {
+      if (args.publishServedNumbers)
+        throw new PiLkgUncapturable(snapshot.preparationFailure ?? "lkg_inputs_empty", "Pi LKG input preparation failed");
+      return;
+    }
+    const state = stateFor(snapshot.sessionId);
+    let jsonPrefix;
+    try {
+      const detachedOutputs = plainOutputFields(args.outputMessages);
+      const plainOutput = detachedOutputs !== null;
+      const outputs = detachedOutputs ?? [];
+      const priorOutput = plainOutput ? state.outputSnapshot : null;
+      const prefix = exactReusablePrefix(outputs, priorOutput?.inputs ?? null);
+      const jsonMessages = [
+        ...priorOutput?.jsonMessages.slice(0, prefix) ?? [],
+        ...plainOutput ? args.outputMessages.slice(prefix).map((message) => JSON.stringify(message) ?? "null") : []
+      ];
+      jsonPrefix = !plainOutput ? JSON.stringify(args.outputMessages) : priorOutput && prefix === outputs.length && prefix === priorOutput.inputs.length ? priorOutput.json : `[${jsonMessages.join(",")}]`;
+      args.assertCurrentPass?.();
+      state.outputSnapshot = plainOutput ? {
+        inputs: outputs,
+        jsonMessages,
+        json: jsonPrefix
+      } : null;
+    } catch (error) {
+      args.assertCurrentPass?.();
+      if (args.publishServedNumbers)
+        throw new PiLkgUncapturable("lkg_output_serialize_failed", error instanceof Error ? error.message : String(error), error);
+      dropSlot(snapshot.sessionId, "lkg_snapshot_serialize_failed");
+      const failedState = stateFor(snapshot.sessionId);
+      failedState.syncCaptureRequired = true;
+      failedState.acceptedInputs = null;
+      sessionLog2(snapshot.sessionId, "LKG SNAPSHOT PREPARATION FAILED; forcing synchronous capture on the next applied pass:", error);
+      return;
+    }
+    const idsByDigest = new Map;
+    if (!args.outputEntryIds)
+      for (const input of snapshot.inputs) {
+        const digest = lkgContentDigestFromFields(input.fields);
+        idsByDigest.set(digest, idsByDigest.has(digest) ? undefined : input.id);
       }
-      const active = operation;
-      const isCurrent = () => operations.get(key) === active;
-      const capture = isOmpUnmanagedCaptureRequest(payload);
-      const budget = (capture ? undefined : active.pass) ?? new PiContextBudget;
-      if (active.refused && active.pass === budget) {
-        ctx.abort();
+    const inferredIds = args.outputEntryIds ?? args.outputMessages.map((message) => {
+      const fields = lkgContentFields(message);
+      if (!fields)
+        return;
+      const digest = lkgContentDigestFromFields(fields);
+      return idsByDigest.get(digest);
+    });
+    const outputIds = args.outputEntryIds ?? inferredIds;
+    const inputIds = new Set(snapshot.inputs.map((input) => input.id));
+    const ownership = outputIds.length === args.outputMessages.length && outputIds.every((id) => id === null || typeof id === "string" && inputIds.has(id)) ? [...outputIds] : undefined;
+    args.assertCurrentPass?.();
+    state.captureSequence += 1;
+    const plan = {
+      sessionId: snapshot.sessionId,
+      inputs: snapshot.inputs,
+      jsonPrefix,
+      modelKey: snapshot.modelKey,
+      providerKey: snapshot.providerKey,
+      capturedAt: Date.now(),
+      captureSequence: state.captureSequence
+    };
+    const noteCapturedRequest = () => {
+      if (state.measuredRequest && (state.measuredRequest.modelKey !== plan.modelKey || state.measuredRequest.providerKey !== plan.providerKey || state.measuredRequest.envelopeSignature !== args.hostEnvelopeSignature || !extendsMeasuredRequest(state.measuredRequest.jsonPrefix, jsonPrefix)))
+        state.measuredRequest = undefined;
+      state.capturedRequest = args.hostEnvelopeSignature ? { ...plan, envelopeSignature: args.hostEnvelopeSignature } : undefined;
+    };
+    if (!args.publishServedNumbers)
+      noteCapturedRequest();
+    const livePrior = getSlot(snapshot.sessionId);
+    const unchanged = livePrior && livePrior.modelKey === plan.modelKey && livePrior.providerKey === plan.providerKey && livePrior.jsonPrefix === plan.jsonPrefix && livePrior.inputIdSeq.length === plan.inputs.length && exactReusablePrefix(plan.inputs, state.acceptedInputs) === plan.inputs.length && JSON.stringify(livePrior.piOutputEntryIds) === JSON.stringify(ownership);
+    args.assertCurrentPass?.();
+    if (unchanged && !state.syncCaptureRequired && !args.publishServedNumbers) {
+      const kept = {
+        ...livePrior,
+        capturedAt: plan.capturedAt,
+        captureSequence: plan.captureSequence
+      };
+      if (captureSlot(plan.sessionId, kept))
+        state.acceptedSlot = kept;
+      else
+        state.syncCaptureRequired = true;
+    }
+    if (args.cacheBusting && !unchanged) {
+      dropSlot(snapshot.sessionId, "lkg_cache_bust_pending_capture");
+    }
+    const commit = () => {
+      try {
+        args.assertCurrentPass?.();
+      } catch (error) {
+        if (args.publishServedNumbers)
+          throw error;
+        sessionLog2(plan.sessionId, "DISCARDED CONTEXT RESULT: queued LKG capture", error);
         return;
       }
-      let refusalOrigin;
+      if (plan.captureSequence !== state.captureSequence)
+        return;
+      const startedAt = performance.now();
+      let reusedPrefix = 0;
       try {
-        if (capture)
-          throw new Error("no context pass ran for OMP auto-learn capture; raw conversation refused");
-        if (!active.pass)
-          throw new Error("no context pass ran for this operation");
-        if (!budget.completed && (budget.abandoned || budget.elapsed() >= PI_CONTEXT_BUDGET.outcomeMs))
-          throw new PiContextDeadlineError(budget.diagnostic());
-        if (active.ended) {
-          refusalOrigin = "agent_end";
-          throw new Error("the run that owned the latest context pass has ended; no managed result for this request");
+        const inputIdSeq = plan.inputs.map((input) => input.id);
+        const prior = getSlot(plan.sessionId);
+        const digestPrior = prior ?? state.acceptedSlot;
+        const reusePrior = digestPrior?.inputContentSignatures !== undefined && digestPrior.modelKey === plan.modelKey && digestPrior.providerKey === plan.providerKey ? {
+          slot: digestPrior,
+          signatures: digestPrior.inputContentSignatures
+        } : undefined;
+        const reusablePrefix = reusePrior ? exactReusablePrefix(plan.inputs, state.acceptedInputs) : 0;
+        const inputContentSignatures = [
+          ...reusePrior ? reusePrior.signatures.slice(0, reusablePrefix) : [],
+          ...plan.inputs.slice(reusablePrefix).map((input) => signatureForFields(input.fields))
+        ];
+        const verifiedOwnPrefix = reusePrior && digestPrior === state.acceptedSlot && reusePrior.slot.inputIdSeq.length === reusePrior.signatures.length && reusePrior.signatures.length === reusePrior.slot.inputContentDigests.length;
+        let digestPrefix = 0;
+        if (verifiedOwnPrefix && reusePrior) {
+          while (digestPrefix < reusablePrefix && !isLegacyLkgDigest(reusePrior.slot.inputContentDigests[digestPrefix] ?? ""))
+            digestPrefix++;
         }
-        if (!budget.completed || !active.ready || active.refused || budget.abandoned)
-          throw new Error("context pass ran without a managed context receipt");
-        if (!piHasManagedSignature(payload, active.managedSignature))
-          throw new Error("provider request does not match this pass's managed dispatch (missing current receipt signature)");
-        const fields = piConversationFields(payload);
-        if (!fields)
-          throw new Error("provider conversation identity could not be established");
-        const body = payload;
-        const skipReason = active.preparedStructure ? active.preparedStructure.structuralSkipReason ?? (active.preparedStructure.api && body?.messages === undefined && Array.isArray(body?.input) && !active.preparedStructure.responsesMessages ? "provider selected Responses items without a matching history plan" : undefined) : "prepared history representation is not modeled";
-        if (skipReason && !structureWarnings.has(key)) {
-          structureWarnings.set(key, true);
-          log2(`[magic-context][pi] OMP structural comparison skipped: ${skipReason}; stale prepared requests are not detected on this pass; session=${String(key)}`);
+        const incremental = verifiedOwnPrefix && reusePrior ? {
+          reusedPrefix: digestPrefix,
+          digests: [
+            ...reusePrior.slot.inputContentDigests.slice(0, digestPrefix),
+            ...plan.inputs.slice(digestPrefix).map((input) => lkgContentDigestFromFields(input.fields))
+          ]
+        } : incrementalLkgContentDigests(plan.inputs.map((input, index) => ({
+          id: input.id,
+          signature: inputContentSignatures[index] ?? "",
+          fields: input.fields
+        })), reusePrior ? {
+          ids: reusePrior.slot.inputIdSeq.slice(0, reusablePrefix),
+          signatures: reusePrior.signatures.slice(0, reusablePrefix),
+          digests: reusePrior.slot.inputContentDigests.slice(0, reusablePrefix)
+        } : undefined);
+        reusedPrefix = incremental.reusedPrefix;
+        if (!args.publishServedNumbers && !state.syncCaptureRequired && prior && reusedPrefix === plan.inputs.length && prior.inputIdSeq.length === plan.inputs.length && prior.jsonPrefix === plan.jsonPrefix && JSON.stringify(prior.piOutputEntryIds) === JSON.stringify(ownership)) {
+          args.assertCurrentPass?.();
+          state.acceptedInputs = plan.inputs;
+          return;
         }
-        const structureMismatch = skipReason ? undefined : piPreparedStructureMismatch(payload, active.preparedStructure, (counts) => {
-          if (imageTrimNotices.has(key))
-            return;
-          imageTrimNotices.set(key, true);
-          log2(`[magic-context][pi] OMP provider images trimmed: planned=${counts.planned} actual=${counts.actual} trimmed=${counts.trimmed}`);
-        });
-        if (structureMismatch)
-          throw new Error(`provider request does not match this pass's managed dispatch (prepared turn structure); ${structureMismatch}`);
-        if (active.dispatched) {
-          if (!active.dispatchFields || exactReusablePrefix([{ id: "conversation", fields }], [{ id: "conversation", fields: active.dispatchFields }]) !== 1)
-            throw new Error("provider request does not match this pass's managed dispatch");
+        const slot = {
+          jsonPrefix: plan.jsonPrefix,
+          piOutputEntryIds: ownership,
+          inputIdSeq,
+          inputContentDigests: incremental.digests,
+          inputContentSignatures,
+          lastInputMessageId: plan.inputs.at(-1)?.id ?? "",
+          modelKey: plan.modelKey,
+          providerKey: plan.providerKey,
+          capturedAt: plan.capturedAt,
+          captureSequence: plan.captureSequence
+        };
+        args.assertCurrentPass?.();
+        if (args.publishServedNumbers) {
+          if (lkgSlotRejection(plan.sessionId, slot))
+            throw new PiLkgUncapturable("lkg_slot_rejected", "LKG slot rejected the Pi snapshot");
+          if (!saveLkgSlotToDb(db, plan.sessionId, slot, args.publishServedNumbers, {
+            rebuild: args.releaseRecovery,
+            retainDirtyRevision: !args.releaseRecovery ? state.recoveryPrefix?.fenceRevision : undefined
+          })) {
+            throw new Error("Pi LKG/served publication failed");
+          }
+          args.assertCurrentPass?.();
         }
-        if (!active.dispatched && active.inputMessages && (!active.inputBranch || active.inputBranch.anchorIndex < active.inputMessages.length - 1)) {
-          const previous = active.inputBranch;
-          const persisted = inputBranch(ctx, active.inputMessages);
-          if (!previous || persisted && persisted.anchorIndex > previous.anchorIndex && persisted.entryIds[previous.anchorIndex] === previous.anchorId)
-            active.inputBranch = persisted;
+        if (!captureSlot(plan.sessionId, slot)) {
+          throw new Error("LKG slot rejected the Pi snapshot");
         }
-        if (!active.dispatched)
-          active.dispatchFields = fields;
-        active.dispatched = true;
+        state.acceptedInputs = plan.inputs;
+        state.acceptedSlot = slot;
+        if (state.recoveryPrefix) {
+          state.recoveryPrefix = args.releaseRecovery ? undefined : {
+            ...state.recoveryPrefix,
+            inputs: plan.inputs,
+            json: plan.jsonPrefix,
+            outputEntryIds: ownership ?? state.recoveryPrefix.outputEntryIds
+          };
+        }
+        const persisted = args.publishServedNumbers ? true : saveLkgSlotToDb(db, plan.sessionId, slot, undefined, {
+          rebuild: args.releaseRecovery,
+          retainDirtyRevision: state.recoveryPrefix?.fenceRevision
+        });
+        state.syncCaptureRequired = !persisted;
+        if (args.publishServedNumbers)
+          noteCapturedRequest();
       } catch (error) {
-        if (signal ? signal.aborted : budget.isCancelled(error)) {
-          budget.cancel();
-          active.ready = false;
+        if (args.publishServedNumbers) {
+          state.syncCaptureRequired = true;
+          state.acceptedInputs = null;
+          throw error;
+        }
+        try {
+          args.assertCurrentPass?.();
+        } catch (discarded) {
+          sessionLog2(plan.sessionId, "DISCARDED CONTEXT RESULT: LKG publication", discarded);
           return;
         }
-        active.refused = true;
-        budget.stage = refusalOrigin ? `provider dispatch (origin=${refusalOrigin}; context stage=${budget.stage})` : "provider dispatch";
-        refuse(ctx, budget, error, isCurrent);
-      }
-    });
-  }
-  pi.registerEntryRenderer?.(ENTRY_TYPE, (entry) => new Text2(entry.data?.message ?? RETRY_MESSAGE, 0, 0));
-  pi.on("context", async (event, ctx) => {
-    if (fenceEnabled && isOmpDumpContext())
-      return { messages: event.messages };
-    const budget = new PiContextBudget;
-    budget.signal = event.signal ?? ctx.signal;
-    budget.sideTurn = fenceEnabled && isOmpSideContext(event);
-    const key = operationKey(ctx);
-    if (fenceEnabled) {
-      let counts = sideSessions.get(key);
-      if (!counts) {
-        counts = { contexts: 0, sides: 0 };
-        sideSessions.set(key, counts);
-      }
-      counts.contexts++;
-      if (budget.sideTurn && ++counts.sides === 1)
-        log2(`[magic-context][pi] OMP dispatch fence disabled for session ${String(key)}: verified ephemeral context; session-wide abort cannot distinguish provider operations (side_contexts=${counts.sides} context_passes=${counts.contexts})`);
-    }
-    const owner = budget.sideTurn ? operations.get(key) : undefined;
-    let operation = operations.get(key);
-    if (budget.sideTurn || !operation || operation.ended || !fenceEnabled) {
-      operation = newOperation();
-      if (!budget.sideTurn)
-        operations.set(key, operation);
-    }
-    const active = operation;
-    active.pass = budget;
-    releasePiOperationPayloads(active);
-    active.retainedAfterEnd = false;
-    active.dispatched = false;
-    active.ready = false;
-    active.refused = false;
-    const { isOwned, isCurrent, assertOwner } = createPiContextOwnershipGuards(operations, key, active, budget, owner);
-    budget.assertOwner = assertOwner;
-    try {
-      budget.assertOutcome();
-      let inputs;
-      if (fenceEnabled && !budget.sideTurn) {
-        active.inputKeys = inputMessageKeys(event);
-        inputs = messageSnapshots(event.messages);
-        active.inputMessages = inputs;
-      }
-      const result = await budget.waitMandatory(Promise.resolve(withSqliteTransformPass2(() => handler(event, ctx, budget))));
-      if (result?.messages) {
-        const prepared = preparePiDispatch(result.messages, fenceEnabled ? ctx.model : undefined, fenceEnabled);
-        if (prepared.messages !== result.messages)
-          result.messages = prepared.messages;
-        active.managedSignature = piManagedSignature(result.messages);
-        active.preparedStructure = prepared.structure;
-        budget.completed = true;
-        active.ready = true;
-        if (inputs)
-          active.inputBranch = inputBranch(ctx, inputs);
-      }
-      return result;
-    } catch (error) {
-      if (budget.isCancelled(error)) {
-        budget.cancel();
-        if (isOwned())
-          active.ready = false;
-        return;
-      }
-      if (error instanceof PiContextSupersededError || !isCurrent()) {
-        if (fenceEnabled && !budget.sideTurn && !sideSessions.get(key)?.sides && !options.compactionOff?.(ctx)) {
-          const nonce = crypto.randomUUID();
-          let nonces = unsendableNonces.get(key);
-          if (!nonces) {
-            nonces = new Set;
-            unsendableNonces.set(key, nonces);
-          }
-          nonces.add(nonce);
-          if (nonces.size > MAX_UNSENDABLE_NONCES_PER_SESSION) {
-            const oldest = nonces.values().next().value;
-            if (oldest !== undefined)
-              nonces.delete(oldest);
-          }
-          event.messages.push({
-            role: "user",
-            content: [
-              {
-                type: "text",
-                text: `Magic Context did not prepare this request for the current turn. ${nonce}`
-              }
-            ],
-            timestamp: Date.now()
+        if (plan.captureSequence !== state.captureSequence)
+          return;
