fix: /distill command, emergency context guard, configurable allowedRoots

[CKickertz]

Summary

• /distill rename: webchat slash-command was /compact, now /distill. Signal command already named /distill, dropped compact alias.
• Emergency distillation pre-flight: context.ts now checks lastInputTokens >= 90% of contextWindow before building each turn. If over the threshold, distills immediately and continues. This prevents the stuck loop: context > 200K → API 400 → finalize never runs → never distills → infinite loop.
• Configurable allowedRoots: agents.defaults.allowedRoots (global) and per-agent allowedRoots array added to schema. Merged with paths.root in resolve.ts. To unblock path traversal to /home/ckickertz/summus, add to aletheia.json:

  "agents": {
    "defaults": {
      "allowedRoots": ["/home/ckickertz/summus"]
    }
  }

Root cause analysis

The 70% auto-distillation threshold in finalize.ts fires after a successful turn. When a session reaches 100%+ context (168K → API call fails → 400 error), finalize.ts never executes, so auto-distillation never fires. The 90% pre-flight in context.ts catches this before the API call, breaking the loop.

Test plan

• Let a session grow to >90% context utilization — verify logs show "Emergency distillation" before the turn executes
• Verify /distill works in webchat and Signal; /compact no longer works
• Add a path to agents.defaults.allowedRoots — verify read/grep/find works on that path without "Path traversal blocked" error
• Build: npm run build in infrastructure/runtime — clean

🤖 Generated with Claude Code

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud