@agentconnect.md/daemon 1.0.0-rc.240 → 1.0.0-rc.241

package/dist/{run-foreground-Cdxkfe7g.js → run-foreground-Caze66K4.js}

@@ -3,16 +3,16 @@ import { n as require_ms, t as require_src$3 } from "./src-DDtlVutj.js";
 import { n as init_esm_shims, t as __dirname } from "./esm-shims-DxGcm4Hw.js";
 import { t as DAEMON_VERSION } from "./version-DGaRXjBK.js";
 import { C as _coercedNumber, T as NEVER, a as array, d as literal, f as looseObject, i as any, m as object, o as boolean, p as number$1, t as ZodNumber, v as string, x as url$4 } from "./schemas-CQkO9hC5.js";
-import { a as agentChildEnv, i as selectAgent, n as findAgentFiles, o as loadConfig, r as loadAgents, s as persistDaemonId } from "./load-agents-C3pJSVeT.js";
+import { a as agentChildEnv, i as selectAgent, n as findAgentFiles, o as loadConfig, r as loadAgents, s as persistDaemonId } from "./load-agents-Dt8ZYMsH.js";
 import { l as resolveRoot, o as mcpSocketPath, u as statePath } from "./paths-DEcUO8lC.js";
-import { C as resolveRuntimes, S as cachedRuntimeVersions, _ as encode, a as initGitInjection, b as RESERVED_MCP_SERVER_NAME, c as simpleGit, d as RELAY_DAEMON_SUBPROTOCOL, f as RELAY_DAEMON_WS_PATH, g as decodeEnvelope, h as buildEnvelope, i as prepareWorkspace, m as decodeRelayDaemonFrame, n as installedRuntimes, o as probeGitVersion, p as buildRelayDaemonFrame, r as prefetchWorkspace, s as sessionGitEnv, t as AcpHost, u as normalizeGitUrl, v as MAX_FRAME_BYTES, x as cachedRuntimeNames, y as MEMORY_INDEX } from "./acp-host-M9PGQrVJ.js";
+import { A as toolsForIntegrations, C as decodeRelayDaemonFrame, D as MAX_FRAME_BYTES, E as encode, M as cachedRuntimeVersions, N as resolveRuntimes, O as RESERVED_MCP_SERVER_NAME, S as buildRelayDaemonFrame, T as decodeEnvelope, _ as writeMemoryFile, a as initGitInjection, b as RELAY_DAEMON_SUBPROTOCOL, c as simpleGit, d as memoryProviderFor, f as MemoryConflictError, g as resolveInMemoryDir, h as listMemory, i as prepareWorkspace, j as cachedRuntimeNames, k as MEMORY_TOOL_NAMES, l as createMemoryProvider, m as MemoryTooLargeError, n as installedRuntimes, o as probeGitVersion, p as MemoryPathError, r as prefetchWorkspace, s as sessionGitEnv, t as AcpHost, u as memoryKindOf, w as buildEnvelope, x as RELAY_DAEMON_WS_PATH, y as normalizeGitUrl } from "./acp-host-jS9ZQLGG.js";
 import { i as GitCredentialCache, n as gitcredSocketPath, r as writeGitcredShim, t as GitCredServer } from "./gitcred-server-Dcsq6QJe.js";
 import { B as ToolListChangedNotificationSchema, D as ListPromptsResultSchema, E as ListChangedOptionsBaseSchema, F as PromptListChangedNotificationSchema, G as isZ4Schema, H as isJSONRPCRequest, I as ReadResourceResultSchema, J as encodeFrame, K as safeParse, L as ResourceListChangedNotificationSchema, M as ListToolsResultSchema, O as ListResourceTemplatesResultSchema, P as McpError, R as SUPPORTED_PROTOCOL_VERSIONS, S as InitializeResultSchema, T as LATEST_PROTOCOL_VERSION, U as isJSONRPCResultResponse, V as isInitializedNotification, W as getObjectShape, _ as ElicitResultSchema, a as AjvJsonSchemaValidator, b as GetPromptResultSchema, c as mergeCapabilities, d as CompleteResultSchema, f as CreateMessageRequestSchema, g as ElicitRequestSchema, h as CreateTaskResultSchema, i as assertToolsCallTaskCapability, k as ListResourcesResultSchema, m as CreateMessageResultWithToolsSchema, n as serializeMessage, o as require_fast_deep_equal, p as CreateMessageResultSchema, q as decodeFrames, r as assertClientRequestTaskCapability, s as Protocol, t as ReadBuffer, u as CallToolResultSchema, v as EmptyResultSchema, w as JSONRPCMessageSchema, y as ErrorCode } from "./stdio-DnS8WcXi.js";