+        dropSlot(plan.sessionId, "lkg_async_capture_failed");
+        state.syncCaptureRequired = true;
+        state.acceptedInputs = null;
+        sessionLog2(plan.sessionId, "LKG ASYNC CAPTURE FAILED; forcing synchronous capture on the next applied pass:", error);
+      } finally {
+        try {
+          onCaptureTiming?.({
+            sessionId: plan.sessionId,
+            elapsedMs: performance.now() - startedAt,
+            reusedPrefix
           });
-        }
-        log2(`[magic-context][pi] DISCARDED CONTEXT RESULT ${budget.diagnostic()}`, error);
-        throw error;
+        } catch {}
       }
-      log2("[magic-context][pi] turn refused", error);
-      if (typeof ctx.abort !== "function") {
-        budget.abandoned = true;
-        options.onRefusal?.(ctx, budget, error instanceof Error ? error.message : String(error), isOwned);
-        throw error;
+    };
+    if (args.publishServedNumbers || state.syncCaptureRequired) {
+      commit();
+    } else {
+      try {
+        scheduleCapture(commit);
+      } catch (error) {
+        dropSlot(plan.sessionId, "lkg_capture_schedule_failed");
+        state.syncCaptureRequired = true;
+        state.acceptedInputs = null;
+        sessionLog2(plan.sessionId, "LKG CAPTURE SCHEDULE FAILED; forcing synchronous capture on the next applied pass:", error);
       }
-      active.refused = true;
-      refuse(ctx, budget, error, isOwned);
-      return { messages: event.messages };
-    } finally {
-      if (!fenceEnabled || budget.sideTurn)
-        releasePiOperationPayloads(active);
     }
-  });
-}
-
-// src/pi-fallback-index.ts
-function createPiFallbackIndex() {
-  const prior = [];
-  let priorHadDuplicateIds = false;
-  const byHeader = new Map;
-  const positions = new Map;
-  const owners = new Map;
-  let rebuilt = 0;
+    return state.outputSnapshot ?? undefined;
+  };
   return {
-    get rebuiltMessages() {
-      return rebuilt;
+    noteRecovery,
+    recoveryEntryIds,
+    recoveryFor,
+    beginPass(args) {
+      return {
+        ...beginPass(args),
+        systemEntries: args.messages.filter(isPiSystemEntry).map((message) => JSON.stringify(message))
+      };
     },
-    update(args) {
-      const selected = new Map;
-      const guardIndexes = [];
-      const inputs = [];
-      const seen = new Set;
-      let duplicate = false;
-      for (let index = 0;index < args.messages.length; index++) {
-        const message = args.messages[index];
-        const id = args.resolveId(message, index) ?? `unmapped:${index}`;
-        if (seen.has(id))
-          duplicate = true;
-        seen.add(id);
-        const fields = (message && typeof message === "object" ? args.fields?.get(message) : undefined) ?? lkgContentFields(message && typeof message === "object" ? {
-          role: message.role,
-          timestamp: message.timestamp,
-          responseId: message.responseId,
-          toolCallId: message.toolCallId,
-          content: message.content
-        } : message);
-        inputs.push({ id, fields: fields ?? [Symbol()] });
-      }
-      let prefix = priorHadDuplicateIds ? 0 : exactReusablePrefix(inputs, prior);
-      if (duplicate) {
-        prefix = 0;
-        selected.clear();
-      }
-      priorHadDuplicateIds = duplicate;
-      for (let index = 0;index < prefix; index++) {
-        const old = prior[index];
-        if (old && !args.reusable?.has(old.id)) {
-          guardIndexes.push(index);
-          if (old.fingerprint)
-            selected.set(old.id, old.fingerprint);
-        }
-      }
-      for (const old of prior.slice(prefix)) {
-        positions.delete(old.id);
-        if (old.header) {
-          const bucket = byHeader.get(old.header);
-          bucket?.delete(old);
-          if (!bucket?.size)
-            byHeader.delete(old.header);
-        }
-        for (const [key, ids] of old.owners) {
-          const bucket = owners.get(key);
-          for (const id of ids)
-            bucket?.delete(id);
-          if (!bucket?.size)
-            owners.delete(key);
-        }
+    replay(snapshot, parentOf) {
+      const result = replay(snapshot, parentOf);
+      if (!result.ok)
+        return result;
+      const systems = result.messages.filter(isPiSystemEntry).map((message) => JSON.stringify(message));
+      let cursor = 0;
+      for (const expected of snapshot.systemEntries ?? []) {
+        const index = systems.indexOf(expected, cursor);
+        if (index < 0)
+          return { ok: false, reason: "lkg_system_state_mismatch" };
+        cursor = index + 1;
       }
-      prior.length = prefix;
-      for (let index = prefix;index < args.messages.length; index++) {
-        guardIndexes.push(index);
-        const message = args.messages[index];
-        const input = inputs[index];
-        if (!input)
-          continue;
-        const record = {
-          ...input,
-          header: args.header(message),
-          fingerprint: input.id.startsWith("unmapped:") ? null : args.fingerprint(message),
-          owners: input.id.startsWith("unmapped:") ? new Map : args.toolOwners(message, input.id)
-        };
-        rebuilt++;
-        prior.push(record);
-        if (!positions.has(record.id))
-          positions.set(record.id, index);
-        if (record.header) {
-          const bucket = byHeader.get(record.header) ?? new Set;
-          bucket.add(record);
-          byHeader.set(record.header, bucket);
-        }
-        for (const [key, ids] of record.owners) {
-          const bucket = owners.get(key) ?? new Set;
-          for (const id of ids)
-            bucket.add(id);
-          owners.set(key, bucket);
-        }
-        if (!args.reusable?.has(record.id) && record.fingerprint)
-          selected.set(record.id, record.fingerprint);
+      return result;
+    },
+    captureAppliedPass,
+    measureOutgoingPrefix(snapshot, messages, parentOf) {
+      try {
+        const slot = getSlot(snapshot.sessionId);
+        const measured = measuredPrefixFor(snapshot, slot, parentOf);
+        if (!slot || !measured)
+          return;
+        const prefix = JSON.parse(slot.jsonPrefix);
+        if (!Array.isArray(prefix) || messages.length < prefix.length || JSON.stringify(messages.slice(0, prefix.length)) !== slot.jsonPrefix)
+          return;
+        const measuredRequest = stateFor(snapshot.sessionId).measuredRequest;
+        if (!measuredRequest)
+          return;
+        const measuredLength = JSON.parse(measuredRequest.jsonPrefix).length;
+        const appendedMessages = messages.slice(measuredLength);
+        if (completedProviderUsage(appendedMessages[0])?.signature !== measuredRequest.usage.signature)
+          return;
+        return { ...measured, appendedMessages };
+      } catch {
+        return;
       }
-      return {
-        positions,
-        owners,
-        changedFrom: prefix,
-        guardIndexes,
-        fingerprints(headers) {
-          const result = new Map(selected);
-          const records = headers ? [...headers].flatMap((header) => [
-            ...byHeader.get(header) ?? []
-          ]) : headers === null ? prior : [];
-          for (const record of records)
-            if (record.fingerprint)
-              result.set(record.id, record.fingerprint);
-          return result;
-        }
-      };
     }
   };
 }
-
-// src/pi-fit-reclaim.ts
-import { createHash as createHash12, randomUUID as randomUUID4 } from "node:crypto";
+function resolvePiLkgOutputEntryIds(messages, syntheticLeadingCount, entryId) {
+  const ids = messages.map((message, index) => index < syntheticLeadingCount && !isPiSystemEntry(message) ? null : isRecord(message) ? entryId(message) : undefined);
+  const syntheticOwners = new Map;
+  for (let index = 0;index < messages.length; index++) {
+    const message = messages[index];
+    const owner = ids[index];
+    if (typeof owner !== "string" || !isRecord(message) || message.role !== "assistant" || !Array.isArray(message.content))
+      continue;
+    for (const part of message.content) {
+      if (isRecord(part) && part.type === "toolCall" && part.syntheticTodoMarker === true && typeof part.id === "string")
+        syntheticOwners.set(part.id, syntheticOwners.has(part.id) ? undefined : owner);
+    }
+  }
+  return ids.map((id, index) => {
+    const message = messages[index];
+    return id === undefined && isRecord(message) && message.role === "toolResult" && message.syntheticTodoMarker === true && typeof message.toolCallId === "string" ? syntheticOwners.get(message.toolCallId) : id;
+  });
+}
 
 // src/tokenize-pi-messages.ts
 var PI_IMAGE_TOKENS = 1200;
@@ -36701,973 +36785,910 @@ function isTokenCacheSafeMessage(value) {
   return isPlainJsonData(value.content, new Set);
 }
 function isJsonVisibleDataProperty(value, key) {
-  if (!(key in value))
-    return true;
-  const descriptor = Object.getOwnPropertyDescriptor(value, key);
-  return descriptor !== undefined && descriptor.enumerable === true && "value" in descriptor;
-}
-function isPlainJsonData(value, seen) {
-  if (value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean" || typeof value === "undefined") {
-    return true;
-  }
-  if (typeof value !== "object" || seen.has(value))
-    return false;
-  const prototype = Object.getPrototypeOf(value);
-  if (!Array.isArray(value) && prototype !== Object.prototype && prototype !== null) {
-    return false;
-  }
-  if ("toJSON" in value)
-    return false;
-  seen.add(value);
-  try {
-    for (const key of Reflect.ownKeys(value)) {
-      if (Array.isArray(value) && key === "length")
-        continue;
-      if (typeof key !== "string")
-        return false;
-      const descriptor = Object.getOwnPropertyDescriptor(value, key);
-      if (!descriptor?.enumerable || !("value" in descriptor)) {
-        return false;
-      }
-      if (!isPlainJsonData(descriptor.value, seen))
-        return false;
-    }
-    return true;
-  } finally {
-    seen.delete(value);
-  }
-}
-function safeJsonStringify2(value) {
-  try {
-    return JSON.stringify(value);
-  } catch {
-    return "";
-  }
-}
-
-// src/pi-fit-reclaim.ts
-var pendingInput = new Set;
-var KEY2 = "piUpperEstimateReclaim";
-function piFitOverflowPossible(args) {
-  if (!args.hasUI && args.inputTokens <= 0 || args.recoveryArmed || args.forceMaterialization || args.imported || args.coldInjection || args.cacheBusting || pendingInput.has(args.sessionId))
-    return true;
-  if (!args.contextLimit || !Number.isFinite(args.contextLimit))
-    return false;
-  const headroom = args.contextLimit * ((args.forcePercentage ?? 85) / 100) - args.inputTokens;
-  let appendedBytes = 0;
-  try {
-    for (const message of args.appendedMessages ?? []) {
-      appendedBytes += piFitMessageBytes(message);
-      if (2 * appendedBytes >= headroom)
-        return true;
-    }
-  } catch {
-    return true;
-  }
-  return false;
-}
-function clearPiUpperReclaimSession(sessionId) {
-  pendingInput.delete(sessionId);
-}
-function requestPiFitReclaimInput(sessionId) {
-  pendingInput.add(sessionId);
-}
-function clearPiFitReclaimInput(sessionId) {
-  pendingInput.delete(sessionId);
-}
-function piUpperReclaimCursor(args) {
-  const head = args.head;
-  return {
-    sessionId: args.sessionId,
-    modelKey: args.modelKey,
-    contextWindow: args.contextWindow ?? null,
-    head: head ? createHash12("sha256").update(JSON.stringify([
-      Buffer.from(head.cachedM0Bytes ?? []).toString("base64"),
-      Buffer.from(head.cachedM1Bytes ?? []).toString("base64"),
-      head.cachedM0MuralDataUrl ?? null
-    ])).digest("hex") : null,
-    recoveryArmedAt: getEmergencyRecoveryArmedAt(args.sessionId)
-  };
-}
-function claimFrom(value, sessionId) {
-  const claim = value;
-  return claim?.sessionId === sessionId && (typeof claim.modelKey === "string" || claim.modelKey === null) ? claim : null;
-}
-function canReclaim(previous, cursor) {
-  return !previous || previous.modelKey !== cursor.modelKey || (previous.contextWindow ?? null) !== cursor.contextWindow || (previous.head ?? null) !== cursor.head || cursor.recoveryArmedAt !== null && cursor.recoveryArmedAt !== previous.recoveryArmedAt;
-}
-function shouldReclaimPiUpperEstimate(db, cursor) {
-  if (!cursor)
-    return false;
-  return canReclaim(claimFrom(readReplayEnvelope(db, cursor.sessionId)[KEY2], cursor.sessionId), cursor);
-}
-function reservePiUpperEstimateReclaim(db, cursor) {
-  const reservation = randomUUID4();
-  return db.transaction(() => {
-    let claimed = false;
-    if (!updateReplayDocument(db, cursor.sessionId, (doc) => {
-      claimed = canReclaim(claimFrom(doc[KEY2], cursor.sessionId), cursor);
-      if (!claimed)
-        return false;
-      doc.version = 2;
-      doc[KEY2] = { ...cursor, reservation };
-      return true;
-    }))
-      throw new Error("Could not reserve upper-estimate reclaim");
-    return claimed ? reservation : undefined;
-  }).immediate();
-}
-function recordPiUpperEstimateReclaim(db, cursor, reservation) {
-  const owner = reservation ?? reservePiUpperEstimateReclaim(db, cursor);
-  if (!owner)
-    return;
-  if (!updateReplayDocument(db, cursor.sessionId, (doc) => {
-    if (claimFrom(doc[KEY2], cursor.sessionId)?.reservation !== owner)
-      return false;
-    doc.version = 2;
-    doc[KEY2] = cursor;
-    return true;
-  }))
-    throw new Error("Could not persist upper-estimate reclaim cursor");
-  pendingInput.delete(cursor.sessionId);
-}
-function releasePiUpperEstimateReclaim(db, cursor, reservation) {
-  if (!updateReplayDocument(db, cursor.sessionId, (doc) => {
-    if (claimFrom(doc[KEY2], cursor.sessionId)?.reservation !== reservation)
-      return false;
-    delete doc[KEY2];
-    return true;
-  }))
-    throw new Error("Could not release upper-estimate reclaim");
-}
-function resetPiUpperEstimateReclaim(db, sessionId) {
-  if (!claimFrom(readReplayEnvelope(db, sessionId)[KEY2], sessionId))
-    return;
-  if (!updateReplayDocument(db, sessionId, (doc) => {
-    delete doc[KEY2];
-    return true;
-  }))
-    throw new Error("Could not clear upper-estimate reclaim cursor");
-}
-
-// src/pi-lkg.ts
-var piLkgSessionStates = new Map;
-function completedProviderUsage(message) {
-  if (!isRecord(message) || message.role !== "assistant" || !["stop", "length", "toolUse"].includes(String(message.stopReason)) || typeof message.provider !== "string" || !message.provider || typeof message.model !== "string" || !message.model || typeof message.timestamp !== "number" || !Number.isFinite(message.timestamp) || !isRecord(message.usage))
-    return;
-  const usage = message.usage;
-  const counts = [usage.input, usage.cacheRead, usage.cacheWrite];
-  if (!counts.every((count) => typeof count === "number" && Number.isSafeInteger(count) && count >= 0))
-    return;
-  let inputTokens = usage.input + usage.cacheRead + usage.cacheWrite;
-  if (typeof usage.totalTokens === "number" && Number.isSafeInteger(usage.totalTokens) && typeof usage.output === "number" && Number.isSafeInteger(usage.output) && usage.output >= 0) {
-    inputTokens = Math.max(inputTokens, usage.totalTokens - usage.output);
-  }
-  if (!Number.isSafeInteger(inputTokens) || inputTokens <= 0)
-    return;
-  return {
-    inputTokens,
-    modelKey: `${message.provider}/${message.model}`,
-    providerKey: message.provider,
-    timestamp: message.timestamp,
-    signature: JSON.stringify([
-      message.provider,
-      message.model,
-      message.timestamp,
-      message.stopReason,
-      usage.input,
-      usage.cacheRead,
-      usage.cacheWrite,
-      usage.output,
-      usage.totalTokens
-    ])
-  };
+  if (!(key in value))
+    return true;
+  const descriptor = Object.getOwnPropertyDescriptor(value, key);
+  return descriptor !== undefined && descriptor.enumerable === true && "value" in descriptor;
 }
-function notePiLkgProviderUsage(sessionId, parentInputId, message) {
+function isPlainJsonData(value, seen) {
+  if (value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean" || typeof value === "undefined") {
+    return true;
+  }
+  if (typeof value !== "object" || seen.has(value))
+    return false;
+  const prototype = Object.getPrototypeOf(value);
+  if (!Array.isArray(value) && prototype !== Object.prototype && prototype !== null) {
+    return false;
+  }
+  if ("toJSON" in value)
+    return false;
+  seen.add(value);
   try {
-    const state = piLkgSessionStates.get(sessionId);
-    const request = state?.capturedRequest;
-    const usage = completedProviderUsage(message);
-    if (!request || request.usage || !usage || request.captureSequence !== state?.captureSequence || !parentInputId || parentInputId.startsWith("pi-lkg-unmapped:") || parentInputId !== request.inputs.at(-1)?.id || usage.timestamp < request.capturedAt || usage.modelKey !== request.modelKey || usage.providerKey !== request.providerKey)
-      return false;
-    request.usage = {
-      signature: usage.signature,
-      inputTokens: usage.inputTokens
-    };
-    if (state)
-      state.measuredRequest = { ...request, usage: request.usage };
+    for (const key of Reflect.ownKeys(value)) {
+      if (Array.isArray(value) && key === "length")
+        continue;
+      if (typeof key !== "string")
+        return false;
+      const descriptor = Object.getOwnPropertyDescriptor(value, key);
+      if (!descriptor?.enumerable || !("value" in descriptor)) {
+        return false;
+      }
+      if (!isPlainJsonData(descriptor.value, seen))
+        return false;
+    }
     return true;
+  } finally {
+    seen.delete(value);
+  }
+}
