@ametyst/cli 0.3.8 → 0.3.12

package/dist/index.js

@@ -99974,7 +99974,7 @@ var require_XMLHttpRequest = __commonJS({
     init_esm_shims();
     var fs = __require("fs");
     var Url = __require("url");
-    var spawn4 = __require("child_process").spawn;
+    var spawn3 = __require("child_process").spawn;
     module.exports = XMLHttpRequest3;
     XMLHttpRequest3.XMLHttpRequest = XMLHttpRequest3;
     function XMLHttpRequest3(opts) {
@@ -100270,7 +100270,7 @@ var require_XMLHttpRequest = __commonJS({
           var syncFile = ".node-xmlhttprequest-sync-" + process.pid;
           fs.writeFileSync(syncFile, "", "utf8");
           var execString = "var http = require('http'), https = require('https'), fs = require('fs');var doRequest = http" + (ssl ? "s" : "") + ".request;var options = " + JSON.stringify(options) + ";var responseText = '';var responseData = Buffer.alloc(0);var req = doRequest(options, function(response) {response.on('data', function(chunk) {  var data = Buffer.from(chunk);  responseText += data.toString('utf8');  responseData = Buffer.concat([responseData, data]);});response.on('end', function() {fs.writeFileSync('" + contentFile + "', JSON.stringify({err: null, data: {statusCode: response.statusCode, headers: response.headers, text: responseText, data: responseData.toString('base64')}}), 'utf8');fs.unlinkSync('" + syncFile + "');});response.on('error', function(error) {fs.writeFileSync('" + contentFile + "', 'NODE-XMLHTTPREQUEST-ERROR:' + JSON.stringify(error), 'utf8');fs.unlinkSync('" + syncFile + "');});}).on('error', function(error) {fs.writeFileSync('" + contentFile + "', 'NODE-XMLHTTPREQUEST-ERROR:' + JSON.stringify(error), 'utf8');fs.unlinkSync('" + syncFile + "');});" + (data ? "req.write('" + JSON.stringify(data).slice(1, -1).replace(/'/g, "\\'") + "');" : "") + "req.end();";
-          var syncProc = spawn4(process.argv[0], ["-e", execString]);
+          var syncProc = spawn3(process.argv[0], ["-e", execString]);
           var statusText;
           while (fs.existsSync(syncFile)) {
           }
@@ -106361,7 +106361,7 @@ var init_dist = __esm({
 // src/config/paths.ts
 import { accessSync, constants, existsSync, mkdirSync } from "fs";
 import { homedir } from "os";
-import { join, parse as parse3, resolve } from "path";
+import { basename, join, parse as parse3, resolve } from "path";
 function ensureDirectories() {
   if (!existsSync(AMETYST_DIR)) mkdirSync(AMETYST_DIR, { mode: 448 });
   if (!existsSync(WALLETS_DIR)) mkdirSync(WALLETS_DIR, { mode: 448 });
@@ -106407,26 +106407,34 @@ function resolveRunRoot(explicitDir, deps = {}) {
   (deps.mkdirSync ?? mkdirSync)(fallback2, { recursive: true, mode: 448 });
   return { root: fallback2, reason: "fallback", rejected };
 }
-function loopsRoot(runRoot) {
-  return join(runRoot ?? resolveRunRoot().root, `.ametyst${ENV_SUFFIX}`, "loops");
+function tasksRoot(runRoot) {
+  return join(runRoot ?? resolveRunRoot().root, `.ametyst${ENV_SUFFIX}`, RUNS_SEGMENT);
 }
-function loopDir(slug, runRoot) {
+function runDir(slug, runRoot) {
   const safe = String(slug).toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/^-+|-+$/g, "");
-  if (!safe) throw new Error(`invalid loop slug: ${JSON.stringify(slug)}`);
-  return join(loopsRoot(runRoot), safe);
+  if (!safe) throw new Error(`invalid task slug: ${JSON.stringify(slug)}`);
+  return join(tasksRoot(runRoot), safe);
 }
-function loopFiresRoot(slug, runRoot) {
-  return join(loopDir(slug, runRoot), "fires");
+function legacyRunFolderHint(slug, runRoot, deps = {}) {
+  const exists = deps.existsSync ?? existsSync;
+  const next = runDir(slug, runRoot);
+  const ametystDir = join(runRoot, `.ametyst${ENV_SUFFIX}`);
+  const legacy = join(ametystDir, LEGACY_RUNS_SEGMENT, basename(next));
+  if (exists(next) || !exists(legacy)) return void 0;
+  return `Task ${slug}: found a run folder from an older cli at ${legacy} and nothing yet at ${next} \u2014 move it (\`mv ${join(ametystDir, LEGACY_RUNS_SEGMENT)} ${join(ametystDir, RUNS_SEGMENT)}\`, or \`mv ${legacy} ${next}\` when ${join(ametystDir, RUNS_SEGMENT)} already exists) to keep its .state/ ledger and logs; continuing with ${next}.`;
 }
-function loopFireDir(slug, fireId, runRoot) {
+function runFiresRoot(slug, runRoot) {
+  return join(runDir(slug, runRoot), "fires");
+}
+function runFireDir(slug, fireId, runRoot) {
   const safe = String(fireId).toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/^-+|-+$/g, "");
   if (!safe) throw new Error(`invalid fire id: ${JSON.stringify(fireId)}`);
-  return join(loopFiresRoot(slug, runRoot), safe);
+  return join(runFiresRoot(slug, runRoot), safe);
 }
 function refusedConstraintsPath(slug, fireId, runRoot) {
   const safe = String(fireId).toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/^-+|-+$/g, "");
   if (!safe) throw new Error(`invalid fire id: ${JSON.stringify(fireId)}`);
-  return join(loopDir(slug, runRoot), ".state", `constraints-refused-${safe}.md`);
+  return join(runDir(slug, runRoot), ".state", `constraints-refused-${safe}.md`);
 }
 function skillsRoot(target = "claude", global2 = false) {
   return join(global2 ? homedir() : process.cwd(), SKILLS_DIR_BY_TARGET[target], "skills");
@@ -106436,7 +106444,7 @@ function skillDir(slug, target = "claude", global2 = false) {
   if (!safe) throw new Error(`invalid skill slug: ${JSON.stringify(slug)}`);
   return join(skillsRoot(target, global2), safe);
 }
-var ENV_SUFFIX, AMETYST_DIR, CONFIG_PATH, CREDENTIALS_ENC_PATH, WALLETS_DIR, VAULT_PATH, SKILLS_DIR_BY_TARGET;
+var ENV_SUFFIX, AMETYST_DIR, CONFIG_PATH, CREDENTIALS_ENC_PATH, WALLETS_DIR, VAULT_PATH, RUNS_SEGMENT, LEGACY_RUNS_SEGMENT, SKILLS_DIR_BY_TARGET;
 var init_paths = __esm({
   "src/config/paths.ts"() {
     "use strict";
@@ -106447,6 +106455,8 @@ var init_paths = __esm({
     CREDENTIALS_ENC_PATH = join(AMETYST_DIR, "credentials.enc");
     WALLETS_DIR = join(AMETYST_DIR, "wallets");
     VAULT_PATH = join(AMETYST_DIR, "wallet.json");
+    RUNS_SEGMENT = "tasks";
+    LEGACY_RUNS_SEGMENT = "loops";
     SKILLS_DIR_BY_TARGET = {
       claude: ".claude",
       codex: ".codex"
@@ -111845,7 +111855,7 @@ import {
   writeSync
 } from "fs";
 import { randomBytes as randomBytes3 } from "crypto";
-import { basename as basename3, dirname as dirname5, join as join5 } from "path";
+import { basename as basename4, dirname as dirname5, join as join5 } from "path";
 function createWallet(passphrase) {
   return native.createWallet(passphrase);
 }
@@ -111887,7 +111897,7 @@ function listWallets() {
   return readdirSync3(WALLETS_DIR).filter((file) => file.endsWith(".json")).map((file) => join5(WALLETS_DIR, file));
 }
 function deleteWallet(walletPath) {
-  const name = basename3(walletPath);
+  const name = basename4(walletPath);
   if (!name.endsWith(".json")) {
     throw new Error("Refusing to delete non-wallet file");
   }
@@ -111924,7 +111934,7 @@ function writeVaultFileAtomic(contents) {
 }
 function writeSecretFileAtomic(path2, contents) {
   const dir = dirname5(path2);
-  const tmp = join5(dir, `.${basename3(path2)}.tmp-${process.pid}-${randomBytes3(8).toString("hex")}`);
+  const tmp = join5(dir, `.${basename4(path2)}.tmp-${process.pid}-${randomBytes3(8).toString("hex")}`);
   let fd;
   try {
     fd = openSync(tmp, "wx", 384);
@@ -112477,7 +112487,7 @@ var init_version5 = __esm({
   "src/version.ts"() {
     "use strict";
     init_esm_shims();
-    CLI_VERSION = true ? "0.3.8" : "0.0.0-dev";
+    CLI_VERSION = true ? "0.3.12" : "0.0.0-dev";
   }
 });
 
@@ -113961,7 +113971,7 @@ var init_engine_store = __esm({
     BUSY_PRIMARY_ERRNO = /* @__PURE__ */ new Set([5, 6]);
     isBusyErrno = (errno) => Number.isInteger(errno) && BUSY_PRIMARY_ERRNO.has(errno & 255);
     CORRUPT_STORE_ADVICE = `It holds no credentials \u2014 every secret is in your OS keychain \u2014 so deleting that file loses nothing but the engine's own bookkeeping, and it is rebuilt on the next 'ametyst connections' command.`;
-    lockedStoreAdvice = (budgetMs) => `Another process is holding it \u2014 a second 'ametyst' command, or a loop running alongside this one. Nothing is damaged and nothing was lost: SQLite is doing its job and serializing the two. This was already retried for up to ${budgetMs}ms and the lock did not clear, so the other process is still working; run the command again once it finishes. Do NOT delete the database to clear this \u2014 that would throw away working state to fix a lock that goes away by itself.`;
+    lockedStoreAdvice = (budgetMs) => `Another process is holding it \u2014 a second 'ametyst' command, or a scheduled task firing alongside this one. Nothing is damaged and nothing was lost: SQLite is doing its job and serializing the two. This was already retried for up to ${budgetMs}ms and the lock did not clear, so the other process is still working; run the command again once it finishes. Do NOT delete the database to clear this \u2014 that would throw away working state to fix a lock that goes away by itself.`;
     ConnectionsStoreUnavailableError = class extends Error {
       constructor(path2, cause, advice = CORRUPT_STORE_ADVICE) {
         super(
@@ -114374,7 +114384,7 @@ import {
   writeFileSync as writeFileSync3
 } from "fs";
 import { homedir as homedir2 } from "os";
-import { basename, dirname as dirname2, join as join2 } from "path";
+import { basename as basename2, dirname as dirname2, join as join2 } from "path";
 var CLAUDE_CODE_CONFIG_PATH = join2(homedir2(), ".claude.json");
 var AMETYST_MCP_COMMAND = process.argv[1] || "ametyst";
 var AMETYST_MCP_NAME = false ? "ametyst-staging" : "ametyst";
@@ -114397,7 +114407,7 @@ function backupIfExists() {
   const backupPath = `${CLAUDE_CODE_CONFIG_PATH}.backup-${ts}`;
   copyFileSync(CLAUDE_CODE_CONFIG_PATH, backupPath);
   const dir = dirname2(CLAUDE_CODE_CONFIG_PATH);
-  const base2 = basename(CLAUDE_CODE_CONFIG_PATH);
+  const base2 = basename2(CLAUDE_CODE_CONFIG_PATH);
   const backups = readdirSync(dir).filter((f) => f.startsWith(`${base2}.backup-`)).sort();
   while (backups.length > MAX_BACKUPS) {
     const oldest = backups.shift();
@@ -114492,7 +114502,7 @@ import {
   writeFileSync as writeFileSync4
 } from "fs";
 import { homedir as homedir3 } from "os";
-import { basename as basename2, dirname as dirname3, join as join3 } from "path";
+import { basename as basename3, dirname as dirname3, join as join3 } from "path";
 var CODEX_CONFIG_PATH = join3(homedir3(), ".codex", "config.toml");
 var MAX_BACKUPS2 = 3;
 var TRAILING = "\\s*(#.*)?$";
@@ -114510,7 +114520,7 @@ function backupIfExists2() {
   } catch {
   }
   const dir = dirname3(CODEX_CONFIG_PATH);
-  const base2 = basename2(CODEX_CONFIG_PATH);
+  const base2 = basename3(CODEX_CONFIG_PATH);
   const backups = readdirSync2(dir).filter((f) => f.startsWith(`${base2}.backup-`)).sort();
   while (backups.length > MAX_BACKUPS2) {
     const oldest = backups.shift();
@@ -114617,7 +114627,7 @@ function removeAmetystCodexEntry() {
 }
 function purgeKeyBearingBackups() {
   const dir = dirname3(CODEX_CONFIG_PATH);
-  const base2 = basename2(CODEX_CONFIG_PATH);
+  const base2 = basename3(CODEX_CONFIG_PATH);
   let names;
   try {
     names = readdirSync2(dir).filter((f) => f.startsWith(`${base2}.backup-`));
@@ -116610,7 +116620,7 @@ async function startUnlockListener(deps) {
 // src/mcp-server/system-prompt.ts
 init_esm_shims();
 
-// src/loops/memory-model.ts
+// src/tasks/memory-model.ts
 init_esm_shims();
 init_dist();
 var TASK_MEMORY_MODEL_SECTION = `TASK MEMORY MODEL (the one description \u2014 every taskMemory* tool points here):
@@ -116873,12 +116883,12 @@ your wallet first** \u2014 discover it, don't dead-end on "I can't access that".
 ## Tasks are payable too
 
 Beyond raw merchants, your workspace has reusable **tasks** \u2014 multi-step
-procedures that may spend on merchants as they run. A task is the unified
-card: what used to be published as either a "compound skill" or a "loop" is
-one row now, and one set of tools covers both.
+procedures that may spend on merchants as they run. A task is one card
+whether it is a one-shot procedure or a scheduled job with its own memory,
+and one set of tools covers all of them.
 
 - **\`getTask({ intent })\`** then **\`runTask\`** \u2014 find and run one, whether
-  it is a one-shot procedure or an autonomous loop with its own memory.
+  it is a one-shot procedure or a scheduled job with its own memory.
 - **\`createTask\`** \u2014 author or modify one.
 
 These are *your* capabilities the same way the merchants are: available through
@@ -117125,15 +117135,13 @@ function shouldAutoShare(toolCallCount2, isDesignPartner) {
 init_esm_shims();
 function nudgeFlagForCounts(counts) {
   if (!counts) return null;
-  if (!Number.isFinite(counts.compounds) || !Number.isFinite(counts.loops)) return null;
-  if (counts.compounds < 0 || counts.loops < 0) return null;
-  if (counts.compounds === 0) return "skill";
-  if (counts.loops === 0) return "loop";
+  if (!Number.isFinite(counts.tasks)) return null;
+  if (counts.tasks < 0) return null;
+  if (counts.tasks === 0) return "task";
   return null;
 }
 var NUDGE_TEXT = {
-  skill: "\u2139\uFE0F Ametyst \u2014 this workspace has not created any skill yet. Ask the user: would they like to create their first skill now? A skill (compound) packages a workflow they repeat into one reusable command, instead of re-explaining it every session. If they say yes, walk them through `createTask`. If they say no, drop it and carry on \u2014 do not ask again in this turn. This note is advisory: finish the tool result above first, it is unrelated.",
-  loop: "\u2139\uFE0F Ametyst \u2014 this workspace has skills but no loop yet. Ask the user: would they like to turn one of their skills into a loop? A loop runs on a schedule and keeps its own memory between runs, so a skill they fire by hand every day runs itself instead. If they say yes, walk them through `createTask`. If they say no, drop it and carry on \u2014 do not ask again in this turn. This note is advisory: finish the tool result above first, it is unrelated."
+  task: "\u2139\uFE0F Ametyst \u2014 this workspace has not created any task yet. Ask the user: would they like to create their first task now? A task packages a workflow they repeat into one reusable command \u2014 run by hand or on a schedule, with its own memory between runs \u2014 instead of re-explaining it every session. If they say yes, walk them through `createTask`. If they say no, drop it and carry on \u2014 do not ask again in this turn. This note is advisory: finish the tool result above first, it is unrelated."
 };
 function nudgeTextFor(flag) {
   return Object.prototype.hasOwnProperty.call(NUDGE_TEXT, flag) ? NUDGE_TEXT[flag] : null;
@@ -117352,12 +117360,12 @@ init_paths();
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync8 } from "fs";
 import { join as join9 } from "path";
 
-// src/loops/state-docs.ts
+// src/tasks/state-docs.ts
 init_esm_shims();
 import { existsSync as existsSync10, readFileSync as readFileSync9 } from "fs";
 import { join as join8 } from "path";
 
-// src/loops/shipback.ts
+// src/tasks/shipback.ts
 init_esm_shims();
 function scanHeadings(text) {
   return scanDoc(text).items;
@@ -117480,7 +117488,7 @@ function verifyLanded(afterWrite, expectedBlocks) {
   return expectedBlocks.filter((t) => !have.has(t));
 }
 
-// src/loops/memory-manifest.ts
+// src/tasks/memory-manifest.ts
 init_esm_shims();
 var MEMORY_MANIFEST_MAX_DOCS = 64;
 var MEMORY_MANIFEST_MAX_RECORDS = 16;
@@ -117636,7 +117644,7 @@ function formatMemoryManifest(manifest) {
   return lines.length ? lines.join("\n") : "(declared empty: no docs, no records)";
 }
 
-// src/loops/state-docs.ts
+// src/tasks/state-docs.ts
 var RESERVED_FIRE_FILENAMES = [
   "SKILL.md",
   "VISION.md",
@@ -117862,7 +117870,7 @@ var TASK_DEFINITION_FILES = [
   ["dashboardManifest", "dashboard.manifest.json", "dashboardManifest"]
 ];
 function materializeTask(task, runId, runRoot) {
-  const dir = loopFireDir(task.slug, runId, runRoot);
+  const dir = runFireDir(task.slug, runId, runRoot);
   mkdirSync7(dir, { recursive: true, mode: 448 });
   const files = {};
   const skipped = [];
@@ -117923,17 +117931,55 @@ async function materializeMemoryDocs(sdk, apiKey, task, dir) {
 // src/mcp-server/index.ts
 import { existsSync as existsSync13 } from "fs";
 
-// src/loops/dashboard.ts
+// src/tasks/dashboard.ts
 init_esm_shims();
 import { createServer as createServer2 } from "http";
 import * as realFs from "fs";
 import { spawn as realSpawn } from "child_process";
 import { join as join10 } from "path";
+
+// src/tasks/env.ts
+init_esm_shims();
+var TASK_ENV = Object.freeze({
+  DASHBOARD_PORT: "AMETYST_TASK_DASHBOARD_PORT",
+  MAX_BUDGET_USD: "AMETYST_TASK_MAX_BUDGET_USD",
+  MAX_CONCURRENT_FIRES: "AMETYST_TASK_MAX_CONCURRENT_FIRES",
+  GIT_AUTHOR_NAME: "AMETYST_TASK_GIT_AUTHOR_NAME",
+  GIT_AUTHOR_EMAIL: "AMETYST_TASK_GIT_AUTHOR_EMAIL",
+  SLUG: "AMETYST_TASK_SLUG"
+});
+var LEGACY_TASK_ENV = Object.freeze({
+  DASHBOARD_PORT: "AMETYST_LOOP_DASHBOARD_PORT",
+  MAX_BUDGET_USD: "AMETYST_LOOP_MAX_BUDGET_USD",
+  MAX_CONCURRENT_FIRES: "AMETYST_LOOP_MAX_CONCURRENT_FIRES",
+  GIT_AUTHOR_NAME: "AMETYST_LOOP_GIT_AUTHOR_NAME",
+  GIT_AUTHOR_EMAIL: "AMETYST_LOOP_GIT_AUTHOR_EMAIL",
+  SLUG: "AMETYST_LOOP_SLUG"
+});
+var warnedLegacyNames = /* @__PURE__ */ new Set();
+function legacyTaskEnvWarning(key) {
+  return `${LEGACY_TASK_ENV[key]} is deprecated \u2014 rename it to ${TASK_ENV[key]}. Read as ${TASK_ENV[key]} for now; the old name stops being honoured in a later release.`;
+}
+function readTaskEnv(key, env = process.env, deps = {}) {
+  const fresh = env[TASK_ENV[key]];
+  if (fresh !== void 0) return fresh;
+  const legacy = env[LEGACY_TASK_ENV[key]];
+  if (legacy === void 0) return void 0;
+  const legacyName = LEGACY_TASK_ENV[key];
+  if (!warnedLegacyNames.has(legacyName)) {
+    warnedLegacyNames.add(legacyName);
+    (deps.warn ?? ((line) => console.warn(line)))(legacyTaskEnvWarning(key));
+  }
+  return legacy;
+}
+
+// src/tasks/dashboard.ts
 var DEFAULT_PORT = 4477;
-var DASHBOARD_PORT_ENV = "AMETYST_LOOP_DASHBOARD_PORT";
+var DASHBOARD_PORT_ENV = TASK_ENV.DASHBOARD_PORT;
 var DASHBOARD_NO_OPEN_ENV = "AMETYST_DASHBOARD_NO_OPEN";
 var NO_DASHBOARD_MESSAGE = "no dashboard on this task \u2014 ask your agent to create one";
 var MAX_PORT_RETRIES = 20;
+var DASHBOARD_DOC_CACHE_MS = 5e3;
 var SAFE_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 function parseManifestFiles(manifest) {
   if (typeof manifest !== "string" || !manifest.trim()) return [];
@@ -117947,7 +117993,7 @@ function parseManifestFiles(manifest) {
   return list2.filter((f) => typeof f === "string" && SAFE_NAME.test(f));
 }
 function dashboardPort(env = process.env) {
-  const raw = Number(env[DASHBOARD_PORT_ENV]);
+  const raw = Number(readTaskEnv("DASHBOARD_PORT", env));
   return Number.isInteger(raw) && raw > 0 && raw < 65536 ? raw : DEFAULT_PORT;
 }
 function openDashboardInBrowser(url2, deps = {}) {
@@ -117958,9 +118004,9 @@ function openDashboardInBrowser(url2, deps = {}) {
   const platform = deps.platform ?? process.platform;
   const cmd = platform === "darwin" ? "open" : platform === "linux" ? "xdg-open" : null;
   if (!cmd) return false;
-  const spawn4 = deps.spawn ?? realSpawn;
+  const spawn3 = deps.spawn ?? realSpawn;
   try {
-    const child = spawn4(cmd, [url2], { stdio: "ignore", detached: true });
+    const child = spawn3(cmd, [url2], { stdio: "ignore", detached: true });
     child.once?.("error", () => {
     });
     child.unref?.();
@@ -117970,14 +118016,32 @@ function openDashboardInBrowser(url2, deps = {}) {
   }
 }
 function startDashboardServer(args) {
-  const html = args.loop.dashboardHtml;
+  const html = args.task.dashboardHtml;
   if (typeof html !== "string" || !html) return Promise.resolve(null);
   const fs = args.deps?.fs ?? realFs;
   const log = args.deps?.log ?? ((line) => console.error(line));
   const make = args.deps?.createServer ?? createServer2;
+  const clock = args.deps?.now ?? Date.now;
   const basePort = args.port ?? dashboardPort();
-  const files = parseManifestFiles(args.loop.dashboardManifest);
-  const handler = (req, res) => {
+  const files = parseManifestFiles(args.task.dashboardManifest);
+  const readDoc = args.readDoc;
+  const docCache = /* @__PURE__ */ new Map();
+  const resolveDoc = async (name) => {
+    if (!readDoc) return null;
+    const now = clock();
+    const hit = docCache.get(name);
+    if (hit && now - hit.at < DASHBOARD_DOC_CACHE_MS) return hit.value;
+    let value2 = null;
+    try {
+      const got = await readDoc(name);
+      value2 = got && typeof got.content === "string" ? got : null;
+    } catch {
+      value2 = null;
+    }
+    docCache.set(name, { at: now, value: value2 });
+    return value2;
+  };
+  const serve = async (req, res) => {
     try {
       const url2 = (req.url ?? "/").split("?")[0];
       if (req.method === "GET" && url2 === "/") {
@@ -117987,27 +118051,36 @@ function startDashboardServer(args) {
       }
       if (req.method === "GET" && url2 === "/data") {
         const data = {};
+        let newestUpdatedAt;
         for (const name of files) {
+          const doc = await resolveDoc(name);
+          if (doc) {
+            data[name] = doc.content;
+            if (doc.updatedAt && (!newestUpdatedAt || Date.parse(doc.updatedAt) > Date.parse(newestUpdatedAt))) {
+              newestUpdatedAt = doc.updatedAt;
+            }
+            continue;
+          }
           try {
-            const p = join10(args.loopDir, name);
+            const p = join10(args.runDir, name);
             if (fs.existsSync(p)) data[name] = fs.readFileSync(p, "utf-8");
           } catch {
           }
         }
         const state = {};
         try {
-          const p = join10(args.loopDir, ".state", "fires.jsonl");
+          const p = join10(args.runDir, ".state", "fires.jsonl");
           if (fs.existsSync(p)) state["fires.jsonl"] = fs.readFileSync(p, "utf-8");
         } catch {
         }
         res.writeHead(200, { "content-type": "application/json; charset=utf-8" });
         res.end(
           JSON.stringify({
-            loop: args.loop.slug,
+            loop: args.task.slug,
             files: data,
             state,
             mode: "live",
-            asOf: (/* @__PURE__ */ new Date()).toISOString()
+            asOf: newestUpdatedAt ?? (/* @__PURE__ */ new Date()).toISOString()
           })
         );
         return;
@@ -118022,6 +118095,15 @@ function startDashboardServer(args) {
       }
     }
   };
+  const handler = (req, res) => {
+    void serve(req, res).catch(() => {
+      try {
+        res.writeHead(500);
+        res.end();
+      } catch {
+      }
+    });
+  };
   const bind = (port) => new Promise((resolve3) => {
     const server2 = make(handler);
     server2.once("error", (err) => {
@@ -118054,557 +118136,264 @@ function startDashboardServer(args) {
     for (let port = basePort; port <= lastPort; port++) {
       const attempt = await bind(port);
       if (attempt.ok) {
-        log(`  loop dashboard: http://localhost:${attempt.handle.port}`);
+        log(`  task dashboard: http://localhost:${attempt.handle.port}`);
         return attempt.handle;
       }
       if (attempt.err.code !== "EADDRINUSE") {
         log(
-          `  (loop dashboard not started on :${port} \u2014 ${attempt.err.code ?? attempt.err.message}; run continues)`
+          `  (task dashboard not started on :${port} \u2014 ${attempt.err.code ?? attempt.err.message}; run continues)`
         );
         return null;
       }
     }
-    log(`  (loop dashboard not started \u2014 :${basePort}-${lastPort} all in use; run continues)`);
+    log(`  (task dashboard not started \u2014 :${basePort}-${lastPort} all in use; run continues)`);
     return null;
   })();
 }
 
