@ponythewhite/base-context 1.0.9 → 1.0.11

package/dist/bundle/{chunk-NEHLB7JV.js → chunk-TOOVREMP.js}

@@ -27737,6 +27737,7 @@ var CONTEXT_POLICY_EPOCH_RENDERER = "native-canonical-epoch/5";
 var CONTEXT_TOOL_EPOCH_RENDERER = "native-canonical-epoch/6";
 var CONTEXT_SKILL_EPOCH_RENDERER = "native-canonical-epoch/7";
 var CONTEXT_TOOL_SUMMARY_RENDERER = "native-canonical-epoch/8";
+var CONTEXT_INTERRUPTED_TOOL_RENDERER = "native-canonical-epoch/9";
 function contextEpochMode(checkpoint, initial = "on") {
   return checkpoint ? checkpoint.version === 5 || checkpoint.version === 8 ? checkpoint.mode : "on" : initial;
 }
@@ -27785,10 +27786,16 @@ function readContextEpoch(details, maxBytes) {
   if (!details || typeof details !== "object" || !(CONTEXT_EPOCH_DETAIL in details))
     return;
   const value = details[CONTEXT_EPOCH_DETAIL];
-  if (!value || typeof value !== "object" || !("version" in value) || !("renderer" in value) || !(value.version === 1 && value.renderer === "native-canonical-epoch/1" || value.version === 2 && value.renderer === "native-canonical-epoch/2" || value.version === 3 && value.renderer === "native-canonical-epoch/3" || value.version === 4 && value.renderer === "native-canonical-epoch/4" || value.version === 5 && value.renderer === CONTEXT_POLICY_EPOCH_RENDERER || value.version === 6 && value.renderer === CONTEXT_TOOL_EPOCH_RENDERER || value.version === 8 && value.renderer === CONTEXT_TOOL_SUMMARY_RENDERER || [4, 5, 6].includes(value.version) && value.renderer === CONTEXT_SKILL_EPOCH_RENDERER) || (value.renderer === CONTEXT_SKILL_EPOCH_RENDERER || value.version === 8 && "selectedSkills" in value ? !("selectedSkills" in value) || !Array.isArray(value.selectedSkills) || value.selectedSkills.length === 0 || value.selectedSkills.some((item) => !item || typeof item.name !== "string" || !item.view || !["custom_message", "custom"].includes(item.view.ref?.kind) || typeof item.view.sourceRevision !== "string") || new Set(value.selectedSkills.map((item) => item.name)).size !== value.selectedSkills.length : "selectedSkills" in value) || !("source" in value) || !value.source || !("views" in value) || !Array.isArray(value.views) || !("literalTailId" in value) || typeof value.literalTailId !== "string" || !("representation" in value) || (value.version === 5 || value.version === 8 ? !("mode" in value) || value.mode !== "on" && value.mode !== "off" : "mode" in value) || value.version === 8 && (value.representation !== null || !("includeSummary" in value) || value.includeSummary !== true) || value.version === 5 && (value.representation !== null || !("policyOnly" in value) || value.policyOnly !== true) || "policyOnly" in value && (value.version !== 5 || value.policyOnly !== true || value.representation !== null || "includeSummary" in value) || "pendingRequestContract" in value && (value.version !== 5 || !("mode" in value) || value.mode !== "off" || value.pendingRequestContract !== true || "requestContract" in value) || "requestContract" in value && (value.version !== 5 || !isRequestContract(value.requestContract)) || !(typeof value.representation === "string" || value.version === 5 && value.representation === null && "policyOnly" in value && value.policyOnly === true || (value.version === 2 || value.version === 3 || value.version === 4 || value.version === 8) && value.representation === null && "includeSummary" in value && value.includeSummary === true) || "includeSummary" in value && (value.version !== 2 && value.version !== 3 && value.version !== 4 && value.version !== 8 || value.includeSummary !== true || value.representation !== null) || "replayContract" in value && value.replayContract !== "complete-context" && value.replayContract !== "message-groups" || "resourceRevision" in value && (typeof value.resourceRevision !== "string" || Buffer.byteLength(value.resourceRevision, "utf8") > MAX_RESOURCE_REVISION_BYTES) || "publicWindow" in value && (value.version !== 3 && value.version !== 4 && value.version !== 5 && value.version !== 6 && value.version !== 8 || value.publicWindow !== true) || "toolContinuations" in value && value.version !== 6 && value.version !== 8 || (value.version === 6 || value.version === 8) && (!("toolContinuations" in value) || !Array.isArray(value.toolContinuations) || !value.toolContinuations.length || !("replayContract" in value) || value.version === 6 && (!("publicWindow" in value) || value.publicWindow !== true || value.replayContract !== "message-groups")) || "continuation" in value && (value.version !== 3 && value.version !== 4 && value.version !== 5 && value.version !== 6 && value.version !== 8 || !value.continuation || typeof value.continuation !== "object" || !("kind" in value.continuation) || value.continuation.kind !== "harness-summary" && (value.version !== 4 && value.version !== 5 && value.version !== 6 || value.continuation.kind !== "portable-checkpoint") || !("publicTailThrough" in value.continuation) || !value.continuation.publicTailThrough))
+  if (!value || typeof value !== "object" || !("version" in value) || !("renderer" in value) || !(value.version === 1 && value.renderer === "native-canonical-epoch/1" || value.version === 2 && value.renderer === "native-canonical-epoch/2" || value.version === 3 && value.renderer === "native-canonical-epoch/3" || value.version === 4 && value.renderer === "native-canonical-epoch/4" || value.version === 5 && value.renderer === CONTEXT_POLICY_EPOCH_RENDERER || value.version === 6 && value.renderer === CONTEXT_TOOL_EPOCH_RENDERER || value.version === 8 && value.renderer === CONTEXT_TOOL_SUMMARY_RENDERER || [6, 8].includes(value.version) && value.renderer === CONTEXT_INTERRUPTED_TOOL_RENDERER || [4, 5, 6].includes(value.version) && value.renderer === CONTEXT_SKILL_EPOCH_RENDERER) || (value.renderer === CONTEXT_SKILL_EPOCH_RENDERER || (value.version === 8 || value.renderer === CONTEXT_INTERRUPTED_TOOL_RENDERER) && "selectedSkills" in value ? !("selectedSkills" in value) || !Array.isArray(value.selectedSkills) || value.selectedSkills.length === 0 || value.selectedSkills.some((item) => !item || typeof item.name !== "string" || !item.view || !["custom_message", "custom"].includes(item.view.ref?.kind) || typeof item.view.sourceRevision !== "string") || new Set(value.selectedSkills.map((item) => item.name)).size !== value.selectedSkills.length : "selectedSkills" in value) || !("source" in value) || !value.source || !("views" in value) || !Array.isArray(value.views) || !("literalTailId" in value) || typeof value.literalTailId !== "string" || !("representation" in value) || (value.version === 5 || value.version === 8 ? !("mode" in value) || value.mode !== "on" && value.mode !== "off" : "mode" in value) || value.version === 8 && (value.representation !== null || !("includeSummary" in value) || value.includeSummary !== true) || value.version === 5 && (value.representation !== null || !("policyOnly" in value) || value.policyOnly !== true) || "policyOnly" in value && (value.version !== 5 || value.policyOnly !== true || value.representation !== null || "includeSummary" in value) || "pendingRequestContract" in value && (value.version !== 5 || !("mode" in value) || value.mode !== "off" || value.pendingRequestContract !== true || "requestContract" in value) || "requestContract" in value && (value.version !== 5 || !isRequestContract(value.requestContract)) || !(typeof value.representation === "string" || value.version === 5 && value.representation === null && "policyOnly" in value && value.policyOnly === true || (value.version === 2 || value.version === 3 || value.version === 4 || value.version === 8) && value.representation === null && "includeSummary" in value && value.includeSummary === true) || "includeSummary" in value && (value.version !== 2 && value.version !== 3 && value.version !== 4 && value.version !== 8 || value.includeSummary !== true || value.representation !== null) || "replayContract" in value && value.replayContract !== "complete-context" && value.replayContract !== "message-groups" || "resourceRevision" in value && (typeof value.resourceRevision !== "string" || Buffer.byteLength(value.resourceRevision, "utf8") > MAX_RESOURCE_REVISION_BYTES) || "publicWindow" in value && (value.version !== 3 && value.version !== 4 && value.version !== 5 && value.version !== 6 && value.version !== 8 || value.publicWindow !== true) || "toolContinuations" in value && value.version !== 6 && value.version !== 8 || (value.version === 6 || value.version === 8) && (!("toolContinuations" in value) || !Array.isArray(value.toolContinuations) || !value.toolContinuations.length || !("replayContract" in value) || value.version === 6 && (!("publicWindow" in value) || value.publicWindow !== true || value.replayContract !== "message-groups")) || "continuation" in value && (value.version !== 3 && value.version !== 4 && value.version !== 5 && value.version !== 6 && value.version !== 8 || !value.continuation || typeof value.continuation !== "object" || !("kind" in value.continuation) || value.continuation.kind !== "harness-summary" && (value.version !== 4 && value.version !== 5 && value.version !== 6 || value.continuation.kind !== "portable-checkpoint") || !("publicTailThrough" in value.continuation) || !value.continuation.publicTailThrough))
     throw new Error("Invalid committed context epoch");
   return snapshotContextEpoch(value, maxBytes);
 }
+var UnsupportedContextEpochConfigurationError = class extends Error {
+  constructor() {
+    super("Unsupported context epoch request configuration");
+    this.name = "UnsupportedContextEpochConfigurationError";
+  }
+};
 function contextEpochRepresentation(request, assessment, maxBytes, unbudgetedPublic = false, responseItemIdentity) {
   if (!assessment && !unbudgetedPublic || assessment && (!assessment.profile || assessment.limitSource !== "explicit-profile" || !assessment.route || !assessment.model) || request.body === void 0)
     throw new Error("Committed context epoch requires its explicit request profile");
@@ -27826,7 +27833,7 @@ function contextEpochRepresentation(request, assessment, maxBytes, unbudgetedPub
     if (["input", "messages", "previous_response_id", "prompt_cache_key"].includes(key2))
       continue;
     if (!fields.has(key2))
-      throw new Error("Unsupported context epoch request configuration");
+      throw new UnsupportedContextEpochConfigurationError();
     configuration[key2] = value;
   }
   const input = "input" in body ? body.input : "messages" in body ? body.messages : void 0;
@@ -28443,19 +28450,27 @@ function renderToolContinuation(message2, entryId, source, group, maxBytes) {
     role: message2.role,
     content,
     ...message2.role === "assistant" ? {
-      calls: group.calls.map((call) => ({
+      calls: group.calls.map((call, sourceOrder) => call.admission === "absent" ? {
+        sourceOrder,
+        admission: "not_recorded",
+        capturedHistory: {
+          sessionId: call.source.sessionId,
+          leafId: call.source.leafId,
+          sourceSequence: call.source.sourceSequence
+        }
+      } : {
         executionId: call.executionId,
         intentEntryId: call.intent.id,
         intent: "recorded",
         outcome: call.outcome,
         ...call.result ? { resultEntryId: call.result.id } : {}
-      }))
+      })
     } : {}
   }, maxBytes);
   const rendered = {
     role: "custom",
     customType: PUBLIC_TOOL_CONTINUATION_RENDERER,
-    content: `Recorded tool continuation data. Intent acknowledgment records intent only; an absent finalized result leaves the outcome unknown.