+function safeJsonStringify2(value) {
+  try {
+    return JSON.stringify(value);
   } catch {
-    return false;
+    return "";
   }
 }
-function clearPiLkgSessionState(sessionId) {
-  const state = piLkgSessionStates.get(sessionId);
-  if (state)
-    state.captureSequence += 1;
-  piLkgSessionStates.delete(sessionId);
-  clearLkgFenceProcessState(sessionId);
+
+// src/pi-raw-fallback.ts
+class PiStorageBusyError extends Error {
+  code = "PI_STORAGE_BUSY";
+  recoverable = true;
+  constructor(options) {
+    super("Magic Context storage is busy; send your message again", options);
+    this.name = "PiStorageBusyError";
+  }
 }
 
-class PiLkgUncapturable extends Error {
-  reason;
-  constructor(reason, message, cause) {
-    super(message, { cause });
-    this.reason = reason;
+class PiDegradedPassError extends Error {
+  site;
+  code = "PI_DEGRADED_PASS";
+  recoverable = true;
+  constructor(site, options) {
+    super(describeDegradedPassFailure(site, options?.cause), options);
+    this.site = site;
+    this.name = "PiDegradedPassError";
   }
 }
-function isTransientPiStorageError(error) {
-  if (!error || typeof error !== "object")
-    return false;
-  const candidate = error;
-  if (candidate.code === "SQLITE_BUSY" || candidate.code === "SQLITE_LOCKED" || candidate.code === "SQLITE_BUSY_SNAPSHOT") {
-    return true;
+function piFallbackRefusal(site, cause) {
+  const seen = new Set;
+  let current = cause;
+  while (current && typeof current === "object" && !seen.has(current)) {
+    seen.add(current);
+    if (current instanceof PiStorageBusyError || isTransientSqliteError2(current) || isTransientPiStorageError(current))
+      return new PiStorageBusyError({ cause });
+    current = current.cause;
   }
-  return typeof candidate.message === "string" && /database is locked|database table is locked|sqlite_(busy|locked)/i.test(candidate.message);
+  return cause instanceof PiDegradedPassError ? cause : new PiDegradedPassError(site, { cause });
 }
-function reconcilePiLkgEntryIds(resolved, alignedProjection) {
-  if (!resolved || !alignedProjection || resolved.length === 0)
-    return resolved;
-  const result = [...resolved];
-  const anchors = [];
-  let projectionCursor = 0;
-  for (let messageIndex = 0;messageIndex < resolved.length; messageIndex += 1) {
-    const id = resolved[messageIndex];
-    if (typeof id !== "string")
-      continue;
-    let projectionIndex = -1;
-    for (let index = projectionCursor;index < alignedProjection.length; index += 1) {
-      if (alignedProjection[index] === id) {
-        projectionIndex = index;
+function estimatePiOutgoingInputTokens(messages, observed, measuredPrefix, contextLimit) {
+  if (!observed || !Number.isFinite(observed.systemTokens) || observed.systemTokens <= 0 || !Number.isFinite(observed.toolDefinitionTokens) || observed.toolDefinitionTokens < 0 || !hasTokenizerForFit())
+    return { tokens: 0, trusted: false };
+  const knownRole = (message) => {
+    if (!message || typeof message !== "object")
+      return false;
+    return ["user", "assistant", "toolResult", "custom"].includes(message.role ?? "");
+  };
+  const countable = (message) => {
+    if (!knownRole(message))
+      return false;
+    const m = message;
+    return typeof m.content === "string" || Array.isArray(m.content) && m.content.every((p) => p && typeof p === "object" && ["text", "thinking", "redacted_thinking", "toolCall"].includes(String(p.type)));
+  };
+  const complete = messages.every(countable);
+  const measuredForBounds = measuredPrefix && measuredPrefix.modelKey === observed.modelKey && observed.envelopeSignature && measuredPrefix.envelopeSignature === observed.envelopeSignature && Number.isSafeInteger(measuredPrefix.inputTokens) && measuredPrefix.inputTokens > 0 ? measuredPrefix : undefined;
+  if (contextLimit && Number.isFinite(contextLimit) && contextLimit > 0) {
+    const priced = measuredForBounds?.appendedMessages ?? messages;
+    const baseline = measuredForBounds?.inputTokens ?? 0;
+    let contentBytes = 0;
+    for (const rawMessage of priced.filter(knownRole)) {
+      const message = rawMessage;
+      if (typeof message.content === "string")
+        contentBytes += Buffer.byteLength(message.content);
+      else if (Array.isArray(message.content))
+        for (const part of message.content) {
+          if (!part || typeof part !== "object")
+            continue;
+          for (const value of [
+            part.type === "text" ? part.text : undefined,
+            part.type === "thinking" && !part.redacted ? part.thinking : undefined,
+            part.type === "toolCall" ? part.name : undefined
+          ])
+            if (typeof value === "string")
+              contentBytes += Buffer.byteLength(value);
+          if (part.type === "toolCall" && part.arguments !== undefined)
+            contentBytes += Buffer.byteLength(JSON.stringify(part.arguments));
+        }
+      if (baseline + Math.ceil(contentBytes / 4) > contextLimit)
         break;
-      }
     }
-    if (projectionIndex < 0)
-      return resolved;
-    anchors.push({ messageIndex, projectionIndex });
-    projectionCursor = projectionIndex + 1;
+    const lower = baseline + Math.ceil(contentBytes / 4);
+    if (lower > contextLimit)
+      return {
+        tokens: lower,
+        trusted: false,
+        refusalGrade: true,
+        refusalTokens: lower,
+        refusalBasis: "byte-bound"
+      };
+    const envelope = measuredForBounds ? baseline : providerMass({
+      system: observed.systemTokens,
+      tools: observed.toolDefinitionTokens
+    }, observed.calibration ?? calibrationForModelKey(observed.modelKey), true);
+    const fit = observed.calibration ?? calibrationForModelKey(observed.modelKey);
+    const upper = envelope + Math.max(UNKNOWN_FIT_RATIO, fit.toolsRatio, fit.proseRatio) * priced.reduce((sum, message) => sum + piFitMessageBytes(message), 0);
+    if (upper <= contextLimit)
+      return {
+        tokens: upper,
+        trusted: true,
+        refusalGrade: false,
+        refusalBasis: "byte-bound"
+      };
   }
-  if (anchors.length === 0)
-    return resolved;
-  const fillEqualSpan = (messageStart, messageEnd, projectionStart, projectionEnd) => {
-    if (messageEnd - messageStart !== projectionEnd - projectionStart)
-      return;
-    for (let offset = 0;offset < messageEnd - messageStart; offset += 1) {
-      result[messageStart + offset] ??= alignedProjection[projectionStart + offset];
-    }
-  };
-  let previousMessageIndex = -1;
-  let previousProjectionIndex = -1;
-  for (const anchor of anchors) {
-    fillEqualSpan(previousMessageIndex + 1, anchor.messageIndex, previousProjectionIndex + 1, anchor.projectionIndex);
-    previousMessageIndex = anchor.messageIndex;
-    previousProjectionIndex = anchor.projectionIndex;
+  if (!complete) {
+    return {
+      tokens: providerMass({
+        system: observed.systemTokens,
+        tools: observed.toolDefinitionTokens + messages.reduce((sum, message) => sum + piFitMessageBytes(message), 0)
+      }, observed.calibration ?? calibrationForModelKey(observed.modelKey), true),
+      trusted: true,
+      refusalGrade: false
+    };
   }
-  fillEqualSpan(previousMessageIndex + 1, resolved.length, previousProjectionIndex + 1, alignedProjection.length);
-  return result;
+  const bounded = messages.some((rawMessage) => {
+    const content = rawMessage.content;
+    if (typeof content === "string")
+      return tokenCountUsesByteBound(content);
+    return content.some((part) => [
+      part.text,
+      part.redacted ? undefined : part.thinking,
+      part.name,
+      part.arguments === undefined ? undefined : JSON.stringify(part.arguments)
+    ].some((value) => typeof value === "string" && tokenCountUsesByteBound(value)));
+  });
+  if (bounded)
+    return {
+      tokens: providerMass({
+        system: observed.systemTokens,
+        tools: observed.toolDefinitionTokens + messages.reduce((sum, message) => sum + piFitMessageBytes(message), 0)
+      }, observed.calibration ?? calibrationForModelKey(observed.modelKey), true),
+      trusted: true,
+      refusalGrade: false,
+      refusalBasis: "byte-bound"
+    };
+  const raw = tokenizePiMessages([...messages]);
+  const calibration = observed.calibration ?? calibrationForModelKey(observed.modelKey);
+  const refusalCalibration = calibrationForModelKey(observed.modelKey);
+  const tokens = providerMass({
+    system: observed.systemTokens,
+    tools: observed.toolDefinitionTokens + raw.toolCall,
+    prose: raw.conversation
+  }, calibration, true);
+  const refusalGrade = Number.isFinite(tokens) && messages.every((rawMessage) => {
+    const content = rawMessage.content;
+    if (typeof content === "string")
+      return !tokenCountUsesByteBound(content);
+    return content.every((part) => [
+      part.text,
+      part.redacted ? undefined : part.thinking,
+      part.name,
+      part.arguments === undefined ? undefined : JSON.stringify(part.arguments)
+    ].every((value) => typeof value !== "string" || !tokenCountUsesByteBound(value)));
+  }) && hasMeasuredDecisionCalibration(refusalCalibration) && observed.toolDefinitionsMeasured === true && Number.isFinite(observed.refusalToolDefinitionTokens) && observed.refusalToolDefinitionTokens >= 0;
+  const measured = measuredPrefix && measuredPrefix.modelKey === observed.modelKey && observed.envelopeSignature && measuredPrefix.envelopeSignature === observed.envelopeSignature && Number.isSafeInteger(measuredPrefix.inputTokens) && measuredPrefix.inputTokens > 0 ? measuredPrefix : undefined;
+  const tail = measured ? tokenizePiMessages([...measured.appendedMessages]) : raw;
+  const refusalTokens = refusalGrade ? (measured?.inputTokens ?? 0) + providerMass({
+    system: measured ? 0 : observed.systemTokens,
+    tools: (measured ? 0 : observed.refusalToolDefinitionTokens) + tail.toolCall,
+    prose: tail.conversation
+  }, refusalCalibration) : undefined;
+  return {
+    tokens,
+    trusted: Number.isFinite(tokens),
+    refusalGrade,
+    refusalTokens,
+    refusalBasis: refusalGrade ? measured ? "provider-prefix" : "calibrated" : undefined
+  };
 }
-function piStorageErrorReason(error) {
-  const message = error instanceof Error ? error.message : String(error);
-  if (error && typeof error === "object") {
-    const code = error.code;
-    if (code === "SQLITE_BUSY" || code === "SQLITE_LOCKED" || code === "SQLITE_BUSY_SNAPSHOT") {
-      return code;
+function assertPiRawFallbackFits(messages, contextLimit, log, cause, observed, measuredPrefix) {
+  if (!contextLimit || !Number.isFinite(contextLimit) || !observed || !Number.isFinite(observed.systemTokens) || observed.systemTokens <= 0 || !Number.isFinite(observed.toolDefinitionTokens) || observed.toolDefinitionTokens < 0 || observed.envelopeBytes !== undefined && (!Number.isFinite(observed.envelopeBytes) || observed.envelopeBytes < 0)) {
+    log("raw_fallback_refused completeness=partial");
+    throw piFallbackRefusal("fallback-metadata-incomplete", cause);
+  }
+  const measured = measuredPrefix && measuredPrefix.modelKey === observed.modelKey && observed.envelopeSignature && measuredPrefix.envelopeSignature === observed.envelopeSignature && Number.isSafeInteger(measuredPrefix.inputTokens) && measuredPrefix.inputTokens > 0 ? measuredPrefix : undefined;
+  const baseInputTokens = measured?.inputTokens ?? 0;
+  const pricedMessages = measured?.appendedMessages ?? messages;
+  log(`lkg_fit_basis=${measured ? "provider_input" : "host_metadata"} measured_input=${baseInputTokens}`);
+  let bytes = measured ? 1 : 1 + (observed.envelopeBytes ?? 20 + 4 * (observed.systemTokens + observed.toolDefinitionTokens));
+  let serializationFailed = false;
+  try {
+    for (const message of pricedMessages) {
+      bytes += piFitMessageBytes(message) + 1;
+      if (baseInputTokens + Math.ceil(bytes / 4) > contextLimit)
+        break;
     }
+  } catch {
+    serializationFailed = true;
   }
-  if (/database is locked|database table is locked/i.test(message)) {
-    return "SQLITE_BUSY_OR_LOCKED";
+  const proxyTokens = baseInputTokens + Math.ceil(bytes / 4);
+  if (serializationFailed || proxyTokens > contextLimit) {
+    log(`raw_fallback_over_context_limit proxy_bytes=${bytes} proxy_tokens=${proxyTokens} limit=${contextLimit} early_abort=true serialization_failed=${serializationFailed}`);
+    throw piFallbackRefusal(serializationFailed ? "fallback-serialization-failed" : "fallback-over-context-limit", cause);
   }
-  if (error && typeof error === "object") {
-    const code = error.code;
-    if (typeof code === "string" && code.length > 0)
-      return code;
+  const complete = pricedMessages.every((message) => {
+    if (!message || typeof message !== "object")
+      return false;
+    const m = message;
+    return ["user", "assistant", "toolResult", "custom"].includes(m.role ?? "") && (typeof m.content === "string" || Array.isArray(m.content) && m.content.every((p) => p !== null && typeof p === "object" && ["text", "thinking", "redacted_thinking", "toolCall"].includes(String(p.type))));
+  });
+  const raw = tokenizePiMessages([...pricedMessages]);
+  if (!hasTokenizerForFit()) {
+    log("raw_fallback_refused completeness=partial tokenizer=unavailable");
+    throw piFallbackRefusal("fallback-tokenizer-unavailable", cause);
+  }
+  const tokens = baseInputTokens + providerMass({
+    system: measured ? 0 : observed.systemTokens,
+    tools: (measured ? 0 : observed.toolDefinitionTokens) + raw.toolCall,
+    prose: raw.conversation
+  }, observed.calibration ?? calibrationForModelKey(observed.modelKey), true);
+  if (!complete || !Number.isFinite(tokens) || tokens <= 0 || tokens > contextLimit || serializationFailed || proxyTokens > contextLimit) {
+    log(`raw_fallback_over_context_limit proxy_bytes=${bytes} proxy_tokens=${proxyTokens} limit=${contextLimit} early_abort=true serialization_failed=${serializationFailed}`);
+    throw piFallbackRefusal(complete ? "fallback-over-context-limit" : "fallback-messages-incomplete", cause);
   }
-  return message;
 }
-function plainJsonFields(value) {
-  const fields = [];
-  const seen = new WeakSet;
-  const visit = (child) => {
-    if (child === null)
-      fields.push(LKG_SNAPSHOT_NULL);
-    else if (typeof child === "string")
-      fields.push(LKG_SNAPSHOT_STRING, child);
-    else if (typeof child === "number")
-      fields.push(LKG_SNAPSHOT_NUMBER, child);
-    else if (typeof child === "boolean")
-      fields.push(LKG_SNAPSHOT_BOOLEAN, child);
-    else if (typeof child !== "object")
-      fields.push(LKG_SNAPSHOT_UNDEFINED);
-    else {
-      if (seen.has(child))
-        return false;
-      const array = Array.isArray(child);
-      const prototype = Object.getPrototypeOf(child);
-      if (!array && prototype !== Object.prototype && prototype !== null || "toJSON" in child)
-        return false;
-      const keys = Object.keys(child);
-      if (array && keys.length !== child.length)
-        return false;
-      seen.add(child);
-      fields.push(array ? LKG_SNAPSHOT_ARRAY : LKG_SNAPSHOT_OBJECT);
-      const countIndex = fields.length;
-      fields.push(array ? child.length : 0);
-      let count = 0;
-      for (const key of keys) {
-        const descriptor = Object.getOwnPropertyDescriptor(child, key);
-        if (!descriptor || !("value" in descriptor) || array && key !== String(count))
-          return false;
-        const entry = descriptor.value;
-        if (!array && (entry === undefined || typeof entry === "function" || typeof entry === "symbol"))
-          continue;
-        count++;
-        if (!array)
-          fields.push(LKG_SNAPSHOT_KEY, key);
-        if (!visit(entry))
-          return false;
-      }
-      if (!array)
-        fields[countIndex] = count;
-      seen.delete(child);
-    }
-    return true;
+function classifyPiOutgoingFit(estimate, limit) {
+  if (!limit || !Number.isFinite(limit) || limit <= 0)
+    return "fits-or-unknown";
+  if (estimate.refusalGrade && typeof estimate.refusalTokens === "number" && Number.isFinite(estimate.refusalTokens) && estimate.refusalTokens > limit)
+    return "over-window-proof";
+  return estimate.trusted && Number.isFinite(estimate.tokens) && estimate.tokens > limit ? "upper-estimate-pressure" : "fits-or-unknown";
+}
+
+// src/pi-context-refusal.ts
+var ENTRY_TYPE = "magic-context-turn-refused";
+var RETRY_MESSAGE = "Magic Context could not safely prepare this turn; send your message again.";
+var MAX_UNSENDABLE_NONCES_PER_SESSION = 32;
+var receiptMaps = new Set;
+function clearPiContextReceipt(sessionId) {
+  for (const receipts of receiptMaps)
+    receipts.delete(sessionId);
+}
+function createPiContextOwnershipGuards(operations, key, active, budget, owner) {
+  const sideTurn = budget.sideTurn;
+  const signal = budget.signal;
+  const isOwned = () => sideTurn ? operations.get(key) === owner : operations.get(key) === active && active.pass === budget;
+  const isCurrent = () => isOwned() && (sideTurn || !active.ended);
+  const assertOwner = () => {
+    if (!isCurrent())
+      throw new PiContextSupersededError("Pi context pass superseded: no longer valid for this operation", active.ended ? "agent_end" : operations.get(key) !== (sideTurn ? owner : active) ? "operation replacement or cache eviction" : "newer context pass");
+    signal?.throwIfAborted();
   };
-  if (!visit(value))
-    return null;
-  const normalized = contentSnapshotValue(value);
-  return normalized === value ? fields : lkgContentFields(normalized);
