Fix prerelease pnpm runtime

.github/workflows/codeql.yml

@@ -46,7 +46,7 @@ concurrency:
 jobs:
   analyze:
     name: Analyze JavaScript and TypeScript
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     timeout-minutes: 20
     steps:
       - name: Checkout repository

.github/workflows/dependency-review.yml

@@ -17,7 +17,7 @@ concurrency:
 jobs:
   dependency-review:
     name: Dependency review
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     timeout-minutes: 10
     steps:
       - name: Checkout repository

.github/workflows/prerelease.yml

@@ -30,7 +30,7 @@ concurrency:
 
 jobs:
   select:
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     outputs:
       changed: ${{ steps.candidate.outputs.changed }}
       version: ${{ steps.candidate.outputs.version }}

.github/workflows/release.yml

@@ -46,7 +46,7 @@ concurrency:
 jobs:
   build-release:
     name: Build Linux and Windows baseline release assets
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     timeout-minutes: 60
     permissions:
       attestations: write
@@ -125,6 +125,11 @@ jobs:
             ghcr.io/google/osv-scanner:v2.3.8@sha256:64e86bec6df2466feea5137fc7c78fb3b7c21ec077f014d7130f64810e50676b \
             scan --config /src/.github/osv-release.toml --lockfile /src/src/mendcode/pnpm-lock.yaml
 
+      - name: Setup Node
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        with:
+          node-version: "24"
+
       - name: Setup pnpm
         uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1
         with:
@@ -159,7 +164,7 @@ jobs:
           bun run --cwd packages/opencode typecheck
           cd packages/opencode
           for test_file in test/installation/*.test.ts test/cli/upgrade-channel.test.ts test/cli/tui/shared-server.test.ts test/cli/tui/thread.test.ts; do
-            bash -c 'export MENDCODE_DB=":memory:"; exec bun test --timeout 30000 "$@"' bash "$test_file"
+            bash -c 'export MENDCODE_DB="${TMPDIR:-/tmp}/opencode-test-data-$$/share/release.db"; exec bun test --timeout 30000 "$@"' bash "$test_file"
           done
 
       - name: Upload release artifacts to workflow
@@ -180,7 +185,7 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - runner: windows-latest
+          - runner: blacksmith-4vcpu-windows-2025
             arch: x64
             build_args: --single
             expected_executables: 1
@@ -204,6 +209,11 @@ jobs:
           persist-credentials: false
           ref: ${{ inputs.source_sha }}
 
+      - name: Setup Node
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        with:
+          node-version: "24"
+
       - name: Setup pnpm
         uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1
         with:
@@ -277,7 +287,7 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - runner: macos-14
+          - runner: blacksmith-6vcpu-macos-15
             arch: arm64
           - runner: macos-15-intel
             arch: x64
@@ -298,6 +308,11 @@ jobs:
           persist-credentials: false
           ref: ${{ inputs.source_sha }}
 
+      - name: Setup Node
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        with:
+          node-version: "24"
+
       - name: Setup pnpm
         uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1
         with:
@@ -349,7 +364,7 @@ jobs:
     name: Assemble and attest release assets
     if: ${{ always() && needs.build-release.result == 'success' && needs.build-windows.result == 'success' && needs.build-darwin.result == 'success' }}
     needs: [build-release, build-windows, build-darwin]
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     permissions:
       attestations: write
       contents: read
@@ -440,7 +455,7 @@ jobs:
     name: Create draft GitHub Release
     if: ${{ inputs.dry_run == false }}
     needs: assemble-release
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     timeout-minutes: 10
     environment: release
     permissions:

.github/workflows/runtime-recovery.yml

@@ -71,4 +71,4 @@ jobs:
             test/server/usage.test.ts test/server/release-channel.test.ts test/server/upgrade-progress.test.ts; do
             run_test "$test_file"
           done
-          run_test test/session/prompt.test.ts --test-name-pattern "continuity wakes the existing executor"
+          run_test test/session/prompt.test.ts --test-name-pattern "wakes an async parent by default for a background task"

.github/workflows/security.yml

@@ -23,7 +23,7 @@ concurrency:
 jobs:
   repository-guards:
     name: Repository guards
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     timeout-minutes: 10
     steps:
       - name: Checkout repository
@@ -139,7 +139,7 @@ jobs:
 
   deep-scanners:
     name: Deep security scanners
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     timeout-minutes: 30
     permissions:
       contents: read

