opencode-acp 1.14.19 → 1.14.20-pr.316.31

package/README.md

@@ -284,7 +284,8 @@ Each level overrides the previous, so project settings take priority over global
     // Automatically update npm-installed ACP when a newer npm latest is available.
     // Version-locked plugin specs are not updated.
     "autoUpdate": true,
-    // Enable debug logging to ~/.config/opencode/logs/acp/
+    // Enable INFO/DEBUG logging + per-request snapshots to ~/.config/opencode/logs/acp/
+    // (WARN/ERROR are always logged to daily/<date>.log)
     "debug": false,
     // Notification display: "off", "minimal", or "detailed"
     "pruneNotification": "off",
@@ -492,6 +493,20 @@ For the complete list with root cause analysis, see the [bug tracker](https://gi
 
 ## Changelog
 
+### v1.14.20 — Post-v1.14.19 fix batch (modelContextLimit lifecycle, inactive-block decompress, logging)
+
+**Problem**: Five clusters of post-v1.14.19 issues: (1) `modelContextLimit` stayed stale after a model switch (#312) — within one LLM request the messages hook runs before the system hook refreshes the limit, and on a catalog miss (fresh instance + failed hydration) the previous model's window survived, so every percentage threshold misfired (#315); (2) `decompress` failed on standalone inactive blocks and inactive blocks were invisible in `acp_status` (#193); (3) a preemptive `acknowledgeRisk: true` (carried over from a non-quality error) hard-failed with "no quality gate rejection is pending" (#301); (4) debug nudge notifications used `sendIgnoredMessage` causing phantom turns, the debug recommendation-filter log spammed every turn, and ERROR/WARN lines only reached the daily log when debug was on (#311, #278, #279).
+
+**Fix**:
+- #314 + #315: reconcile `state.modelContextLimit` from the model-limit catalog on model switch; record the (provider, model) identity pair alongside the limit and, on a catalog miss, invalidate it when the request's model identity mismatches (match keeps it; legacy persisted states without an identity are treated as stale — one blind turn per upgraded session). The catalog is extracted to `lib/state/model-limits.ts`; failed hydration now logs (info with entry count on success, warn on zero entries/failure) instead of degrading silently.
+- #193: `decompress` accepts standalone inactive blocks (nested-block redirect unchanged) and `decompress toFile` writes the real block content; `acp_status scope=compressed` now lists all blocks with an `[inactive]` marker plus active/inactive counts (overview still shows active blocks only).
+- #303: `acknowledgeRisk` without a pending quality-gate rejection is now a no-op with a usage-teaching note instead of an error — only a real quality-gate rejection arms the bypass, so the gate's protection is unchanged.
+- #278/#279/#311: debug notifications no longer use `sendIgnoredMessage` (phantom turn loop gone); the recommendation-filter log is gated behind `shouldInject` (no more per-turn noise); ERROR/WARN are written to the daily log even when debug is off.
+
+Files: `lib/compress/range.ts`, `lib/state/model-limits.ts`, `lib/state/types.ts`, `index.ts`, `lib/state/registry.ts`. Tests: 1003 pass.
+
+**Install**: `opencode plugin opencode-acp@latest --global`
+
 ### v1.14.19 — Fix release pipeline for real (npm 10 `--ignore-scripts` bug)
 
 **Problem**: v1.14.18 (#306) was merged but still never published — `release.yml` failed at the exact same step. Root cause of the failed fix: the CI runner uses Node 22 (npm 10.9.x), and **npm 10 runs the `prepare` lifecycle hook during `npm pack` even when `--ignore-scripts` is passed**. v1.14.18's fix (`npm pack --ignore-scripts`) works on npm 11 but is a no-op on npm 10. When prepare runs, tsup writes `CLI Building entry: index.ts` to **stdout**, breaking `JSON.parse` in `verify-package.mjs` (`SyntaxError: Unexpected token`).