+  return { isOwned, isCurrent, assertOwner };
 }
-function plainOutputFields(messages) {
-  if ("toJSON" in messages || Object.keys(messages).length !== messages.length)
-    return null;
-  const outputs = [];
-  for (let index = 0;index < messages.length; index++) {
-    const descriptor = Object.getOwnPropertyDescriptor(messages, String(index));
-    if (!descriptor || !("value" in descriptor))
-      return null;
-    const fields = plainJsonFields(descriptor.value);
-    if (!fields)
-      return null;
-    outputs.push({ id: String(index), fields });
-  }
-  return outputs;
+function releasePiOperationPayloads(operation) {
+  operation.inputKeys = undefined;
+  operation.inputMessages = undefined;
+  operation.inputBranch = undefined;
+  operation.dispatchFields = undefined;
+  operation.managedSignature = undefined;
+  operation.preparedStructure = undefined;
 }
-function snapshotInputs(messages, entryIds, omitsBookkeeping) {
-  if (!entryIds || entryIds.length !== messages.length) {
-    return { inputs: [], failure: "lkg_entry_ids_unavailable" };
-  }
-  const firstStableIndex = entryIds.findIndex((id) => typeof id === "string" && id.length > 0);
-  if (firstStableIndex < 0) {
-    return { inputs: [], failure: "lkg_entry_ids_unavailable" };
-  }
-  const inputs = [];
-  const seen = new Set;
-  for (let index = 0;index < entryIds.length; index += 1) {
-    const fields = lkgContentFields(omitsBookkeeping ? piProviderInput(messages[index]) : messages[index]);
-    if (!fields)
-      return { inputs: [], failure: "lkg_content_snapshot_failed" };
-    const id = entryIds[index] || `pi-lkg-unmapped:${lkgContentDigestFromFields(fields)}`;
-    if (seen.has(id))
-      return { inputs: [], failure: "lkg_duplicate_entry_id" };
-    seen.add(id);
-    inputs.push({
-      id,
-      messageIndex: index,
-      fields,
-      providerUsageSignature: completedProviderUsage(messages[index])?.signature
-    });
-  }
-  return { inputs, failure: null };
+function operationKey(ctx) {
+  return ctx.sessionManager?.getSessionId?.() ?? ctx.sessionManager ?? "no-session";
 }
-var bookkeepingOmittingApis = new Set([
-  "anthropic-messages",
-  "google-generative-ai",
-  "openai-completions",
-  "openai-responses",
-  "openai-codex-responses"
-]);
-function omitsRootBookkeeping(args) {
-  if (args.transport != null)
+function messageKey(message) {
+  if (!message || typeof message !== "object")
+    return;
+  const { role, timestamp } = message;
+  return typeof role === "string" && typeof timestamp === "number" ? `${role}:${timestamp}` : undefined;
+}
+function endBelongsToEarlierRun(operation, event) {
+  if (!operation.pass || operation.dispatched)
     return false;
-  let api = args.apiKey;
-  if (api === undefined) {
-    const apis = new Set(args.messages.flatMap((message) => {
-      const value = message;
-      return value?.role === "assistant" && typeof value.api === "string" ? [value.api] : [];
-    }));
-    if (apis.size === 1)
-      api = [...apis][0];
+  const end = event;
+  if (end?.willContinue === true)
+    return true;
+  if (!operation.inputKeys || !Array.isArray(end?.messages))
+    return false;
+  const ended = new Set;
+  for (const message of end.messages) {
+    const key = messageKey(message);
+    if (key)
+      ended.add(key);
   }
-  return typeof api === "string" && bookkeepingOmittingApis.has(api);
+  if (ended.size === 0)
+    return false;
+  return operation.inputKeys.some((key) => !ended.has(key));
 }
-function piProviderInput(message) {
-  if (!message || typeof message !== "object" || Array.isArray(message))
-    return message;
-  const descriptors = Object.getOwnPropertyDescriptors(message);
-  delete descriptors.completedAt;
-  delete descriptors.contextSnapshot;
-  return Object.create(Object.getPrototypeOf(message), descriptors);
+function messageSnapshots(messages) {
+  const snapshots = [];
+  for (const message of messages) {
+    const id = messageKey(message);
+    const fields = lkgContentFields(message);
+    if (!id || !fields)
+      return;
+    snapshots.push({ id, fields });
+  }
+  return snapshots.length ? snapshots : undefined;
 }
-function restorePiLkgInputForFit(snapshot, branchEntries) {
-  if (!snapshot || snapshot.preparationFailure || !branchEntries || !snapshot.inputs.length)
+function inputBranch(ctx, inputs) {
+  try {
+    const branch = ctx.sessionManager.getBranch();
+    const entries = branch.filter((entry) => entry.type === "message" || entry.type === "custom_message");
+    const anchorId = entries.at(-1)?.id;
+    const native = messageSnapshots(entries.map((entry) => {
+      if (entry.type === "message")
+        return entry.message;
+      const attribution = entry.attribution;
+      const timestamp = new Date(entry.timestamp).getTime();
+      if (!Number.isFinite(timestamp) || !entry.customType || typeof entry.content !== "string" && !Array.isArray(entry.content) || attribution !== undefined && attribution !== "agent" && attribution !== "user")
+        return;
+      return {
+        role: "custom",
+        customType: entry.customType,
+        content: entry.content,
+        display: entry.display,
+        details: entry.details,
+        attribution,
+        timestamp
+      };
+    }));
+    inputs ??= native;
+    if (!anchorId || !native || !inputs || native.length > inputs.length || exactReusablePrefix(native, inputs) !== native.length)
+      return;
+    return {
+      anchorId,
+      anchorIndex: native.length - 1,
+      entryIds: entries.map((entry) => entry.id),
+      messages: inputs
+    };
+  } catch {
     return;
-  const byId = new Map;
-  for (const value of branchEntries) {
-    const entry = value;
-    if (entry?.type !== "message" || typeof entry.id !== "string")
-      continue;
-    if (byId.has(entry.id))
-      return;
-    byId.set(entry.id, entry.message);
   }
-  const input = [];
-  for (const saved of snapshot.inputs) {
-    if (!byId.has(saved.id))
-      return;
-    const message = byId.get(saved.id);
-    if (!message || typeof message !== "object" || Array.isArray(message) || Object.hasOwn(message, "parts"))
-      return;
-    const fields = plainJsonFields(snapshot.omitsBookkeeping ? piProviderInput(message) : message);
-    if (!fields || fields.length !== saved.fields.length || fields.some((field, i) => field !== saved.fields[i]))
-      return;
-    input.push(message);
+}
+function dispatchedEndBelongsToEarlierRun(operation, event, ctx) {
+  if (!operation.dispatched || !operation.started || !operation.ready || !operation.pass?.completed || operation.refused || operation.pass.abandoned || !operation.inputBranch)
+    return false;
+  try {
+    if (ctx.isIdle() !== false)
+      return false;
+    const current = inputBranch(ctx);
+    const prepared = operation.inputBranch;
+    if (!current || current.entryIds[prepared.anchorIndex] !== prepared.anchorId || current.messages.length !== prepared.messages.length || exactReusablePrefix(current.messages, prepared.messages) !== prepared.messages.length)
+      return false;
+    const messages = event?.messages;
+    const ended = Array.isArray(messages) ? messageSnapshots(messages) : undefined;
+    return !!(ended && ended.length <= prepared.anchorIndex && ended.length < prepared.messages.length && exactReusablePrefix(prepared.messages, ended) === ended.length);
+  } catch {
+    return false;
   }
+}
+function inputMessageKeys(event) {
   try {
-    return structuredClone(input);
+    const messages = event.messages;
+    if (!Array.isArray(messages))
+      return;
+    const keys = [];
+    for (const message of messages) {
+      const key = messageKey(message);
+      if (key)
+        keys.push(key);
+    }
+    return keys;
   } catch {
     return;
   }
 }
-function extendsMeasuredRequest(measuredJson, nextJson) {
-  return measuredJson === nextJson || measuredJson.length > 2 && nextJson.startsWith(`${measuredJson.slice(0, -1)},`);
-}
-function createPiLkgCoordinator(db, scheduleCapture = (capture) => setImmediate(capture), onCaptureTiming) {
-  registerLkgPersistence(createDbLkgPersistence(db));
-  const stateFor = (sessionId) => {
-    let state = piLkgSessionStates.get(sessionId);
-    if (!state) {
-      state = {
-        captureSequence: 0,
-        syncCaptureRequired: false,
-        acceptedInputs: null,
-        acceptedSlot: null,
-        outputSnapshot: null
-      };
-      piLkgSessionStates.set(sessionId, state);
-    }
-    return state;
-  };
-  const recoveryFor = (snapshot) => {
-    const state = stateFor(snapshot.sessionId);
-    const prefix = state.recoveryPrefix;
-    if (!prefix) {
-      const slot = getSlot(snapshot.sessionId);
-      return lkgRecoveryFenceUnclean(snapshot.sessionId) || slot && lkgFenceRequiresRebuild(snapshot.sessionId, state.acceptedInputs ? slot : loadPersistedLkgSlot(db, snapshot.sessionId) ?? slot, !!state.acceptedInputs) ? { rebuildReason: "lkg_restart_rebuild" } : {};
+function registerPiGuardedContext(pi, handler, options = {}) {
+  const operations = new Map;
+  const sideSessions = new Map;
+  receiptMaps.add(operations);
+  const newOperation = () => ({
+    retainedAfterEnd: false,
+    dispatched: false,
+    started: false,
+    ready: false,
+    refused: false,
+    ended: false
+  });
+  const lifecycle = new Map;
+  receiptMaps.add(lifecycle);
+  const lifecycleCounts = (key) => {
+    let counts = lifecycle.get(key);
+    if (!counts) {
+      counts = { starts: 0, ends: 0 };
+      lifecycle.set(key, counts);
     }
-    const durableSlot = loadPersistedLkgSlot(db, snapshot.sessionId) ?? getSlot(snapshot.sessionId);
-    if (snapshot.preparationFailure || !durableSlot || !ownsLkgDirtyFence(snapshot.sessionId, prefix.fenceRevision) || prefix.modelKey !== snapshot.modelKey || prefix.providerKey !== snapshot.providerKey || JSON.stringify(prefix.systemEntries) !== JSON.stringify(snapshot.systemEntries) || exactReusablePrefix(snapshot.inputs, prefix.inputs) !== prefix.inputs.length)
-      return { rebuildReason: "lkg_recovery_input_rebuild" };
-    return { prefix };
-  };
-  const recoveryEntryIds = (snapshot) => {
-    const anchor = snapshot.replayAnchorInputIndex;
-    const slot = getSlot(snapshot.sessionId);
-    if (snapshot.preparationFailure || anchor === null || !slot?.piOutputEntryIds)
-      throw new PiLkgUncapturable("lkg_output_mapping_unavailable", "Cannot retain recovered output ownership");
-    const surviving = new Set(snapshot.inputs.map((input) => input.id));
-    return [
-      ...slot.piOutputEntryIds.filter((id) => id === null || surviving.has(id)),
-      ...snapshot.inputs.slice(anchor + 1).map((input) => input.id)
-    ];
-  };
-  const noteRecovery = (snapshot, messages, entryIds) => {
-    const state = stateFor(snapshot.sessionId);
-    const slot = getSlot(snapshot.sessionId);
-    if (!slot)
-      throw new PiLkgUncapturable("lkg_miss", "Cannot retain recovery without a saved request");
-    const anchor = snapshot.replayAnchorInputIndex;
-    if (anchor === null)
-      throw new PiLkgUncapturable("lkg_miss", "Cannot retain recovery without an input anchor");
-    const outputEntryIds = entryIds ?? recoveryEntryIds(snapshot);
-    if (outputEntryIds.length !== messages.length)
-      throw new PiLkgUncapturable("lkg_output_mapping_unavailable", "Recovered output ownership does not match the served array");
-    state.recoveryPrefix = {
-      fenceRevision: markLkgRecoveryDirty({
-        sessionId: snapshot.sessionId,
-        slot,
-        processLocalProof: !!state.acceptedInputs,
-        ownDirtyRevision: state.recoveryPrefix?.fenceRevision
-      }),
-      modelKey: snapshot.modelKey,
-      providerKey: snapshot.providerKey,
-      systemEntries: snapshot.systemEntries,
-      inputs: snapshot.inputs,
-      json: JSON.stringify(messages),
-      outputEntryIds,
-      untaggedInputIds: new Set([
-        ...state.recoveryPrefix?.untaggedInputIds ?? [],
-        ...snapshot.inputs.slice(anchor + 1).map((input) => input.id)
-      ])
-    };
+    return counts;
   };
-  const beginPass = (args) => {
-    const omitsBookkeeping = omitsRootBookkeeping(args);
-    const snapped = snapshotInputs(args.messages, args.entryIds, omitsBookkeeping);
-    const slot = getSlot(args.sessionId);
-    if (snapped.failure || !slot) {
-      return {
-        omitsBookkeeping,
-        sessionId: args.sessionId,
-        inputs: snapped.inputs,
-        preparationFailure: snapped.failure,
-        replayFailure: snapped.failure ?? "lkg_miss",
-        replayAnchorInputIndex: null,
-        pristineTail: null,
-        modelKey: args.modelKey,
-        providerKey: args.providerKey
-      };
-    }
-    const stableAnchorIndex = snapped.inputs.findIndex((input) => input.id === slot.lastInputMessageId);
-    if (stableAnchorIndex < 0) {
-      return {
-        omitsBookkeeping,
-        sessionId: args.sessionId,
-        inputs: snapped.inputs,
-        preparationFailure: null,
-        replayFailure: "lkg_invalidated_reshape",
-        replayAnchorInputIndex: null,
-        pristineTail: null,
-        modelKey: args.modelKey,
-        providerKey: args.providerKey
-      };
-    }
-    const messageAnchorIndex = snapped.inputs[stableAnchorIndex]?.messageIndex;
-    if (messageAnchorIndex === undefined) {
-      return {
-        omitsBookkeeping,
-        sessionId: args.sessionId,
-        inputs: snapped.inputs,
-        preparationFailure: null,
-        replayFailure: "lkg_invalidated_reshape",
-        replayAnchorInputIndex: null,
-        pristineTail: null,
-        modelKey: args.modelKey,
-        providerKey: args.providerKey
-      };
+  const fenceEnabled = resolvePiHarnessKind() === "omp";
+  const unsendableNonces = new Map;
+  receiptMaps.add(unsendableNonces);
+  const structureWarnings = new Map;
+  receiptMaps.add(structureWarnings);
+  const imageTrimNotices = new Map;
+  receiptMaps.add(imageTrimNotices);
+  const refuse = (ctx, budget, reason, isCurrent) => {
+    if (!isCurrent()) {
+      log2(`[magic-context][pi] DISCARDED CONTEXT RESULT ${budget.diagnostic()}`, reason);
+      return;
     }
+    budget.abandoned = true;
+    budget.recovery = budget.recovery === "not attempted" ? "no managed result; refused" : budget.recovery;
+    const identityConflict = findPiTagIdentityConflict2(reason);
+    const message = identityConflict ? `${identityConflict.message}. ${budget.diagnostic()}` : reason instanceof PiDegradedPassError ? `${reason.message} ${budget.diagnostic()}` : `${RETRY_MESSAGE} ${budget.diagnostic()} (${reason instanceof Error ? reason.message : String(reason)})`;
+    log2("[magic-context][pi] CONTEXT REFUSED", message);
     try {
-      return {
-        omitsBookkeeping,
-        sessionId: args.sessionId,
-        inputs: snapped.inputs,
-        preparationFailure: null,
-        replayFailure: null,
-        replayAnchorInputIndex: stableAnchorIndex,
-        pristineTail: structuredClone(args.messages.slice(messageAnchorIndex + 1)),
-        modelKey: args.modelKey,
-        providerKey: args.providerKey
-      };
-    } catch {
-      return {
-        omitsBookkeeping,
-        sessionId: args.sessionId,
-        inputs: snapped.inputs,
-        preparationFailure: null,
-        replayFailure: "lkg_tail_snapshot_failed",
-        replayAnchorInputIndex: null,
-        pristineTail: null,
-        modelKey: args.modelKey,
-        providerKey: args.providerKey
-      };
+      ctx.ui?.notify(message, "error");
+    } catch (error) {
+      log2("[magic-context][pi] refusal notice failed", error);
     }
-  };
-  const measuredPrefixFor = (snapshot, slot, parentOf) => {
-    const request = stateFor(snapshot.sessionId).measuredRequest;
-    const anchor = snapshot.replayAnchorInputIndex;
-    if (!request?.usage || !slot || !parentOf || anchor === null || !snapshot.pristineTail || !extendsMeasuredRequest(request.jsonPrefix, slot.jsonPrefix) || !request.modelKey || request.modelKey !== slot.modelKey || request.modelKey !== snapshot.modelKey || request.providerKey !== slot.providerKey || request.providerKey !== snapshot.providerKey || snapshot.inputs[anchor]?.id !== slot.lastInputMessageId || exactReusablePrefix(snapshot.inputs, request.inputs) !== request.inputs.length)
-      return;
-    const assistant = snapshot.inputs[request.inputs.length];
-    const assistantId = assistant?.id;
-    if (!assistantId || assistantId.startsWith("pi-lkg-unmapped:") || assistant.providerUsageSignature !== request.usage.signature)
-      return;
-    let appendedMessages;
     try {
-      if (parentOf(assistantId) !== request.inputs.at(-1)?.id)
-        return;
-      const measuredLength = JSON.parse(request.jsonPrefix).length;
-      const prefix = JSON.parse(slot.jsonPrefix);
-      const replyId = measuredLength < prefix.length ? slot.piOutputEntryIds?.[measuredLength] : snapshot.inputs[anchor + 1]?.id;
-      if (replyId !== assistantId)
-        return;
-      appendedMessages = [
-        ...prefix.slice(measuredLength),
-        ...snapshot.pristineTail
-      ];
-      if (completedProviderUsage(appendedMessages[0])?.signature !== request.usage.signature)
-        return;
-    } catch {
-      return;
-    }
-    return {
-      modelKey: piModelRefToCanonical(request.modelKey).toLowerCase(),
-      inputTokens: request.usage.inputTokens,
-      envelopeSignature: request.envelopeSignature,
-      appendedMessages,
-      previousMessages: JSON.parse(request.jsonPrefix)
-    };
-  };
-  const replay = (snapshot, parentOf) => {