+    content: `Recorded tool continuation data. Intent acknowledgment records intent only; an absent finalized result leaves the outcome unknown.${group.calls.some((call) => call.admission === "absent") ? " For calls marked admission not recorded, no qualified admission or finalized result is recorded in that captured history; the outcome is unknown. This historical view does not authorize tool execution." : ""}
 ${data}`,
     display: false,
     timestamp: message2.timestamp
@@ -29057,6 +29072,15 @@ var HistoryIndex = class _HistoryIndex {
       snapshot: target
     });
   }
+  /** Whole-source own usage for exactly the current acknowledged owner snapshot. */
+  async currentSourceUsage(sessionId, snapshot) {
+    return await this.request({
+      id: this.nextId++,
+      action: "current_source_usage",
+      sessionId,
+      snapshot
+    });
+  }
   /** Latest label control for this source target, including a clear. */
   async sourceLabel(sessionId, targetId, through) {
     return await this.request({ id: this.nextId++, action: "source_label", sessionId, targetId, through });
@@ -29071,6 +29095,17 @@ var HistoryIndex = class _HistoryIndex {
       through
     });
   }
+  /** All matching source update refs, including off-branch and older revisions. */
+  async sourceContextUpdates(sessionId, target, through, after = 0) {
+    return await this.request({
+      id: this.nextId++,
+      action: "source_context_updates",
+      sessionId,
+      target: target.kind === "assistant-usage" ? { kind: target.kind, targetId: target.targetId } : { kind: target.kind, toolCallId: target.toolCallId },
+      through,
+      after
+    });
+  }
   async get(sessionId, eventId, scope) {
     return await this.request({
       id: this.nextId++,
@@ -29393,6 +29428,7 @@ function createSessionHistoryReadScope(index, source, query, scope) {
     }),
     sourceLabel: (targetId) => query(() => index.sourceLabel(sessionId, targetId, source.sourceSequence)),
     sourceAssistantUsage: (targetId) => query(() => index.sourceAssistantUsage(sessionId, targetId, source.sourceSequence)),
+    sourceContextUpdates: (target, after = 0) => query(() => index.sourceContextUpdates(sessionId, target, source.sourceSequence, after)),
     ipythonSentMessages: (toolCallId, options = {}) => query(() => index.ipythonSentMessages(sessionId, branch, toolCallId, options)),
     get,
     page,
@@ -29486,6 +29522,12 @@ var SessionHistoryIndex = class {
     const index = await this.synchronize(captured);
     return index.currentSourceBootstrap(this.sessionId, captured);
   }
+  /** Caller holds the owner queue until the exact current projection is read. */
+  async currentSourceUsage(snapshot) {
+    const captured = { ...snapshot };
+    const index = await this.synchronize(captured);
+    return index.currentSourceUsage(this.sessionId, captured);
+  }
   /** Finish accepted indexing, then wait for the external worker to close. */
   close() {
     this.closing ??= (async () => {
@@ -31549,7 +31591,7 @@ function prepareCanonicalEpoch(messages, selectedUnitIds, representation, maxByt
   return {
     checkpoint: snapshotContextEpoch({
       version: context.toolContinuations?.length ? 6 : 4,
-      renderer: context.selectedSkills?.length ? CONTEXT_SKILL_EPOCH_RENDERER : context.toolContinuations?.length ? CONTEXT_TOOL_EPOCH_RENDERER : CONTEXT_EPOCH_RENDERER,
+      renderer: context.toolContinuations?.some((group) => group.calls.some((call) => call.admission === "absent")) ? CONTEXT_INTERRUPTED_TOOL_RENDERER : context.selectedSkills?.length ? CONTEXT_SKILL_EPOCH_RENDERER : context.toolContinuations?.length ? CONTEXT_TOOL_EPOCH_RENDERER : CONTEXT_EPOCH_RENDERER,
       ...context.selectedSkills?.length ? { selectedSkills: context.selectedSkills } : {},
       ...context.toolContinuations?.length ? { toolContinuations: context.toolContinuations } : {},
       source: context.source,
@@ -31565,7 +31607,19 @@ function prepareCanonicalEpoch(messages, selectedUnitIds, representation, maxByt
     messages: chosen
   };
 }
-function canonicalRecoveryBoundary(messages) {
+var MissingRecoveryReplayContractError = class extends Error {
+  constructor() {
+    super("Recovery compaction requires an accepted replay contract for its selected results");
+    this.name = "MissingRecoveryReplayContractError";
+  }
+};
+function sameRecoverySource(left, right, ownerStillCurrent = false) {
+  return JSON.stringify(left) === JSON.stringify(right) || ownerStillCurrent && left.sessionId === right.sessionId && left.sessionFile === right.sessionFile && left.persistent === right.persistent;
+}
+function sameRecoveryReference(left, right, ownerStillCurrent = false) {
+  return sameRecoverySource(left.source, right.source, ownerStillCurrent) && JSON.stringify(left.ref) === JSON.stringify(right.ref) && left.sourceRevision === right.sourceRevision;
+}
+function canonicalRecoveryBoundary(messages, authorization) {
   const context = compiledEpochContexts.get(messages);
   const units = getCanonicalViewUnits(messages);
   if (!context || !units)
@@ -31575,15 +31629,22 @@ function canonicalRecoveryBoundary(messages) {
   const recoveries = units.flatMap((unit, index) => unit.kind === "recovery" ? [context.references[index]] : []);
   if (!recoveries.length)
     return;
+  if (authorization) {
+    const ownerStillCurrent = authorization.isSourceCurrent?.();
+    if (ownerStillCurrent === false || !sameRecoverySource(context.source, authorization.source, ownerStillCurrent === true) || context.resourceRevision !== authorization.resourceRevision || recoveries.length !== authorization.recoveries.length || recoveries.some((reference) => !reference || !authorization.recoveries.some((covered) => sameRecoveryReference(reference, covered, ownerStillCurrent === true))))
+      throw new Error("Recovery compaction authorization no longer matches its captured source");
+    return latestLiteralReference(context.references)?.ref.entryId;
+  }
   const checkpoint = context.checkpoint;
-  if (!checkpoint?.representation || checkpoint.replayContract !== "message-groups" || recoveries.some((reference) => !reference || reference.ref.sequence > checkpoint.source.sourceSequence))
-    throw new Error("Recovery compaction requires an accepted replay contract for its selected results");
+  const inherited = checkpoint?.includeSummary === true && checkpoint.replayContract === "message-groups";
+  if (checkpoint?.replayContract !== "message-groups" || recoveries.some((reference) => !reference || (checkpoint.representation ? reference.ref.sequence > checkpoint.source.sourceSequence : !inherited || !context.inheritedRecoveryCoverage?.some((covered) => sameRecoveryReference(reference, covered)))))
+    throw new MissingRecoveryReplayContractError();
   return checkpoint.literalTailId;
 }
-function prepareRecoveryCompaction(messages, firstKeptEntryId, maxBytes) {
-  const boundary = canonicalRecoveryBoundary(messages);
+function prepareRecoveryCompaction(messages, firstKeptEntryId, maxBytes, authorization) {
+  const boundary = canonicalRecoveryBoundary(messages, authorization);
   const context = compiledEpochContexts.get(messages);
-  const publicWindow = context?.checkpoint?.publicWindow === true && context.checkpoint.replayContract === "message-groups";
+  const publicWindow = authorization ? authorization.publicWindow : context?.checkpoint?.publicWindow === true && context.checkpoint.replayContract === "message-groups";
   if (!boundary && !publicWindow && !context?.selectedSkills?.length && !context?.toolContinuations?.length)
     return;
   if (!context)
@@ -31620,7 +31681,7 @@ function prepareRecoveryCompaction(messages, firstKeptEntryId, maxBytes) {
     return;
   return snapshotContextEpoch({
     ...toolGroups.size ? { version: 8, mode: context.mode } : { version: 4 },
-    renderer: toolGroups.size ? CONTEXT_TOOL_SUMMARY_RENDERER : context.selectedSkills?.length ? CONTEXT_SKILL_EPOCH_RENDERER : CONTEXT_EPOCH_RENDERER,
+    renderer: context.toolContinuations?.some((group) => group.calls.some((call) => call.admission === "absent")) ? CONTEXT_INTERRUPTED_TOOL_RENDERER : toolGroups.size ? CONTEXT_TOOL_SUMMARY_RENDERER : context.selectedSkills?.length ? CONTEXT_SKILL_EPOCH_RENDERER : CONTEXT_EPOCH_RENDERER,
     ...toolGroups.size ? { toolContinuations: context.toolContinuations } : {},
     ...context.selectedSkills?.length ? { selectedSkills: context.selectedSkills } : {},
     source: context.source,
@@ -32110,6 +32171,10 @@ ${JSON.stringify(selections.map((skill) => ({
     }
     const replayUnits = bindMessageReplayUnits(messages, sourceUnits, unitLimits);
     const frozenGroups = checkpoint?.toolContinuations ?? [];
+    const assistantSequences = messages.flatMap((message2) => {
+      const reference = epochReferences.get(message2);
+      return message2.role === "assistant" && reference ? [reference.ref.sequence] : [];
+    }).sort((left, right) => left - right);
     const candidates = messages.flatMap((message2, index) => {
       if (message2.role !== "assistant")
         return [];
@@ -32125,6 +32190,8 @@ ${JSON.stringify(selections.map((skill) => ({
           index,
           reference,
           prior,
+          nextAssistantSequence: assistantSequences.find((sequence) => sequence > reference.ref.sequence) ?? Infinity,
+          unqualifiedIntent: false,
           intents: /* @__PURE__ */ new Map()
         }
       ];
@@ -32140,48 +32207,63 @@ ${JSON.stringify(selections.map((skill) => ({
       countBytes(metadata);
       return hydrateCapturedHistoryEntry(metadata, maxSourceBytes, view.readPayload);
     };
-    const acceptIntent = async (metadata) => {
-      if (metadata.kind !== "tool_intent" || metadata.qualification !== "native-tool-execution" || metadata.retention === "retained-import")
+    const acceptIntent = async (metadata, selected = candidates) => {
+      if (metadata.kind !== "tool_intent")
         return;
       const hydrated = await readToolEvidence(metadata);
       const entry = hydrated.entry;
-      if (entry.type !== "tool_intent" || entry.assistant?.sessionId !== view.source.sessionId || entry.assistant.sessionFile !== view.source.sessionFile)
+      if (entry.type !== "tool_intent")
         return;
-      const candidate = candidates.find((item) => item.reference.ref.entryId === entry.assistant?.entryId);
+      const invocation = entry.invocation;
+      const ownerMatch = selected.find((item) => item.reference.ref.entryId === entry.assistant?.entryId);
+      const candidate = ownerMatch ?? selected.find((item) => metadata.sequence > item.reference.ref.sequence && metadata.sequence < item.nextAssistantSequence && item.message.content.some((part) => part.type === "toolCall" && part.id === invocation.toolCallId && part.name === invocation.toolName));
       if (!candidate)
         return;
-      const invocation = entry.invocation;
+      if (metadata.qualification !== "native-tool-execution" || metadata.retention === "retained-import" || entry.assistant?.sessionId !== view.source.sessionId || entry.assistant.sessionFile !== view.source.sessionFile || entry.assistant.entryId !== candidate.reference.ref.entryId) {
+        candidate.unqualifiedIntent = true;
+        return;
+      }
       const call = candidate.message.content.filter((part) => part.type === "toolCall")[invocation.sourceOrder];
       if (!Number.isSafeInteger(invocation.sourceOrder) || !call || call.id !== invocation.toolCallId || call.name !== invocation.toolName || !invocation.executionId || entry.id !== `${invocation.executionId}:intent` || metadata.sequence <= candidate.reference.ref.sequence || candidate.intents.has(invocation.sourceOrder))
         throw new Error("Tool continuation has ambiguous original intent");
       candidate.intents.set(invocation.sourceOrder, hydrated);
     };
+    const absentPrefixes = /* @__PURE__ */ new Map();
     for (const candidate of candidates) {
       if (!candidate.prior)
         continue;
       if (!Array.isArray(candidate.prior.calls))
         throw new Error("Invalid committed tool continuation");
       for (const call of candidate.prior.calls) {
+        if (call.admission === "absent") {
+          if (checkpoint?.renderer !== CONTEXT_INTERRUPTED_TOOL_RENDERER || !call.source || call.source.sourceSequence < candidate.reference.ref.sequence || call.intent !== void 0 || call.executionId !== void 0 || call.outcome !== void 0 || call.result !== void 0)
+            throw new Error("Invalid committed absent tool admission");
+          const key2 = JSON.stringify(call.source);
+          const prefix = absentPrefixes.get(key2) ?? { source: call.source, candidates: [] };
+          if (!prefix.candidates.includes(candidate))
+            prefix.candidates.push(candidate);
+          absentPrefixes.set(key2, prefix);
+          continue;
+        }
         const actual = await view.get(call.intent.id);
         if (!actual || actual.revision !== call.intent.revision || actual.sequence !== call.intent.sequence)
           throw new Error("Committed tool intent is unavailable on this captured branch");
-        await acceptIntent(actual);
+        await acceptIntent(actual, [candidate]);
       }
     }
-    const newGroups = candidates.filter((candidate) => !candidate.prior);
-    if (newGroups.length) {
-      let after = Math.min(...newGroups.map((candidate) => candidate.reference.ref.sequence));
+    const scanIntents = async (readView, selected) => {
+      let after = Math.min(...selected.map((candidate) => candidate.reference.ref.sequence));
       let scanned = 0;
       for (; ; ) {
-        const page = await view.page(after, Math.min(128, maxMessages - scanned + 1));
+        const page = await readView.page(after, Math.min(128, maxMessages - scanned + 1));
         scanned += page.events.length;
         if (scanned > maxMessages)
           throw new Error("Tool continuation source item budget exceeded");
         if (page.coverage !== "complete")
           throw new Error("Tool continuation source coverage is incomplete");
         for (const metadata of page.events) {
-          if (!candidates.some((candidate) => candidate.prior?.calls.some((call) => call.intent.id === metadata.id)))
-            await acceptIntent(metadata);
+          if (!selected.some((candidate) => [...candidate.intents.values()].some((intent) => intent.source.id === metadata.id)))
+            await acceptIntent(metadata, selected);
         }
         if (page.nextAfter === null)
           break;
@@ -32189,21 +32271,51 @@ ${JSON.stringify(selections.map((skill) => ({
           throw new Error("Tool continuation source page did not advance");
         after = page.nextAfter;
       }
+    };
+    const newGroups = candidates.filter((candidate) => !candidate.prior);
+    if (newGroups.length)
+      await scanIntents(view, newGroups);
+    for (const prefix of absentPrefixes.values()) {
+      if (!view.atSnapshot)
+        throw new Error("Absent tool admission requires its captured source");
+      await scanIntents(await view.atSnapshot(prefix.source), prefix.candidates);
     }
+    const checkAbsentScope = async (candidate) => {
+      const entry = next.get(candidate.reference.ref.entryId)?.entry;
+      const output = entry?.type === "message" ? entry.requestOutput : void 0;
+      if (!output || typeof output.operationId !== "string" || !output.operationId || !Array.isArray(output.attemptIds) || output.attemptIds.some((id) => typeof id !== "string") || !output.source || output.source.sessionId !== view.source.sessionId || output.source.sessionFile !== view.source.sessionFile || !output.source.persistent || !Number.isSafeInteger(output.source.sourceSequence) || output.source.sourceSequence >= candidate.reference.ref.sequence || !view.atSnapshot)
+        throw new Error("View-unit replay group is incomplete: original tool owner is unqualified");
+      await view.atSnapshot(output.source);
+    };
     const toolContinuations = [];
     const pendingPublicMessageGroups = [];
     for (const candidate of candidates) {
       const toolCalls = candidate.message.content.filter((part) => part.type === "toolCall");
-      if (!toolCalls.length || candidate.intents.size !== toolCalls.length || candidate.prior && candidate.prior.calls.length !== toolCalls.length)
+      if (!toolCalls.length || candidate.unqualifiedIntent || candidate.prior && candidate.prior.calls.length !== toolCalls.length)