 import { URL as URL$1 } from "url";
 import * as tls from "tls";
 import * as net$5 from "net";
 import * as path$16 from "node:path";
-import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { dirname, join, relative, resolve, sep } from "node:path";
 import * as http$8 from "http";
 import { Agent } from "https";
 import { chmodSync, existsSync, mkdirSync, mkdtempSync, promises, readFileSync, rmSync, stat, unwatchFile, watch, watchFile, writeFileSync } from "node:fs";
@@ -4121,150 +4121,6 @@ function compareEntries(a, b) {
 	return a.name < b.name ? -1 : a.name > b.name ? 1 : 0;
 }
 //#endregion
-//#region src/agents/memory.ts
-/**
-* Agent memory — a DIRECTORY at the agent's ROOT (`<agent-root>/memory/`), OUTSIDE
-* the workspace so it survives a workspace reset / re-clone and is never committed
-* into a github-workspace repo.
-*
-* Index-plus-topics shape (the structure Claude Code's auto-memory uses): a lean
-* `MEMORY.md` index — injected into the prompt every session, so it must stay small
-* — plus any number of `<topic>.md` files the agent reads on demand. The agent
-* maintains it via the `readMemory` / `writeMemory` / `listMemory` MCP tools; the
-* daemon serves the same directory to the CP for the console.
-*
-* SECURITY: topic paths are agent/console-supplied, so every path is contained to
-* the memory dir — absolute paths and `..` escapes are rejected, and the resolved
-* path is re-checked so a symlink can't smuggle a target out. Flat by design (one
-* level): a topic is a file directly under `memory/`, no nested dirs.
-*/
-const MEMORY_DIRNAME = "memory";
-/** Max bytes of the index injected into the prompt each session — keeps a large
-*  memory from swelling the context (mirrors Claude Code's 25 KB entrypoint cap). */
-const MAX_INDEX_INJECT_BYTES = 25e3;
-/** Hard cap on a single memory file. Injected/read every session, so an unbounded
-*  file would swell the prompt and the wire; writes over this are rejected. */
-const MAX_MEMORY_FILE_BYTES = 256e3;
-/** Raised when a memory path escapes the memory dir. Surfaces as `BAD_PAYLOAD`. */
-var MemoryPathError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "MemoryPathError";
-	}
-};
-/** Raised when a write exceeds {@link MAX_MEMORY_FILE_BYTES}. `BAD_PAYLOAD`. */
-var MemoryTooLargeError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "MemoryTooLargeError";
-	}
-};
-/** Raised when an `ifMatchMtime` precondition fails (the file changed under the
-*  writer — e.g. a console edit racing a newer agent write). Surfaces as CONFLICT. */
-var MemoryConflictError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "MemoryConflictError";
-	}
-};
-/** The memory directory for an agent, given its root dir (where agent.json lives). */
-function memoryDir(agentDir) {
-	return join(agentDir, MEMORY_DIRNAME);
-}
-/** Resolve a memory-dir-relative path to an absolute one, contained to the dir.