-    if (snapshot.replayFailure) {
-      if (snapshot.replayFailure === "lkg_invalidated_reshape") {
-        dropSlot(snapshot.sessionId, snapshot.replayFailure);
-        stateFor(snapshot.sessionId).acceptedInputs = null;
-      }
-      return { ok: false, reason: snapshot.replayFailure };
-    }
-    if (snapshot.replayAnchorInputIndex === null || snapshot.pristineTail === null) {
-      return { ok: false, reason: "lkg_miss" };
-    }
-    const slot = getSlot(snapshot.sessionId);
-    const start = slot?.inputIdSeq.indexOf(snapshot.inputs[0]?.id ?? "") ?? -1;
-    if (slot && start > 0) {
-      const ownership = slot.piOutputEntryIds;
-      if (!ownership)
-        return { ok: false, reason: "lkg_output_mapping_unavailable" };
-      if (slot.modelKey !== snapshot.modelKey || slot.providerKey !== snapshot.providerKey)
-        return { ok: false, reason: "lkg_model_mismatch" };
-      const surviving = snapshot.inputs.slice(0, snapshot.replayAnchorInputIndex + 1);
-      if (surviving.length !== slot.inputIdSeq.length - start || surviving.some((input, index) => input.id !== slot.inputIdSeq[start + index]))
-        return { ok: false, reason: "lkg_invalidated_reshape" };
-      if (surviving.some((input, index) => !lkgFieldsMatchDigest(input.fields, slot.inputContentDigests[start + index])))
-        return { ok: false, reason: "lkg_content_mismatch" };
-      const removed = new Set(slot.inputIdSeq.slice(0, start));
-      const prefix = JSON.parse(slot.jsonPrefix);
-      const measuredPrefix = measuredPrefixFor(snapshot, slot, parentOf);
-      return {
-        ok: true,
-        ...measuredPrefix ? { measuredPrefix } : {},
-        messages: [
-          ...prefix.filter((message, index) => isPiSystemEntry(message) || ownership[index] === null || !removed.has(ownership[index] ?? "")),
-          ...snapshot.pristineTail
-        ]
-      };
-    }
-    const prefixInputs = snapshot.inputs.slice(0, snapshot.replayAnchorInputIndex + 1);
-    const entry = {
-      pristineTail: snapshot.pristineTail,
-      entryInputIds: snapshot.inputs.map((input) => input.id),
-      entryContentDigests: prefixInputs.map((input) => lkgContentDigestFromFields(input.fields)),
-      ...slot?.inputContentDigests.some(isLegacyLkgDigest) ? {
-        entryLegacyContentDigests: prefixInputs.map((input) => legacyLkgDigestFromFields(input.fields))
-      } : {},
-      anchorIndex: snapshot.replayAnchorInputIndex
-    };
-    const result = replayLkg({
-      sessionId: snapshot.sessionId,
-      messages: [],
-      modelKey: snapshot.modelKey,
-      providerKey: snapshot.providerKey,
-      entry,
-      skipSeamValidation: true
-    });
-    if (!result.ok)
-      stateFor(snapshot.sessionId).acceptedInputs = null;
-    const measuredPrefix = result.ok ? measuredPrefixFor(snapshot, slot, parentOf) : undefined;
-    return result.ok && measuredPrefix ? { ...result, measuredPrefix } : result;
-  };
-  const captureAppliedPass = (args) => {
-    args.assertCurrentPass?.();
-    const { snapshot } = args;
-    if (snapshot.preparationFailure || snapshot.inputs.length === 0) {
-      if (args.publishServedNumbers)
-        throw new PiLkgUncapturable(snapshot.preparationFailure ?? "lkg_inputs_empty", "Pi LKG input preparation failed");
-      return;
+      pi.appendEntry(ENTRY_TYPE, { message });
+    } catch (error) {
+      log2("[magic-context][pi] refusal entry failed", error);
+    } finally {
+      if (!budget.sideTurn)
+        ctx.abort();
     }
-    const state = stateFor(snapshot.sessionId);
-    let jsonPrefix;
     try {
-      const detachedOutputs = plainOutputFields(args.outputMessages);
-      const plainOutput = detachedOutputs !== null;
-      const outputs = detachedOutputs ?? [];
-      const priorOutput = plainOutput ? state.outputSnapshot : null;
-      const prefix = exactReusablePrefix(outputs, priorOutput?.inputs ?? null);
-      const jsonMessages = [
-        ...priorOutput?.jsonMessages.slice(0, prefix) ?? [],
-        ...plainOutput ? args.outputMessages.slice(prefix).map((message) => JSON.stringify(message) ?? "null") : []
-      ];
-      jsonPrefix = !plainOutput ? JSON.stringify(args.outputMessages) : priorOutput && prefix === outputs.length && prefix === priorOutput.inputs.length ? priorOutput.json : `[${jsonMessages.join(",")}]`;
-      args.assertCurrentPass?.();
-      state.outputSnapshot = plainOutput ? {
-        inputs: outputs,
-        jsonMessages,
-        json: jsonPrefix
-      } : null;
+      options.onRefusal?.(ctx, budget, message, isCurrent);
     } catch (error) {
-      args.assertCurrentPass?.();
-      if (args.publishServedNumbers)
-        throw new PiLkgUncapturable("lkg_output_serialize_failed", error instanceof Error ? error.message : String(error), error);
-      dropSlot(snapshot.sessionId, "lkg_snapshot_serialize_failed");
-      const failedState = stateFor(snapshot.sessionId);
-      failedState.syncCaptureRequired = true;
-      failedState.acceptedInputs = null;
-      sessionLog2(snapshot.sessionId, "LKG SNAPSHOT PREPARATION FAILED; forcing synchronous capture on the next applied pass:", error);
-      return;
+      log2("[magic-context][pi] refusal diagnostic failed", error);
     }
-    const idsByDigest = new Map;
-    if (!args.outputEntryIds)
-      for (const input of snapshot.inputs) {
-        const digest = lkgContentDigestFromFields(input.fields);
-        idsByDigest.set(digest, idsByDigest.has(digest) ? undefined : input.id);
-      }
-    const inferredIds = args.outputEntryIds ?? args.outputMessages.map((message) => {
-      const fields = lkgContentFields(message);
-      if (!fields)
-        return;
-      const digest = lkgContentDigestFromFields(fields);
-      return idsByDigest.get(digest);
+  };
+  if (fenceEnabled) {
+    pi.on("agent_start", (_event, ctx) => {
+      const key = operationKey(ctx);
+      lifecycleCounts(key).starts++;
+      const pending = operations.get(key);
+      const active = pending && !pending.started && !pending.ended ? pending : newOperation();
+      active.started = true;
+      operations.set(key, active);
     });
-    const outputIds = args.outputEntryIds ?? inferredIds;
-    const inputIds = new Set(snapshot.inputs.map((input) => input.id));
-    const ownership = outputIds.length === args.outputMessages.length && outputIds.every((id) => id === null || typeof id === "string" && inputIds.has(id)) ? [...outputIds] : undefined;
-    args.assertCurrentPass?.();
-    state.captureSequence += 1;
-    const plan = {
-      sessionId: snapshot.sessionId,
-      inputs: snapshot.inputs,
-      jsonPrefix,
-      modelKey: snapshot.modelKey,
-      providerKey: snapshot.providerKey,
-      capturedAt: Date.now(),
-      captureSequence: state.captureSequence
-    };
-    const noteCapturedRequest = () => {
-      if (state.measuredRequest && (state.measuredRequest.modelKey !== plan.modelKey || state.measuredRequest.providerKey !== plan.providerKey || state.measuredRequest.envelopeSignature !== args.hostEnvelopeSignature || !extendsMeasuredRequest(state.measuredRequest.jsonPrefix, jsonPrefix)))
-        state.measuredRequest = undefined;
-      state.capturedRequest = args.hostEnvelopeSignature ? { ...plan, envelopeSignature: args.hostEnvelopeSignature } : undefined;
-    };
-    if (!args.publishServedNumbers)
-      noteCapturedRequest();
-    const livePrior = getSlot(snapshot.sessionId);
-    const unchanged = livePrior && livePrior.modelKey === plan.modelKey && livePrior.providerKey === plan.providerKey && livePrior.jsonPrefix === plan.jsonPrefix && livePrior.inputIdSeq.length === plan.inputs.length && exactReusablePrefix(plan.inputs, state.acceptedInputs) === plan.inputs.length && JSON.stringify(livePrior.piOutputEntryIds) === JSON.stringify(ownership);
-    args.assertCurrentPass?.();
-    if (unchanged && !state.syncCaptureRequired && !args.publishServedNumbers) {
-      const kept = {
-        ...livePrior,
-        capturedAt: plan.capturedAt,
-        captureSequence: plan.captureSequence
-      };
-      if (captureSlot(plan.sessionId, kept))
-        state.acceptedSlot = kept;
-      else
-        state.syncCaptureRequired = true;
-    }
-    if (args.cacheBusting && !unchanged) {
-      dropSlot(snapshot.sessionId, "lkg_cache_bust_pending_capture");
-    }
-    const commit = () => {
-      try {
-        args.assertCurrentPass?.();
-      } catch (error) {
-        if (args.publishServedNumbers)
-          throw error;
-        sessionLog2(plan.sessionId, "DISCARDED CONTEXT RESULT: queued LKG capture", error);
-        return;
-      }
-      if (plan.captureSequence !== state.captureSequence)
-        return;
-      const startedAt = performance.now();
-      let reusedPrefix = 0;
-      try {
-        const inputIdSeq = plan.inputs.map((input) => input.id);
-        const prior = getSlot(plan.sessionId);
-        const digestPrior = prior ?? state.acceptedSlot;
-        const reusePrior = digestPrior?.inputContentSignatures !== undefined && digestPrior.modelKey === plan.modelKey && digestPrior.providerKey === plan.providerKey ? {
-          slot: digestPrior,
-          signatures: digestPrior.inputContentSignatures
-        } : undefined;
-        const reusablePrefix = reusePrior ? exactReusablePrefix(plan.inputs, state.acceptedInputs) : 0;
-        const inputContentSignatures = [
-          ...reusePrior ? reusePrior.signatures.slice(0, reusablePrefix) : [],
-          ...plan.inputs.slice(reusablePrefix).map((input) => signatureForFields(input.fields))
-        ];
-        const verifiedOwnPrefix = reusePrior && digestPrior === state.acceptedSlot && reusePrior.slot.inputIdSeq.length === reusePrior.signatures.length && reusePrior.signatures.length === reusePrior.slot.inputContentDigests.length;
-        let digestPrefix = 0;
-        if (verifiedOwnPrefix && reusePrior) {
-          while (digestPrefix < reusablePrefix && !isLegacyLkgDigest(reusePrior.slot.inputContentDigests[digestPrefix] ?? ""))
-            digestPrefix++;
-        }
-        const incremental = verifiedOwnPrefix && reusePrior ? {
-          reusedPrefix: digestPrefix,
-          digests: [
-            ...reusePrior.slot.inputContentDigests.slice(0, digestPrefix),
-            ...plan.inputs.slice(digestPrefix).map((input) => lkgContentDigestFromFields(input.fields))
-          ]
-        } : incrementalLkgContentDigests(plan.inputs.map((input, index) => ({
-          id: input.id,
-          signature: inputContentSignatures[index] ?? "",
-          fields: input.fields
-        })), reusePrior ? {
-          ids: reusePrior.slot.inputIdSeq.slice(0, reusablePrefix),
-          signatures: reusePrior.signatures.slice(0, reusablePrefix),
-          digests: reusePrior.slot.inputContentDigests.slice(0, reusablePrefix)
-        } : undefined);
-        reusedPrefix = incremental.reusedPrefix;
-        if (!args.publishServedNumbers && !state.syncCaptureRequired && prior && reusedPrefix === plan.inputs.length && prior.inputIdSeq.length === plan.inputs.length && prior.jsonPrefix === plan.jsonPrefix && JSON.stringify(prior.piOutputEntryIds) === JSON.stringify(ownership)) {
-          args.assertCurrentPass?.();
-          state.acceptedInputs = plan.inputs;
+    pi.on("agent_end", (event, ctx) => {
+      const key = operationKey(ctx);
+      const lifecycleSeen = lifecycleCounts(key);
+      lifecycleSeen.ends = Math.min(lifecycleSeen.ends + 1, lifecycleSeen.starts);
+      const counts = sideSessions.get(key);
+      if (counts)
+        log2(`[magic-context][pi] OMP context counts session=${String(key)} side_contexts=${counts.sides} context_passes=${counts.contexts} dispatch_fence=${counts.sides ? "latched off" : "on"}`);
+      const operation = operations.get(key);
+      if (operation) {
+        if (endBelongsToEarlierRun(operation, event) || lifecycleSeen.starts > lifecycleSeen.ends && dispatchedEndBelongsToEarlierRun(operation, event, ctx)) {
+          if (operation.dispatched)
+            operation.retainedAfterEnd = true;
+          if (lifecycleSeen.starts <= lifecycleSeen.ends)
+            operation.started = false;
+          log2(`[magic-context][pi] agent_end attributed to an earlier run; keeping the latest context pass session=${String(key)} ${operation.pass?.diagnostic() ?? ""}`);
           return;
         }
-        const slot = {
-          jsonPrefix: plan.jsonPrefix,
-          piOutputEntryIds: ownership,
-          inputIdSeq,
-          inputContentDigests: incremental.digests,
-          inputContentSignatures,
-          lastInputMessageId: plan.inputs.at(-1)?.id ?? "",
-          modelKey: plan.modelKey,
-          providerKey: plan.providerKey,
-          capturedAt: plan.capturedAt,
-          captureSequence: plan.captureSequence
-        };
-        args.assertCurrentPass?.();
-        if (args.publishServedNumbers) {
-          if (lkgSlotRejection(plan.sessionId, slot))
-            throw new PiLkgUncapturable("lkg_slot_rejected", "LKG slot rejected the Pi snapshot");
-          if (!saveLkgSlotToDb(db, plan.sessionId, slot, args.publishServedNumbers, {
-            rebuild: args.releaseRecovery,
-            retainDirtyRevision: !args.releaseRecovery ? state.recoveryPrefix?.fenceRevision : undefined
-          })) {
-            throw new Error("Pi LKG/served publication failed");
-          }
-          args.assertCurrentPass?.();
+        operation.ended = true;
+        operation.ready = false;
+        releasePiOperationPayloads(operation);
+      }
+    });
+    pi.on("before_provider_request", (event, ctx) => {
+      const cancelledOperation = operations.get(operationKey(ctx));
+      const signal = ctx.signal;
+      if (signal ? signal.aborted : cancelledOperation?.pass?.isCancelled()) {
+        cancelledOperation?.pass?.cancel();
+        if (cancelledOperation)
+          cancelledOperation.ready = false;
+        return;
+      }
+      if (options.compactionOff?.(ctx))
+        return;
+      const payload = event.payload;
+      const key = operationKey(ctx);
+      if (sideSessions.get(key)?.sides)
+        return;
+      const nonces = unsendableNonces.get(key);
+      if (nonces?.size) {
+        const serializedPayload = JSON.stringify(payload);
+        if (serializedPayload && [...nonces].some((nonce) => serializedPayload.includes(nonce))) {
+          const budget = new PiContextBudget;
+          budget.stage = "provider dispatch";
+          refuse(ctx, budget, "superseded context fallback is not a managed request", () => true);
+          return;
         }
-        if (!captureSlot(plan.sessionId, slot)) {
-          throw new Error("LKG slot rejected the Pi snapshot");
+      }
+      if (isOmpAdvisorRequest(payload))
+        return;
+      let operation = operations.get(key);
+      if (!operation) {
+        operation = newOperation();
+        operations.set(key, operation);
+      }
+      const active = operation;
+      const isCurrent = () => operations.get(key) === active;
+      const capture = isOmpUnmanagedCaptureRequest(payload);
+      const budget = (capture ? undefined : active.pass) ?? new PiContextBudget;
+      if (active.refused && active.pass === budget) {
+        ctx.abort();
+        return;
+      }
+      let refusalOrigin;
+      try {
+        if (capture)
+          throw new Error("no context pass ran for OMP auto-learn capture; raw conversation refused");
+        if (!active.pass)
+          throw new Error("no context pass ran for this operation");
+        if (!budget.completed && (budget.abandoned || budget.elapsed() >= PI_CONTEXT_BUDGET.outcomeMs))
+          throw new PiContextDeadlineError(budget.diagnostic());
+        if (active.ended) {
+          refusalOrigin = "agent_end";
+          throw new Error("the run that owned the latest context pass has ended; no managed result for this request");
         }
-        state.acceptedInputs = plan.inputs;
-        state.acceptedSlot = slot;
-        if (state.recoveryPrefix) {
-          state.recoveryPrefix = args.releaseRecovery ? undefined : {
-            ...state.recoveryPrefix,
-            inputs: plan.inputs,
-            json: plan.jsonPrefix,
-            outputEntryIds: ownership ?? state.recoveryPrefix.outputEntryIds
-          };
+        if (!budget.completed || !active.ready || active.refused || budget.abandoned)
+          throw new Error("context pass ran without a managed context receipt");
+        if (!piHasManagedSignature(payload, active.managedSignature))
+          throw new Error("provider request does not match this pass's managed dispatch (missing current receipt signature)");
+        const fields = piConversationFields(payload);
+        if (!fields)
+          throw new Error("provider conversation identity could not be established");
+        const body = payload;
+        const skipReason = active.preparedStructure ? active.preparedStructure.structuralSkipReason ?? (active.preparedStructure.api && body?.messages === undefined && Array.isArray(body?.input) && !active.preparedStructure.responsesMessages ? "provider selected Responses items without a matching history plan" : undefined) : "prepared history representation is not modeled";
+        if (skipReason && !structureWarnings.has(key)) {
+          structureWarnings.set(key, true);
+          log2(`[magic-context][pi] OMP structural comparison skipped: ${skipReason}; stale prepared requests are not detected on this pass; session=${String(key)}`);
         }
-        const persisted = args.publishServedNumbers ? true : saveLkgSlotToDb(db, plan.sessionId, slot, undefined, {
