dsh-mnemon 0.5.12 → 0.5.13

package/lib/index.js

@@ -19,6 +19,10 @@ import { findMnemonCommand, mnemonNpmLauncher, nodeLauncherEnvironment } from "d
 import { spawn } from "node:child_process";
 import { StringDecoder } from "node:string_decoder";
 import { z as z$1 } from "zod";
+import { readFile, stat } from "node:fs/promises";
+import { parseDocument } from "yaml";
+import { isVolatile } from "@deepseek-ai/cosmokit";
+import schemastery_live_default from "schemastery-live";
 import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 //#region src/host/view-protocol.ts
 const MNEMON_VIEW_CHANNEL = "/dsh-mnemon-view";
@@ -85,6 +89,48 @@ const MNEMON_EMBEDDING_PROTOCOLS = [
 	"openai"
 ];
 //#endregion
+//#region src/host/view-preferences.ts
+const schema = z.object({
+	strategyTypeId: z.string(),
+	entries: z.dict(z.object({
+		enabled: z.boolean(),
+		config: z.dict(z.any()).default({})
+	})).default({})
+});
+const legacySchema = z.object({ sources: z.dict(z.object({ enabled: z.boolean() })).default({}) });
+const ENTRY_ID$1 = /^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,299}$/u;
+const clone$2 = (value) => JSON.parse(JSON.stringify(value));
+function record$3(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("Plugin configuration must be an object");
+	const json = JSON.stringify(value);
+	if (json.length > 65536) throw new Error("Plugin configuration exceeds 64 KiB");
+	const parsed = JSON.parse(json);
+	for (const key of Object.keys(parsed)) if ([
+		"__proto__",
+		"prototype",
+		"constructor"
+	].includes(key)) throw new Error("Unsafe plugin configuration key");
+	return parsed;
+}
+function preferences(value) {
+	if (value.strategyTypeId !== void 0 && !/^[a-z][a-z0-9-]{0,127}$/u.test(value.strategyTypeId)) throw new Error("Invalid Strategy type id");
+	const entries = record$3(value.entries ?? {});
+	if (Object.keys(entries).length > 64) throw new Error("At most 64 memory plugin Entries can be configured");
+	for (const [entryId, item] of Object.entries(entries)) {
+		if (!ENTRY_ID$1.test(entryId)) throw new Error("Invalid memory plugin Entry id");
+		const candidate = record$3(item);
+		if (typeof candidate.enabled !== "boolean") throw new Error("Plugin enabled must be boolean");
+		record$3(candidate.config);
+	}
+	return clone$2(value);
+}
+function legacyPreferences(value) {
+	const sources = value.sources ?? {};
+	if (Object.keys(sources).length > 64) throw new Error("At most 64 legacy Source Entries can be configured");
+	for (const [entryId, item] of Object.entries(sources)) if (!ENTRY_ID$1.test(entryId) || typeof item?.enabled !== "boolean") throw new Error("Invalid legacy Source Entry preference");
+	return clone$2({ sources });
+}
+//#endregion
 //#region src/host/config-values.ts
 const DEFAULT_IDLE_REVIEW_MS = 3e4;
 const DEFAULT_RUNTIME_MEMORY_LIMIT_BYTES = 10240;
@@ -221,6 +267,8 @@ const Config = z.object({
 		protocol: DEFAULT_EMBEDDING_PROTOCOL
 	}),
 	memoryTopology: MemoryTopologySchema,
+	memoryView: schema,
+	legacySettingsImported: z.boolean(),
 	recallQuality: RecallQualitySchema.default({
 		policy: DEFAULT_RECALL_QUALITY_POLICY,
 		lowScoreThreshold: DEFAULT_RECALL_LOW_SCORE_THRESHOLD,
@@ -372,6 +420,7 @@ function resolveMemoryTopology(value) {
 	};
 }
 function resolveConfig(config = {}) {
+	if (config.memoryView !== void 0) preferences(config.memoryView);
 	const cliPath = optionalText(config.cliPath);
 	const legacyDataDir = optionalText(config.dataDir);
 	const legacyPacks = resolveCustomPacks(config.customPacks, legacyDataDir);
@@ -444,7 +493,7 @@ const COMPONENT_ORDER = [
 ];
 const BODY_ID = /^[a-zA-Z0-9][a-zA-Z0-9_-]*$/;
 const SQLITE_HEADER = Buffer.from("SQLite format 3\0", "binary");
-function record$3(value) {
+function record$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function utf8(bytes, label) {
@@ -487,7 +536,7 @@ function componentsForScope(scope) {
 	return [scope];
 }
 function parseManifest(value) {
-	const manifest = record$3(value);
+	const manifest = record$2(value);
 	if (manifest?.format !== "mnemonpack" || manifest.version !== 1) throw new Error("unsupported Mnemon Pack format or version");
 	if (manifest.scope !== "full" && !COMPONENT_ORDER.includes(manifest.scope)) throw new Error("Mnemon Pack scope is invalid");
 	if (typeof manifest.exportedAt !== "string") throw new Error("Mnemon Pack exportedAt is invalid");
@@ -496,11 +545,11 @@ function parseManifest(value) {
 	if (components.length === 0 || new Set(components).size !== components.length || components.some((component) => !COMPONENT_ORDER.includes(component))) throw new Error("Mnemon Pack components are invalid");
 	const expected = componentsForScope(manifest.scope);
 	if (components.length !== expected.length || expected.some((component) => !components.includes(component))) throw new Error("Mnemon Pack scope does not match its components");
-	const source = record$3(manifest.source);
+	const source = record$2(manifest.source);
 	if (source?.plugin !== "dsh-mnemon" || typeof source.pluginVersion !== "string") throw new Error("Mnemon Pack source is invalid");
 	if (!Array.isArray(manifest.summary)) throw new Error("Mnemon Pack summary is invalid");
 	const summary = manifest.summary.map((entry) => {
-		const item = record$3(entry);
+		const item = record$2(entry);
 		const component = item?.component;
 		if (!COMPONENT_ORDER.includes(component) || !Number.isSafeInteger(item?.files) || !Number.isSafeInteger(item?.bytes) || !Number.isSafeInteger(item?.items) || Number(item?.files) < 0 || Number(item?.bytes) < 0 || Number(item?.items) < 0) throw new Error("Mnemon Pack summary entry is invalid");
 		return {
@@ -550,8 +599,8 @@ function parseArchive(base64, runtimeLimits = RUNTIME_MEMORY_LIMITS) {
 		if (path !== "manifest.json" && path !== "checksums.json" && !allowedPayloadPath(path)) throw new Error(`unsupported Mnemon Pack entry: ${path}`);
 	}
 	const manifest = parseManifest(json$1(files["manifest.json"], "manifest.json"));
-	const checksumValue = record$3(json$1(files["checksums.json"], "checksums.json"));
-	const checksumFiles = record$3(checksumValue?.files);
+	const checksumValue = record$2(json$1(files["checksums.json"], "checksums.json"));
+	const checksumFiles = record$2(checksumValue?.files);
 	if (checksumValue?.algorithm !== "sha256" || checksumFiles === void 0) throw new Error("Mnemon Pack checksums are invalid");
 	const payloadNames = names.filter((path) => path.startsWith("payload/")).sort();
 	if (Object.keys(checksumFiles).length !== payloadNames.length) throw new Error("Mnemon Pack checksum inventory does not match the payload");
@@ -574,10 +623,10 @@ function parseArchive(base64, runtimeLimits = RUNTIME_MEMORY_LIMITS) {
 	};
 }
 function parseRuntime(value, limits = RUNTIME_MEMORY_LIMITS) {
-	const source = record$3(value);
+	const source = record$2(value);
 	if (source?.version !== RUNTIME_MEMORY_VERSION || !Array.isArray(source.entries)) throw new Error("runtime memories.json is invalid");
 	const entries = source.entries.map((raw) => {
-		const entry = record$3(raw);
+		const entry = record$2(raw);
 		if (typeof entry?.content !== "string" || entry.target !== "memory" && entry.target !== "user" || ![
 			"critical",
 			"normal",
@@ -608,13 +657,13 @@ function runtimeProjection(entries, target) {
 	return content === "" ? "" : `${content}\n`;
 }
 function parseDocumentIndex(value) {
-	const index = record$3(value);
+	const index = record$2(value);
 	if (index?.version !== DOCUMENTS_VERSION || !Array.isArray(index.documents)) throw new Error("Documents index.json is invalid");
 	const ids = /* @__PURE__ */ new Set();
 	return {
 		version: 1,
 		documents: index.documents.map((raw) => {
-			const item = record$3(raw);
+			const item = record$2(raw);
 			if (typeof item?.id !== "string" || item.id.trim() === "" || ids.has(item.id)) throw new Error("Documents index contains an invalid or duplicate id");
 			if (typeof item.title !== "string" || typeof item.description !== "string" || item.status !== "active" && item.status !== "archived") throw new Error("Documents index contains an invalid record");
 			if (typeof item.filename !== "string" || basename(item.filename) !== item.filename || !/^[a-zA-Z0-9._-]+\.md$/u.test(item.filename)) throw new Error("Documents index contains an unsafe filename");
@@ -644,13 +693,13 @@ function parseDocumentIndex(value) {
 	};
 }
 function parseRegistry(value) {
-	const registry = record$3(value);
+	const registry = record$2(value);
 	if (registry?.version !== 1 || !Array.isArray(registry.bodies)) throw new Error("Memory Space registry is invalid");
 	const ids = /* @__PURE__ */ new Set();
 	return {
 		version: 1,
 		bodies: registry.bodies.map((raw) => {
-			const body = record$3(raw);
+			const body = record$2(raw);
 			if (typeof body?.id !== "string" || !BODY_ID.test(body.id) || ids.has(body.id)) throw new Error("Memory Space registry contains an invalid or duplicate id");
 			if (typeof body.name !== "string" || body.name.trim() === "" || body.name.length > 100 || typeof body.description !== "string" || body.description.length > 1e3) throw new Error("Memory Space registry contains invalid metadata");
 			if (typeof body.createdAt !== "string" || typeof body.updatedAt !== "string") throw new Error("Memory Space registry contains invalid timestamps");
@@ -1220,14 +1269,24 @@ function canonicalWorkspacePath(workspacePath) {
 	if (!isAbsolute(workspacePath) || workspacePath.includes("\0")) throw new Error("Workspace path must be absolute");
 	let parent = resolve(workspacePath);
 	const suffix = [];
-	for (;;) try {
-		return join(realpathSync.native(parent), ...suffix);