.github/workflows/stable-startup.yml

@@ -0,0 +1,38 @@
+name: Stable startup regression
+on:
+  pull_request:
+    paths: ["src/mendcode/**", ".github/workflows/stable-startup.yml"]
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  startup:
+    runs-on: blacksmith-4vcpu-ubuntu-2404
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        with:
+          node-version: "24"
+      - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1
+        with:
+          version: 11.0.9
+      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6
+        with:
+          bun-version-file: src/mendcode/package.json
+      - name: Prepare frozen dependencies and test catalog
+        working-directory: src/mendcode
+        run: |
+          pnpm --pm-on-fail=ignore install --frozen-lockfile --ignore-scripts
+          cd packages/opencode
+          bun run script/fix-node-pty.ts
+          MODELS_DEV_API_JSON="$PWD/test/tool/fixtures/models-api.json" bun run script/generate.ts
+      - name: Typecheck and isolated startup regressions
+        working-directory: src/mendcode/packages/opencode
+        run: |
+          bun run typecheck
+          for test_file in test/installation/backend-startup.test.ts test/storage/compatibility.test.ts test/cli/tui/thread.test.ts test/plugin/auth-override.test.ts; do
+            bash -c 'export MENDCODE_DB="${TMPDIR:-/tmp}/opencode-test-data-$$/share/contracts.db"; exec bun test --timeout 30000 "$@"' bash "$test_file"
+          done

CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## 0.1.44-beta.14 - 2026-09-14
+
+### Added
+
+- Run automatic memory learning through a persisted, bounded background worker so
+  completed chat turns no longer wait for the memory provider; expose extraction
+  outcomes, Dream maintenance, write policy, and Markdown sharing controls.
+- Add recoverable memory maintenance and revision-aware Markdown import/export
+  with explicit opt-in scopes, validation, and visible conflicts.
+
+### Changed
+
+- Keep GPT-6 Astra compatible with the current Codex Responses Lite protocol and
+  surface normalized multi-provider cache-hit usage to prompt status integrations.
+- Make the Minimal prompt preset truly compact and retain the final Arcade/Snake
+  board after compaction without leaving timers or input focus active.
+
+### Fixed
+
+- Preserve queued prompt delivery and terminal cancellation while compaction,
+  background extraction, reconnect recovery, or long-running shell work settles.
+- Keep provider startup usable when metadata loading fails or a valid catalog is
+  empty, and report configuration errors without trapping Home in startup state.
+- Carry forward database compatibility checks and Blacksmith-backed security and
+  startup regression workflows from the latest public branch.
+
+### Tests
+
+- Add focused regressions for memory workers, Dream and Markdown sharing, provider
+  startup, Astra OAuth compatibility, cache reporting, compact prompt layout,
+  final compaction rendering, queue delivery, and repeated cancellation.
+
 ## 0.1.44-beta.7 - 2026-09-10
 
 ### Added

docs/cli-setup-configuration.md

@@ -166,10 +166,15 @@ project or global MendCode config. The controls affect cache keys and provider
 cache annotations that MendCode sends with a request; they never delete a
 provider's remote cache and they never schedule refresh or keepalive requests.
 
+This policy is separate from MendCode's local runtime/cache directories and
+from the Usage Insights statistics cache. It controls request shaping and
+provider annotations; it does not configure local cache size, eviction, or
+statistics retention.
+
 The public CLI is:
 
 ```bash
-mendcode cache status [--format text|json|--json]
+mendcode cache status [--format text|json] [--json]
 mendcode cache enable [--global] [--provider <id>] [--model <id>] [--session <id>] [--project-path <path>]
 mendcode cache disable [--global] [--provider <id>] [--model <id>] [--session <id>] [--project-path <path>]
 ```
@@ -178,13 +183,16 @@ mendcode cache disable [--global] [--provider <id>] [--model <id>] [--session <i
 `--global`, mutation commands update the active project's config. With
 `--global`, they update the global config. `--project-path` is only valid with
 `--global` and writes an exact normalized project-path override. A model target
-requires `--provider`; provider, model, session, and project targets cannot be
-combined.
+requires `--provider`; `--provider` and `--model` are valid together and target
+one provider model. Session and project targets cannot be combined with a
+provider or model target, and a project target cannot be combined with a
+session target.
 