         throw new Error("View-unit replay group is incomplete: original tool owner is unqualified");
+      if (candidate.intents.size !== toolCalls.length)
+        await checkAbsentScope(candidate);
       const members = [candidate.index];
       const calls = [];
       for (let order = 0; order < toolCalls.length; order++) {
         const intent = candidate.intents.get(order);
+        const original = candidate.prior?.calls[order];
+        if (!intent) {
+          if (original && original.admission !== "absent")
+            throw new Error("Committed tool intent is unavailable on this captured branch");
+          if (messages.some((message2) => {
+            const sequence = epochReferences.get(message2)?.ref.sequence;
+            return message2.role === "toolResult" && message2.toolCallId === toolCalls[order].id && sequence !== void 0 && sequence > candidate.reference.ref.sequence && sequence < candidate.nextAssistantSequence;
+          }))
+            throw new Error("Tool outcome lacks its original finalized owner");
+          calls.push(original ?? { admission: "absent", source: { ...view.source } });
+          continue;
+        }
+        if (original?.admission === "absent")
+          throw new Error("Committed absent tool admission changed");
         if (intent.entry.type !== "tool_intent")
           throw new Error("Invalid native tool intent");
         const invocation = intent.entry.invocation;
-        const original = candidate.prior?.calls[order];
         if (original && (original.executionId !== invocation.executionId || original.intent.id !== intent.source.id))
           throw new Error("Committed tool execution identity changed");
         const actual = await view.get(invocation.executionId);
@@ -32264,10 +32376,83 @@ ${JSON.stringify(selections.map((skill) => ({
         units: selectionUnits,
         limits: unitLimits,
         ...mode === "on" && (taskFrameRebased || checkpoint) ? { requiresEpoch: true } : {},
+        ...mode === "on" && sourceUnits.some((unit) => unit.kind === "recovery") ? { recoveryContractRequested: true } : {},
         ...pendingPublicMessageGroups.length ? { pendingPublicMessageGroups } : {}
       }
     });
+    const inheritedRecoveryCoverage = [];
+    if (checkpoint?.includeSummary && checkpoint.replayContract === "message-groups" && closedUnits.some((unit) => unit.kind === "recovery")) {
+      const prefix = await view.atSnapshot(checkpoint.source);
+      const suffix = /* @__PURE__ */ new Map();
+      const frozenViews = /* @__PURE__ */ new Map();
+      let capturedMessages = 0;
+      let retained = false;
+      let cursor2;
+      for (; ; ) {
+        const page = await prefix.contextManifest({ cursor: cursor2, limit: 128 });
+        if (page.selection !== "known")
+          throw new Error("Summary recovery source is unavailable");
+        if (!cursor2 && page.summaryRef) {
+          const entry = await hydrate(page.summaryRef, void 0, prefix);
+          const metadata = await prefix.get(page.summaryRef.entryId);
+          const prior = entry.type === "compaction" && metadata?.qualification === "native-context-epoch" && metadata.retention !== "retained-import" ? readContextEpoch(entry.details, maxSourceBytes) : void 0;
+          if ((!prior || prior.includeSummary) && page.summaryRef.entryId === checkpoint.literalTailId)
+            retained = true;
+          capturedMessages += prior?.views.length ?? 0;
+          for (const pinned of prior?.views ?? []) {
+            if (pinned.ref.entryId === checkpoint.literalTailId)
+              retained = true;
+            if (retained) {
+              suffix.set(pinned.ref.entryId, pinned.ref);
+              frozenViews.set(pinned.ref.entryId, pinned);
+            }
+          }
+        }
+        for (const ref of page.refs) {
+          if (ref.entryId === checkpoint.literalTailId)
+            retained = true;
+          if (retained)
+            suffix.set(ref.entryId, ref);
+        }
+        capturedMessages += page.refs.length;
+        if (capturedMessages > maxMessages)
+          throw new Error("Summary recovery source exceeds its message budget");
+        if (!page.nextCursor)
+          break;
+        cursor2 = page.nextCursor;
+      }
+      for (const [index, message2] of closedMessages.entries()) {
+        if (closedUnits[index].kind !== "recovery")
+          continue;
+        const reference = epochReferences.get(message2);
+        if (checkpoint.views.some((covered) => sameRecoveryReference(reference, covered))) {
+          inheritedRecoveryCoverage.push(reference);
+          continue;
+        }
+        const frozen = suffix.get(reference.ref.entryId);
+        if (!frozen || JSON.stringify(frozen) !== JSON.stringify(reference.ref))
+          continue;
+        const pinned = frozenViews.get(frozen.entryId);
+        if (pinned) {
+          if (reference.sourceRevision === pinned.sourceRevision)
+            inheritedRecoveryCoverage.push(reference);
+          continue;
+        }
+        const revisions = [frozen.revision];
+        const entry = next.get(frozen.entryId)?.entry;
+        if (entry?.type === "message" && entry.message.role === "toolResult" && entry.message.toolName === "ipython") {
+          const updates = await prefix.contextUpdates({
+            kind: "ipython-sent-message",
+            toolCallId: entry.message.toolCallId
+          });
+          revisions.push(...updates.refs.map((update) => update.revision));
+        }
+        if (reference.sourceRevision === JSON.stringify(revisions))
+          inheritedRecoveryCoverage.push(reference);
+      }
+    }
     compiledEpochContexts.set(closedMessages, {
+      ...inheritedRecoveryCoverage.length ? { inheritedRecoveryCoverage } : {},
       ...purpose === "read" ? { readOnly: true } : {},
       mode,
       source: { ...view.source },
@@ -32321,6 +32506,10 @@ var PublicContextBudgetError = class extends RequestTokenBudgetError {
     this.#summaryCapacity = summaryCapacity;
   }
 };
+var recoveryCompactionAuthorizations = /* @__PURE__ */ new WeakMap();
+function getRecoveryCompactionAuthorization(error) {
+  return error ? recoveryCompactionAuthorizations.get(error) : void 0;
+}
 function captureRequestViewBoundary(messages, commit, validate2, fixedPrepare, isSourceCurrent) {
   const source = getCanonicalViewSelectionSource(messages);
   if (!source)
@@ -32419,7 +32608,7 @@ function publicBudgetFailure(boundary, messages, request, projection, budget, as
     });
   };
   const minimum = withRequestBody(request, JSON.stringify({ ...body, [inputKey]: retainedInput(/* @__PURE__ */ new Set()) }));
-  return new PublicContextBudgetError(boundary.source, assessment, original, budget.measure(minimum), (context.taskFrame?.messages.length ?? 0) > 1, JSON.stringify([
+  const error = new PublicContextBudgetError(boundary.source, assessment, original, budget.measure(minimum), (context.taskFrame?.messages.length ?? 0) > 1, JSON.stringify([
     boundary.source.sessionId,
     boundary.source.sessionFile,
     source.units.map((unit) => [unit.id, unit.sourceRevision]),
@@ -32438,6 +32627,21 @@ function publicBudgetFailure(boundary, messages, request, projection, budget, as
     const measured = budget.measure(withRequestBody(request, JSON.stringify({ ...body, [inputKey]: kept })));
     return measured.status === "unknown" || measured.availableInputTokens === null || measured.estimatedInputTokens === null ? void 0 : Math.floor(measured.availableInputTokens - measured.estimatedInputTokens);
   }, boundary.isSourceCurrent);
+  if (projection.replayContract === "message-groups") {
+    const originalContext = getCanonicalEpochContext(boundary.messages);
+    const recoveries = boundary.units.flatMap((unit, index) => unit.kind === "recovery" && originalContext.references[index] ? [originalContext.references[index]] : []);
+    if (recoveries.length) {
+      recoveryCompactionAuthorizations.set(error, {
+        source: originalContext.source,
+        recoveries,
+        resourceRevision: originalContext.resourceRevision,
+        // Do not extend a partial public conversion to native groups the encoder did not replace.