-*  Rejects absolute paths, `..` escapes, and any nested directory (flat only). */
-function resolveInMemoryDir(agentDir, relPath) {
-	if (isAbsolute(relPath)) throw new MemoryPathError("absolute paths are not allowed");
-	const dir = memoryDir(agentDir);
-	const abs = resolve(dir, relPath);
-	if (abs !== dir && !abs.startsWith(dir + sep)) throw new MemoryPathError("path escapes the memory dir");
-	const rel = abs.slice(dir.length + 1);
-	if (rel.includes(sep)) throw new MemoryPathError("memory is a flat directory (no subdirectories)");
-	if (rel.length === 0) throw new MemoryPathError("a file name is required");
-	return abs;
-}
-/** Seed `<agent-root>/memory/MEMORY.md` with a header if the dir/index is absent
-*  (idempotent). Called at session start so a brand-new agent always has an index. */
-function ensureMemory(agentDir, agentName) {
-	const dir = memoryDir(agentDir);
-	mkdirSync(dir, { recursive: true });
-	const index = join(dir, MEMORY_INDEX);
-	if (!existsSync(index)) writeFileSync(index, `# ${agentName} memory\n\nYour long-term memory index. Keep it short — link out to topic files (e.g. \`[deploys](deploys.md)\`) for detail and read them on demand with the readMemory tool.\n`);
-}
-/** Read the memory index (`MEMORY.md`) for prompt injection, trimmed to the inject
-*  cap so a large index can't blow up the prompt; '' when absent. */
-async function readIndex(agentDir) {
-	const text = await readMemoryFile(agentDir, MEMORY_INDEX);
-	if (Buffer.byteLength(text) <= 25e3) return text;
-	return Buffer.from(text, "utf8").subarray(0, MAX_INDEX_INJECT_BYTES).toString("utf8") + "\n\n[…memory index truncated — trim MEMORY.md]";
-}
-/** Read a memory file's text; '' when it does not exist (never throws on ENOENT). */
-async function readMemoryFile(agentDir, relPath) {
-	const abs = resolveInMemoryDir(agentDir, relPath);
-	try {
-		return await promises.readFile(abs, "utf8");
-	} catch (err) {
-		if (err.code === "ENOENT") return "";
-		throw err;
-	}
-}
-/** Overwrite a memory file with `content` (creating the dir if needed). Atomic
-*  (tmp + rename) so a concurrent read never sees a partial file.
-*
-*  - Rejects content over {@link MAX_MEMORY_FILE_BYTES} ({@link MemoryTooLargeError}).
-*  - `ifMatchMtime` (optimistic concurrency): when given, the current file's mtime
-*    must equal it, else {@link MemoryConflictError} — so a console edit can't
-*    clobber a newer write. A brand-new file (no mtime) matches `ifMatchMtime`
-*    only when the caller passes none (or the empty string). */
-async function writeMemoryFile(agentDir, relPath, content, ifMatchMtime) {
-	if (Buffer.byteLength(content) > 256e3) throw new MemoryTooLargeError(`memory file exceeds the ${MAX_MEMORY_FILE_BYTES}-byte limit`);
-	const abs = resolveInMemoryDir(agentDir, relPath);
-	if (ifMatchMtime) {
-		let current = null;
-		try {
-			current = (await promises.stat(abs)).mtime.toISOString();
-		} catch (err) {
-			if (err.code !== "ENOENT") throw err;
-		}
-		if (current !== ifMatchMtime) throw new MemoryConflictError("the memory file changed since it was read; reload and retry");
-	}
-	await promises.mkdir(memoryDir(agentDir), { recursive: true });
-	const tmp = `${abs}.tmp`;
-	await promises.writeFile(tmp, content, "utf8");
-	await promises.rename(tmp, abs);
-	const st = await promises.stat(abs);
-	return {
-		size: st.size,
-		mtime: st.mtime.toISOString()
-	};
-}