-// src/mcp-server/task-run-mode.ts
+// src/tasks/dashboard-docs.ts
 init_esm_shims();
-var ACCEPTED_RUN_MODES = ["in-chat", "headless"];
-var FRONTMATTER_SCAN_LIMIT = 8192;
-function normalizeRunMode(raw) {
-  if (typeof raw !== "string") return void 0;
-  const v = raw.trim().toLowerCase();
-  if (v === "headless") return "headless";
-  if (v === "in-chat" || v === "inchat" || v === "in_chat") return "in-chat";
-  return void 0;
+function memoryDocResolver(sdk, apiKey, slug, manifest) {
+  return async (name) => {
+    const key = docKeyForFilename(name);
+    if (!key) return null;
+    const declared = declaredDocScope(manifest, key);
+    const scopes = declared ? [declared] : ["member", "shared"];
+    for (const scope of scopes) {
+      try {
+        const res = await sdk.loops.memory.getDoc(apiKey, slug, key, { scope });
+        if (res.status === "ok") {
+          return { content: res.doc.content ?? "", ...res.doc.updatedAt ? { updatedAt: res.doc.updatedAt } : {} };
+        }
+      } catch {
+      }
+    }
+    return null;
+  };
 }
-function describeProvided(raw) {
-  if (typeof raw === "string") return raw.trim();
-  try {
-    return JSON.stringify(raw) ?? String(raw);
-  } catch {
-    return String(raw);
-  }
+function docKeyForFilename(name) {
+  if (typeof name !== "string" || name.length === 0 || name.startsWith(".")) return void 0;
+  if (name.includes("/") || name.includes("\\")) return void 0;
+  const key = name.endsWith(".md") ? name.slice(0, -".md".length) : name;
+  return key.length > 0 ? key : void 0;
 }
-function classifyRunModeArgument(raw) {
-  if (raw === void 0 || raw === null) return { kind: "omitted" };
-  if (typeof raw === "string" && raw.trim() === "") return { kind: "omitted" };
-  const mode2 = normalizeRunMode(raw);
-  if (mode2) return { kind: "valid", mode: mode2 };
-  return { kind: "invalid", provided: describeProvided(raw) };
+
+// src/tasks/launch.ts
+init_esm_shims();
+import { spawnSync } from "child_process";
+
+// src/tasks/memory-verbs.ts
+init_esm_shims();
+import { readFileSync as readFileSync10 } from "fs";
+
+// src/tasks/sdk.ts
+init_esm_shims();
+init_config();
+init_resolve();
+var DEFAULT_URLS = {
+  credentialServerUrl: "http://localhost:3002",
+  buyerServerUrl: "http://localhost:3003",
+  sellerServerUrl: "http://localhost:3003",
+  bundlerPaymasterUrl: "https://rpc.zerodev.app/api/v3/802751ef-4785-4586-873d-687b4c8734a2/chain/84532"
+};
+async function getCliSdk() {
+  const config = loadConfig();
+  if (!config) throw new Error("No config found. Run `ametyst login --api-key <KEY>` first.");
+  const resolved = await resolveApiKey(config.credentialStore ?? "keychain");
+  const apiKey = resolved.apiKey;
+  if (!apiKey) {
+    throw new Error(
+      resolved.storeError ? `No API key found \u2014 the credential store is unavailable (${resolved.storeError}). Set ${API_KEY_ENV_VAR} or run \`ametyst login --api-key <KEY>\`.` : `No API key found. Run \`ametyst login --api-key <KEY>\` first, or set ${API_KEY_ENV_VAR}.`
+    );
+  }
+  const { AmetystSDK: AmetystSDK2 } = await Promise.resolve().then(() => (init_dist(), dist_exports));
+  const sdk = new AmetystSDK2({
+    bundlerPaymasterUrl: config.bundlerPaymasterUrl || DEFAULT_URLS.bundlerPaymasterUrl,
+    credentialServerUrl: config.credentialServerUrl || DEFAULT_URLS.credentialServerUrl,
+    buyerServerUrl: config.buyerServerUrl || DEFAULT_URLS.buyerServerUrl,
+    sellerServerUrl: config.sellerServerUrl || DEFAULT_URLS.sellerServerUrl
+  });
+  return { sdk, apiKey };
 }
-function unquoteScalar(raw) {
-  let v = raw.trim();
-  const comment = v.match(/(?:^|\s)#.*$/);
-  if (comment) v = v.slice(0, comment.index === 0 ? 0 : comment.index).trim();
-  if (v.length >= 2 && (v.startsWith('"') && v.endsWith('"') || v.startsWith("'") && v.endsWith("'"))) {
-    v = v.slice(1, -1).trim();
+
+// src/tasks/memory-verbs.ts
+function emit(json, payload, human) {
+  if (json) {
+    console.log(JSON.stringify(payload, null, 2));
+    return;
   }
-  return v;
+  console.log(human());
 }
-function parseDefaultRunMode(body) {
-  if (typeof body !== "string" || !body) return void 0;
-  const head = body.replace(/^\uFEFF/, "").slice(0, FRONTMATTER_SCAN_LIMIT);
-  const opener = head.match(/^---[ \t]*\r?\n/);
-  if (!opener) return void 0;
-  const rest = head.slice(opener[0].length);
-  const closer = rest.search(/^(?:---|\.\.\.)[ \t]*(?:\r?\n|$)/m);
-  if (closer < 0) return void 0;
-  const block = rest.slice(0, closer);
-  const hit = block.match(/^defaultRunMode[ \t]*:[ \t]*(.*)$/m);
-  if (!hit) return void 0;
-  return normalizeRunMode(unquoteScalar(hit[1] ?? ""));
+function fail(res, what) {
+  const code = res.code ? ` (${res.code})` : "";
+  throw new Error(`could not ${what}${code}: ${res.error ?? "unknown error"}`);
 }
-function resolveRunMode(explicit, body) {
-  const arg = classifyRunModeArgument(explicit);
-  if (arg.kind === "invalid") {
-    return { ok: false, error: "invalid_mode", provided: arg.provided, accepted: ACCEPTED_RUN_MODES };
+function isDocMissing404(res) {
+  if (res.status === "ok" || res.code !== 404) return false;
+  const raw = res.error ?? "";
+  let message = raw;
+  const bodyStart = raw.indexOf("{");
+  if (bodyStart !== -1) {
+    try {
+      const body = JSON.parse(raw.slice(bodyStart));
+      if (body.code === "loop_memory_doc_not_found") return true;
+      if (typeof body.message === "string") message = body.message;
+    } catch {
+    }
   }
-  if (arg.kind === "valid") return { ok: true, mode: arg.mode, source: "explicit" };
-  const fromBody = parseDefaultRunMode(body);
-  if (fromBody) return { ok: true, mode: fromBody, source: "frontmatter" };
-  return { ok: true, mode: "in-chat", source: "default" };
+  return /\bNo memory doc\b/.test(message);
 }
-
-// src/loops/estimate.ts
-init_esm_shims();
-function estimateBlastRadius(loop2) {
-  const g = loop2.graphJson ?? {};
-  const nodes = Array.isArray(g.nodes) ? g.nodes : [];
-  const steps = nodes.length;
-  const paidSteps = nodes.filter(
-    (n) => n?.type === "spend" || n?.data?.paid === true || n?.paid === true
-  ).length;
-  const costHints = nodes.map((n) => Number(n?.data?.estCostEur ?? n?.estCostEur)).filter((x) => !Number.isNaN(x));
-  const estCostEur = costHints.length ? costHints.reduce((a, b) => a + b, 0) : null;
-  return { steps, paidSteps, estCostEur };
+function isNotASeat404(res) {
+  return res.status !== "ok" && res.code === 404 && /not a seat/i.test(res.error ?? "");
 }
-
-// src/loops/dashboard-template.ts
-init_esm_shims();
-var DEFAULT_DASHBOARD_FILES = [
-  "VISION.md",
-  "CONSTRAINTS.md",
-  "QUEUE.md",
-  "STATUS.md",
-  "README.md",
-  "rounds.jsonl"
-];
-function parseProcessSpec(manifest) {
-  if (typeof manifest !== "string" || !manifest.trim()) return null;
-  let parsed;
-  try {
-    parsed = JSON.parse(manifest);
-  } catch {
-    return null;
+function parseScopeFlag(raw, allowAll) {
+  if (raw === void 0) return void 0;
+  const s = raw.trim();
+  if (s === "shared" || s === "member") return s;
+  if (allowAll && s === "all") return "all";
+  throw new Error(
+    `--scope must be ${allowAll ? "shared, member or all" : "shared or member"}, got ${JSON.stringify(raw)}`
+  );
+}
+function parseKindFlag(raw) {
+  const kind = raw?.trim() || void 0;
+  if (kind !== void 0 && !isRecordKindToken(kind)) {
+    throw new Error(
+      `--kind must be a token matching [a-z0-9-]{1,64} \u2014 a reserved kind (${RESERVED_RECORD_KINDS.join(", ")}) or a free kind the task declares, got ${JSON.stringify(raw)}`
+    );
   }
-  const raw = parsed?.processSpec;
-  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return null;
-  const spec = raw;
-  const stages = (Array.isArray(spec.stages) ? spec.stages : []).map((s) => {
-    if (typeof s === "string" && s.trim()) return { label: s.trim() };
-    if (s && typeof s === "object" && !Array.isArray(s)) {
-      const o = s;
-      if (typeof o.label === "string" && o.label.trim()) {
-        return {
-          label: o.label.trim(),
-          ...typeof o.id === "string" && o.id.trim() ? { id: o.id.trim() } : {},
-          ...typeof o.detail === "string" && o.detail.trim() ? { detail: o.detail.trim() } : {}
-        };
-      }
-    }
-    return null;
-  }).filter((s) => s !== null);
-  const strings = (v) => (Array.isArray(v) ? v : []).filter((x) => typeof x === "string" && x.trim() !== "");
-  const out = {
-    stages,
-    inputs: strings(spec.inputs),
-    outputs: strings(spec.outputs),
-    ...typeof spec.title === "string" && spec.title.trim() ? { title: spec.title.trim() } : {}
-  };
-  return stages.length || out.inputs.length || out.outputs.length ? out : null;
+  return kind;
 }
-function defaultDashboardManifest() {
-  return JSON.stringify({ files: [...DEFAULT_DASHBOARD_FILES] });
+function parseKeyFlag(raw) {
+  const key = raw?.trim() || void 0;
+  if (key !== void 0 && !isRecordKey(key)) {
+    throw new Error(`--key must match [A-Za-z0-9._:-]{1,200} (no whitespace, no "/"), got ${JSON.stringify(raw)}`);
+  }
+  return key;
 }
-function embedJson(value2) {
-  return JSON.stringify(value2).replace(/</g, "\\u003c");
+async function readDocResolved(sdk, apiKey, slug, key, scope, declared) {
+  if (scope === "shared" || scope === "member") {
+    const res = await sdk.loops.memory.getDoc(apiKey, slug, key, { scope });
+    if (res.status === "ok") return { status: "ok", doc: res.doc, scope };
+    return isDocMissing404(res) ? { status: "missing" } : { status: "nok", res };
+  }
+  if (declared) {
+    const res = await sdk.loops.memory.getDoc(apiKey, slug, key);
+    if (res.status === "ok") return { status: "ok", doc: res.doc, scope: declared };
+    return isDocMissing404(res) ? { status: "missing" } : { status: "nok", res };
+  }
+  const own = await sdk.loops.memory.getDoc(apiKey, slug, key, { scope: "member" });
+  if (own.status === "ok") return { status: "ok", doc: own.doc, scope: "member" };
+  if (!isDocMissing404(own) && !isNotASeat404(own)) return { status: "nok", res: own };
+  const shared = await sdk.loops.memory.getDoc(apiKey, slug, key, { scope: "shared" });
+  if (shared.status === "ok") return { status: "ok", doc: shared.doc, scope: "shared" };
+  return isDocMissing404(shared) ? { status: "missing" } : { status: "nok", res: shared };
 }
-function escapeHtml(s) {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+function renderRecord(r) {
+  const keyPart = r.key ? ` ${r.key}` : "";
+  const archivedPart = r.archived ? ` (archived${r.archivedAt ? ` ${r.archivedAt}` : ""})` : "";
+  if ("content" in r) return `\u2500\u2500 ${r.createdAt} [${r.kind}]${keyPart}${archivedPart}
+${r.content}`;
+  return `\u2500\u2500 ${r.createdAt} [${r.kind}]${keyPart}${archivedPart}  ${r.summary}`;
 }
-function renderLoopDashboardTemplate(args) {
-  const title = escapeHtml(args.processSpec?.title ?? args.slug);
-  const seed = embedJson({
-    slug: args.slug,
-    descriptionShort: args.descriptionShort ?? "",
-    processSpec: args.processSpec ?? null
-  });
-  return `<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>${title} \u2014 loop dashboard</title>
-<style>
-  :root { --bg:#f7f7fb; --panel:#fff; --border:#e3e3ee; --muted:#6b6b80; --accent:#5b5bd6; --ok:#1a7f37; --bad:#b42318; }
-  * { box-sizing: border-box; }
-  body { margin:0; font:14px/1.5 -apple-system, "Segoe UI", Roboto, sans-serif; background:var(--bg); color:#1d1d2b; padding:24px; }
-  h1 { font-size:20px; margin:0 0 4px; }
-  h2 { font-size:14px; margin:24px 0 8px; text-transform:uppercase; letter-spacing:.05em; color:var(--muted); }
-  .sub { color:var(--muted); margin:0 0 16px; }
-  .panel { background:var(--panel); border:1px solid var(--border); border-radius:12px; padding:16px; }
-  .map { display:flex; flex-wrap:wrap; align-items:stretch; gap:8px; }
-  .stage { background:var(--panel); border:1px solid var(--border); border-left:3px solid var(--accent); border-radius:10px; padding:10px 14px; min-width:140px; flex:1; }
-  .stage .label { font-weight:600; }
-  .stage .detail { color:var(--muted); font-size:12px; margin-top:2px; }
-  .arrow { align-self:center; color:var(--muted); }
-  .io { display:grid; grid-template-columns:1fr 1fr; gap:12px; }
-  ul { margin:6px 0 0; padding-left:18px; }
-  table { width:100%; border-collapse:collapse; background:var(--panel); border:1px solid var(--border); border-radius:12px; overflow:hidden; }
-  th, td { text-align:left; padding:8px 12px; border-top:1px solid var(--border); font-size:13px; vertical-align:top; }
-  thead th { border-top:none; background:var(--bg); color:var(--muted); font-weight:600; }
-  .ok { color:var(--ok); } .bad { color:var(--bad); }
-  details { background:var(--panel); border:1px solid var(--border); border-radius:12px; padding:10px 14px; margin-bottom:8px; }
-  summary { cursor:pointer; font-weight:600; }
-  pre { overflow-x:auto; font-size:12px; background:var(--bg); border-radius:8px; padding:10px; }
-  .empty { color:var(--muted); font-style:italic; }
-  #live { font-size:12px; color:var(--muted); float:right; }
-</style>
-</head>
-<body>
-<span id="live">loading\u2026</span>
-<h1 id="title"></h1>
-<p class="sub" id="desc"></p>
-
-<h2>Process</h2>
-<div id="map" class="map panel"></div>
-
-<h2>Inputs &amp; outputs</h2>
-<div class="io">
-  <div class="panel"><strong>Inputs</strong><ul id="inputs"></ul></div>
-  <div class="panel"><strong>Outputs</strong><ul id="outputs"></ul></div>
-</div>
-
-<h2>Rounds</h2>
-<div id="rounds"></div>
-
-<h2>Files</h2>
-<div id="files"></div>
-
-<script type="application/json" id="loop-seed">${seed}</script>
-<script>
-(function () {
-  "use strict";
-  var seed = JSON.parse(document.getElementById("loop-seed").textContent);
-  document.getElementById("title").textContent = (seed.processSpec && seed.processSpec.title) || seed.slug;
-  document.getElementById("desc").textContent = seed.descriptionShort || "";
-  document.title = seed.slug + " \u2014 loop dashboard";
-
-  function el(tag, cls, text) {
-    var e = document.createElement(tag);
-    if (cls) e.className = cls;
-    if (text !== undefined) e.textContent = text;
-    return e;
+function defaultDocKey(manifest) {
+  if (manifest === void 0) return void 0;
+  return manifest?.docs[0]?.key ?? null;
+}
+async function taskMemoryGetVerb(rawSlug, opts) {
+  const slug = rawSlug.trim();
+  const parsedLimitEarly = opts.limit === void 0 ? void 0 : Number(opts.limit);
+  if (opts.limit !== void 0 && (opts.limit.trim() === "" || !Number.isFinite(parsedLimitEarly))) {
+    throw new Error(`--limit must be a number, got ${JSON.stringify(opts.limit)}`);
   }
-
-  // \u2500\u2500 Process map + IO from the embedded spec (static \u2014 rendered once). \u2500\u2500
-  var map = document.getElementById("map");
-  var spec = seed.processSpec;
-  if (spec && spec.stages && spec.stages.length) {
-    spec.stages.forEach(function (s, i) {
-      if (i > 0) map.appendChild(el("div", "arrow", "\\u2192"));
-      var box = el("div", "stage");
-      box.appendChild(el("div", "label", s.label));
-      if (s.detail) box.appendChild(el("div", "detail", s.detail));
-      map.appendChild(box);
-    });
-  } else {
-    map.appendChild(el("span", "empty", "No process spec on this loop \\u2014 live files and rounds below."));
+  const scope = parseScopeFlag(opts.scope, true);
+  const kind = parseKindFlag(opts.kind);
+  const key = parseKeyFlag(opts.key);
+  let archived;
+  if (opts.archived !== void 0) {
+    const a = opts.archived.trim().toLowerCase();
+    if (a === "true") archived = true;
+    else if (a === "false") archived = false;
+    else if (a === "all") archived = "all";
+    else throw new Error(`--archived must be false, true or all, got ${JSON.stringify(opts.archived)}`);
   }
-  function fillList(id, items) {
-    var ul = document.getElementById(id);
-    ul.textContent = "";
-    if (!items || !items.length) { ul.appendChild(el("li", "empty", "\\u2014")); return; }
-    items.forEach(function (x) { ul.appendChild(el("li", null, x)); });
+  const fieldsRaw = opts.fields?.trim();
+  if (fieldsRaw !== void 0 && fieldsRaw !== "full" && fieldsRaw !== "keys") {
+    throw new Error(`--fields must be full or keys, got ${JSON.stringify(opts.fields)}`);
   }
-  fillList("inputs", spec && spec.inputs);
-  fillList("outputs", spec && spec.outputs);
-
-  // \u2500\u2500 Live data: rounds + files, refreshed from GET /data. \u2500\u2500
-  function parseJsonl(text) {
-    var rows = [];
-    (text || "").split("\\n").forEach(function (line) {
-      line = line.trim();
-      if (!line) return;
-      try { rows.push(JSON.parse(line)); } catch (e) { /* skip malformed line */ }
-    });
-    return rows;
+  const fields = fieldsRaw === "keys" ? "keys" : void 0;
+  const { sdk, apiKey } = await getCliSdk();
+  const json = opts.json === true;
+  const parsedLimit = parsedLimitEarly;
+  const recordScope = scope === "shared" || scope === "member" ? scope : void 0;
+  const keyPrefix = opts.keyPrefix?.trim() || void 0;
+  const since = opts.since?.trim() || void 0;
+  const cursor = opts.cursor?.trim() || void 0;
+  const count = opts.count === true;
+  const hasRecordFilter = kind !== void 0 || keyPrefix !== void 0 || archived !== void 0 || since !== void 0 || fields !== void 0 || count || parsedLimit !== void 0 || cursor !== void 0;
+  const query = {
+    ...kind ? { kind } : {},
+    ...archived !== void 0 ? { archived } : {},
+    // ⛔ THE KEY GOES IN WHENEVER A LISTING RUNS, not only under `--records`.
+    // It used to be gated on `opts.records === true`, which was correct while
+    // `--records` was the ONLY way to reach a listing. Once a filter also routes
+    // here, `--key X --kind pbi` fell between the two: the open-by-key branch was
+    // skipped (a filter was present) and the key never entered the query — so it
+    // silently listed pbi records and printed a DIFFERENT one. That is the same
+    // class of confidently-wrong answer this card exists to remove, reintroduced
+    // on another axis.
+    ...key !== void 0 && (opts.records === true || hasRecordFilter) ? { key } : {},
+    ...keyPrefix ? { keyPrefix } : {},
+    ...since ? { since } : {},
+    ...fields ? { fields } : {},
+    ...count ? { count: true } : {},
+    ...parsedLimit !== void 0 ? { limit: parsedLimit } : {},
+    ...cursor ? { cursor } : {},
+    ...recordScope ? { scope: recordScope } : {}
+  };
+  if (opts.usage === true) {
+    const res = await sdk.loops.memory.usage(apiKey, slug);
+    if (res.status !== "ok") fail(res, "read memory usage");
+    emit(json, { taskSlug: slug, usage: res.usage }, () => JSON.stringify(res.usage, null, 2));
+    return;
   }
-
-  function renderRounds(fires, rounds) {
-    var host = document.getElementById("rounds");
-    host.textContent = "";
-    if (!fires.length && !rounds.length) {
-      var p = el("div", "panel"); p.appendChild(el("span", "empty", "No rounds yet \\u2014 this fills in as the loop runs."));
-      host.appendChild(p);
+  const explicitDoc = opts.doc?.trim();
+  if (explicitDoc) {
+    const manifest2 = scope === void 0 || scope === "all" ? await readTaskManifest(sdk, apiKey, slug) : void 0;
+    const declared = declaredDocScope(manifest2 ?? null, explicitDoc);
+    const read = await readDocResolved(sdk, apiKey, slug, explicitDoc, scope, declared);
+    if (read.status === "ok") {
+      emit(json, { taskSlug: slug, doc: read.doc, scope: read.scope }, () => read.doc.content);
       return;
     }
-    var table = document.createElement("table");
-    var thead = document.createElement("thead");
-    var hr = document.createElement("tr");
-    ["when", "duration", "turns", "tokens", "exit", "round detail (rounds.jsonl)"].forEach(function (h) {
-      hr.appendChild(el("th", null, h));
-    });
-    thead.appendChild(hr); table.appendChild(thead);
-    var tbody = document.createElement("tbody");
-    var n = Math.max(fires.length, rounds.length);
-    for (var i = n - 1; i >= 0; i--) { // newest first
-      var f = fires[i] || {};
-      var r = rounds[i];
-      var tr = document.createElement("tr");
-      tr.appendChild(el("td", null, f.ts || (r && r.ts) || "\\u2014"));
-      tr.appendChild(el("td", null, f.duration_s != null ? f.duration_s + "s" : "\\u2014"));
-      tr.appendChild(el("td", null, f.turns != null ? String(f.turns) : "\\u2014"));
-      tr.appendChild(el("td", null, f.tokens_total != null ? Number(f.tokens_total).toLocaleString() : "\\u2014"));
-      tr.appendChild(el("td", f.exit === 0 ? "ok" : f.exit != null ? "bad" : null, f.exit != null ? String(f.exit) : "\\u2014"));
-      var detail = el("td");
-      if (f.launch_failed) { detail.textContent = "launch failed \\u2014 " + (f.reason || "unknown reason"); }
-      else if (r) { var pre = document.createElement("pre"); pre.textContent = JSON.stringify(r, null, 1); detail.appendChild(pre); }
-      else detail.textContent = "\\u2014";
-      tr.appendChild(detail);
-      tbody.appendChild(tr);
+    if (read.status === "missing") {
+      emit(json, { taskSlug: slug, doc: null, firstRun: true }, () => `No "${explicitDoc}" document yet for ${slug} \u2014 nothing has written one.`);
+      return;
     }
-    table.appendChild(tbody);
-    host.appendChild(table);
-  }
-
-  function renderFiles(files) {
-    var host = document.getElementById("files");
-    host.textContent = "";
-    var names = Object.keys(files || {}).filter(function (n) { return n !== "rounds.jsonl"; });
-    if (!names.length) { var p = el("div", "panel"); p.appendChild(el("span", "empty", "No files surfaced by the manifest.")); host.appendChild(p); return; }
-    names.forEach(function (name) {
-      var d = document.createElement("details");
-      d.appendChild(el("summary", null, name));
-      var pre = document.createElement("pre");
-      pre.textContent = files[name];
-      d.appendChild(pre);
-      host.appendChild(d);
-    });
+    fail(read.res, `read the "${explicitDoc}" document`);
   }
-
-  function refresh() {
-    fetch("/data").then(function (res) { return res.json(); }).then(function (data) {
-      var fires = parseJsonl(data.state && data.state["fires.jsonl"]);
-      var rounds = parseJsonl(data.files && data.files["rounds.jsonl"]);
-      renderRounds(fires, rounds);
-      renderFiles(data.files);
-      document.getElementById("live").textContent = "updated " + new Date().toLocaleTimeString();
-    }).catch(function () {
-      document.getElementById("live").textContent = "server stopped";
-    });
+  if (key !== void 0 && opts.records !== true && !hasRecordFilter) {
+    const history = opts.history === true;
+    const res = await sdk.loops.memory.getRecordByKey(apiKey, slug, key, history ? { history: true } : void 0);
+    if (res.status !== "ok") fail(res, `open the item "${key}"`);
+    const versions = history ? res.versions ?? [] : void 0;
+    emit(json, { taskSlug: slug, key, record: res.record, ...versions ? { versions } : {} }, () => versions ? [`\u2500\u2500 ${key}: ${versions.length} version(s), oldest first`, ...versions.map(renderRecord)].join("\n\n") : renderRecord(res.record));
+    return;
   }
-  refresh();
-  setInterval(refresh, 5000);
-})();
-</script>
-</body>
-</html>
-`;
-}
-function injectDefaultDashboard(loop2) {
-  const hasHtml = typeof loop2.dashboardHtml === "string" && loop2.dashboardHtml.trim() !== "";
-  if (hasHtml) return;
-  if (loop2.dashboardManifest && typeof loop2.dashboardManifest === "object") {
-    try {
-      loop2.dashboardManifest = JSON.stringify(loop2.dashboardManifest);
-    } catch {
+  if (opts.records === true || hasRecordFilter) {
+    const res = await sdk.loops.memory.listRecords(apiKey, slug, query);
+    if (res.status !== "ok") fail(res, "read the records");
+    if (count) {
+      emit(json, { taskSlug: slug, count: res.count ?? 0 }, () => String(res.count ?? 0));
+      return;
     }
-  }
-  const manifest = typeof loop2.dashboardManifest === "string" ? loop2.dashboardManifest : void 0;
-  loop2.dashboardHtml = renderLoopDashboardTemplate({
-    slug: typeof loop2.slug === "string" ? loop2.slug : "loop",
-    descriptionShort: typeof loop2.descriptionShort === "string" ? loop2.descriptionShort : void 0,
-    processSpec: parseProcessSpec(manifest)
-  });
-  if (!manifest || !manifest.trim()) loop2.dashboardManifest = defaultDashboardManifest();
-}
-
-// src/loops/memory-verbs.ts
-init_esm_shims();
-import { readFileSync as readFileSync10 } from "fs";
-
-// src/loops/sdk.ts
-init_esm_shims();
-init_config();
-init_resolve();
-var DEFAULT_URLS = {
-  credentialServerUrl: "http://localhost:3002",
-  buyerServerUrl: "http://localhost:3003",
-  sellerServerUrl: "http://localhost:3003",
-  bundlerPaymasterUrl: "https://rpc.zerodev.app/api/v3/802751ef-4785-4586-873d-687b4c8734a2/chain/84532"
-};
-async function getCliSdk() {
-  const config = loadConfig();
-  if (!config) throw new Error("No config found. Run `ametyst login --api-key <KEY>` first.");
-  const resolved = await resolveApiKey(config.credentialStore ?? "keychain");
-  const apiKey = resolved.apiKey;
-  if (!apiKey) {
-    throw new Error(
-      resolved.storeError ? `No API key found \u2014 the credential store is unavailable (${resolved.storeError}). Set ${API_KEY_ENV_VAR} or run \`ametyst login --api-key <KEY>\`.` : `No API key found. Run \`ametyst login --api-key <KEY>\` first, or set ${API_KEY_ENV_VAR}.`
-    );
-  }
-  const { AmetystSDK: AmetystSDK2 } = await Promise.resolve().then(() => (init_dist(), dist_exports));
-  const sdk = new AmetystSDK2({
-    bundlerPaymasterUrl: config.bundlerPaymasterUrl || DEFAULT_URLS.bundlerPaymasterUrl,
-    credentialServerUrl: config.credentialServerUrl || DEFAULT_URLS.credentialServerUrl,
-    buyerServerUrl: config.buyerServerUrl || DEFAULT_URLS.buyerServerUrl,
-    sellerServerUrl: config.sellerServerUrl || DEFAULT_URLS.sellerServerUrl
-  });
-  return { sdk, apiKey };
-}
-
-// src/loops/memory-verbs.ts
-function emit(json, payload, human) {
-  if (json) {
-    console.log(JSON.stringify(payload, null, 2));
-    return;
-  }
-  console.log(human());
-}
-function fail(res, what) {
-  const code = res.code ? ` (${res.code})` : "";
-  throw new Error(`could not ${what}${code}: ${res.error ?? "unknown error"}`);
-}
-function isDocMissing404(res) {
-  if (res.status === "ok" || res.code !== 404) return false;
-  const raw = res.error ?? "";
-  let message = raw;
-  const bodyStart = raw.indexOf("{");
-  if (bodyStart !== -1) {
-    try {
-      const body = JSON.parse(raw.slice(bodyStart));
-      if (body.code === "loop_memory_doc_not_found") return true;
-      if (typeof body.message === "string") message = body.message;
-    } catch {
-    }
-  }
-  return /\bNo memory doc\b/.test(message);
-}
-function isNotASeat404(res) {
-  return res.status !== "ok" && res.code === 404 && /not a seat/i.test(res.error ?? "");
-}
-function parseScopeFlag(raw, allowAll) {
-  if (raw === void 0) return void 0;
-  const s = raw.trim();
-  if (s === "shared" || s === "member") return s;
-  if (allowAll && s === "all") return "all";
-  throw new Error(
-    `--scope must be ${allowAll ? "shared, member or all" : "shared or member"}, got ${JSON.stringify(raw)}`
-  );
-}
-function parseKindFlag(raw) {
-  const kind = raw?.trim() || void 0;
-  if (kind !== void 0 && !isRecordKindToken(kind)) {
-    throw new Error(
-      `--kind must be a token matching [a-z0-9-]{1,64} \u2014 a reserved kind (${RESERVED_RECORD_KINDS.join(", ")}) or a free kind the task declares, got ${JSON.stringify(raw)}`
-    );
-  }
-  return kind;
-}
-function parseKeyFlag(raw) {
-  const key = raw?.trim() || void 0;
-  if (key !== void 0 && !isRecordKey(key)) {
-    throw new Error(`--key must match [A-Za-z0-9._:-]{1,200} (no whitespace, no "/"), got ${JSON.stringify(raw)}`);
-  }
-  return key;
-}
-async function readDocResolved(sdk, apiKey, slug, key, scope, declared) {
-  if (scope === "shared" || scope === "member") {
-    const res = await sdk.loops.memory.getDoc(apiKey, slug, key, { scope });
-    if (res.status === "ok") return { status: "ok", doc: res.doc, scope };
-    return isDocMissing404(res) ? { status: "missing" } : { status: "nok", res };
-  }
-  if (declared) {
-    const res = await sdk.loops.memory.getDoc(apiKey, slug, key);
-    if (res.status === "ok") return { status: "ok", doc: res.doc, scope: declared };
-    return isDocMissing404(res) ? { status: "missing" } : { status: "nok", res };
-  }
-  const own = await sdk.loops.memory.getDoc(apiKey, slug, key, { scope: "member" });
-  if (own.status === "ok") return { status: "ok", doc: own.doc, scope: "member" };
-  if (!isDocMissing404(own) && !isNotASeat404(own)) return { status: "nok", res: own };
-  const shared = await sdk.loops.memory.getDoc(apiKey, slug, key, { scope: "shared" });
-  if (shared.status === "ok") return { status: "ok", doc: shared.doc, scope: "shared" };
-  return isDocMissing404(shared) ? { status: "missing" } : { status: "nok", res: shared };
-}
-function renderRecord(r) {
-  const keyPart = r.key ? ` ${r.key}` : "";
-  const archivedPart = r.archived ? ` (archived${r.archivedAt ? ` ${r.archivedAt}` : ""})` : "";
-  if ("content" in r) return `\u2500\u2500 ${r.createdAt} [${r.kind}]${keyPart}${archivedPart}
-${r.content}`;
-  return `\u2500\u2500 ${r.createdAt} [${r.kind}]${keyPart}${archivedPart}  ${r.summary}`;
-}
-function defaultDocKey(manifest) {
-  if (manifest === void 0) return void 0;
-  return manifest?.docs[0]?.key ?? null;
-}
-async function taskMemoryGetVerb(rawSlug, opts) {
-  const slug = rawSlug.trim();
-  const parsedLimitEarly = opts.limit === void 0 ? void 0 : Number(opts.limit);
-  if (opts.limit !== void 0 && (opts.limit.trim() === "" || !Number.isFinite(parsedLimitEarly))) {
-    throw new Error(`--limit must be a number, got ${JSON.stringify(opts.limit)}`);