package/README.zh-CN.md

@@ -239,7 +239,8 @@ ACP 使用自己的配置文件，按以下顺序搜索：
     // Automatically update npm-installed ACP when a newer npm latest is available.
     // Version-locked plugin specs are not updated.
     "autoUpdate": true,
-    // Enable debug logging to ~/.config/opencode/logs/acp/
+    // Enable INFO/DEBUG logging + per-request snapshots to ~/.config/opencode/logs/acp/
+    // (WARN/ERROR are always logged to daily/<date>.log)
     "debug": false,
     // Notification display: "off", "minimal", or "detailed"
     "pruneNotification": "detailed",
@@ -446,6 +447,20 @@ ACP 是 DCP 的直接替代品。迁移步骤：
 
 ## 更新日志
 
+### v1.14.20 — v1.14.19 之后的修复批次（modelContextLimit 生命周期、inactive block 解压缩、日志）
+
+**问题**：五类 v1.14.19 之后发现的问题：（1）`modelContextLimit` 在模型切换后失效（#312）——同一次 LLM 请求内，messages hook 先于 system hook 刷新窗口值，而目录未命中时（新实例 + 水合失败），上一个模型的窗口值会一直残留，导致所有按百分比计算的阈值误触发（#315）；（2）`decompress` 对独立的 inactive block 报 `Block not found`，且 inactive block 在 `acp_status` 里完全不可见（#193）；（3）预防式 `acknowledgeRisk: true`（从非质量门禁错误里带过来的）直接报错 `no quality gate rejection is pending`（#301）；（4）debug nudge 通知用 `sendIgnoredMessage` 触发幽灵回合（#311），debug 推荐过滤日志每回合刷屏，ERROR/WARN 在 debug 关闭时不进日常日志（#311、#278、#279）。
+
+**修复**：
+- #314 + #315：模型切换时从模型限制目录重新对齐 `state.modelContextLimit`；目录未命中时记录 (provider, model) 身份对，请求的身份与记录不一致时使窗口值失效（一致则保留；未记录身份的旧持久化状态按失效处理，升级后每个会话盲一轮）。目录提取到 `lib/state/model-limits.ts`；水合失败现在会记日志（成功 info 带条目数，失败 warn），不再静默降级。
+- #193：`decompress` 接受独立的 inactive block（嵌套 block 重定向不变）；`acp_status scope=compressed` 现在列出所有 block，inactive 的带 `[inactive]` 标记，并显示 active/inactive 计数（overview 仍只显示 active）。
+- #303：没有待处理的质量门禁拒绝时，`acknowledgeRisk` 变为 no-op + 用法提示，不再报错 —— 真正的质量门禁拒绝才会武装 bypass，门禁保护不受影响。
+- #278/#279/#311：debug 通知不再用 `sendIgnoredMessage`（幽灵回合循环消失）；推荐过滤日志改为 `shouldInject` 后才输出（不再每回合刷屏）；ERROR/WARN 在 debug 关闭时也写入日常日志。
+
+文件：`lib/compress/range.ts`、`lib/state/model-limits.ts`、`lib/state/types.ts`、`index.ts`、`lib/state/registry.ts`。测试：1003 通过。
+
+**安装**：`opencode plugin opencode-acp@latest --global`
+
 ### v1.14.19 — 彻底修复发版流水线（npm 10 `--ignore-scripts` 失效）
 
 **问题**：v1.14.18（#306）已合并但依然没有发布 —— `release.yml` 又在同一步骤失败。v1.14.18 修复失败的根本原因：CI 运行器是 Node 22（npm 10.9.x），而 **npm 10 在 `npm pack` 时即使传了 `--ignore-scripts` 也照样执行 `prepare` 生命周期钩子**。v1.14.18 的修复（`npm pack --ignore-scripts`）在 npm 11 上有效，在 npm 10 上是空操作。prepare 一旦执行，tsup 会把 `CLI Building entry: index.ts` 写到 **stdout**，破坏 `verify-package.mjs` 里的 `JSON.parse`（`SyntaxError: Unexpected token`）。