-/** List the files in the memory dir (flat; index + topics), sorted with the index
-*  first. Empty when the dir does not exist. `.tmp` write artifacts are skipped. */
-async function listMemory(agentDir) {
-	const dir = memoryDir(agentDir);
-	let dirents;
-	try {
-		dirents = await promises.readdir(dir, { withFileTypes: true });
-	} catch (err) {
-		if (err.code === "ENOENT") return [];
-		throw err;
-	}
-	const files = [];
-	for (const d of dirents) {
-		if (!d.isFile() || d.name.endsWith(".tmp")) continue;
-		try {
-			const st = await promises.stat(join(dir, d.name));
-			files.push({
-				name: d.name,
-				size: st.size,
-				mtime: st.mtime.toISOString()
-			});
-		} catch {}
-	}
-	files.sort((a, b) => a.name === "MEMORY.md" ? -1 : b.name === "MEMORY.md" ? 1 : a.name.localeCompare(b.name));
-	return files;
-}
-//#endregion
 //#region src/cp/memory-reader.ts
 /**
 * `MemoryReader` — the seam answering the CP's `memory/list`, `memory/read` and
@@ -6413,6 +6269,7 @@ function hostSpawnSig(a) {
 		executionMode: a.executionMode,
 		fastMode: a.fastMode,
 		permissionMode: a.permissionMode,
+		memory: a.memory?.provider,
 		env: a.runtimeOverrides?.env
 	});
 }
@@ -10826,203 +10683,6 @@ function resolveAgentMcpServers(opts) {
 	return out;
 }
 //#endregion
-//#region src/mcp/tools.ts
-const obj = (properties, required = []) => ({
-	type: "object",
-	properties,
-	required,
-	additionalProperties: false
-});
-/**
-* Tools injected when an agent has a Slack integration. `sendSlackMessage` is
-* the active-messaging tool from the design (token held by the daemon, invisible
-* to the model); the rest are channel/user read helpers.
-*/
-const SLACK_TOOLS = [
-	{
-		name: "sendSlackMessage",
-		description: "Send a message to a Slack channel. Omit `channel` to post in the channel this conversation is happening in. Omit `thread` to reply in the current thread; pass an empty string to post to the channel root instead.",
-		inputSchema: obj({
-			text: {
-				type: "string",
-				description: "Message body, in standard Markdown (CommonMark/GFM). Use `**bold**`, `~~strikethrough~~`, `# headings`, tables, etc. — Slack renders standard Markdown natively (do NOT use single-char Slack mrkdwn like `*bold*` or `~strike~`)."
-			},
-			channel: {
-				type: "string",
-				description: "Target channel ID (e.g. C0123ABC). Defaults to the current channel."
-			},
-			thread: {
-				type: "string",
-				description: "Thread timestamp to reply under. Defaults to the current thread; \"\" posts to the channel root."
-			}
-		}, ["text"])
-	},
-	{
-		name: "getCurrentChannel",
-		description: "Return the Slack channel (and thread) this conversation is bound to, including the channel name when available.",
-		inputSchema: obj({})
-	},
-	{
-		name: "listChannelMembers",
-		description: "List the users and bots in a channel (id, name, is_bot). Omit `channel` to list members of the current channel.",
-		inputSchema: obj({ channel: {
-			type: "string",
-			description: "Channel ID. Defaults to the current channel."
-		} })
-	},
-	{
-		name: "listChannels",
-		description: "List the public/private channels the bot is a member of and can post to.",
-		inputSchema: obj({})
-	},
-	{
-		name: "getUserProfile",
-		description: "Look up a Slack user or bot by id, returning their display name, real name, and bot flag.",
-		inputSchema: obj({ user: {
-			type: "string",
-			description: "User ID (e.g. U0123ABC)."