-  }
-  const scope = parseScopeFlag(opts.scope, true);
-  const kind = parseKindFlag(opts.kind);
-  const key = parseKeyFlag(opts.key);
-  let archived;
-  if (opts.archived !== void 0) {
-    const a = opts.archived.trim().toLowerCase();
-    if (a === "true") archived = true;
-    else if (a === "false") archived = false;
-    else if (a === "all") archived = "all";
-    else throw new Error(`--archived must be false, true or all, got ${JSON.stringify(opts.archived)}`);
-  }
-  const fieldsRaw = opts.fields?.trim();
-  if (fieldsRaw !== void 0 && fieldsRaw !== "full" && fieldsRaw !== "keys") {
-    throw new Error(`--fields must be full or keys, got ${JSON.stringify(opts.fields)}`);
-  }
-  const fields = fieldsRaw === "keys" ? "keys" : void 0;
-  const { sdk, apiKey } = await getCliSdk();
-  const json = opts.json === true;
-  const parsedLimit = parsedLimitEarly;
-  const recordScope = scope === "shared" || scope === "member" ? scope : void 0;
-  const keyPrefix = opts.keyPrefix?.trim() || void 0;
-  const since = opts.since?.trim() || void 0;
-  const cursor = opts.cursor?.trim() || void 0;
-  const count = opts.count === true;
-  const hasRecordFilter = kind !== void 0 || keyPrefix !== void 0 || archived !== void 0 || since !== void 0 || fields !== void 0 || count || parsedLimit !== void 0 || cursor !== void 0;
-  const query = {
-    ...kind ? { kind } : {},
-    ...archived !== void 0 ? { archived } : {},
-    // ⛔ THE KEY GOES IN WHENEVER A LISTING RUNS, not only under `--records`.
-    // It used to be gated on `opts.records === true`, which was correct while
-    // `--records` was the ONLY way to reach a listing. Once a filter also routes
-    // here, `--key X --kind pbi` fell between the two: the open-by-key branch was
-    // skipped (a filter was present) and the key never entered the query — so it
-    // silently listed pbi records and printed a DIFFERENT one. That is the same
-    // class of confidently-wrong answer this card exists to remove, reintroduced
-    // on another axis.
-    ...key !== void 0 && (opts.records === true || hasRecordFilter) ? { key } : {},
-    ...keyPrefix ? { keyPrefix } : {},
-    ...since ? { since } : {},
-    ...fields ? { fields } : {},
-    ...count ? { count: true } : {},
-    ...parsedLimit !== void 0 ? { limit: parsedLimit } : {},
-    ...cursor ? { cursor } : {},
-    ...recordScope ? { scope: recordScope } : {}
-  };
-  if (opts.usage === true) {
-    const res = await sdk.loops.memory.usage(apiKey, slug);
-    if (res.status !== "ok") fail(res, "read memory usage");
-    emit(json, { taskSlug: slug, usage: res.usage }, () => JSON.stringify(res.usage, null, 2));
-    return;
-  }
-  const explicitDoc = opts.doc?.trim();
-  if (explicitDoc) {
-    const manifest2 = scope === void 0 || scope === "all" ? await readTaskManifest(sdk, apiKey, slug) : void 0;
-    const declared = declaredDocScope(manifest2 ?? null, explicitDoc);
-    const read = await readDocResolved(sdk, apiKey, slug, explicitDoc, scope, declared);
-    if (read.status === "ok") {
-      emit(json, { taskSlug: slug, doc: read.doc, scope: read.scope }, () => read.doc.content);
-      return;
-    }
-    if (read.status === "missing") {
-      emit(json, { taskSlug: slug, doc: null, firstRun: true }, () => `No "${explicitDoc}" document yet for ${slug} \u2014 nothing has written one.`);
-      return;
-    }
-    fail(read.res, `read the "${explicitDoc}" document`);
-  }
-  if (key !== void 0 && opts.records !== true && !hasRecordFilter) {
-    const history = opts.history === true;
-    const res = await sdk.loops.memory.getRecordByKey(apiKey, slug, key, history ? { history: true } : void 0);
-    if (res.status !== "ok") fail(res, `open the item "${key}"`);
-    const versions = history ? res.versions ?? [] : void 0;
-    emit(json, { taskSlug: slug, key, record: res.record, ...versions ? { versions } : {} }, () => versions ? [`\u2500\u2500 ${key}: ${versions.length} version(s), oldest first`, ...versions.map(renderRecord)].join("\n\n") : renderRecord(res.record));
-    return;
-  }
-  if (opts.records === true || hasRecordFilter) {
-    const res = await sdk.loops.memory.listRecords(apiKey, slug, query);
-    if (res.status !== "ok") fail(res, "read the records");
-    if (count) {
-      emit(json, { taskSlug: slug, count: res.count ?? 0 }, () => String(res.count ?? 0));
-      return;
-    }
-    const items2 = res.items ?? [];
-    const nextCursor = res.nextCursor ?? null;
-    emit(json, { taskSlug: slug, records: items2, nextCursor, firstRun: items2.length === 0 && !cursor }, () => items2.length === 0 ? `No records for ${slug}${kind ? ` of kind ${kind}` : ""}${archived === true ? " (archived)" : ""}.` : [
-      ...items2.map(renderRecord),
-      ...nextCursor ? [`\u2500\u2500 more: --cursor ${nextCursor}`] : []
-    ].join("\n\n"));
-    return;
+    const items2 = res.items ?? [];
+    const nextCursor = res.nextCursor ?? null;
+    emit(json, { taskSlug: slug, records: items2, nextCursor, firstRun: items2.length === 0 && !cursor }, () => items2.length === 0 ? `No records for ${slug}${kind ? ` of kind ${kind}` : ""}${archived === true ? " (archived)" : ""}.` : [
+      ...items2.map(renderRecord),
+      ...nextCursor ? [`\u2500\u2500 more: --cursor ${nextCursor}`] : []
+    ].join("\n\n"));
+    return;
   }
   const manifest = scope === void 0 || scope === "all" ? await readTaskManifest(sdk, apiKey, slug) : void 0;
   const manifestUnreadable = manifest === void 0 && (scope === void 0 || scope === "all");
@@ -118708,11 +118497,481 @@ async function taskMemoryArchiveVerb(rawSlug, opts) {
     if (res.code === 409) throw new Error(`"${key}" is already archived \u2014 its latest version is closed (409): ${res.error ?? ""}`.trim());
     fail(res, `archive "${key}"`);
   }
-  emit(
-    opts.json === true,
-    { taskSlug: slug, key, kind: res.record.kind, archivedAt: res.record.archivedAt, archiveNote: res.record.archiveNote ?? null },
-    () => `\u2705 ${slug}: "${key}" archived${note ? ` (${note})` : ""} at ${res.record.archivedAt}. History intact.`
-  );
+  emit(
+    opts.json === true,
+    { taskSlug: slug, key, kind: res.record.kind, archivedAt: res.record.archivedAt, archiveNote: res.record.archiveNote ?? null },
+    () => `\u2705 ${slug}: "${key}" archived${note ? ` (${note})` : ""} at ${res.record.archivedAt}. History intact.`
+  );
+}
+
+// src/tasks/launch.ts
+var TASK_INPUT_ENV = "AMETYST_TASK_INPUT";
+var LAUNCH_INPUT_HEADER = "LAUNCH INPUT \u2014 the user's arguments for this run; treat them exactly as if the user had typed them in chat:";
+function launchInputBlock(input) {
+  if (typeof input !== "string" || input.trim() === "") return "";
+  return `${LAUNCH_INPUT_HEADER}
+${input}
+
+`;
+}
+function readGlobalGitConfig(key) {
+  try {
+    const r = spawnSync("git", ["config", "--global", "--get", key], { encoding: "utf-8" });
+    const v = r.status === 0 ? r.stdout.trim() : "";
+    return v || void 0;
+  } catch {
+    return void 0;
+  }
+}
+function deriveGitIdentityEnv(env = process.env, readGitConfig = readGlobalGitConfig) {
+  const name = readTaskEnv("GIT_AUTHOR_NAME", env)?.trim() || readGitConfig("user.name");
+  const email = readTaskEnv("GIT_AUTHOR_EMAIL", env)?.trim() || readGitConfig("user.email");
+  const out = {};
+  if (name) {
+    out.GIT_AUTHOR_NAME = name;
+    out.GIT_COMMITTER_NAME = name;
+  }
+  if (email) {
+    out.GIT_AUTHOR_EMAIL = email;
+    out.GIT_COMMITTER_EMAIL = email;
+  }
+  return out;
+}
+function buildLaunchArgs(dir, opts = {}, slug, deps = {}) {
+  const env = deps.env ?? process.env;
+  const maxBudget = resolveMaxBudgetUsd(opts, env);
+  const docKey = defaultDocKey(opts.memoryManifest);
+  const readDocSentence = typeof docKey === "string" ? `taskMemoryGet({ taskSlug: "${slug}", docKey: "${docKey}" }) for your "${docKey}" document \u2014 the FIRST document this task's memory manifest declares, materialized for you at boot as ${filenameForKey(docKey)} \u2014 then ` : docKey === null ? `THIS TASK DECLARES NO MEMORY DOCUMENT \u2014 do not read one and do not create one; your records ARE its memory. Read ` : `no memory document is named here \u2014 this launcher could not resolve the task's manifest, so do NOT assume one exists. Read `;
+  const writeDocSentence = typeof docKey === "string" ? `, and rewrite your "${docKey}" document with taskMemoryAppend({ taskSlug: "${slug}", docKey: "${docKey}", content: "<the state the next fire needs>" }).` : docKey === null ? `. This task declares no memory document, so there is nothing to rewrite \u2014 do not invent one; the run record and your keyed items are what the next fire reads.` : `. If this task declares a memory document, rewrite it with taskMemoryAppend({ taskSlug: "${slug}", docKey: "<the key its manifest declares>", content: "..." }) \u2014 this launcher could not name it for you, so do not guess a key.`;
+  const prompt = `${launchInputBlock(opts.input)}You are running the Ametyst task${slug ? ` "${slug}"` : ""} headless and unattended.
+
+${dir} is THIS FIRE'S OWN directory. Other fires of the same task may be running right now, each with its own directory alongside yours \u2014 wherever the task's SKILL says <LOOPDIR> it means exactly ${dir}, never a sibling's directory and never their shared parent. Derive every path the SKILL asks you to create (links, run-state) from ${dir}; never from a path written literally in the SKILL prose.
+
+Read the task definition files in ${dir}:
+- SKILL.md \u2014 the driver; follow it.
+- VISION.md \u2014 the objective / done-condition.
+- CONSTRAINTS.md \u2014 hard limits; never violate them.
+- STATUS.md \u2014 your run-state; keep it updated as you progress.
+
+The QUEUE (the work items) is EXTERNAL \u2014 it is NOT one of these files. SKILL.md tells you WHERE to read the queue from and WHERE to write the results; read your work items from that source.
+${slug ? `
+YOUR DURABLE MEMORY survives this fire, and ${dir} does not \u2014 this directory is deleted when you exit, so anything you want the NEXT fire to know must go into memory, not into a file here. Reach it with the taskMemory* MCP tools, always with taskSlug "${slug}" (also exported as AMETYST_TASK_SLUG). Nothing from it was injected into this fire beyond the materialized docs:
+- FIRST, before you start work, read what you need with taskMemoryGet: ${readDocSentence}one list per record kind you need \u2014 taskMemoryGet({ taskSlug: "${slug}", records: true, kind: "<kind>" }) \u2014 which returns the latest version per key, archived=false by default. If everything is empty this is your first fire \u2014 say so in your run record.
+- BEFORE YOU EXIT, on every path including a brake: taskMemoryAppend({ taskSlug: "${slug}", kind: "run", content: "<what you did, what you learned, what the next fire should pick up>" })${writeDocSentence}
+- Items with an identity (a PBI, a test, a merchant) are keyed records of a free kind: taskMemoryAppend({ taskSlug: "${slug}", kind: "<kind>", key: "<id>", content }) writes or versions one; taskMemoryArchive({ taskSlug: "${slug}", key: "<id>", note }) closes it.
+Memory is quota-bounded per workspace \u2014 an over-limit write is REJECTED and tells you the limit, never silently truncated. If a write is refused, shorten it and write again; do not skip the run record.
+
+${TASK_MEMORY_MODEL_SECTION}
+` : ""}
+Execute the task until VISION is met or the queue is drained. For any step that costs money, use the Ametyst \`spend\` MCP tool (the on-chain policy enforces the budget) \u2014 do NOT invent another payment path.
+
+When you finish cleanly (VISION met / queue drained), write "status: done" and "queue drained" into ${dir}/STATUS.md. If you must stop early (a brake/constraint was hit or an unrecoverable error occurred), write "brake: <reason>" into ${dir}/STATUS.md and exit. Never exceed the constraints.`;
+  const args = [
+    "-p",
+    prompt,
+    "--dangerously-skip-permissions",
+    // The WRAPPER (`ametyst task run`, see runTask) owns shipping the task's learned
+    // CONSTRAINTS back to Ametyst on exit. The headless agent must NEVER rewrite its own
+    // stored task record, so deny the upsert tool even though `--dangerously-skip-permissions`
+    // otherwise grants every tool. (STATUS/QUEUE stay local run-state and are never shipped.)
+    // ⛔ THE LIST IS DERIVED, NOT TYPED, on both axes — a deny that names the wrong string is
+    // indistinguishable from no deny at all:
+    //   - TOOL: `createTask` is what this server exposes now; `createLoop`, its retired alias,
+    //     is kept because the fire connects to whichever `ametyst serve` the host's MCP config
+    //     points at, which may still be an older build offering it. Denying only the retired
+    //     name is what the retirement would otherwise leave behind — an inert deny.
+    //   - ENTRY NAME: this line used to hardcode the `ametyst-staging` prefix, but a PROD build
+    //     registers as `ametyst` (AMETYST_MCP_NAME), so the guard was silently inert in prod.
+    //     AMETYST_MCP_NAMES is the repo's own list of every entry name this CLI family writes.
+    // `--disallowedTools` is variadic and comma-or-space separated, so one arg carries them all.
+    "--disallowedTools",
+    AMETYST_MCP_NAMES.flatMap((n) => [`mcp__${n}__createTask`, `mcp__${n}__createLoop`]).join(","),
+    "--add-dir",
+    dir
+  ];
+  if (maxBudget !== void 0) {
+    args.push("--max-budget-usd", String(maxBudget));
+  }
+  if (opts.sessionId) {
+    args.push("--session-id", opts.sessionId);
+  }
+  args.push(
+    // Eager-load MCP tools: with tool search enabled, MCP tools (including Ametyst's) are
+    // deferred behind a ToolSearch step that smaller orchestrator models (e.g. Haiku) never
+    // perform — the run ends its turn without the tools (BUG-15). Eager loading is safe for
+    // all models, so this is universal rather than model-gated.
+    "--settings",
+    '{"env":{"ENABLE_TOOL_SEARCH":"false"}}'
+  );
+  return {
+    cmd: "claude",
+    args,
+    cwd: opts.cwd ?? process.cwd(),
+    env: {
+      ...deriveGitIdentityEnv(env, deps.readGitConfig ?? readGlobalGitConfig),
+      // Task memory is addressed by SLUG, and the fire context carries no task
+      // identity today — which is why the taskMemory* tools take an explicit
+      // `taskSlug`. Exporting it here is the convenience half: the prompt names
+      // the slug literally, and this lets any shell step in the task reach the
+      // same value without re-deriving it. Env only, never argv — the launch
+      // argv is pinned byte-for-byte by launch.test.ts, and widening it would
+      // be a change to the command rather than to the child's environment.
+      // Exported under BOTH spellings for this version: a task SKILL written against an
+      // older cli may still read `AMETYST_LOOP_SLUG`, and a fire must not lose its memory
+      // address because the launcher was upgraded underneath it.
+      ...slug ? { [TASK_ENV.SLUG]: slug, [LEGACY_TASK_ENV.SLUG]: slug } : {},
+      // The user's `--input` text, env only for the same reason as the slug above. Only when
+      // set: a run without arguments must not export an empty variable the SKILL could mistake
+      // for "the user said nothing" when the truth is "nobody asked".
+      ...launchInputBlock(opts.input) ? { [TASK_INPUT_ENV]: opts.input } : {}
+    }
+  };
+}
+function resolveMaxBudgetUsd(opts, env = process.env) {
+  if (opts.maxBudgetUsd !== void 0) return opts.maxBudgetUsd;
+  const raw = readTaskEnv("MAX_BUDGET_USD", env);
+  if (raw === void 0 || raw.trim() === "") return void 0;
+  const n = Number(raw);
+  return Number.isFinite(n) ? n : void 0;
+}
+
+// src/mcp-server/task-run-mode.ts
+init_esm_shims();
+var ACCEPTED_RUN_MODES = ["in-chat", "headless"];
+var FRONTMATTER_SCAN_LIMIT = 8192;
+function normalizeRunMode(raw) {
+  if (typeof raw !== "string") return void 0;
+  const v = raw.trim().toLowerCase();
+  if (v === "headless") return "headless";
+  if (v === "in-chat" || v === "inchat" || v === "in_chat") return "in-chat";
+  return void 0;
+}
+function describeProvided(raw) {
+  if (typeof raw === "string") return raw.trim();
+  try {
+    return JSON.stringify(raw) ?? String(raw);
+  } catch {
+    return String(raw);
+  }
+}
+function classifyRunModeArgument(raw) {
+  if (raw === void 0 || raw === null) return { kind: "omitted" };
+  if (typeof raw === "string" && raw.trim() === "") return { kind: "omitted" };
+  const mode2 = normalizeRunMode(raw);
+  if (mode2) return { kind: "valid", mode: mode2 };
+  return { kind: "invalid", provided: describeProvided(raw) };
+}
+function unquoteScalar(raw) {
+  let v = raw.trim();
+  const comment = v.match(/(?:^|\s)#.*$/);
+  if (comment) v = v.slice(0, comment.index === 0 ? 0 : comment.index).trim();
+  if (v.length >= 2 && (v.startsWith('"') && v.endsWith('"') || v.startsWith("'") && v.endsWith("'"))) {
+    v = v.slice(1, -1).trim();
+  }
+  return v;
+}
+function parseDefaultRunMode(body) {
+  if (typeof body !== "string" || !body) return void 0;
+  const head = body.replace(/^\uFEFF/, "").slice(0, FRONTMATTER_SCAN_LIMIT);
+  const opener = head.match(/^---[ \t]*\r?\n/);
+  if (!opener) return void 0;
+  const rest = head.slice(opener[0].length);
+  const closer = rest.search(/^(?:---|\.\.\.)[ \t]*(?:\r?\n|$)/m);
+  if (closer < 0) return void 0;
+  const block = rest.slice(0, closer);
+  const hit = block.match(/^defaultRunMode[ \t]*:[ \t]*(.*)$/m);
+  if (!hit) return void 0;
+  return normalizeRunMode(unquoteScalar(hit[1] ?? ""));
+}
+function resolveRunMode(explicit, body) {
+  const arg = classifyRunModeArgument(explicit);
+  if (arg.kind === "invalid") {
+    return { ok: false, error: "invalid_mode", provided: arg.provided, accepted: ACCEPTED_RUN_MODES };
+  }
+  if (arg.kind === "valid") return { ok: true, mode: arg.mode, source: "explicit" };
+  const fromBody = parseDefaultRunMode(body);
+  if (fromBody) return { ok: true, mode: fromBody, source: "frontmatter" };
+  return { ok: true, mode: "in-chat", source: "default" };
+}
+
+// src/tasks/estimate.ts
+init_esm_shims();
+function estimateBlastRadius(task) {
+  const g = task.graphJson ?? {};
+  const nodes = Array.isArray(g.nodes) ? g.nodes : [];
+  const steps = nodes.length;
+  const paidSteps = nodes.filter(
+    (n) => n?.type === "spend" || n?.data?.paid === true || n?.paid === true
+  ).length;
+  const costHints = nodes.map((n) => Number(n?.data?.estCostEur ?? n?.estCostEur)).filter((x) => !Number.isNaN(x));
+  const estCostEur = costHints.length ? costHints.reduce((a, b) => a + b, 0) : null;
+  return { steps, paidSteps, estCostEur };
+}
+
+// src/tasks/ownership.ts
+init_esm_shims();
+async function resolveTaskOwnership(sdk, apiKey, entity) {
+  try {
+    const createdBy = typeof entity?.createdBy === "string" ? entity.createdBy.trim() : "";
+    if (!createdBy) return { resolved: false };
+    const res = await sdk.compoundedSkills.getSyncSelection(apiKey);
+    const name = res?.status === "ok" && typeof res.self?.name === "string" ? res.self.name.trim() : "";
+    if (!name) return { resolved: false };
+    return { resolved: true, isOwner: name === createdBy, createdBy };
+  } catch {
+    return { resolved: false };
+  }
+}
+
+// src/tasks/dashboard-template.ts
+init_esm_shims();
+var DEFAULT_DASHBOARD_FILES = [
+  "VISION.md",
+  "CONSTRAINTS.md",
+  "QUEUE.md",
+  "STATUS.md",
+  "README.md",
+  "rounds.jsonl"
+];
+function parseProcessSpec(manifest) {
+  if (typeof manifest !== "string" || !manifest.trim()) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(manifest);
+  } catch {
+    return null;
+  }
+  const raw = parsed?.processSpec;
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return null;
+  const spec = raw;
+  const stages = (Array.isArray(spec.stages) ? spec.stages : []).map((s) => {
+    if (typeof s === "string" && s.trim()) return { label: s.trim() };
+    if (s && typeof s === "object" && !Array.isArray(s)) {
+      const o = s;
+      if (typeof o.label === "string" && o.label.trim()) {
+        return {
+          label: o.label.trim(),
+          ...typeof o.id === "string" && o.id.trim() ? { id: o.id.trim() } : {},
+          ...typeof o.detail === "string" && o.detail.trim() ? { detail: o.detail.trim() } : {}
+        };
+      }
+    }
+    return null;
+  }).filter((s) => s !== null);
+  const strings = (v) => (Array.isArray(v) ? v : []).filter((x) => typeof x === "string" && x.trim() !== "");
+  const out = {
+    stages,
+    inputs: strings(spec.inputs),
+    outputs: strings(spec.outputs),
+    ...typeof spec.title === "string" && spec.title.trim() ? { title: spec.title.trim() } : {}
+  };
+  return stages.length || out.inputs.length || out.outputs.length ? out : null;
+}
+function defaultDashboardManifest() {
+  return JSON.stringify({ files: [...DEFAULT_DASHBOARD_FILES] });
+}
+function embedJson(value2) {
+  return JSON.stringify(value2).replace(/</g, "\\u003c");
+}
+function escapeHtml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function renderTaskDashboardTemplate(args) {
+  const title = escapeHtml(args.processSpec?.title ?? args.slug);
+  const seed = embedJson({
+    slug: args.slug,
+    descriptionShort: args.descriptionShort ?? "",
+    processSpec: args.processSpec ?? null
+  });
+  return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${title} \u2014 task dashboard</title>
+<style>
+  :root { --bg:#f7f7fb; --panel:#fff; --border:#e3e3ee; --muted:#6b6b80; --accent:#5b5bd6; --ok:#1a7f37; --bad:#b42318; }
+  * { box-sizing: border-box; }
+  body { margin:0; font:14px/1.5 -apple-system, "Segoe UI", Roboto, sans-serif; background:var(--bg); color:#1d1d2b; padding:24px; }
+  h1 { font-size:20px; margin:0 0 4px; }
+  h2 { font-size:14px; margin:24px 0 8px; text-transform:uppercase; letter-spacing:.05em; color:var(--muted); }
+  .sub { color:var(--muted); margin:0 0 16px; }
+  .panel { background:var(--panel); border:1px solid var(--border); border-radius:12px; padding:16px; }
+  .map { display:flex; flex-wrap:wrap; align-items:stretch; gap:8px; }
+  .stage { background:var(--panel); border:1px solid var(--border); border-left:3px solid var(--accent); border-radius:10px; padding:10px 14px; min-width:140px; flex:1; }
+  .stage .label { font-weight:600; }
+  .stage .detail { color:var(--muted); font-size:12px; margin-top:2px; }
+  .arrow { align-self:center; color:var(--muted); }
+  .io { display:grid; grid-template-columns:1fr 1fr; gap:12px; }
+  ul { margin:6px 0 0; padding-left:18px; }
+  table { width:100%; border-collapse:collapse; background:var(--panel); border:1px solid var(--border); border-radius:12px; overflow:hidden; }
+  th, td { text-align:left; padding:8px 12px; border-top:1px solid var(--border); font-size:13px; vertical-align:top; }
+  thead th { border-top:none; background:var(--bg); color:var(--muted); font-weight:600; }
+  .ok { color:var(--ok); } .bad { color:var(--bad); }
+  details { background:var(--panel); border:1px solid var(--border); border-radius:12px; padding:10px 14px; margin-bottom:8px; }
+  summary { cursor:pointer; font-weight:600; }
+  pre { overflow-x:auto; font-size:12px; background:var(--bg); border-radius:8px; padding:10px; }
+  .empty { color:var(--muted); font-style:italic; }
+  #live { font-size:12px; color:var(--muted); float:right; }
+</style>
+</head>
+<body>
+<span id="live">loading\u2026</span>
+<h1 id="title"></h1>
+<p class="sub" id="desc"></p>
+
+<h2>Process</h2>
+<div id="map" class="map panel"></div>
+
+<h2>Inputs &amp; outputs</h2>
+<div class="io">
+  <div class="panel"><strong>Inputs</strong><ul id="inputs"></ul></div>
+  <div class="panel"><strong>Outputs</strong><ul id="outputs"></ul></div>
+</div>
+
+<h2>Rounds</h2>
+<div id="rounds"></div>
+
+<h2>Files</h2>
+<div id="files"></div>
+
+<script type="application/json" id="loop-seed">${seed}</script>
+<script>
+(function () {
+  "use strict";
+  var seed = JSON.parse(document.getElementById("loop-seed").textContent);
+  document.getElementById("title").textContent = (seed.processSpec && seed.processSpec.title) || seed.slug;
+  document.getElementById("desc").textContent = seed.descriptionShort || "";
+  document.title = seed.slug + " \u2014 task dashboard";
+
+  function el(tag, cls, text) {
+    var e = document.createElement(tag);
+    if (cls) e.className = cls;
+    if (text !== undefined) e.textContent = text;
+    return e;
+  }
+
+  // \u2500\u2500 Process map + IO from the embedded spec (static \u2014 rendered once). \u2500\u2500
+  var map = document.getElementById("map");
+  var spec = seed.processSpec;
+  if (spec && spec.stages && spec.stages.length) {
+    spec.stages.forEach(function (s, i) {
+      if (i > 0) map.appendChild(el("div", "arrow", "\\u2192"));
+      var box = el("div", "stage");
+      box.appendChild(el("div", "label", s.label));
+      if (s.detail) box.appendChild(el("div", "detail", s.detail));
+      map.appendChild(box);
+    });
+  } else {
+    map.appendChild(el("span", "empty", "No process spec on this task \\u2014 live files and rounds below."));
+  }
+  function fillList(id, items) {
+    var ul = document.getElementById(id);
+    ul.textContent = "";
+    if (!items || !items.length) { ul.appendChild(el("li", "empty", "\\u2014")); return; }
+    items.forEach(function (x) { ul.appendChild(el("li", null, x)); });
+  }
+  fillList("inputs", spec && spec.inputs);
+  fillList("outputs", spec && spec.outputs);
+
+  // \u2500\u2500 Live data: rounds + files, refreshed from GET /data. \u2500\u2500
+  function parseJsonl(text) {
+    var rows = [];
+    (text || "").split("\\n").forEach(function (line) {
+      line = line.trim();
+      if (!line) return;
+      try { rows.push(JSON.parse(line)); } catch (e) { /* skip malformed line */ }
+    });
+    return rows;
+  }
+
+  function renderRounds(fires, rounds) {
+    var host = document.getElementById("rounds");
+    host.textContent = "";
+    if (!fires.length && !rounds.length) {
+      var p = el("div", "panel"); p.appendChild(el("span", "empty", "No rounds yet \\u2014 this fills in as the task runs."));
+      host.appendChild(p);
+      return;
+    }
+    var table = document.createElement("table");
+    var thead = document.createElement("thead");
+    var hr = document.createElement("tr");
+    ["when", "duration", "turns", "tokens", "exit", "round detail (rounds.jsonl)"].forEach(function (h) {
+      hr.appendChild(el("th", null, h));
+    });
+    thead.appendChild(hr); table.appendChild(thead);
+    var tbody = document.createElement("tbody");
+    var n = Math.max(fires.length, rounds.length);
+    for (var i = n - 1; i >= 0; i--) { // newest first
+      var f = fires[i] || {};
+      var r = rounds[i];
+      var tr = document.createElement("tr");
+      tr.appendChild(el("td", null, f.ts || (r && r.ts) || "\\u2014"));
+      tr.appendChild(el("td", null, f.duration_s != null ? f.duration_s + "s" : "\\u2014"));
+      tr.appendChild(el("td", null, f.turns != null ? String(f.turns) : "\\u2014"));
+      tr.appendChild(el("td", null, f.tokens_total != null ? Number(f.tokens_total).toLocaleString() : "\\u2014"));
+      tr.appendChild(el("td", f.exit === 0 ? "ok" : f.exit != null ? "bad" : null, f.exit != null ? String(f.exit) : "\\u2014"));
+      var detail = el("td");
+      if (f.launch_failed) { detail.textContent = "launch failed \\u2014 " + (f.reason || "unknown reason"); }
+      else if (r) { var pre = document.createElement("pre"); pre.textContent = JSON.stringify(r, null, 1); detail.appendChild(pre); }
+      else detail.textContent = "\\u2014";
+      tr.appendChild(detail);
+      tbody.appendChild(tr);
+    }
+    table.appendChild(tbody);
+    host.appendChild(table);
+  }
+
+  function renderFiles(files) {
+    var host = document.getElementById("files");
+    host.textContent = "";
+    var names = Object.keys(files || {}).filter(function (n) { return n !== "rounds.jsonl"; });
+    if (!names.length) { var p = el("div", "panel"); p.appendChild(el("span", "empty", "No files surfaced by the manifest.")); host.appendChild(p); return; }
+    names.forEach(function (name) {
+      var d = document.createElement("details");
+      d.appendChild(el("summary", null, name));
+      var pre = document.createElement("pre");
+      pre.textContent = files[name];
+      d.appendChild(pre);
+      host.appendChild(d);
+    });
+  }
+
+  function refresh() {
+    fetch("/data").then(function (res) { return res.json(); }).then(function (data) {
+      var fires = parseJsonl(data.state && data.state["fires.jsonl"]);
+      var rounds = parseJsonl(data.files && data.files["rounds.jsonl"]);
+      renderRounds(fires, rounds);
+      renderFiles(data.files);
+      document.getElementById("live").textContent = "updated " + new Date().toLocaleTimeString();
+    }).catch(function () {
+      document.getElementById("live").textContent = "server stopped";
+    });
+  }
+  refresh();
+  setInterval(refresh, 5000);
+})();
+</script>
+</body>
+</html>
+`;
+}
+function injectDefaultDashboard(task) {
+  const hasHtml = typeof task.dashboardHtml === "string" && task.dashboardHtml.trim() !== "";
+  if (hasHtml) return;
+  if (task.dashboardManifest && typeof task.dashboardManifest === "object") {
+    try {
+      task.dashboardManifest = JSON.stringify(task.dashboardManifest);
+    } catch {
+    }
+  }
+  const manifest = typeof task.dashboardManifest === "string" ? task.dashboardManifest : void 0;
+  task.dashboardHtml = renderTaskDashboardTemplate({
+    slug: typeof task.slug === "string" ? task.slug : "task",
+    descriptionShort: typeof task.descriptionShort === "string" ? task.descriptionShort : void 0,
+    processSpec: parseProcessSpec(manifest)
+  });
+  if (!manifest || !manifest.trim()) task.dashboardManifest = defaultDashboardManifest();
 }
 