 ### Configuration
 
-The `cache` block is optional. If it is absent, MendCode preserves existing
-provider behavior (`legacy` effective mode).
+The `cache` block is optional. If it is absent, MendCode uses a conservative
+provider-aware default: OpenAI requests use `smart`, while other providers
+preserve existing `legacy` behavior.
 
 ```jsonc
 {
@@ -215,7 +223,8 @@ provider behavior (`legacy` effective mode).
 Supported values and scopes:
 
 - `mode`: `off` suppresses MendCode cache controls; `smart` enables only the
-  verified passive-key paths described below. Omit it to keep legacy behavior.
+  verified passive-key paths described below. Omit it to use the provider-aware
+  default (OpenAI `smart`; other providers `legacy`).
 - `projects`: exact normalized project paths mapped to `{ "mode": "off" }` or
   `{ "mode": "smart" }`. Use absolute paths for portable global config.
 - `sessions.mode`: `all`, `selected`, or `none`. `include` selects session IDs
@@ -228,24 +237,35 @@ Resolution is deterministic. Disabling rules win in this order: global
 `mode: off`, project `off`, session `none`/exclusion/not-selected, provider
 `off`, then model exclusion or allowlist rejection. Enabling then resolves from
 the global mode, project mode, provider selection, or explicitly included
-session; otherwise the effective mode is `legacy`.
+session; otherwise OpenAI uses `smart` and other providers use `legacy`.
 
 ### Smart-mode boundaries
 
-`smart` is deliberately conservative. A managed passive cache key is enabled
-only for a binding that has all of the following verified locally:
-
-- API-key authentication, not ChatGPT subscription OAuth;
-- a non-Responses-Lite transport;
-- OpenAI's `@ai-sdk/openai` SDK at `api.openai.com`, or the OpenRouter SDK/
-  compatible route at `openrouter.ai`;
-- the exact provider, model, endpoint, SDK, authentication, and transport match.
-
-Other providers, custom endpoints, OAuth routes, unknown models, and incomplete
-bindings do not receive a newly inferred managed key. Existing provider-specific
-legacy annotations remain governed by their existing transform path unless the
-policy is explicitly `off`; MendCode does not infer TTL, cache warmth, hit rate,
-price savings, or provider support from a model name alone.
+`smart` is deliberately conservative. A passive cache key is enabled only for
+a binding that has a verified local wire contract:
+
+- ChatGPT subscription/OAuth on OpenAI Codex Responses Lite uses the
+  provider-native, session-scoped key already required by that adapter. This is
+  not a MendCode-managed key and is not shared across sessions, projects, or
+  accounts;
+- API-key authentication uses a managed key only for a non-Responses-Lite
+  binding with OpenAI's `@ai-sdk/openai` SDK at `api.openai.com`, or the
+  OpenRouter SDK/compatible route at `openrouter.ai`;
+- in both cases, provider, endpoint, SDK, authentication, and transport must
+  match the verified binding.
+
+The built-in verification is provider/SDK/endpoint based. An exact-model
+restriction is applied only when `providers.<id>.models` or
+`providers.<id>.exclude_models` is configured. Therefore, when a global or
+provider policy is `smart`, use an allowlist if caching must be limited to
+known models; a model name alone is not evidence of provider support.
+
+Other providers, custom endpoints, and incomplete bindings do not receive a
+newly inferred managed key. Existing provider-specific options and legacy
+annotations remain governed by their existing transform path unless the policy
+is explicitly `off`; `smart` does not overwrite an unverified provider option.
+MendCode does not infer TTL, cache warmth, hit rate, price savings, weekly-limit
+percentage, or provider support from a model name alone.
 
 `off` removes recognized cache fields from request options and message/provider
 annotations, including `promptCacheKey`, `prompt_cache_key`, `cacheControl`,
@@ -277,10 +297,24 @@ mendcode cache disable --global --project-path /Users/me/src/example
 ```
 
 `cache status` reports the effective mode, the current project, the configured
-block, and `activeKeeper: false`. Cache Keeper, scheduled refresh, automatic
-warm-up, and provider canaries are not part of this control surface. Missing
-provider cache metrics remain unknown rather than being converted to a zero or
-used to claim a cache hit.
+block, and `activeKeeper: false`. The reported `configured` block is the merged
+policy visible to the current project; it includes any `projects`, `sessions`,
+and `providers` rules. The status command does not take a session ID. To
+inspect session policy, read `configured.sessions`: `none` disables all
+sessions, `selected` permits only IDs in `include`, and `exclude` always wins.
+
+Cache Keeper, scheduled refresh, automatic warm-up, and provider canaries are
+not part of this control surface. A cache key may still consume request/quota/
+weekly-limit usage, and missing provider cache metrics remain unknown rather
+than being converted to a zero or used to claim a cache hit. The provider's
+usage report or account UI is authoritative for actual token accounting and
+remaining subscription quota.
+
+If another MendCode backend currently owns the local database, a standalone
+`cache status` invocation may fail with a writer-lock error. That error means
+the status was not read; it is not evidence that caching is enabled or
+disabled. Keep the active backend running and query through its existing
+client, or retry after it releases the writer. Do not delete the lock manually.
 
 ## Prompt Draft Undo and Redo