-          rebuild: args.releaseRecovery,
-          retainDirtyRevision: state.recoveryPrefix?.fenceRevision
+        const structureMismatch = skipReason ? undefined : piPreparedStructureMismatch(payload, active.preparedStructure, (counts) => {
+          if (imageTrimNotices.has(key))
+            return;
+          imageTrimNotices.set(key, true);
+          log2(`[magic-context][pi] OMP provider images trimmed: planned=${counts.planned} actual=${counts.actual} trimmed=${counts.trimmed}`);
         });
-        state.syncCaptureRequired = !persisted;
-        if (args.publishServedNumbers)
-          noteCapturedRequest();
-      } catch (error) {
-        if (args.publishServedNumbers) {
-          state.syncCaptureRequired = true;
-          state.acceptedInputs = null;
-          throw error;
+        if (structureMismatch)
+          throw new Error(`provider request does not match this pass's managed dispatch (prepared turn structure); ${structureMismatch}`);
+        if (active.dispatched) {
+          if (!active.dispatchFields || exactReusablePrefix([{ id: "conversation", fields }], [{ id: "conversation", fields: active.dispatchFields }]) !== 1)
+            throw new Error("provider request does not match this pass's managed dispatch");
         }
-        try {
-          args.assertCurrentPass?.();
-        } catch (discarded) {
-          sessionLog2(plan.sessionId, "DISCARDED CONTEXT RESULT: LKG publication", discarded);
-          return;
+        if (!active.dispatched && active.inputMessages && (!active.inputBranch || active.inputBranch.anchorIndex < active.inputMessages.length - 1)) {
+          const previous = active.inputBranch;
+          const persisted = inputBranch(ctx, active.inputMessages);
+          if (!previous || persisted && persisted.anchorIndex > previous.anchorIndex && persisted.entryIds[previous.anchorIndex] === previous.anchorId)
+            active.inputBranch = persisted;
         }
-        if (plan.captureSequence !== state.captureSequence)
+        if (!active.dispatched)
+          active.dispatchFields = fields;
+        active.dispatched = true;
+      } catch (error) {
+        if (signal ? signal.aborted : budget.isCancelled(error)) {
+          budget.cancel();
+          active.ready = false;
           return;
-        dropSlot(plan.sessionId, "lkg_async_capture_failed");
-        state.syncCaptureRequired = true;
-        state.acceptedInputs = null;
-        sessionLog2(plan.sessionId, "LKG ASYNC CAPTURE FAILED; forcing synchronous capture on the next applied pass:", error);
-      } finally {
-        try {
-          onCaptureTiming?.({
-            sessionId: plan.sessionId,
-            elapsedMs: performance.now() - startedAt,
-            reusedPrefix
+        }
+        active.refused = true;
+        budget.stage = refusalOrigin ? `provider dispatch (origin=${refusalOrigin}; context stage=${budget.stage})` : "provider dispatch";
+        refuse(ctx, budget, error, isCurrent);
+      }
+    });
+  }
+  pi.registerEntryRenderer?.(ENTRY_TYPE, (entry) => new Text2(entry.data?.message ?? RETRY_MESSAGE, 0, 0));
+  pi.on("context", async (event, ctx) => {
+    if (fenceEnabled && isOmpDumpContext())
+      return { messages: event.messages };
+    const budget = new PiContextBudget;
+    budget.signal = event.signal ?? ctx.signal;
+    budget.sideTurn = fenceEnabled && isOmpSideContext(event);
+    const key = operationKey(ctx);
+    if (fenceEnabled) {
+      let counts = sideSessions.get(key);
+      if (!counts) {
+        counts = { contexts: 0, sides: 0 };
+        sideSessions.set(key, counts);
+      }
+      counts.contexts++;
+      if (budget.sideTurn && ++counts.sides === 1)
+        log2(`[magic-context][pi] OMP dispatch fence disabled for session ${String(key)}: verified ephemeral context; session-wide abort cannot distinguish provider operations (side_contexts=${counts.sides} context_passes=${counts.contexts})`);
+    }
+    const owner = budget.sideTurn ? operations.get(key) : undefined;
+    let operation = operations.get(key);
+    if (budget.sideTurn || !operation || operation.ended || !fenceEnabled) {
+      operation = newOperation();
+      if (!budget.sideTurn)
+        operations.set(key, operation);
+    }
+    const active = operation;
+    active.pass = budget;
+    releasePiOperationPayloads(active);
+    active.retainedAfterEnd = false;
+    active.dispatched = false;
+    active.ready = false;
+    active.refused = false;
+    const { isOwned, isCurrent, assertOwner } = createPiContextOwnershipGuards(operations, key, active, budget, owner);
+    budget.assertOwner = assertOwner;
+    try {
+      budget.assertOutcome();
+      let inputs;
+      if (fenceEnabled && !budget.sideTurn) {
+        active.inputKeys = inputMessageKeys(event);
+        inputs = messageSnapshots(event.messages);
+        active.inputMessages = inputs;
+      }
+      const result = await budget.waitMandatory(Promise.resolve(withSqliteTransformPass2(() => handler(event, ctx, budget))));
+      if (result?.messages) {
+        const prepared = preparePiDispatch(result.messages, fenceEnabled ? ctx.model : undefined, fenceEnabled);
+        if (prepared.messages !== result.messages)
+          result.messages = prepared.messages;
+        active.managedSignature = piManagedSignature(result.messages);
+        active.preparedStructure = prepared.structure;
+        budget.completed = true;
+        active.ready = true;
+        if (inputs)
+          active.inputBranch = inputBranch(ctx, inputs);
+      }
+      return result;
+    } catch (error) {
+      if (budget.isCancelled(error)) {
+        budget.cancel();
+        if (isOwned())
+          active.ready = false;
+        return;
+      }
+      if (error instanceof PiContextSupersededError || !isCurrent()) {
+        if (fenceEnabled && !budget.sideTurn && !sideSessions.get(key)?.sides && !options.compactionOff?.(ctx)) {
+          const nonce = crypto.randomUUID();
+          let nonces = unsendableNonces.get(key);
+          if (!nonces) {
+            nonces = new Set;
+            unsendableNonces.set(key, nonces);
+          }
+          nonces.add(nonce);
+          if (nonces.size > MAX_UNSENDABLE_NONCES_PER_SESSION) {
+            const oldest = nonces.values().next().value;
+            if (oldest !== undefined)
+              nonces.delete(oldest);
+          }
+          event.messages.push({
+            role: "user",
+            content: [
+              {
+                type: "text",
+                text: `Magic Context did not prepare this request for the current turn. ${nonce}`
+              }
+            ],
+            timestamp: Date.now()
           });
-        } catch {}
+        }
+        log2(`[magic-context][pi] DISCARDED CONTEXT RESULT ${budget.diagnostic()}`, error);
+        throw error;
       }
-    };
-    if (args.publishServedNumbers || state.syncCaptureRequired) {
-      commit();
-    } else {
-      try {
-        scheduleCapture(commit);
-      } catch (error) {
-        dropSlot(plan.sessionId, "lkg_capture_schedule_failed");
-        state.syncCaptureRequired = true;
-        state.acceptedInputs = null;
-        sessionLog2(plan.sessionId, "LKG CAPTURE SCHEDULE FAILED; forcing synchronous capture on the next applied pass:", error);
+      log2("[magic-context][pi] turn refused", error);
+      if (typeof ctx.abort !== "function") {
+        budget.abandoned = true;
+        options.onRefusal?.(ctx, budget, error instanceof Error ? error.message : String(error), isOwned);
+        throw error;
       }
+      active.refused = true;
+      refuse(ctx, budget, error, isOwned);
+      return { messages: event.messages };
+    } finally {
+      if (!fenceEnabled || budget.sideTurn)
+        releasePiOperationPayloads(active);
     }
-    return state.outputSnapshot ?? undefined;
-  };
+  });
+}
+
+// src/pi-fallback-index.ts
+function createPiFallbackIndex() {
+  const prior = [];
+  let priorHadDuplicateIds = false;
+  const byHeader = new Map;
+  const positions = new Map;
+  const owners = new Map;
+  let rebuilt = 0;
   return {
-    noteRecovery,
-    recoveryEntryIds,
-    recoveryFor,
-    beginPass(args) {
-      return {
-        ...beginPass(args),
-        systemEntries: args.messages.filter(isPiSystemEntry).map((message) => JSON.stringify(message))
-      };
+    get rebuiltMessages() {
+      return rebuilt;
     },
-    replay(snapshot, parentOf) {
-      const result = replay(snapshot, parentOf);
-      if (!result.ok)
-        return result;
-      const systems = result.messages.filter(isPiSystemEntry).map((message) => JSON.stringify(message));
-      let cursor = 0;
-      for (const expected of snapshot.systemEntries ?? []) {
-        const index = systems.indexOf(expected, cursor);
-        if (index < 0)
-          return { ok: false, reason: "lkg_system_state_mismatch" };
-        cursor = index + 1;
+    update(args) {
+      const selected = new Map;
+      const guardIndexes = [];
+      const inputs = [];
+      const seen = new Set;
+      let duplicate = false;
+      for (let index = 0;index < args.messages.length; index++) {
+        const message = args.messages[index];
+        const id = args.resolveId(message, index) ?? `unmapped:${index}`;
+        if (seen.has(id))
+          duplicate = true;
+        seen.add(id);
+        const fields = (message && typeof message === "object" ? args.fields?.get(message) : undefined) ?? lkgContentFields(message && typeof message === "object" ? {
+          role: message.role,
+          timestamp: message.timestamp,
+          responseId: message.responseId,
+          toolCallId: message.toolCallId,
+          content: message.content
+        } : message);
+        inputs.push({ id, fields: fields ?? [Symbol()] });
       }
-      return result;
-    },
-    captureAppliedPass,
-    measureOutgoingPrefix(snapshot, messages, parentOf) {
-      try {
-        const slot = getSlot(snapshot.sessionId);
-        const measured = measuredPrefixFor(snapshot, slot, parentOf);
-        if (!slot || !measured)
-          return;
-        const prefix = JSON.parse(slot.jsonPrefix);
-        if (!Array.isArray(prefix) || messages.length < prefix.length || JSON.stringify(messages.slice(0, prefix.length)) !== slot.jsonPrefix)
-          return;
-        const measuredRequest = stateFor(snapshot.sessionId).measuredRequest;
-        if (!measuredRequest)
-          return;
-        const measuredLength = JSON.parse(measuredRequest.jsonPrefix).length;
-        const appendedMessages = messages.slice(measuredLength);
-        if (completedProviderUsage(appendedMessages[0])?.signature !== measuredRequest.usage.signature)
-          return;
-        return { ...measured, appendedMessages };
-      } catch {
-        return;
+      let prefix = priorHadDuplicateIds ? 0 : exactReusablePrefix(inputs, prior);
+      if (duplicate) {
+        prefix = 0;
+        selected.clear();
       }
+      priorHadDuplicateIds = duplicate;
+      for (let index = 0;index < prefix; index++) {
+        const old = prior[index];
+        if (old && !args.reusable?.has(old.id)) {
+          guardIndexes.push(index);
+          if (old.fingerprint)
+            selected.set(old.id, old.fingerprint);
+        }
+      }
+      for (const old of prior.slice(prefix)) {
+        positions.delete(old.id);
+        if (old.header) {
+          const bucket = byHeader.get(old.header);
+          bucket?.delete(old);
+          if (!bucket?.size)
+            byHeader.delete(old.header);
+        }
+        for (const [key, ids] of old.owners) {
+          const bucket = owners.get(key);
+          for (const id of ids)
+            bucket?.delete(id);
+          if (!bucket?.size)
+            owners.delete(key);
+        }
+      }
+      prior.length = prefix;
+      for (let index = prefix;index < args.messages.length; index++) {
+        guardIndexes.push(index);
+        const message = args.messages[index];
+        const input = inputs[index];
+        if (!input)
+          continue;
+        const record = {
+          ...input,
+          header: args.header(message),
+          fingerprint: input.id.startsWith("unmapped:") ? null : args.fingerprint(message),
+          owners: input.id.startsWith("unmapped:") ? new Map : args.toolOwners(message, input.id)
+        };
+        rebuilt++;
+        prior.push(record);
+        if (!positions.has(record.id))
+          positions.set(record.id, index);
+        if (record.header) {
+          const bucket = byHeader.get(record.header) ?? new Set;
+          bucket.add(record);
+          byHeader.set(record.header, bucket);
+        }
+        for (const [key, ids] of record.owners) {
+          const bucket = owners.get(key) ?? new Set;
+          for (const id of ids)
+            bucket.add(id);
+          owners.set(key, bucket);
+        }
+        if (!args.reusable?.has(record.id) && record.fingerprint)
+          selected.set(record.id, record.fingerprint);
+      }
+      return {
+        positions,
+        owners,
+        changedFrom: prefix,
+        guardIndexes,
+        fingerprints(headers) {
+          const result = new Map(selected);
+          const records = headers ? [...headers].flatMap((header) => [
+            ...byHeader.get(header) ?? []
+          ]) : headers === null ? prior : [];
+          for (const record of records)
+            if (record.fingerprint)
+              result.set(record.id, record.fingerprint);
+          return result;
+        }
+      };
     }
   };
 }
-function resolvePiLkgOutputEntryIds(messages, syntheticLeadingCount, entryId) {
-  const ids = messages.map((message, index) => index < syntheticLeadingCount && !isPiSystemEntry(message) ? null : isRecord(message) ? entryId(message) : undefined);
-  const syntheticOwners = new Map;
-  for (let index = 0;index < messages.length; index++) {
-    const message = messages[index];
-    const owner = ids[index];
-    if (typeof owner !== "string" || !isRecord(message) || message.role !== "assistant" || !Array.isArray(message.content))
-      continue;
-    for (const part of message.content) {
-      if (isRecord(part) && part.type === "toolCall" && part.syntheticTodoMarker === true && typeof part.id === "string")
-        syntheticOwners.set(part.id, syntheticOwners.has(part.id) ? undefined : owner);
+
+// src/pi-fit-reclaim.ts
+import { createHash as createHash12, randomUUID as randomUUID4 } from "node:crypto";
+var pendingInput = new Set;
+var KEY2 = "piUpperEstimateReclaim";
+function piFitOverflowPossible(args) {
+  if (!args.hasUI && args.inputTokens <= 0 || args.recoveryArmed || args.forceMaterialization || args.imported || args.coldInjection || args.cacheBusting || pendingInput.has(args.sessionId))
+    return true;
+  if (!args.contextLimit || !Number.isFinite(args.contextLimit))
+    return false;
+  const headroom = args.contextLimit * ((args.forcePercentage ?? 85) / 100) - args.inputTokens;
+  let appendedBytes = 0;
+  try {
+    for (const message of args.appendedMessages ?? []) {
+      appendedBytes += piFitMessageBytes(message);
+      if (2 * appendedBytes >= headroom)
+        return true;
     }
+  } catch {
+    return true;
   }
-  return ids.map((id, index) => {
-    const message = messages[index];
-    return id === undefined && isRecord(message) && message.role === "toolResult" && message.syntheticTodoMarker === true && typeof message.toolCallId === "string" ? syntheticOwners.get(message.toolCallId) : id;
-  });
+  return false;
+}
+function clearPiUpperReclaimSession(sessionId) {
+  pendingInput.delete(sessionId);
+}
+function requestPiFitReclaimInput(sessionId) {
+  pendingInput.add(sessionId);
+}
+function clearPiFitReclaimInput(sessionId) {
+  pendingInput.delete(sessionId);
+}
+function piUpperReclaimCursor(args) {
+  const head = args.head;
+  return {
+    sessionId: args.sessionId,
+    modelKey: args.modelKey,
+    contextWindow: args.contextWindow ?? null,
+    head: head ? createHash12("sha256").update(JSON.stringify([
+      Buffer.from(head.cachedM0Bytes ?? []).toString("base64"),
+      Buffer.from(head.cachedM1Bytes ?? []).toString("base64"),
+      head.cachedM0MuralDataUrl ?? null
+    ])).digest("hex") : null,
+    recoveryArmedAt: getEmergencyRecoveryArmedAt(args.sessionId)
+  };
+}
+function claimFrom(value, sessionId) {
+  const claim = value;
+  return claim?.sessionId === sessionId && (typeof claim.modelKey === "string" || claim.modelKey === null) ? claim : null;
+}
+function canReclaim(previous, cursor) {
+  return !previous || previous.modelKey !== cursor.modelKey || (previous.contextWindow ?? null) !== cursor.contextWindow || (previous.head ?? null) !== cursor.head || cursor.recoveryArmedAt !== null && cursor.recoveryArmedAt !== previous.recoveryArmedAt;
+}
+function shouldReclaimPiUpperEstimate(db, cursor) {
+  if (!cursor)
+    return false;
+  return canReclaim(claimFrom(readReplayEnvelope(db, cursor.sessionId)[KEY2], cursor.sessionId), cursor);
+}
+function reservePiUpperEstimateReclaim(db, cursor) {
+  const reservation = randomUUID4();
+  return db.transaction(() => {
+    let claimed = false;
+    if (!updateReplayDocument(db, cursor.sessionId, (doc) => {
+      claimed = canReclaim(claimFrom(doc[KEY2], cursor.sessionId), cursor);
+      if (!claimed)
+        return false;
+      doc.version = 2;
+      doc[KEY2] = { ...cursor, reservation };
+      return true;
+    }))
+      throw new Error("Could not reserve upper-estimate reclaim");