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AA2BjD,QAAA,MAAM,MAAM,EAAE,MAiHK,CAAA;AAEnB,eAAe,MAAM,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AA2BjD,QAAA,MAAM,MAAM,EAAE,MA6IK,CAAA;AAEnB,eAAe,MAAM,CAAA"}

package/dist/index.js

@@ -2418,7 +2418,9 @@ async function saveSessionState(sessionState, logger, sessionName) {
       nextRef: sessionState.messageIds.nextRef
     },
     lastCompaction: sessionState.lastCompaction,
-    modelContextLimit: sessionState.modelContextLimit
+    modelContextLimit: sessionState.modelContextLimit,
+    modelProviderID: sessionState.modelProviderID,
+    modelID: sessionState.modelID
   };
   await writePersistedSessionState(sessionState.sessionId, state, logger);
 }
@@ -2949,6 +2951,51 @@ function applyPendingCompressionDurations(state) {
   return updates;
 }
 
+// lib/state/model-limits.ts
+function createModelLimitCatalog() {
+  const modelLimits = /* @__PURE__ */ new Map();
+  return {
+    record(providerId, modelId, limit) {
+      if (!providerId || !modelId || typeof limit !== "number" || limit <= 0) return;
+      modelLimits.set(`${providerId}/${modelId}`, limit);
+    },
+    resolve(providerId, modelId) {
+      if (!providerId || !modelId) return void 0;
+      return modelLimits.get(`${providerId}/${modelId}`);
+    },
+    /**
+     * Best-effort one-time seed from the host's provider catalog
+     * (`client.config.providers()` → GET /config/providers). Never throws;
+     * returns the number of model-limit entries recorded.
+     */
+    async hydrateFromClient(client) {
+      try {
+        const config = client;
+        const result = await config.config?.providers?.();
+        const payload = result;
+        const providers = payload?.data?.providers;
+        if (!Array.isArray(providers)) return 0;
+        let recorded = 0;
+        for (const provider of providers) {
+          const { id, models } = provider ?? {};
+          if (typeof id !== "string" || !models) continue;
+          for (const [modelId, model] of Object.entries(models)) {
+            const limit = model?.limit;
+            const context = limit?.context;
+            if (typeof context === "number" && context > 0) {
+              modelLimits.set(`${id}/${modelId}`, context);
+              recorded++;
+            }
+          }
+        }
+        return recorded;
+      } catch {
+        return 0;
+      }
+    }
+  };
+}
+
 // lib/compress/search.ts
 import { tool } from "@opencode-ai/plugin";
 async function fetchSessionMessages(client, sessionId) {
@@ -4140,6 +4187,26 @@ var SessionStateRegistry = class {
     startsByCallId: /* @__PURE__ */ new Map(),
     pendingByCallId: /* @__PURE__ */ new Map()
   };
+  // [FIX #312] Model-limit catalog (full rationale in ./model-limits.ts):
+  // lets the messages hook reconcile state.modelContextLimit against the
+  // model named on the request's user message instead of waiting one turn
+  // for the system hook. Shared implementation — the test registry stub
+  // composes the same factory.
+  catalog = createModelLimitCatalog();
+  recordModelLimit(providerId, modelId, limit) {
+    this.catalog.record(providerId, modelId, limit);
+  }
+  resolveModelLimit(providerId, modelId) {
+    return this.catalog.resolve(providerId, modelId);
+  }
+  /**
+   * Best-effort one-time seed from the host's provider catalog
+   * (`client.config.providers()` → GET /config/providers). Never throws;
+   * returns the number of model-limit entries recorded.
+   */
+  hydrateModelLimitsFromClient(client) {
+    return this.catalog.hydrateFromClient(client);
+  }
   get(sessionId) {
     return this.states.get(sessionId);
   }
@@ -4228,6 +4295,8 @@ function createSessionState() {
     lastCompaction: 0,
     currentTurn: 0,
     modelContextLimit: void 0,
+    modelProviderID: void 0,
+    modelID: void 0,
     systemPromptTokens: void 0,
     qualityGateRetryPending: false
   };
@@ -4267,6 +4336,8 @@ function resetSessionState(state) {
   state.lastCompaction = 0;
   state.currentTurn = 0;
   state.modelContextLimit = void 0;
+  state.modelProviderID = void 0;
+  state.modelID = void 0;
   state.systemPromptTokens = void 0;
   state.qualityGateRetryPending = false;
 }
@@ -4341,6 +4412,8 @@ async function ensureSessionInitialized(client, state, sessionId, logger, messag
   }
   if (typeof persisted.modelContextLimit === "number" && persisted.modelContextLimit > 0) {
     state.modelContextLimit = persisted.modelContextLimit;
+    state.modelProviderID = persisted.modelProviderID;
+    state.modelID = persisted.modelID;
   }
   const applied = applyPendingCompressionDurations(state);
   if (applied > 0) {
@@ -4688,8 +4761,8 @@ ${progressBar}`;
   let toastMessage = message;
   toastMessage = config.pruneNotification === "minimal" ? toastMessage : truncateToastBody(toastMessage);
   if (config.debug) {
-    const chatMessage = config.pruneNotification === "minimal" ? message : truncateToastBody(message);
-    await sendIgnoredMessage(client, sessionId, chatMessage, params, logger);
+    logger.debug(`[ACP Debug] Compress notification:
+${message}`);
   }
   await client.tui.showToast({
     body: {
@@ -5672,11 +5745,6 @@ exact values, errors). Then add "acknowledgeRisk": true to the compress tool cal
 Without acknowledgeRisk: true, the compression will be rejected again.`;
   return new Error(message);
 }
-function buildPreemptiveAcknowledgeError() {
-  return new Error(
-    'Parameter "acknowledgeRisk": true was provided, but no quality gate rejection is pending. This parameter is only valid immediately after a compression was rejected by the quality gate. Remove it and try again.'
-  );
-}
 