-	} catch (error) {
-		if (error.code !== "ENOENT") throw error;
-		const next = dirname(parent);
-		if (next === parent) throw error;
-		suffix.unshift(parent.slice(next.length).replace(/^[/\\]+/u, ""));
-		parent = next;
+	for (;;) {
+		let real;
+		try {
+			real = realpathSync.native(parent);
+		} catch (error) {
+			if (error.code !== "ENOENT") throw error;
+			const next = dirname(parent);
+			if (next === parent) throw error;
+			suffix.unshift(parent.slice(next.length).replace(/^[/\\]+/u, ""));
+			parent = next;
+			continue;
+		}
+		if (suffix.length > 0 && !statSync(real).isDirectory()) throw Object.assign(/* @__PURE__ */ new Error(`ENOTDIR: not a directory, realpath '${parent}'`), {
+			code: "ENOTDIR",
+			path: parent,
+			syscall: "realpath"
+		});
+		return join(real, ...suffix);
 	}
 }
 /** A rename or move selects a new directory; resolving identity never writes. */
@@ -1283,7 +1342,7 @@ function safeBytes(path) {
 function readJson(path) {
 	return JSON.parse(readFileSync(path, "utf8"));
 }
-function record$2(value) {
+function record$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function missing(kind, path) {
@@ -1301,9 +1360,9 @@ function runtimeArea(root) {
 	const source = join(path, "memories.json");
 	if (!existsSync(source)) return missing("runtime", path);
 	try {
-		const file = record$2(readJson(source));
+		const file = record$1(readJson(source));
 		if (file === void 0 || !Array.isArray(file.entries)) throw new Error("memories.json is not a valid runtime-memory source");
-		const entries = file.entries.map(record$2).filter((entry) => entry !== void 0);
+		const entries = file.entries.map(record$1).filter((entry) => entry !== void 0);
 		const userEntries = entries.filter((entry) => entry.target === "user").length;
 		const memoryEntries = entries.filter((entry) => entry.target === "memory").length;
 		const projectionsHealthy = existsSync(join(path, "USER.md")) && existsSync(join(path, "MEMORY.md"));
@@ -1338,8 +1397,8 @@ function memorySpacesArea(root) {
 	if (!existsSync(path)) return missing("memory-bodies", path);
 	try {
 		const registryPath = join(path, ".dsh-memory-bodies.json");
-		const registry = existsSync(registryPath) ? record$2(readJson(registryPath)) : void 0;
-		const bodies = Array.isArray(registry?.bodies) ? registry.bodies.map(record$2).filter((body) => body !== void 0) : [];
+		const registry = existsSync(registryPath) ? record$1(readJson(registryPath)) : void 0;
+		const bodies = Array.isArray(registry?.bodies) ? registry.bodies.map(record$1).filter((body) => body !== void 0) : [];
 		const databaseCount = readdirSync(path, { withFileTypes: true }).filter((entry) => entry.isDirectory() && existsSync(join(path, entry.name, "mnemon.db"))).length;
 		const activeCount = bodies.filter((body) => body.active === true).length;
 		const invalidRegistry = existsSync(registryPath) && (registry?.version !== 1 || !Array.isArray(registry.bodies));
@@ -1374,9 +1433,9 @@ function documentsArea(root) {
 	const indexPath = join(path, "index.json");
 	if (!existsSync(indexPath)) return missing("documents", path);
 	try {
-		const index = record$2(readJson(indexPath));
+		const index = record$1(readJson(indexPath));
 		if (index === void 0 || !Array.isArray(index.documents)) throw new Error("index.json is not a valid Documents index");
-		const documents = index.documents.map(record$2).filter((document) => document !== void 0);
+		const documents = index.documents.map(record$1).filter((document) => document !== void 0);
 		const active = documents.filter((document) => document.status === "active").length;
 		const archived = documents.filter((document) => document.status === "archived").length;
 		return {
@@ -1412,9 +1471,9 @@ function stateArea(root) {
 		let providerConnections = 0;
 		let providerServices = 0;
 		if (existsSync(providerRegistry)) try {
-			const registry = record$2(readJson(providerRegistry));
+			const registry = record$1(readJson(providerRegistry));
 			providerConnections = Array.isArray(registry?.bodies) ? registry.bodies.length : 0;
-			providerServices = record$2(registry?.services) === void 0 ? 0 : Object.keys(record$2(registry?.services)).length;
+			providerServices = record$1(registry?.services) === void 0 ? 0 : Object.keys(record$1(registry?.services)).length;
 		} catch {}
 		return {
 			kind: "state",
@@ -2723,13 +2782,13 @@ async function startGuardedReview(host, parent, toolNames, start, published) {
 }
 //#endregion
 //#region src/host/review-checkpoint.ts
-function record$1(value) {
+function record(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
 function textContent(content, toolResult = false) {
 	if (!Array.isArray(content)) return "";
 	return content.map((block) => {
-		const value = record$1(block);
+		const value = record(block);
 		if (value.type === "text" && typeof value.text === "string") return value.text;
 		if (toolResult && value.type === "tool-result" && value.isError !== true) return textContent(value.content);
 		return "";
@@ -2754,8 +2813,8 @@ function reviewCheckpoint(session, maxChars) {
 			"assistant/message",
 			"tool/result"
 		].includes(event.type)) continue;
-		const message = record$1(event.data.message);
-		const source = record$1(message.source);
+		const message = record(event.data.message);
+		const source = record(message.source);
 		if (event.type === "user/message" && source.kind !== "user") continue;
 		const text = textContent(message.content, event.type === "tool/result");
 		if (!text) continue;
@@ -2871,7 +2930,7 @@ var IdleReviewError = class extends Error {
 };
 function reviewReceipt(receipt) {
 	if (!mutationResultCommitted(receipt.value)) return void 0;
-	const value = object$4(receipt.value);
+	const value = object$6(receipt.value);
 	const args = optionalObject(receipt.arguments);
 	const document = optionalObject(value.document);
 	return {
@@ -3131,7 +3190,7 @@ function assertDshOutputValue(schema, candidate, path = "result") {
 		default: throw new Error(`${path} uses unsupported schema type ${JSON.stringify(value.type)}`);
 	}
 }
-function object$4(value) {
+function object$6(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("memory subagent returned an invalid structured result");
 	return value;
 }
@@ -3484,7 +3543,7 @@ var MnemonSubagentCoordinator = class {
 				if (!isSubagent(execution.agent)) throw new Error("Mnemon subagent result tools are restricted to delegated children");
 				execution.signal.throwIfAborted();
 				assertDshOutputValue(RESULT_TOOL_INPUT_SCHEMA, args);
-				const request = object$4(args);
+				const request = object$6(args);
 				const submit = this.resultRequests.get(String(request.requestId));
 				if (this.disposed || submit === void 0) throw new Error("Mnemon subagent result request is unknown or no longer active");
 				return submit(request.result, execution);
@@ -3615,7 +3674,7 @@ var MnemonSubagentCoordinator = class {
 		].join("\n\n");
 		const schema = providerPlacementSchema(prepared.candidates.map((candidate) => candidate.id));
 		const { provider, runId, result } = await this.delegate(parent, "placement", "Choose Memory Space provider", prompt, [], schema, signal, "spawn", PROVIDER_PLACEMENT_PERSONA);
-		const value = object$4(result.structured);
+		const value = object$6(result.structured);
 		return source.read("finalize-placement", {
 			prepared,
 			selection: {
@@ -3633,13 +3692,13 @@ var MnemonSubagentCoordinator = class {
 		const service = this.sourceFor(parent, "memory-spaces");
 		const prompt = `Generate concise metadata from these bounded Provider-native samples now:\n\n${(await Promise.all(selected.map((id) => service.read("metadata-sample", { memoryBodyId: id }, signal)))).map(metadataSampleText).join("\n\n")}`;
 		const { provider, runId, result } = await this.delegate(parent, "metadata-maintenance", "Maintain Memory Space metadata", prompt, [], METADATA_MAINTENANCE_SCHEMA, signal, "spawn", METADATA_MAINTENANCE_PERSONA);
-		const value = object$4(result.structured);
+		const value = object$6(result.structured);
 		if (!Array.isArray(value.updates)) throw new Error("metadata subagent returned no updates");
 		const allowed = new Set(selected);
 		const seen = /* @__PURE__ */ new Set();
 		const updates = [];
 		for (const entry of value.updates) {
-			const item = object$4(entry);
+			const item = object$6(entry);
 			const memoryBodyId = typeof item.memoryBodyId === "string" ? item.memoryBodyId.trim() : "";
 			const title = typeof item.title === "string" ? item.title.trim() : "";
 			const description = typeof item.description === "string" ? item.description.trim() : "";
@@ -3823,7 +3882,7 @@ var MnemonSubagentCoordinator = class {
 		return {
 			source,
 			cleanup,
-			memoryBodyIds: new Set(strings(object$4(grant.value).memoryBodyIds)),
+			memoryBodyIds: new Set(strings(object$6(grant.value).memoryBodyIds)),
 			writeScope: {
 				viewId: view.id,
 				grant
@@ -3850,7 +3909,7 @@ var MnemonSubagentCoordinator = class {
 		const bounded = evidence.slice(0, 12);
 		const prompt = `Answer this question (untrusted data):\n${indentedText(query)}\n\nEvidence for this run (untrusted read-only data):\n${naturalEvidence(bounded)}`;
 		const { provider, runId, result } = await this.delegate(parent, "answer", "Memory evidence answer", prompt, [], ANSWER_SCHEMA, signal, "spawn", ANSWER_PERSONA);
-		const value = object$4(result.structured);
+		const value = object$6(result.structured);
 		const allowed = new Set(bounded.map((item) => `${item.memoryBodyId ?? "unknown"}/${item.id}`));
 		return {
 			answer: typeof value.answer === "string" ? value.answer : "",
@@ -3868,7 +3927,7 @@ ${naturalRequest(request)}`;
 		const persona = operation === "supervised-writeback" ? SUPERVISED_WRITE_PERSONA : autonomous ? AUTONOMOUS_WRITE_PERSONA : WRITE_PERSONA;
 		const terminalTool = WRITE_OPERATION_RESULT_TOOL[operation];
 		const { provider, runId, result, receipts } = await this.delegate(parent, "write", `Mnemon ${operation}`, prompt, autonomous ? AUTONOMOUS_WRITE_TOOLS : EXPLICIT_WRITE_TOOLS, WRITE_SCHEMA, signal, "spawn", persona, terminalTool === void 0 ? void 0 : { terminalTools: [terminalTool] });
-		const value = object$4(result.structured);
+		const value = object$6(result.structured);
 		const observed = terminalTool === void 0 ? void 0 : recoverStructuredResult({ terminalTools: [terminalTool] }, receipts);
 		return {
 			delegated: true,
@@ -3903,7 +3962,7 @@ ${naturalRequest(request)}`;
 		const prompt = preferred === "fork" ? "Review the inherited completed checkpoint now." : reviewCheckpoint(parent.session, config.maxContextChars);
 		const persona = preferred === "fork" ? REVIEW_PERSONA : REVIEW_PERSONA.replaceAll("inherited", "supplied bounded");
 		const { provider, runId, result } = await this.delegate(parent, "review", "Mnemon idle checkpoint review", prompt, REVIEW_TOOLS, WRITE_SCHEMA, signal, preferred, persona, { terminalTools: ["mnemon_runtime_memory", "mnemon_document_create"] });
-		const value = object$4(result.structured);
+		const value = object$6(result.structured);
 		return {
 			delegated: true,
 			runId,
@@ -3965,12 +4024,12 @@ ${naturalRequest(request)}`;
 			const cleanup = graph.source("memory-spaces", agentScope(parent, graph.config)).forInstance(identity.sourceInstanceKey).forGeneration(lease.generation);
 			const grant = authority?.context.view.readGrants.find((grant) => grant.sourceInstanceKey === identity.sourceInstanceKey && grant.schema === "dsh-mnemon.memory-spaces/v1");
 			if (authority !== void 0 && grant === void 0) throw new Error("document archive requires a Memory Space namespace grant");
-			const allowed = grant === void 0 ? void 0 : new Set(strings(object$4(grant.value).memoryBodyIds));
+			const allowed = grant === void 0 ? void 0 : new Set(strings(object$6(grant.value).memoryBodyIds));
 			const eligible = (body) => body.active && body.providerEnabled !== false && body.provider.capabilities.remember && body.provider.capabilities.forget && body.provider.capabilities.writeMode === "exact" && (allowed === void 0 || allowed.has(body.id));
 			const bodies = (await memoryService.read("body-directory", null, signal)).items.filter(eligible);
 			if (bodies.length === 0) throw new Error("document archive requires an existing active Memory Space with exact writes and safe forget");
 			const { provider, runId, result } = await this.delegate(parent, "document-archive", "Plan managed document archive", documentArchivePrompt(document, source, bodies), [], DOCUMENT_ARCHIVE_SCHEMA, signal, "spawn", DOCUMENT_ARCHIVE_PERSONA);
-			const value = object$4(result.structured);
+			const value = object$6(result.structured);
 			const summary = typeof value.summary === "string" ? value.summary.trim() : "";
 			if (value.action !== "planned") throw new Error(summary || "document archive planning failed");
 			if (summary === "" || summary.length > 1e3) throw new Error("document archive summary must contain 1–1000 characters");
@@ -4145,13 +4204,13 @@ ${chunk.context}
 						provider = delegated.provider;
 						runId = delegated.runId;
 					}
-					const value = object$4(delegated.result.structured);
+					const value = object$6(delegated.result.structured);
 					if (value.action !== "planned") throw new Error(typeof value.summary === "string" && value.summary !== "" ? value.summary : "runtime memory archival routing failed");
 					if (!Array.isArray(value.routes) || value.routes.length === 0) throw new Error("runtime memory migration returned no routes");
 					const allowedIndexes = new Set(chunk.indexes);
 					const proposed = /* @__PURE__ */ new Map();
 					for (const candidate of value.routes) {
-						const route = object$4(candidate);
+						const route = object$6(candidate);
 						const memoryBodyId = typeof route.memoryBodyId === "string" ? route.memoryBodyId.trim() : "";
 						if (memoryBodyId === "" || !eligibleById.has(memoryBodyId)) throw new Error(`runtime memory migration selected an invalid Memory Space: ${memoryBodyId || "(empty)"}`);
 						if (!Array.isArray(route.sourceIndexes) || route.sourceIndexes.length === 0) throw new Error("runtime memory migration route must contain source indexes");
@@ -4299,10 +4358,10 @@ ${pendingMutationContext(plan)}
 
 ${runtimeSnapshotContext("user", plan.entries)}`;
 		const { provider, runId, result } = await context.model("compaction", "Consolidate local user profile", prompt, USER_COMPACTION_SCHEMA, USER_COMPACTION_PERSONA);
-		const value = object$4(result.structured);
+		const value = object$6(result.structured);
 		if (value.action !== "compacted") throw new Error(typeof value.summary === "string" && value.summary !== "" ? value.summary : "USER.md compaction failed");
 		const compactedEntries = Array.isArray(value.compactedEntries) ? value.compactedEntries.map((entry) => {
-			const item = object$4(entry);
+			const item = object$6(entry);
 			if (typeof item.content !== "string" || ![
 				"critical",
 				"normal",
@@ -4515,7 +4574,7 @@ This is the only completion channel for this run. Do not finish with a plain-tex
 				"failed",
 				"partial",
 				"unknown"
-			].includes(String(object$4(structured).action))) throw new Error(`memory review reported ${object$4(structured).action}`);
+			].includes(String(object$6(structured).action))) throw new Error(`memory review reported ${object$6(structured).action}`);
 			completed = {
 				provider,
 				runId: activeRun.id,
@@ -4680,7 +4739,7 @@ const MNEMON_ACTIVITY_SCHEMA = "dsh-mnemon.activity/v1";
 const MAX_ITEMS = 8;
 const MAX_TITLE = 160;
 const MAX_EXCERPT = 500;
-function object$3(value) {
+function object$5(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function bounded(value, maximum) {
@@ -4690,7 +4749,7 @@ function bounded(value, maximum) {
 	return normalized.length <= maximum ? normalized : normalized.slice(0, maximum - 1) + "…";
 }
 function item(value, index) {
-	const entry = object$3(value);
+	const entry = object$5(value);
 	if (entry === void 0) return void 0;
 	const content = bounded(entry.content ?? entry.text ?? entry.excerpt, MAX_EXCERPT);
 	const explicitTitle = bounded(entry.title ?? entry.label ?? entry.name ?? entry.memoryBodyName, MAX_TITLE);
@@ -4704,7 +4763,7 @@ function item(value, index) {
 	};
 }
 function resultItems(value) {
-	const root = object$3(value);
+	const root = object$5(value);
 	if (root === void 0) return [];
 	const candidates = [
 		root.results,
@@ -4723,8 +4782,8 @@ function resultItems(value) {
 	return items;
 }
 function writeItem(argsValue, operationId) {
-	const outer = object$3(argsValue) ?? {};
-	const input = object$3(outer.input) ?? outer;
+	const outer = object$5(argsValue) ?? {};
+	const input = object$5(outer.input) ?? outer;
 	const content = bounded(input.content ?? input.description ?? input.reason ?? input.summary, MAX_EXCERPT);
 	const explicitTitle = bounded(input.title ?? input.name, MAX_TITLE);
 	const identity = bounded(input.id ?? input.memoryBodyId ?? input.targetMemoryBodyId ?? input.sourceId, 300);
@@ -4737,7 +4796,7 @@ function writeItem(argsValue, operationId) {
 	};
 }
 function reference(argsValue, key) {
-	return bounded(object$3(argsValue)?.[key], 600);
+	return bounded(object$5(argsValue)?.[key], 600);
 }
 function memoryReadPresentation(sourceTypeId, operationId, referenceKey) {
 	return (args, value) => ({
@@ -4756,12 +4815,12 @@ function memoryWritePresentation(sourceTypeId, operationId, referenceKey) {
 		operationId,
 		...sourceTypeId === void 0 ? {} : { sourceTypeId },
 		...referenceKey === void 0 || reference(args, referenceKey) === void 0 ? {} : { reference: reference(args, referenceKey) },
-		committed: mutationResultCommitted(value) || operationId === "mutate" && object$3(value)?.success === true,
+		committed: mutationResultCommitted(value) || operationId === "mutate" && object$5(value)?.success === true,
 		item: writeItem(args, operationId)
 	});
 }
 function validItem(value) {
-	const entry = object$3(value);
+	const entry = object$5(value);
 	return entry !== void 0 && bounded(entry.id, 300) === entry.id && bounded(entry.title, MAX_TITLE) === entry.title && (entry.excerpt === void 0 || bounded(entry.excerpt, MAX_EXCERPT) === entry.excerpt);
 }
 function cleanItem(value) {
@@ -4774,7 +4833,7 @@ function cleanItem(value) {
 }
 /** Fail closed on arbitrary third-party/session metadata. */
 function parseMnemonActivityMeta(value, callId, toolName) {
-	const meta = object$3(value);
+	const meta = object$5(value);
 	if (meta?.schema !== "dsh-mnemon.activity/v1" || meta.kind !== "read" && meta.kind !== "write") return {};
 	const operationId = bounded(meta.operationId, 300);
 	const sourceTypeId = bounded(meta.sourceTypeId, 128);
@@ -5156,24 +5215,22 @@ function createPluginMessage(text, form) {
 			text
 		}],
 		source: {
-			kind: "plugin",
-			plugin: MNEMON_PLUGIN_SOURCE,
+			kind: MNEMON_PLUGIN_SOURCE,
 			form
 		}
 	});
 }
-function sourceOf(message) {
-	return message.source;
+function isMnemonMessageSource(source) {
+	if (typeof source !== "object" || source === null) return false;
+	const { kind, plugin } = source;
+	return kind === "dsh-mnemon" || kind === `plugin:dsh-mnemon` || kind === "plugin" && plugin === "dsh-mnemon";
 }
 /**
 * Whether an event is a durable user message this plugin produced.
 */
 function isOwnUserMessageEvent(event) {
 	if (event?.type !== "user/message") return false;
-	const source = event.data.source;
-	if (typeof source !== "object" || source === null) return false;
-	const { kind, plugin } = source;
-	return kind === "plugin" && plugin === "dsh-mnemon";
+	return isMnemonMessageSource(event.data.source);
 }
 function eventTurn(event) {
 	return typeof event.data.turn === "number" ? event.data.turn : void 0;
@@ -5396,10 +5453,7 @@ var MnemonAgentLifecycle = class {
 		if (!this.config.lifecycleEnabled) return decision;
 		if (this.config.writeEnabled && this.config.writebackMode === "guided") this.recordTurnMessages(payload.turn, decision.messages);
 		if (payload.step !== 1) return decision;
-		if (decision.messages.some((message) => {
-			const source = sourceOf(message);
-			return source.kind === "plugin" && source.plugin === "dsh-mnemon";
-		})) return decision;
+		if (decision.messages.some((message) => isMnemonMessageSource(message.source))) return decision;
 		if (decision.messages.length === 0) return decision;
 		const snapshot = this.memorySnapshotMessage();
 		const withSnapshot = (messages) => snapshot === void 0 ? messages : [...messages, snapshot];
@@ -6706,7 +6760,7 @@ var VersionUpdateManager = class {
 };
 //#endregion
 //#region src/host/rpc.ts
-function object$2(value) {
+function object$4(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("payload must be an object");
 	return value;
 }
@@ -6855,7 +6909,7 @@ async function assisted(runtime, lifecycle, typeId, operation, input, signal, ta
 				...signal === void 0 ? {} : { signal }
 			});
 			return {
-				...object$2(result.value),
+				...object$4(result.value),
 				revision: result.revision
 			};
 		} finally {
@@ -6924,7 +6978,7 @@ async function assisted(runtime, lifecycle, typeId, operation, input, signal, ta
 function createReadHandler(input, lifecycle, versions) {
 	return async (endpoint, rawPayload, signal) => {
 		try {
-			const payload = object$2(rawPayload);
+			const payload = object$4(rawPayload);
 			if (endpoint === "versions") {
 				if (versions === void 0) throw new Error("version checks are unavailable");
 				return success$1(await versions.check());
@@ -6944,7 +6998,7 @@ function createReadHandler(input, lifecycle, versions) {
 					if (lifecycle === void 0 || payload.operation !== "agent-search") throw new Error("Read-only Host assistance is unavailable");
 					const source = (await catalog(runtime, lifecycle)).sources.find((item) => item.sourceInstanceKey === payload.sourceInstanceKey);
 					if (source === void 0 || !source.assistance.includes("agent-search")) throw new Error("Host assistance is not available for this Source instance");
-					const value = await assisted(runtime, lifecycle, source.sourceTypeId, "agent-search", object$2(payload.input), signal);
+					const value = await assisted(runtime, lifecycle, source.sourceTypeId, "agent-search", object$4(payload.input), signal);
 					return success$1({
 						revision: (await catalog(runtime)).sources.find((item) => item.sourceInstanceKey === source.sourceInstanceKey)?.revision ?? source.revision,
 						value
@@ -7037,9 +7091,9 @@ function createActivationHandler(input) {
 	return async (endpoint, rawPayload, signal) => {
 		try {
 			if (endpoint === "source-assistance") {
-				const payload = object$2(rawPayload);
+				const payload = object$4(rawPayload);
 				if (payload.operation !== "activation" || payload.confirmed !== true) throw new Error("Unsupported activation operation");
-				const fields = object$2(payload.input);
+				const fields = object$4(payload.input);
 				if (Object.keys(fields).some((key) => key !== "memoryBodyId" && key !== "active") || typeof fields.active !== "boolean" || typeof fields.memoryBodyId !== "string") throw new Error("Activation accepts only a Memory Space id and boolean state");
 				const runtime = scoped(input, payload);
 				requireWritable(runtime);
@@ -7062,7 +7116,7 @@ function createActivationHandler(input) {
 				}
 			}
 			if (endpoint !== "body") return badRequest$1("unknown activation endpoint: " + endpoint);
-			const payload = object$2(rawPayload);
+			const payload = object$4(rawPayload);
 			const unexpected = Object.keys(payload).filter((field) => !ACTIVATION_FIELDS.has(field));
 			if (unexpected.length > 0) return badRequest$1("unsupported activation fields: " + unexpected.join(", "));
 			if (typeof payload.memoryBodyId !== "string" || payload.memoryBodyId.trim() === "") return badRequest$1("memoryBodyId must be a non-empty string");
@@ -7081,7 +7135,7 @@ function createActivationHandler(input) {
 function createWriteHandler(input, lifecycle, versions) {
 	return async (endpoint, rawPayload, signal) => {
 		try {
-			const payload = object$2(rawPayload);
+			const payload = object$4(rawPayload);
 			if (endpoint === "version-update") {
 				if (versions === void 0) throw new Error("version updates are unavailable");
 				if (!input.config.writeEnabled) throw new Error("dsh-mnemon is configured read-only (writeEnabled: false)");
@@ -7115,12 +7169,12 @@ function createWriteHandler(input, lifecycle, versions) {
 				const operation = String(payload.operation ?? "");
 				if (source === void 0 || !source.assistance.includes(operation)) throw new Error("Host assistance is not available for this Source instance");
 				if (operation !== "agent-search" && (payload.confirmed !== true || payload.expectedRevision !== source.revision)) throw new Error("Host assistance requires confirmation of the current Source revision");
-				const value = await assisted(runtime, lifecycle, source.sourceTypeId, operation, object$2(payload.input), signal, {
+				const value = await assisted(runtime, lifecycle, source.sourceTypeId, operation, object$4(payload.input), signal, {
 					sourceInstanceKey: source.sourceInstanceKey,
 					expectedRevision: source.revision
 				});
 				if (source.sourceTypeId === "runtime") return success$1({
-					revision: object$2(value).revision,
+					revision: object$4(value).revision,
 					value
 				});
 				return success$1({
@@ -7164,7 +7218,7 @@ function createWriteHandler(input, lifecycle, versions) {
 function createPackHandler(input) {
 	return async (endpoint, rawPayload) => {
 		try {
-			const payload = object$2(rawPayload);
+			const payload = object$4(rawPayload);
 			const runtime = scoped(input, payload);
 			const manager = runtime.graph.packs;
 			if (endpoint === "target") return success$1(manager.target());
@@ -7233,7 +7287,7 @@ function descriptor(settings, namespace) {
 	return {
 		status: "ready",
 		value: namespace === "mnemon" && displayModeOf(view.value) === "buildin" ? {
-			...object$1(view.value),
+			...object$3(view.value),
 			displayMode: "builtin"
 		} : view.value,
 		base: view.base,
@@ -7244,7 +7298,7 @@ function descriptor(settings, namespace) {
 		applies: view.applies
 	};
 }
-function object$1(value) {
+function object$3(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("payload must be an object");
 	return value;
 }
@@ -7315,14 +7369,14 @@ function createSettingsHandler(settings) {
 	return async (endpoint, rawPayload) => {
 		let namespace = MNEMON_SETTINGS_NAMESPACE;
 		try {
-			const payload = object$1(rawPayload);
+			const payload = object$3(rawPayload);
 			namespace = namespaceOf(payload);
 			if (endpoint === "get") return success(descriptor(settings, namespace));
 			if (endpoint !== "mutate") return badRequest(`unknown settings endpoint: ${endpoint}`);
 			if (!settings.writable) throw new Error("DSH settings are read-only");
 			if (!Array.isArray(payload.ops) || payload.ops.length === 0 || payload.ops.length > 16) throw new Error("ops must contain 1..16 settings edits");
 			const ops = payload.ops.map((raw) => {
-				const op = object$1(raw);
+				const op = object$3(raw);
 				const path = Array.isArray(op.path) && op.path.length > 0 ? op.path.map((segment) => String(segment)) : [];
 				if (!mutablePath(namespace, path)) throw new Error(`unsupported ${namespace} settings field: ${path.join(".")}`);
 				if (op.op === "unset") return {
@@ -8304,49 +8358,527 @@ function registerMnemonSubagentTokenUsageProjection(ctx) {
 	});
 }
 //#endregion
-//#region src/host/plugin-management.ts
-const schema = z.object({
-	strategyTypeId: z.string(),
-	entries: z.dict(z.object({
-		enabled: z.boolean(),
-		config: z.dict(z.any()).default({})
-	})).default({})
-});
-const legacySchema = z.object({ sources: z.dict(z.object({ enabled: z.boolean() })).default({}) });
-const PACKAGE$1 = /^(?:@[a-z0-9._-]+\/)?dsh-mnemon-(source|strategy)-[a-z0-9._-]+$/u;
+//#region src/host/live-config.ts
+function plain(value) {
+	if (isVolatile(value)) return plain(value.get());
+	if (Array.isArray(value)) return value.map(plain);
+	if (value === null || typeof value !== "object") return value;
+	const prototype = Object.getPrototypeOf(value);
+	if (prototype !== Object.prototype && prototype !== null) return value;
+	return Object.fromEntries(Object.entries(value).map(([key, child]) => [key, plain(child)]));
+}
+/** Read a detached configuration snapshot from either DSH generation. */
+function plainHostConfig(value = {}) {
+	return plain(value);
+}
+function liveConfig() {
+	const schema = new schemastery_live_default(Config.toJSON());
+	schema.dict = Object.fromEntries(Object.entries(schema.dict ?? {}).map(([key, field]) => [key, key === "remoteAccess" ? field : field.volatile()]));
+	const standard = schema["~standard"];
+	Object.defineProperty(schema, "~standard", { value: {
+		...standard,
+		validate(value) {
+			const parsed = standard.validate(value);
+			if ("then" in parsed) throw new TypeError("Mnemon configuration validation must be synchronous");
+			if (parsed.issues) return parsed;
+			try {
+				resolveConfig(plainHostConfig(parsed.value));
+				return parsed;
+			} catch (error) {
+				return { issues: [{ message: error instanceof Error ? error.message : String(error) }] };
+			}
+		}
+	} });
+	return schema;
+}
+/** Profile Config for live forms; transport authority retains normal remounts. */
+const LiveConfig = liveConfig();
+//#endregion
+//#region src/host/legacy-settings-import.ts
+const UNSAFE_KEYS = /* @__PURE__ */ new Set([
+	"__proto__",
+	"prototype",
+	"constructor"
+]);
 const ENTRY_ID = /^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,299}$/u;
-const hash = (value) => createHash("sha256").update(canonicalMemoryJson(value)).digest("hex");
-const clone = (value) => JSON.parse(JSON.stringify(value));
-function record(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("Plugin configuration must be an object");
-	const json = JSON.stringify(value);
-	if (json.length > 65536) throw new Error("Plugin configuration exceeds 64 KiB");
-	const parsed = JSON.parse(json);
-	for (const key of Object.keys(parsed)) if ([
-		"__proto__",
-		"prototype",
-		"constructor"
-	].includes(key)) throw new Error("Unsafe plugin configuration key");
-	return parsed;
+const STRATEGY_ID = /^[a-z][a-z0-9-]{0,127}$/u;
+const VIEW_NAMESPACE = /^mnemon-view(?:-[a-f0-9]{16})?$/u;
+const LEGACY_NAMESPACE = /^mnemon-plugins(?:-[a-f0-9]{16})?$/u;
+function object$2(value, label) {
+	if (value === null || typeof value !== "object" || Array.isArray(value) || ![Object.prototype, null].includes(Object.getPrototypeOf(value))) throw new Error(`${label} must be a plain object`);
+	for (const key of Reflect.ownKeys(value)) {
+		if (typeof key !== "string" || UNSAFE_KEYS.has(key)) throw new Error(`${label} contains an unsafe key`);
+		const descriptor = Object.getOwnPropertyDescriptor(value, key);
+		if (!descriptor.enumerable || !Object.hasOwn(descriptor, "value")) throw new Error(`${label} must contain only data properties`);
+	}
+	return value;
 }
-function preferences(value) {
-	if (value.strategyTypeId !== void 0 && !/^[a-z][a-z0-9-]{0,127}$/u.test(value.strategyTypeId)) throw new Error("Invalid Strategy type id");
-	const entries = record(value.entries ?? {});
-	if (Object.keys(entries).length > 64) throw new Error("At most 64 memory plugin Entries can be configured");
-	for (const [entryId, item] of Object.entries(entries)) {
-		if (!ENTRY_ID.test(entryId)) throw new Error("Invalid memory plugin Entry id");
-		const candidate = record(item);
-		if (typeof candidate.enabled !== "boolean") throw new Error("Plugin enabled must be boolean");
-		record(candidate.config);
+/** Copy JSON data without invoking getters, serializers or prototype methods. */
+function copy(value, label, ancestors = /* @__PURE__ */ new Set(), depth = 0) {
+	if (value === null || typeof value === "string" || typeof value === "boolean") return value;
+	if (typeof value === "number" && Number.isFinite(value)) return value;
+	if (typeof value !== "object" || value === null) throw new Error(`${label} must contain only JSON data`);
+	if (depth > 64 || ancestors.has(value)) throw new Error(`${label} contains cyclic or excessively nested data`);
+	ancestors.add(value);
+	try {
+		if (Array.isArray(value)) {
+			if (Object.getPrototypeOf(value) !== Array.prototype) throw new Error(`${label} must contain plain arrays`);
+			if (Reflect.ownKeys(value).length !== value.length + 1) throw new Error(`${label} contains a sparse or extended array`);
+			return Array.from({ length: value.length }, (_, index) => {
+				const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+				if (!descriptor || !descriptor.enumerable || !Object.hasOwn(descriptor, "value")) throw new Error(`${label} must contain only data properties`);
+				return copy(descriptor.value, label, ancestors, depth + 1);
+			});
+		}
+		return Object.fromEntries(Object.entries(object$2(value, label)).map(([key, item]) => [key, copy(item, label, ancestors, depth + 1)]));
+	} finally {
+		ancestors.delete(value);
 	}
-	return clone(value);
 }
-function legacyPreferences(value) {
-	const sources = value.sources ?? {};
-	if (Object.keys(sources).length > 64) throw new Error("At most 64 legacy Source Entries can be configured");
-	for (const [entryId, item] of Object.entries(sources)) if (!ENTRY_ID.test(entryId) || typeof item?.enabled !== "boolean") throw new Error("Invalid legacy Source Entry preference");
-	return clone({ sources });
+function copiedObject(value, label) {
+	object$2(value, label);
+	return copy(value, label);
+}
+/** Inspect validated copies only; never evaluate expressions or invoke getters. */
+function containsExpression(value) {
+	return value !== null && typeof value === "object" && (Object.hasOwn(value, "__jsExpr") || Object.values(value).some(containsExpression));
+}
+function fields(value, allowed, label) {
+	if (Object.keys(value).some((key) => !allowed.includes(key))) throw new Error(`${label} contains unsupported fields`);
+}
+function interaction(value, label, allowed) {
+	const result = copiedObject(value, label);
+	fields(result, allowed, label);
+	if (Object.values(result).some((item) => typeof item !== "boolean")) throw new Error(`${label} preferences must be boolean`);
+	return result;
+}
+function entryId(value, label) {
+	if (typeof value !== "string" || !ENTRY_ID.test(value) || UNSAFE_KEYS.has(value)) throw new Error(`${label} contains an invalid Entry id`);
+}
+function view(value, label) {
+	const result = copiedObject(value, label);
+	fields(result, ["strategyTypeId", "entries"], label);
+	if (Object.hasOwn(result, "strategyTypeId") && (typeof result.strategyTypeId !== "string" || !STRATEGY_ID.test(result.strategyTypeId))) throw new Error(`${label} contains an invalid Strategy type id`);
+	const entries = {};
+	if (Object.hasOwn(result, "entries")) {
+		const values = object$2(result.entries, `${label}.entries`);
+		if (Object.keys(values).length > 64) throw new Error(`${label} contains too many Entries`);
+		for (const [id, raw] of Object.entries(values)) {
+			entryId(id, label);
+			const item = copiedObject(raw, `${label}.entries`);
+			fields(item, ["enabled", "config"], `${label}.entries`);
+			if (typeof item.enabled !== "boolean") throw new Error(`${label} Entry enabled must be boolean`);
+			const config = Object.hasOwn(item, "config") ? copiedObject(item.config, `${label} Entry config`) : {};
+			if (JSON.stringify(config).length > 65536) throw new Error(`${label} Entry config exceeds 64 KiB`);
+			entries[id] = {
+				enabled: item.enabled,
+				config
+			};
+		}
+	}
+	return {
+		...typeof result.strategyTypeId === "string" ? { strategyTypeId: result.strategyTypeId } : {},
+		...Object.hasOwn(result, "entries") ? { entries } : {}
+	};
+}
+function sources(value, label, sourceEntryIds, diagnostics) {
+	const result = copiedObject(value, label);
+	fields(result, ["sources"], label);
+	const values = Object.hasOwn(result, "sources") ? object$2(result.sources, `${label}.sources`) : {};
+	if (Object.keys(values).length > 64) throw new Error(`${label} contains too many Source Entries`);
+	const entries = {};
+	for (const [id, raw] of Object.entries(values)) {
+		entryId(id, label);
+		const item = copiedObject(raw, `${label}.sources`);
+		fields(item, ["enabled"], `${label}.sources`);
+		if (typeof item.enabled !== "boolean") throw new Error(`${label} Source enabled must be boolean`);
+		if (!sourceEntryIds.has(id)) {
+			diagnostics.push(`Skipped legacy Source preference for ${id}: the current profile does not declare it as a Source.`);
+			continue;
+		}
+		entries[id] = {
+			enabled: item.enabled,
+			config: {}
+		};
+	}
+	return entries;
+}
+function applyEntryOverrides(entries, overrides, sourceEntryIds, diagnostics) {
+	if (!Array.isArray(overrides)) throw new Error("Explicit Entry overrides must be an array");
+	const matching = /* @__PURE__ */ new Map();
+	for (const raw of overrides) {
+		const row = object$2(raw, "Explicit Entry override");
+		entryId(row.id, "Explicit Entry override");
+		if (!Object.hasOwn(entries, row.id)) continue;
+		const previous = matching.get(row.id) ?? {};
+		matching.set(row.id, {
+			...previous,
+			...row.disabled === void 0 ? {} : { disabled: row.disabled },
+			...row.config === void 0 ? {} : { config: row.config }
+		});
+	}
+	for (const [id, row] of matching) {
+		if (row.disabled !== void 0 && typeof row.disabled !== "boolean") {
+			delete entries[id];
+			diagnostics.push(`Skipped legacy View preference for ${id}: its explicit disabled value is not boolean.`);
+			continue;
+		}
+		if (row.config !== void 0 && !sourceEntryIds.has(id)) {
+			const config = copiedObject(row.config, "Explicit Entry config");
+			if (containsExpression(config)) {
+				delete entries[id];
+				diagnostics.push(`Skipped legacy View preference for ${id}: its explicit config contains an expression.`);
+				continue;
+			}
+			entries[id].config = config;
+		}
+		if (typeof row.disabled === "boolean") entries[id].enabled = !row.disabled;
+	}
 }
+/**
+* Recover only the canonical root and the exact owning profile's old namespaces.
+* This does not read files, edit profile rows, validate plugin domains or commit.
+* Malformed relevant input rejects the complete plan without an import marker.
+*/
+function planLegacySettingsImport(options) {
+	const diagnostics = [];
+	try {
+		const rawCurrent = object$2(options.currentOverride, "Current config override");
+		if (rawCurrent.legacySettingsImported === true) return {
+			patch: {},
+			diagnostics
+		};
+		if (options.entryId !== "mnemon") throw new Error("Legacy settings belong to the canonical mnemon Entry; another root Entry is ambiguous.");
+		if (!VIEW_NAMESPACE.test(options.viewNamespace) || !LEGACY_NAMESPACE.test(options.legacyNamespace) || options.legacyNamespace !== options.viewNamespace.replace(/^mnemon-view/u, "mnemon-plugins")) throw new Error("Legacy settings namespaces must identify the same exact profile.");
+		const sections = object$2(options.sections, "Legacy settings document");
+		for (const key of Object.keys(sections)) if (key.startsWith("mnemon-view-") && !VIEW_NAMESPACE.test(key) || key.startsWith("mnemon-plugins-") && !LEGACY_NAMESPACE.test(key)) throw new Error("Legacy settings document contains an invalid Mnemon namespace.");
+		const relevant = [
+			"mnemon",
+			"mnemon-ui",
+			options.viewNamespace,
+			options.legacyNamespace
+		];
+		if (!relevant.some((key) => Object.hasOwn(sections, key))) return {
+			patch: {},
+			diagnostics
+		};
+		for (const key of relevant) if (Object.hasOwn(sections, key) && containsExpression(copiedObject(sections[key], key))) throw new Error(`${key} contains an expression; legacy settings must contain only literal data.`);
+		const current = copiedObject(rawCurrent, "Current config override");
+		if (Object.hasOwn(current, "legacySettingsImported") && typeof current.legacySettingsImported !== "boolean") throw new Error("Current import marker must be boolean");
+		const root = Object.hasOwn(sections, "mnemon") ? copiedObject(sections.mnemon, "mnemon") : {};
+		if (Object.hasOwn(root, "memoryView") || Object.hasOwn(root, "legacySettingsImported")) throw new Error("Legacy mnemon contains reserved migration fields");
+		const oldInteraction = Object.hasOwn(root, "conversationInteraction") ? interaction(root.conversationInteraction, "mnemon.conversationInteraction", [
+			"toolviews",
+			"turnBar",
+			"saveAction"
+		]) : {};
+		const oldUi = Object.hasOwn(sections, "mnemon-ui") ? interaction(sections["mnemon-ui"], "mnemon-ui", ["turnBar", "saveAction"]) : {};
+		const currentInteraction = Object.hasOwn(current, "conversationInteraction") ? interaction(current.conversationInteraction, "Current conversationInteraction", [
+			"toolviews",
+			"turnBar",
+			"saveAction"
+		]) : {};
+		const patch = Object.fromEntries(Object.entries(root).filter(([key]) => key !== "conversationInteraction" && !Object.hasOwn(current, key)));
+		const inheritedInteraction = {
+			...oldInteraction,
+			...oldUi
+		};
+		if (Object.keys(inheritedInteraction).some((key) => !Object.hasOwn(currentInteraction, key))) patch.conversationInteraction = {
+			...inheritedInteraction,
+			...currentInteraction
+		};
+		const currentView = Object.hasOwn(current, "memoryView") ? view(current.memoryView, "Current memoryView") : {};
+		if (Object.hasOwn(sections, options.viewNamespace) || Object.hasOwn(sections, options.legacyNamespace)) {
+			if (!Array.isArray(options.sourceEntryIds)) throw new Error("Source Entry ids must be an array");
+			for (const id of options.sourceEntryIds) entryId(id, "Source Entry ids");
+			const sourceEntryIds = new Set(options.sourceEntryIds);
+			const oldSources = Object.hasOwn(sections, options.legacyNamespace) ? sources(sections[options.legacyNamespace], options.legacyNamespace, sourceEntryIds, diagnostics) : {};
+			const oldView = Object.hasOwn(sections, options.viewNamespace) ? view(sections[options.viewNamespace], options.viewNamespace) : {};
+			const entries = {
+				...oldSources,
+				...oldView.entries
+			};
+			applyEntryOverrides(entries, options.entryOverrides, sourceEntryIds, diagnostics);
+			const migratedView = {
+				...oldView,
+				entries,
+				...currentView
+			};
+			if (!Object.hasOwn(currentView, "entries") || !Object.hasOwn(currentView, "strategyTypeId") && oldView.strategyTypeId !== void 0) patch.memoryView = migratedView;
+		}
+		patch.legacySettingsImported = true;
+		return {
+			patch,
+			diagnostics
+		};
+	} catch (error) {
+		diagnostics.push(error instanceof Error ? error.message : "Legacy settings import could not be planned");
+		return {
+			patch: {},
+			diagnostics
+		};
+	}
+}
+//#endregion
+//#region src/host/settings-service.ts
+const pendingNativeImports = /* @__PURE__ */ new WeakSet();
+const clone$1 = (value) => structuredClone(value);
+const object$1 = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+function profileYaml(source) {
+	const document = parseDocument(source, { customTags: [{
+		tag: "tag:yaml.org,2002:js",
+		resolve: (value) => ({ __jsExpr: value })
+	}] });
+	if (document.errors.length > 0 || document.warnings.length > 0) throw new Error("Invalid or unsupported legacy/profile YAML; retained backup was not changed");
+	return document.toJS({ maxAliasCount: 100 });
+}
+/** A local facade preserves Mnemon's wire namespaces; DSH owns all persistence. */
+var ProfileMnemonSettings = class {
+	ctx;
+	input;
+	registrations = /* @__PURE__ */ new Map();
+	listeners = /* @__PURE__ */ new Set();
+	revisions = /* @__PURE__ */ new Map();
+	owner;
+	forms;
+	editor;
+	closed = false;
+	importing;
+	nativeImportPending;
+	constructor(ctx, input) {
+		this.ctx = ctx;
+		this.input = input;
+		this.forms = ctx.settings;
+		this.owner = ctx.fiber;
+		this.editor = ctx.get("configEditor");
+		const profile = ctx.get("profileContext");
+		const root = ctx.root ?? ctx;
+		if (profile?.home !== void 0 && existsSync(join(profile.home, "settings.yaml"))) pendingNativeImports.add(root);
+		this.nativeImportPending = pendingNativeImports.has(root);
+		const owner = this.owner;
+		const validate = (candidate) => {
+			const config = plainHostConfig(candidate);
+			for (const registration of this.registrations.values()) {
+				if (registration.legacy) continue;
+				const value = this.resolve(registration, config);
+				registration.validate?.(value);
+			}
+		};
+		ctx.on("internal/config", function(_raw, next) {
+			const candidate = next();
+			if (this === owner) validate(candidate);
+			return candidate;
+		}, { prepend: true });
+		ctx.on("loader/volatile-update", ((paths) => {
+			if (this.closed) return;
+			for (const registration of this.registrations.values()) {
+				if (registration.legacy) continue;
+				if (!paths.some((path) => registration.field === void 0 ? path.length === 0 || !["memoryView", "legacySettingsImported"].includes(path[0]) : path.length === 0 || path[0] === registration.field)) continue;
+				const value = this.resolve(registration);
+				for (const listener of this.listeners) try {
+					listener(registration.namespace, value);
+				} catch (error) {
+					console.warn("dsh-mnemon: committed settings listener failed", error);
+				}
+			}
+		}));
+		ctx.effect(() => {
+			const disposePresentation = owner === void 0 ? void 0 : this.forms.configure({ auto: false }, owner);
+			return () => {
+				this.closed = true;
+				this.listeners.clear();
+				this.revisions.clear();
+				disposePresentation?.();
+			};
+		}, "dsh-mnemon: profile settings");
+	}
+	get writable() {
+		const entry = this.owner?.entry;
+		return !this.closed && this.forms.writable && entry !== void 0 && this.editor?.entries().includes(entry) === true;
+	}
+	onUpdated(listener) {
+		this.listeners.add(listener);
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+	resolve(registration, config = plainHostConfig(this.owner?.config ?? this.input)) {
+		const value = registration.legacy ? registration.base : registration.field === void 0 ? config : config[registration.field];
+		return registration.schema(object$1(value));
+	}
+	register(namespace, schema, options) {
+		if (this.registrations.has(namespace)) throw new Error(`Mnemon settings already registered: ${namespace}`);
+		if (typeof schema !== "function") throw new Error("Mnemon settings require a schema");
+		const field = namespace === "mnemon-ui" ? "conversationInteraction" : /^mnemon-view(?:-[a-f0-9]{16})?$/u.test(namespace) ? "memoryView" : void 0;
+		const legacy = /^mnemon-plugins(?:-[a-f0-9]{16})?$/u.test(namespace);
+		if (namespace !== "mnemon" && field === void 0 && !legacy) throw new Error("Unsupported Mnemon settings namespace");
+		const registration = {
+			namespace,
+			...field === void 0 ? {} : { field },
+			legacy,
+			schema,
+			base: clone$1(options.base ?? {}),
+			...options.validate === void 0 ? {} : { validate: options.validate }
+		};
+		const value = this.resolve(registration);
+		options.validate?.(value);
+		this.registrations.set(namespace, registration);
+		return { get: () => this.resolve(registration) };
+	}
+	nativeDescriptor() {
+		if (this.closed || this.owner?.entry === void 0 || !this.editor?.entries().includes(this.owner.entry)) return void 0;
+		const descriptor = this.forms.describe().find((item) => item.ns === this.owner?.entry?.options.id);
+		if (descriptor !== void 0) {
+			this.revisions.set(descriptor.revision, clone$1({
+				ns: descriptor.ns,
+				revision: descriptor.revision,
+				applies: descriptor.applies,
+				value: descriptor.value,
+				base: descriptor.base,
+				user: descriptor.user
+			}));
+			if (this.revisions.size > 64) this.revisions.delete(this.revisions.keys().next().value);
+		}
+		return descriptor;
+	}
+	unchanged(previous, current, registration, operations) {
+		const project = (value) => {
+			if (registration.field !== void 0) return object$1(value)[registration.field];
+			const { memoryView: _view, legacySettingsImported: _imported, conversationInteraction, ...core } = object$1(value);
+			return operations.some((operation) => operation.path[0] === "conversationInteraction") ? {
+				...core,
+				conversationInteraction
+			} : core;
+		};
+		const signature = (descriptor) => canonicalMemoryJson(JSON.parse(JSON.stringify([
+			project(descriptor.value) ?? null,
+			project(descriptor.base) ?? null,
+			project(descriptor.user) ?? null
+		])));
+		return signature(previous) === signature(current);
+	}
+	describe(options) {
+		const raw = this.nativeDescriptor();
+		if (raw === void 0) return [];
+		const descriptor = options?.redactSecrets ? this.forms.describe(options).find((item) => item.ns === this.owner?.entry?.options.id) : raw;
+		if (descriptor === void 0) return [];
+		return [...this.registrations.values()].map((registration) => {
+			const project = (value) => registration.legacy ? {} : registration.field === void 0 ? value : object$1(value)[registration.field];
+			return {
+				ns: registration.namespace,
+				value: project(descriptor.value) ?? {},
+				base: project(descriptor.base) ?? {},
+				user: project(descriptor.user) ?? {},
+				revision: descriptor.revision,
+				applies: "live"
+			};
+		});
+	}
+	async mutate(namespace, operations, expectedRevision) {
+		const registration = this.registrations.get(namespace);
+		if (registration === void 0 || registration.legacy) throw new Error("Unsupported Mnemon settings namespace");
+		if (!this.writable) throw new Error("DSH settings are read-only");
+		const translated = operations.map((operation) => ({
+			...operation,
+			path: [...registration.field === void 0 ? [] : [registration.field], ...operation.path]
+		}));
+		let revision = expectedRevision;
+		const previous = revision === void 0 ? void 0 : this.revisions.get(revision);
+		for (let attempt = 0;; attempt += 1) {
+			if (!this.writable) throw new Error("DSH settings are read-only");
+			try {
+				await this.forms.mutate(this.owner.entry.options.id, translated, revision);
+				return;
+			} catch (error) {
+				if (attempt >= 2 || previous === void 0 || typeof error !== "object" || error === null || !("code" in error) || error.code !== "SETTINGS_CONFLICT") throw error;
+				if (!this.writable) throw new Error("DSH settings are read-only");
+				const current = this.nativeDescriptor();
+				if (current === void 0 || !this.unchanged(previous, current, registration, operations)) throw error;
+				revision = current.revision;
+			}
+		}
+	}
+	/** Read only the retained backup; ConfigEditor preserves all other patch rows. */
+	async importLegacy(sourceEntryIds) {
+		if (this.importing !== void 0) return this.importing;
+		this.importing = this.performImport(sourceEntryIds).finally(() => {
+			this.importing = void 0;
+		});
+		return this.importing;
+	}
+	async performImport(sourceEntryIds) {
+		const profile = this.ctx.get("profileContext");
+		const entry = this.owner?.entry;
+		if (!this.writable || profile?.home === void 0 || entry === void 0) return;
+		if (this.nativeImportPending) {
+			console.warn("dsh-mnemon: DSH is importing settings.yaml; restart once to recover retained Mnemon UI and plugin preferences");
+			return;
+		}
+		if (plainHostConfig(this.owner?.config ?? this.input).legacySettingsImported) return;
+		const backup = join(profile.home, "settings.yaml.imported");
+		let text;
+		try {
+			if ((await stat(backup)).size > 1048576) throw new Error("Legacy settings backup exceeds the import limit");
+			text = await readFile(backup, "utf8");
+		} catch (error) {
+			if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") return;
+			throw error;
+		}
+		const sections = profileYaml(text);
+		const viewNamespace = [...this.registrations.keys()].find((namespace) => namespace.startsWith("mnemon-view"));
+		const legacyNamespace = [...this.registrations.keys()].find((namespace) => namespace.startsWith("mnemon-plugins"));
+		const plan = () => {
+			const configuration = this.editor.configuration().find((item) => item.entry === entry);
+			if (configuration === void 0) throw new Error("Mnemon profile entry is no longer editable");
+			const document = profileYaml(readFileSync(this.editor.documentPath, "utf8"));
+			const entryOverrides = Array.isArray(document) ? document.flatMap((value) => {
+				const row = object$1(value);
+				if (typeof row.id !== "string") return [];
+				const entries = this.editor.entries().filter((candidate) => candidate.options.id === row.id);
+				if (entries.length > 1) throw new Error("Legacy settings import requires unambiguous profile Entry ids");
+				return [{
+					id: entries[0]?.id ?? row.id,
+					..."disabled" in row ? { disabled: row.disabled } : {},
+					..."config" in row ? { config: row.config } : {}
+				}];
+			}) : [];
+			return planLegacySettingsImport({
+				entryId: entry.options.id,
+				viewNamespace,
+				legacyNamespace,
+				sections,
+				currentOverride: configuration.override,
+				entryOverrides,
+				sourceEntryIds
+			});
+		};
+		const preview = plan();
+		if (Object.keys(preview.patch).length === 0) {
+			if (preview.diagnostics.length > 0) console.warn("dsh-mnemon: legacy settings were not imported; retained backup requires review");
+			return;
+		}
+		if (this.closed) return;
+		await this.editor.edit(entry, (current) => {
+			if (this.closed) throw new Error("Mnemon settings are disposed");
+			const next = plan();
+			return {
+				...current,
+				...next.patch
+			};
+		});
+	}
+};
+function createHostSettings(ctx, config) {
+	return typeof ctx.settings.register === "function" ? ctx.settings : new ProfileMnemonSettings(ctx, config);
+}
+function subscribeSettings(ctx, settings, listener) {
+	return settings instanceof ProfileMnemonSettings ? settings.onUpdated(listener) : ctx.on("settings/updated", listener);
+}
+//#endregion
+//#region src/host/plugin-management.ts
+const PACKAGE$1 = /^(?:@[a-z0-9._-]+\/)?dsh-mnemon-(source|strategy)-[a-z0-9._-]+$/u;
+const hash = (value) => createHash("sha256").update(canonicalMemoryJson(value)).digest("hex");
+const clone = (value) => JSON.parse(JSON.stringify(value));
 function contributionRoles(snapshot, entryId) {
 	const roles = /* @__PURE__ */ new Set();
 	if (snapshot.sources.some((value) => value.provenance.entryId === entryId)) roles.add("source");
@@ -8436,6 +8968,7 @@ function orderPlugins(values) {
 var MemoryPluginManagement = class {
 	ctx;
 	engine;
+	settingsService;
 	settingsNamespace;
 	settings;
 	legacySettings;
@@ -8445,21 +8978,23 @@ var MemoryPluginManagement = class {
 	restoreError;
 	discoveryWarnings = [];
 	changingEntries = false;
-	constructor(ctx, engine) {
+	restorePending = false;
+	constructor(ctx, engine, settingsService = ctx.settings) {
 		this.ctx = ctx;
 		this.engine = engine;
+		this.settingsService = settingsService;
 		const loader = this.loader();
-		const anchor = loader?.config?.baseUrl ?? loader?.context?.baseUrl;
+		const anchor = loader?.config?.baseUrl ?? loader?.ctx?.baseUrl ?? loader?.context?.baseUrl;
 		const suffix = anchor ? `-${hash(anchor).slice(0, 16)}` : "";
 		this.settingsNamespace = `${MNEMON_VIEW_SETTINGS_NAMESPACE}${suffix}`;
-		this.settings = ctx.settings.register(this.settingsNamespace, schema, {
+		this.settings = settingsService.register(this.settingsNamespace, schema, {
 			base: { entries: {} },
 			applies: "live",
 			validate: (value) => {
 				preferences(value);
 			}
 		});
-		this.legacySettings = ctx.settings.register(`mnemon-plugins${suffix}`, legacySchema, {
+		this.legacySettings = settingsService.register(`mnemon-plugins${suffix}`, legacySchema, {
 			base: { sources: {} },
 			applies: "live",
 			validate: (value) => {
@@ -8467,8 +9002,8 @@ var MemoryPluginManagement = class {
 			}
 		});
 	}
-	resolveConfig(config) {
-		const selected = this.settings.get().strategyTypeId;
+	resolveConfig(config, view = this.settings.get()) {
+		const selected = view.strategyTypeId;
 		return selected === void 0 ? config : {
 			...config,
 			memoryTopology: {
@@ -8478,36 +9013,61 @@ var MemoryPluginManagement = class {
 		};
 	}
 	start() {
-		const schedule = () => {
-			const hasSavedState = Object.keys(this.settings.get().entries ?? {}).length > 0 || Object.keys(this.legacySettings.get().sources ?? {}).length > 0;
-			if (this.closed || this.changingEntries || this.timer || !hasSavedState) return;
-			this.timer = setTimeout(() => {
-				this.timer = void 0;
-				this.exclusive(() => this.restore()).catch((error) => {
-					this.restoreError = error instanceof Error ? error.message : String(error);
-				});
-			}, 0);
-		};
+		const schedule = () => this.scheduleRestore();
 		const stops = [
 			this.ctx.on("loader/entry-init", schedule),
 			this.ctx.on("loader/partial-dispose", schedule),
-			this.ctx.on("settings/updated", ((namespace) => {
+			this.ctx.on("app-boot/config-reload", () => this.scheduleRestore(true)),
+			subscribeSettings(this.ctx, this.settingsService, (namespace) => {
 				if (namespace === this.settingsNamespace || namespace === `mnemon-plugins${this.settingsNamespace.slice(11)}`) schedule();
-			}))
+			})
 		];
 		schedule();
 		return () => {
 			this.closed = true;
+			this.restorePending = false;
 			clearTimeout(this.timer);
 			for (const stop of stops.reverse()) stop();
 		};
 	}
+	scheduleRestore(profileReload = false) {
+		const hasSavedState = Object.keys(this.settings.get().entries ?? {}).length > 0 || Object.keys(this.legacySettings.get().sources ?? {}).length > 0;
+		if (this.closed || !profileReload && this.changingEntries || !hasSavedState) return;
+		this.restorePending = true;
+		if (this.changingEntries || this.timer) return;
+		this.timer = setTimeout(() => {
+			this.timer = void 0;
+			this.enqueueRestore();
+		}, 0);
+	}
+	enqueueRestore() {
+		if (this.closed || this.changingEntries || !this.restorePending) return;
+		clearTimeout(this.timer);
+		this.timer = void 0;
+		this.restorePending = false;
+		this.exclusive(async () => {
+			try {
+				await this.restore();
+			} catch (error) {
+				this.restoreError = error instanceof Error ? error.message : String(error);
+			}
+		}).catch(() => {});
+	}
+	/** A response must not race the deferred restore after profile reconciliation. */
+	async settled() {
+		do {
+			this.enqueueRestore();
+			const pending = this.queue;
+			await pending;
+			if (pending === this.queue && !this.restorePending) return;
+		} while (!this.closed);
+	}
 	loader() {
 		const candidate = this.ctx.get("loader");
 		return candidate && typeof candidate.entries === "function" ? candidate : void 0;
 	}
 	settingsRevision() {
-		return this.ctx.settings.describe({ redactSecrets: true }).find((value) => value.ns === this.settingsNamespace)?.revision ?? 0;
+		return this.settingsService.describe({ redactSecrets: true }).find((value) => value.ns === this.settingsNamespace)?.revision ?? 0;
 	}
 	async managed() {
 		const loader = this.loader();
@@ -8552,7 +9112,7 @@ var MemoryPluginManagement = class {
 					config: editor === void 0 ? {} : memoryStrategyConfigurationValues(editor, entry.options.config),
 					enabled: !entry.disabled,
 					active,
-					writable: this.ctx.settings.writable && !ancestorDisabled && (entry.options.disabled === void 0 || typeof entry.options.disabled === "boolean"),
+					writable: this.settingsService.writable && !ancestorDisabled && (entry.options.disabled === void 0 || typeof entry.options.disabled === "boolean"),
 					...ancestorDisabled ? { diagnostic: "This Entry is disabled by its parent." } : !entry.disabled && !active ? { diagnostic: "This Entry is enabled but has not registered a memory contribution." } : {}
 				};
 				const item = {
@@ -8583,7 +9143,7 @@ var MemoryPluginManagement = class {
 			`mnemon-plugins${this.settingsNamespace.slice(11)}`
 		]);
 		return hash({
-			settings: this.ctx.settings.describe({ redactSecrets: true }).filter((value) => namespaces.has(value.ns)).map((value) => [value.ns, value.revision]),
+			settings: this.settingsService.describe({ redactSecrets: true }).filter((value) => namespaces.has(value.ns)).map((value) => [value.ns, value.revision]),
 			contribution: this.engine.contributionSnapshot().revision,
 			entries: items.map(({ entry, value, descriptor }) => ({
 				id: entry.id,
@@ -8595,8 +9155,10 @@ var MemoryPluginManagement = class {
 		});
 	}
 	async catalog() {
-		await this.queue;
+		await this.settled();
+		const pending = this.queue;
 		const items = await this.managed();
+		if (pending !== this.queue || this.restorePending) return this.catalog();
 		const values = items.map((item) => clone(item.value));
 		const snapshot = this.engine.contributionSnapshot();
 		const managedIds = new Set(items.map((item) => item.entry.id));
@@ -8655,7 +9217,7 @@ var MemoryPluginManagement = class {
 		}
 		return {
 			revision: this.revision(items),
-			writable: this.ctx.settings.writable && this.loader() !== void 0,
+			writable: this.settingsService.writable && this.loader() !== void 0,
 			entries: orderPlugins(values),
 			diagnostics: [...this.discoveryWarnings, ...this.restoreError === void 0 ? [] : [this.restoreError]]
 		};
@@ -8737,7 +9299,7 @@ var MemoryPluginManagement = class {
 		return captureMemoryContributionSnapshot(candidate);
 	}
 	async preview(config, scope, request, signal) {
-		await this.queue;
+		await this.settled();
 		const items = await this.managed();
 		const value = await this.evaluateSnapshot(this.proposal(items, request), config, scope, request.strategyTypeId, signal);
 		if (request.expectedRevision !== this.revision(items)) throw new Error("Memory plugin configuration changed during preview; refresh and retry.");
@@ -8762,8 +9324,9 @@ var MemoryPluginManagement = class {
 		}
 	}
 	async apply(config, scope, request, signal) {
+		await this.settled();
 		return this.exclusive(async () => {
-			if (!this.ctx.settings.writable || !this.loader()) throw new Error("Memory plugin configuration is read-only");
+			if (!this.settingsService.writable || !this.loader()) throw new Error("Memory plugin configuration is read-only");
 			const items = await this.managed();
 			const choices = this.validateRequest(items, request);
 			const expectedSettingsRevision = this.settingsRevision();
@@ -8775,19 +9338,38 @@ var MemoryPluginManagement = class {
 					...request.entries
 				}
 			});
-			await this.updateEntries(items, choices, async () => {
-				await this.evaluateSnapshot(this.engine.contributionSnapshot(), config, scope, request.strategyTypeId, signal);
-				await this.ctx.settings.mutate(this.settingsNamespace, [{
-					op: "set",
-					path: ["strategyTypeId"],
-					value: next.strategyTypeId
-				}, {
-					op: "set",
-					path: ["entries"],
-					value: next.entries
-				}], expectedSettingsRevision);
-				this.restoreError = void 0;
+			let committedRevision;
+			await this.updateEntries(items, choices, {
+				validate: () => this.evaluateSnapshot(this.engine.contributionSnapshot(), config, scope, request.strategyTypeId, signal),
+				persist: async () => {
+					await this.settingsService.mutate(this.settingsNamespace, [{
+						op: "set",
+						path: ["strategyTypeId"],
+						value: next.strategyTypeId
+					}, {
+						op: "set",
+						path: ["entries"],
+						value: next.entries
+					}], expectedSettingsRevision);
+					committedRevision = this.settingsRevision();
+				},
+				compensate: async () => {
+					if (hash(preferences(this.settings.get())) !== hash(next)) throw new Error("Memory plugin settings changed before rollback; refresh and inspect the saved configuration.");
+					await this.settingsService.mutate(this.settingsNamespace, [previous.strategyTypeId === void 0 ? {
+						op: "unset",
+						path: ["strategyTypeId"]
+					} : {
+						op: "set",
+						path: ["strategyTypeId"],
+						value: previous.strategyTypeId
+					}, {
+						op: "set",
+						path: ["entries"],
+						value: previous.entries
+					}], committedRevision);
+				}
 			}, signal);
+			this.restoreError = void 0;
 		});
 	}
 	async restore() {
@@ -8814,55 +9396,99 @@ var MemoryPluginManagement = class {
 		this.restoreError = void 0;
 	}
 	async updateEntries(items, choices, commit, signal) {
-		const changed = items.filter((item) => {
-			const desired = choices.get(item.entry.id);
-			return hash(desired) !== hash({
-				enabled: item.value.enabled,
-				config: item.value.config
-			});
-		}).sort((left, right) => Number(choices.get(left.entry.id).enabled) - Number(choices.get(right.entry.id).enabled));
-		const restored = [];
+		const previous = items.map((item) => ({
+			item,
+			disabled: item.entry.options.disabled ?? null,
+			config: clone(item.entry.options.config ?? {}),
+			enabled: item.value.enabled,
+			active: item.value.active
+		}));
+		const touched = /* @__PURE__ */ new Set();
+		const replay = async (current) => {
+			for (const item of items) if (!current.some((value) => value.entry.id === item.entry.id)) throw new Error("Memory plugin Entry disappeared during configuration: " + item.entry.id);
+			const ordered = current.filter((item) => choices.has(item.entry.id)).sort((left, right) => Number(choices.get(left.entry.id).enabled) - Number(choices.get(right.entry.id).enabled));
+			for (const item of ordered) {
+				signal?.throwIfAborted();
+				if (this.closed) throw new Error("Memory plugin management service is disposed");
+				const desired = choices.get(item.entry.id);
+				const actual = {
+					enabled: !item.entry.disabled,
+					config: item.editor === void 0 ? {} : memoryStrategyConfigurationValues(item.editor, item.entry.options.config)
+				};
+				const active = contributionRoles(this.engine.contributionSnapshot(), item.entry.id).length > 0;
+				if (hash(desired) === hash(actual) && active === desired.enabled) continue;
+				touched.add(item.entry.id);
+				await item.entry.update(item.editor === void 0 ? { disabled: !desired.enabled } : {
+					disabled: !desired.enabled,
+					config: clone(desired.config)
+				});
+				await item.entry.fiber?.await?.();
+				const registered = contributionRoles(this.engine.contributionSnapshot(), item.entry.id).length > 0;
+				if (item.entry.disabled === desired.enabled || registered !== desired.enabled) throw new Error("Cordis did not register the requested memory plugin state: " + item.entry.id);
+			}
+		};
+		let persisted = false;
 		this.changingEntries = true;
 		try {
 			await this.engine.batch(async () => {
 				try {
-					for (const item of changed) {
-						signal?.throwIfAborted();
-						if (this.closed) throw new Error("Memory plugin management service is disposed");
-						const desired = choices.get(item.entry.id);
-						restored.push({
-							item,
-							disabled: item.entry.options.disabled ?? null,
-							config: clone(item.entry.options.config ?? {})
-						});
-						await item.entry.update(item.editor === void 0 ? { disabled: !desired.enabled } : {
-							disabled: !desired.enabled,
-							config: clone(desired.config)
-						});
-						await item.entry.fiber?.await?.();
-						const active = contributionRoles(this.engine.contributionSnapshot(), item.entry.id).length > 0;
-						if (item.entry.disabled === desired.enabled || active !== desired.enabled) throw new Error("Cordis did not register the requested memory plugin state: " + item.entry.id);
-					}
+					await replay(items);
 					signal?.throwIfAborted();
 					if (this.closed) throw new Error("Memory plugin management service is disposed");
-					await commit?.();
+					if (commit !== void 0) {
+						await commit.validate();
+						await commit.persist();
+						persisted = true;
+						const entries = new Map(Array.from(this.loader()?.entries() ?? []).map((entry) => [entry.id, entry]));
+						await replay(items.flatMap((item) => {
+							const entry = entries.get(item.entry.id);
+							return entry === void 0 ? [] : [{
+								...item,
+								entry
+							}];
+						}));
+						await commit.validate();
+					}
 				} catch (error) {
 					const failures = [];
-					for (const previous of restored.reverse()) try {
-						await previous.item.entry.update(previous.item.editor === void 0 ? { disabled: previous.disabled } : {
-							disabled: previous.disabled,
-							config: previous.config
-						});
-						await previous.item.entry.fiber?.await?.();
+					if (persisted) try {
+						await commit.compensate();
 					} catch (rollback) {
 						failures.push(rollback);
 					}
-					if (failures.length) throw new AggregateError([error, ...failures], "Plugin change failed and rollback was incomplete; inspect DSH plugin state.");
+					const current = new Map(Array.from(this.loader()?.entries() ?? []).map((entry) => [entry.id, entry]));
+					for (const before of previous.reverse()) {
+						const entry = current.get(before.item.entry.id);
+						if (!(entry === void 0 || hash({
+							disabled: entry.options.disabled ?? null,
+							config: entry.options.config ?? {}
+						}) !== hash({
+							disabled: before.disabled,
+							config: before.config
+						}) || !entry.disabled !== before.enabled || contributionRoles(this.engine.contributionSnapshot(), before.item.entry.id).length > 0 !== before.active) && !touched.has(before.item.entry.id)) continue;
+						try {
+							if (entry === void 0) throw new Error("Memory plugin Entry is unavailable for rollback: " + before.item.entry.id);
+							await entry.update(before.item.editor === void 0 ? { disabled: before.disabled } : {
+								disabled: before.disabled,
+								config: before.config
+							});
+							await entry.fiber?.await?.();
+							if (!entry.disabled !== before.enabled || contributionRoles(this.engine.contributionSnapshot(), entry.id).length > 0 !== before.active) throw new Error("Cordis did not restore the previous memory plugin state: " + entry.id);
+						} catch (rollback) {
+							failures.push(rollback);
+						}
+					}
+					if (failures.length) {
+						this.restorePending = false;
+						this.restoreError = "Plugin change failed and rollback was incomplete; inspect DSH plugin state.";
+						throw new AggregateError([error, ...failures], this.restoreError);
+					}
 					throw error;
 				}
 			});
 		} finally {
 			this.changingEntries = false;
+			if (this.restorePending) this.scheduleRestore(true);
 		}
 	}
 	exclusive(operation) {
@@ -9437,19 +10063,21 @@ function optionalWorkspaceRegistry(ctx) {
 	};
 }
 /** DSH owns assembly; this Host only wires scope, phases and user preferences. */
-function apply(rawContext, config = {}) {
+function apply(rawContext, rawConfig = {}) {
 	const ctx = rawContext;
+	const config = plainHostConfig(rawConfig);
+	const hostSettings = createHostSettings(ctx, rawConfig);
 	registerMnemonSubagentTokenUsageProjection(ctx);
 	const extensions = provideMemoryRuntime(ctx);
-	const memoryPlugins = new MemoryPluginManagement(ctx, extensions);
+	const memoryPlugins = new MemoryPluginManagement(ctx, extensions, hostSettings);
 	const pluginInstallation = new MemoryPluginInstallation(ctx);
-	const effectiveConfig = (value) => memoryPlugins.resolveConfig(resolveConfig(value));
+	const effectiveConfig = (value) => memoryPlugins.resolveConfig(resolveConfig(value), hostSettings instanceof ProfileMnemonSettings ? value.memoryView ?? { entries: {} } : void 0);
 	const prepared = /* @__PURE__ */ new Map();
 	const disposePrepared = () => {
 		for (const candidate of prepared.values()) candidate.graph.dispose();
 		prepared.clear();
 	};
-	const settings = ctx.settings.register("mnemon", Config, {
+	const settings = hostSettings.register("mnemon", Config, {
 		base: config,
 		applies: "live",
 		validate: (value) => {
@@ -9458,6 +10086,10 @@ function apply(rawContext, config = {}) {
 				graph: createRuntimeGraph(effectiveConfig(value), void 0, extensions),
 				token: Symbol("prepared-runtime")
 			};
+			if (hostSettings instanceof ProfileMnemonSettings) {
+				candidate.graph.dispose();
+				return;
+			}
 			prepared.set(value, candidate);
 			queueMicrotask(() => {
 				if (prepared.get(value)?.token !== candidate.token) return;
@@ -9471,7 +10103,8 @@ function apply(rawContext, config = {}) {
 	if (initialCandidate !== void 0) prepared.delete(initialSettings);
 	const runtime = new LiveMnemonRuntime(initialCandidate?.graph ?? createRuntimeGraph(effectiveConfig(initialSettings), void 0, extensions), optionalWorkspaceRegistry(ctx), ctx.agents, extensions);
 	const resolved = runtime.config;
-	ctx.on("settings/updated", ((namespace, next) => {
+	ctx.effect(() => subscribeSettings(ctx, hostSettings, (namespace, value) => {
+		const next = value;
 		if (namespace === memoryPlugins.settingsNamespace) {
 			runtime.swap(createRuntimeGraph(effectiveConfig(settings.get()), void 0, extensions));
 			return;
@@ -9481,9 +10114,9 @@ function apply(rawContext, config = {}) {
 		if (candidate !== void 0) prepared.delete(next);
 		disposePrepared();
 		runtime.swap(candidate?.graph ?? createRuntimeGraph(effectiveConfig(next), void 0, extensions));
-	}));
+	}), "dsh-mnemon: live runtime settings");
 	ctx.effect(() => memoryPlugins.start(), "dsh-mnemon: plugin graph settings");
-	ctx.settings.register("mnemon-ui", InteractionConfig, {
+	hostSettings.register("mnemon-ui", InteractionConfig, {
 		base: resolveInteractionConfig(resolved.conversationInteraction),
 		applies: "live"
 	});
@@ -9491,7 +10124,7 @@ function apply(rawContext, config = {}) {
 		let disposed = false;
 		const migrate = () => {
 			if (disposed) return;
-			migrateLegacyDisplayMode(ctx.settings).catch((error) => {
+			migrateLegacyDisplayMode(hostSettings).catch((error) => {
 				console.warn("dsh-mnemon: could not persist the builtin displayMode migration", error);
 			});
 		};
@@ -9504,6 +10137,21 @@ function apply(rawContext, config = {}) {
 			unsubscribe();
 		};
 	}, "dsh-mnemon: canonical displayMode migration");
+	if (hostSettings instanceof ProfileMnemonSettings) ctx.effect(() => {
+		let disposed = false;
+		const loader = ctx.get("loader");
+		Promise.resolve(loader?.await?.()).then(async () => {
+			if (disposed) return;
+			const catalog = await memoryPlugins.catalog();
+			if (disposed) return;
+			await hostSettings.importLegacy(catalog.entries.filter((entry) => entry.roles.includes("source")).map((entry) => entry.entryId));
+		}).catch((error) => {
+			console.warn("dsh-mnemon: could not recover retained legacy settings", error);
+		});
+		return () => {
+			disposed = true;
+		};
+	}, "dsh-mnemon: retained settings migration");
 	const coordinator = new MnemonSubagentCoordinator(ctx.subagents, runtime, ctx, () => {
 		const taskAgentModel = runtime.config.taskAgentModel;
 		if (taskAgentModel.mode !== "fixed") return void 0;
@@ -9532,7 +10180,7 @@ function apply(rawContext, config = {}) {
 		if (webContext.connection === void 0) return;
 		const managementAuthority = resolved.remoteAccess === "trusted-host" ? "trusted-host" : "loopback";
 		const rpc = registerRpc(webContext.connection, runtime, lifecycle, void 0, managementAuthority);
-		const settings = registerSettingsRpc(webContext.connection, ctx.settings, managementAuthority);
+		const settings = registerSettingsRpc(webContext.connection, hostSettings, managementAuthority);
 		const view = registerViewRpc(webContext.connection, runtime, extensions, memoryPlugins, lifecycle, managementAuthority, pluginInstallation);
 		if (Context.is(webContext)) new MnemonRemoteService(webContext, {
 			...rpc,
@@ -9544,4 +10192,4 @@ function apply(rawContext, config = {}) {
 	});
 }
 //#endregion
-export { Config, apply, inject, name, provide };
+export { LiveConfig as Config, apply, inject, name, provide };