+    return claimed ? reservation : undefined;
+  }).immediate();
+}
+function recordPiUpperEstimateReclaim(db, cursor, reservation) {
+  const owner = reservation ?? reservePiUpperEstimateReclaim(db, cursor);
+  if (!owner)
+    return;
+  if (!updateReplayDocument(db, cursor.sessionId, (doc) => {
+    if (claimFrom(doc[KEY2], cursor.sessionId)?.reservation !== owner)
+      return false;
+    doc.version = 2;
+    doc[KEY2] = cursor;
+    return true;
+  }))
+    throw new Error("Could not persist upper-estimate reclaim cursor");
+  pendingInput.delete(cursor.sessionId);
+}
+function releasePiUpperEstimateReclaim(db, cursor, reservation) {
+  if (!updateReplayDocument(db, cursor.sessionId, (doc) => {
+    if (claimFrom(doc[KEY2], cursor.sessionId)?.reservation !== reservation)
+      return false;
+    delete doc[KEY2];
+    return true;
+  }))
+    throw new Error("Could not release upper-estimate reclaim");
+}
+function resetPiUpperEstimateReclaim(db, sessionId) {
+  if (!claimFrom(readReplayEnvelope(db, sessionId)[KEY2], sessionId))
+    return;
+  if (!updateReplayDocument(db, sessionId, (doc) => {
+    delete doc[KEY2];
+    return true;
+  }))
+    throw new Error("Could not clear upper-estimate reclaim cursor");
 }
 
 // src/pi-lkg-fit-envelope.ts
@@ -37749,7 +37770,15 @@ import { createHash as createHash15 } from "node:crypto";
 
 // src/served-array-ledger.ts
 import { createHash as createHash14 } from "node:crypto";
-import { readFileSync as readFileSync11, statSync as statSync6 } from "node:fs";
+import {
+  closeSync as closeSync2,
+  fstatSync,
+  ftruncateSync,
+  openSync as openSync2,
+  readFileSync as readFileSync11,
+  readSync as readSync2,
+  statSync as statSync6
+} from "node:fs";
 import * as path12 from "node:path";
 
 // src/pi-served-identities.ts
@@ -37780,9 +37809,12 @@ function parseNumbers(value) {
   }
   return value;
 }
-function readPiCommittedServedNumbers(db, sessionId) {
+function readPiCommittedServedNumbers(db, sessionId, requireEnvelope = false) {
   try {
-    return parseNumbers(readReplayEnvelope(db, sessionId).piServedTagNumbers);
+    const numbers = readReplayEnvelope(db, sessionId).piServedTagNumbers;
+    if (requireEnvelope && numbers === undefined)
+      throw new PiServedEnvelopeUnavailable("No committed Pi served-number envelope for torn legacy tail");
+    return parseNumbers(numbers);
   } catch (error) {
     if (error instanceof ReplayDocumentError) {
       throw new PiServedEnvelopeUnavailable("Pi served-number envelope is unreadable", { cause: error });
@@ -37815,6 +37847,102 @@ var LEDGER_DIRECTORY = "pi-served-array-digests";
 var BODY_DIRECTORY = "pi-served-array-bodies";
 var IDENTITY_DIRECTORY = "pi-served-tag-numbers";
 var FLUSH_DELAY_MS = 25;
+var zeroTailWarnings = new BoundedSessionMap(1000);
+function noteZeroTail(sessionId, filePath, total, zeros) {
+  const warnings = zeroTailWarnings.get(sessionId) ?? new Set;
+  const key = `${filePath}:${total}:${zeros}`;
+  if (warnings.has(key))
+    return;
+  warnings.add(key);
+  zeroTailWarnings.set(sessionId, warnings);
+  log2(`[magic-context][pi] WARNING unwritten served-ledger tail session=${sessionId} file=${filePath} ignored_zero_bytes=${zeros} retained_bytes=${total - zeros} total_bytes=${total}`);
+}
+
+class PiServedTailUnavailable extends PiServedEnvelopeUnavailable {
+  completeNumbers;
+  constructor(completeNumbers) {
+    super("Torn Pi served-number tail; committed served-number envelope required to prevent identity reuse");
+    this.completeNumbers = completeNumbers;
+  }
+}
+function readLedgerLines(filePath, sessionId) {
+  let bytes;
+  try {
+    bytes = readFileSync11(filePath);
+  } catch (error) {
+    if (error.code === "ENOENT")
+      return { lines: [], torn: false };
+    throw new PiServedEnvelopeUnavailable(`Pi served ledger unreadable: ${filePath}`, { cause: error });
+  }
+  let end = bytes.length;
+  while (end > 0 && bytes[end - 1] === 0)
+    end--;
+  if (end < bytes.length && (end === 0 || bytes[end - 1] === 10)) {
+    noteZeroTail(sessionId, filePath, bytes.length, bytes.length - end);
+    bytes = bytes.subarray(0, end);
+  }
+  const boundary = bytes.lastIndexOf(10) + 1;
+  return {
+    lines: bytes.subarray(0, boundary).toString("utf8").split(`
+`),
+    torn: boundary !== bytes.length
+  };
+}
+function parseLedgerRow(line, filePath) {
+  try {
+    const row = JSON.parse(line);
+    if (row && typeof row === "object" && !Array.isArray(row))
+      return row;
+  } catch (error) {
+    throw new PiServedEnvelopeUnavailable(`Corrupt Pi served ledger JSON record: ${filePath}`, { cause: error });
+  }
+  throw new PiServedEnvelopeUnavailable(`Invalid Pi served ledger record: ${filePath}`);
+}
+function repairZeroTail(filePath, allowTornIdentity = false) {
+  let fd;
+  try {
+    fd = openSync2(filePath, "r+");
+  } catch (error) {
+    if (error.code === "ENOENT")
+      return;
+    throw error;
+  }
+  try {
+    const size = fstatSync(fd).size;
+    let end = size;
+    const chunk = Buffer.alloc(Math.min(size, 4096));
+    while (end > 0) {
+      const start = Math.max(0, end - chunk.length);
+      const count = readSync2(fd, chunk, 0, end - start, start);
+      if (count !== end - start)
+        throw new Error("Pi served ledger changed during tail repair");
+      let index = count - 1;
+      while (index >= 0 && chunk[index] === 0)
+        index--;
+      if (index >= 0) {
+        end = start + index + 1;
+        if (chunk[index] === 10)
+          break;
+        if (!allowTornIdentity)
+          throw new PiServedEnvelopeUnavailable(`Torn Pi served ledger tail; refusing append: ${filePath}`);
+        const newline = chunk.lastIndexOf(10, index);
+        if (newline >= 0) {
+          end = start + newline + 1;
+          break;
+        }
+        end = start;
+      } else
+        end = start;
+    }
+    if (end !== size) {
+      if (fstatSync(fd).size !== size)
+        throw new Error("Pi served ledger changed during tail repair");
+      ftruncateSync(fd, end);
+    }
+  } finally {
+    closeSync2(fd);
+  }
+}
 
 class PiServedIdentityError extends Error {
   constructor(cause) {
@@ -37851,7 +37979,17 @@ function clearPiServedArraySession(sessionId) {
 }
 function getPiServedTagNumbers(sessionId, storageDir = getMagicContextStorageDir(), db) {
   if (db) {
-    const legacy = getPiServedTagNumbers(sessionId, storageDir);
+    let legacy;
+    try {
+      legacy = getPiServedTagNumbers(sessionId, storageDir);
+    } catch (error) {
+      if (!(error instanceof PiServedTailUnavailable))
+        throw error;
+      return new Set([
+        ...error.completeNumbers,
+        ...readPiCommittedServedNumbers(db, sessionId, true)
+      ]);
+    }
     try {
       return new Set([
         ...legacy,
@@ -37868,26 +38006,20 @@ function getPiServedTagNumbers(sessionId, storageDir = getMagicContextStorageDir
   const cached = servedTagNumbersBySession.get(sessionId);
   if (cached?.path === filePath && sameIdentityFile(cached.stamp, stamp))
     return cached.numbers;
-  let text;
-  try {
-    text = readFileSync11(filePath, "utf8");
-  } catch (error) {
-    if (error.code !== "ENOENT")
-      throw error;
-    text = "";
-  }
+  const { lines, torn } = readLedgerLines(filePath, sessionId);
   const numbers = new Set;
-  for (const line of text.split(`
-`)) {
+  for (const line of lines) {
     if (!line.trim())
       continue;
-    const row = JSON.parse(line);
+    const row = parseLedgerRow(line, filePath);
     if (row.version !== 1 || row.session_id !== sessionId || !Array.isArray(row.tag_numbers) || !row.tag_numbers.every((number) => Number.isSafeInteger(number) && number > 0)) {
-      throw new Error("Invalid durable Pi served-number record; refusing identity adoption");
+      throw new PiServedEnvelopeUnavailable("Invalid durable Pi served-number record; refusing identity adoption");
     }
     for (const number of row.tag_numbers)
       numbers.add(number);
   }
+  if (torn)
+    throw new PiServedTailUnavailable(numbers);
   servedTagNumbersBySession.set(sessionId, { path: filePath, numbers, stamp });
   return numbers;
 }
@@ -37895,13 +38027,20 @@ function getPiLastServedDigest(sessionId, storageDir = getMagicContextStorageDir
   const previous = previousBySession.get(sessionId);
   if (previous)
     return previous.digest;
-  try {
-    const lines = readFileSync11(getPiServedArrayLedgerPath(sessionId, storageDir), "utf8").trim().split(`
-`);
-    const last = JSON.parse(lines.at(-1) ?? "");
-    if (last.version === 1 && last.session_id === sessionId && /^[a-f0-9]{64}$/.test(last.sha256))
-      return last.sha256;
-  } catch {}
+  const filePath = getPiServedArrayLedgerPath(sessionId, storageDir);
+  const { lines, torn } = readLedgerLines(filePath, sessionId);
+  let digest;
+  for (const line of lines) {
+    if (!line.trim())
+      continue;
+    const last = parseLedgerRow(line, filePath);
+    if (last.version !== 1 || last.session_id !== sessionId || typeof last.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(last.sha256) || !Number.isSafeInteger(last.sequence) || Number(last.sequence) < 1 || !Number.isSafeInteger(last.message_count) || Number(last.message_count) < 0)
+      throw new PiServedEnvelopeUnavailable(`Invalid Pi served digest record: ${filePath}`);
+    digest = last.sha256;
+  }
+  if (torn)
+    throw new PiServedEnvelopeUnavailable("Torn Pi served digest tail; exact-byte replay evidence unavailable");
+  return digest;
 }
 function getPiLastServedArray(sessionId) {
   const previous = previousBySession.get(sessionId);
@@ -37971,6 +38110,7 @@ function recordWriteFailure(error) {
 function appendPendingLines(filePath, lines) {
   try {
     ensureStorageDirectorySync(path12.dirname(filePath));
+    repairZeroTail(filePath);
     writeStorageFileSync(filePath, lines.join(""), {
       encoding: "utf8",
       flag: "a"
@@ -38027,7 +38167,17 @@ function capturePiServedArray(sessionId, messages, options = {}) {
     const digest = sha256(serializedArray);
     const storageDir = options.storageDir ?? getMagicContextStorageDir();
     identityPersistenceFailed = true;
-    const previousNumbers = options.recoveryWithoutTagState ? new Set : getPiServedTagNumbers(sessionId, storageDir);
+    let previousNumbers = new Set;
+    if (!options.recoveryWithoutTagState) {
+      try {
+        previousNumbers = getPiServedTagNumbers(sessionId, storageDir);
+      } catch (error) {
+        if (!(error instanceof PiServedTailUnavailable) || !options.db)
+          throw error;
+        readPiCommittedServedNumbers(options.db, sessionId, true);
+        previousNumbers = error.completeNumbers;
+      }
+    }
     const managedNumbers = options.recoveryWithoutTagState ? [] : options.servedTagNumbers ?? [];
     identityPersistenceFailed = false;
     const served = new Set(previousNumbers);
@@ -38068,6 +38218,7 @@ function capturePiServedArray(sessionId, messages, options = {}) {
       identityPersistenceFailed = true;
       ensureStorageDirectorySync(path12.dirname(identityPath));
       options.assertCurrentPass?.();
+      repairZeroTail(identityPath, !!options.db);
       writeStorageFileSync(identityPath, `${JSON.stringify({ version: 1, session_id: sessionId, tag_numbers: newNumbers })}
 `, {
         encoding: "utf8",
@@ -38572,209 +38723,6 @@ function resolvePiProvenInputFloor(args) {
   return observed;
 }
 
-// src/pi-raw-fallback.ts
-class PiStorageBusyError extends Error {
-  code = "PI_STORAGE_BUSY";
-  recoverable = true;
-  constructor(options) {
-    super("Magic Context storage is busy; send your message again", options);
-    this.name = "PiStorageBusyError";
-  }
-}
-
-class PiDegradedPassError extends Error {
-  site;
-  code = "PI_DEGRADED_PASS";
-  recoverable = true;
-  constructor(site, options) {
-    super("Magic Context could not finish preparing this turn; send your message again", options);
-    this.site = site;
-    this.name = "PiDegradedPassError";
-  }
-}
-function estimatePiOutgoingInputTokens(messages, observed, measuredPrefix, contextLimit) {
-  if (!observed || !Number.isFinite(observed.systemTokens) || observed.systemTokens <= 0 || !Number.isFinite(observed.toolDefinitionTokens) || observed.toolDefinitionTokens < 0 || !hasTokenizerForFit())
-    return { tokens: 0, trusted: false };
-  const knownRole = (message) => {
-    if (!message || typeof message !== "object")
-      return false;
-    return ["user", "assistant", "toolResult", "custom"].includes(message.role ?? "");
-  };
-  const countable = (message) => {
-    if (!knownRole(message))
-      return false;
-    const m = message;
-    return typeof m.content === "string" || Array.isArray(m.content) && m.content.every((p) => p && typeof p === "object" && ["text", "thinking", "redacted_thinking", "toolCall"].includes(String(p.type)));
-  };
-  const complete = messages.every(countable);
-  const measuredForBounds = measuredPrefix && measuredPrefix.modelKey === observed.modelKey && observed.envelopeSignature && measuredPrefix.envelopeSignature === observed.envelopeSignature && Number.isSafeInteger(measuredPrefix.inputTokens) && measuredPrefix.inputTokens > 0 ? measuredPrefix : undefined;
-  if (contextLimit && Number.isFinite(contextLimit) && contextLimit > 0) {
-    const priced = measuredForBounds?.appendedMessages ?? messages;
-    const baseline = measuredForBounds?.inputTokens ?? 0;
-    let contentBytes = 0;
-    for (const rawMessage of priced.filter(knownRole)) {
-      const message = rawMessage;
-      if (typeof message.content === "string")
-        contentBytes += Buffer.byteLength(message.content);
-      else if (Array.isArray(message.content))
-        for (const part of message.content) {
-          if (!part || typeof part !== "object")
-            continue;
-          for (const value of [
-            part.type === "text" ? part.text : undefined,
-            part.type === "thinking" && !part.redacted ? part.thinking : undefined,
-            part.type === "toolCall" ? part.name : undefined
-          ])
-            if (typeof value === "string")
-              contentBytes += Buffer.byteLength(value);
-          if (part.type === "toolCall" && part.arguments !== undefined)
-            contentBytes += Buffer.byteLength(JSON.stringify(part.arguments));
-        }
-      if (baseline + Math.ceil(contentBytes / 4) > contextLimit)
-        break;
-    }
-    const lower = baseline + Math.ceil(contentBytes / 4);
-    if (lower > contextLimit)
-      return {
-        tokens: lower,
-        trusted: false,
-        refusalGrade: true,
-        refusalTokens: lower,
-        refusalBasis: "byte-bound"
-      };
-    const envelope = measuredForBounds ? baseline : providerMass({
-      system: observed.systemTokens,
-      tools: observed.toolDefinitionTokens
-    }, observed.calibration ?? calibrationForModelKey(observed.modelKey), true);
-    const fit = observed.calibration ?? calibrationForModelKey(observed.modelKey);
-    const upper = envelope + Math.max(UNKNOWN_FIT_RATIO, fit.toolsRatio, fit.proseRatio) * priced.reduce((sum, message) => sum + piFitMessageBytes(message), 0);
-    if (upper <= contextLimit)
-      return {
-        tokens: upper,
-        trusted: true,
-        refusalGrade: false,
-        refusalBasis: "byte-bound"
-      };
-  }
-  if (!complete) {
-    return {
-      tokens: providerMass({
-        system: observed.systemTokens,
-        tools: observed.toolDefinitionTokens + messages.reduce((sum, message) => sum + piFitMessageBytes(message), 0)
-      }, observed.calibration ?? calibrationForModelKey(observed.modelKey), true),
-      trusted: true,
-      refusalGrade: false
-    };
-  }
-  const bounded = messages.some((rawMessage) => {
-    const content = rawMessage.content;
-    if (typeof content === "string")
-      return tokenCountUsesByteBound(content);
-    return content.some((part) => [
-      part.text,
-      part.redacted ? undefined : part.thinking,
-      part.name,
-      part.arguments === undefined ? undefined : JSON.stringify(part.arguments)
-    ].some((value) => typeof value === "string" && tokenCountUsesByteBound(value)));
-  });
-  if (bounded)
-    return {
-      tokens: providerMass({
-        system: observed.systemTokens,
-        tools: observed.toolDefinitionTokens + messages.reduce((sum, message) => sum + piFitMessageBytes(message), 0)
-      }, observed.calibration ?? calibrationForModelKey(observed.modelKey), true),
-      trusted: true,
-      refusalGrade: false,
-      refusalBasis: "byte-bound"
-    };
-  const raw = tokenizePiMessages([...messages]);
-  const calibration = observed.calibration ?? calibrationForModelKey(observed.modelKey);
-  const refusalCalibration = calibrationForModelKey(observed.modelKey);
-  const tokens = providerMass({
-    system: observed.systemTokens,
-    tools: observed.toolDefinitionTokens + raw.toolCall,
-    prose: raw.conversation
-  }, calibration, true);
-  const refusalGrade = Number.isFinite(tokens) && messages.every((rawMessage) => {
-    const content = rawMessage.content;
-    if (typeof content === "string")
-      return !tokenCountUsesByteBound(content);
-    return content.every((part) => [
-      part.text,
-      part.redacted ? undefined : part.thinking,
-      part.name,
-      part.arguments === undefined ? undefined : JSON.stringify(part.arguments)
-    ].every((value) => typeof value !== "string" || !tokenCountUsesByteBound(value)));