 // lib/compress/pipeline.ts
 function snapshotCompressionState(state) {
@@ -6150,13 +6218,13 @@ function createCompressRangeTool(factoryCtx) {
       }
       const acknowledgeRisk = args.acknowledgeRisk === true;
       const qualityGateRetryPendingBefore = ctx.state.qualityGateRetryPending;
-      if (acknowledgeRisk && !ctx.state.qualityGateRetryPending) {
-        throw buildPreemptiveAcknowledgeError();
+      const bypassQuality = acknowledgeRisk && ctx.state.qualityGateRetryPending;
+      const ignoredAcknowledgeRisk = acknowledgeRisk && !ctx.state.qualityGateRetryPending;
+      if (ignoredAcknowledgeRisk) {
+        ctx.logger.warn("compress: acknowledgeRisk ignored \u2014 no quality gate rejection pending");
       }
-      if (acknowledgeRisk) {
-        ctx.state.qualityGateRetryPending = false;
-      } else {
-        ctx.state.qualityGateRetryPending = false;
+      ctx.state.qualityGateRetryPending = false;
+      if (!bypassQuality) {
         for (const plan of preparedPlans) {
           const result = evaluatePreCommitQuality(
             rawMessages,
@@ -6232,7 +6300,10 @@ function createCompressRangeTool(factoryCtx) {
       const skippedNote = phantomSkipNotice !== null ? `
 \u26A0\uFE0F ${phantomSkipNotice}
 ` : "";
-      return `Compressed ${totalCompressedMessages} messages into ${COMPRESSED_BLOCK_HEADER}.${skippedNote}
+      const ackNote = ignoredAcknowledgeRisk ? `
+\u26A0\uFE0F acknowledgeRisk was ignored: no quality gate rejection was pending, so quality checks ran normally. Only pass it when retrying immediately after a quality gate rejection.
+` : "";
+      return `Compressed ${totalCompressedMessages} messages into ${COMPRESSED_BLOCK_HEADER}.${skippedNote}${ackNote}
 IMPORTANT: This was an automatic context compression. You MUST continue your previous task exactly where you left off. Do NOT ask the user what to do next.
 \u{1F4A1} Tip: Use search_context('keyword') to find compressed content when you need it later.`;
     }
@@ -7566,16 +7637,6 @@ var injectCompressNudges = (state, config, logger, messages, prompts, compressio
     { logger }
   );
   const hasRecommendations = recommendedRanges.length > 0;
-  if (config.debug && contextRanges.compressible.length > 0) {
-    const compressible = contextRanges.compressible;
-    const fmt = (n) => n >= 1e3 ? `${(n / 1e3).toFixed(1)}K` : String(n);
-    const lines = [
-      `[ACP Debug] Recommendation filter:`,
-      `  Input: ${compressible.length} range(s), ${fmt(compressible.reduce((s, r) => s + r.tokens, 0))} tokens`,
-      `  Output: ${recommendedRanges.length} range(s) (last segment marked dangerous)`
-    ];
-    logger.debug(lines.join("\n"));
-  }
   const allProtected = contextRanges.compressible.length === 0 && contextRanges.protected.length > 0;
   const allInProtectedZone = protectedRefs.size > 0 && unprotectedCompressible.length === 0;
   const nothingToCompress = allProtected || allInProtectedZone;
@@ -7671,6 +7732,16 @@ ${rules}`;
     }
   }
   state.nudges.shouldInjectThisTurn = shouldInject;
+  if (shouldInject && config.debug && contextRanges.compressible.length > 0) {
+    const compressible = contextRanges.compressible;
+    const fmt = (n) => n >= 1e3 ? `${(n / 1e3).toFixed(1)}K` : String(n);
+    const lines = [
+      `[ACP Debug] Recommendation filter:`,
+      `  Input: ${compressible.length} range(s), ${fmt(compressible.reduce((s, r) => s + r.tokens, 0))} tokens`,