+        publicWindow: messages !== boundary.messages && projection.publicWindow === true && boundary.units.every((unit, index) => !["recovery", "replay-group"].includes(unit.kind) || context.references[index]?.rendering !== void 0),
+        isSourceCurrent: boundary.isSourceCurrent
+      });
+    }
+  }
+  return error;
 }
 async function prepareFixedRequestView(boundary, request, projection, assessment) {
   projection = canonicalRequestProjection(boundary, projection);
@@ -32510,7 +32714,7 @@ async function selectRequestView(boundary, request, projection, budget, allowShr
   const inputKey = requestInputKey(request, projection);
   if (budget && full?.limitSource !== "explicit-profile" || !inputKey)
     return;
-  if (!budget && !boundary.requiresEpoch && !boundary.pendingPublicMessageGroups?.length)
+  if (!budget && !boundary.requiresEpoch && !boundary.recoveryContractRequested && !boundary.pendingPublicMessageGroups?.length)
     return;
   const payload = JSON.parse(request.body);
   const input = payload[inputKey];
@@ -33467,7 +33671,7 @@ var InferenceCoordinator = class _InferenceCoordinator {
       } : void 0;
       const requiredPublic = Boolean(boundary?.pendingPublicMessageGroups?.length);
       const requiredEpoch = boundary?.requiresEpoch === true;
-      const canSelect = (budget || boundary?.fixedPrepare || requiredPublic || requiredEpoch) && boundary && matchesRequestView(boundary, source, context);
+      const canSelect = (budget || boundary?.fixedPrepare || requiredPublic || requiredEpoch || boundary?.recoveryContractRequested) && boundary && matchesRequestView(boundary, source, context);
       if (requiredPublic && (!canSelect || boundary?.fixedPrepare))
         throw new Error("Tool continuation requires a selectable native public request boundary");
       const responsesMessageIds = canSelect && !boundary.fixedPrepare && (model.api === "openai-responses" || model.api === "openai-codex-responses") ? boundary.providerMessageIndices.map((index) => {
@@ -34567,7 +34771,7 @@ function captureEpochCopyEntry(entry, source) {
     ...updateTarget ? { updateTarget } : {}
   };
 }
-async function rebuildCopiedContextEpoch(history, copied, limits) {
+async function rebuildCopiedContextEpoch(history, copied, limits, metadataMaxBytes = limits.maxSourceBytes) {
   const view = history.branchContext;
   const manifest = await view.contextManifest({ limit: 1 });
   if (manifest.selection !== "known")
@@ -34596,15 +34800,26 @@ async function rebuildCopiedContextEpoch(history, copied, limits) {
     throw new Error("Tool continuation recipes require their original native execution source");
   if (!checkpoint || checkpoint.literalTailId !== entry.firstKeptEntryId || !view.atSnapshot)
     throw new Error("Copied context epoch boundary is unavailable");
-  if (copied.entries.length > limits.maxEntries || checkpoint.views.length > limits.maxEntries)
+  if (checkpoint.views.length > limits.maxEntries)
     throw new Error("Copied context epoch item budget exceeded");
-  stringifyBoundedJson(copied, limits.maxSourceBytes);
+  stringifyBoundedJson(copied, metadataMaxBytes);
   const oldByRevision = new Map([...oldById.values()].map((source) => [source.revision, source]));
   const destination = /* @__PURE__ */ new Map();
-  for (const source of oldById.values()) {
-    const actual = await history.get(source.id);
-    if (actual)
-      destination.set(source.id, actual);
+  let after = 0;
+  for (; ; ) {
+    const page = await history.page(after, 128);
+    if (page.indexedThrough < history.source.sourceSequence)
+      throw new Error("Copied context destination has incomplete index coverage");
+    for (const actual of page.events) {
+      if (!oldById.has(actual.id))
+        continue;
+      if (destination.size >= limits.maxEntries)
+        throw new Error("Copied context epoch item budget exceeded");
+      destination.set(actual.id, actual);
+    }
+    if (page.nextAfter === null)
+      break;
+    after = page.nextAfter;
   }
   const prefixViews = /* @__PURE__ */ new Map();
   const prefix = async (source) => {
@@ -36595,6 +36810,7 @@ var DEFAULT_MANAGER_HISTORY_LIMITS = {
   maxEntries: 16384,
   maxSourceBytes: 64 * 1024 * 1024
 };
+var FORK_SOURCE_METADATA_MAX_BYTES = 64 * 1024 * 1024;
 async function readOwnedSessionHeader(snapshot) {
   const handle = await openFile(snapshot.journalPath, "r");
   let capturedHeader;
@@ -37122,6 +37338,19 @@ var SessionManager = class _SessionManager {
   readSourceHistory(read2) {
     return this._runHistoryRead(this._bindHistorySource((index, source, query) => createSessionHistoryReadScope(index, source, query, "source")), read2);
   }
+  /** Read the owner-maintained own-spend projection without hydrating the source. */
+  async readOwnUsageSummary() {
+    this._assertMutable();
+    if (!this.supportsCapturedHistoryReads())
+      throw new Error("Own usage projection requires an owned native source");
+    const state = this.writeState;
+    return this._enqueue(state, 0, async () => {
+      await state.owner.flush();
+      const snapshot = state.owner.getSnapshot();
+      await this._acknowledgedHistory(state, snapshot);
+      return state.history.currentSourceUsage(snapshot);
+    });
+  }
   /** Complete bounded structured task reduction on one captured native branch. */
   async readTaskState(limits = {}) {
     const captured = taskStateReadLimits(limits);
@@ -38861,6 +39090,8 @@ var SessionManager = class _SessionManager {
   }
   async _captureForkInput(target, options) {
     const limits = { ...options.limits ?? DEFAULT_MANAGER_HISTORY_LIMITS };
+    if (!Number.isSafeInteger(limits.maxEntries) || limits.maxEntries <= 0 || !Number.isSafeInteger(limits.maxSourceBytes) || limits.maxSourceBytes <= 0)
+      throw new Error("Invalid fork source limits");
     const sourceFile = this.sessionFile;
     const header = JSON.parse(stringifyBoundedJson(this.getHeader(), limits.maxSourceBytes));
     const settings = {
@@ -38972,32 +39203,143 @@ var SessionManager = class _SessionManager {
     if (headerBytes >= limits.maxSourceBytes)
       throw new Error("Fork source byte budget exceeded");
     return this.readSourceHistory(async (history) => {
-      const materialized = await history.materialize({
-        ...limits,
-        maxSourceBytes: limits.maxSourceBytes - headerBytes
-      });
-      const entries = materialized.entries.map(({ entry, source }) => withEntryRetention(entry, source.retention, source.qualification));
-      const sourceEntries = materialized.entries.map(({ entry, source }) => captureEpochCopyEntry(entry, source));
-      const hasEpoch = sourceEntries.some((entry) => entry.kind === "compaction" && entry.qualification === "native-context-epoch");
+      const metadata = /* @__PURE__ */ new Map();
+      let metadataBytes = 0;
+      let after = 0;
+      for (; ; ) {
+        const page2 = await history.page(after, 128);
+        if (page2.indexedThrough < history.source.sourceSequence)
+          throw new Error("Captured fork history has incomplete index coverage");
+        for (const reference of page2.events) {
+          const source = {
+            id: reference.id,
+            parentId: reference.parentId,
+            kind: reference.kind,
+            sequence: reference.sequence,
+            revision: reference.revision,
+            locator: { ...reference.locator },
+            retention: reference.retention,
+            qualification: reference.qualification
+          };
+          metadataBytes += Buffer.byteLength(JSON.stringify(source)) + 1;
+          if (metadataBytes > FORK_SOURCE_METADATA_MAX_BYTES)
+            throw new Error("Fork source metadata byte budget exceeded");
+          metadata.set(source.id, source);
+        }
+        if (page2.nextAfter === null)
+          break;
+        after = page2.nextAfter;
+      }
+      const hasEpoch = [...metadata.values()].some((entry) => entry.kind === "compaction" && entry.qualification === "native-context-epoch");
+      const loaded = /* @__PURE__ */ new Map();
+      let sourceBytes = headerBytes;
+      const load = async (id) => {
+        const existing = loaded.get(id);
+        if (existing)
+          return existing;
+        const reference = metadata.get(id);
+        if (!reference)
+          throw new Error("Fork selected source is unavailable");
+        if (loaded.size >= limits.maxEntries)
+          throw new Error("Fork entry budget exceeded");
+        const remaining = limits.maxSourceBytes - sourceBytes;
+        if (reference.locator.length > remaining)
+          throw new Error("Fork source byte budget exceeded");
+        const hydrated = await history.hydrateEntry(id, remaining);
+        if (!hydrated)
+          throw new Error("Fork selected source is unavailable");
+        const entry = withEntryRetention(hydrated.entry, hydrated.source.retention, hydrated.source.qualification);
+        loaded.set(id, entry);
+        metadata.set(id, captureEpochCopyEntry(entry, hydrated.source));
+        sourceBytes += reference.locator.length;
+        return entry;
+      };
+      if ("entryId" in target && !metadata.has(target.entryId))
+        throw new Error("Invalid entry ID for forking");
+      const selected = "entryId" in target ? await load(target.entryId) : void 0;
+      if ("entryId" in target && target.position === "before" && (selected?.type !== "message" || selected.message.role !== "user"))
+        throw new Error("Invalid entry ID for forking");
+      const leafId = "entryId" in target ? target.position === "at" ? selected.id : selected.parentId : target.leafId;
+      const path6 = [];
+      let page = await history.parentPathFrom(leafId);
+      for (; ; ) {
+        if (page.totalEntries > limits.maxEntries)
+          throw new Error("Fork entry budget exceeded");
+        for (const reference of page.events)
+          path6.push(await load(reference.id));
+        if (!page.nextCursor)
+          break;
+        page = await history.parentPathFrom(leafId, { cursor: page.nextCursor });
+      }
+      const copied = path6.filter((entry) => entry.type !== "label");
+      const ids = new Set(copied.map((entry) => entry.id));
+      if (hasEpoch) {
+        for (const entry of copied) {
+          if (entry.type !== "message")
+            continue;
+          if (entry.execution && "invocationId" in entry.execution)
+            ids.add(entry.execution.invocationId);
+          const updateTarget = entry.message.role === "assistant" ? { kind: "assistant-usage", targetId: entry.id } : entry.message.role === "toolResult" ? { kind: "ipython-sent-message", toolCallId: entry.message.toolCallId } : void 0;
+          if (!updateTarget)
+            continue;
+          let after2 = 0;
+          for (; ; ) {
+            const updates = await history.sourceContextUpdates(updateTarget, after2);
+            if (updates.indexedThrough < history.source.sourceSequence)
+              throw new Error("Captured fork updates have incomplete index coverage");