-  }) && hasMeasuredDecisionCalibration(refusalCalibration) && observed.toolDefinitionsMeasured === true && Number.isFinite(observed.refusalToolDefinitionTokens) && observed.refusalToolDefinitionTokens >= 0;
-  const measured = measuredPrefix && measuredPrefix.modelKey === observed.modelKey && observed.envelopeSignature && measuredPrefix.envelopeSignature === observed.envelopeSignature && Number.isSafeInteger(measuredPrefix.inputTokens) && measuredPrefix.inputTokens > 0 ? measuredPrefix : undefined;
-  const tail = measured ? tokenizePiMessages([...measured.appendedMessages]) : raw;
-  const refusalTokens = refusalGrade ? (measured?.inputTokens ?? 0) + providerMass({
-    system: measured ? 0 : observed.systemTokens,
-    tools: (measured ? 0 : observed.refusalToolDefinitionTokens) + tail.toolCall,
-    prose: tail.conversation
-  }, refusalCalibration) : undefined;
-  return {
-    tokens,
-    trusted: Number.isFinite(tokens),
-    refusalGrade,
-    refusalTokens,
-    refusalBasis: refusalGrade ? measured ? "provider-prefix" : "calibrated" : undefined
-  };
-}
-function assertPiRawFallbackFits(messages, contextLimit, log, cause, observed, measuredPrefix) {
-  if (!contextLimit || !Number.isFinite(contextLimit) || !observed || !Number.isFinite(observed.systemTokens) || observed.systemTokens <= 0 || !Number.isFinite(observed.toolDefinitionTokens) || observed.toolDefinitionTokens < 0 || observed.envelopeBytes !== undefined && (!Number.isFinite(observed.envelopeBytes) || observed.envelopeBytes < 0)) {
-    log("raw_fallback_refused completeness=partial");
-    throw new PiStorageBusyError({ cause });
-  }
-  const measured = measuredPrefix && measuredPrefix.modelKey === observed.modelKey && observed.envelopeSignature && measuredPrefix.envelopeSignature === observed.envelopeSignature && Number.isSafeInteger(measuredPrefix.inputTokens) && measuredPrefix.inputTokens > 0 ? measuredPrefix : undefined;
-  const baseInputTokens = measured?.inputTokens ?? 0;
-  const pricedMessages = measured?.appendedMessages ?? messages;
-  log(`lkg_fit_basis=${measured ? "provider_input" : "host_metadata"} measured_input=${baseInputTokens}`);
-  let bytes = measured ? 1 : 1 + (observed.envelopeBytes ?? 20 + 4 * (observed.systemTokens + observed.toolDefinitionTokens));
-  let serializationFailed = false;
-  try {
-    for (const message of pricedMessages) {
-      bytes += piFitMessageBytes(message) + 1;
-      if (baseInputTokens + Math.ceil(bytes / 4) > contextLimit)
-        break;
-    }
-  } catch {
-    serializationFailed = true;
-  }
-  const proxyTokens = baseInputTokens + Math.ceil(bytes / 4);
-  if (serializationFailed || proxyTokens > contextLimit) {
-    log(`raw_fallback_over_context_limit proxy_bytes=${bytes} proxy_tokens=${proxyTokens} limit=${contextLimit} early_abort=true serialization_failed=${serializationFailed}`);
-    throw new PiStorageBusyError({ cause });
-  }
-  const complete = pricedMessages.every((message) => {
-    if (!message || typeof message !== "object")
-      return false;
-    const m = message;
-    return ["user", "assistant", "toolResult", "custom"].includes(m.role ?? "") && (typeof m.content === "string" || Array.isArray(m.content) && m.content.every((p) => p !== null && typeof p === "object" && ["text", "thinking", "redacted_thinking", "toolCall"].includes(String(p.type))));
-  });
-  const raw = tokenizePiMessages([...pricedMessages]);
-  if (!hasTokenizerForFit()) {
-    log("raw_fallback_refused completeness=partial tokenizer=unavailable");
-    throw new PiStorageBusyError({ cause });
-  }
-  const tokens = baseInputTokens + providerMass({
-    system: measured ? 0 : observed.systemTokens,
-    tools: (measured ? 0 : observed.toolDefinitionTokens) + raw.toolCall,
-    prose: raw.conversation
-  }, observed.calibration ?? calibrationForModelKey(observed.modelKey), true);
-  if (!complete || !Number.isFinite(tokens) || tokens <= 0 || tokens > contextLimit || serializationFailed || proxyTokens > contextLimit) {
-    log(`raw_fallback_over_context_limit proxy_bytes=${bytes} proxy_tokens=${proxyTokens} limit=${contextLimit} early_abort=true serialization_failed=${serializationFailed}`);
-    throw new PiStorageBusyError({ cause });
-  }
-}
-function classifyPiOutgoingFit(estimate, limit) {
-  if (!limit || !Number.isFinite(limit) || limit <= 0)
-    return "fits-or-unknown";
-  if (estimate.refusalGrade && typeof estimate.refusalTokens === "number" && Number.isFinite(estimate.refusalTokens) && estimate.refusalTokens > limit)
-    return "over-window-proof";
-  return estimate.trusted && Number.isFinite(estimate.tokens) && estimate.tokens > limit ? "upper-estimate-pressure" : "fits-or-unknown";
-}
-
 // src/pi-tag-identity-repair.ts
 var PI_TAG_IDENTITY_REPAIR_REASON = "tag_identity_repair";
 var unreadableLedgerLogged = new Set;
@@ -42578,6 +42526,14 @@ function registerPiContextHandler(pi, baseOptions) {
       const fullWireMessageCount = rawMessageCount;
       const options = baseOptions.resolveForProject?.(projectDirectory) ?? baseOptions;
       lkgOptions = options;
+      const projectIdentity = resolveProjectIdentityForSession(projectDirectory, options.allowHomeProject) ?? "";
+      withoutSqliteTransformPass2(() => options.maybeAutoEmbedSession?.(sessionId, projectDirectory, projectIdentity));
+      if (!options.compactionOff) {
+        budget.stage = "tag snapshot hydration";
+        const hydration = ensurePiTagSnapshotReady(options.db, sessionId, budget);
+        if (hydration)
+          await guardAwait(hydration);
+      }
       const deliveryModelKey = resolvePiContextModelKey(ctx);
       if (!budget.sideTurn && deliveryModelKey) {
         const parentId = ctx.sessionManager.getLeafId?.();
@@ -42586,8 +42542,6 @@ function registerPiContextHandler(pi, baseOptions) {
       const schedulerConfig = options.scheduler ?? DEFAULT_SCHEDULER_CONFIG;
       const scheduler = schedulerFor(options);
       lkgCompactionOff = options.compactionOff === true;
-      const projectIdentity = resolveProjectIdentityForSession(projectDirectory, options.allowHomeProject) ?? "";
-      withoutSqliteTransformPass2(() => options.maybeAutoEmbedSession?.(sessionId, projectDirectory, projectIdentity));
       logTransformTiming(sessionId, "findSessionId", tFindSession, `messages=${event.messages.length}`);
       budget.stage = "branch projection";
       const tEntryBranch = performance.now();
@@ -42657,6 +42611,8 @@ function registerPiContextHandler(pi, baseOptions) {
         jitter: true,
         beforeRetry: (error) => {
           assertCurrentPass();
+          if (!lkgCompactionOff)
+            assertPiTagSnapshotReady(options.db, sessionId);
           if (checkedReplay)
             return;
           checkedReplay = true;
@@ -43145,6 +43101,8 @@ function registerPiContextHandler(pi, baseOptions) {
           throw new PiLkgAdmissionReplay(replay.messages, "held tag-identity rebuild: replaying the served prefix", "held_identity_repair");
         }
       };
+      if (!options.compactionOff)
+        assertPiTagSnapshotReady(options.db, sessionId);
       let result = await budget.waitMandatory(runPipeline(pipelineArgs));
       observePipelineResultForTests(sessionId, result);
       logTransformTiming(sessionId, "runPipeline", tRunPipeline);
@@ -43200,6 +43158,7 @@ function registerPiContextHandler(pi, baseOptions) {
             historian,
             isFirstContextPassForSession,
             activeTags: result.activeTags,
+            eligiblePendingDropTagIds: result.eligiblePendingDropTagIds,
             rawMessageProvider,
             ordinalAlignment: ordinalAlignment(),
             taggerFloor,
@@ -43596,6 +43555,7 @@ function registerPiContextHandler(pi, baseOptions) {
                     startGuard: budget.assert,
                     isFirstContextPassForSession: false,
                     activeTags: result.activeTags,
+                    eligiblePendingDropTagIds: result.eligiblePendingDropTagIds,
                     rawMessageProvider,
                     ordinalAlignment: ordinalAlignment(),
                     taggerFloor,
@@ -43686,7 +43646,7 @@ function registerPiContextHandler(pi, baseOptions) {
           readPiCommittedServedNumbers(options.db, sessionId);
           serializedOutput = lkgCoordinator.captureAppliedPass({
             publishServedNumbers: () => publishPiServedNumbers(options.db, sessionId, [
-              ...getPiServedTagNumbers(sessionId),
+              ...getPiServedTagNumbers(sessionId, undefined, options.db),
               ...result.servedTagNumbers ?? []
             ]),
             assertCurrentPass: budget.assertOutcome,
@@ -43714,7 +43674,7 @@ function registerPiContextHandler(pi, baseOptions) {
               options.db.transaction(() => {
                 budget.assertOutcome();
                 publishPiServedNumbers(options.db, sessionId, [
-                  ...getPiServedTagNumbers(sessionId),
+                  ...getPiServedTagNumbers(sessionId, undefined, options.db),
                   ...result.servedTagNumbers ?? []
                 ]);
               }).immediate();
@@ -43759,15 +43719,25 @@ function registerPiContextHandler(pi, baseOptions) {
     } catch (err) {
       if (budget.isCancelled(err))
         throw err;
+      if (err instanceof PiTagHydrationError) {
+        budget.failureReason = err.message;
+        if (sessionIdForError) {
+          try {
+            prewarmPiTagSnapshot(lkgOptions.db, sessionIdForError);
+          } catch {}
+        }
+        throw err;
+      }
       budget.assertOutcome();
       budget.stage = "recovery";
       if (err instanceof PiServedIdentityError) {
         if (sessionIdForError)
           clearPiLkgSessionState(sessionIdForError);
-        throw new PiStorageBusyError({ cause: err });
+        throw piFallbackRefusal("served-identity-unavailable", err);
       }
       if (err instanceof PiLkgAdmissionReplay && sessionIdForError) {
         budget.assertOutcome();
+        assertPiTagSnapshotReady(lkgOptions.db, sessionIdForError);
         if (lkgPassSnapshot && err.trigger === "writer_busy")
           lkgCoordinator.noteRecovery(lkgPassSnapshot, err.messages);
         if (!budget.sideTurn)
@@ -43818,7 +43788,8 @@ function registerPiContextHandler(pi, baseOptions) {
                 canApply: false
               })
             });
-            const drops = getTagsBySession2(lkgOptions.db, sessionIdForError).filter((tag) => tag.status === "dropped");
+            assertPiTagSnapshotReady(lkgOptions.db, sessionIdForError);
+            const drops = getPiTagSnapshotView(lkgOptions.db, sessionIdForError).filter((tag) => tag.status === "dropped");
             const changed = applyFlushedStatuses(sessionIdForError, lkgOptions.db, buildPersistedDropTargets(recoveryTranscript, drops, {
               allowReasoningPrefixRewrite: true
             }), drops);
@@ -43849,6 +43820,8 @@ function registerPiContextHandler(pi, baseOptions) {
           }
           logPiLkgRecovery(sessionIdForError, `${failureLabel} ${piStorageErrorReason(err)}: LKG unavailable (${replay.reason}); refusing unreduced ${rawMessageCount}-message input`);
         } catch (replayError) {
+          if (replayError instanceof PiTagHydrationError)
+            throw replayError;
           budget.assertOutcome();
           if (replayError instanceof DegradedPassRefusalError)
             throw replayError;
@@ -43865,11 +43838,7 @@ function registerPiContextHandler(pi, baseOptions) {
       if (err instanceof PiDegradedPassError && err.site === "outgoing-over-window")
         throw contextRefusalError("The request exceeds the model's context window after reclaim, and no fitting saved request is available; this turn was not sent.");
       if (!lkgCompactionOff && sessionIdForError) {
-        throw new PiStorageBusyError({
-          cause: err instanceof PiDegradedPassError ? err : new PiDegradedPassError("context-handler-failed", {
-            cause: err
-          })
-        });
+        throw piFallbackRefusal("context-handler-failed", err);
       }
       log2(`[magic-context][pi] context handler failed (continuing without mutation): ${message}`, stack);
       return;
@@ -44363,7 +44332,7 @@ Historian previously failed ${failureCount} time(s), so Magic Context is retryin
       force: usage.percentage >= historianForceMaterializationPercentage && (usage.percentage >= 95 || getEmergencyInputSample(db, sessionId) === 0),
       explicitFlush: hasPendingMaterialization(sessionId),
       publishedHistory: args.publishedHistoryRide
-    });
+    }, args.eligiblePendingDropTagIds);
     if (!trigger.shouldFire) {
       sessionLog2(sessionId, `historian trigger eval: shouldFire=false (no trigger condition met)`);
       try {
@@ -44571,6 +44540,7 @@ async function runPipeline(args) {
   let materializationSatisfiedThisPass = false;
   let pendingOpsAppliedThisPass = false;
   let pendingOpsDidMutate = false;
+  let eligiblePendingDropTagIds;
   let heuristicOrReasoningDidMutate = false;
   let prefixEditBesidesReasoningTrim = false;
   const recordFirstApplicationWireEdit = (beforeNewerThinking) => {
@@ -45074,7 +45044,9 @@ async function runPipeline(args) {
         ...args.contextUsage.percentage >= 95 ? [] : protectedTagNumbersForPass,
         ...protectedToolTags,
         ...identityAdoption.protectedTagNumbers
-      ]), pendingOperationTags, pendingOps, [], new Set, (reduction) => droppedTokenReductions.push(reduction));
+      ]), pendingOperationTags, pendingOps, [], new Set, (reduction) => droppedTokenReductions.push(reduction), undefined, (eligible) => {
+        eligiblePendingDropTagIds = eligible;
+      });
       if (pendingOpsDidMutate) {
         droppedCount += pendingOps.length;
       }
@@ -45805,6 +45777,7 @@ async function runPipeline(args) {
     emergency,
     bustedThisPass,
     agentDropsAppliedThisPass: pendingOpsDidMutate,
+    eligiblePendingDropTagIds,
     prefixEditBesidesReasoningTrim: !!args.recoveryRebuildReason || prefixEditBesidesReasoningTrim || firstRenderBust || args.isCacheBusting || hasPendingMaterializeSignal || deferredMaterializationConsumedThisPass || foldBustsServedPrefixThisPass || publishedM1RefreshedThisPass || materialized || historyWasConsumedThisPass || pendingOpsDidMutate || autoReclaimDidMutateThisPass || emergency,
     targetCount: targets.size,
     reasoningWatermark: args.sessionMeta.clearedReasoningThroughTag ?? 0,
@@ -46037,6 +46010,7 @@ function clearPiCompactionOffInMemoryState(sessionId) {
   clearPiChannel1State(sessionId);
 }
 function clearContextHandlerSession(sessionId) {
+  cancelPiTagSnapshotSession(sessionId);
   lastServedSystemHashBySession.delete(sessionId);
   clearPiHistoryBoundaryRepairSession(sessionId);
   clearPiUpperReclaimSession(sessionId);
@@ -50228,7 +50202,8 @@ async function startPiMagicContextRuntime(pi, database, dbPath) {
   info(compactionOff ? todowriteEnabled ? "registered tools: ctx_search, ctx_memory, ctx_note, ctx_expand, todowrite; registered /todos (ctx_reduce unavailable in compaction-off mode)" : "registered tools: ctx_search, ctx_memory, ctx_note, ctx_expand (ctx_reduce unavailable in compaction-off mode; todowrite disabled)" : todowriteEnabled ? "registered tools: ctx_search, ctx_memory, ctx_note, ctx_expand, todowrite, ctx_reduce; registered /todos" : "registered tools: ctx_search, ctx_memory, ctx_note, ctx_expand, ctx_reduce (todowrite disabled)");
   registerPiCloneSessionTransitions(pi.on.bind(pi), {
     db,
-    signalPendingMarker: signalPiDeferredCompactionMarkerDrain
+    signalPendingMarker: signalPiDeferredCompactionMarkerDrain,
+    onInherited: (sessionId) => prewarmPiTagSnapshot(db, sessionId)
   });
   pi.on("session_start", async (event, ctx) => {
     bindStaleBuildNotice(ctx, import.meta.url);
@@ -50249,7 +50224,8 @@ async function startPiMagicContextRuntime(pi, database, dbPath) {
     }
     await handlePiCloneSessionStart(event, ctx, {
       db,
-      signalPendingMarker: signalPiDeferredCompactionMarkerDrain
+      signalPendingMarker: signalPiDeferredCompactionMarkerDrain,
+      onInherited: (sessionId) => prewarmPiTagSnapshot(db, sessionId)
     });
     const sessionId = resolveSessionId(ctx);
     if (!piMarkerRehydrationLogged && pendingPiMarkerSessions.length > 0 && sessionId) {
@@ -50265,6 +50241,8 @@ async function startPiMagicContextRuntime(pi, database, dbPath) {
         modelKey: canonicalPiModelKey(model.provider, model.id)
       });
     }
+    if (sessionId)
+      prewarmPiTagSnapshot(db, sessionId);
   });
   pi.on("agent_start", (_event, ctx) => {
     setEmbeddingSessionBusy2(ctx.sessionManager.getSessionId(), true);
@@ -50811,6 +50789,7 @@ async function startPiMagicContextRuntime(pi, database, dbPath) {
         clearPiSystemPromptSession(sessionId);
         promptSurfaceGuidanceEpochs.clear(sessionId);
         clearContextHandlerSession(sessionId);
+        await withTimeout(drainPiTagSnapshotSession(sessionId), SHUTDOWN_DRAIN_MS);
       }
     } catch {}
     activePiRuntimes.delete(dreamerRegistrationOwner);
@@ -50832,6 +50811,9 @@ async function startPiMagicContextRuntime(pi, database, dbPath) {
     const outgoingSessionId = switchOutgoingSessionId;
     switchOutgoingSessionId = undefined;
     try {
+      const incomingSessionId = readSessionId(ctx);
+      if (incomingSessionId && _event?.reason !== "fork")
+        prewarmPiTagSnapshot(db, incomingSessionId);
       if (!outgoingSessionId || outgoingSessionId === readSessionId(ctx))
         return;
       clearPiSystemPromptSession(outgoingSessionId);