 // src/mcp-server/memory-scope.ts
@@ -118741,51 +119000,41 @@ init_esm_shims();
 
 // src/tasks/task-run-section.ts
 init_esm_shims();
-var LOOP_IN_CHAT_EXCLUDED = "**NOT AVAILABLE for a loop** \u2014 a loop must fire as a fresh headless process under the CLI wrapper that owns the fire lock, the heartbeat, `fires.jsonl` accounting, the dashboard and the CONSTRAINTS ship-back, all of which an in-chat run bypasses.";
-function cadenceWarning(kind) {
-  return kind === "loop" ? "Never pick a default silently; a loop armed on a schedule the user did not choose keeps costing money and merging code on its own." : "Never pick a default silently; a compound armed on a schedule the user did not choose keeps costing money on its own.";
-}
-function defaultModeHighlight(kind, mode2) {
+var CADENCE_WARNING = "Never pick a default silently; a task armed on a schedule the user did not choose keeps costing money on its own.";
+function defaultModeHighlight(mode2) {
   if (!mode2) return "";
-  if (kind === "loop" && mode2 === "in-chat") {
-    return `
-The author's \`defaultRunMode: in-chat\` cannot apply to a loop (see option 1) \u2014 ask anyway, and mention that its stated default is unavailable.
-`;
-  }
   return `
 The author suggests \`${mode2}\` (\`defaultRunMode:\` in the task's frontmatter). Highlight it when you ask \u2014 it is a suggestion, never a reason to skip the question.
 `;
 }
-function taskRunSection(slug, kind, opts = {}) {
-  const inChat = kind === "loop" ? LOOP_IN_CHAT_EXCLUDED : `call the \`runTask\` MCP tool with task="${slug}" and mode="in-chat" (present the match and get confirmation first, per the getTask stop-gate convention).`;
+function taskRunSection(slug, opts = {}) {
   return `Before running it, ASK the user HOW to run it, and wait for an answer \u2014 always ask, never pick one silently:
 
-1. **one-time, in this chat, followed here** \u2014 ${inChat}
+1. **one-time, in this chat, followed here** \u2014 call the \`runTask\` MCP tool with task="${slug}" and mode="in-chat" (present the match and get confirmation first, per the getTask stop-gate convention).
 2. **one-time, headless in its own process** \u2014 \`ametyst task run ${slug}\`
-3. **scheduled, recurring** \u2014 \`ametyst task schedule ${slug} --every <dur>\` (e.g. \`--every 30m\`, \`--every 1h\`), or \`ametyst task schedule ${slug} --at HH:MM\` for a fixed daily time. ASK which cadence. ${cadenceWarning(kind)}
-${defaultModeHighlight(kind, opts.defaultRunMode)}
+3. **scheduled, recurring** \u2014 \`ametyst task schedule ${slug} --every <dur>\` (e.g. \`--every 30m\`, \`--every 1h\`), or \`ametyst task schedule ${slug} --at HH:MM\` for a fixed daily time. ASK which cadence. ${CADENCE_WARNING}
+${defaultModeHighlight(opts.defaultRunMode)}
 Stop or inspect a schedule: \`ametyst task unschedule ${slug}\` \xB7 \`ametyst task schedules\`.
 To READ it without executing: \`ametyst task show ${slug}\`.
 `;
 }
 
 // src/mcp-server/prompt-descriptors.ts
-function promptName(kind, slug) {
-  return `${kind}__${slug}`;
+function promptName(slug) {
+  return `task__${slug}`;
 }
-function buildPromptEntry(kind, summary) {
+function buildPromptEntry(summary) {
   const cat = summary.category ? ` [${summary.category}]` : "";
-  const label2 = kind === "compound" ? "Compound skill" : "Loop";
   return {
-    name: promptName(kind, summary.slug),
-    description: `${label2}: ${summary.descriptionShort ?? summary.slug}${cat}`
+    name: promptName(summary.slug),
+    description: `Task: ${summary.descriptionShort ?? summary.slug}${cat}`
   };
 }
-function buildPromptContent(kind, full) {
-  const text = `This is the ${kind} "${full.slug}".
+function buildPromptContent(full) {
+  const text = `This is the task "${full.slug}".
 
-${taskRunSection(full.slug, kind, { defaultRunMode: parseDefaultRunMode(full.markdownBody) })}
---- ${kind} body ---
+${taskRunSection(full.slug, { defaultRunMode: parseDefaultRunMode(full.markdownBody) })}
+--- task body ---
 ${full.markdownBody ?? ""}`;
   return { messages: [{ role: "user", content: { type: "text", text } }] };
 }
@@ -118813,9 +119062,9 @@ function resolveBodyFromInlineOrFile(inline, filePath) {
   return void 0;
 }
 
-// src/mcp-server/loop-upsert-summary.ts
+// src/mcp-server/task-upsert-summary.ts
 init_esm_shims();
-var LOOP_CONTENT_FIELDS = [
+var TASK_CONTENT_FIELDS = [
   "markdownBody",
   "visionMd",
   "constraintsMd",
@@ -118918,7 +119167,7 @@ var BRANCH_MATCHERS = [
 ];
 function allLinesOf(content) {
   const out = [];
-  for (const f of LOOP_CONTENT_FIELDS) {
+  for (const f of TASK_CONTENT_FIELDS) {
     const v = content[f];
     if (typeof v === "string" && v) out.push(...v.split(/\r?\n/));
   }
@@ -118927,7 +119176,7 @@ function allLinesOf(content) {
 function mergeEffective(sent, previous) {
   const base2 = previous && previous.available ? { ...previous.content } : {};
   const provenance = [];
-  const keys = [...LOOP_CONTENT_FIELDS, "descriptionShort"];
+  const keys = [...TASK_CONTENT_FIELDS, "descriptionShort"];
   const content = { ...base2 };
   for (const k of keys) {
     const sentVal = sent[k];
@@ -118990,7 +119239,7 @@ function buildReceipt(input) {
     if (prevVal === void 0) return "changed";
     return String(sentVal) === String(prevVal) ? "unchanged" : "changed";
   };
-  for (const f of LOOP_CONTENT_FIELDS) {
+  for (const f of TASK_CONTENT_FIELDS) {
     const sentVal = sent[f];
     const wasSent = typeof sentVal === "string" && sentVal.length > 0;
     if (!wasSent && mode2 === "created") continue;
@@ -119030,7 +119279,7 @@ function deriveChanges(input, receipt) {
   if (mode2 === "created") {
     return {
       title: "WHAT CHANGED",
-      lines: ["new loop \u2014 there is no previous version to compare against"]
+      lines: ["new task \u2014 there is no previous version to compare against"]
     };
   }
   if (!previous || !previous.available) {
@@ -119063,7 +119312,7 @@ function deriveChanges(input, receipt) {
 function renderSections(sections2) {
   return sections2.map((s) => [s.title, ...s.lines.map((l) => `  - ${l}`)].join("\n")).join("\n\n");
 }
-function buildLoopUpsertSummary(input) {
+function buildTaskUpsertSummary(input) {
   const { content, provenance } = mergeEffective(input.sent, input.previous);
   const sections2 = deriveNarrative(content);
   const receipt = buildReceipt(input);
@@ -119086,9 +119335,9 @@ var IDENTITY_KEYS = [
   "createdAt",
   "updatedAt"
 ];
-function projectLoopIdentity(loop2) {
-  if (!loop2 || typeof loop2 !== "object") return {};
-  const src = loop2;
+function projectTaskIdentity(task) {
+  if (!task || typeof task !== "object") return {};
+  const src = task;
   const out = {};
   for (const k of IDENTITY_KEYS) {
     const v = src[k];
@@ -119871,7 +120120,7 @@ init_paths();
 import * as nodeFs4 from "fs";
 import { execFileSync as execFileSync2 } from "child_process";
 import { homedir as homedir8 } from "os";
-import { basename as basename4, join as join14 } from "path";
+import { basename as basename5, join as join14 } from "path";
 var DELEGATED_CHILD_ENV_VAR = "AMETYST_DELEGATED";
 var SPEND_GRANT_TOKEN_ENV_VAR = "AMETYST_DELEGATE_SPEND_TOKEN";
 var SPEND_KILL_SWITCH_ENV_VAR = "AMETYST_DELEGATE_NO_SPEND";
@@ -119913,7 +120162,7 @@ function defaultProcessTable() {
 function isOurOpencodeBinary(argv0, home = homedir8()) {
   if (!argv0) return false;
   if (argv0 === opencodeBinaryPath(home)) return true;
-  return /^opencode-\d/.test(basename4(argv0));
+  return /^opencode-\d/.test(basename5(argv0));
 }
 var ancestryMemo;
 function classifyAncestry(deps = {}) {
@@ -121710,7 +121959,7 @@ function registerDelegateTools(deps) {
   return { registered: [...defs.keys()], parentDeathHook: isProductionStore, mcpServers };
 }
 
-// src/mcp-server/write-compound-body.ts
+// src/mcp-server/write-task-body.ts
 init_esm_shims();
 import { tmpdir as tmpdir2 } from "os";
 import { join as joinPath } from "path";
@@ -122195,8 +122444,6 @@ var allowlistCache = null;
 var capabilityIndexCache = null;
 var firstMcpSessionSeen = false;
 var firstSessionGuideEmitted = false;
-var compoundIndexCache = null;
-var loopIndexCache = null;
 var taskIndexCache = null;
 var cardCounts = null;
 var lastNudgeAtCall = null;
@@ -122328,8 +122575,6 @@ function dropIdentityScopedCaches() {
   transactionsCache = null;
   allowlistCache = null;
   capabilityIndexCache = null;
-  compoundIndexCache = null;
-  loopIndexCache = null;
   taskIndexCache = null;
   cardCounts = null;
   servicesDiscovered = null;
@@ -122877,7 +123122,7 @@ ${lines}${footer}${buildPersonaProposalSection(index2.persona)}`;
 }
 var INDEX_MAX_CATEGORIES = 12;
 var INDEX_MAX_RECENT = 5;
-function buildCompoundLoopIndexSection(items, noun) {
+function buildTaskIndexSection(items, noun) {
   if (!items || items.length === 0) return "";
   const counts = /* @__PURE__ */ new Map();
   for (const it of items) {
@@ -122901,9 +123146,21 @@ Your workspace has ${total} ${noun}${total === 1 ? "" : "s"} across ${catCount}
 ${catLines}${moreCats}${recentLine}
 Call with an intent or category to pull the full body of the one you want.`;
 }
-var GET_TASK_BASE_DESCRIPTION = "Search the workspace's TASKS by intent and RETURN the matching task(s) as markdown. A task is the unified card \u2014 what used to be published as either a 'compound skill' or a 'loop' is one row now, so this ONE tool searches both. Like getAllowlist, it does NOT execute anything \u2014 present the matched task(s) to the user and get their explicit confirmation before running one with `runTask`. Input: intent (natural-language description of what the user wants), optional category. On an unambiguous single match it also returns the raw `markdownBody`, spilled to a file path when large, so you can edit the task cross-session without hand-stripping the display prefix \u2014 and the task's `stateDocs` memory manifest ({docs:[{key,scope}],records:[{kind,scope}]}, scope shared|member) when it declares one. To create, publish/import or audit a task (including local skills), fetch the `task-architect` task first and follow it \u2014 `createTask` is only the final upsert it performs.";
+var GET_TASK_BASE_DESCRIPTION = "Search the workspace's TASKS by intent and RETURN the matching task(s) as markdown. A task is the workspace's reusable card \u2014 a one-shot procedure and a scheduled, memory-carrying job are the same kind of row, so this ONE tool searches all of them. Like getAllowlist, it does NOT execute anything \u2014 present the matched task(s) to the user and get their explicit confirmation before running one with `runTask`. Input: intent (natural-language description of what the user wants), optional category. On an unambiguous single match it also returns the raw `markdownBody`, spilled to a file path when large, so you can edit the task cross-session without hand-stripping the display prefix \u2014 and the task's `stateDocs` memory manifest ({docs:[{key,scope}],records:[{kind,scope}]}, scope shared|member) when it declares one. To create, publish/import or audit a task (including local skills), fetch the `task-architect` task first and follow it \u2014 `createTask` is only the final upsert it performs.";
 function buildGetTaskDescription(items) {
-  return `${GET_TASK_BASE_DESCRIPTION}${buildCompoundLoopIndexSection(items, "task")}`;
+  return `${GET_TASK_BASE_DESCRIPTION}${buildTaskIndexSection(items, "task")}`;
+}
+function pickExactSlugFromIntent(intent, index2, category) {
+  if (!index2 || index2.length === 0) return null;
+  const tokens = new Set(intent.toLowerCase().match(/[a-z0-9-]+/g) ?? []);
+  if (tokens.size === 0) return null;
+  const hits = /* @__PURE__ */ new Set();
+  for (const item of index2) {
+    if (typeof item.slug !== "string" || item.slug === "") continue;
+    if (category !== void 0 && (item.category ?? void 0) !== category) continue;
+    if (tokens.has(item.slug.toLowerCase())) hits.add(item.slug);
+  }
+  return hits.size === 1 ? [...hits][0] : null;
 }
 var refreshGetAllowlistDescriptionInFlight = false;
 var pendingRefreshTimer = null;
@@ -122982,19 +123239,14 @@ async function refreshDynamicPrompts() {
     const sdk = await getSDK();
     const nativeServer = server.nativeServer;
     if (!nativeServer?.registerPrompt) return;
-    const [compRes, loopRes] = await Promise.all([
-      sdk.compoundedSkills.list(apiKey).catch(() => ({ status: "nok" })),
-      sdk.loops.list(apiKey).catch(() => ({ status: "nok" }))
-    ]);
-    const compounds = compRes?.status === "ok" ? compRes.items.filter((c) => c.draft === false) : [];
-    const loops2 = loopRes?.status === "ok" ? loopRes.items.filter((l) => l.draft === false) : [];
-    if (compRes?.status === "ok" && loopRes?.status === "ok" && Array.isArray(compRes.items) && Array.isArray(loopRes.items)) {
-      cardCounts = { compounds: compRes.items.length, loops: loopRes.items.length };
+    const listRes = await sdk.loops.list(apiKey).catch(() => ({ status: "nok" }));
+    const tasks2 = listRes?.status === "ok" ? listRes.items.filter((l) => l.draft === false) : [];
+    if (listRes?.status === "ok" && Array.isArray(listRes.items)) {
+      cardCounts = { tasks: listRes.items.length };
     }
-    compoundIndexCache = compounds.map((c) => ({ slug: c.slug, category: c.category, updatedAt: c.updatedAt }));
-    loopIndexCache = loops2.map((l) => ({ slug: l.slug, category: l.category, updatedAt: l.updatedAt }));
     const taskBySlug = /* @__PURE__ */ new Map();
-    for (const it of [...compoundIndexCache ?? [], ...loopIndexCache ?? []]) {
+    for (const l of tasks2) {
+      const it = { slug: l.slug, category: l.category, updatedAt: l.updatedAt };
       const existing = taskBySlug.get(it.slug);
       if (!existing || String(it.updatedAt ?? "") > String(existing.updatedAt ?? "")) taskBySlug.set(it.slug, it);
     }
@@ -123009,8 +123261,7 @@ async function refreshDynamicPrompts() {
     } catch {
     }
     const desired = /* @__PURE__ */ new Map();
-    for (const c of compounds) desired.set(promptName("compound", c.slug), { kind: "compound", id: c.id, summary: c });
-    for (const l of loops2) desired.set(promptName("loop", l.slug), { kind: "loop", id: l.id, summary: l });
+    for (const l of tasks2) if (!desired.has(promptName(l.slug))) desired.set(promptName(l.slug), { id: l.id, summary: l });
     for (const [name, handle] of dynamicPromptHandles) {
       if (!desired.has(name)) {
         try {
@@ -123020,19 +123271,13 @@ async function refreshDynamicPrompts() {
         dynamicPromptHandles.delete(name);
       }
     }
-    for (const [name, { kind, id, summary }] of desired) {
+    for (const [name, { id, summary }] of desired) {
       if (dynamicPromptHandles.has(name)) continue;
-      const entry = buildPromptEntry(kind, summary);
+      const entry = buildPromptEntry(summary);
       const cb = async () => {
-        let full;
-        if (kind === "compound") {
-          const got = await sdk.compoundedSkills.get(apiKey, id);
-          full = got?.status === "ok" ? got.skill : void 0;
-        } else {
-          const got = await sdk.loops.get(apiKey, id);
-          full = got?.status === "ok" ? got.loop : void 0;
-        }
-        return buildPromptContent(kind, full ?? { slug: summary.slug, markdownBody: "" });
+        const got = await sdk.loops.get(apiKey, id);
+        const full = got?.status === "ok" ? got.loop : void 0;
+        return buildPromptContent(full ?? { slug: summary.slug, markdownBody: "" });
       };
       try {
         const handle = nativeServer.registerPrompt(name, { description: entry.description, argsSchema: void 0 }, cb);
@@ -123305,8 +123550,8 @@ function buildPolicyActiveOnchainReader(sdk) {
     }
   };
 }
-var DEFAULT_POLICY_POLL_INTERVAL_MS = 2e4;
-var DEFAULT_POLICY_POLL_WINDOW_MS = 30 * 6e4;
+var DEFAULT_POLICY_POLL_INTERVAL_MS = 5e3;
+var DEFAULT_POLICY_POLL_WINDOW_MS = 25e3;
 function parsePollEnvMs(raw, fallback2) {
   const n = Number(raw?.trim());
   return Number.isFinite(n) && n > 0 ? Math.floor(n) : fallback2;
@@ -123329,6 +123574,7 @@ var approvalWaitConfig = (() => {
     delay: (ms) => new Promise((resolve3) => setTimeout(resolve3, ms))
   };
 })();
+var pendingAccessRequest = null;
 async function tryResolvePendingApproval(probe) {
   if (currentCredentials.authorizationStatus === "approved") return true;
   if (currentCredentials.authorizationStatus !== "pending" || !currentCredentials.apiKey || !currentCredentials.eoaAddress) {
@@ -123860,9 +124106,10 @@ server.tool(
 server.tool(
   {
     name: "requestAccess",
-    description: "Request wallet authorization with a chosen policy. Sends request to admin for approval.",
+    description: "Request wallet authorization with a chosen policy. Sends the request to the admin for approval and waits BRIEFLY for it (~25 s \u2014 short by design, so this call returns before your MCP host times out). If it comes back `pending`, the request stays valid on the admin's side: call getWalletStatus once the user says it was approved, and do NOT call requestAccess again in a loop. While a request from this session is pending, calling requestAccess again RE-CHECKS that request and never submits a new one; `resubmit: true` is the only way to force a fresh request.",
     inputs: [
-      { name: "policy_id", type: "number", required: true, description: "The policy ID to request access with" }
+      { name: "policy_id", type: "number", required: true, description: "The policy ID to request access with" },
+      { name: "resubmit", type: "boolean", required: false, description: "Force a FRESH request even though this session already has one pending (mints a new session key and queues a second approval for the admin). Default false: while a request from this session is pending, requestAccess only re-checks it." }
     ]
   },
   async (params) => {
@@ -123894,6 +124141,56 @@ server.tool(
           content: [{ type: "text", text: JSON.stringify({ success: false, error: "No API key or wallet address. Run ametyst login, then start_session." }) }]
         };
       }
+      const windowSeconds = Math.round(resolveApprovalWaitConfigFromEnv().windowMs / 1e3);
+      const approvedResponse = (signerAddress, forPolicyId) => ({
+        content: [{
+          type: "text",
+          text: JSON.stringify({
+            success: true,
+            data: {
+              eoaAddress: signerAddress,
+              policyId: forPolicyId,
+              status: "approved",
+              walletAddress: currentCredentials.walletAddress,
+              message: "Authorization approved. Wallet is ready to spend."
+            },
+            guidance: {
+              say_to_user: "Your admin approved the policy \u2014 the wallet is ready. Go ahead and tell me what you'd like to do.",
+              next_action: "Proceed with the user's original request (e.g. getAllowlist or spend)."
+            }
+          })
+        }]
+      });
+      const pendingResponse = (signerAddress, forPolicyId, requestId, rechecked) => ({
+        content: [{
+          type: "text",
+          text: JSON.stringify({
+            success: true,
+            data: {
+              eoaAddress: signerAddress,
+              policyId: forPolicyId,
+              status: "pending",
+              ...requestId !== void 0 ? { requestId } : {},
+              alreadyPending: rechecked,
+              message: rechecked ? `This session already has an authorization request pending${requestId ? ` (id ${requestId})` : ""} \u2014 re-checked just now, still awaiting the admin; nothing new was submitted. It stays valid: call getWalletStatus once your admin approves. Pass resubmit: true only to force a fresh request (it mints a new session key and queues a second approval).` : `Authorization request sent and still pending after the ${windowSeconds}s auto-wait window \u2014 short by design, so this call returns before your MCP host times out. The request stays valid: call getWalletStatus once your admin approves. Do NOT call requestAccess again in a loop \u2014 a repeat call only re-checks this same request without submitting a new one; resubmit: true is the only way to force a fresh request.`
+            },
+            guidance: {
+              say_to_user: rechecked ? "Your authorization request is still pending your admin's approval (I re-checked it just now, no new request was sent). Once they approve it, just ask me again or say 'check wallet status' and I'll pick it up." : "I've requested authorization and it's pending your admin's approval. I waited briefly \u2014 the wait is short by design \u2014 and it hasn't been approved yet, but the request stays valid on their side. Once they approve it, just ask me again or say 'check wallet status' and I'll pick it up. No need to do anything else right now.",
+              next_action: "When the user says the admin approved, call getWalletStatus to sync. Do NOT call requestAccess again in a loop: a repeat call re-checks this pending request and never submits a new one (resubmit: true forces a fresh request \u2014 only when the user asks for one).",
+              stop: true
+            }
+          })
+        }]
+      });
+      if (currentCredentials.authorizationStatus === "pending" && pendingAccessRequest !== null && pendingAccessRequest.walletId === currentCredentials.pendingWalletId && params.resubmit !== true) {
+        const pending = pendingAccessRequest;
+        console.error(`\u{1F501} [requestAccess] A request from this session is already pending${pending.walletId ? ` (id ${pending.walletId})` : ""} \u2014 re-checking, not submitting`);
+        if (await tryResolvePendingApproval()) {
+          pendingAccessRequest = null;
+          return approvedResponse(pending.signerAddress, pending.policyId);
+        }
+        return pendingResponse(pending.signerAddress, pending.policyId, pending.walletId, true);
+      }
       const { virtualWalletsManagers: virtualWalletsManagers2 } = await getSDK();
       const result = await submitRotatedAccessRequest(
         virtualWalletsManagers2,
@@ -123907,49 +124204,15 @@ server.tool(
       );
       currentCredentials.authorizationStatus = "pending";
       currentCredentials.pendingWalletId = result.id ? String(result.id) : void 0;
+      pendingAccessRequest = { walletId: currentCredentials.pendingWalletId, policyId, signerAddress: result.signerAddress };
       console.error(`\u2705 [requestAccess] Authorization request sent for ${result.signerAddress}`);
       await emitPendingApprovalNotice();
       const approved = await autoWaitForApproval();
       if (approved) {
-        return {
-          content: [{
-            type: "text",
-            text: JSON.stringify({
-              success: true,
-              data: {
-                eoaAddress: result.signerAddress,
-                policyId,
-                status: "approved",
-                walletAddress: currentCredentials.walletAddress,
-                message: "Authorization approved. Wallet is ready to spend."
-              },
-              guidance: {
-                say_to_user: "Your admin approved the policy \u2014 the wallet is ready. Go ahead and tell me what you'd like to do.",
-                next_action: "Proceed with the user's original request (e.g. getAllowlist or spend)."
-              }
-            })
-          }]
-        };
+        pendingAccessRequest = null;
+        return approvedResponse(result.signerAddress, policyId);
       }
-      return {
-        content: [{
-          type: "text",
-          text: JSON.stringify({
-            success: true,
-            data: {
-              eoaAddress: result.signerAddress,
-              policyId,
-              status: "pending",
-              message: "Authorization request sent and still pending after the auto-wait window elapsed. The request is still valid \u2014 call getWalletStatus to re-check once your admin approves, or re-run requestAccess to wait again."
-            },
-            guidance: {
-              say_to_user: "I've requested authorization and waited a while, but your admin hasn't approved it yet. The request is still pending on their side \u2014 once they approve it, just ask me again (or say 'check wallet status') and I'll pick it up. No need to do anything else right now.",
-              next_action: "When the user is ready, call getWalletStatus to re-check approval, or requestAccess to wait again.",
-              stop: true
-            }
-          })
-        }]
-      };
+      return pendingResponse(result.signerAddress, policyId, currentCredentials.pendingWalletId, false);
     } catch (error) {
       console.error("\u274C Error in requestAccess:", error);
       return {
@@ -124460,25 +124723,34 @@ function suggestedCategoryFromSlug(slug) {
   const prefix = String(slug ?? "").trim().split(/[-_]/)[0]?.trim();
   return prefix ? prefix.toLowerCase() : void 0;
 }
-function categoryGateResponse(params, slug, kind) {
+function categoryGateResponse(params, slug) {
   if (typeof params.category === "string" && params.category.trim()) return void 0;
   const suggestion = suggestedCategoryFromSlug(slug);
   const suggestionText = suggestion ? ` A reasonable default (derived from the slug prefix) is "${suggestion}", but confirm it with the user.` : "";
-  const noun = kind === "compound" ? "compound" : kind === "loop" ? "loop" : "task";
-  const toolSuffix = kind === "compound" ? "Compound" : kind === "loop" ? "Loop" : "Task";
   return {
     content: [{ type: "text", text: JSON.stringify({
       success: false,
       error: "category_required",
       guidance: {
-        say_to_user: `Before I publish this ${noun}, which category should it go under?${suggestionText}`,
-        next_action: `Ask the user for the category, then call create${toolSuffix} again with an explicit \`category\`.`,
+        say_to_user: `Before I publish this task, which category should it go under?${suggestionText}`,
+        next_action: `Ask the user for the category, then call createTask again with an explicit \`category\`.`,
         stop: true
       },
       ...suggestion ? { suggestedCategory: suggestion } : {}
     }) }]
   };
 }
+function renderSingleTaskMarkdown(task) {
+  const updated = typeof task.updatedAt === "string" && task.updatedAt ? task.updatedAt.slice(0, 10) : "unknown";
+  const catSeg = task.category ? `category: ${task.category} \xB7 ` : "";
+  return `## ${task.slug}
+
+> ${catSeg}updated ${updated}
+
+${task.descriptionShort ?? ""}
+
+${task.markdownBody ?? ""}`;
+}
 async function resolveTasksCore(params, flavor) {
   try {
     const intent = typeof params.intent === "string" ? params.intent.trim() : "";
@@ -124487,7 +124759,16 @@ async function resolveTasksCore(params, flavor) {
       return { content: [{ type: "text", text: JSON.stringify({ success: false, error: "No API key configured." }) }] };
     }
     const sdk = await getSDK();
-    const res = await flavor.resolve(sdk, currentCredentials.apiKey, intent, category);
+    let exactTask = null;
+    if (flavor.fetchExact && intent !== "") {
+      if (!taskIndexCache || taskIndexCache.length === 0) await refreshDynamicPrompts();
+      const slug = pickExactSlugFromIntent(intent, taskIndexCache, category);
+      if (slug) {
+        const got = await flavor.fetchExact(sdk, currentCredentials.apiKey, slug).catch(() => null);
+        if (got?.status === "ok" && got.task && typeof got.task.slug === "string") exactTask = got.task;
+      }
+    }
+    const res = exactTask ? { status: "ok", markdown: renderSingleTaskMarkdown(exactTask), markdownBody: String(exactTask.markdownBody ?? "") } : await flavor.resolve(sdk, currentCredentials.apiKey, intent, category);
     if (res.status === "ok") {
       const payload = {
         success: true,
@@ -124501,7 +124782,7 @@ async function resolveTasksCore(params, flavor) {
           if (spilled.filePath) payload.markdownBodyFilePath = spilled.filePath;
           else if (typeof spilled.inline === "string") payload.markdownBody = spilled.inline;
           if (slug && flavor.fetchManifest) {
-            const manifest = await flavor.fetchManifest(sdk, currentCredentials.apiKey, slug);
+            const manifest = exactTask ? normalizeMemoryManifest(exactTask.stateDocs ?? null) : await flavor.fetchManifest(sdk, currentCredentials.apiKey, slug);
             if (manifest) payload.stateDocs = manifest;
             if (manifest !== void 0) payload.memory = memorySummaryLine(manifest);
           }
@@ -124534,12 +124815,16 @@ server.tool(
     resolve: (sdk, apiKey, intent, category) => sdk.tasks.resolve(apiKey, intent, category),
     // Same wording as the slash-prompt directive (src/tasks/task-run-section.ts): after the pick,
     // ASK HOW to run it — a run mode is a spend decision, so no surface picks one silently.
-    sayToUser: "Present these matching tasks to the user, briefly explain them, and ask which one to run before proceeding. Then, before running the one they pick, ASK HOW to run it and wait for an answer \u2014 always ask, never pick one silently: (1) one-time, in this chat, followed here; (2) one-time, headless in its own process via `ametyst task run <slug>`; (3) scheduled, recurring via `ametyst task schedule <slug> --every <dur>` (ask which cadence). Only then call runTask with the chosen mode (`in-chat` for 1, `headless` for 2) \u2014 for 3, hand the user the schedule command instead.",
+    sayToUser: "Present these matching tasks to the user, briefly explain them, and ask which one to run before proceeding. Then, before running the one they pick, ASK HOW to run it and wait for an answer \u2014 always ask, never pick one silently: (1) one-time, in this chat, followed here; (2) one-time, headless in its own process via `ametyst task run <slug>`; (3) scheduled, recurring via `ametyst task schedule <slug> --every <dur>` (ask which cadence). Only then call runTask with the chosen mode (`in-chat` for 1, `headless` for 2) \u2014 for 3, hand the user the schedule command instead. When the user gave arguments for the run (a company, a cap, a list), pass them to runTask as `input` \u2014 they reach the task exactly as if the user had typed them in chat.",
     resolverFailedSayToUser: "Couldn't search tasks right now.",
     surfaceRawBodies: true,
-    fetchManifest: (sdk, apiKey, slug) => readTaskManifest(sdk, apiKey, slug)
+    fetchManifest: (sdk, apiKey, slug) => readTaskManifest(sdk, apiKey, slug),
+    fetchExact: (sdk, apiKey, slug) => sdk.tasks.get(apiKey, slug)
   })
 );
+function shellQuote2(s) {
+  return `'${s.replace(/'/g, `'\\''`)}'`;
+}
 function taskMemoryBlock(slug, docKey) {
   const listRecords = `taskMemoryGet({ taskSlug: "${slug}", records: true, kind: "<kind>" })`;
   return {
@@ -124562,7 +124847,19 @@ function closeAllLiveDashboards() {
   liveDashboards.clear();
 }
 process.once("exit", closeAllLiveDashboards);
-async function startLiveDashboard(entity, dir) {
+function shutdownForHostClose() {
+  try {
+    fireAutoShareOnShutdown();
+  } catch {
+  }
+  if (liveUnlockListener) {
+    void liveUnlockListener.close("closed").catch(() => {
+    });
+    liveUnlockListener = null;
+  }
+  closeAllLiveDashboards();
+}
+async function startLiveDashboard(entity, dir, sdk, apiKey) {
   const slug = typeof entity?.slug === "string" ? entity.slug : "";
   const html = entity?.dashboardHtml;
   if (typeof html !== "string" || !html) return null;
@@ -124573,8 +124870,11 @@ async function startLiveDashboard(entity, dir) {
       previous.close();
     }
     const handle = await startDashboardServer({
-      loop: { slug, dashboardHtml: html, dashboardManifest: entity?.dashboardManifest },
-      loopDir: dir,
+      task: { slug, dashboardHtml: html, dashboardManifest: entity?.dashboardManifest },
+      runDir: dir,
+      // `/data` reads the manifest-named docs from Ametyst MEMORY first — the run writes there
+      // through taskMemoryAppend and touches the local file only at exit — then the file.
+      readDoc: memoryDocResolver(sdk, apiKey, slug, normalizeMemoryManifest(entity?.stateDocs ?? null)),
       deps: { log: (line) => console.error(line) }
     });
     if (!handle) return null;
@@ -124617,16 +124917,20 @@ async function runTaskCore(params, flavor) {
         guidance: { say_to_user: flavor.missingRefSayToUser, next_action: flavor.missingRefNextAction }
       }) }] };
     }
-    const headless = (modeSource2) => ({ content: [{ type: "text", text: JSON.stringify({
-      success: true,
-      mode: "headless",
-      ...modeSource2 ? { modeSource: modeSource2 } : {},
-      command: flavor.headlessCommand(ref),
-      guidance: {
-        say_to_user: flavor.headlessSayToUser(ref),
-        next_action: "Tell the user to run the command in a shell."
-      }
-    }) }] });
+    const input = typeof params.input === "string" && params.input.trim() !== "" ? params.input : void 0;
+    const headless = (modeSource2) => {
+      const command = flavor.headlessCommand(ref, input);
+      return { content: [{ type: "text", text: JSON.stringify({
+        success: true,
+        mode: "headless",
+        ...modeSource2 ? { modeSource: modeSource2 } : {},
+        command,
+        guidance: {
+          say_to_user: flavor.headlessSayToUser(ref, command),
+          next_action: "Tell the user to run the command in a shell."
+        }
+      }) }] };
+    };
     const invalidMode = (provided) => ({ content: [{ type: "text", text: JSON.stringify({
       success: false,
       error: "invalid_mode",
@@ -124664,13 +124968,15 @@ async function runTaskCore(params, flavor) {
         `(${entity.slug}: run folder anchored on the fallback ${runRoot.root} \u2014 ${(runRoot.rejected ?? []).map((r) => `${r.dir}: ${r.why}`).join("; ")})`
       );
     }
+    const legacyHint = legacyRunFolderHint(entity.slug, runRoot.root);
+    if (legacyHint) console.error(legacyHint);
     const materialized = flavor.materialize(entity, randomUUID4(), runRoot.root);
     const docBoot = await materializeMemoryDocs(sdk, apiKey, entity, materialized.dir);
     for (const note of docBoot.notes) console.error(`(${entity.slug} memory docs: ${note})`);
     const runFiles = { ...materialized.files, ...docBoot.files };
     const est = estimateBlastRadius(entity);
-    const shipBack = flavor.buildShipBack({ dir: materialized.dir, entity });
-    const dashboardUrl = await startLiveDashboard(entity, materialized.dir);
+    const shipBack = await flavor.buildShipBack({ dir: materialized.dir, entity, sdk, apiKey });
+    const dashboardUrl = await startLiveDashboard(entity, materialized.dir, sdk, apiKey);
     const dashboardLine = dashboardUrl ? `Live dashboard: ${dashboardUrl}` : NO_DASHBOARD_MESSAGE;
     return { content: [{ type: "text", text: JSON.stringify({
       success: true,
@@ -124690,7 +124996,9 @@ async function runTaskCore(params, flavor) {
       // the slug because the run context carries no task identity — which is exactly why
       // the taskMemory* tools take an explicit `taskSlug`.
       memory: taskMemoryBlock(entity.slug, memoryDocKey),
-      directive: flavor.buildDirective({ dir: materialized.dir, slug: entity.slug, files: runFiles, docKey: memoryDocKey, runRoot }),
+      // The user's arguments lead the directive, in the same LAUNCH INPUT block the headless
+      // launcher prepends to its prompt — so both surfaces hand them over in the same words.
+      directive: launchInputBlock(input) + flavor.buildDirective({ dir: materialized.dir, slug: entity.slug, files: runFiles, docKey: memoryDocKey, runRoot }),
       ...shipBack ? { shipBack } : {}
     }) }, { type: "text", text: dashboardLine }] };
   } catch (error) {
@@ -124701,11 +125009,12 @@ async function runTaskCore(params, flavor) {
 server.tool(
   {
     name: "runTask",
-    description: "Run a workspace TASK after the user has confirmed it (getTask already presented + stopped). A task is the unified card \u2014 what used to be a 'compound skill' or a 'loop' is one row now, and this ONE tool runs either. Two modes: `in-chat` (default) materializes the task's definition files locally and returns them plus a directive so YOU execute it inline in this session, paying for any step via the `spend` tool; `headless` returns the shell command to run it unattended in its own process. Only the NON-EMPTY definition files are materialized \u2014 a compound-shaped task (no VISION/CONSTRAINTS) gets just SKILL.md (+README.md) and NO constraints ship-back, instead of empty files that look checked but say nothing. DEFAULT RUN MODE: when you OMIT `mode` (or pass it empty), the task body's YAML frontmatter is consulted for a `defaultRunMode: headless|in-chat` key and that is used; an explicit `mode` wins over it. The ONLY accepted values are `in-chat` and `headless` \u2014 anything else (a typo like `in-chatt`) is REJECTED with `invalid_mode` and nothing runs: a value you passed is never quietly ignored, never coerced, and never falls back to the frontmatter, because that would answer an explicit `in-chat` with an unattended headless run. The response reports `modeSource` (explicit / frontmatter / default) so you can see which one decided.",
+    description: "Run a workspace TASK after the user has confirmed it (getTask already presented + stopped). A task is the workspace's reusable card \u2014 a one-shot procedure and a scheduled, memory-carrying job are the same kind of row, and this ONE tool runs either. Two modes: `in-chat` (default) materializes the task's definition files locally and returns them plus a directive so YOU execute it inline in this session, paying for any step via the `spend` tool; `headless` returns the shell command to run it unattended in its own process. Only the NON-EMPTY definition files are materialized \u2014 a task with no VISION/CONSTRAINTS gets just SKILL.md (+README.md) and NO constraints ship-back, instead of empty files that look checked but say nothing. DEFAULT RUN MODE: when you OMIT `mode` (or pass it empty), the task body's YAML frontmatter is consulted for a `defaultRunMode: headless|in-chat` key and that is used; an explicit `mode` wins over it. The ONLY accepted values are `in-chat` and `headless` \u2014 anything else (a typo like `in-chatt`) is REJECTED with `invalid_mode` and nothing runs: a value you passed is never quietly ignored, never coerced, and never falls back to the frontmatter, because that would answer an explicit `in-chat` with an unattended headless run. The response reports `modeSource` (explicit / frontmatter / default) so you can see which one decided.",
     inputs: [
       { name: "task", type: "string", required: true, description: "Slug or id of the task to run (as returned by getTask)." },
       { name: "mode", type: "string", required: false, description: 'Exactly "in-chat" (you run it inline now) or "headless" (run unattended via `ametyst task run`) \u2014 any other value is rejected with `invalid_mode` rather than coerced or ignored. Omit it (or pass empty) to use the task body\'s `defaultRunMode` frontmatter, falling back to "in-chat". An explicit value wins over the frontmatter.' },
-      { name: "dir", type: "string", required: false, description: "Directory to materialize and run in; defaults to the current project folder, falling back to a writable per-user location when there is none. The response reports the chosen root as `runRoot` and why as `runRootReason` (explicit | cwd | fallback)." }
+      { name: "dir", type: "string", required: false, description: "Directory to materialize and run in; defaults to the current project folder, falling back to a writable per-user location when there is none. The response reports the chosen root as `runRoot` and why as `runRootReason` (explicit | cwd | fallback)." },
+      { name: "input", type: "string", required: false, description: 'The user\'s arguments for THIS run, exactly as they would type them in chat \u2014 a company, a cap, a list (e.g. "run it on skyfire.com, cap $5"). A parameterised task run without them silently runs in its no-argument mode. Headless: the returned command carries them as `--input`. In-chat: the directive opens with a LAUNCH INPUT block holding them. Omit when the user gave no arguments.' }
     ]
   },
   async (params) => runTaskCore(params, {
@@ -124717,8 +125026,8 @@ server.tool(
     notFoundError: "task_not_found",
     fetch: (sdk, apiKey, ref) => sdk.tasks.get(apiKey, ref),
     pick: (res) => res.task,
-    headlessCommand: (ref) => `ametyst task run ${ref}`,
-    headlessSayToUser: (ref) => `Run \`ametyst task run ${ref}\` in a terminal \u2014 it materializes the task, runs it unattended, and ships back improvements on a clean finish. (\`task run\` is the unattended runner for every task row, whatever the task was originally authored as.) Paid steps go through your on-chain policy.`,
+    headlessCommand: (ref, input) => `ametyst task run ${ref}${input === void 0 ? "" : ` --input ${shellQuote2(input)}`}`,
+    headlessSayToUser: (_ref, command) => `Run \`${command}\` in a terminal \u2014 it materializes the task, runs it unattended, and ships back improvements on a clean finish. (\`task run\` is the unattended runner for every task row, whatever the task was originally authored as.) Paid steps go through your on-chain policy. If you add \`--max-budget-usd <x>\`, that caps the MODEL's token spend for the headless run (it is forwarded to \`claude -p\`); merchant payments are bounded by your on-chain policy, not by that flag.`,
     honorFrontmatterDefault: true,
     materialize: (task, runId, runRoot) => materializeTask(task, runId, runRoot),
     buildDirective: ({ dir, slug, files, docKey, runRoot }) => {
@@ -124726,7 +125035,7 @@ server.tool(
       const whereNote = runRoot.reason === "fallback" ? `NOTE: this run's folder lives under the per-user fallback ${runRoot.root}, NOT under the current project, because the current folder was not writable (${(runRoot.rejected ?? []).map((r) => `${r.dir}: ${r.why}`).join("; ")}). Read the files from ${dir} exactly as given \u2014 do not go looking for them in the project. ` : "";
       const readDoc = typeof docKey === "string" ? `taskMemoryGet({ taskSlug: "${slug}", docKey: "${docKey}" }) for the "${docKey}" document (the first one this task declares), then ` : `this task declares NO memory document \u2014 do not read or create one; read `;
       const writeDoc = typeof docKey === "string" ? `, and rewrite the "${docKey}" document with taskMemoryAppend({ taskSlug: "${slug}", docKey: "${docKey}", content: "..." })` : ` \u2014 and NO document upsert, because this task declares none`;
-      return `${whereNote}Read the task files in ${dir} \u2014 the ONLY files materialized are: ${present.join(", ")} (plus STATUS.md, this run's own state). SKILL.md drives${files.vision ? "; VISION.md = done-condition" : ""}${files.constraints ? "; CONSTRAINTS.md = hard limits" : ""}. Any definition file NOT listed was empty on the task and was deliberately not written \u2014 do not go looking for it, and do not assume limits you cannot read. If the task has a QUEUE of work items it is EXTERNAL \u2014 NOT one of these files; SKILL.md tells you WHERE to read the queue from and WHERE to write the results. Execute the task here, in this session, until it is done (or, if it is a looping task, until VISION is met / the queue is drained). Pay for any step ONLY via the spend tool (the on-chain policy is the budget). Keep ${dir}/STATUS.md updated. CLEAN UP AFTER YOURSELF: on a CLEAN finish (done / queue drained, no brake), DELETE the ${dir} folder \u2014 it is this run's scratch space, not a record, and every run gets its own, so leaving them behind piles up orphans. On a dirty stop, leave ${dir} in place so the run can be resumed.
+      return `${whereNote}Read the task files in ${dir} \u2014 the ONLY files materialized are: ${present.join(", ")} (plus STATUS.md, this run's own state). SKILL.md drives${files.vision ? "; VISION.md = done-condition" : ""}${files.constraints ? "; CONSTRAINTS.md = hard limits" : ""}. Any definition file NOT listed was empty on the task and was deliberately not written \u2014 do not go looking for it, and do not assume limits you cannot read. If the task has a QUEUE of work items it is EXTERNAL \u2014 NOT one of these files; SKILL.md tells you WHERE to read the queue from and WHERE to write the results. Execute the task here, in this session, until it is done (or, if it carries a VISION or a queue, until VISION is met / the queue is drained). Pay for any step ONLY via the spend tool (the on-chain policy is the budget). Keep ${dir}/STATUS.md updated. CLEAN UP AFTER YOURSELF: on a CLEAN finish (done / queue drained, no brake), DELETE the ${dir} folder \u2014 it is this run's scratch space, not a record, and every run gets its own, so leaving them behind piles up orphans. On a dirty stop, leave ${dir} in place so the run can be resumed.
 