+            for (const reference of updates.events)
+              ids.add(reference.id);
+            if (updates.nextAfter === null)
+              break;
+            after2 = updates.nextAfter;
+          }
+        }
+        for (const id of ids) {
+          const reference = metadata.get(id);
+          if (!reference)
+            throw new Error("Fork related source is unavailable");
+          if (reference.parentId !== null)
+            ids.add(reference.parentId);
+        }
+        for (const id of ids)
+          await load(id);
+      } else {
+        for (const entry of copied) {
+          if (entry.type !== "message" || entry.message.role !== "assistant")
+            continue;
+          const latest = await history.sourceAssistantUsage(entry.id);
+          if (latest)
+            await load(latest.id);
+        }
+      }
+      for (const id of ids) {
+        const label = await history.sourceLabel(id);
+        if (label)
+          await load(label.id);
+      }
+      const entries = [...loaded.values()].sort((left, right) => metadata.get(left.id).sequence - metadata.get(right.id).sequence);
       if (!hasEpoch)
         applyChildUsageAttributions(entries);
-      return finish(entries, history, hasEpoch ? {
+      const epochCopy = hasEpoch ? {
         sessionId: history.source.sessionId,
         sessionFile: history.source.sessionFile,
         through: history.source.sourceSequence,
-        entries: sourceEntries,
+        entries: [...metadata.values()],
         retained: false
-      } : void 0);
+      } : void 0;
+      if (epochCopy)
+        stringifyBoundedJson(epochCopy, FORK_SOURCE_METADATA_MAX_BYTES);
+      return finish(entries, history, epochCopy);
     });
   }
-  async _rebuildCopiedEpoch(copied, limits) {
+  async _rebuildCopiedEpoch(copied, limits, metadataMaxBytes = limits.maxSourceBytes) {
     if (!copied.entries.some((entry) => entry.kind === "compaction" && entry.qualification === "native-context-epoch"))
       return;
     if (!this.supportsCapturedHistoryReads())
       throw new Error("Copied context epochs require an owned persistent source");
     const sink = this.bindCompactionSink(limits);
     await this._runHistoryRead({ ...sink, readHistory: (read2) => sink[readCopiedEpochSource](read2) }, async (history) => {
-      const rebuilt = await rebuildCopiedContextEpoch(history, copied, limits);
+      const rebuilt = await rebuildCopiedContextEpoch(history, copied, limits, metadataMaxBytes);
       if (rebuilt)
         await sink[appendContextEpoch](rebuilt.checkpoint, rebuilt.tokensBefore, rebuilt.summary);
     });
@@ -39034,7 +39376,7 @@ var SessionManager = class _SessionManager {
     if (input.epochCopy) {
       try {
         await next.branchTo(input.leafId ?? null);
-        await next._rebuildCopiedEpoch(input.epochCopy, input.limits);
+        await next._rebuildCopiedEpoch(input.epochCopy, input.limits, FORK_SOURCE_METADATA_MAX_BYTES);
       } catch (error) {
         try {
           await next.close();
@@ -39427,13 +39769,6 @@ function parseBoundedSessionEntries(text2, maxEntries) {
   }
   return parseSessionEntries(text2);
 }
-async function readSessionHistoryFile(inputPath, limits) {
-  limits = { ...limits };
-  const captured = await readSessionHistoryImage(inputPath, limits.maxSourceBytes);
-  const complete = captured.subarray(0, captured.lastIndexOf(10) + 1);
-  const text2 = new TextDecoder3("utf-8", { fatal: true, ignoreBOM: true }).decode(complete);
-  return parseBoundedSessionEntries(text2, limits.maxEntries);
-}
 async function readExportHistory(inputPath, limits) {
   limits = { ...limits };
   const captured = await readSessionHistoryImage(inputPath, limits.maxSourceBytes);
@@ -40848,6 +41183,23 @@ var DaemonSocketPathLease = class {
     }
   }
 };
+async function closeDaemonServer(server, clients) {
+  const closingClients = [...clients];
+  for (const client of closingClients) {
+    client.detachInput();
+    client.socket.end();
+  }
+  const timeout = setTimeout(() => {
+    for (const client of closingClients)
+      client.socket.destroy();
+  }, 1e3);
+  timeout.unref();
+  try {
+    await new Promise((resolveClose) => server?.close(() => resolveClose()) ?? resolveClose());
+  } finally {
+    clearTimeout(timeout);
+  }
+}
 function defaultDaemonSocketPath(packageDir = getPackageDir()) {
   if (process.platform === "win32") {
     return `\\\\.\\pipe\\${PRODUCT.command}-${daemonScopeId(packageDir)}`;
@@ -42842,16 +43194,43 @@ function readResidentContextTreeUsage(manager, limits = { maxEntries: 16384, max
     ...availabilityMaxSourceBytes === void 0 ? {} : { hasPostCompactionUsage: hasPostCompactionUsage(branch) }
   };
 }
+function isContextTreeUsageReference(reference) {
+  return reference.kind === "message" && reference.authority === "assistant" || reference.kind === "compaction" || reference.kind === "branch_summary" || reference.kind === "child_usage_attributed";
+}
 async function readContextTreeUsage(manager, limits = { maxEntries: 16384, maxSourceBytes: 64 * 1024 * 1024 }, request, availabilityMaxSourceBytes) {
   if (!manager.supportsCapturedHistoryReads())
     return void 0;
   const sourceLimits = request?.limits ?? limits;
   const capturedLimits = { maxEntries: sourceLimits.maxEntries, maxSourceBytes: sourceLimits.maxSourceBytes };
+  if (!Object.values(capturedLimits).every((value) => Number.isSafeInteger(value) && value > 0))
+    throw new Error("Invalid history materialization limits");
   return manager.readSourceHistory((history) => {
     request?.retainMetadata(history.source);
     const reduce = async () => {
-      const materialized = await history.materialize(capturedLimits);
-      const allEntries = materialized.entries.map(({ entry }) => entry);
+      const allEntries = [];
+      let sourceBytes = 0;
+      let after = 0;
+      for (; ; ) {
+        const page = await history.page(after);
+        if (page.indexedThrough < history.source.sourceSequence)
+          throw new Error("Captured history has incomplete index coverage");
+        for (const reference of page.events) {
+          if (!isContextTreeUsageReference(reference))
+            continue;
+          if (allEntries.length >= capturedLimits.maxEntries)
+            throw new Error("History entry budget exceeded");
+          if (sourceBytes + reference.locator.length > capturedLimits.maxSourceBytes)
+            throw new Error("History source byte budget exceeded");
+          const hydrated = await history.hydrateEntry(reference.id, capturedLimits.maxSourceBytes - sourceBytes);
+          if (!hydrated)
+            throw new Error("Context-tree usage entry source is unavailable");
+          allEntries.push(hydrated.entry);
+          sourceBytes += reference.locator.length;
+        }
+        if (page.nextAfter === null)
+          break;
+        after = page.nextAfter;
+      }
       applyChildUsageAttributions(allEntries);
       const byId = new Map(allEntries.map((entry) => [entry.id, entry]));
       const branch = [];
@@ -42859,6 +43238,8 @@ async function readContextTreeUsage(manager, limits = { maxEntries: 16384, maxSo
       do {
         const page = await history.parentPath({ cursor });
         for (const reference of page.events) {
+          if (!isContextTreeUsageReference(reference))
+            continue;
           const entry = byId.get(reference.id);
           if (!entry)
             throw new Error("Context-tree parent-path entry source is unavailable");
@@ -42921,7 +43302,7 @@ function computeContextUsageFromEntries(allEntries, branch, contextWindow) {
   if (!hasPostCompactionUsage(branch)) {
     return { tokens: null, contextWindow, percent: null };
   }
-  const estimate = estimateContextTokens(buildSessionContext(allEntries).messages);
+  const estimate = estimateContextTokens(buildSessionContext(allEntries, branch.at(-1)?.id ?? null).messages);
   if (estimate.tokens <= 0) {
     return void 0;
   }
@@ -43048,10 +43429,64 @@ function listChildSessionDirs(rlmSessionDir, request) {
   });
   return { paths, bytes };
 }
+async function readContextTreeProjectionFromDisk(sessionFile, request) {
+  const entries = [];
+  const hiddenParents = /* @__PURE__ */ new Map();
+  let leafId = null;
+  let hasHeader = false;
+  let sourceBytes = 0;
+  let metadataBytes = 0;
+  try {
+    await readCapturedSessionJournal(sessionFile, (record2) => {
+      const value = record2.entry;
+      if (!value || typeof value !== "object" || !("type" in value) || typeof value.type !== "string")
+        throw new Error("Invalid session journal entry");
+      const entry = value;
+      if (!hasHeader) {
+        if (entry.type !== "session" || typeof entry.id !== "string")
+          throw new Error("Session source has no valid header");
+        hasHeader = true;
+      }
+      if (entry.type !== "session")
+        leafId = entry.id;
+      if (entry.type === "request" || entry.type === "tool_intent") {
+        metadataBytes += request.retainMetadata([entry.id, entry.parentId]);
+        hiddenParents.set(entry.id, entry.parentId);
+        return;
+      }
+      const bytes = record2.source?.locator.length ?? Buffer.byteLength(record2.json) + 1;
+      if (sourceBytes + bytes > request.limits.maxSourceBytes)
+        throw new ContextTreeLimitError("Context tree source byte budget exceeded");
+      sourceBytes += bytes;
+      if (entry.type === "session")
+        return;
+      if (entries.length >= request.limits.maxEntries)
+        throw new ContextTreeLimitError("Context tree entry budget exceeded");
+      entries.push(entry);
+    });
+    const visibleParent = (id) => {
+      let remaining = hiddenParents.size;
+      while (id !== null && hiddenParents.has(id)) {
+        if (remaining-- === 0)
+          throw new Error("Parent path lineage is unresolved");
+        id = hiddenParents.get(id);
+      }
+      return id;
+    };
+    for (const entry of entries)
+      entry.parentId = visibleParent(entry.parentId);
+    const hasSourceLeaf = leafId !== null;
+    leafId = visibleParent(leafId);
+    applyChildUsageAttributions(entries);
+    return { entries, leafId, hasSourceLeaf };
+  } finally {
+    request.releaseMetadata(metadataBytes);
+  }
+}
 async function readContextTreeChildNodeFromDisk(childSessionDir, sessionFile, resolveContextWindow, request, identity) {
-  const allEntries = (await readSessionHistoryFile(sessionFile, request.limits)).filter((entry) => entry.type !== "session");
-  const branch = branchEntries(allEntries);
-  if (branch.length === 0) {
+  const { entries: allEntries, leafId, hasSourceLeaf } = await readContextTreeProjectionFromDisk(sessionFile, request);
+  const branch = branchEntries(allEntries, leafId);
+  if (branch.length === 0 && !hasSourceLeaf) {
     return void 0;
   }
   const { ownUsage, totalUsage } = computeOwnAndTotalUsage(branch, allEntries);
@@ -45482,7 +45917,7 @@ async function loadExtensionModule(extensionPath) {
     // (file-path aliases would load a second, divergent copy of each package).
     // Also disable tryNative so jiti handles ALL imports (not just the entry point)
     // Node/dev must also share the native AI registry and implementation identities.
-    ...isBunBinary || isBundledCli ? { virtualModules: (await import("./bundled-modules-5JRM6P4T.js")).VIRTUAL_MODULES, tryNative: false } : {
+    ...isBunBinary || isBundledCli ? { virtualModules: (await import("./bundled-modules-PEFT72QN.js")).VIRTUAL_MODULES, tryNative: false } : {
       alias: getAliases(),
       virtualModules: {
         "@ponythewhite/base-context-ai": src_exports,
@@ -48239,6 +48674,9 @@ var DEFAULT_FORK_MESSAGE_LIMITS = Object.freeze({
 async function readUserMessagesForForking(manager, limits = DEFAULT_FORK_MESSAGE_LIMITS) {
   const capturedLimits = { ...limits };
   const entries = manager.supportsCapturedHistoryReads() ? (await manager.materializeSourceHistory(capturedLimits)).entries.map(({ entry }) => entry) : manager.materializeResidentHistory(capturedLimits).entries;
+  return projectUserMessages(entries);
+}
+function projectUserMessages(entries) {
   const result = [];
   for (const entry of entries) {
     if (entry.type !== "message" || entry.message.role !== "user")
@@ -48255,6 +48693,40 @@ async function readUserMessagesForForking(manager, limits = DEFAULT_FORK_MESSAGE
   }
   return result;
 }
+async function readVisibleUserMessagesForForking(manager, limits = DEFAULT_FORK_MESSAGE_LIMITS) {
+  const { maxEntries, maxSourceBytes } = limits;
+  if (!Number.isSafeInteger(maxEntries) || maxEntries <= 0 || !Number.isSafeInteger(maxSourceBytes) || maxSourceBytes <= 0)
+    throw new Error("Invalid history materialization limits");
+  if (!manager.supportsCapturedHistoryReads())
+    return readUserMessagesForForking(manager, { maxEntries, maxSourceBytes });
+  return manager.readSourceHistory(async (history) => {
+    const entries = [];
+    let sourceBytes = 0;
+    let after = 0;
+    for (; ; ) {
+      const page = await history.page(after);
+      if (page.indexedThrough < history.source.sourceSequence)
+        throw new Error("Captured history has incomplete index coverage");
+      for (const reference of page.events) {
+        if (reference.kind !== "message" || reference.authority === "assistant" || reference.authority === "runtime")
+          continue;
+        if (entries.length >= maxEntries)
+          throw new Error("History entry budget exceeded");
+        if (sourceBytes + reference.locator.length > maxSourceBytes)
+          throw new Error("History source byte budget exceeded");
+        const hydrated = await history.hydrateEntry(reference.id, maxSourceBytes - sourceBytes);
+        if (!hydrated)
+          throw new Error("Fork message source is unavailable");
+        sourceBytes += reference.locator.length;
+        entries.push(hydrated.entry);
+      }
+      if (page.nextAfter === null)
+        break;
+      after = page.nextAfter;
+    }
+    return projectUserMessages(entries);
+  });
+}
 
 // dist/core/session-jsonl-export.js
 import { mkdir as mkdir3, open as open4, unlink } from "node:fs/promises";
@@ -58942,7 +59414,7 @@ var AgentSession = class _AgentSession {
         const epochContext = getCanonicalEpochContext(messages);
         if (epochContext)
           this._contextMode = epochContext.mode;
-        const unbudgetedPublic = !contextEpochsEnabled && Boolean(epochContext?.toolContinuations?.length || epochContext?.taskFrameRebased || epochContext?.checkpoint);
+        const unbudgetedPublic = !contextEpochsEnabled && Boolean(epochContext?.toolContinuations?.length || epochContext?.taskFrameRebased || epochContext?.checkpoint || getCanonicalViewSelectionSource(messages)?.recoveryContractRequested);
         const nativeSkills = Boolean(contextEpochsEnabled || epochContext?.checkpoint || unbudgetedPublic);
         const skillPolicy = nativeSkills ? this._nativeRecoveryEnabled() ? "enabled" : "unavailable" : void 0;
         if (this._baseSystemPromptOptions.nativeSkillSelection !== skillPolicy) {
@@ -58978,7 +59450,19 @@ var AgentSession = class _AgentSession {
             if (epochContext.toolContinuations?.length && (!candidate.publicMessages || JSON.stringify(getCanonicalEpochContext(candidate.publicMessages)?.toolContinuations) !== JSON.stringify(epochContext.toolContinuations) || candidate.projection.pendingPublicMessageGroups?.length))
               throw new Error("Tool continuation requires its exact public candidate before epoch ACK");
             assertResourceCurrent(resource);
-            const representation = contextEpochRepresentation(candidate.request, candidate.assessment, limits.maxSourceBytes, unbudgetedPublic, candidate.responseItemIdentity);
+            let representation;
+            try {
+              representation = contextEpochRepresentation(candidate.request, candidate.assessment, limits.maxSourceBytes, unbudgetedPublic, candidate.responseItemIdentity);
+            } catch (error) {
+              if (error instanceof UnsupportedContextEpochConfigurationError && !contextEpochsEnabled && !candidate.assessment && !committed && !acknowledged && !epochContext.taskFrameRebased && !epochContext.selectedSkills?.length && !epochContext.toolContinuations?.length && !candidate.publicMessages) {
+                const source = getCanonicalViewSelectionSource(messages);
+                const selected = new Set(candidate.selectedUnitIds);
+                if (source.recoveryContractRequested && !source.requiresEpoch && !source.pendingPublicMessageGroups?.length && this.sessionManager === epochManager && compaction.isCurrent() && JSON.stringify(candidate.source) === JSON.stringify(source.source) && candidate.selectedUnitIds.length === source.units.length && selected.size === source.units.length && source.units.every((unit) => selected.has(unit.id))) {
+                  return;
+                }
+              }
+              throw error;
+            }
             const replayContract = "replayContract" in candidate.projection && candidate.projection.replayContract === "message-groups" ? "message-groups" : "complete-context";
             const publicWindow = "publicWindow" in candidate.projection && candidate.projection.publicWindow === true;
             const selection = JSON.stringify([
@@ -62627,7 +63111,7 @@ var AgentSession = class _AgentSession {
   async _runPreTurnCompaction() {
     const lastAssistant = this._findLastAssistantMessage();
     if (lastAssistant)
-      await this._checkCompaction(lastAssistant, false, false);
+      await this._checkCompaction(lastAssistant, false, false, void 0, true);
   }
   async _prepareForCommit(policy, steps) {
     if (policy.initialRefineBarrier === "always" || policy.initialRefineBarrier === "ifInFlight" && this._refineInFlight) {
@@ -65307,7 +65791,7 @@ ${parsed.args}` : block;
     }
   }
   /** A private compiled context keeps extension summary edits separate from retained source recipes. */
-  async _prepareCapturedCompaction(pathEntries, settings, requests, compaction, owner = this._captureCompactionOwner(), allowShortSession = false, budgetPressure = false) {
+  async _prepareCapturedCompaction(pathEntries, settings, requests, compaction, owner = this._captureCompactionOwner(), allowShortSession = false, budgetPressure = false, capacity) {
     this._assertCompactionOwner(owner);
     const limits = this.settingsManager.getCanonicalContextLimits();
     const resource = this._captureKernelResource();
@@ -65324,10 +65808,11 @@ ${parsed.args}` : block;
       const context = getCanonicalEpochContext(messages);
       if (context.checkpoint?.includeSummary && pathEntries.at(-1)?.type === "compaction")
         return { preparation: void 0, maxSourceBytes: limits.maxSourceBytes };
-      const boundary = canonicalRecoveryBoundary(messages);
+      const authorization = getRecoveryCompactionAuthorization(capacity);
+      const boundary = canonicalRecoveryBoundary(messages, authorization);
       const preparation = budgetPressure || context.checkpoint || boundary ? prepareViewCompaction(messages, context.references.map((ref) => ref?.ref.entryId), pathEntries, settings, boundary, allowShortSession, budgetPressure) : prepareCompaction(pathEntries, settings, allowShortSession);
       if (preparation)
-        prepareRecoveryCompaction(messages, preparation.firstKeptEntryId, limits.maxSourceBytes);
+        prepareRecoveryCompaction(messages, preparation.firstKeptEntryId, limits.maxSourceBytes, authorization);
       return {
         preparation,
         messages,
@@ -65343,7 +65828,7 @@ ${parsed.args}` : block;
    */
   async _performCompaction(options) {
     const { model, apiKey, headers, customInstructions, signal, thinkingLevel, requests, compaction, semanticEdges, pathEntries, settings, owner = this._captureCompactionOwner(), allowShortSession = false, budgetPressure = false } = options;
-    const prepared = await this._prepareCapturedCompaction(pathEntries, settings, requests, compaction, owner, allowShortSession, budgetPressure);
+    const prepared = await this._prepareCapturedCompaction(pathEntries, settings, requests, compaction, owner, allowShortSession, budgetPressure, options.capacity);
     this._assertCompactionOwner(owner);
     if (prepared.resource)
       assertResourceCurrent(prepared.resource);
@@ -65424,7 +65909,7 @@ ${parsed.args}` : block;
       }
       this._assertCompactionOwner(owner);
       const result = JSON.parse(JSON.stringify({ summary, firstKeptEntryId, tokensBefore, details }));
-      const recovery = prepared.messages ? prepareRecoveryCompaction(prepared.messages, firstKeptEntryId, prepared.maxSourceBytes) : void 0;
+      const recovery = prepared.messages ? prepareRecoveryCompaction(prepared.messages, firstKeptEntryId, prepared.maxSourceBytes, getRecoveryCompactionAuthorization(options.capacity)) : void 0;
       if (prepared.resource)
         assertResourceCurrent(prepared.resource);
       if (recovery) {
@@ -66047,7 +66532,30 @@ ${parsed.args}` : block;
     const sessionHistory = (async () => {
       if (residentEntries !== void 0)
         return residentEntries;
-      return (await this.sessionManager.materializeSourceHistory(limits)).entries.map(({ entry }) => entry);
+      return this.sessionManager.readSourceHistory(async (history) => {
+        const entries = [];
+        let sourceBytes = 0;
+        let after = 0;
+        for (; ; ) {
+          const page = await history.page(after, 128);
+          if (page.indexedThrough < history.source.sourceSequence)
+            throw new Error("Captured refinement history has incomplete index coverage");
+          for (const reference of page.events) {
+            if (reference.kind !== "custom")
+              continue;
+            if (entries.length >= limits.maxEntries)
+              throw new Error("Refinement history entry budget exceeded");
+            if (sourceBytes + reference.locator.length > limits.maxSourceBytes)
+              throw new Error("Refinement history source byte budget exceeded");
+            const hydrated = await hydrateCapturedHistoryEntry(reference, limits.maxSourceBytes - sourceBytes, history.readPayload);
+            entries.push(hydrated.entry);
+            sourceBytes += reference.locator.length;
+          }
+          if (page.nextAfter === null)
+            return entries;
+          after = page.nextAfter;
+        }
+      });
     })();
     const [globalResult, sessionResult] = await Promise.allSettled([globalHistory, sessionHistory]);
     if (globalResult.status === "rejected") {
@@ -66368,7 +66876,7 @@ ${parsed.args}` : block;
       return void 0;
     return calculateContextTokens(assistantMessage.usage);
   }
-  async _checkCompaction(assistantMessage, skipAbortedCheck = true, queueAutonomousContinuation = true, invocationOwner) {
+  async _checkCompaction(assistantMessage, skipAbortedCheck = true, queueAutonomousContinuation = true, invocationOwner, beforeNextTurn = false) {
     if (this._compactionSetupFailure)
       return false;
     if (invocationOwner && !this._isCompactionSourceOwnerCurrent(invocationOwner))
@@ -66441,7 +66949,7 @@ ${parsed.args}` : block;
       if (messages.length > 0 && messages[messages.length - 1].role === "assistant") {
         this._removeLastAssistantFromContext();
       }
-      return await this._runAutoCompaction("overflow", true, owner);
+      return await this._runAutoCompaction("overflow", true, owner, false, void 0, beforeNextTurn);
     }
     if (this._pendingRequestedCompaction !== void 0) {
       return await this._runAutoCompaction("requested", false, owner);
@@ -66463,7 +66971,7 @@ ${parsed.args}` : block;
       }
       if (!this._isCompactionOwnerCurrent(owner) || !this._contextOptimizationAllowed())
         return false;
-      return await this._runAutoCompaction("threshold", false, owner);
+      return await this._runAutoCompaction("threshold", false, owner, false, void 0, beforeNextTurn);
     }
     return false;
   }
@@ -66509,7 +67017,7 @@ This compaction outcome could not be saved to session history: ${persistenceErro
     this._emit({ type: "message_start", message: outcomeMessage });
     this._emit({ type: "message_end", message: outcomeMessage });
   }
-  async _runAutoCompaction(reason, willRetry, capturedOwner, resumeInPlace = false, capacity) {
+  async _runAutoCompaction(reason, willRetry, capturedOwner, resumeInPlace = false, capacity, beforeNextTurn = false) {
     const checkpoint = this._pendingCheckpoint;
     const pending = this._pendingRequestedCompaction;
     const owner = checkpoint?.owner ?? pending?.owner ?? capturedOwner ?? this._captureCompactionOwner();
@@ -66622,6 +67130,12 @@ This compaction outcome could not be saved to session history: ${persistenceErro
       if (!this._isCompactionSourceOwnerCurrent(owner))
         throw failure2;
       this._clearQueuedAutonomousContinuationsAfterSkippedThresholdCompaction(reason === "threshold" && shouldContinueAfterCompaction, queuedAutonomousContinuationsForThisCompaction);
+      if (beforeNextTurn && error instanceof MissingRecoveryReplayContractError) {
+        if (reason === "overflow")
+          this._overflowRecovery = "idle";
+        await this._endCompactionUnsuccessfully(reason, "skipped", "Compaction deferred until the next native request establishes recovery replay coverage.", { errorSeverity: "warning", customInstructions, owner });
+        return false;
+      }
       const errorMessage4 = error instanceof Error ? error.message : "compaction failed";
       const aborted = errorMessage4 === "Compaction cancelled" || error instanceof Error && error.name === "AbortError" || abort.signal.aborted;
       if (aborted) {
@@ -69385,34 +69899,13 @@ ${command}` : command;
   _contextWindowResolver() {
     return (provider, modelId) => this._modelRegistry.find(provider, modelId)?.contextWindow;
   }
-  _ownUsageMemo;
   // Whole-source own spend, identical to the catalog reduction at passivation.
   async getOwnUsageSummary() {
     if (!this.sessionManager.supportsCapturedHistoryReads()) {
-      const entries = await this.sessionManager.readEntries();
+      const entries = this.sessionManager.getEntries();
       return sessionUsageSummaryFrom(computeOwnAndTotalUsage(entries, entries).ownUsage);
     }
-    const limits = { maxEntries: 16384, maxSourceBytes: 64 * 1024 * 1024 };
-    return this.sessionManager.readSourceHistory(async (history) => {
-      const { sessionId, sessionFile, sourceSequence } = history.source;
-      const memo = this._ownUsageMemo;
-      if (memo && memo.sessionId === sessionId && memo.sessionFile === sessionFile && memo.sourceSequence === sourceSequence && memo.count <= limits.maxEntries && memo.sourceBytes <= limits.maxSourceBytes) {
-        return memo.usage ? { ...memo.usage } : void 0;
-      }
-      const materialized = await history.materialize(limits);
-      const entries = materialized.entries.map(({ entry }) => entry);
-      applyChildUsageAttributions(entries);
-      const usage = sessionUsageSummaryFrom(computeOwnAndTotalUsage(entries, entries).ownUsage);
-      this._ownUsageMemo = {
-        sessionId,
-        sessionFile,
-        sourceSequence,
-        count: entries.length,
-        sourceBytes: materialized.sourceBytes,
-        usage
-      };
-      return usage ? { ...usage } : void 0;
-    });
+    return this.sessionManager.readOwnUsageSummary();
   }
   /**
    * Build the agent context overview for /context: this session as the root
@@ -70013,7 +70506,7 @@ import { resolve as resolve15 } from "node:path";
 var BASE_CONTEXT_BUILD_ID_ENV = "BASE_CONTEXT_BUILD_ID";
 var BASE_CONTEXT_LAUNCHER_PATH_ENV = "BASE_CONTEXT_LAUNCHER_PATH";
 function bundledBuildId() {
-  return false ? void 0 : "v1.0.9";
+  return false ? void 0 : "v1.0.10-1-g67d926ccc";
 }
 function getDaemonRuntimeIdentity(environment = process.env) {
   const entrypoint = process.argv[1];
@@ -70805,6 +71298,7 @@ export {
   maybeRunOwnedSessionWorkerFrontend,
   installOwnedSessionWorkerOwnerWatch,
   closeOwnedSessionWorkerOwnerWatch,
+  closeDaemonServer,
   defaultDaemonSocketPath,
   acquireDaemonSocketPathLease,
   prepareDaemonSocketPath,
@@ -70839,7 +71333,7 @@ export {
   passivatedWorkerRosterEntry,
   sessionSummaryFromRosterEntry,
   AgentRoster,
-  readUserMessagesForForking,
+  readVisibleUserMessagesForForking,
   SERPER_CREDENTIAL_ID,
   SERPER_CREDENTIAL_NAME,
   PromptAdmissionCancelledError,