+      `  Output: ${recommendedRanges.length} range(s) (last segment marked dangerous)`
+    ];
+    logger.debug(lines.join("\n"));
+  }
   let tipsText = null;
   if (shouldInject) {
     if (suffixMessage && composition.total > 0) {
@@ -8125,10 +8196,6 @@ function resolveSingleBlockTarget(messagesState, blockIdArg) {
         error: `Error: Block ${target.displayId} is nested inside active block ${activeAncestorBlockId}. Decompress block ${activeAncestorBlockId} first.`
       };
     }
-    return {
-      ok: false,
-      error: `Error: Block ${target.displayId} is not active. It may have already been decompressed.`
-    };
   }
   return { ok: true, targets: [target] };
 }
@@ -8281,7 +8348,7 @@ function createDecompressTool(factoryCtx) {
         const blockMessages = rawMessages.filter((m) => msgIdSet.has(extractMessageId(m)));
         const lines2 = blockMessages.map(extractMessageText2);
         const { writeFile: writeFile3 } = await import("fs/promises");
-        const fileContent = lines2.length > 0 ? lines2.join("\n\n---\n\n") : activeBlocks[0]?.summary ?? "(no content available)";
+        const fileContent = lines2.length > 0 ? lines2.join("\n\n---\n\n") : targets[0]?.blocks[0]?.summary ?? "(no content available)";
         await writeFile3(targetPath, fileContent, "utf-8");
         const displayIds2 = targets.map((t) => `b${t.displayId}`).join(", ");
         return `Block(s) ${displayIds2} content (${blockMessages.length} messages, ${fileContent.length} chars) written to ${targetPath}. Block(s) stay compressed \u2014 context unchanged. Use read tool to access specific parts.`;
@@ -8738,16 +8805,23 @@ function renderCompressedDrilldown(blocks, sort, limit, blocksById) {
   lines.push(`Sorted by ${sort === "time" ? "time" : sort === "age" ? "age" : "size"}`);
   lines.push("");
   const shown = sorted.slice(0, limit);
+  const activeCount = sorted.filter((b) => b.active).length;
+  const inactiveCount = sorted.length - activeCount;
+  if (inactiveCount > 0) {
+    lines.push(`${activeCount} active, ${inactiveCount} inactive/consumed`);
+    lines.push("");
+  }
   for (const b of shown) {
     const survived = b.survivedCount ?? 0;
     const gen = b.generation ?? "young";
     const effCount = b.effectiveMessageIds?.length ?? 0;
     const consumed = b.includedBlockIds && b.includedBlockIds.length > 0 ? ` nested=[${b.includedBlockIds.map((n) => `b${n}`).join(",")}]` : "";
+    const status = b.active ? "" : " [inactive]";
     const topic = b.topic || "(no topic)";
     const tier = tierLabel(b);
     const effTokens = getEffectiveCompressedTokens(b, blocksById);
     lines.push(
-      `  b${b.blockId} (${tier})  ${formatTokens(effTokens)}\u2192${formatTokens(b.summaryTokens)}  ${formatAge(b.createdAt)}  ${formatIdRange(b)}  age=${survived} ${gen} eff=${effCount}${consumed}`
+      `  b${b.blockId} (${tier})  ${formatTokens(effTokens)}\u2192${formatTokens(b.summaryTokens)}  ${formatAge(b.createdAt)}  ${formatIdRange(b)}  age=${survived} ${gen} eff=${effCount}${consumed}${status}`
     );
     lines.push(`    "${topic}"`);
   }
@@ -8768,8 +8842,10 @@ function buildStatusReport(renderCtx, rawMessages, options) {
   const sort = options?.sort ?? "size";
   const limit = options?.limit ?? 30;
   const msgState = renderCtx.state.prune.messages;
-  const activeIds = Array.from(msgState.activeBlockIds).sort((a, b) => a - b);