-		} }, ["user"])
-	},
-	{
-		name: "readSlackFile",
-		description: "Fetch the contents of a file shared in Slack, using the bot credentials. You do NOT have direct network access to Slack's private file URLs (they require the bot token) — use this tool instead of curl/fetch. Pass the file's `url` (the `url_private` / `uri` from a shared attachment or resource link). Images are returned as viewable image content; text files as text. Supply `mimeType` when known for correct handling.",
-		inputSchema: obj({
-			url: {
-				type: "string",
-				description: "The file's url_private (or url_private_download) / resource-link uri."
-			},
-			mimeType: {
-				type: "string",
-				description: "Optional MIME type hint, e.g. image/png or text/plain."
-			}
-		}, ["url"])
-	}
-];
-/**
-* Tools injected when an agent has a Telegram integration. Mirrors the Slack set
-* but for the Telegram data model: `channel` is a chat id (e.g. -1001234567890),
-* `thread` is a forum-topic `message_thread_id`, and there is no `listChannels`
-* (a bot cannot enumerate the chats it belongs to).
-*/
-const TELEGRAM_TOOLS = [
-	{
-		name: "sendTelegramMessage",
-		description: "Send a message to a Telegram chat. Omit `channel` to post in the chat this conversation is happening in. Omit `thread` to reply in the current forum topic; pass an empty string to post outside any topic.",
-		inputSchema: obj({
-			text: {
-				type: "string",
-				description: "Message body, in standard Markdown (CommonMark/GFM). Use `**bold**`, `*italic*`, `` `code` ``, `[links](url)`, lists, etc. — the daemon converts it to Telegram formatting and escapes special characters for you, so write plain Markdown (do NOT pre-escape with backslashes)."
-			},
-			channel: {
-				type: "string",
-				description: "Target chat id (e.g. -1001234567890, or a positive id for a private chat). Defaults to the current chat."
-			},
-			thread: {
-				type: "string",
-				description: "Forum-topic message_thread_id to reply under. Defaults to the current topic; \"\" posts outside any topic."
-			}
-		}, ["text"])
-	},
-	{
-		name: "getCurrentChannel",
-		description: "Return the Telegram chat (and forum topic) this conversation is bound to, including the chat title when available.",
-		inputSchema: obj({})
-	},
-	{
-		name: "listChannelMembers",
-		description: "List the users and bots in a chat (id, name, is_bot). Omit `channel` to list members of the current chat. Note: Telegram only exposes administrators for large groups.",
-		inputSchema: obj({ channel: {
-			type: "string",
-			description: "Chat id. Defaults to the current chat."
-		} })
-	},
-	{
-		name: "getUserProfile",
-		description: "Look up a Telegram user or bot by id, returning their display name, username, and bot flag.",
-		inputSchema: obj({ user: {
-			type: "string",
-			description: "Numeric user id (e.g. 12345678)."
-		} }, ["user"])
-	},
-	{
-		name: "readTelegramFile",
-		description: "Fetch the contents of a file shared in Telegram, using the bot credentials. You do NOT have direct network access to Telegram's file storage — use this tool instead of curl/fetch. Pass the file's `url` (the `file_id` from a shared attachment or the `uri` of a resource link). Images are returned as viewable image content; text files as text. Supply `mimeType` when known for correct handling.",
-		inputSchema: obj({
-			url: {
-				type: "string",
-				description: "The shared file's Telegram file_id (or resource-link uri)."
-			},
-			mimeType: {
-				type: "string",
-				description: "Optional MIME type hint, e.g. image/png or text/plain."
-			}
-		}, ["url"])
-	}
-];
-/**
-* The agent's long-term memory tools — available to EVERY agent regardless of
-* integrations. Memory is a directory (`<agent-root>/memory/`) with a `MEMORY.md`
-* index (injected into the prompt each session) plus `<topic>.md` files the agent
-* reads on demand. Keep the index short; move detail into topic files.
-*/
-const MEMORY_TOOLS = [
-	{
-		name: "listMemory",
-		description: "List your memory files — the MEMORY.md index plus any topic files you have written. Use this to discover what you have stored before reading or updating it.",
-		inputSchema: obj({})
-	},
-	{
-		name: "readMemory",
-		description: "Read one of your memory files. Omit `path` (or pass \"MEMORY.md\") to read the index; pass a topic file name (e.g. \"deploys.md\") to read that topic. The index is already shown to you at the start of each session — use this to pull the detail behind an index entry when it is relevant.",
-		inputSchema: obj({ path: {
-			type: "string",
-			description: "Memory file name (e.g. \"deploys.md\"). Defaults to the MEMORY.md index."
-		} })
-	},
-	{
-		name: "writeMemory",
-		description: "Save one of your memory files (whole-file overwrite). Omit `path` to write the MEMORY.md index; pass a topic file name (e.g. \"deploys.md\") for a topic. Keep the INDEX short — a scannable list that links to topic files (e.g. \"- [deploys](deploys.md) — how we ship\"); put the actual detail in the topic files. Use for durable facts across sessions: conventions, decisions, who to ask, things you had to re-learn. A flat directory — no subfolders in the path.",
-		inputSchema: obj({
-			path: {
-				type: "string",
-				description: "Memory file name (e.g. \"deploys.md\"). Defaults to the MEMORY.md index. No subdirectories."
-			},
-			content: {
-				type: "string",
-				description: "The full new file contents, in Markdown. Replaces the file."
-			}
-		}, ["content"])
-	}
-];
-/** Names of every tool this module can inject — handy for routing/validation. */
-const ALL_TOOL_NAMES = [...new Set([
-	...SLACK_TOOLS,
-	...TELEGRAM_TOOLS,
-	...MEMORY_TOOLS
-].map((t) => t.name))];
-/**
-* The default MCP tool set for an agent. The memory tools are always present
-* (every agent has memory); the platform tools are gated by the agent's
-* integrations. Deduped by name so an agent bridging both platforms doesn't get
-* the shared read helpers (getCurrentChannel/listChannelMembers/getUserProfile)
-* twice — the first platform's variant wins, and both behave identically.
-*/
-function toolsForIntegrations(integrations) {
-	const tools = [];
-	const seen = /* @__PURE__ */ new Set();
-	const add = (set) => {
-		for (const t of set) {
-			if (seen.has(t.name)) continue;
-			seen.add(t.name);
-			tools.push(t);
-		}
-	};
-	add(MEMORY_TOOLS);
-	if (integrations.some((i) => i.platform === "slack")) add(SLACK_TOOLS);
-	if (integrations.some((i) => i.platform === "telegram")) add(TELEGRAM_TOOLS);
-	return tools;
-}
-//#endregion
 //#region src/router/routing-table.ts
 const KIND_ORDER = [
 	"mention",
@@ -197403,65 +197063,6 @@ function createSessionReader(store, workspaceUrlFor) {
 	};
 }
 //#endregion
-//#region src/agents/memory-provider.ts
-/**
-* `managed` memory: our `<agent-root>/memory/` directory. A thin, behavior-neutral
-* facade over `agents/memory.ts` — every method delegates to the existing primitive
-* and lets its error classes (`MemoryPathError` / `MemoryTooLargeError` /
-* `MemoryConflictError`) propagate raw, so the MCP + CP error mappings are unchanged.
-*/
-var ManagedMemoryProvider = class {
-	agentDirByAgent;
-	kind = "managed";
-	/** `agentDirByAgent` resolves an agent id → its root dir (which holds `memory/`),
-	*  or undefined for an unknown agent — the same resolver the pre-provider call
-	*  sites used. */
-	constructor(agentDirByAgent) {
-		this.agentDirByAgent = agentDirByAgent;
-	}
-	dirFor(agentId) {
-		const dir = this.agentDirByAgent(agentId);
-		if (!dir) throw new Error(`unknown agent ${agentId}`);
-		return dir;
-	}
-	runtimeEnv(_runtime) {
-		return {};
-	}
-	ensure(scope, agentName) {
-		ensureMemory(this.dirFor(scope.agentId), agentName);
-	}
-	async injectAtSessionStart(scope) {
-		return readIndex(this.dirFor(scope.agentId));
-	}
-	async recordTurn(_scope, _turn) {}
-	tools() {
-		return MEMORY_TOOLS;
-	}
-	async list(scope) {
-		return listMemory(this.dirFor(scope.agentId));
-	}
-	async read(scope, path) {
-		return {
-			path,
-			content: await readMemoryFile(this.dirFor(scope.agentId), path)
-		};
-	}
-	async write(scope, path, content, ifMatch) {
-		const { size, mtime } = await writeMemoryFile(this.dirFor(scope.agentId), path, content, ifMatch);
-		return {
-			ok: true,
-			path,
-			size,
-			mtime
-		};
-	}
-};
-/** Build the daemon's memory provider. Managed today; the config-driven selection
-*  between native/managed/external is a later phase. */
-function createManagedMemoryProvider(agentDirByAgent) {
-	return new ManagedMemoryProvider(agentDirByAgent);
-}
-//#endregion
 //#region src/cp/workspace-git.ts
 /**
 * `WorkspaceGit` — the seam answering the CP's `workspace/gitstatus` and
@@ -197651,6 +197252,7 @@ function applySpecFields(raw, spec, opts) {
 	else raw.permissionMode = spec.permissionMode;
 	if (spec.pause !== void 0) raw.pause = spec.pause;
 	if (spec.mcpServers !== void 0) raw.mcpServers = spec.mcpServers;
+	if (spec.memory !== void 0) raw.memory = spec.memory;
 	if (spec.outputMode !== void 0) {
 		const out = typeof raw.output === "object" && raw.output !== null ? raw.output : {};
 		out.mode = spec.outputMode;
@@ -213774,7 +213376,13 @@ var Daemon = class Daemon {
 	opts;
 	store;
 	mcp;
-	memory = createManagedMemoryProvider((id) => this.agents.get(id)?.dir);
+	memory = createMemoryProvider((id) => this.agents.get(id)?.dir, (id) => {
+		const a = this.agents.get(id);
+		return a ? this.runtimes[a.runtime] : void 0;
+	}, (id) => {
+		const a = this.agents.get(id);
+		return a ? memoryKindOf(a) : "managed";
+	});
 	gitCreds;
 	gitCredServer;
 	agents = /* @__PURE__ */ new Map();
@@ -213936,7 +213544,8 @@ var Daemon = class Daemon {
 			memory: this.memory,
 			mcpServersFor: ({ agent, channel, thread }) => {
 				const servers = [];
-				const tools = toolsForIntegrations(agent.integrations);
+				let tools = toolsForIntegrations(agent.integrations);
+				if (memoryKindOf(agent) === "native") tools = tools.filter((t) => !MEMORY_TOOL_NAMES.has(t.name));
 				const integrationId = agent.integrations[0]?.id;
 				if (tools.length > 0) {
 					const token = this.mcp.register({
@@ -214385,6 +213994,7 @@ var Daemon = class Daemon {
 				env: {
 					...agentChildEnv(agent),
 					...cpRuntimeEnv(agent),
+					...memoryProviderFor(agent, runtime).runtimeEnv(),
 					...agent.workspace.mode === "git-repo" && agent.workspace.gitCredential === "github-app" ? sessionGitEnv(agent.id) : {}
 				},
 				configPrefs: {
@@ -216501,4 +216111,4 @@ async function runForeground(opts, deps = {}) {
 //#endregion
 export { ClientTransport as i, CP_SUBPROTOCOL as n, CP_WS_PATH as r, runForeground as t };
 
-//# sourceMappingURL=run-foreground-Cdxkfe7g.js.map
+//# sourceMappingURL=run-foreground-Caze66K4.js.map