 Your durable memory is available via the taskMemory* tools with taskSlug "${slug}" \u2014 and it, not ${dir}, is what survives this run. Nothing from it was injected into this run: READ WHAT YOU NEED FIRST with taskMemoryGet \u2014 ${readDoc}one list per record kind you need, taskMemoryGet({ taskSlug: "${slug}", records: true, kind: "<kind>" }) (latest version per key, archived=false by default); empty means this is the first run. WRITE A RUN RECORD BEFORE EXITING, on every path including a brake: taskMemoryAppend({ taskSlug: "${slug}", kind: "run", content: "<what you did, what you learned, what the next run should pick up>" })${writeDoc}.
 
@@ -124737,7 +125046,22 @@ ${TASK_MEMORY_MODEL_SECTION}`;
     // The `dir` cleanup does NOT live here: it is owed by EVERY in-chat run, and a task
     // with no constraints gets no ship-back at all — so it is stated once, in the
     // directive. This sentence only orders the two (ship back, then clean up).
-    buildShipBack: ({ entity }) => typeof entity?.constraintsMd === "string" && entity.constraintsMd.length > 0 ? `On a CLEAN finish (done / VISION met / queue drained, no brake), call createTask with id="${entity.id}" and the updated constraintsMd to ship improvements back \u2014 patch ONLY constraintsMd (F11: never the queue). Do that BEFORE the directive's clean-up step.` : void 0
+    //
+    // ⛔ ONLY THE OWNER CAN SHIP BACK. buyer-api lets the row's creator or the workspace admin
+    // modify a task; a member running an admin-owned task was told to `createTask` anyway,
+    // tripped the category gate first and then got a 403. When ownership resolves and the
+    // caller is not the owner, the directive says where the learnings go instead. When the
+    // caller IS the owner, the call names the task's existing `category` so a MODIFY does not
+    // trip `category_required`. Unresolvable → today's directive.
+    buildShipBack: async ({ entity, sdk, apiKey }) => {
+      if (!(typeof entity?.constraintsMd === "string" && entity.constraintsMd.length > 0)) return void 0;
+      const owner = await resolveTaskOwnership(sdk, apiKey, entity);
+      if (owner.resolved && !owner.isOwner) {
+        return `SHIP-BACK: none. This task is owned by ${owner.createdBy}; do NOT patch its CONSTRAINTS (you would get 403). Your learnings belong in your run diary record, and in the task's member-scoped "learnings" document when its manifest declares one (taskMemoryAppend docKey "learnings"). To propose a change to the shared CONSTRAINTS, tell the user to open a card proposal from the web app.`;
+      }
+      const category = typeof entity?.category === "string" && entity.category.trim() ? `, category="${entity.category}"` : "";
+      return `On a CLEAN finish (done / VISION met / queue drained, no brake), call createTask with id="${entity.id}"${category} and the updated constraintsMd to ship improvements back \u2014 patch ONLY constraintsMd (F11: never the queue). Do that BEFORE the directive's clean-up step.`;
+    }
   })
 );
 function taskMemoryContext(params) {
@@ -124757,7 +125081,7 @@ function taskMemoryContext(params) {
         error: "taskSlug_required",
         guidance: {
           say_to_user: "I need to know which task's memory to use.",
-          next_action: "Pass taskSlug explicitly \u2014 it is the slug of the task you are running (also in AMETYST_LOOP_SLUG)."
+          next_action: "Pass taskSlug explicitly \u2014 it is the slug of the task you are running (also in AMETYST_TASK_SLUG)."
         }
       }) }] }
     };
@@ -124854,7 +125178,7 @@ server.tool(
     name: "taskMemoryAppend",
     description: "Write to a task's durable memory \u2014 the state that survives the run (the task's materialized directory does not outlive a clean exit). See the TASK MEMORY MODEL in your instructions for what docs and records are. Pass `content` WITH `docKey` to upsert a state document in place; pass `content` with `kind` to append a record: a RESERVED diary kind (run | decision | error | import) takes NO `key`; a FREE item kind (declared in the task's manifest) REQUIRES `key`, and every append with the same key is a new VERSION of that item (`archived: true` writes a closed version directly). The kind/key/size rules are checked here before the write and named on refusal; the server's own refusals are relayed verbatim. NAMESPACE: omit `scope` for a key/kind the task's `stateDocs` manifest declares (the server resolves it; a disagreeing scope is refused with `memory_scope_mismatch`); for an undeclared doc key pass `scope` explicitly \u2014 omitted, it lands on the seat and the response carries `warning: \"not in manifest\"`.",
     inputs: [
-      { name: "taskSlug", type: "string", required: true, description: "Slug of the task whose memory to write. Required and explicit \u2014 the fire context carries no task identity. Also exported as AMETYST_LOOP_SLUG." },
+      { name: "taskSlug", type: "string", required: true, description: "Slug of the task whose memory to write. Required and explicit \u2014 the fire context carries no task identity. Also exported as AMETYST_TASK_SLUG." },
       { name: "content", type: "string", required: true, description: "What to store. For a run record: what you did, what you learned, what the next fire should pick up. \u2264 32 KB on a diary kind, \u2264 256 KB on an item kind or a doc." },
       { name: "docKey", type: "string", required: false, description: `Set this to upsert a STATE DOCUMENT under that key instead of appending a record \u2014 the key the task's OWN manifest declares (e.g. "board"); there is no universal default key, and upserting an undeclared one mints a document nobody reads. Upserts replace in place, so rewriting a doc at a steady size costs nothing against the quota.` },
       { name: "kind", type: "string", required: false, description: `Record kind when appending \u2014 a reserved diary kind ("run", "decision", "error", "import") or a free item kind the task's manifest declares (a token [a-z0-9-]{1,64}, e.g. "pbi"). Defaults to "run". Ignored when docKey is set.` },
@@ -124963,7 +125287,7 @@ server.tool(
     name: "taskMemoryGet",
     description: 'Read a task\'s durable memory \u2014 what past runs left behind. See the TASK MEMORY MODEL in your instructions for what docs and records are and when to read which. Selectors: `docKey` for one state document; `records: true` for a record LISTING (filters: `kind`, `archived` false|true|"all" \u2014 default false, i.e. live items plus the diary; `key`, `keyPrefix`, `since`; `fields: "keys"` for identities + one-line summaries with no bodies; `count: true` for a number only; `limit` + `cursor` for keyset paging \u2014 the response carries `nextCursor`); `key` ALONE (no `records`, no filter) opens one item by key \u2014 its latest version, live or archived \u2014 with `history: true` for every version oldest-first; `usage: true` for the quota footprint. ANY record filter (`kind`, `keyPrefix`, `archived`, `since`, `fields`, `count`, `limit`, `cursor`, or `key` with `records`) selects the LISTING and reads no document, whether or not you also pass `records: true`. With no selector it returns the task\'s FIRST DECLARED document plus the default listing \u2014 a task declaring none gets records only, and no document is invented for it. Keyed items always collapse to their latest version per key. NAMESPACES: a DECLARED doc key is read from its manifest namespace by the server; an UNDECLARED one from this seat\'s row first, then the shared row. An empty result means no run has written yet.',
     inputs: [
-      { name: "taskSlug", type: "string", required: true, description: "Slug of the task whose memory to read. Required and explicit \u2014 the fire context carries no task identity. Also exported as AMETYST_LOOP_SLUG." },
+      { name: "taskSlug", type: "string", required: true, description: "Slug of the task whose memory to read. Required and explicit \u2014 the fire context carries no task identity. Also exported as AMETYST_TASK_SLUG." },
       { name: "docKey", type: "string", required: false, description: `Read one state document by key \u2014 the key the task's own manifest declares (e.g. "board"); there is no universal default key. Declared in the manifest \u2192 its declared namespace; undeclared \u2192 own row, then shared.` },
       { name: "records", type: "boolean", required: false, description: "Read a record LISTING instead of the default read \u2014 the explicit spelling; any filter below already implies it." },
       { name: "key", type: "string", required: false, description: "With `records: true`: narrow the listing to this one key. ALONE: open the item by key (latest version, live or archived; `record_not_found` if never written)." },
@@ -125157,7 +125481,7 @@ server.tool(
     name: "taskMemoryArchive",
     description: "CLOSE a keyed item in a task's durable memory \u2014 see the TASK MEMORY MODEL in your instructions. Appends one more version of the item with `archived: true` (archivedAt stamped by the server), copying the latest live version's content; the history stays intact and nothing is deleted or edited. Archived items drop out of default listings (archived=false) and stay readable by key or with archived: true|\"all\". `record_not_found` if the key was never written; `already_archived` if its latest version is already closed.",
     inputs: [
-      { name: "taskSlug", type: "string", required: true, description: "Slug of the task whose item to close. Required and explicit \u2014 the fire context carries no task identity. Also exported as AMETYST_LOOP_SLUG." },
+      { name: "taskSlug", type: "string", required: true, description: "Slug of the task whose item to close. Required and explicit \u2014 the fire context carries no task identity. Also exported as AMETYST_TASK_SLUG." },
       { name: "key", type: "string", required: true, description: "The item's key, exactly as written (case-sensitive)." },
       { name: "note", type: "string", required: false, description: 'Optional archive note \u2014 why it is closed ("shipped in #212", "superseded by pbi-9").' }
     ]
@@ -125235,7 +125559,7 @@ async function upsertTaskCore(params, flavor) {
         void refreshDynamicPrompts();
         const mode2 = id ? "modified" : "created";
         const effectiveManifest = "stateDocs" in entity ? entity.stateDocs : !id ? null : previous && previous.available ? previous.content.stateDocs ?? null : void 0;
-        const summary = buildLoopUpsertSummary({
+        const summary = buildTaskUpsertSummary({
           mode: mode2,
           sent: entity,
           previous,
@@ -125244,7 +125568,7 @@ async function upsertTaskCore(params, flavor) {
         const payload = enforceResponseCap({
           success: true,
           mode: mode2,
-          [flavor.responseKey]: projectLoopIdentity(flavor.pick(res)),
+          [flavor.responseKey]: projectTaskIdentity(flavor.pick(res)),
           // WHERE IT LANDED, on the receipt itself. The 2026-08-31 incident put a
           // task into the wrong (admin) workspace and the success payload named
           // no workspace at all, so neither the agent nor the human reading the
@@ -125298,7 +125622,7 @@ async function upsertTaskCore(params, flavor) {
         ["visionMd", "visionFilePath"],
         ["constraintsMd", "constraintsFilePath"],
         ["readmeMd", "readmeFilePath"],
-        // Per-loop dashboard (loop-run D12): same inline-or-file verbatim plumbing as the
+        // Per-task dashboard (loop-run D12): same inline-or-file verbatim plumbing as the
         // *Md files — the bytes reach the SDK CreateLoopInput unchanged.
         ["dashboardHtml", "dashboardHtmlFilePath"],
         ["dashboardManifest", "dashboardManifestFilePath"]
@@ -125331,7 +125655,7 @@ async function upsertTaskCore(params, flavor) {
           }) }] };
         }
       }
-      const gate = categoryGateResponse(params, slug, flavor.gateKind);
+      const gate = categoryGateResponse(params, slug);
       if (gate) return gate;
       let graphJson;
       if (graphJsonProvided) {
@@ -125384,10 +125708,10 @@ async function upsertTaskCore(params, flavor) {
       return { content: [{ type: "text", text: JSON.stringify({
         success: false,
         redirect: "task-architect",
-        reason: "a new loop needs the qualification gate, brakes, status vocabulary and dashboard that the architect interview produces",
+        reason: "a new task needs the qualification gate, brakes, status vocabulary and dashboard that the architect interview produces",
         guidance: {
-          say_to_user: "I can't spin up a loop from a one-liner \u2014 a new loop needs the qualification gate, brakes, status vocabulary and dashboard that the architect interview produces. Run the `task-architect` task instead; it interviews you and then publishes the finished loop.",
-          next_action: 'Call getTask({ intent: "create a new loop" }) to fetch the `task-architect` task, present it, and run it once the user confirms. When you do, make sure the loop it designs reads its memory at boot and writes a run record before exiting (see this tool\'s description) \u2014 a loop that skips either one restarts from zero on every fire.',
+          say_to_user: "I can't spin up a task from a one-liner \u2014 a new task needs the qualification gate, brakes, status vocabulary and dashboard that the architect interview produces. Run the `task-architect` task instead; it interviews you and then publishes the finished task.",
+          next_action: 'Call getTask({ intent: "create a new task" }) to fetch the `task-architect` task, present it, and run it once the user confirms. When you do, make sure the task it designs reads its memory at boot and writes a run record before exiting (see this tool\'s description) \u2014 a task that skips either one restarts from zero on every fire.',
           stop: true
         }
       }) }] };
@@ -125401,7 +125725,7 @@ async function upsertTaskCore(params, flavor) {
 server.tool(
   {
     name: "createTask",
-    description: "Create OR modify a workspace TASK (upsert). A task is the unified card \u2014 what used to be published as either a 'compound skill' or a 'loop' is ONE row now, so this ONE tool authors both: a task with only a `markdownBody` is what a compound was, a task that also carries visionMd/constraintsMd/readmeMd is what a loop was. Pass `id` to MODIFY, omit it to CREATE. MODIFY IS A NO-CLOBBER PATCH: send `id` plus ONLY the field(s) you want to change \u2014 any of markdownBody/visionMd/constraintsMd/readmeMd/dashboardHtml/dashboardManifest/stateDocs/descriptionShort/category/draft/graphJson \u2014 fields you don't send are preserved, so a constraints-only ship-back never has to resend the body. VERBATIM BODIES: for any LONG markdown field, WRITE it to a local file first and pass the matching *FilePath (`filePath` for the body, `visionFilePath`/`constraintsFilePath`/`readmeFilePath`/`dashboardHtmlFilePath`/`dashboardManifestFilePath`) INSTEAD of inlining it \u2014 the local MCP server reads the bytes from disk and pushes them verbatim (no arg-size limit, no drift). RESPONSE: a closing `summary` derived strictly from the published content (never invented) plus a compact `receipt` of per-field byte counts and source paths; the full bodies are NOT echoed back. NOT AN AUTHORING TOOL: it publishes what you give it. To create, publish or audit a task, run `task-architect` first \u2014 this tool is only the final upsert it performs. NOTE: if the user's intent is to publish/upload/import local skills to Ametyst, call getTask FIRST to fetch the `task-architect` task \u2014 it contains the publish procedure to follow before using this tool. MEMORY: `stateDocs` is the task's memory manifest \u2014 which memory docs / record kinds it owns and whether each is `shared` by the workspace or per-`member`; the runner creates the declared docs at boot and ships each back to its declared namespace. \u26D4 THE SCOPE CHOICE IS THE USER'S, NOT YOURS: BEFORE you create or modify a task that carries a memory manifest, EXPLAIN THE CHOICE TO THEM in your own words \u2014 never as `stateDocs` or `scope` \u2014 covering all of the following, and ASK them when their intent is ambiguous instead of deciding for them. Quote it verbatim if that is clearer; never contradict it: \"" + MEMORY_SCOPE_EXPLANATION + '" The response says which one the task ended up with, as a `memory` line on the receipt (`Memory: global` / `Memory: per member` / `Memory: mixed \u2014 N global \xB7 M per member` / `Memory: none`); getTask carries the same line. \u26D4 DECLARING THE MANIFEST IS EXPECTED ON EVERY TASK: a CREATE that declares none \u2014 or a declared-empty one \u2014 is given a floor rather than being born with no memory (the run diary, per member: `{"docs":[],"records":[{"kind":"run","scope":"member"}]}`), and the receipt says so with `(defaulted \u2014 no manifest declared)`, but that floor is a backstop and NOT a substitute for deriving the manifest this task actually needs and explaining the scope choice to the user first. DASHBOARD: createTask does NOT inject a default monitoring page on create \u2014 pass `dashboardHtml` if the task wants one.',
+    description: "Create OR modify a workspace TASK (upsert). A task is the workspace's reusable card, and this ONE tool authors every shape of it: a task with only a `markdownBody` is a one-shot procedure, a task that also carries visionMd/constraintsMd/readmeMd is a scheduled job with a done-condition, hard limits and its own memory. Pass `id` to MODIFY, omit it to CREATE. MODIFY IS A NO-CLOBBER PATCH: send `id` plus ONLY the field(s) you want to change \u2014 any of markdownBody/visionMd/constraintsMd/readmeMd/dashboardHtml/dashboardManifest/stateDocs/descriptionShort/category/draft/graphJson \u2014 fields you don't send are preserved, so a constraints-only ship-back never has to resend the body. VERBATIM BODIES: for any LONG markdown field, WRITE it to a local file first and pass the matching *FilePath (`filePath` for the body, `visionFilePath`/`constraintsFilePath`/`readmeFilePath`/`dashboardHtmlFilePath`/`dashboardManifestFilePath`) INSTEAD of inlining it \u2014 the local MCP server reads the bytes from disk and pushes them verbatim (no arg-size limit, no drift). RESPONSE: a closing `summary` derived strictly from the published content (never invented) plus a compact `receipt` of per-field byte counts and source paths; the full bodies are NOT echoed back. NOT AN AUTHORING TOOL: it publishes what you give it. To create, publish or audit a task, run `task-architect` first \u2014 this tool is only the final upsert it performs. NOTE: if the user's intent is to publish/upload/import local skills to Ametyst, call getTask FIRST to fetch the `task-architect` task \u2014 it contains the publish procedure to follow before using this tool. MEMORY: `stateDocs` is the task's memory manifest \u2014 which memory docs / record kinds it owns and whether each is `shared` by the workspace or per-`member`; the runner creates the declared docs at boot and ships each back to its declared namespace. \u26D4 THE SCOPE CHOICE IS THE USER'S, NOT YOURS: BEFORE you create or modify a task that carries a memory manifest, EXPLAIN THE CHOICE TO THEM in your own words \u2014 never as `stateDocs` or `scope` \u2014 covering all of the following, and ASK them when their intent is ambiguous instead of deciding for them. Quote it verbatim if that is clearer; never contradict it: \"" + MEMORY_SCOPE_EXPLANATION + '" The response says which one the task ended up with, as a `memory` line on the receipt (`Memory: global` / `Memory: per member` / `Memory: mixed \u2014 N global \xB7 M per member` / `Memory: none`); getTask carries the same line. \u26D4 DECLARING THE MANIFEST IS EXPECTED ON EVERY TASK: a CREATE that declares none \u2014 or a declared-empty one \u2014 is given a floor rather than being born with no memory (the run diary, per member: `{"docs":[],"records":[{"kind":"run","scope":"member"}]}`), and the receipt says so with `(defaulted \u2014 no manifest declared)`, but that floor is a backstop and NOT a substitute for deriving the manifest this task actually needs and explaining the scope choice to the user first. DASHBOARD: createTask does NOT inject a default monitoring page on create \u2014 pass `dashboardHtml` if the task wants one.',
     inputs: [
       { name: "slug", type: "string", required: false, description: "URL-safe unique slug for the task within the workspace. Required on CREATE." },
       { name: "descriptionShort", type: "string", required: false, description: "One-line description of what the task does. Required on CREATE." },
@@ -125427,7 +125751,6 @@ server.tool(
   async (params) => upsertTaskCore(params, {
     toolName: "createTask",
     responseKey: "task",
-    gateKind: "task",
     get: (sdk, apiKey, id) => sdk.tasks.get(apiKey, id),
     // `body` is assembled field-by-field in `upsertTaskCore` precisely so MODIFY stays a
     // no-clobber PATCH, so it cannot statically satisfy `CreateTaskInput`'s required
@@ -126616,6 +126939,18 @@ async function startMCPServer(walletKeystoreJson, eoaAddress, config, versionNot
       }
     };
   }
+  if (hooks?.onTransportClosed) {
+    const inner = server.nativeServer.server;
+    const previousOnClose = inner.onclose;
+    inner.onclose = () => {
+      previousOnClose?.();
+      try {
+        hooks.onTransportClosed?.();
+      } catch (err) {
+        console.error(`\u26A0\uFE0F  onTransportClosed hook failed: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    };
+  }
   const transport = new StdioServerTransport();
   await server.nativeServer.connect(transport);
   console.error("\u2705 MCP Server started on stdio");
@@ -126667,6 +127002,39 @@ function delegateAllowanceRef(merchantSlug, capability) {
   return { permissionId, commerceInfoId };
 }
 
+// src/commands/serve-lifecycle.ts
+init_esm_shims();
+var HOST_CLOSE_GRACE_MS = 1e3;
+var PARENT_WATCHDOG_INTERVAL_MS = 3e4;
+var HOST_CLOSED_MESSAGE = "ametyst serve: host closed the session \u2014 exiting";
+function armHostLifecycle(deps) {
+  const graceMs = deps.graceMs ?? HOST_CLOSE_GRACE_MS;
+  const watchdogMs = deps.watchdogIntervalMs ?? PARENT_WATCHDOG_INTERVAL_MS;
+  let fired = false;
+  const hostClosed = (reason) => {
+    if (fired) return;
+    fired = true;
+    deps.log(`${HOST_CLOSED_MESSAGE} (${reason})`);
+    try {
+      void Promise.resolve(deps.shutdown()).catch(() => {
+      });
+    } catch {
+    }
+    setTimeout(() => deps.exit(0), graceMs);
+  };
+  deps.stdin.once("end", () => hostClosed("stdin ended"));
+  deps.stdin.once("close", () => hostClosed("stdin closed"));
+  const watchdog = setInterval(() => {
+    if (deps.getPpid() === 1) hostClosed("parent process gone");
+  }, watchdogMs);
+  watchdog.unref?.();
+  return {
+    hostClosed,
+    triggered: () => fired,
+    dispose: () => clearInterval(watchdog)
+  };
+}
+
 // src/commands/serve.ts
 init_version5();
 
@@ -126800,7 +127168,7 @@ import { existsSync as existsSync15 } from "fs";
 import { homedir as homedir12 } from "os";
 import { join as join19 } from "path";
 
-// src/compounds/sync-skills.ts
+// src/tasks/sync-skills.ts
 init_esm_shims();
 init_paths();
 import { accessSync as accessSync3, constants as constants3, existsSync as existsSync14, mkdirSync as mkdirSync9, readdirSync as readdirSync5, readFileSync as readFileSync14, rmSync, writeFileSync as writeFileSync10 } from "fs";
@@ -126834,7 +127202,7 @@ async function fetchSelectionContext(sdk, apiKey) {
   }
 }
 function buildStubContent(item) {
-  const { kind, slug, descriptionShort } = item;
+  const { slug, descriptionShort } = item;
   return `---
 name: ${slug}
 description: ${JSON.stringify(descriptionShort)}
@@ -126842,9 +127210,9 @@ description: ${JSON.stringify(descriptionShort)}
 
 ${MANAGED_MARKER}
 
-This is a pointer to the Ametyst ${kind} \`${slug}\` \u2014 the real ${kind} lives in the Ametyst workspace, not in this file.
+This is a pointer to the Ametyst task \`${slug}\` \u2014 the real task lives in the Ametyst workspace, not in this file.
 
-${taskRunSection(slug, kind)}`;
+${taskRunSection(slug)}`;
 }
 function isManaged(file) {
   try {
@@ -126925,27 +127293,15 @@ async function syncSkills(opts = {}) {
   const global2 = scope.global;
   const fallback2 = "fallback" in scope ? scope.fallback : void 0;
   const { sdk, apiKey } = await getCliSdk();
-  const [compRes, loopRes] = await Promise.all([sdk.compoundedSkills.list(apiKey), sdk.loops.list(apiKey)]);
-  if (compRes?.status !== "ok") throw new Error(`failed to list compounds: ${compRes?.error ?? "unknown error"}`);
-  if (loopRes?.status !== "ok") throw new Error(`failed to list loops: ${loopRes?.error ?? "unknown error"}`);
-  const allItems = [
-    ...compRes.items.filter((c) => c.draft === false).map((c) => ({
-      kind: "compound",
-      slug: c.slug,
-      descriptionShort: c.descriptionShort,
-      id: c.id ?? "",
-      category: c.category ?? null,
-      createdBy: c.createdBy ?? ""
-    })),
-    ...loopRes.items.filter((l) => l.draft === false).map((l) => ({
-      kind: "loop",
-      slug: l.slug,
-      descriptionShort: l.descriptionShort,
-      id: l.id ?? "",
-      category: l.category ?? null,
-      createdBy: l.createdBy ?? ""
-    }))
-  ];
+  const listRes = await sdk.loops.list(apiKey);
+  if (listRes?.status !== "ok") throw new Error(`failed to list tasks: ${listRes?.error ?? "unknown error"}`);
+  const allItems = listRes.items.filter((l) => l.draft === false).map((l) => ({
+    slug: l.slug,
+    descriptionShort: l.descriptionShort,
+    id: l.id ?? "",
+    category: l.category ?? null,
+    createdBy: l.createdBy ?? ""
+  }));
   const items = applySyncSelection(allItems, await fetchSelectionContext(sdk, apiKey));
   const desired = /* @__PURE__ */ new Map();
   for (const item of items) {
@@ -127071,9 +127427,21 @@ async function serveCommand() {
   console.error(
     persisted ? isPlaintextVault(persisted) ? "Starting MCP server... (persisted UNENCRYPTED wallet found \u2014 always unlocked, no start_session needed)" : "Starting MCP server... (persisted wallet found \u2014 unlock with start_session)" : "Starting MCP server... (no saved wallet \u2014 one will be created on start_session)"
   );
+  let bridge = null;
+  const lifecycle = armHostLifecycle({
+    stdin: process.stdin,
+    getPpid: () => process.ppid,
+    shutdown: async () => {
+      shutdownForHostClose();
+      if (bridge) await bridge.close();
+    },
+    exit: (code) => process.exit(code),
+    log: (message) => console.error(message)
+  });
   await startMCPServer(keystore, eoa, { ...config, apiKey, apiKeySource: resolved.source ?? void 0 }, versionNotice, {
+    onTransportClosed: () => lifecycle.hostClosed("transport closed"),
     // Best-effort: materialize local `/`-command pointer skills for every published
-    // compound + loop so they're available without a manual `compound sync-skills`.
+    // task so they're available without a manual `ametyst task sync-skills`.
     // Deferred from boot to the MCP initialize handshake so the sync is CLIENT-AWARE:
     // clientInfo.name tells us whether the host reads `.claude/skills` (Claude) or
     // `.codex/skills` (Codex); when it doesn't, presence detection picks the roots.
@@ -127085,14 +127453,15 @@ async function serveCommand() {
     console.error("\u{1F512} delegate bridge not started \u2014 this MCP server is running inside a delegated run");
     return;
   }
-  const bridge = await startDelegateBridge({
+  bridge = await startDelegateBridge({
     spend: invokeSpendTool,
     isUnlocked: isWalletUnlockedForDelegate,
     resolveAllowanceRef: () => delegateAllowanceRef(DELEGATE_MERCHANT_SLUG, DELEGATE_CAPABILITY),
     version: CLI_VERSION
   });
   if (bridge) {
-    const closeBridge = () => void bridge.close().catch(() => {
+    const bound = bridge;
+    const closeBridge = () => void bound.close().catch(() => {
     });
     process.on("exit", closeBridge);
     process.on("SIGINT", closeBridge);
@@ -127667,204 +128036,87 @@ connectionsCommand.command("add <provider>").description(
   "OAuth providers only: register a new client with the provider instead of reusing the one this machine already registered"
 ).action(
   (provider, opts) => connectionsAddCommand(provider, opts)
-);
-connectionsCommand.command("list").description("List stored connections. Shows identity only \u2014 never a credential.").action(connectionsListCommand);
-connectionsCommand.command("refresh").description(
-  "Re-download the connector catalog from Ametyst. A provider Ametyst stopped offering disappears from this machine here"
-).action(connectionsRefreshCommand);
-connectionsCommand.command("providers").description(
-  "List the providers this cli read from the last catalog download \u2014 not necessarily everything Ametyst offers; 'connections refresh' downloads live"
-).action(connectionsProvidersCommand);
-connectionsCommand.command("remove <provider>").description("Delete a stored connection's credential from the OS keychain").option("--name <name>", "Which connection to remove when the provider has more than one").action((provider, opts) => connectionsRemoveCommand(provider, opts));
-
-// src/commands/task.ts
-init_esm_shims();
-
-// src/loops/index.ts
-init_esm_shims();
-
-// src/loops/materialize.ts
-init_esm_shims();
-init_paths();
-import { mkdirSync as mkdirSync10, writeFileSync as writeFileSync11 } from "fs";
-import { join as join20 } from "path";
-var MIRRORED_DEFINITION_FILES = ["SKILL.md", "VISION.md", "README.md"];
-function materialize(loop2, fireId, stateDocs = [], runRoot) {
-  const dir = loopFireDir(loop2.slug, fireId, runRoot);
-  mkdirSync10(dir, { recursive: true, mode: 448 });
-  for (const doc of stateDocs) {
-    writeFileSync11(join20(dir, doc.filename), doc.body, { mode: 384 });
-  }
-  const files = {
-    "SKILL.md": loop2.markdownBody ?? "",
-    "VISION.md": loop2.visionMd ?? "",
-    "CONSTRAINTS.md": loop2.constraintsMd ?? "",
-    "README.md": loop2.readmeMd ?? ""
-  };
-  if (typeof loop2.dashboardHtml === "string" && loop2.dashboardHtml) {
-    files["dashboard.html"] = loop2.dashboardHtml;
-  }
-  if (typeof loop2.dashboardManifest === "string" && loop2.dashboardManifest) {
-    files["dashboard.manifest.json"] = loop2.dashboardManifest;
-  }
-  for (const [name, body] of Object.entries(files)) {
-    writeFileSync11(join20(dir, name), body, { mode: 384 });
-  }
-  writeFileSync11(
-    join20(dir, "STATUS.md"),
-    `# STATUS \u2014 ${loop2.slug}
-
-loop_id: ${loop2.id}
-fire_id: ${fireId}
-started: pending
-queue: not started
-`,
-    { mode: 384 }
-  );
-  mirrorDefinitionFiles(loop2.slug, files, runRoot);
-  return dir;
-}
-function mirrorDefinitionFiles(slug, files, runRoot) {
-  try {
-    const root2 = loopDir(slug, runRoot);
-    mkdirSync10(root2, { recursive: true, mode: 448 });
-    for (const name of [...MIRRORED_DEFINITION_FILES, "dashboard.html", "dashboard.manifest.json"]) {
-      const body = files[name];
-      if (body === void 0) continue;
-      writeFileSync11(join20(root2, name), body, { mode: 384 });
-    }
-  } catch {
-  }
-}
-
-// src/loops/launch.ts
-init_esm_shims();
-import { spawnSync } from "child_process";
-function readGlobalGitConfig(key) {
-  try {
-    const r = spawnSync("git", ["config", "--global", "--get", key], { encoding: "utf-8" });
-    const v = r.status === 0 ? r.stdout.trim() : "";
-    return v || void 0;
-  } catch {
-    return void 0;
-  }
-}
-function deriveGitIdentityEnv(env = process.env, readGitConfig = readGlobalGitConfig) {
-  const name = env.AMETYST_LOOP_GIT_AUTHOR_NAME?.trim() || readGitConfig("user.name");
-  const email = env.AMETYST_LOOP_GIT_AUTHOR_EMAIL?.trim() || readGitConfig("user.email");
-  const out = {};
-  if (name) {
-    out.GIT_AUTHOR_NAME = name;
-    out.GIT_COMMITTER_NAME = name;
-  }
-  if (email) {
-    out.GIT_AUTHOR_EMAIL = email;
-    out.GIT_COMMITTER_EMAIL = email;
-  }
-  return out;
-}
-function buildLaunchArgs(dir, opts = {}, slug, deps = {}) {
-  const env = deps.env ?? process.env;
-  const maxBudget = resolveMaxBudgetUsd(opts, env);
-  const docKey = defaultDocKey(opts.memoryManifest);
-  const readDocSentence = typeof docKey === "string" ? `taskMemoryGet({ taskSlug: "${slug}", docKey: "${docKey}" }) for your "${docKey}" document \u2014 the FIRST document this task's memory manifest declares, materialized for you at boot as ${filenameForKey(docKey)} \u2014 then ` : docKey === null ? `THIS TASK DECLARES NO MEMORY DOCUMENT \u2014 do not read one and do not create one; your records ARE its memory. Read ` : `no memory document is named here \u2014 this launcher could not resolve the task's manifest, so do NOT assume one exists. Read `;
-  const writeDocSentence = typeof docKey === "string" ? `, and rewrite your "${docKey}" document with taskMemoryAppend({ taskSlug: "${slug}", docKey: "${docKey}", content: "<the state the next fire needs>" }).` : docKey === null ? `. This task declares no memory document, so there is nothing to rewrite \u2014 do not invent one; the run record and your keyed items are what the next fire reads.` : `. If this task declares a memory document, rewrite it with taskMemoryAppend({ taskSlug: "${slug}", docKey: "<the key its manifest declares>", content: "..." }) \u2014 this launcher could not name it for you, so do not guess a key.`;
-  const prompt = `You are running the Ametyst loop${slug ? ` "${slug}"` : ""} headless and unattended.
-
-${dir} is THIS FIRE'S OWN directory. Other fires of the same loop may be running right now, each with its own directory alongside yours \u2014 wherever the loop's SKILL says <LOOPDIR> it means exactly ${dir}, never a sibling's directory and never their shared parent. Derive every path the SKILL asks you to create (links, run-state) from ${dir}; never from a path written literally in the SKILL prose.
-
-Read the loop definition files in ${dir}:
-- SKILL.md \u2014 the driver; follow it.
-- VISION.md \u2014 the objective / done-condition.
-- CONSTRAINTS.md \u2014 hard limits; never violate them.
-- STATUS.md \u2014 your run-state; keep it updated as you progress.
-
-The QUEUE (the work items) is EXTERNAL \u2014 it is NOT one of these files. SKILL.md tells you WHERE to read the queue from and WHERE to write the results; read your work items from that source.
-${slug ? `
-YOUR DURABLE MEMORY survives this fire, and ${dir} does not \u2014 this directory is deleted when you exit, so anything you want the NEXT fire to know must go into memory, not into a file here. Reach it with the taskMemory* MCP tools, always with taskSlug "${slug}" (also exported as AMETYST_LOOP_SLUG). Nothing from it was injected into this fire beyond the materialized docs:
-- FIRST, before you start work, read what you need with taskMemoryGet: ${readDocSentence}one list per record kind you need \u2014 taskMemoryGet({ taskSlug: "${slug}", records: true, kind: "<kind>" }) \u2014 which returns the latest version per key, archived=false by default. If everything is empty this is your first fire \u2014 say so in your run record.
-- BEFORE YOU EXIT, on every path including a brake: taskMemoryAppend({ taskSlug: "${slug}", kind: "run", content: "<what you did, what you learned, what the next fire should pick up>" })${writeDocSentence}
-- Items with an identity (a PBI, a test, a merchant) are keyed records of a free kind: taskMemoryAppend({ taskSlug: "${slug}", kind: "<kind>", key: "<id>", content }) writes or versions one; taskMemoryArchive({ taskSlug: "${slug}", key: "<id>", note }) closes it.
-Memory is quota-bounded per workspace \u2014 an over-limit write is REJECTED and tells you the limit, never silently truncated. If a write is refused, shorten it and write again; do not skip the run record.
-
-${TASK_MEMORY_MODEL_SECTION}
-` : ""}
-Execute the loop until VISION is met or the queue is drained. For any step that costs money, use the Ametyst \`spend\` MCP tool (the on-chain policy enforces the budget) \u2014 do NOT invent another payment path.
-
-When you finish cleanly (VISION met / queue drained), write "status: done" and "queue drained" into ${dir}/STATUS.md. If you must stop early (a brake/constraint was hit or an unrecoverable error occurred), write "brake: <reason>" into ${dir}/STATUS.md and exit. Never exceed the constraints.`;
-  const args = [
-    "-p",
-    prompt,
-    "--dangerously-skip-permissions",
-    // The WRAPPER (`ametyst task run`, see runTask) owns shipping the loop's learned
-    // CONSTRAINTS back to Ametyst on exit. The headless agent must NEVER rewrite its own
-    // stored task record, so deny the upsert tool even though `--dangerously-skip-permissions`
-    // otherwise grants every tool. (STATUS/QUEUE stay local run-state and are never shipped.)
-    // ⛔ THE LIST IS DERIVED, NOT TYPED, on both axes — a deny that names the wrong string is
-    // indistinguishable from no deny at all:
-    //   - TOOL: `createTask` is what this server exposes now; `createLoop`, its retired alias,
-    //     is kept because the fire connects to whichever `ametyst serve` the host's MCP config
-    //     points at, which may still be an older build offering it. Denying only the retired
-    //     name is what the retirement would otherwise leave behind — an inert deny.
-    //   - ENTRY NAME: this line used to hardcode the `ametyst-staging` prefix, but a PROD build
-    //     registers as `ametyst` (AMETYST_MCP_NAME), so the guard was silently inert in prod.
-    //     AMETYST_MCP_NAMES is the repo's own list of every entry name this CLI family writes.
-    // `--disallowedTools` is variadic and comma-or-space separated, so one arg carries them all.
-    "--disallowedTools",
-    AMETYST_MCP_NAMES.flatMap((n) => [`mcp__${n}__createTask`, `mcp__${n}__createLoop`]).join(","),
-    "--add-dir",
-    dir
-  ];
-  if (maxBudget !== void 0) {
-    args.push("--max-budget-usd", String(maxBudget));
+);
+connectionsCommand.command("list").description("List stored connections. Shows identity only \u2014 never a credential.").action(connectionsListCommand);
+connectionsCommand.command("refresh").description(
+  "Re-download the connector catalog from Ametyst. A provider Ametyst stopped offering disappears from this machine here"
+).action(connectionsRefreshCommand);
+connectionsCommand.command("providers").description(
+  "List the providers this cli read from the last catalog download \u2014 not necessarily everything Ametyst offers; 'connections refresh' downloads live"
+).action(connectionsProvidersCommand);
+connectionsCommand.command("remove <provider>").description("Delete a stored connection's credential from the OS keychain").option("--name <name>", "Which connection to remove when the provider has more than one").action((provider, opts) => connectionsRemoveCommand(provider, opts));
+
+// src/commands/task.ts
+init_esm_shims();
+
+// src/tasks/index.ts
+init_esm_shims();
+
+// src/tasks/materialize.ts
+init_esm_shims();
+init_paths();
+import { mkdirSync as mkdirSync10, writeFileSync as writeFileSync11 } from "fs";
+import { join as join20 } from "path";
+var MIRRORED_DEFINITION_FILES = ["SKILL.md", "VISION.md", "README.md"];
+function materialize(task, fireId, stateDocs = [], runRoot) {
+  const dir = runFireDir(task.slug, fireId, runRoot);
+  mkdirSync10(dir, { recursive: true, mode: 448 });
+  for (const doc of stateDocs) {
+    writeFileSync11(join20(dir, doc.filename), doc.body, { mode: 384 });
   }
-  if (opts.sessionId) {
-    args.push("--session-id", opts.sessionId);
+  const files = {
+    "SKILL.md": task.markdownBody ?? "",
+    "VISION.md": task.visionMd ?? "",
+    "CONSTRAINTS.md": task.constraintsMd ?? "",
+    "README.md": task.readmeMd ?? ""
+  };
+  if (typeof task.dashboardHtml === "string" && task.dashboardHtml) {
+    files["dashboard.html"] = task.dashboardHtml;
   }
-  args.push(
-    // Eager-load MCP tools: with tool search enabled, MCP tools (including Ametyst's) are
-    // deferred behind a ToolSearch step that smaller orchestrator models (e.g. Haiku) never
-    // perform — the run ends its turn without the tools (BUG-15). Eager loading is safe for
-    // all models, so this is universal rather than model-gated.
-    "--settings",
-    '{"env":{"ENABLE_TOOL_SEARCH":"false"}}'
+  if (typeof task.dashboardManifest === "string" && task.dashboardManifest) {
+    files["dashboard.manifest.json"] = task.dashboardManifest;
+  }
+  for (const [name, body] of Object.entries(files)) {
+    writeFileSync11(join20(dir, name), body, { mode: 384 });
+  }
+  writeFileSync11(
+    join20(dir, "STATUS.md"),
+    `# STATUS \u2014 ${task.slug}
+
+loop_id: ${task.id}
+fire_id: ${fireId}
+started: pending
+queue: not started
+`,
+    { mode: 384 }
   );
-  return {
-    cmd: "claude",
-    args,
-    cwd: opts.cwd ?? process.cwd(),
-    env: {
-      ...deriveGitIdentityEnv(env, deps.readGitConfig ?? readGlobalGitConfig),
-      // Loop memory is addressed by SLUG, and the fire context carries no loop
-      // identity today — which is why the taskMemory* tools take an explicit
-      // `taskSlug`. Exporting it here is the convenience half: the prompt names
-      // the slug literally, and this lets any shell step in the loop reach the
-      // same value without re-deriving it. Env only, never argv — the launch
-      // argv is pinned byte-for-byte by launch.test.ts, and widening it would
-      // be a change to the command rather than to the child's environment.
-      ...slug ? { AMETYST_LOOP_SLUG: slug } : {}
-    }
-  };
+  mirrorDefinitionFiles(task.slug, files, runRoot);
+  return dir;
 }
-function resolveMaxBudgetUsd(opts, env = process.env) {
-  if (opts.maxBudgetUsd !== void 0) return opts.maxBudgetUsd;
-  const raw = env.AMETYST_LOOP_MAX_BUDGET_USD;
-  if (raw === void 0 || raw.trim() === "") return void 0;
-  const n = Number(raw);
-  return Number.isFinite(n) ? n : void 0;
+function mirrorDefinitionFiles(slug, files, runRoot) {
+  try {
+    const root2 = runDir(slug, runRoot);
+    mkdirSync10(root2, { recursive: true, mode: 448 });
+    for (const name of [...MIRRORED_DEFINITION_FILES, "dashboard.html", "dashboard.manifest.json"]) {
+      const body = files[name];
+      if (body === void 0) continue;
+      writeFileSync11(join20(root2, name), body, { mode: 384 });
+    }
+  } catch {
+  }
 }
 
-// src/loops/heartbeat.ts
+// src/tasks/heartbeat.ts
 init_esm_shims();
 import * as realFs2 from "fs";
 import { join as join21 } from "path";
-function startHeartbeat(loopDir2, info, deps = {}) {
+function startHeartbeat(runDir2, info, deps = {}) {
   const fs = deps.fs ?? realFs2;
   const now = deps.now ?? (() => /* @__PURE__ */ new Date());
   const setI = deps.setInterval ?? globalThis.setInterval;
   const clearI = deps.clearInterval ?? globalThis.clearInterval;
   const intervalMs = deps.intervalMs ?? 6e4;
-  const stateDir = join21(loopDir2, ".state");
+  const stateDir = join21(runDir2, ".state");
   const path2 = join21(stateDir, "fire.running");
   try {
     fs.mkdirSync(stateDir, { recursive: true, mode: 448 });
@@ -127901,7 +128153,7 @@ ${info.sessionId ? `session=${info.sessionId}
   };
 }
 
-// src/loops/accounting.ts
+// src/tasks/accounting.ts
 init_esm_shims();
 import * as realFs3 from "fs";
 import { homedir as homedir13 } from "os";
@@ -127965,21 +128217,21 @@ function recordFireAccounting(args) {
     const stats = parseTranscriptStats(fs.readFileSync(transcript, "utf-8"));
     const rec = {
       ts: new Date(args.startedAtEpochMs).toISOString(),
-      loop: args.loopSlug,
+      loop: args.taskSlug,
       session: args.sessionId,
       exit: args.exitCode,
       duration_s: Math.max(0, Math.round((now().getTime() - args.startedAtEpochMs) / 1e3)),
       ...stats
     };
-    appendFireLine(fs, args.loopDir, rec);
+    appendFireLine(fs, args.runDir, rec);
     return rec;
   } catch (err) {
     log(`  (accounting failed \u2014 fire itself unaffected: ${err instanceof Error ? err.message : String(err)})`);
     return null;
   }
 }
-function appendFireLine(fs, loopDir2, rec) {
-  const stateDir = join22(loopDir2, ".state");
+function appendFireLine(fs, runDir2, rec) {
+  const stateDir = join22(runDir2, ".state");
   fs.mkdirSync(stateDir, { recursive: true, mode: 448 });
   fs.appendFileSync(join22(stateDir, "fires.jsonl"), JSON.stringify(rec) + "\n", { mode: 384 });
 }
@@ -127990,7 +128242,7 @@ function recordFailedLaunch(args) {
   try {
     const rec = {
       ts: new Date(args.startedAtEpochMs).toISOString(),
-      loop: args.loopSlug,
+      loop: args.taskSlug,
       session: args.sessionId,
       exit: args.exitCode ?? 1,
       duration_s: Math.max(0, Math.round((now().getTime() - args.startedAtEpochMs) / 1e3)),
@@ -127998,7 +128250,7 @@ function recordFailedLaunch(args) {
       launch_failed: true,
       reason: args.reason
     };
-    appendFireLine(fs, args.loopDir, rec);
+    appendFireLine(fs, args.runDir, rec);
     return rec;
   } catch (err) {
     log(`  (failed-launch record could not be written: ${err instanceof Error ? err.message : String(err)})`);
@@ -128006,14 +128258,14 @@ function recordFailedLaunch(args) {
   }
 }
 
-// src/loops/run.ts
+// src/tasks/run.ts
 init_esm_shims();
 import { spawn as spawn2 } from "child_process";
 import { randomUUID as randomUUID5 } from "crypto";
 import { existsSync as existsSync16, mkdirSync as mkdirSync11, readFileSync as readFileSync15, rmSync as rmSync2, writeFileSync as writeFileSync12 } from "fs";
 import { dirname as dirname9, join as join24 } from "path";
 
-// src/loops/claude-binary.ts
+// src/tasks/claude-binary.ts
 init_esm_shims();
 import { spawnSync as spawnSync2 } from "child_process";
 var defaultRun = (cmd, args) => {
@@ -128060,7 +128312,7 @@ function ensureClaudeBinary(deps = {}) {
   return { status: "healed" };
 }
 
-// src/loops/concurrency.ts
+// src/tasks/concurrency.ts
 init_esm_shims();
 import * as realFs4 from "fs";
 import { join as join23 } from "path";
@@ -128080,21 +128332,21 @@ function parseHeartbeatPid(body) {
   const pid = Number(m[1]);
   return Number.isInteger(pid) && pid > 0 ? pid : void 0;
 }
-function liveFires(loopRoot, deps = {}) {
+function liveFires(taskRoot, deps = {}) {
   const fs = deps.fs ?? realFs4;
   const isAlive = deps.isAlive ?? pidIsAlive;
   const now = deps.now ?? Date.now;
   const staleMs = deps.staleMs ?? DEFAULT_HEARTBEAT_STALE_MS;
   let entries;
   try {
-    entries = fs.readdirSync(join23(loopRoot, "fires"));
+    entries = fs.readdirSync(join23(taskRoot, "fires"));
   } catch {
     return [];
   }
   const out = [];
   for (const entry of entries) {
     try {
-      const beat = join23(loopRoot, "fires", String(entry), ".state", "fire.running");
+      const beat = join23(taskRoot, "fires", String(entry), ".state", "fire.running");
       const st = fs.statSync(beat);
       const heartbeatAgeMs = now() - Number(st.mtimeMs);
       if (!(heartbeatAgeMs <= staleMs)) continue;
@@ -128109,16 +128361,20 @@ function liveFires(loopRoot, deps = {}) {
 }
 function resolveMaxConcurrentFires(opts = {}, env = process.env) {
   const explicit = opts.maxConcurrentFires;
-  const raw = env.AMETYST_LOOP_MAX_CONCURRENT_FIRES;
+  const raw = readTaskEnv("MAX_CONCURRENT_FIRES", env);
   const fromEnv = raw !== void 0 && raw.trim() !== "" ? Number(raw) : void 0;
   const picked = explicit !== void 0 && Number.isFinite(explicit) ? explicit : fromEnv !== void 0 && Number.isFinite(fromEnv) ? fromEnv : DEFAULT_MAX_CONCURRENT_FIRES;
   if (picked <= 0) return Infinity;
   return Math.floor(picked);
 }
 
-// src/loops/run.ts
+// src/tasks/run.ts
 init_paths();
 var SHIPBACK_SIGNAL_TIMEOUT_MS = 8e3;
+function isForbidden(res) {
+  if (res.code === 403) return true;
+  return /\bHTTP 403\b|forbidden|only the creator/i.test(res.error ?? "");
+}
 function preserveRefusedConstraints(slug, fireId, body, runRoot) {
   try {
     const path2 = refusedConstraintsPath(slug, fireId, runRoot);
@@ -128141,72 +128397,74 @@ function killTree(pid) {
     }
   }, 2e3).unref?.();
 }
-async function runLoop(loopId, opts = {}) {
+async function runTask(taskId, opts = {}) {
   const { sdk, apiKey } = await getCliSdk();
-  const got = await sdk.loops.get(apiKey, loopId);
-  if (got.status !== "ok") throw new Error(`loop not found: ${got.error}`);
-  const loop2 = got.loop;
+  const got = await sdk.loops.get(apiKey, taskId);
+  if (got.status !== "ok") throw new Error(`task not found: ${got.error}`);
+  const task = got.loop;
   const runRoot = resolveRunRoot();
   if (runRoot.reason === "fallback") {
     const why = runRoot.rejected?.map((r) => `${r.dir}: ${r.why}`).join("; ") ?? "no usable cwd";
-    console.log(`Loop ${loop2.slug}: running under ${runRoot.root} \u2014 the current folder cannot host a run (${why}).`);
+    console.log(`Task ${task.slug}: running under ${runRoot.root} \u2014 the current folder cannot host a run (${why}).`);
   }
-  const loopRoot = loopDir(loop2.slug, runRoot.root);
+  const taskRoot = runDir(task.slug, runRoot.root);
+  const legacyHint = legacyRunFolderHint(task.slug, runRoot.root);
+  if (legacyHint) console.log(legacyHint);
   const maxConcurrent = resolveMaxConcurrentFires(opts, process.env);
-  const inFlight = liveFires(loopRoot);
+  const inFlight = liveFires(taskRoot);
   if (inFlight.length >= maxConcurrent) {
     console.log(
-      `Loop ${loop2.slug}: standing down \u2014 ${inFlight.length} fire(s) already in flight (pids ${inFlight.map((f) => f.pid).join(", ")}), ceiling ${maxConcurrent}. Raise it with --max-concurrent-fires / AMETYST_LOOP_MAX_CONCURRENT_FIRES (0 = unlimited).`
+      `Task ${task.slug}: standing down \u2014 ${inFlight.length} fire(s) already in flight (pids ${inFlight.map((f) => f.pid).join(", ")}), ceiling ${maxConcurrent}. Raise it with --max-concurrent-fires / AMETYST_TASK_MAX_CONCURRENT_FIRES (0 = unlimited).`
     );
-    return { status: "skipped", dir: loopRoot, shipBack: { outcome: "nothing" } };
+    return { status: "skipped", dir: taskRoot, shipBack: { outcome: "nothing" } };
   }
-  const est = estimateBlastRadius(loop2);
+  const est = estimateBlastRadius(task);
   const sessionId2 = opts.sessionId ?? randomUUID5();
-  const discovered = await discoverMemoryDocs(sdk, apiKey, loop2.slug);
+  const discovered = await discoverMemoryDocs(sdk, apiKey, task.slug);
   for (const scope of discovered.failed) {
     console.error(
-      `Loop ${loop2.slug}: could not list the ${scope === "member" ? "seat's own" : "shared"} memory docs \u2014 any undeclared doc that lives only there is NOT materialized this fire (declared docs are still resolved individually from the manifest), and nothing is overwritten.`
+      `Task ${task.slug}: could not list the ${scope === "member" ? "seat's own" : "shared"} memory docs \u2014 any undeclared doc that lives only there is NOT materialized this fire (declared docs are still resolved individually from the manifest), and nothing is overwritten.`
     );
   }
   for (const scope of discovered.truncated) {
     console.error(
-      `Loop ${loop2.slug}: the ${scope === "member" ? "seat's own" : "shared"} memory holds at least ${(scope === "member" ? discovered.own : discovered.shared).length} docs and the listing has no cursor \u2014 undeclared docs past the first page are NOT materialized this fire.`
+      `Task ${task.slug}: the ${scope === "member" ? "seat's own" : "shared"} memory holds at least ${(scope === "member" ? discovered.own : discovered.shared).length} docs and the listing has no cursor \u2014 undeclared docs past the first page are NOT materialized this fire.`
     );
   }
-  const plan = planStateDocs(loop2.stateDocs, discovered);
+  const plan = planStateDocs(task.stateDocs, discovered);
   if (plan.skipped.length > 0) {
     console.error(
-      `Loop ${loop2.slug}: IGNORING ${plan.skipped.length} memory doc(s) (${plan.skipped.map((d) => `${d.key}: ${d.reason}`).join("; ")}). They are NOT materialized and NOT shipped back \u2014 anything this fire writes to those filenames is the wrapper's own, and would overwrite the record if sent up.`
+      `Task ${task.slug}: IGNORING ${plan.skipped.length} memory doc(s) (${plan.skipped.map((d) => `${d.key}: ${d.reason}`).join("; ")}). They are NOT materialized and NOT shipped back \u2014 anything this fire writes to those filenames is the wrapper's own, and would overwrite the record if sent up.`
     );
   }
-  const { fetched: stateDocBodies, failed: stateDocFailures } = plan.docs.length > 0 ? await fetchStateDocs(sdk, apiKey, loop2.slug, plan.docs) : { fetched: [], failed: [] };
+  const { fetched: stateDocBodies, failed: stateDocFailures } = plan.docs.length > 0 ? await fetchStateDocs(sdk, apiKey, task.slug, plan.docs) : { fetched: [], failed: [] };
   if (stateDocFailures.length > 0) {
     console.error(
-      `Loop ${loop2.slug}: could not read or create ${stateDocFailures.length} memory doc(s) (${stateDocFailures.map((f) => `${f.key}: ${f.reason}`).join("; ")}) \u2014 they are NOT materialized this fire, and their records are left untouched rather than overwritten with an empty file.`
+      `Task ${task.slug}: could not read or create ${stateDocFailures.length} memory doc(s) (${stateDocFailures.map((f) => `${f.key}: ${f.reason}`).join("; ")}) \u2014 they are NOT materialized this fire, and their records are left untouched rather than overwritten with an empty file.`
     );
   }
   if (stateDocBodies.length > 0) {
-    console.log(`Loop ${loop2.slug}: state docs \u2192 ${stateDocBodies.map(describeSource).join(", ")}`);
+    console.log(`Task ${task.slug}: state docs \u2192 ${stateDocBodies.map(describeSource).join(", ")}`);
   }
   const undeclared = stateDocBodies.filter((d) => !d.declared);
   if (undeclared.length > 0) {
     console.log(
-      `Loop ${loop2.slug}: ${undeclared.length} memory doc(s) not in manifest (${undeclared.map((d) => `${d.key} \u2190 ${d.scope}`).join(", ")}) \u2014 materialized anyway, and shipped back to the namespace each came from. Declare them in the task's stateDocs manifest to make that explicit.`
+      `Task ${task.slug}: ${undeclared.length} memory doc(s) not in manifest (${undeclared.map((d) => `${d.key} \u2190 ${d.scope}`).join(", ")}) \u2014 materialized anyway, and shipped back to the namespace each came from. Declare them in the task's stateDocs manifest to make that explicit.`
     );
   }
-  const dir = materialize(loop2, sessionId2, stateDocBodies, runRoot.root);
-  console.log(`Loop ${loop2.slug}: fire ${sessionId2} \u2192 ${dir}`);
+  const dir = materialize(task, sessionId2, stateDocBodies, runRoot.root);
+  console.log(`Task ${task.slug}: fire ${sessionId2} \u2192 ${dir}`);
   const launch = buildLaunchArgs(
     dir,
     // The child runs IN the resolved root: for a project cwd that is the cwd it always was; under
     // the fallback it is the writable folder rather than the `/` launchd handed us.
-    { ...opts, sessionId: sessionId2, cwd: opts.cwd ?? runRoot.root, memoryManifest: normalizeMemoryManifest(loop2.stateDocs) },
-    loop2.slug
+    { ...opts, sessionId: sessionId2, cwd: opts.cwd ?? runRoot.root, memoryManifest: normalizeMemoryManifest(task.stateDocs) },
+    task.slug
   );
   const budget = resolveMaxBudgetUsd(opts);
   const capLabel = budget !== void 0 ? `capped at \u20AC${budget}` : "no external budget cap";
   console.log(
-    `Loop ${loop2.slug}: ${est.steps} steps (${est.paidSteps} paid), est \u20AC${est.estCostEur ?? "?"} \u2014 ${capLabel}`
+    `Task ${task.slug}: ${est.steps} steps (${est.paidSteps} paid), est \u20AC${est.estCostEur ?? "?"} \u2014 ${capLabel}`
   );
   const statusPath = join24(dir, "STATUS.md");
   const statusBefore = existsSync16(statusPath) ? readFileSync15(statusPath, "utf-8") : "";
@@ -128220,10 +128478,14 @@ blast_radius: steps=${est.steps} paid=${est.paidSteps} estEur=${est.estCostEur ?
     { mode: 384 }
   );
   const heartbeat = startHeartbeat(dir, { pid: process.pid, sessionId: sessionId2 });
-  const dashboard = await startDashboardServer({ loop: loop2, loopDir: dir });
+  const dashboard = await startDashboardServer({
+    task,
+    runDir: dir,
+    readDoc: memoryDocResolver(sdk, apiKey, task.slug, normalizeMemoryManifest(task.stateDocs))
+  });
   if (dashboard) {
     openDashboardInBrowser(`http://localhost:${dashboard.port}`, { isTTY: Boolean(process.stdout.isTTY) });
-  } else if (typeof loop2.dashboardHtml !== "string" || !loop2.dashboardHtml) {
+  } else if (typeof task.dashboardHtml !== "string" || !task.dashboardHtml) {
     console.log(NO_DASHBOARD_MESSAGE);
   }
   const startedAtEpochMs = Date.now();
@@ -128231,7 +128493,7 @@ blast_radius: steps=${est.steps} paid=${est.paidSteps} estEur=${est.estCostEur ?
     ensureClaudeBinary();
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
-    recordFailedLaunch({ loopDir: dir, loopSlug: loop2.slug, sessionId: sessionId2, reason, startedAtEpochMs });
+    recordFailedLaunch({ runDir: dir, taskSlug: task.slug, sessionId: sessionId2, reason, startedAtEpochMs });
     heartbeat.stop();
     dashboard?.close();
     throw err;
@@ -128252,55 +128514,78 @@ blast_radius: steps=${est.steps} paid=${est.paidSteps} estEur=${est.estCostEur ?
   async function shipDocs() {
     if (stateDocBodies.length === 0) return;
     try {
-      const outcomes = await shipBackStateDocs(sdk, apiKey, loop2.slug, dir, stateDocBodies);
+      const outcomes = await shipBackStateDocs(sdk, apiKey, task.slug, dir, stateDocBodies);
       for (const o of outcomes) {
         if (o.outcome === "shipped") {
-          console.log(`Loop ${loop2.slug}: shipped back state doc '${o.key}'.`);
+          console.log(`Task ${task.slug}: shipped back state doc '${o.key}'.`);
         } else if (o.outcome === "refused" || o.outcome === "failed") {
-          console.error(`Loop ${loop2.slug}: state doc '${o.key}' ${o.outcome} \u2014 ${o.detail}`);
+          console.error(`Task ${task.slug}: state doc '${o.key}' ${o.outcome} \u2014 ${o.detail}`);
         }
       }
     } catch (err) {
       console.error(
-        `Loop ${loop2.slug}: state-doc ship-back failed: ${err instanceof Error ? err.message : String(err)}`
+        `Task ${task.slug}: state-doc ship-back failed: ${err instanceof Error ? err.message : String(err)}`
       );
     }
   }
   async function shipConstraints() {
     try {
+      const ownership = await resolveTaskOwnership(sdk, apiKey, task);
+      if (ownership.resolved && !ownership.isOwner) {
+        constraintsReport = { outcome: "skipped-not-owner", owner: ownership.createdBy };
+        console.log(
+          `Task ${task.slug}: ship-back skipped: this task is owned by ${ownership.createdBy}; your learnings stay in the run diary (and the member-scoped "learnings" document when declared)`
+        );
+        return;
+      }
       const constraintsPath = join24(dir, "CONSTRAINTS.md");
       const materializedConstraints = existsSync16(constraintsPath) ? readFileSync15(constraintsPath, "utf-8") : void 0;
       if (materializedConstraints === void 0) return;
-      const boot = loop2.constraintsMd ?? "";
+      const boot = task.constraintsMd ?? "";
       for (let attempt = 1; attempt <= 2; attempt++) {
-        const reread = await sdk.loops.get(apiKey, loopId);
+        const reread = await sdk.loops.get(apiKey, taskId);
         if (reread.status !== "ok") {
           constraintsReport = { outcome: "failed" };
           console.error(
-            `Loop ${loop2.slug}: ship-back ABORTED \u2014 could not re-read the record (${reread.error}). Refusing to merge against the stale boot snapshot; this fire's CONSTRAINTS.md is kept at ${constraintsPath} for recovery.`
+            `Task ${task.slug}: ship-back ABORTED \u2014 could not re-read the record (${reread.error}). Refusing to merge against the stale boot snapshot; this fire's CONSTRAINTS.md is kept at ${constraintsPath} for recovery.`
           );
           return;
         }
         const fresh = reread.loop.constraintsMd ?? "";
         const merged = mergeConstraints(boot, materializedConstraints, fresh);
         if (merged.refusal) {
-          const kept = preserveRefusedConstraints(loop2.slug, sessionId2, materializedConstraints, runRoot.root);
+          const kept = preserveRefusedConstraints(task.slug, sessionId2, materializedConstraints, runRoot.root);
           constraintsReport = { outcome: "refused", keptAt: kept.path ?? constraintsPath };
           console.error(
-            `Loop ${loop2.slug}: ${merged.refusal} This fire's constraints were NOT discarded: its folder is KEPT at ${dir}` + (kept.path ? `, and the refused document is copied to ${kept.path}.` : ` \u2014 but the durable copy could NOT be written (${kept.error}), so that folder is the only place it survives.`)
+            `Task ${task.slug}: ${merged.refusal} This fire's constraints were NOT discarded: its folder is KEPT at ${dir}` + (kept.path ? `, and the refused document is copied to ${kept.path}.` : ` \u2014 but the durable copy could NOT be written (${kept.error}), so that folder is the only place it survives.`)
           );
           return;
         }
         if (merged.next === void 0) return;
         if (!merged.cleanAppend && attempt === 1) {
           console.warn(
-            `Loop ${loop2.slug}: this fire edited existing constraints text, not only appended to it \u2014 shipping its own document. No section was lost (the shrink guard passed).`
+            `Task ${task.slug}: this fire edited existing constraints text, not only appended to it \u2014 shipping its own document. No section was lost (the shrink guard passed).`
+          );
+        }
+        const put = await sdk.loops.update(apiKey, taskId, { constraintsMd: merged.next });
+        if (put?.status !== "ok") {
+          if (isForbidden(put ?? { status: "nok" })) {
+            const owner = typeof task.createdBy === "string" ? task.createdBy : "someone else";
+            constraintsReport = { outcome: "skipped-not-owner", owner };
+            console.log(
+              `Task ${task.slug}: ship-back skipped: this task is owned by ${owner}; your learnings stay in the run diary`
+            );
+            return;
+          }
+          constraintsReport = { outcome: "failed" };
+          console.error(
+            `Task ${task.slug}: ship-back failed: the record refused the write (${put?.error ?? "unknown error"}). This fire's CONSTRAINTS.md is kept at ${constraintsPath} for recovery.`
           );
+          return;
         }
-        await sdk.loops.update(apiKey, loopId, { constraintsMd: merged.next });
-        const after = await sdk.loops.get(apiKey, loopId);
+        const after = await sdk.loops.get(apiKey, taskId);
         if (after.status !== "ok") {
-          console.warn(`Loop ${loop2.slug}: shipped back, but could not verify it landed.`);
+          console.warn(`Task ${task.slug}: shipped back, but could not verify it landed.`);
           return;
         }
         const afterText = after.loop.constraintsMd ?? "";
@@ -128309,28 +128594,28 @@ blast_radius: steps=${est.steps} paid=${est.paidSteps} estEur=${est.estCostEur ?
           constraintsReport = { outcome: "shipped" };
           if (merged.added.length > 0) {
             console.log(
-              `Loop ${loop2.slug}: shipped back ${merged.added.length} new constraints section(s).`
+              `Task ${task.slug}: shipped back ${merged.added.length} new constraints section(s).`
             );
           } else {
-            console.log(`Loop ${loop2.slug}: shipped back a constraints rewrite (no new sections).`);
+            console.log(`Task ${task.slug}: shipped back a constraints rewrite (no new sections).`);
           }
           return;
         }
         if (attempt === 2) {
           constraintsReport = { outcome: "failed" };
           console.error(
-            `Loop ${loop2.slug}: ship-back RACED and could not be repaired \u2014 ${missing.length} section(s) did not survive a concurrent write: ${missing.join(", ")}. They remain at ${constraintsPath}.`
+            `Task ${task.slug}: ship-back RACED and could not be repaired \u2014 ${missing.length} section(s) did not survive a concurrent write: ${missing.join(", ")}. They remain at ${constraintsPath}.`
           );
           return;
         }
         console.warn(
-          `Loop ${loop2.slug}: a concurrent write clobbered ${missing.length} of our sections; retrying the merge.`
+          `Task ${task.slug}: a concurrent write clobbered ${missing.length} of our sections; retrying the merge.`
         );
       }
     } catch (err) {
       constraintsReport = { outcome: "failed" };
       console.error(
-        `Loop ${loop2.slug}: ship-back failed: ${err instanceof Error ? err.message : String(err)}`
+        `Task ${task.slug}: ship-back failed: ${err instanceof Error ? err.message : String(err)}`
       );
     }
   }
@@ -128344,7 +128629,7 @@ blast_radius: steps=${est.steps} paid=${est.paidSteps} estEur=${est.estCostEur ?
     void Promise.race([shipBackConstraints().then(() => "shipped"), deadline]).then((outcome) => {
       if (outcome === "timeout") {
         console.error(
-          `Loop ${loop2.slug}: the ship-back did not finish within ${SHIPBACK_SIGNAL_TIMEOUT_MS}ms of the signal \u2014 exiting anyway so the shutdown is not held open. Nothing was discarded: this fire's rules remain at ${join24(dir, "CONSTRAINTS.md")}, and any state doc that did not get shipped remains beside it in ${dir}. The next fire can recover them by hand from there \u2014 nothing in the CLI reads a prior fire's folder automatically. \u26D4 Constraints are shipped FIRST, so the state docs are the likelier victim of this deadline \u2014 though a constraints ship-back that alone exceeds it truncates the rules too.`
+          `Task ${task.slug}: the ship-back did not finish within ${SHIPBACK_SIGNAL_TIMEOUT_MS}ms of the signal \u2014 exiting anyway so the shutdown is not held open. Nothing was discarded: this fire's rules remain at ${join24(dir, "CONSTRAINTS.md")}, and any state doc that did not get shipped remains beside it in ${dir}. The next fire can recover them by hand from there \u2014 nothing in the CLI reads a prior fire's folder automatically. \u26D4 Constraints are shipped FIRST, so the state docs are the likelier victim of this deadline \u2014 though a constraints ship-back that alone exceeds it truncates the rules too.`
         );
       }
     }).finally(() => process.exit(130));
@@ -128363,8 +128648,8 @@ blast_radius: steps=${est.steps} paid=${est.paidSteps} estEur=${est.estCostEur ?
   heartbeat.stop();
   dashboard?.close();
   const accounted = recordFireAccounting({
-    loopDir: dir,
-    loopSlug: loop2.slug,
+    runDir: dir,
+    taskSlug: task.slug,
     sessionId: sessionId2,
     cwd: launch.cwd,
     exitCode,
@@ -128372,8 +128657,8 @@ blast_radius: steps=${est.steps} paid=${est.paidSteps} estEur=${est.estCostEur ?
   });
   if (!accounted) {
     recordFailedLaunch({
-      loopDir: dir,
-      loopSlug: loop2.slug,
+      runDir: dir,
+      taskSlug: task.slug,
       sessionId: sessionId2,
       reason: spawnError ? `spawn failed: ${spawnError}` : `the fire produced no transcript (exit ${exitCode}) \u2014 it never started`,
       exitCode,
@@ -128388,7 +128673,7 @@ blast_radius: steps=${est.steps} paid=${est.paidSteps} estEur=${est.estCostEur ?
   if (clean2) {
     if (constraintsReport.outcome === "refused") {
       console.log(
-        `Loop ${loop2.slug}: folder KEPT at ${dir} \u2014 the constraints ship-back was refused, so this fire's rules exist nowhere else. Recovery copy: ${constraintsReport.keptAt}.`
+        `Task ${task.slug}: folder KEPT at ${dir} \u2014 the constraints ship-back was refused, so this fire's rules exist nowhere else. Recovery copy: ${constraintsReport.keptAt}.`
       );
       return { status: "clean", dir, shipBack: constraintsReport };
     }
@@ -128398,24 +128683,24 @@ blast_radius: steps=${est.steps} paid=${est.paidSteps} estEur=${est.estCostEur ?
   return { status: "dirty", dir, shipBack: constraintsReport };
 }
 
-// src/loops/show.ts
+// src/tasks/show.ts
 init_esm_shims();
-function formatLoopFiles(loop2) {
+function formatTaskFiles(task) {
   const section = (title, body) => `
 ===== ${title} =====
 ${(body ?? "").trim() || "(empty)"}
 `;
-  return `Loop: ${loop2.slug} (${loop2.id})
-` + section("SKILL.md", loop2.markdownBody) + section("VISION.md", loop2.visionMd) + section("CONSTRAINTS.md", loop2.constraintsMd) + section("README.md", loop2.readmeMd) + section("stateDocs", formatMemoryManifest(loop2.stateDocs));
+  return `Task: ${task.slug} (${task.id})
+` + section("SKILL.md", task.markdownBody) + section("VISION.md", task.visionMd) + section("CONSTRAINTS.md", task.constraintsMd) + section("README.md", task.readmeMd) + section("stateDocs", formatMemoryManifest(task.stateDocs));
 }
-async function showLoop(loopId) {
+async function showTask(taskId) {
   const { sdk, apiKey } = await getCliSdk();
-  const got = await sdk.loops.get(apiKey, loopId);
-  if (got.status !== "ok") throw new Error(`loop not found: ${got.error}`);
-  console.log(formatLoopFiles(got.loop));
+  const got = await sdk.loops.get(apiKey, taskId);
+  if (got.status !== "ok") throw new Error(`task not found: ${got.error}`);
+  console.log(formatTaskFiles(got.loop));
 }
 
-// src/loops/schedule.ts
+// src/tasks/schedule.ts
 init_esm_shims();
 init_paths();
 import { writeFileSync as writeFileSync13, mkdirSync as mkdirSync12, rmSync as rmSync3, existsSync as existsSync17, readdirSync as readdirSync6, readFileSync as readFileSync16, accessSync as accessSync4, constants as constants4 } from "fs";
@@ -128431,7 +128716,7 @@ var LOOP_KIND = {
     return args;
   },
   stateDir(slug, cwd) {
-    return join25(cwd, `.ametyst${ENV_SUFFIX}`, "loops", safeSlug2(slug, this.noun), ".state");
+    return join25(cwd, `.ametyst${ENV_SUFFIX}`, LEGACY_RUNS_SEGMENT, safeSlug2(slug, this.noun), ".state");
   }
 };
 var TASK_KIND = {
@@ -128440,10 +128725,11 @@ var TASK_KIND = {
   buildRunCmd(slug, opts) {
     const args = [process.execPath, process.argv[1], "task", "run", slug];
     if (opts.maxBudgetUsd != null) args.push("--max-budget-usd", String(opts.maxBudgetUsd));
+    if (typeof opts.input === "string" && opts.input.trim() !== "") args.push("--input", opts.input);
     return args;
   },
   stateDir(slug, cwd) {
-    return join25(cwd, `.ametyst${ENV_SUFFIX}`, "loops", safeSlug2(slug, this.noun), ".state");
+    return join25(cwd, `.ametyst${ENV_SUFFIX}`, RUNS_SEGMENT, safeSlug2(slug, this.noun), ".state");
   }
 };
 var COMPOUND_KIND = {
@@ -128564,11 +128850,11 @@ function cadenceLabel(opts) {
 function escapeXml(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
-function shellQuote2(s) {
+function shellQuote3(s) {
   return `'${s.replace(/'/g, `'\\''`)}'`;
 }
 function shellArg(s) {
-  return /^[A-Za-z0-9_@+=:,./-]+$/.test(s) ? s : shellQuote2(s);
+  return /^[A-Za-z0-9_@+=:,./-]+$/.test(s) ? s : shellQuote3(s);
 }
 function cronEscapePercent(s) {
   return s.replace(/%/g, "\\%");
@@ -128653,6 +128939,10 @@ function schedule(kind, slug, opts = {}) {
     const why = (resolved.rejected ?? []).map((r) => `${r.dir}: ${r.why}`).join("; ");
     console.warn(`\u26A0\uFE0F  the job will run in ${cwd} \u2014 the current folder cannot host a run (${why}).`);
   }
+  if (kind === TASK_KIND) {
+    const legacyHint = legacyRunFolderHint(slug, cwd);
+    if (legacyHint) console.warn(legacyHint);
+  }
   const procEnv = opts.env ?? process.env;
   const envPath = procEnv.PATH ?? "";
   const model = resolveScheduledModel(opts, home, procEnv);
@@ -128704,9 +128994,9 @@ launchctl said: ${loaded.output.trim()}` : "")
   if (model) cronEnv.ANTHROPIC_MODEL = model;
   Object.assign(cronEnv, extraEnv);
   const effectiveCronModel = cronEnv.ANTHROPIC_MODEL;
-  const envPrefix = Object.entries(cronEnv).map(([k, v]) => `${k}=${shellQuote2(v)}`).join(" ");
+  const envPrefix = Object.entries(cronEnv).map(([k, v]) => `${k}=${shellQuote3(v)}`).join(" ");
   const cmd = launcherArgv(args, stateDir).map(shellArg).join(" ");
-  const command = cronEscapePercent(`cd ${shellQuote2(cwd)} && ${envPrefix} ${cmd}`);
+  const command = cronEscapePercent(`cd ${shellQuote3(cwd)} && ${envPrefix} ${cmd}`);
   const line = `${cronField(opts)} ${command}  # ${lbl}`;
   const kept = stripLabel(readCrontab(), lbl);
   kept.push(line);
@@ -128750,6 +129040,60 @@ function plistEnvKeys(xml) {
   if (close < 0) return [];
   return [...xml.slice(open, close).matchAll(/<key>([^<]*)<\/key>/g)].map((m) => unescapeXml(m[1]));
 }
+function plistProgramArguments(xml) {
+  const anchor = xml.indexOf("<key>ProgramArguments</key>");
+  if (anchor < 0) return [];
+  const open = xml.indexOf("<array>", anchor);
+  if (open < 0) return [];
+  const close = xml.indexOf("</array>", open);
+  if (close < 0) return [];
+  return [...xml.slice(open, close).matchAll(/<string>([^<]*)<\/string>/g)].map((m) => unescapeXml(m[1]));
+}
+function cronCommandArgv(line) {
+  const words = shellWords(line);
+  const cd = words.indexOf("cd");
+  const amp = words.indexOf("&&", cd >= 0 ? cd + 2 : 0);
+  if (amp < 0) return [];
+  let i = amp + 1;
+  while (i < words.length && /^[A-Za-z_][A-Za-z0-9_]*=/.test(words[i])) i++;
+  const argv = [];
+  for (; i < words.length; i++) {
+    if (words[i] === "#") break;
+    argv.push(words[i].replace(/\\%/g, "%"));
+  }
+  return argv;
+}
+function parseScheduledArgs(argv) {
+  const out = {};
+  const valueOf = (i, flag) => {
+    const w = argv[i];
+    if (w === flag) return argv[i + 1];
+    if (w.startsWith(`${flag}=`)) return w.slice(flag.length + 1);
+    return void 0;
+  };
+  for (let i = 0; i < argv.length; i++) {
+    const input = valueOf(i, "--input");
+    if (input !== void 0) out.input = input;
+    const budget = valueOf(i, "--max-budget-usd");
+    if (budget !== void 0) {
+      const n = Number(budget);
+      if (Number.isFinite(n)) out.maxBudgetUsd = n;
+    }
+  }
+  return out;
+}
+var SCHEDULE_INPUT_DISPLAY_MAX = 60;
+function formatScheduleEntryLine(e) {
+  const parts2 = [e.namespace, e.slug];
+  if (typeof e.args.input === "string") {
+    const flat = e.args.input.replace(/\s+/g, " ").trim();
+    const shown = flat.length > SCHEDULE_INPUT_DISPLAY_MAX ? `${flat.slice(0, SCHEDULE_INPUT_DISPLAY_MAX)}\u2026` : flat;
+    parts2.push(`input: "${shown}"`);
+  }
+  if (typeof e.args.maxBudgetUsd === "number") parts2.push(`budget: $${e.args.maxBudgetUsd}`);
+  parts2.push(`env: ${e.envKeys.length ? e.envKeys.join(", ") : "\u2014"}`);
+  return parts2.join("  ");
+}
 function shellWords(s) {
   const out = [];
   let i = 0;
@@ -128798,17 +129142,22 @@ function listEntries(kind, opts = {}) {
     return readdirSync6(dir).filter((f) => f.startsWith(prefix) && f.endsWith(".plist")).map((f) => {
       const slug = f.slice(prefix.length, -".plist".length);
       let envKeys = [];
+      let args = {};
       try {
-        envKeys = plistEnvKeys(String(readFileSync16(join25(dir, f), "utf-8")));
+        const xml = String(readFileSync16(join25(dir, f), "utf-8"));
+        envKeys = plistEnvKeys(xml);
+        args = parseScheduledArgs(plistProgramArguments(xml));
       } catch {
         envKeys = [];
+        args = {};
       }
-      return { slug, envKeys: [...envKeys].sort() };
+      return { slug, envKeys: [...envKeys].sort(), args };
     });
   }
   return readCrontab().split("\n").filter((l) => l.includes(`# ${prefix}`)).map((l) => ({
     slug: l.trimEnd().slice(l.trimEnd().lastIndexOf(prefix) + prefix.length),
-    envKeys: cronEnvKeys(l).sort()
+    envKeys: cronEnvKeys(l).sort(),
+    args: parseScheduledArgs(cronCommandArgv(l))
   }));
 }
 function scheduleTask(slug, opts = {}) {
@@ -128845,114 +129194,14 @@ function unscheduleEverywhere(slug, opts = {}) {
   }
   return removed;
 }
-function scheduleLoop(slug, opts = {}) {
-  return schedule(LOOP_KIND, slug, opts);
-}
-function unscheduleLoop(slug, opts = {}) {
-  unschedule(LOOP_KIND, slug, opts);
-}
-function listScheduleEntries(opts = {}) {
-  return listEntries(LOOP_KIND, opts);
-}
-function scheduleCompound(slug, opts = {}) {
-  return schedule(COMPOUND_KIND, slug, opts);
-}
-function unscheduleCompound(slug, opts = {}) {
-  unschedule(COMPOUND_KIND, slug, opts);
-}
-function listCompoundSchedules(opts = {}) {
-  return list(COMPOUND_KIND, opts);
-}
-
-// src/commands/task-verbs.ts
-init_esm_shims();
-
-// src/compounds/index.ts
-init_esm_shims();
-
-// src/compounds/run.ts
-init_esm_shims();
-import { spawn as spawn3 } from "child_process";
-
-// src/compounds/launch.ts
-init_esm_shims();
-function buildCompoundLaunchArgs(body, opts = {}, slug) {
-  const maxBudget = resolveCompoundMaxBudgetUsd(opts);
-  const prompt = `You are running the Ametyst compound skill${slug ? ` "${slug}"` : ""} headless and unattended.
-
-Follow these instructions exactly, then STOP (a compound is a one-shot skill \u2014 run it once, do not loop):
-
-${body}
-
-For any step that costs money, use the Ametyst \`spend\` MCP tool (the on-chain policy enforces the budget) \u2014 do NOT invent another payment path. When you have completed the instructions, exit.`;
-  const args = [
-    "-p",
-    prompt,
-    "--dangerously-skip-permissions",
-    "--add-dir",
-    process.cwd()
-  ];
-  if (maxBudget !== void 0) {
-    args.push("--max-budget-usd", String(maxBudget));
-  }
-  args.push("--settings", '{"env":{"ENABLE_TOOL_SEARCH":"false"}}');
-  return {
-    cmd: "claude",
-    args,
-    cwd: process.cwd()
-  };
-}
-function resolveCompoundMaxBudgetUsd(opts, env = process.env) {
-  if (opts.maxBudgetUsd !== void 0) return opts.maxBudgetUsd;
-  const raw = env.AMETYST_COMPOUND_MAX_BUDGET_USD;
-  if (raw === void 0 || raw.trim() === "") return void 0;
-  const n = Number(raw);
-  return Number.isFinite(n) ? n : void 0;
-}
-
-// src/compounds/run.ts
-function killTree2(pid) {
-  try {
-    process.kill(-pid, "SIGTERM");
-  } catch {
-  }
-  setTimeout(() => {
-    try {
-      process.kill(-pid, "SIGKILL");
-    } catch {
-    }
-  }, 2e3).unref?.();
-}
-async function runCompound(compoundId, opts = {}) {
-  const { sdk, apiKey } = await getCliSdk();
-  const got = await sdk.compoundedSkills.get(apiKey, compoundId);
-  if (got.status !== "ok") throw new Error(`compound not found: ${got.error}`);
-  const compound = got.skill;
-  const launch = buildCompoundLaunchArgs(compound.markdownBody ?? "", opts, compound.slug);
-  const child = spawn3(launch.cmd, launch.args, { cwd: launch.cwd, stdio: "inherit", detached: true });
-  const onSignal = () => {
-    if (child.pid) killTree2(child.pid);
-    process.exit(130);
-  };
-  process.on("SIGINT", onSignal);
-  process.on("SIGTERM", onSignal);
-  const exitCode = await new Promise((resolve3) => {
-    child.on("exit", (code) => resolve3(code ?? 1));
-    child.on("error", () => resolve3(1));
-  });
-  process.off("SIGINT", onSignal);
-  process.off("SIGTERM", onSignal);
-  if (child.pid) killTree2(child.pid);
-  return { exitCode };
-}
 
-// src/compounds/push.ts
+// src/tasks/push.ts
 init_esm_shims();
-async function pushCompoundFromFile(filePath, opts) {
+async function pushTaskFromFile(filePath, opts) {
   const slug = (opts.slug ?? "").trim();
   const descriptionShort = (opts.descriptionShort ?? "").trim();
-  if (!slug) throw new Error("A --slug is required to push a compound.");
-  if (!descriptionShort) throw new Error("A --description is required to push a compound.");
+  if (!slug) throw new Error("A --slug is required to push a task.");
+  if (!descriptionShort) throw new Error("A --description is required to push a task.");
   const markdownBody = readMarkdownFile(filePath);
   let graphJson = {};
   if (opts.graphJson && opts.graphJson.trim()) {
@@ -128967,23 +129216,20 @@ async function pushCompoundFromFile(filePath, opts) {
   if (opts.category && opts.category.trim()) body.category = opts.category.trim();
   const { sdk, apiKey } = await getCliSdk();
   const id = opts.id && opts.id.trim() ? opts.id.trim() : void 0;
-  const res = id ? await sdk.compoundedSkills.update(apiKey, id, body) : await sdk.compoundedSkills.create(apiKey, body);
+  const res = id ? await sdk.tasks.update(apiKey, id, body) : await sdk.tasks.create(apiKey, body);
   if (res.status !== "ok") {
     throw new Error(`push failed: ${res.error ?? "unknown error"}${res.code ? ` (${res.code})` : ""}`);
   }
-  return { mode: id ? "modified" : "created", compound: res.skill };
+  return { mode: id ? "modified" : "created", task: res.task };
 }
 
 // src/commands/task-verbs.ts
-function warnDeprecated(oldInvocation, newInvocation) {
-  console.warn(
-    `\u26A0\uFE0F  \`ametyst ${oldInvocation}\` is DEPRECATED and still works unchanged \u2014 use \`ametyst ${newInvocation}\`.`
-  );
-}
+init_esm_shims();
 async function runTaskVerb(id, opts, flavor) {
-  const r = await runLoop(id, {
+  const r = await runTask(id, {
     maxBudgetUsd: opts.maxBudgetUsd,
-    maxConcurrentFires: opts.maxConcurrentFires
+    maxConcurrentFires: opts.maxConcurrentFires,
+    input: opts.input
   });
   console.log(
     r.status === "clean" ? cleanFinishLine(flavor.noun, r.shipBack) : r.status === "skipped" ? "\u23ED\uFE0F  nothing launched; the concurrency ceiling is already filled by live fires." : `\u23F8\uFE0F  ${flavor.noun} paused; this fire's folder kept for resume at ${r.dir}.`
@@ -128999,15 +129245,17 @@ function cleanFinishLine(noun, shipBack) {
       return `\u2705 ${noun} completed; the ship-back did NOT complete (see the error above), and this fire's folder is cleaned up.`;
     case "shipped":
       return `\u2705 ${noun} completed; improvements shipped back and this fire's folder cleaned up.`;
+    case "skipped-not-owner":
+      return `\u2705 ${noun} completed; ship-back skipped \u2014 this task is owned by ${shipBack.owner ?? "someone else"}, so your learnings stay in the run diary; this fire's folder is cleaned up.`;
   }
 }
 async function showTaskVerb(id) {
-  await showLoop(id);
+  await showTask(id);
 }
 async function pushTaskVerb(path2, opts, flavor) {
   try {
-    const r = await pushCompoundFromFile(path2, opts);
-    const c = r.compound;
+    const r = await pushTaskFromFile(path2, opts);
+    const c = r.task;
     console.log(`\u2705 ${flavor.noun} ${r.mode}: ${c?.slug ?? opts.slug}${c?.id ? ` (${c.id})` : ""}`);
   } catch (err) {
     console.error(`\u274C ${err instanceof Error ? err.message : String(err)}`);
@@ -129019,8 +129267,8 @@ function warnDoubleArm(noun, slug, found) {
   const where = found.map((f) => `${f.namespace} (${f.label})`).join(", ");
   console.warn(
     `\u26A0\uFE0F  ALREADY SCHEDULED ELSEWHERE \u2014 ${slug} is armed under: ${where}.
-   Arming it here ADDS a SECOND job (xyz.ametyst.${noun}.${slug}) alongside it: launchd's singleton is per label, so the old job keeps firing and ${slug} runs TWICE per interval \u2014 both jobs writing into the same loops/${slug}/.state/launchd.out.log, whose ledger line names neither, so the duplicate ticks cannot be attributed.
-   Nothing has been removed. To arm it ONCE, run \`ametyst task unschedule ${slug}\` (it removes the slug from EVERY namespace \u2014 task, loop and compound) and schedule it again.`
+   Arming it here ADDS a SECOND job (xyz.ametyst.${noun}.${slug}) alongside it: launchd's singleton is per label, so the old job keeps firing and ${slug} runs TWICE per interval \u2014 each job writing its own launchd.out.log (the legacy one under loops/${slug}/.state/, this one under tasks/${slug}/.state/) with a ledger line that names neither, so the duplicate ticks cannot be attributed.
+   Nothing has been removed. To arm it ONCE, run \`ametyst task unschedule ${slug}\` (it removes the slug from EVERY label namespace, the legacy ones included) and schedule it again.`
   );
 }
 function scheduleTaskVerb(slug, opts, flavor) {
@@ -129052,14 +129300,21 @@ function scheduleTaskVerb(slug, opts, flavor) {
 // src/commands/task.ts
 var TASK = { noun: "task" };
 var taskCommand = new Command("task").description(
-  "Manage and run Ametyst tasks \u2014 the unified surface over what used to be compounds and loops"
+  "Manage and run Ametyst tasks \u2014 publish, run, show, schedule and sync them, and read their memory"
 );
 taskCommand.command("run <id>").description(
-  "Materialize a task and run it headless, then ship back improvements on clean exit. While it runs, the task's dashboard (if it has one) is served on http://localhost:4477 (base port: AMETYST_LOOP_DASHBOARD_PORT, walking up when taken) and opened in the browser once when stdout is a TTY (set AMETYST_DASHBOARD_NO_OPEN=1 to skip)"
-).option("--max-budget-usd <x>", "hard spend ceiling in USD", (v) => Number(v)).option(
+  "Materialize a task and run it headless, then ship back improvements on clean exit. While it runs, the task's dashboard (if it has one) is served on http://localhost:4477 (base port: AMETYST_TASK_DASHBOARD_PORT, walking up when taken) and opened in the browser once when stdout is a TTY (set AMETYST_DASHBOARD_NO_OPEN=1 to skip)"
+).option(
+  "--max-budget-usd <x>",
+  "cap on the MODEL's token spend for this headless run (forwarded to claude -p); merchant payments are bounded by your on-chain policy, not by this flag",
+  (v) => Number(v)
+).option(
   "--max-concurrent-fires <n>",
-  "ceiling on simultaneously-live fires of this task; 0 = unlimited (default: AMETYST_LOOP_MAX_CONCURRENT_FIRES, else 6)",
+  "ceiling on simultaneously-live fires of this task; 0 = unlimited (default: AMETYST_TASK_MAX_CONCURRENT_FIRES, else 6)",
   (v) => Number(v)
+).option(
+  "--input <text>",
+  `the user's arguments for this run, exactly as they would type them in chat (e.g. "run it on skyfire.com, cap $5"); reaches the task as AMETYST_TASK_INPUT and as a LAUNCH INPUT block in its instructions`
 ).action((id, opts) => runTaskVerb(id, opts, TASK));
 taskCommand.command("show <id>").description(
   "Print a task's stored files (SKILL/VISION/CONSTRAINTS/README) from Ametyst without running it"
@@ -129084,11 +129339,14 @@ taskCommand.command("push <path>").description("Publish a task whose body is rea
 );
 taskCommand.command("schedule <slug>").description("Schedule a headless task run (launchd on macOS, crontab on Linux)").option("--at <hhmm>", "daily run time, 24h HH:MM (e.g. 02:30)").option("--every <dur>", "recurring interval, e.g. 30m, 1h, 1d").option(
   "--max-budget-usd <x>",
-  "optional hard spend ceiling per run in USD (opt-in; omitted by default)",
+  "cap on the MODEL's token spend for this headless run (forwarded to claude -p); merchant payments are bounded by your on-chain policy, not by this flag (opt-in; omitted by default)",
   (v) => Number(v)
 ).option(
   "--model <id>",
   "model to pin the scheduled fires to (default: ANTHROPIC_MODEL, else your Claude Code default at schedule time)"
+).option(
+  "--input <text>",
+  "the user's arguments for EVERY scheduled fire, persisted on the job's command line (same as `task run --input`)"
 ).option(
   "--env <KEY=VALUE>",
   "extra environment baked into the scheduled job; repeatable, and merged LAST so it wins over PATH/HOME/ANTHROPIC_MODEL",
@@ -129109,24 +129367,39 @@ taskCommand.command("schedule <slug>").description("Schedule a headless task run
   })
 );
 taskCommand.command("unschedule <slug>").description(
-  "Remove a task's schedule \u2014 from EVERY label namespace it is armed in (task, loop, compound), so a job scheduled before `ametyst task` existed is still removable"
+  "Remove a task's schedule \u2014 from EVERY label namespace it is armed in, the legacy ones an older cli used included, so a job scheduled before `ametyst task` existed is still removable"
 ).action((slug) => {
   const removed = unscheduleEverywhere(slug);
   if (removed.length === 0) {
-    console.log(`\u2139\uFE0F  nothing scheduled for ${slug} \u2014 no task, loop or compound job was armed.`);
+    console.log(`\u2139\uFE0F  nothing scheduled for ${slug} \u2014 no job was armed under any label namespace.`);
     return;
   }
   console.log(`\u{1F5D1}\uFE0F  unscheduled ${slug} (${removed.join(", ")})`);
 });
 taskCommand.command("schedules").description(
-  "List every scheduled job and the environment each armed job carries \u2014 across the task, loop and compound label namespaces"
+  "List every scheduled job and the environment each armed job carries \u2014 across every label namespace, the legacy ones an older cli used included"
 ).action(() => {
   const entries = listAllScheduleEntries();
-  console.log(
-    entries.length ? entries.map(
-      (e) => `${e.namespace}  ${e.slug}  env: ${e.envKeys.length ? e.envKeys.join(", ") : "\u2014"}`
-    ).join("\n") : "no scheduled tasks"
-  );
+  console.log(entries.length ? entries.map(formatScheduleEntryLine).join("\n") : "no scheduled tasks");
+});
+taskCommand.command("sync-skills").description(
+  "Write a local pointer skill per published task into the host agent's skills directory \u2014 .claude/skills/<slug>/SKILL.md for Claude, .codex/skills/<slug>/SKILL.md for Codex (restores /-slash-command invocation in file-based hosts)"
+).option("--global", "write to the home-dir root (~/.claude/skills | ~/.codex/skills) instead of the project-local one").option(
+  "--target <target>",
+  "host agent skills dir to sync: claude | codex | both (default: auto \u2014 every host detected as present; none detected falls back to claude)"
+).action(async (opts) => {
+  try {
+    const targets = resolveSyncSkillsCliTargets(opts.target);
+    for (const target of targets) {
+      const r = await syncSkills({ global: opts.global, target });
+      console.log(
+        `\u2705 sync-skills [${target}]: ${r.written} written, ${r.pruned} pruned${r.skipped.length ? `, ${r.skipped.length} skipped (unmanaged): ${r.skipped.join(", ")}` : ""} \u2192 ${r.root}${r.fallback ? ` (fallback to the home root: ${r.fallback.why}; project-local ${r.fallback.from} was not used)` : ""}`
+      );
+    }
+  } catch (err) {
+    console.error(`\u274C ${err instanceof Error ? err.message : String(err)}`);
+    process.exitCode = 1;
+  }
 });
 function runVerb(fn) {
   fn().catch((err) => {
@@ -129159,130 +129432,6 @@ memoryCommand.command("attach <slug>", { hidden: true }).allowUnknownOption(true
 );
 taskCommand.addCommand(memoryCommand);
 
-// src/commands/loop.ts
-init_esm_shims();
-var LOOP = { noun: "loop" };
-var loopCommand = new Command("loop").description(
-  "DEPRECATED alias of `ametyst task` \u2014 manage and run Ametyst loops (still works unchanged)"
-);
-loopCommand.command("run <id>").description(
-  "DEPRECATED \u2014 use `ametyst task run`. Materialize a loop and run it headless, then ship back improvements on clean exit"
-).option("--max-budget-usd <x>", "hard spend ceiling in USD", (v) => Number(v)).option(
-  "--max-concurrent-fires <n>",
-  "ceiling on simultaneously-live fires of this loop; 0 = unlimited (default: AMETYST_LOOP_MAX_CONCURRENT_FIRES, else 6)",
-  (v) => Number(v)
-).action((id, opts) => {
-  warnDeprecated("loop run", "task run");
-  return runTaskVerb(id, opts, LOOP);
-});
-loopCommand.command("show <id>").description(
-  "DEPRECATED \u2014 use `ametyst task show`. Print a loop's stored files (SKILL/VISION/CONSTRAINTS/README) from Ametyst without running it"
-).action((id) => {
-  warnDeprecated("loop show", "task show");
-  return showTaskVerb(id);
-});
-loopCommand.command("schedule <slug>").description(
-  "DEPRECATED \u2014 use `ametyst task schedule`. Schedule a headless loop run (launchd on macOS, crontab on Linux)"
-).option("--at <hhmm>", "daily run time, 24h HH:MM (e.g. 02:30)").option("--every <dur>", "recurring interval, e.g. 30m, 1h, 1d").option("--max-budget-usd <x>", "optional hard spend ceiling per run in USD (opt-in; omitted by default)", (v) => Number(v)).option("--model <id>", "model to pin the scheduled fires to (default: ANTHROPIC_MODEL, else your Claude Code default at schedule time)").option(
-  "--env <KEY=VALUE>",
-  "extra environment baked into the scheduled job; repeatable, and merged LAST so it wins over PATH/HOME/ANTHROPIC_MODEL",
-  (v, prev = []) => [...prev, v],
-  []
-).action((slug, opts) => {
-  warnDeprecated("loop schedule", "task schedule");
-  scheduleTaskVerb(slug, opts, { ...LOOP, arm: scheduleLoop });
-});
-loopCommand.command("unschedule <slug>").description(
-  "DEPRECATED \u2014 use `ametyst task unschedule` (which also removes jobs armed under the loop/compound labels). Remove a loop's schedule"
-).action((slug) => {
-  warnDeprecated("loop unschedule", "task unschedule");
-  unscheduleLoop(slug);
-  console.log(`\u{1F5D1}\uFE0F  unscheduled loop ${slug}`);
-});
-loopCommand.command("schedules").description(
-  "DEPRECATED \u2014 use `ametyst task schedules` (which also lists jobs armed under the loop/compound labels). List scheduled loops and the environment each armed job carries"
-).action(() => {
-  warnDeprecated("loop schedules", "task schedules");
-  const entries = listScheduleEntries();
-  console.log(
-    entries.length ? entries.map((e) => `${e.slug}  env: ${e.envKeys.length ? e.envKeys.join(", ") : "\u2014"}`).join("\n") : "no scheduled loops"
-  );
-});
-
-// src/commands/compound.ts
-init_esm_shims();
-var COMPOUND = { noun: "compound" };
-var compoundCommand = new Command("compound").description(
-  "DEPRECATED alias-era group \u2014 prefer `ametyst task`. Run Ametyst compound skills (still works unchanged)"
-);
-compoundCommand.command("push <path>").description("DEPRECATED \u2014 use `ametyst task push`. Publish a compound whose body is read verbatim (byte-for-byte) from a local markdown file").requiredOption("--slug <slug>", "URL-safe unique slug for the compound").requiredOption("--description <text>", "one-line description of what the compound does").option("--category <category>", "free-text category for browsing/filtering").option("--graph-json <json>", "JSON string of the canvas node graph (defaults to {})").option("--id <id>", "MODIFY the existing compound with this id instead of creating a new one").option(
-  "--draft <bool>",
-  "draft state: 'true' to keep as draft (default on create), 'false' to publish",
-  (v) => v === "true" || v === "1" || v === "yes"
-).action(
-  (path2, opts) => {
-    warnDeprecated("compound push", "task push");
-    return pushTaskVerb(
-      path2,
-      {
-        slug: opts.slug,
-        descriptionShort: opts.description,
-        category: opts.category,
-        graphJson: opts.graphJson,
-        id: opts.id,
-        draft: opts.draft
-      },
-      COMPOUND
-    );
-  }
-);
-compoundCommand.command("sync-skills").description(
-  "Write a local pointer skill per published compound/loop into the host agent's skills directory \u2014 .claude/skills/<slug>/SKILL.md for Claude, .codex/skills/<slug>/SKILL.md for Codex (restores /-slash-command invocation in file-based hosts)"
-).option("--global", "write to the home-dir root (~/.claude/skills | ~/.codex/skills) instead of the project-local one").option(
-  "--target <target>",
-  "host agent skills dir to sync: claude | codex | both (default: auto \u2014 every host detected as present; none detected falls back to claude)"
-).action(async (opts) => {
-  try {
-    const targets = resolveSyncSkillsCliTargets(opts.target);
-    for (const target of targets) {
-      const r = await syncSkills({ global: opts.global, target });
-      console.log(
-        `\u2705 sync-skills [${target}]: ${r.written} written, ${r.pruned} pruned${r.skipped.length ? `, ${r.skipped.length} skipped (unmanaged): ${r.skipped.join(", ")}` : ""} \u2192 ${r.root}${r.fallback ? ` (fallback to the home root: ${r.fallback.why}; project-local ${r.fallback.from} was not used)` : ""}`
-      );
-    }
-  } catch (err) {
-    console.error(`\u274C ${err instanceof Error ? err.message : String(err)}`);
-    process.exitCode = 1;
-  }
-});
-compoundCommand.command("run <id>").description(
-  "DEPRECATED \u2014 prefer `ametyst task run`, which materializes the task's definition files and ships constraints back. This one-shot runner is kept UNCHANGED: it runs the compound body with no folder, no STATUS and no ship-back"
-).option("--max-budget-usd <x>", "optional hard spend ceiling in USD (opt-in; omitted by default)", (v) => Number(v)).option("--dangerously-skip-permissions", "run fully unattended (already implied for compounds)").action(async (id, opts) => {
-  warnDeprecated("compound run", "task run");
-  const r = await runCompound(id, { maxBudgetUsd: opts.maxBudgetUsd });
-  console.log(
-    r.exitCode === 0 ? "\u2705 compound completed." : `\u26A0\uFE0F  compound exited with code ${r.exitCode}.`
-  );
-});
-compoundCommand.command("schedule <slug>").description("DEPRECATED \u2014 use `ametyst task schedule`. Schedule a headless compound run (launchd on macOS, crontab on Linux)").option("--at <hhmm>", "daily run time, 24h HH:MM (e.g. 02:30)").option("--every <dur>", "recurring interval, e.g. 30m, 1h, 1d").option("--max-budget-usd <x>", "optional hard spend ceiling per run in USD (opt-in; omitted by default)", (v) => Number(v)).option("--model <id>", "model to pin the scheduled fires to (default: ANTHROPIC_MODEL, else your Claude Code default at schedule time)").action((slug, opts) => {
-  warnDeprecated("compound schedule", "task schedule");
-  scheduleTaskVerb(slug, opts, { ...COMPOUND, arm: scheduleCompound });
-});
-compoundCommand.command("unschedule <slug>").description(
-  "DEPRECATED \u2014 use `ametyst task unschedule` (which also removes jobs armed under the task/loop labels). Remove a compound's schedule"
-).action((slug) => {
-  warnDeprecated("compound unschedule", "task unschedule");
-  unscheduleCompound(slug);
-  console.log(`\u{1F5D1}\uFE0F  unscheduled compound ${slug}`);
-});
-compoundCommand.command("schedules").description(
-  "DEPRECATED \u2014 use `ametyst task schedules` (which also lists jobs armed under the task/loop labels). List scheduled compounds"
-).action(() => {
-  warnDeprecated("compound schedules", "task schedules");
-  const s = listCompoundSchedules();
-  console.log(s.length ? s.join("\n") : "no scheduled compounds");
-});
-
 // src/commands/delegate.ts
 init_esm_shims();
 function toDelegateOptions(task, opts) {
@@ -129373,8 +129522,6 @@ program2.command("delegate [task]").description(
 ).action(delegateCommand);
 program2.addCommand(connectionsCommand);
 program2.addCommand(taskCommand);
-program2.addCommand(loopCommand);
-program2.addCommand(compoundCommand);
 program2.addCommand(walletCommand);
 program2.parseAsync().catch((e) => {
   console.error(e instanceof Error ? e.message : String(e));