-  const allBlocks = activeIds.map((id) => msgState.blocksById.get(id)).filter((b) => b !== void 0 && b.active);
+  const allBlocks = Array.from(msgState.blocksById.values()).sort(
+    (a, b) => a.blockId - b.blockId
+  );
+  const activeBlocks = allBlocks.filter((b) => b.active);
   const lines = [];
   if (scope === "compressed") {
     lines.push(...renderCompressedDrilldown(allBlocks, sort, limit, msgState.blocksById));
@@ -8791,7 +8867,7 @@ function buildStatusReport(renderCtx, rawMessages, options) {
         visibleMsgs,
         summaryTokens,
         systemTokens,
-        allBlocks,
+        activeBlocks,
         false,
         rawMessages,
         renderCtx
@@ -8949,7 +9025,7 @@ import { writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
 import { join as join3 } from "path";
 import { existsSync as existsSync3 } from "fs";
 import { homedir as homedir3 } from "os";
-var LOG_VERSION = true ? "1.14.19" : "dev";
+var LOG_VERSION = true ? "1.14.20-pr.316.31" : "dev";
 var Logger = class {
   logDir;
   enabled;
@@ -9004,7 +9080,7 @@ var Logger = class {
     }
   }
   async write(level, component, message, data) {
-    if (!this.enabled) return;
+    if (!this.enabled && level !== "ERROR" && level !== "WARN") return;
     try {
       await this.ensureLogDir();
       const timestamp = (/* @__PURE__ */ new Date()).toISOString();
@@ -9031,12 +9107,10 @@ var Logger = class {
     return this.write("DEBUG", component, message, data);
   }
   warn(message, data) {
-    if (!this.enabled) return;
     const component = this.getCallerFile(2);
     return this.write("WARN", component, message, data);
   }
   error(message, data) {
-    if (!this.enabled) return;
     const component = this.getCallerFile(2);
     return this.write("ERROR", component, message, data);
   }
@@ -10047,6 +10121,7 @@ function applyMessageFilters(messages, config, logger, ctx) {
   }
   const result = { partsFiltered: 0, partsDropped: 0, partsModified: 0 };
   const total = messages.length;
+  const warnedFilters = /* @__PURE__ */ new Set();
   const buildCtx = (text, role, i) => ({
     text,
     role,
@@ -10102,11 +10177,14 @@ function applyMessageFilters(messages, config, logger, ctx) {
         try {
           decision = filter.filter(filterCtx);
         } catch (err) {
-          logger.warn("Message filter threw error", {
-            filter: filter.name,
-            error: err instanceof Error ? err.message : String(err),
-            messageIndex: i
-          });
+          if (!warnedFilters.has(filter.name)) {
+            warnedFilters.add(filter.name);
+            logger.warn("Message filter threw error", {
+              filter: filter.name,
+              error: err instanceof Error ? err.message : String(err),
+              messageIndex: i
+            });
+          }
           continue;
         }
         if (decision.action === "keep") continue;
@@ -10514,9 +10592,16 @@ function isInternalAgentRequest(messages) {
 }
 function createSystemPromptHandler(registry4, logger, config, prompts) {
   return async (input, output) => {
+    registry4.recordModelLimit(
+      input.model?.providerID,
+      input.model?.id,
+      input.model?.limit?.context
+    );
     const state = input.sessionID ? registry4.get(input.sessionID) : void 0;
     if (state && input.model?.limit?.context) {
       state.modelContextLimit = input.model.limit.context;
+      state.modelProviderID = input.model?.providerID;
+      state.modelID = input.model?.id;
     }
     if (!state || state.isSubAgent && !config.allowSubAgents) {
       return;
@@ -10569,6 +10654,30 @@ function createChatMessageTransformHandler(client, registry4, logger, config, pr
         messages,
         config
       );
+      const requestModel = lastUserMessage.info.model;
+      const requestModelLimit = registry4.resolveModelLimit(
+        requestModel?.providerID,
+        requestModel?.modelID
+      );
+      if (requestModelLimit !== void 0) {
+        state.modelContextLimit = requestModelLimit;
+        state.modelProviderID = requestModel?.providerID;
+        state.modelID = requestModel?.modelID;
+      } else if (
+        // [FIX #312 fallback] Catalog miss: we cannot CORRECT the
+        // limit, but we can tell when it belongs to a DIFFERENT model.
+        // Invalidate instead of letting every percentage threshold
+        // below run against the wrong window (#312's false positive).
+        // States persisted before this identity pair existed carry no
+        // identity and are treated as stale for the same reason.
+        // Consumers already tolerate undefined — fresh sessions run
+        // with it until the first system.transform sets the pair.
+        requestModel?.providerID && requestModel?.modelID && state.modelContextLimit !== void 0 && (state.modelProviderID !== requestModel.providerID || state.modelID !== requestModel.modelID)
+      ) {
+        state.modelContextLimit = void 0;
+        state.modelProviderID = requestModel.providerID;
+        state.modelID = requestModel.modelID;
+      }
       await updatePerTurnState(state, logger, messages);
     }
     syncCompressPermissionState(state, config, hostPermissions, output.messages);
@@ -10614,23 +10723,6 @@ function createChatMessageTransformHandler(client, registry4, logger, config, pr
       config.debug ? (text) => {
         logger.debug(`[ACP Debug] Nudge injected:
 ${text}`);
-        if (state.sessionId && lastUserMessage) {
-          const userInfo = lastUserMessage.info;
-          sendIgnoredMessage(
-            client,
-            state.sessionId,
-            `[ACP Debug Nudge]
-${text}`,
-            {
-              providerId: userInfo.model?.providerID,
-              modelId: userInfo.model?.modelID,
-              agent: userInfo.agent,
-              variant: userInfo.variant
-            },
-            logger
-          ).catch(() => {
-          });
-        }
         client.tui.showToast({
           body: {
             title: "ACP: Nudge Injected",
@@ -10954,6 +11046,25 @@ var server = (async (ctx) => {
   if (isSecureMode()) {
     configureClientAuth(ctx.client);
   }
+  registry4.hydrateModelLimitsFromClient(ctx.client).then(
+    (recorded) => {
+      if (recorded > 0) {
+        logger.info("Model limit catalog seeded from provider config", {
+          models: recorded
+        });
+      } else {
+        logger.warn(
+          "Model limit catalog seeding recorded no entries \u2014 falling back to per-request refresh (system.transform)"
+        );
+      }
+    },
+    (error) => {
+      logger.warn(
+        "Model limit catalog seeding failed \u2014 falling back to per-request refresh (system.transform)",
+        { error: error instanceof Error ? error.message : String(error) }
+      );
+    }
+  );
   logger.info("DCP initialized");
   startAutoUpdate(ctx, config.autoUpdate);
   const compressToolContext = {